Adding upstream version 1.9.13p3.upstream/1.9.13p3upstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 73938 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
new file mode 100644
index 0000000..9218ccc
--- /dev/null
+++ b/ChangeLog
@@ -0,0 +1,73938 @@
+2023-03-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_13p3 for changeset 0bdd0b8469e3
+	[fc4e872d6d89] [tip] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.13p3
+	[0bdd0b8469e3] [SUDO_1_9_13p3] <1.9>
+
+2023-03-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h:
+	A user with "list" privs for root may not list all users. A user
+	with "sudo ALL" for root _is_ allowed to list any user.
+	[a3f7301ba4d3] <1.9>
+
+	* plugins/sudoers/policy.c:
+	sudoers_policy_list: do not set runas_pw to list_pw when listing
+	This change introduced in sudo 1.9.13 is not actually needed. The
+	"list" pseudo-command checks are performed via runas_matches_pw()
+	which does not use runas_pw. GitHub issue #248
+	[84effa5ffaa1] <1.9>
+
+	* plugins/sudoers/logging.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sudoers.c:
+	Fix "sudo -l command args", broken in sudo 1.9.13. The value of
+	user_args should not contain the command to be run in "sudo -l
+	command args", only the arguments of the command being checked. This
+	restores the pre-1.9.13 behavior. GitHub issue #249
+	[3e1225e7bf33] <1.9>
+
+2023-03-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_nopty.c, src/exec_pty.c:
+	write_callback: only enable /dev/tty reader if the command is
+	running This fixes a hang when there is /dev/tty data in a buffer to
+	be flushed by the final call to del_io_events(). We do not want to
+	re-enable the reader when flushing the buffers as part of
+	pty_finish(). See PR #247 for analysis of the problem and how to
+	reproduce it.
+	[b7ea5b5e6a88] <1.9>
+
+2023-02-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/testsudoers/test12.out.ok,
+	plugins/sudoers/regress/testsudoers/test12.sh:
+	Test non-fully qualified path name.
+	[0a9e6e83fe15] <1.9>
+
+	* plugins/sudoers/Makefile.in:
+	Fix removal of y.tab.[ch] when generating gram.[ch].
+	[f69c86ecae66] <1.9>
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test30.in,
+	plugins/sudoers/regress/sudoers/test30.json.ok,
+	plugins/sudoers/regress/sudoers/test30.ldif.ok,
+	plugins/sudoers/regress/sudoers/test30.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test30.out.ok,
+	plugins/sudoers/regress/sudoers/test30.sudo.ok,
+	plugins/sudoers/regress/sudoers/test30.toke.ok:
+	Add test for using "list" as user, runas and host.
+	[ae2c84c73371] <1.9>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Move handling of the "list" pseudo-command from lexer to parser. The
+	special handling of "list" in the lexer meant it could not be used
+	as a user, group or host, which was unintentional. GitHub issue
+	#246.
+	[efb3a4dea1da] <1.9>
+
+2023-02-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_compat.h:
+	Make the check for HAVE_DECL_NSIG consistent with other decl checks.
+	[616c42c4adce] <1.9>
+
+2023-02-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_13p2 for changeset 2db7cee1cb77
+	[b0af73801130] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.13p2.
+	[2db7cee1cb77] [SUDO_1_9_13p2] <1.9>
+
+2023-02-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/lbuf.c:
+	Add missing include of errno.h.
+	[65ddd70d0c18] <1.9>
+
+	* lib/util/lbuf.c:
+	sudo_lbuf_expand: check for overflow when rounding to the nearest
+	power of 2. Problem deteced by oss-fuzz using the fuzz_sudoers
+	fuzzer.
+	[9357396fdaa0] <1.9>
+
+	* src/load_plugins.c:
+	Fix --enable-static-sudoers, broken in sudo 1.9.13.
+	sudo_qualify_plugin() should not try to fully-qualify the path to a
+	statically-compiled plugin. GitHub issue #245
+	[eca5f1f6555e] <1.9>
+
+2023-02-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/match_command.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/testsudoers/test20.out.ok,
+	plugins/sudoers/regress/testsudoers/test20.sh,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Fix potential double free for rules that include a CHROOT= option.
+	If a rule with a CHROOT= option matches the user, host and runas,
+	the user_cmnd variable could be freed twice.
+	[2c1477233f48] <1.9>
+
+2023-02-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_13p1 for changeset 49e64402924f
+	[97ae12488007] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Merge sudo 1.9.13p1 from tip.
+	[49e64402924f] [SUDO_1_9_13p1] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.13p1
+	[0a9817096e03]
+
+	* configure.ac:
+	Use m4_bmatch, m4_case does not support shell-style globbing.
+	[b7a743baf22e]
+
+	* configure, configure.ac:
+	Allow configure.ac to be processed by autoconf 2.69. AC_PROG_CC_STDC
+	is deprecated in autoconf 2.70 and above but it is necessary for
+	autoconf 2.69.
+	[324ba83acd63]
+
+	* configure.ac:
+	Only use AC_SYS_YEAR2038 if it is defined. Otherwise, use the method
+	from 1.9.12. GitHub issue #242
+	[16fcec5264cc]
+
+2023-02-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Sudo-specific executables moved to /usr/libexec/sudo starting in
+	Debian 12 (Bookworm) and Ubuntu 22.04 (Jammy Jellyfish). Previously,
+	they were stored in /usr/lib/sudo.
+	[a2aa15b72312]
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/python/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Handle "locale -a" returning both C.UTF-8 and C.utf8. It is possible
+	to have mutiple matches from the output of "locale
+	-a". Just take the first one. Fixes GitHub issue #241.
+	[aeba71610439]
+
+	* lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Add some missing files to the clean and distclean targets.
+	[5dedbe519db1]
+
+	* Merge pull request #240 from thesamesam/c23
+
+	sudo_fatal: Fix build where compiler recognises [[noreturn]]
+	attribut…
+	[22ae0d4402ac]
+
+2023-02-15  Sam James  <sam@gentoo.org>
+
+	* include/sudo_fatal.h:
+	sudo_fatal: Fix build where compiler recognises [[noreturn]]
+	attribute (C23)
+
+	If the compiler supports [[noreturn]] as a attribute as in C23, then
+	we define sudo_noreturn to be it. When that's the case, we must
+	place it at the beginning of the declaration, before any other
+	*extension* attributes (__attribute(...)).
+
+	A bug has been filed with GCC regarding rejecting/accepting mixed
+	attribute styles.
+
+	sudo_dso_public is always an extension attribute, while
+	sudo_noreturn only might be, so put it first.
+
+	This only shows up with GCC 13 so far (see the linked GCC bug for a
+	bit more exploration). Clang 16 does support the attribute but
+	doesn't let you use it for earlier language versions (need to pass
+	explicit -std=c2x, unlike with GCC here).
+
+	This is essentially a followup to
+	e707ffe58b3ccfe5c72f54c38eac1d7069d5021e.
+
+	Tested with GCC 13.0.1 20230212 (unreleased), GCC 12.2.1 20230211,
+	Clang 16.0.0_rc2, and Clang 15.0.7.
+
+	Bug: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108796 Closes:
+	https://github.com/sudo-project/sudo/issues/239 Fixes:
+	e707ffe58b3ccfe5c72f54c38eac1d7069d5021e Fixes:
+	16ae61dcd7d3cd8bf6eb10a22fa742d4505da4e9
+	[806b5f3a6485]
+
+2023-02-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Add missing '[' to AS_IF() call. Fixes GitHub issue #238.
+	[48372d73d4bb]
+
+	* .hgtags:
+	Added tag SUDO_1_9_13 for changeset 813f6addf7cf
+	[8df54fde3b7a] <1.9>
+
+	* NEWS, config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/hexchar.c, lib/util/regress/hexchar/hexchar_test.c,
+	plugins/sudoers/parse.c, plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c:
+	Merge sudo 1.9.13 from tip.
+	[813f6addf7cf] [SUDO_1_9_13] <1.9>
+
+	* MANIFEST, plugins/sudoers/po/ka.mo:
+	Add compiled version of the sudoers Georgian translation.
+	[35007cc1c867]
+
+	* .gitignore, .hgignore:
+	Do not ignore .mo files. Otherwise we are likely to miss uncommitted
+	changes in them.
+	[d76a98baaf15]
+
+	* plugins/sudoers/po/ru.mo, plugins/sudoers/po/zh_CN.mo, po/zh_CN.mo:
+	Regenerate .mo files.
+	[a7a708d8bf34]
+
+2023-02-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	No longer need to define sudoers_recovery here.
+	[11a365a8a218]
+
+	* NEWS:
+	Mention that a missing include file is no longer fatal.
+	[ba0bd554435e]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/policy.c:
+	Recover from missing include file unless error_recovery is disabled.
+	It is still treated as an error from a logging perspective, and mail
+	is still sent.
+	[e1cac68917cc]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	plugins/sudoers/logging.c:
+	Add eventlog_mail() to send a log message via mail. This is used by
+	mail_parse_errors() to send multi-line messages. Previously, the
+	newlines would be escaped as control characters.
+	[97e516576212]
+
+	* lib/eventlog/eventlog.c:
+	send_mail: pass a single string instead of using varargs These days
+	we only ever pass in a const string.
+	[700e72ca42c0]
+
+2023-02-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Use AS_IF instead of if; then where possible.
+	[56946f4ac23a]
+
+2023-02-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Mention the fix for GitHub #237.
+	[70aafdaced09]
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/fur.mo,
+	po/fur.po, po/ja.mo, po/ja.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[c3be19c34043]
+
+	* src/exec_pty.c, src/tgetpass.c:
+	Display error in error message if we can't restore the terminal.
+	[aa2c60802b33]
+
+2023-02-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c, src/tgetpass.c:
+	Display an error message if unable to restore terminal settings.
+	[a1efb1dca169]
+
+	* Makefile.in, etc/sudo.pp, plugins/sudoers/Makefile.in:
+	Get rid of sudoersdir and just use sysconfdir. There is no need for
+	sudoersdir when it is always just set to sysconfdir.
+	[690b44edcec2]
+
+	* src/exec_pty.c:
+	pty_finish: only restore the terminal if sudo is the foreground
+	process
+	[357d90f11750]
+
+	* src/exec_pty.c:
+	Better background job detection when running a command in a pty. If
+	sudo is not the process group leader and stdin is not a tty, we may
+	be running as a background job via a shell script. Start the command
+	in the background to avoid changing the terminal mode from a
+	background process. GitHub issue #237
+	[6c74910ea869]
+
+	* src/exec_pty.c:
+	suspend_sudo_pty: stop the process group even if sudo is not the
+	leader. When sudo is not the process group leader, we still need to
+	stop sudo's process group and not just the sudo process itself. If
+	we only send the signal to sudo itself, the shell will not notice if
+	it is not in monitor mode. This can happen when sudo is run from a
+	shell script, for example. In this case we need to signal the shell
+	itself. If the process group leader is no longer present, we must
+	kill the command since there will be no one to resume us.
+	[44bb3267a55e]
+
+	* lib/util/term.c:
+	Add debug tracing to tcsetattr_nobg().
+	[b7a17174f1cf]
+
+2023-01-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Avoid compilation errors if getaddrinfo() or freeaddrinfo() are
+	macros. If this is the case we probably can't stub out the functions
+	but at least the fuzzer will compile.
+	[2482db79d3b9]
+
+	* src/net_ifs.c:
+	Initialize the integer result parameter passed to SIOCGIFANUM. It
+	appears that passing in a non-zero value causes the ioctl() to fail.
+	From Tim Rice.
+	[071633f9929c]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c,
+	plugins/sudoers/log_client.c:
+	Protect use of AF_INET6 with HAVE_STRUCT_IN6_ADDR guards. From Tim
+	Rice.
+	[661c26064544]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Add configure test for NSIG, _NSIG or __NSIG. This is better than
+	just defining NSIG in sudo_compat.h if it is not defined since
+	signal.h may not have been included.
+	[f1c94c5f825b]
+
+	* logsrvd/logsrvd_conf.c:
+	Avoid DNS lookups when fuzzing.
+	[384ffdead655]
+
+2023-01-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo-logsrvd.pp, etc/sudo-python.pp, etc/sudo.pp, scripts/mkpkg,
+	scripts/pp:
+	No longer need to treat Rocky or Alma Linux specially. We now treat
+	them the same as RHEL.
+	[190afa102ca6]
+
+2023-01-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #230 from trackers-lover/main
+
+	Return value does not match
+	[1dc4317beaf7]
+
+2023-01-29  bianguangze@uniontech.com  <bianguangze@uniontech.com>
+
+	* lib/util/sudo_conf.c:
+	Modify return value parameter
+	[eb1e78bb2f91]
+
+2023-01-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/build_pkgs:
+	Store conf hash in vm_servers instead of vmid. Add a shutdown
+	command fallback to the conf file.
+	[2f7eeb5c3f04]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/ro.mo, plugins/sudoers/po/ro.po,
+	plugins/sudoers/po/ru.po, plugins/sudoers/po/sv.mo,
+	plugins/sudoers/po/sv.po, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/uk.po, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.po, po/cs.mo, po/cs.po, po/de.mo, po/de.po,
+	po/eo.mo, po/eo.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po,
+	po/ko.mo, po/ko.po, po/pl.mo, po/pl.po, po/ro.mo, po/ro.po,
+	po/sv.mo, po/sv.po, po/uk.mo, po/uk.po, po/zh_CN.po, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[fa9569203e16]
+
+	* configure, m4/hardening.m4:
+	Fix a typo.
+	[ebf4c16e0079]
+
+	* config.h.in, configure, scripts/config.guess, scripts/config.sub:
+	Regen with latest autoconf git.
+	[9a0bbbb682fc]
+
+	* etc/sudo-logsrvd.pp, etc/sudo-python.pp, etc/sudo.pp, scripts/mkpkg,
+	scripts/pp:
+	Recognize Alma Linux and Rocky Linux (Open Source RHEL clones)
+	[b1dbb7b75824]
+
+	* NEWS:
+	Mention the recent intercept/log_subcmds fix.
+	[cbd60701de52]
+
+	* scripts/mkpkg:
+	Fix determination of the number of CPU cores on Linux.
+	[6ac6a9b074bf]
+
+2023-01-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/po/ka.po:
+	New Georgian translation from translationproject.org
+	[17681b870666]
+
+	* Merge pull request #235 from kernelmethod/apparmor_dependencies
+
+	Replace the Debian libselinux1 dependency with libapparmor1
+	[ca29638c5c34]
+
+2023-01-26  kernelmethod  <17100608+kernelmethod@users.noreply.github.com>
+
+	* etc/sudo.pp:
+	Replace the Debian libselinux1 dependency with libapparmor1
+
+	Debian >= 10 uses AppArmor by default instead of SELinux, so
+	SELinux-related sudo features are typically going to be unusable in
+	Debian installs. This changes the dependency on libselinux1 to be a
+	dependency on libapparmor1 for .deb packages built with `make
+	package`.
+	[5779ce23a161]
+
+2023-01-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	get_execve_info: defer setting pathname until argbuf is finalized If
+	we reallocate the buffer (via growbuf()) in ptrace_read_vec(), the
+	address of argbuf may change. If so, the value stored in pathname
+	will no longer be valid. GitHub issue #194.
+	[f75aa1eb5d95]
+
+	* src/exec_intercept.c, src/exec_ptrace.c:
+	Correct error message when command doesn't exist in intercept mode.
+	Previously, we would always use EACCES, even when ENOENT was
+	appropriate. This also affected log_subcmds.
+	[5bc0ecd5d4e6]
+
+2023-01-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update .pot files for 1.9.13
+	[c6a247e05a91]
+
+2023-01-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Update for 1.9.13.
+	[c9c5b6af5ea5]
+
+	* src/exec_ptrace.h:
+	Include elf.h, not linux/elf.h but define NT_ARM_SYSTEM_CALL if
+	missing. Older kernel headers are missing the definition of EM_ARM
+	in linux/elf.h. GitHub issue #232
+	[8bed5e7f8857]
+
+	* lib/util/regress/regex/regex_test.c:
+	Add tests for escaped digits.
+	[7e5b7e5e2409]
+
+	* lib/util/regex.c:
+	check_pattern: handle escaped digits since GNU libc accepts them.
+	[a20d5a047963]
+
+2023-01-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	plugins/sudoers/sudoreplay.c:
+	Add eventlog_store_sudo() and use it in sudoreplay. This replaces
+	the custom log formatting used by "sudoreplay -l".
+	[26dd2367fbdd]
+
+2023-01-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/build_pkgs, scripts/mkpkg:
+	Add --build-only flag to skip building packages.
+	[46c0213b2668]
+
+2023-01-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg, scripts/pp:
+	Suport building packages on DragonFly BSD.
+	[65920923add2]
+
+	* configure, configure.ac, m4/visibility.m4:
+	Try to link a simple shared object with -Wl,--no-undefined. This
+	only works for gcc-style compilers, which should not be a problem.
+	The source uses environ (FreeBSD) and errno (OpenBSD).
+	[1c2d9f90bc6d]
+
+	* scripts/build_pkgs:
+	Pass the name to the config.cache file to the build script. If
+	--cache-file is not specified, no config.cache file will be used.
+	Add an "omit_artifacts" setting for platforms where we don't publish
+	artifacts.
+	[c87221f36bf4]
+
+2023-01-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/regex.c:
+	check_pattern: accept a backslash before the numeric bound like
+	glibc. This helps avoid out-of-memory conditions when fuzzing on
+	Linux.
+	[07f14dba22ed]
+
+	* configure, configure.ac:
+	Don't use -Wl,--no-undefined with the sanitizers/fuzzers. It breaks
+	linking when using -fsanitize with clang at least.
+	[a6331135bd73]
+
+	* docs/SECURITY.md:
+	Add a link to the sudo security advisories archive.
+	[7137d1d214e5]
+
+	* config.h.in, configure, configure.ac:
+	Eliminate usage of obsolete 2-argument AC_CHECK_TYPE macro.
+	[96b37c574fc2]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/starttime.c,
+	src/regress/ttyname/check_ttyname.c, src/ttyname.c:
+	Add support for the struct kinfo_proc on Dragonfly BSD.
+	[4c1a7d223d66]
+
+	* configure, configure.ac:
+	Need to link sudo and sudoers with -lutil on Dragonfly BSD. It is
+	safer to just search for setusercontext() in libc and libutil
+	instead of matching on the operating system.
+	[b91a288c9968]
+
+	* configure, configure.ac:
+	Elminate the $OS variable, we can just use $host_os instead.
+	[0293bf9d4dd4]
+
+	* plugins/sudoers/editor.c:
+	Restore the line that set errno to ENOENT when find_path() fails.
+	This was inadvertently removed when the "goto bad" was added.
+	[b957909a1a75]
+
+	* configure, configure.ac, m4/ldap.m4:
+	Add -Wl,--no-undefined to LDFLAGS if it is supported. This will find
+	missing symbols at build-time instead of run-time. Don't use it on
+	FreeBSD where environ is filled in by the dynamic loader. We also
+	need to pull in -llber with -lldap where possible (instead of
+	relying on DT_NEEDED) to avoid undefined symbol errors when building
+	with LDAP support.
+	[c88bd9fd05c9]
+
+	* plugins/sample/README:
+	The sample plugin is now built by default to avoid bit rot. GitHub
+	issue #234.
+	[aac2a29136e1]
+
+	* plugins/sample/sample_plugin.c:
+	The change from sudo_printf -> sudo_plugin_printf was incomplete.
+	Fixes GitHub issue #234.
+	[4f8333e3f7b8]
+
+2023-01-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, m4/pie.m4:
+	Solaris: use lt_prog_compiler_pic instead of assuming -KPIC
+	[36b94699ad63]
+
+	* configure, m4/hardening.m4, m4/pie.m4:
+	Solaris: the aslr, nxheap and nxstack link options are only for
+	executables. Move them back to PIE_LDFLAGS, which is only used when
+	linking a binary.
+	[970d533cd9b2]
+
+	* configure, m4/hardening.m4, m4/pie.m4:
+	Solaris: move aslr linker option to hardening and try to build real
+	PIEs These flags are specific to the Solaris linker.
+	[c5439fec5cb3]
+
+	* configure, m4/hardening.m4, m4/pie.m4:
+	Enable non-executable heap and stack options for Solaris ld.
+	[5be638b9bd79]
+
+	* configure, configure.ac, m4/hardening.m4:
+	Limit some of the hardening tests to compilers that define __GNUC__.
+	This should avoid false positives on other compilers.
+	[1b3b36a2ff2b]
+
+	* plugins/python/regress/testdata/check_multiple_approval_plugin_and_a
+	rguments.stdout:
+	Update expected plugin version.
+	[19b2963008a2]
+
+	* docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c:
+	Pass back the number of files to edit when using sudoedit. The sudo
+	front-end can use this to determine where the list of files to edit
+	begins.
+	[c9c1e6e81438]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, include/sudo_lbuf.h,
+	lib/eventlog/eventlog.c, lib/iolog/iolog_json.c, lib/util/lbuf.c,
+	lib/util/util.exp.in, plugins/sudoers/sudoreplay.c:
+	Escape control characters in log messages and "sudoreplay -l"
+	output. The log message contains user-controlled strings that could
+	include things like terminal control characters. Space characters in
+	the command path are now also escaped.
+
+	Command line arguments that contain spaces are surrounded with
+	single quotes and any literal single quote or backslash characters
+	are escaped with a backslash. This makes it possible to distinguish
+	multiple command line arguments from a single argument that contains
+	spaces.
+
+	Issue found by Matthieu Barjole and Victor Cutillas of Synacktiv
+	(https://synacktiv.com).
+	[1cd37144190c]
+
+	* NEWS:
+	Merge in sudo 1.9.12p2 changes.
+	[d5a2cd780f27]
+
+	* .hgtags:
+	Added tag SUDO_1_9_12p2 for changeset 05149e3ee7db
+	[8763a9e70ddd] <1.9>
+
+2023-01-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Add back the linker check for -fstack-clash-protection. This is
+	expected to fix GitHub issue #231.
+	[40bda374ae08] <1.9>
+
+	* configure, m4/hardening.m4:
+	Add back the linker check for -fstack-clash-protection. This is
+	expected to fix GitHub issue #231.
+	[c08c0a7c8613]
+
+2023-01-17  trackers-love  <bianguangze@uniontech.com>
+
+	* lib/util/sudo_conf.c:
+	Return value does not match
+	[2c7c350c3d97]
+
+2023-01-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in,
+	docs/sudo_logsrvd.conf.man.in, docs/sudo_logsrvd.conf.mdoc.in,
+	docs/sudoers.ldap.man.in, docs/sudoers.ldap.mdoc.in,
+	docs/sudoers.man.in, docs/sudoers.mdoc.in, docs/visudo.man.in,
+	docs/visudo.mdoc.in:
+	Stop using 8n width in tagged lists. Use either 4n, when the body is
+	expected to wrap or the width of the longest tag when no wrapping is
+	expected.
+	[2b1bc5d31250]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in, docs/sudo.man.in,
+	docs/sudo.mdoc.in, docs/sudo_logsrvd.man.in,
+	docs/sudo_logsrvd.mdoc.in, docs/sudo_sendlog.man.in,
+	docs/sudo_sendlog.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in:
+	Use -width Ds for the options list, not -width Fl.
+	[598dbf3d2fea]
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in, docs/sudo_logsrvd.conf.man.in,
+	docs/sudo_logsrvd.conf.mdoc.in, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in:
+	Reduce the offset of bullet lists to 1n.
+	[893b6fd25564]
+
+	* INSTALL.md:
+	Shorten --with-passprompt and --with-mailsubject arguments to a
+	single word. The script that generates the web version of this file
+	doesn't expect options to include whitespace.
+	[063dc2c168aa]
+
+2023-01-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL.md:
+	Shorten --with-badpass-message argument to a single word. The
+	fix_install script can't deal with whitespace in options.
+	[17761c19a4b8]
+
+	* LICENSE.md:
+	Make numbered lists more markdown-friendly. Also add line breaks
+	when there are multiple authors.
+	[d22146e06e27]
+
+	* INSTALL.md:
+	Make lists of directories more markdown-friendly.
+	[b3295e422b33]
+
+2023-01-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/regress/iolog_mkpath/check_iolog_mkpath.c:
+	Check for errors when removing the temp directory. If we cannot
+	remove the directory tree that may indicate a file or directory mode
+	problem.
+	[4a162644b61f]
+
+	* lib/iolog/iolog_mkdtemp.c:
+	iolog_mkdtemp: fix pasto in last commit Set mode to iolog_dirmode,
+	not iolog_filemode
+	[9926f1c92729] <1.9>
+
+	* lib/iolog/iolog_mkdtemp.c:
+	iolog_mkdtemp: fix pasto in last commit Set mode to iolog_dirmode,
+	not iolog_filemode
+	[713773e23472]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.2p2
+	[05149e3ee7db] [SUDO_1_9_12p2] <1.9>
+
+	* plugins/sudoers/editor.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/visudo.c:
+	sudoedit: do not permit editor arguments to include "--"
+	(CVE-2023-22809) We use "--" to separate the editor and arguments
+	from the files to edit. If the editor arguments include "--", sudo
+	can be tricked into allowing the user to edit a file not permitted
+	by the security policy. Thanks to Matthieu Barjole and Victor
+	Cutillas of Synacktiv (https://synacktiv.com) for finding this bug.
+	[eb7f573a4a92] <1.9>
+
+	* plugins/sudoers/editor.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/visudo.c:
+	sudoedit: do not permit editor arguments to include "--"
+	(CVE-2023-22809) We use "--" to separate the editor and arguments
+	from the files to edit. If the editor arguments include "--", sudo
+	can be tricked into allowing the user to edit a file not permitted
+	by the security policy. Thanks to Matthieu Barjole and Victor
+	Cutillas of Synacktiv (https://synacktiv.com) for finding this bug.
+	[2ca90805f471]
+
+2023-01-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sha2.c:
+	In SHA256Pad and SHA512Pad use 511 and 1023 respectively for bitwise
+	AND. Previously we were using 504 and 1016 which still produces the
+	correct result since padding is done in 8-bit bytes. However, using
+	size-1 for the bitwise AND makes the intent clearer and likely would
+	have prevented the previous bug in SHA512Pad. From Matthieu Barjole
+	and Victor Cutillas of Synacktiv (https://synacktiv.com)
+	[4b6a50800ecd]
+
+	* plugins/sudoers/env.c:
+	env_file_next_local: change the order of the val_len check. It makes
+	more sense to verify that val_len > 1 before using it. This is not a
+	problem in practice because val[val_len - 1] is guaranteed not to
+	underflow but it can confuse reviewers and static analyzers.
+	[9d6bed4e3fd0]
+
+	* plugins/sudoers/env.c:
+	Fix typo in check for environment variables that start with '='.
+	[6dc466c8bf82]
+
+	* lib/util/lbuf.c:
+	sudo_lbuf_print: no longer need to check for lbuf->len > 0. Now that
+	lbuf length is unsigned the earlier check for len == 0 is
+	sufficient.
+	[bdfc863f5b5c]
+
+	* lib/util/lbuf.c:
+	Increase minimum allocation size from 256 to 1024 bytes.
+	[0f49c8728151]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix IS_IDLOG macro, it was testing the wrong byte for the NUL. This
+	causes the macro to evaluate to false even for valid TSIDs.
+	[77686e4508d3]
+
+2023-01-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	sudoers_trace_print: this is a no-op if not debugging
+	[df34de2e60f4]
+
+	* lib/util/lbuf.c:
+	sudo_lbuf_expand: don't allocate less than 256 bytes at a time.
+	[a747682156e6]
+
+2023-01-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/lbuf.c:
+	sudo_lbuf_expand: round nearest power of two instead of multiple of
+	256.
+	[840855b501de]
+
+	* LICENSE.md:
+	Update copyright year.
+	[5ff97b5e6bcd]
+
+	* include/sudo_lbuf.h, lib/util/lbuf.c:
+	sudo_lbuf_expand: check for possible integer overflow The numeric
+	fields in struct sudo_lbuf are now unsigned so that wraparound is
+	defined, this make the overflow checks simpler. Problem deteced by
+	oss-fuzz using the fuzz_sudoers fuzzer.
+	[6dc670d15276]
+
+	* MANIFEST, lib/iolog/iolog_json.c,
+	lib/iolog/regress/iolog_json/test3.in,
+	lib/iolog/regress/iolog_json/test3.out.ok:
+	Decode \u00XX in a JSON string now that we escape control chars. We
+	don't write Unicode to the log.json file, only 8-bit ASCII.
+	[83dcacb35309]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/hexchar.c, lib/util/regress/hexchar/hexchar_test.c,
+	lib/util/util.exp.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/hexchar.c, plugins/sudoers/match_digest.c,
+	plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/toke_util.c:
+	Move hexchar() from the sudoers plugin to lib/util.
+	[4a6c57c1b66a]
+
+	* lib/util/mkdir_parents.c:
+	sudo_open_parent_dir: adjust loop terminating condition Checking for
+	ep < pathend should be a bit clearer than ep != '\0' and has the
+	advantage of working when pathend doesn't point to a NUL byte. No
+	intended change in behavior.
+	[cee4e0c71070]
+
+	* lib/iolog/iolog_mkdtemp.c:
+	iolog_mkdtemp: fix failure when the specified path contains
+	subdirectories. This fixes a bug introduced in sudo 1.9.12.
+	[ac86f3b0d94b] <1.9>
+
+	* lib/iolog/iolog_mkdtemp.c:
+	iolog_mkdtemp: fix failure when the specified path contains
+	subdirectories. This fixes a bug introduced in sudo 1.9.12.
+	[3a1d5b01b446]
+
+	* lib/iolog/regress/iolog_mkpath/check_iolog_mkpath.c:
+	check_iolog_mkpath: fix exit value
+	[9ac13d6657f6]
+
+2023-01-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #227 from sohomdatta1/integer_underflow
+
+	Prevent integer underflow due to environment variable
+	[c6c716352077]
+
+2023-01-02  Sohom  <sohomdatta1+git@gmail.com>
+
+	* plugins/sudoers/env.c:
+	Prevent integer underflow due to environment variable
+
+	Gaurd against replacing quotes when the environment variable val_len
+	is 1.
+	[1b926824dcf8]
+
+2023-01-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/regex.c:
+	glibc allows the ',' in {low,high} to be escaped with a backslash.
+	Adjust bound parsing to match this.
+	[b2bbac2bab6a]
+
+2022-12-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Fix logic goof in 05781ba6f1f3, disable replacements when fuzzing.
+	Not the other way around.
+	[abcf2deb9d0e]
+
+2022-12-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in:
+	Substitute python plugin file name in sudo_plugin_python
+	documentation. Also use prefix for group plugin fallback path
+	section in sudoers manual.
+	[e245808fbe74]
+
+	* lib/iolog/Makefile.in,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.dict,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.dict:
+	Use correct dictionary file format. Also use the new dictionaries in
+	the Makefile fuzz target.
+	[c39e699cb9b6]
+
+	* MANIFEST, lib/iolog/regress/corpus/seed/log_legacy/less.log,
+	lib/iolog/regress/corpus/seed/log_legacy/smtpctl.log,
+	lib/iolog/regress/corpus/seed/log_legacy/vi.log,
+	lib/iolog/regress/corpus/seed/timing/timing.5,
+	lib/iolog/regress/corpus/seed/timing/timing.6,
+	lib/iolog/regress/corpus/seed/timing/timing.7,
+	lib/iolog/regress/corpus/seed/timing/timing.8,
+	lib/iolog/regress/corpus/seed/timing/timing.9:
+	Add some addition entries for the I/O log fuzzer seed corpus.
+	[51d4bf5f014c]
+
+	* MANIFEST, lib/iolog/regress/fuzz/fuzz_iolog_legacy.dict,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.dict:
+	Add dictionaries for fuzz_iolog_legacy and fuzz_iolog_timing.
+	[84d1e53ea8eb]
+
+	* include/sudo_fatal.h:
+	Don't send warn/fatal output to the debug file when fuzzing.
+	[968fedf79f23]
+
+	* lib/util/getentropy.c:
+	Back out the genentropy.c portion of c648cfe9ff0f We don't need to
+	special-case FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION now that we
+	use the glibc arc4random() where available.
+	[7d69e44e3e9b]
+
+2022-12-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Use initprogname(), not setprogname() in the fuzzers. This results
+	in better coverage for progname.c.
+	[dede53f4b0db]
+
+	* lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_conf/test1.out.ok,
+	lib/util/regress/sudo_conf/test2.out.ok,
+	lib/util/regress/sudo_conf/test3.out.ok,
+	lib/util/regress/sudo_conf/test4.out.ok,
+	lib/util/regress/sudo_conf/test5.out.ok,
+	lib/util/regress/sudo_conf/test6.out.ok,
+	lib/util/regress/sudo_conf/test7.out.ok:
+	Add probe_interfaces and intercept_path.
+	[f00ecf67a5e1]
+
+	* lib/util/regress/fuzz/fuzz_sudo_conf.c:
+	Exercise getter functions.
+	[3208a9508724]
+
+	* configure, configure.ac:
+	Avoid using our function replacements when fuzzing (where possible).
+	We don't want to fuzz the function replacements themselves as this
+	can skew the coverage reports.
+	[05781ba6f1f3]
+
+	* plugins/python/regress/check_python_examples.c:
+	Disable sudo_debug tests when fuzzing. The debug code is disable
+	when fuzzing is enabled to avoid coverage issues.
+	[2c90549a0918]
+
+	* lib/util/fatal.c, lib/util/getentropy.c, lib/util/sudo_conf.c:
+	Avoid compiling some code paths that are unreachable when fuzzing.
+	[c648cfe9ff0f]
+
+	* plugins/sudoers/regress/serialize_list/check_serialize_list.c:
+	Plug memory leak.
+	[6189ff1db193]
+
+2022-12-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.dict:
+	Update fuzz_policy keywords to match current policy settings.
+	[0db960f83cf1]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.dict:
+	Add example users and groups to the dictionary.
+	[6fd8ad758aed]
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.c, src/parse_args.c:
+	parse_args: an environment variable may not start with '='. Also
+	check VAR=val format in validate_env_vars() and add an error message
+	if insert_env_vars() fails.
+	[b9b9acae1671]
+
+	* plugins/sudoers/env.c:
+	rebuild_env: avoid a potential NULL dereference in fuzz_policy
+	[90f5d579dd69]
+
+	* plugins/sudoers/sudoers.c:
+	sudoers_policy_main: plug memory leak of iolog_path on error.
+	[99cbe3d513e6]
+
+	* plugins/sudoers/env.c:
+	rebuild_env: avoid a potential NULL dereference in fuzz_policy
+	[de05b4f00f35]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	The contents of the env_add array should not include the leading
+	"env=" prefix. The previous fix for this was incomplete.
+	[849fee26133a]
+
+	* plugins/sudoers/env.c:
+	validate_env_vars: more efficient errbuf handling Also avoid
+	appending to errbuf if it is already full.
+	[1ffd174fa0ea]
+
+2022-12-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in:
+	Document that -k does not interfere with sudo on other terminals.
+	This should help clarify the difference between "sudo -k" and "sudo
+	-K".
+	[589d750faf30]
+
+	* lib/util/regex.c, lib/util/regress/regex/regex_test.c:
+	Check for bound values larger than 255 and reject them. This is to
+	prevent the fuzzers from running out of memory.
+	[f172a6d64a34]
+
+	* scripts/pp:
+	Use the POSIX shell "command -v" instead of "which" to find
+	programs. Fix false detection of init.d/service status.
+	[aee53eddfc18]
+
+	* etc/sudo.pp:
+	Fix example dir mode on RedHat/Fedora.
+	[f5fd86f35bc5]
+
+	* etc/sudo.pp:
+	Use sed instead of ed to modify the packaged sudoers file. Some
+	Linux distros do not include /bin/ed by default.
+	[217ef1afaacb]
+
+2022-12-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in:
+	Use @intercept_file@ and @noexec_file@ like the example file.
+	[726e060da20e]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	There is a @pam_login_service@ substitution but no @pam_service@.
+	Just use sudo instead of @pam_service@.
+	[b16f28ccc847]
+
+	* examples/sudo.conf.in:
+	Use @sudoers_plugin@ instead of @sudoers_module@.
+	[4c92b9ef93b5]
+
+	* docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in:
+	Use @sudoers_plugin@ instead of @sudoers_module@.
+	[3c50a97c1bbd]
+
+	* INSTALL.md, NEWS, config.h.in, configure, configure.ac,
+	docs/UPGRADE.md, scripts/config.guess, scripts/config.sub:
+	sudo 1.9.13 Document the changes to AIX plugins in docs/UPGRADE.md
+	and regenerate configure using the latest autoconf from git.
+	[b897ca965a0f]
+
+	* scripts/build_pkgs:
+	Remove anything after whitespace in MANIFEST when building tarball.
+	This is consistent with how sudo's Makefile builds the tarball.
+	[db48ecf91964]
+
+	* MANIFEST:
+	Zap trailing whitespace.
+	[7be2d953e0ca]
+
+	* configure, configure.ac, docs/sudo.conf.man.in,
+	docs/sudo.conf.mdoc.in, docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	docs/visudo.man.in, docs/visudo.mdoc.in, examples/sudo.conf.in,
+	pathnames.h.in, src/load_plugins.c, src/preload.c:
+	Use AIX-style shared libraries on AIX by default instead of
+	SVR4-style. This removes the need to use the -brtl linker flag which
+	can cause problems when there are both a .so and .a version of the
+	same library but with different versions. This was particularly
+	problematic when using the AIX freeware version of OpenSSL. The
+	--with-aix-soname=svr4 option can be used to build SVR4-style shared
+	libs instead.
+	[268bd3bc7717]
+
+	* lib/util/sudo_dso.c, src/load_plugins.c:
+	sudo_dso_load: add AIX fallback path from shlib.so to
+	shlib.a(shlib.so). If the .so file is missing but the .a file
+	exists, try to dlopen() the AIX .a file using the .so name as the
+	member. We need to avoid breaking existing configurations if the
+	type of AIX shared library changes when sudo is upgraded.
+	[f64cf05bb2c2]
+
+	* plugins/sudoers/group_plugin.c, src/load_plugins.c:
+	Remove the owner and mode checks when loading a sudo plugin. The
+	sudo.conf file is considered a trusted source of information and
+	these checks suffer from TOCTOU issues anyway. The checks complicate
+	loading of shared objects since we need to perform fallback
+	processing twice.
+	[60a811d58138]
+
+	* MANIFEST, plugins/python/Makefile.in,
+	plugins/python/python_importblocker.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/testdata/sudo.conf.developer_mode,
+	plugins/python/regress/testdata/sudo.conf.normal_mode,
+	plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h,
+	plugins/python/sudo_python_module.h:
+	Remove the Python plugin import blocker code. The sudo.conf file is
+	considered a trusted source of information and these checks suffer
+	from TOCTOU issues anyway.
+	[1d261d802b82]
+
+	* MANIFEST, docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in,
+	docs/sudo_plugin_python.man.in, docs/sudo_plugin_python.mdoc.in,
+	examples/sudo.conf.in,
+	lib/util/regress/corpus/seed/sudo_conf/sudo.conf.1,
+	lib/util/regress/corpus/seed/sudo_conf/sudo.conf.2,
+	lib/util/regress/corpus/seed/sudo_conf/sudo.conf.3,
+	lib/util/regress/fuzz/fuzz_sudo_conf.dict,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_conf/test1.in,
+	lib/util/regress/sudo_conf/test1.out.ok,
+	lib/util/regress/sudo_conf/test2.out.ok,
+	lib/util/regress/sudo_conf/test3.out.ok,
+	lib/util/regress/sudo_conf/test4.out.ok,
+	lib/util/regress/sudo_conf/test5.out.ok,
+	lib/util/regress/sudo_conf/test6.out.ok,
+	lib/util/regress/sudo_conf/test7.out.ok,
+	lib/util/regress/sudo_conf/test8.err.ok,
+	lib/util/regress/sudo_conf/test8.in,
+	lib/util/regress/sudo_conf/test8.out.ok, lib/util/sudo_conf.c:
+	Remove developer mode from sudo.conf, it is no longer used.
+	[2b350bfe4d7c]
+
+	* plugins/sudoers/sudoers_version.h:
+	Bump SUDOERS_GRAMMAR_VERSION to 50 for the new list pseudo-command.
+	[60e6e3b59b1e]
+
+2022-12-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/Makefile.in, docs/sudo.man.in, docs/sudo.mdoc.in,
+	docs/sudo_plugin_python.man.in, docs/sudo_plugin_python.mdoc.in,
+	docs/sudoreplay.man.in, docs/sudoreplay.mdoc.in:
+	Use ".Sy root" instead of ".Em root" when talking about the root
+	user. Replace MANDOCPROG with "mandoc" now that MANDOCPROG has been
+	removed.
+	[a0b80a88eb7c]
+
+2022-12-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #226 from rtczza/main
+
+	debug_return_int use error
+	[7743f67838ae]
+
+2022-12-23  wanglujun  <wanglujun@uniontech.com>
+
+	* src/exec_pty.c:
+	debug_return_int use error
+	[b69796b9b10b]
+
+2022-12-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sudo_dso.c, src/load_plugins.c:
+	Fix support for AIX-style path(module) syntax in sudo.conf Plugin
+	lines.
+	[b8666283d2f2]
+
+2022-12-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in:
+	Mention the "list" privilege in the description of the -U option.
+	[f5416004ef2e]
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in, src/parse_args.c,
+	src/sudo_usage.h.in:
+	Add [arg ...] after command in SYNOPSIS and usage output. Use Ar
+	markup when referring to the command and args.
+	[40fca0824680]
+
+2022-12-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_preload.c:
+	fmtstr: call va_arg() for %c when computing length. Even though we
+	don't need to read the actual char to know its length, we do need to
+	consume it to get the correct value for the next format.
+	[fadd0047868b]
+
+	* configure, m4/sanitizer.m4:
+	SUDO_CHECK_SANITIZER: quote "$3" in awk script so m4 doesn't eat it.
+	[fcf1661bfebd]
+
+	* lib/util/regress/json/json_test.c:
+	Add missing sudo_json_free().
+	[fa5e5af55927]
+
+	* MANIFEST, lib/util/Makefile.in, lib/util/regex.c,
+	lib/util/regress/regex/regex_test.c:
+	check_pattern: check bounds as a repetition operator too. Add regess
+	to verify check_pattern() via sudo_regex_compile().
+	[48cbddf476a5]
+
+	* lib/util/regex.c:
+	Instead of collapsing duplicate repetition characters, reject them.
+	This is implementation-specific behavior--some regcomp(3) will
+	reject duplicate repetition characters (BSD), others will try to
+	support them (Glibc) but may allocate excessive amounts of memory.
+	[a0cb75d9b5e5]
+
+	* MANIFEST, docs/CONTRIBUTORS.md, po/sq.mo, po/sq.po:
+	New Albanian translation from translationproject.org
+	[4a8dedc6500d]
+
+2022-12-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, include/sudo_json.h, lib/eventlog/eventlog.c,
+	lib/iolog/iolog_loginfo.c,
+	lib/iolog/regress/iolog_json/check_iolog_json.c,
+	lib/util/Makefile.in, lib/util/json.c,
+	lib/util/regress/json/json_test.c, lib/util/util.exp.in,
+	logsrvd/logsrvd_local.c, plugins/audit_json/audit_json.c,
+	plugins/sudoers/cvtsudoers_json.c:
+	Add basic regress for JSON functions. Fix a bug in escaped control
+	character handling. Roll back changes to buffer if
+	sudo_json_add_value() fails.
+	[8b61266511fe]
+
+	* plugins/python/regress/iohelpers.c,
+	plugins/python/regress/testhelpers.c:
+	Add missing memory allocation failure checks. Inspired by GitHub PR
+	#221
+	[9f09479191e9]
+
+2022-12-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/json.c:
+	Escape control characters in strings.
+	[9668cd68daee]
+
+2022-12-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in:
+	Mention the audit plugin in the "Process model" section. Remove
+	extraneous information describing how sudo may exec the command
+	directly, this is already included in the non-pty section.
+	[9d01a9682ed2]
+
+2022-12-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/sudoers.c:
+	Plug a memory leak of list_cmnd in the fuzzers.
+	[b413becfb8db]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Suppress PVS Studio watning about reassigning a variable the same
+	value. Working around the warning would result in more fragile code.
+	[b4227e531fb7]
+
+	* lib/util/regress/multiarch/multiarch_test.c:
+	Fix memory leak in multiarch_test to quiet leak sanitizer.
+	[1491ce67725c]
+
+	* plugins/python/python_plugin_audit.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	Fix some dead stores noted by PVS Studio. Since rc is initialized to
+	SUDO_RC_ERROR there is no need to set it to SUDO_RC_ERROR again on
+	failure if rc has not been changed since initialization.
+	[f6c075dedfe3]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/logging.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/parse.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Add "list" pseudo-command to allow a user to list another user's
+	privs. Previously, only root or a user with the ability to run any
+	command as either root or the target user on the current host could
+	use the -U option. For "sudo -l [-U otheruser] command", NewArgv[0]
+	is now set to "list" (just like "sudo -l") and the actual command to
+	be checked starts with NewArgv[1].
+	[225eac96d11f]
+
+2022-12-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/codespell.exclude:
+	Adjust a line to quiet codespell warning.
+	[f920076a902d]
+
+2022-12-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in:
+	Only build ChangeLog from a repo checkout, not a release tarball.
+	The CODEOWNERS file is not present in the release tarball so we can
+	use that when determining what is (or is not) a repo checkout.
+	[290ce43f0f66]
+
+	* docs/CODEOWNERS:
+	Add CODEOWNERS file, currently all owned by @millert.
+	[3becb02b5cd6]
+
+	* .gitignore, .hgignore, Makefile.in:
+	Only regenerate ChangeLog if there have been changes. Also check
+	that "hg --version" or "git --version" works before using hg or git.
+	Bug #1043.
+	[d9a28bb02621]
+
+2022-12-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse.c:
+	Fix potential crash introduced in the fix for GitHub issue #134. If
+	a user's sudoers entry did not have any RunAs user's set, running
+	"sudo -U otheruser -l" would dereference a NULL pointer. We need to
+	compare the default RunAs user if the sudoers entry does not specify
+	one explicitly. Problem reported by Andreas Mueller who also
+	suggested a different solution in PR #219.
+	[360e04f13024] <1.9>
+
+	* plugins/sudoers/parse.c:
+	Fix potential crash introduced in the fix for GitHub issue #134. If
+	a user's sudoers entry did not have any RunAs user's set, running
+	"sudo -U otheruser -l" would dereference a NULL pointer. We need to
+	compare the default RunAs user if the sudoers entry does not specify
+	one explicitly. Problem reported by Andreas Mueller who also
+	suggested a different solution in PR #219.
+	[3d12dfeef26b]
+
+	* scripts/build_pkgs:
+	Defer installing the SIGCHLD handler until after non-job commands
+	run. Lock the socket dir to avoid races in
+	open_persistent_connection(). Also avoid using "ssh -f" since that
+	may return before the socket is created. Strip carriage returns from
+	log when running in a pty.
+	[d0da1a261fbc]
+
+2022-12-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, m4/sudo.m4:
+	Fix a typo in SUDO_CHECK_NET_FUNC.
+	[08cb2ba84897]
+
+	* lib/util/inet_ntop.c:
+	Fix -Wsign-compare warning.
+	[45e2716ece56]
+
+	* configure, m4/sudo.m4:
+	Initialize "found" in SUDO_CHECK_NET_FUNC.
+	[a5daeb77e6bb]
+
+	* configure, m4/sudo.m4:
+	Fix pasto introduced in last commit.
+	[7e1b09977be3]
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/python/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Fix failure in check targets when there is no UTF-8 C locale.
+	[721c8bdff28f]
+
+	* configure, configure.ac, m4/sudo.m4:
+	Add SUDO_CHECK_NET_FUNC to check functions in the network libraries.
+	If a function is not found, check again with "-lsocket", "-linet",
+	"-lsocket -lnsl", or "-lresolv". Also display network libs in final
+	summary as well as the different linker flags.
+	[a0ce3347cd8d]
+
+	* configure, m4/sudo.m4:
+	Make sure HAVE_MAILLOCK_H is defined on Solaris 10.
+	[bb9f3a1beff5]
+
+	* configure, configure.ac:
+	Remove extraneous "(cached)" line when the -C option is used. We do
+	not need to call AC_CACHE_VAL() to ensure that a variable is cached,
+	its name just needs to match the pattern *_cv_*.
+	[b8ffa09d0cd7]
+
+	* configure, m4/sudo.m4:
+	Make path checks in sudo.m4 cachable.
+	[0bcfa73702d3]
+
+	* configure, configure.ac:
+	Use AC_PATH_PROGS_FEATURE_CHECK to find mandoc/nroff. We don't use
+	the NROFFPROG or MANDOCPROG any longer so no need to set those.
+	[7d96680046a6]
+
+	* configure, configure.ac:
+	Don't check for _sys_siglist if sys_siglist is found.
+	[2c70aba3935c]
+
+	* configure, configure.ac:
+	Fix check for sys_sigabbrev.
+	[b8537a76815f]
+
+2022-12-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Skip test for __func__ on C99 and above, avoid extra _sys_signame
+	test.
+	[71f3497a6a3a]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/gettext.m4:
+	Move gettext checks to m4/gettext.m4
+	[693029542e06]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/ldap.m4:
+	Move LDAP library checks to m4/ldap.m4 and make more tests
+	cacheable.
+	[85fa1f49298a]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/openssl.m4:
+	Move OpenSSL/wolfSSL checks to m4/openssl.m4
+	[08b90f3cef52]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/pie.m4:
+	Move PIE executable checks to m4/pie.m4
+	[6b5cac6cecd5]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/sanitizer.m4:
+	Move address sanitizer and fuzzer checks to m4/sanitizer.m4
+	[a6372917d53b]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/visibility.m4:
+	Move symbol visibility checks to m4/visibility.m4
+	[4684049c2d2c]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/hardening.m4:
+	Move hardening checks to m4/hardening.m4
+	[c03abb3c9f55]
+
+	* configure, configure.ac, m4/sudo.m4:
+	Make cpp variadic arguments check into a macro and move to sudo.m4.
+	Also move the PVS-Studio.cfg generation to sudo.m4.
+	[c1a8d3b46be1]
+
+2022-12-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/snprintf.c:
+	Sync with OpenBSD.
+	[157439118867]
+
+	* Merge pull request #218 from sohomdatta1/snprintf
+
+	[snprintf] Check for '\0' to prevent undef memory read
+	[050882923c98]
+
+2022-12-03  Sohom  <sohomdatta1+git@gmail.com>
+
+	* lib/util/snprintf.c:
+	[snprintf] Check for '\0' to prevent undef memory read
+	[aff60c479c10]
+
+2022-12-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/tsdump.c, plugins/sudoers/visudo.c,
+	src/parse_args.c, src/regress/noexec/check_noexec.c:
+	Place C23 attributes before keywords in function declarations. In
+	practice this means we must use "sudo_noreturn static foo(void)"
+	instead of "static sudo_noreturn foo(void)".
+	[6c1836dcb2d6]
+
+2022-11-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/build_pkgs:
+	Convert from using IPC::Open3 to IPC::Run. Run tests in a pty so
+	check_ttyname works as expected. Explicitly set short command line
+	options letters in GetOptions(). Add a debug flag to help see what
+	is going on internally. Add hook for die() to kill running jobs when
+	we are dying. SSH_AGENT_PID will not be present if the agent is
+	forwarded. In close_persistent_connections() only close active
+	connections.
+	[d49e1ac7e2f2]
+
+2022-11-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure.ac, include/sudo_compat.h:
+	Use C23 [[__fallthrough__]] and [[__noreturn__]] attributes if
+	supported. If the C23 attributes are not supported, use gcc-style
+	attributes where possible.
+	[57676068e9a9]
+
+	* configure, configure.ac:
+	Move the check for the fallthrough attribute outside the warnings
+	block. Use AX_APPEND_FLAG instead of addind to CFLAGS directly.
+	[dc22d8238827]
+
+2022-11-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/build_pkgs:
+	The distributed package build script I use to build all sudo
+	packages. This is not included in the release tarball because it is
+	of limited use to other people.
+	[94c58cc272c8]
+
+2022-11-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in:
+	Pass the list of files to include in the tarball on stdin. This
+	avoids any limit on the size of argv.
+	[0af8578c89fe]
+
+2022-11-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #214 from BornThisWay/1124_repeated_invocation
+
+	check_syntax(): Remove duplicate calls to init_defaults()
+	[3383fb0a6f5f]
+
+2022-11-24  modric  <pioneerbtw7@163.com>
+
+	* plugins/sudoers/visudo.c:
+	check_syntax(): Remove duplicate calls to init_defaults()
+	[048ccd968df9]
+
+2022-11-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sample/sample_plugin.c:
+	build_command_info: free command_info on failure. Once upon a time,
+	command_info was a stack variable, now it is dynamically allocated.
+	Coverity CID 299987.
+	[a80110e49952]
+
+	* plugins/sample/sample_plugin.c:
+	Better handling of out-of-memory conditions.
+	[ee3e47c4d272]
+
+	* plugins/group_file/group_file.c:
+	Keep group file open until the call to myendgrent(). This restores
+	the previous behavior.
+	[79751f7308d7]
+
+	* lib/util/json.c, plugins/group_file/getgrent.c,
+	plugins/sudoers/cvtsudoers_merge.c, plugins/sudoers/env.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/log_client.c,
+	plugins/sudoers/match_command.c, plugins/sudoers/strvec_join.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c, src/sudo.c:
+	Eliminate a few harmless dead stores. Quiets warnings from Infer.
+	[8bed7579b75d]
+
+	* plugins/sudoers/ldap_util.c:
+	sudo_ldap_parse_option: add explicit NULL check for strchr(). This
+	should not be needed since we only use the returned pointer if it is
+	larger than the string passed to strchr(). Quiets a warning from
+	Infer.
+	[852aec3e0450]
+
+	* logsrvd/logsrvd_journal.c:
+	journal_fdopen: free journal_path and close journal before setting
+	Fixes a potential resource leak that currently cannot happen. Quiets
+	a warning from Infer.
+	[bfe41e247c35]
+
+	* plugins/sudoers/ldap.c:
+	sudo_ldap_result_add_entry: check sudo_ldap_get_values_len() return
+	value. Previously, we just compared the error code with
+	LDAP_NO_MEMORY when checking for sudoOrder since this is the only
+	error we care about. We now return NULL for LDAP_NO_MEMORY and
+	ignore other errors. Quiets a warning from Infer.
+	[6e5a490b735c]
+
+	* plugins/group_file/getgrent.c, plugins/sudoers/tsgetgrpw.c,
+	plugins/sudoers/tsgetgrpw.h:
+	Refactor code to open passwd/group file and add
+	setpassent/setgroupent. This makes the "stayopen" semantics match
+	the system passwd/group functions. The getpwent/getgrent functions
+	now open the database if it is not already open.
+	[27bfa97ad47c]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/gram.h:
+	gram.h: #line directives should reference gram.h not y.tab.h.
+	[7a2d4a24d839]
+
+	* scripts/mkpkg:
+	Use clang, not /usr/bin/cc on FreeBSD and macOS. While /usr/bin/cc
+	_is_ clang on those platforms, some static analyzers get confused if
+	we don't run it as clang.
+	[d0c1f5940789]
+
+2022-11-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #212 from BornThisWay/1122_null_deref
+
+	sudo_rcstr_dup: Fix potential NULL pointer deref
+	[58fcefa888fa]
+
+2022-11-22  modric  <pioneerbtw7@163.com>
+
+	* lib/util/rcstr.c:
+	sudo_rcstr_dup: Fix potential NULL pointer deref
+	[f45acaded1e5]
+
+2022-11-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/check.c:
+	Add a reminder to the default lecture that the password will not
+	echo. This line is only displayed when the pwfeedback option is
+	disabled. GitHub issue #195.
+	[7bc25043c760]
+
+	* Merge pull request #210 from BornThisWay/1121_typo
+
+	Fix some typos
+	[9d1e9278effb]
+
+2022-11-21  modric  <pioneerbtw7@163.com>
+
+	* plugins/python/regress/testhelpers.h, plugins/sudoers/parse.c:
+	Fix some typos
+	[d7d1c3ade748]
+
+2022-11-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #208 from BornThisWay/1121_return
+
+	intercept_read: Print and then return.
+	[615c2d5fca36]
+
+2022-11-21  modric  <pioneerbtw7@163.com>
+
+	* src/exec_intercept.c:
+	intercept_read: Print and then return.
+	[049547eb7ac0]
+
+2022-11-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #205 from BornThisWay/1119_access_null_pointer
+
+	sudo_mmap_strdup_v1: Fix potential NULL pointer deref
+	[bad55afc72bb]
+
+2022-11-19  modric  <pioneerbtw7@163.com>
+
+	* lib/util/mmap_alloc.c:
+	sudo_mmap_strdup_v1: Fix potential NULL pointer deref
+	[f8da23aff2ec]
+
+2022-11-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_intercept.c:
+	copy_vector: plug memory leak in error path Only the array was being
+	freed, not the contents. GitHub issue #202.
+	[cd1407dbe65f]
+
+2022-11-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Better matching of macOS version to SDK path.
+	[db7f2cbdb023]
+
+	* Merge pull request #200 from BornThisWay/fix_mem_leak_converse
+
+	Fix memory leak of pass in converse().
+	[b411801abdf7]
+
+	* plugins/sudoers/auth/passwd.c:
+	sudo_passwd_cleanup: Set auth->data to NULL after freeing. GitHub
+	issue #201
+	[e558188bd99d]
+
+2022-11-17  modric  <pioneerbtw7@163.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Fix memory leak of pass in converse().
+	[052c99eaad8f]
+
+2022-11-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac:
+	Use AC_SYS_YEAR2038 instead of setting _TIME_BITS by hand.
+	[049113d798e9]
+
+	* configure, m4/ax_append_flag.m4, m4/ax_check_compile_flag.m4,
+	m4/ax_func_snprintf.m4, m4/ax_prog_cc_for_build.m4:
+	Update macros from autoconf-archive.
+	[48b960c883df]
+
+	* plugins/sudoers/regress/corpus/seed/ldif/pr196.ldif,
+	plugins/sudoers/regress/visudo/test3.sh:
+	Fix typo; excerise -> exercise
+	[42cdb396b72b]
+
+	* config.h.in, configure, scripts/config.guess, scripts/config.sub:
+	Regenerate with the autoconf 2.72a pre-release.
+	[51d043878181]
+
+	* configure.ac:
+	Fix insufficient quoting in AC_CHECK_LIB() calls.
+	[78d37b60a912]
+
+	* autogen.sh:
+	If AUTOCONF_VERSION is unset, use version 2.71 not 2.69.
+	[108faf700aa7]
+
+	* configure.ac, m4/ax_func_getaddrinfo.m4, m4/sudo.m4:
+	Replace `foo` in descriptions with 'foo'
+	[ba63cef7bbe8]
+
+2022-11-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Add -Wvla and -Walloca to --enable-warnings
+	[7b9b59e35905]
+
+2022-11-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/pwutil.c:
+	sudo_debug_group_list: short-circuit if groups is NULL
+	[0f8f11ef82b6]
+
+	* configure, configure.ac:
+	configure: only check for getauxval() if getentropy() is missing.
+	[c056c2fc3898]
+
+	* config.h.in, configure, configure.ac:
+	Remove checks for random() and lrand48(), they are no longer used.
+	Also remove duplicate checks for arc4random() and getentropy().
+	[e3433874211d]
+
+	* configure, configure.ac:
+	Skip check for cpp variadic macro support if the compiler supports
+	C99.
+	[42efc9934ef5]
+
+	* configure, configure.ac:
+	HI-UX/MPP is based on OSF-1, not HP-UX Completely untested.
+	[c55ba59cd24d]
+
+	* configure, configure.ac:
+	Only check for utmps.h on HP-UX.
+	[682bb16545cf]
+
+	* configure, configure.ac:
+	Only check for sys/syscall.h on Linux. We only use it in the Linux-
+	specific getentropy() emulation code.
+	[eac313bfc142]
+
+	* config.h.in, configure, configure.ac:
+	configure: avoid running unnecessary tests on modern systems. Remove
+	AC_SYS_POSIX_TERMIOS, AC_TYPE_MODE_T, AC_TYPE_UID_T. Add missing
+	checks for int16_t, uint16_t, int32_t, and int64_t. Only check for
+	intmax_t, uintmax_t and bit-width types if missing both inttypes.h
+	and stdint.h. Remove unused clockid_t replacement.
+	[9f1f9d365f60]
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/test40.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test40.sh:
+	Add a regress check for the cvtsudoers filter crash. GitHub issue
+	#198.
+	[f0abea1f10d0]
+
+	* Makefile.in, lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/python/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	The name of the C locale w/ UTF-8 support is not always C.UTF-8. Use
+	a pattern to find it (if present) and use that value instead of
+	hard-coding C.UTF-8. This works around a leak sanitizer crash on
+	certain inputs.
+	[99aeb5a875f7]
+
+2022-11-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse_ldif.c:
+	Fix a potential use-after-free bug with cvtsudoers filtering. In
+	role_to_sudoers() when merging a privilege to the previous one where
+	the runas lists are the same we need to re-use the runas lists of
+	the last command in the previous privilege, not the first.
+	Otherwise, the check in free_cmndspec() will not notice the re-used
+	runas lists. Reported/analyzed by Sohom Datta. GitHub issue #198.
+	[29d1380d2fe0]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/corpus/seed/ldif/invalid_b64.ldif,
+	plugins/sudoers/regress/corpus/seed/ldif/pr196.ldif,
+	plugins/sudoers/regress/corpus/seed/ldif/sample.ldif,
+	plugins/sudoers/regress/corpus/seed/ldif/valid_b64.ldif,
+	plugins/sudoers/regress/cvtsudoers/test39.sh:
+	Copy some LDIF test data from the cvtsudoers tests to the seed
+	corpus. This includes a test to exercise the fix in PR #196.
+	[f74d65cf34d1]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Set LDAP base for sudoers_parse_ldif(). Without this set the fuzzer
+	will not exercise the dn parsing.
+	[c154b1a5d287]
+
+	* src/exec_ptrace.h:
+	Include linux/elf.h, not elf.h to make sure we get
+	NT_ARM_SYSTEM_CALL. The NT_PRSTATUS define is present in both files.
+	[161f41f644ca] <1.9>
+
+	* src/exec_ptrace.h:
+	Include linux/elf.h, not elf.h to make sure we get
+	NT_ARM_SYSTEM_CALL. The NT_PRSTATUS define is present in both files.
+	[4a4e3142381a]
+
+2022-11-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_compat.h:
+	Remove CMSG_* compatibility macros, they are no longer used.
+	[5914434ecb5c]
+
+	* lib/util/multiarch.c, lib/util/sudo_dso.c:
+	Add missing include of sys/stat.h
+	[d3b0f701c75f]
+
+	* include/sudo_util.h:
+	Move forward declaration of struct stat before its first use.
+	[f3cc645d197c]
+
+	* plugins/sudoers/regress/cvtsudoers/test28.sh,
+	plugins/sudoers/regress/cvtsudoers/test29.sh,
+	plugins/sudoers/regress/cvtsudoers/test33.sh,
+	plugins/sudoers/regress/cvtsudoers/test39.sh:
+	Use a consistent base when testing cvtsudoers conversion from ldif.
+	[a22cb486b2a3]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/cvtsudoers/test39.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test39.sh,
+	plugins/sudoers/regress/harness.in:
+	Test parsing LDIF when a backslash is the last char of the file. If
+	run with address sanitizer, this test will crash when the fix in
+	ceaf706ab74b is reverted.
+	[f50c78b7ed32]
+
+	* Merge pull request #196 from sohomdatta1/main
+
+	Prevent cvtsudoers from reading into undefined memory
+	[f21c417bbbb3]
+
+2022-11-09  Sohom  <sohom.datta@learner.manipal.edu>
+
+	* plugins/sudoers/parse_ldif.c:
+	[cvtsudoers]: Prevent sudo from reading into undefined memory
+	[ceaf706ab74b]
+
+2022-11-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/passwd.c:
+	sudo_passwd_verify: zero out des_pass before returning.
+	[c809232fdb7d]
+
+2022-11-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	Don't kill the parent process group on suspend if it is not sudo's
+	pid. If sudo is not the process group leader we must only send the
+	suspend signal to sudo itself. When sudo is run via a shell script,
+	it usually has the same process group as the shell script
+	interpreter. We do not want to suspend the script itself when the
+	command run by sudo is suspended.
+	[e6715ec62335]
+
+	* src/exec_nopty.c, src/regress/intercept/test_ptrace.c,
+	src/sudo_exec.h, src/suspend_nopty.c:
+	Pass sudo's process ID to suspend_sudo_nopty() since we already know
+	it. Saves an unnecessary getpid(2) call.
+	[1e12d9b0ce53]
+
+	* src/exec_nopty.c:
+	Call terminate_command() with use_pgrp = false when not running in a
+	pty. When sudo runs a command in the user's existing terminal the
+	command is run in the same process group as sudo itself. The proper
+	way to terminate it is to use kill(2), not killpg(3)
+	[3d9862963e92]
+
+	* src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c,
+	src/sudo_exec.h:
+	Fix handling of signal forwarding when running commands in a script.
+	We need to forward signals from a process in the same pgrp if the
+	pgrp leader is not either sudo or the command itself.
+	[d1bf60eac57f]
+
+	* src/regress/intercept/test_ptrace.c:
+	Make test_ptrace compile again after recent changes.
+	[e766db5aa9d4]
+
+	* src/exec_intercept.c, src/exec_intercept.h, src/exec_ptrace.c:
+	Update the cwd for log_subcmds too. Fixes a problem for
+	intercept_method=trace when running a relative command from a
+	different directory than what sudo ws started from. GitHub issue
+	#194
+	[b831f2397d9f]
+
+2022-11-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_12p1 for changeset 39cf4d8052ff
+	[28ed2d994f40] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Merge sudo 1.9.12p1 from tip.
+	[39cf4d8052ff] [SUDO_1_9_12p1] <1.9>
+
+	* NEWS, aclocal.m4, configure, configure.ac:
+	sudo 1.9.12p1
+	[6268fbabdb16]
+
+2022-11-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/host_port.c:
+	Include time.h for struct timespec used by sudo_iolog.h.
+	[369c8e799652]
+
+	* src/sudo.c:
+	Display sudo_mode in hex in debug log. This makes it easier to match
+	against the MODE_ defines.
+	[971e8f88bc12]
+
+2022-11-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/bsdauth.c:
+	bsdauth_verify: do not write to prompt, it is now const
+	[1969a562cf14]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Store raw sudoers lines in the debug log. Also add a "sudoerslex"
+	prefix to the token debug info in sudoers_trace_print().
+	[be03aef496cb]
+
+2022-10-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	The line numbers in sudoers_trace_print() were off by one. The line
+	counter is incremented when a newline is seen so the output actually
+	refers to the previous line.
+	[a97182a63419]
+
+	* plugins/sudoers/auth/API, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.h:
+	Make the second arg to the sudo auth verify function const. This may
+	be either a plaintext password or a password prompt. Either way it
+	should not be modified by the verify function.
+	[11aefc2bc3da]
+
+2022-10-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c:
+	Move debugging info from hostname_matches() to host_matches().
+	[2a53d2dcd1f5]
+
+2022-10-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/pwutil.c:
+	Add debugging to sudo_set_grlist() and sudo_set_gidlist().
+	[620d6f7fb4f8]
+
+	* plugins/sudoers/auth/passwd.c:
+	Fix CVE-2022-43995, potential heap overflow for passwords < 8
+	characters. Starting with sudo 1.8.0 the plaintext password buffer
+	is dynamically sized so it is not safe to assume that it is at least
+	9 bytes in size. Found by Hugo Lefeuvre (University of Manchester)
+	with ConfFuzz.
+	[a6229aa26fbf]
+
+2022-10-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	configure: better test for -fstack-clash-protection The gcc front-
+	end may accept -fstack-clash-protection even if the machine-specific
+	code does not support it. We use a test program with a large stack
+	allocation to try to cause the compiler to insert the stack clash
+	protection code, or fail if not supported. GitHub issue #191
+	[bbfbe758258c]
+
+	* configure, configure.ac:
+	Check that compiler accepts -fstack-clash-protection and -fcf-
+	protection. Previously, we only checked that linker accepted them.
+	GitHub issue #191
+	[7d36b89b6e4d]
+
+2022-10-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	Fix compilation error on Linux/mips.
+	[ae4c28d8a050]
+
+2022-10-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_12 for changeset b53d725f7c88
+	[dd962ed18037] <1.9>
+
+	* NEWS, config.h.in, configure, configure.ac, include/sudo_compat.h,
+	logsrvd/tls_init.c, plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Merge sudo 1.9.12 from tip.
+	[b53d725f7c88] [SUDO_1_9_12] <1.9>
+
+	* src/Makefile.in:
+	Regenerate dependencies for src/sesh.c.
+	[ada8f04afc6d]
+
+	* plugins/audit_json/Makefile.in, plugins/sample_approval/Makefile.in:
+	Sync clean target with other Makefile.in files.
+	[8048628a554e]
+
+	* Makefile.in, plugins/sample/Makefile.in:
+	Build the sample plugin but do not install it by default. We no
+	longer install the sample approval plugin.
+	[a8644924b6a1]
+
+	* plugins/sample/sample_plugin.c:
+	Adapt to current plugin API and fix warnings.
+	[d822f1a10361]
+
+2022-10-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Disable admin_flag by setting to NULL, not false. Found by cppcheck.
+	[6e32481e0555]
+
+	* NEWS:
+	Bug #1042.
+	[85d508b6d5e5]
+
+	* include/sudo_util.h, lib/util/fatal.c, lib/util/term.c,
+	lib/util/util.exp.in, src/conversation.c:
+	Only add trailing carriage return to messages if output is a raw
+	tty. If output is being written to a terminal in "raw" mode, we need
+	to add a carriage return after the newline to avoid "stair-step"
+	output. However, we should not write the carriage return if the
+	terminal is in "cooked" mode, output to a pipe, or output redirected
+	to a file. Bug #1042.
+	[14f5bf04245f]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Make it clear that runas_default sets the default user for
+	Runas_Spec. Also use mention runas_default in other parts of the
+	manual, use @runas_default@ instead of root and add markup around
+	user names. GitHub issue #186.
+	[73f0b82a2b22]
+
+	* lib/util/multiarch.c, lib/util/sudo_dso.c:
+	Fix a typo, muti-arch -> multi-arch GitHub issue #185
+	[d88270b9e98f]
+
+2022-10-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Mention log_servers eventlog fix.
+	[484b76589309]
+
+	* plugins/sudoers/policy.c:
+	Don't NULL out the plugin close function when logging to a log
+	server. If sudo calls execve(2) directly the accept info will not be
+	sent. We also need the sudo front-end to wait until the command
+	finishes to send the exit status.
+	[11976aa84040]
+
+2022-10-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL.md:
+	Fix numbering in "Simple sudo installation"
+	[695bec2a6223]
+
+2022-10-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	zlib 1.2.13 update
+	[2119981787f0]
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/ro.mo, plugins/sudoers/po/ro.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/fr.mo, po/fr.po, po/ja.mo,
+	po/ja.po, po/ka.mo, po/ka.po, po/ko.mo, po/ko.po, po/pl.mo,
+	po/pl.po, po/ro.mo, po/ro.po, po/sr.mo, po/sr.po, po/sv.mo,
+	po/sv.po, po/uk.mo, po/uk.po:
+	Updated translations from translationproject.org
+	[b1f28405c58d]
+
+	* lib/zlib/zconf.h.in:
+	Don't define _LARGEFILE64_SOURCE or _LFS64_LARGEFILE. We don't need
+	them and the missing prototype for crc32_combine_gen64() issue has
+	been fixed upstream.
+	[39eb41f1dba4]
+
+2022-10-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/zlib/compress.c, lib/zlib/crc32.c, lib/zlib/deflate.c,
+	lib/zlib/deflate.h, lib/zlib/gzlib.c, lib/zlib/gzread.c,
+	lib/zlib/gzwrite.c, lib/zlib/infback.c, lib/zlib/inflate.c,
+	lib/zlib/inftrees.c, lib/zlib/inftrees.h, lib/zlib/trees.c,
+	lib/zlib/uncompr.c, lib/zlib/zconf.h.in, lib/zlib/zlib.h,
+	lib/zlib/zutil.c, lib/zlib/zutil.h:
+	Update embedded copy of zlib to version 1.2.13. Fixes
+	CVE-2022-37434.
+	[737d6de5253c]
+
+	* lib/util/fchownat.c:
+	Add fchownat() for systems without it.
+	[7c4aeda51522]
+
+2022-10-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Update NEWS for 1.9.12.
+	[a4b090f3f6c8]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update .pot files for 1.9.12
+	[179fba83936d]
+
+	* src/selinux.c, src/sesh.c, src/sudo_edit.c:
+	Use getopt() and getopt_long() for sesh command line options.
+	[fbaa6c75e2ef]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
+	Update the description of intercept_verify
+	[63f80a7cd4a6]
+
+2022-10-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/load_plugins.c:
+	Silence a warning from the Solaris Studio compiler.
+	[49a3c72cb539]
+
+	* docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in,
+	include/sudo_eventlog.h, include/sudo_json.h, include/sudo_plugin.h,
+	lib/eventlog/eventlog.c, lib/iolog/iolog_loginfo.c,
+	lib/iolog/regress/iolog_json/check_iolog_json.c, lib/util/json.c,
+	logsrvd/logsrvd_local.c, plugins/audit_json/audit_json.c,
+	plugins/sudoers/sudoers.h, src/env_hooks.c, src/exec_intercept.c,
+	src/net_ifs.c, src/sudo_intercept_common.c, src/sudo_plugin_int.h:
+	Avoid a -Wshadow warning on Solaris 9.
+	[e6bc419fa976]
+
+	* lib/util/mmap_alloc.c:
+	Fix a build error on Solaris 9.
+	[679b60caf5a3]
+
+2022-10-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse.c:
+	Fix display of command tags and options in "sudo -l" when RunAs
+	changes. A new line is started when RunAs changes which means we
+	need to display the command tags and options again. GitHub issue
+	#184
+	[3180777986de]
+
+	* plugins/sudoers/fmtsudoers.c:
+	Fix printing of MYSELF when listing another user's privileges. We
+	need to use list_pw if it is set instead of user_name. GitHub issue
+	#183
+	[268044635b44]
+
+	* NEWS:
+	Update NEWS file with recent changes.
+	[200ac32d330b]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/multiarch.c, lib/util/regress/multiarch/multiarch_test.c,
+	lib/util/sudo_dso.c, lib/util/util.exp.in, src/load_plugins.c:
+	Apply multiarch rules when loading plugins too.
+	[f53fe06fce06]
+
+2022-10-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sudo_dso.c:
+	sudo_dso_load: try multi-arch on Linux if we can't load the path.
+	For example, if loading /usr/lib/libsss_sudo.so fails, try again
+	with /usr/lib/x86_64-linux-gnu/libsss_sudo.so.
+	[4eabffa486b5]
+
+	* MANIFEST, lib/util/Makefile.in,
+	lib/util/regress/open_parent_dir/open_parent_dir_test.c:
+	Add test for sudo open_parent_dir()
+	[2d6b1be616c9]
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test19.out.ok,
+	plugins/sudoers/regress/testsudoers/test19.sh:
+	Add test for matching a literal "" command line argument as "" in
+	sudoers. GitHub issue #182.
+	[ccb5dc8b23ee]
+
+2022-10-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/visudo.man.in, docs/visudo.mdoc.in, plugins/sudoers/visudo.c:
+	Add -I flag to disable editing include files unless there is an
+	error. This can be used when you only want to edit a single sudoers
+	file unless there is a pre-existing syntax error.
+	[18fbf720fdbf]
+
+	* plugins/sudoers/match_command.c:
+	Do not match a literal "" command line argument as "" in sudoers. If
+	the empty string is specified in sudoers, no user args are allowed.
+	GitHub issue #182.
+	[5de0370eddcb]
+
+	* lib/util/sudo_conf.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestamp.c:
+	sudo_secure_open_{file,dir}: always check thatreturn value is not
+	-1. Avoids false positives from static analyzers that can't figure
+	out that the fd is always valid when error is SUDO_PATH_SECURE.
+	[f0ebb2b836b9]
+
+	* lib/iolog/iolog_mkdtemp.c:
+	Correct return value when mkdtempat() fails.
+	[5a491fac8f49]
+
+	* lib/util/mkdir_parents.c:
+	sudo_open_parent_dir: stop before creating the last path component
+	Fix a regression introduced in sudo 1.9.9 where the entire directory
+	path was created instead of just the parent directory.
+	[fdaa5aeb744b]
+
+2022-10-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in, scripts/log2cl.pl:
+	Use "hg log --template" instead of "hg log --style".
+	[63f020404fbb]
+
+2022-09-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/strlcpy_unesc.c, plugins/sudoers/sudoers.c,
+	src/parse_args.c:
+	Mark code that escapes/unescapes "sudo -s cmd args..." for removal.
+	A future version of the plugin API will defer any such escaping to
+	the policy plugin so it can be configurable.
+	[658d1bba4319]
+
+	* NEWS:
+	Update with recent changes.
+	[4a739e30c77f]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in:
+	Improve the description of JSON output.
+	[258b57ce22ab]
+
+2022-09-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL.md, etc/codespell.ignore, lib/eventlog/eventlog.c,
+	plugins/group_file/getgrent.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h,
+	src/exec_nopty.c:
+	Fix typos found by codespell 2.2.1.
+	[3beaf856c861]
+
+	* logsrvd/iolog_writer.c:
+	Change max user-ID and group-ID from INT_MAX to UINT_MAX.
+	[0971e5f9f398]
+
+	* logsrvd/logsrvd_local.c:
+	Add support for NumberList stored in an InfoMessage.
+	[a762fe45e5cc]
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd_local.c,
+	plugins/sudoers/log_client.c:
+	Add missing NULL checks for mandatory fields in protobuf messages.
+	Also no longer reject an InfoMessage with an unknown value_case,
+	just log and ignore it.
+	[41c38e7f075b]
+
+2022-09-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/log_client.c:
+	Don't send ttyname to log server if it is NULL. Otherwise the log
+	server will reject the AcceptMessage because a NULL string is not
+	allowed.
+	[df7fea4bef26]
+
+	* src/exec_nopty.c:
+	HP-UX has struct winsize in termios.h.
+	[5827a1f234fe]
+
+	* plugins/python/Makefile.in, src/Makefile.in:
+	Regen dependencies
+	[817623addc62]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in, src/exec.c,
+	src/exec_nopty.c, src/exec_pty.c,
+	src/regress/intercept/test_ptrace.c, src/sudo_exec.h,
+	src/suspend_nopty.c:
+	Add support for logging stdin/stdout/stderr in the non-pty exec
+	path. If we are logging I/O but not terminal input/output (either
+	because no terminal is present or because that is what the plugin
+	requested), the non-pty exec path is now taken.
+	[205c68d452df]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_iolog.c,
+	src/exec_nopty.c, src/exec_pty.c, src/regress/noexec/check_noexec.c,
+	src/sudo_exec.h, src/sudo_intercept_common.c:
+	Move exec code to call into I/O log plugin to exec_iolog.c. This
+	will be shared with exec_nopty.c in the future to log
+	stdin/stdout/stderr without running the command in a pty. Both
+	exec_pty.c and exec_nopty.c now use the same closure.
+	[45a19e8e3721]
+
+	* plugins/python/python_importblocker.c:
+	Implement find_spec, not the deprecated find_module. Fixes a test
+	failure due to find_module having removed from setuptools.
+	[cc1e68c0ee1e]
+
+2022-09-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/editor.c,
+	plugins/sudoers/regress/editor/check_editor.c:
+	copy_arg: fix copying an escaped backslash GitHub issue #179
+	[d21d95ec5cb0]
+
+2022-09-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/mktemp.c:
+	Use mkdtempat_np() and mkostempsat_np() on macOS
+	[ad0cd430347e]
+
+2022-09-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_iolog.h, lib/iolog/iolog_mkdirs.c,
+	lib/iolog/iolog_mkdtemp.c, lib/util/mkdir_parents.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd_journal.c:
+	Convert remaining uses of sudo_mkdir_parents() to
+	sudo_open_parent_dir().
+	[62fd9644a605]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, scripts/mkdep.pl:
+	Add fchownat() systems without it.
+	[d51316f1026d]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/mktemp.c, plugins/python/regress/iohelpers.h:
+	Add mkdtempat() and mkostempsat() for systems without them.
+	[099468742d16]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in, include/sudo_util.h,
+	lib/util/secure_path.c, lib/util/sudo_conf.c,
+	plugins/sudoers/regress/testsudoers/test11.out.ok,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c:
+	Use sudo_secure_open_file() instead of sudo_secure_file() where
+	possible. Both sudo_secure_open_file() and sudo_secure_open_dir()
+	are now passed a struct stat pointer like sudo_secure_file() and
+	sudo_secure_dir().
+	[c4e4c3f74ea4]
+
+	* include/sudo_util.h, lib/util/mkdir_parents.c,
+	lib/util/secure_path.c, lib/util/util.exp.in,
+	plugins/sudoers/timestamp.c:
+	Fix potential TOCTOU when creating time stamp directory and file.
+	[d36591f966c5]
+
+	* lib/util/mkdir_parents.c:
+	sudo_mkdir_parents: just use memcpy() to copy the path component.
+	Using snprintf() for this is overkill, we need to do the same length
+	check either way.
+	[8ea754871a54]
+
+	* lib/util/Makefile.in:
+	regen
+	[ab40def3376c]
+
+2022-09-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/digest_gcrypt.c:
+	Quiet libgcrypt run-time warning about not being initialized. Fixes
+	Debian bug #1019428 and Ubuntu bug #1397663.
+	[ebf9a6477d5d]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in, plugins/sudoers/audit.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.h,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Split log_{input,output} into log_{stdin,ttyin} and
+	log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin}
+	will be set as well. If log_output is set,
+	log_{stdout,stderr,ttyout} will be set as well. This provides more
+	fine-grained control over I/O logging and makes it possible to
+	disable logging piped or redirected intput or output.
+	[5b7ea42ac63b]
+
+	* LICENSE.md, include/protobuf-c/protobuf-c.h,
+	lib/protobuf-c/protobuf-c.c:
+	Update to protobuf-c 1.4.1 We already had all the relevant fixes so
+	this is just cosmetic.
+	[aa51e48afe49]
+
+	* src/load_plugins.c:
+	new_container: no need to initialize container pointer in
+	declaration. From Li zeming.
+	[729a8a417d88]
+
+2022-09-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Use tcpgid if passed from sudo front-end and use it in
+	tty_present(). This can be used as another indicator that a terminal
+	is present without having to open /dev/tty.
+	[b804b8b7fc03]
+
+2022-09-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudo.man.in,
+	docs/sudo.mdoc.in, docs/sudo_logsrv.proto.man.in,
+	docs/sudo_logsrv.proto.mdoc.in, docs/sudo_logsrvd.conf.man.in,
+	docs/sudo_logsrvd.conf.mdoc.in, docs/sudo_logsrvd.man.in,
+	docs/sudo_logsrvd.mdoc.in, docs/sudo_plugin.man.in,
+	docs/sudo_plugin.mdoc.in, docs/sudo_sendlog.man.in,
+	docs/sudo_sendlog.mdoc.in, docs/sudoers.ldap.man.in,
+	docs/sudoers.ldap.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, docs/sudoers_timestamp.man.in,
+	docs/sudoers_timestamp.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in:
+	Remove most uses of the deprecated Li macro which has no effect.
+	Also fix some other incorrect markup.
+	[8f94cc555092]
+
+2022-09-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in, lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/python/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Use $(GREP) and $(EGREP) variables in Makefile.in files.
+	[cf8d7fb45169]
+
+	* Merge pull request #177 from a1346054/fixes
+
+	Makefile.in: replace `egrep` and fix target name
+	[751aa03eb470]
+
+2022-09-12  a1346054  <36859588+a1346054@users.noreply.github.com>
+
+	* Makefile.in:
+	Fix incorrect makefile target name
+	[318288fb712f]
+
+	* Makefile.in:
+	Use `grep -E` instead of `egrep`
+	[4a2d9543643c]
+
+2022-09-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in:
+	Document apparmor_profile, intercept_verify, and update_ticket.
+	[d55caa1af788]
+
+	* docs/sudo_plugin_python.man.in, docs/sudo_plugin_python.mdoc.in:
+	Fix some of the markup to be more consistent with
+	sudo_plugin.mdoc.in. Also reword a few awkward phrases.
+	[8682c067c38b]
+
+	* docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in:
+	Use correct markup of function arguments and struct members. Also
+	remove most uses of the deprecated Li macro which has no effect.
+	[59b01b9ff183]
+
+	* docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in:
+	Move the init_session() errstr description to where it belongs.
+	[8c1e7cb23d1f]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Fix a typo
+	[591b75013070]
+
+2022-09-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c:
+	log_parse_error: make errstr const to quiet a -Wwrite-strings
+	warning
+	[9827a2a01316]
+
+	* config.h.in, configure.ac, include/sudo_compat.h,
+	include/sudo_debug.h, include/sudo_fatal.h, include/sudo_lbuf.h,
+	include/sudo_util.h, lib/eventlog/eventlog.c,
+	plugins/sudoers/check_aliases.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers.h, plugins/sudoers/defaults.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.h,
+	plugins/sudoers/tsdump.c, plugins/sudoers/visudo.c,
+	src/parse_args.c, src/regress/noexec/check_noexec.c, src/sudo.h:
+	Move gcc-style __attribute__ macros to config.h.in Renamed __malloc
+	-> sudo_malloclike, __printflike -> sudo_printflike, __printf0like
+	-> sudo_printf0like. Add sudo_noreturn instead of
+	__attribute__((__noreturn__)). We do not use stdnoreturn.h since it
+	has been deprecated in C23 in favor of the [[noreturn]] attribute.
+	[ad3c04a1bbb0]
+
+	* plugins/sudoers/visudo.c:
+	Add __printf0like to visudo_track_error().
+	[7a118c40d360]
+
+2022-09-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.y:
+	Back out unintended change in last commit.
+	[5d52c966212d]
+
+	* plugins/sudoers/gram.y, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	It is possibble for sudoerserrorf() to be called with a NULL format.
+	So log_parse_error() needs to check fmt for NULL before using it.
+	[5b779a6888c9]
+
+2022-09-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/UPGRADE.md:
+	Mention how to restore the historic core resource limit behavior.
+	[bfd792bd9d07]
+
+	* plugins/sudoers/audit.c:
+	Set MODE_POLICY_INTERCEPTED for log_subcmds too. This fixes a
+	problem where sub-commands were not being logged to the remote log
+	server, if configured. Since we don't go through
+	sudoers_policy_main() again for log_subcmds, we set the flag in
+	sudoers_audit_accept() instead. The reason this is complicated is
+	that when I/O logging is enabled the initial accept message gets
+	sent as part of the remote logging handshake. GitHub issue #174
+	[297fa6bbd769]
+
+2022-09-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Update with latest changes.
+	[d7ca5db7adc7]
+
+	* docs/cvtsudoers.mdoc.in:
+	Fix typo.
+	[7629516758e2]
+
+	* plugins/sudoers/sudoers.c:
+	Only check the admin flag file once in intercept mode.
+	[c439914e08e1]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in:
+	Document cvtsudoers CSV output format
+	[c5164466cae2]
+
+2022-08-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in:
+	Document cvtsudoers JSON output format
+	[9fce227c2c61]
+
+2022-08-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	Zero out register struct before calling ptrace_getregs(). Quiets a
+	spurious valgrind warning.
+	[32f19e2e508f]
+
+2022-08-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	intercept_verify is fast, but the policy check is (relatively) slow.
+	[0a120a78bd37]
+
+	* src/exec_ptrace.c:
+	Realloc the buffer used to store argv and envp as needed. We now
+	store the vector immediately after the string table. It is possible
+	for argv and its contents to be invalidated by realloc() when
+	reading envp so we store the pointers as offsets until we are done
+	allocating.
+	[7620f3dceac4]
+
+2022-08-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c, src/exec_ptrace.h:
+	ptrace_verify_post_exec: use /proc/PID/cmdline and /proc/PID/environ
+	There is no reason to read these directly from the tracee when we
+	rely on /proc being mounted to access /proc/PID/exe.
+	[5da938210647]
+
+	* src/exec_ptrace.c:
+	Protect ptrace_readv_string() with #ifdef HAVE_PROCESS_VM_READV
+	[cc8e71c4c529]
+
+2022-08-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Rework the intercept section in "Preventing shell escapes".
+	[5e5b1ea90ce1]
+
+	* .github/workflows/codeql-analysis.yml:
+	Update CodeQL Action to v2 using current example config.
+	[d0aa8b4dda28]
+
+	* lib/util/arc4random.c:
+	Suppress PVS-Studio false positive.
+	[32fd02734378]
+
+	* src/exec_intercept.c:
+	intercept_check_policy_req: an empty argv[] is now supported
+	[a668708cc0a9]
+
+	* config.h.in, configure, configure.ac, src/exec_ptrace.c:
+	Use process_vm_readv(2) and process_vm_writev(2) if available. This
+	is faster than reading/writing from/to the remote process one word
+	at a time using PTRACE_PEEKDATA and PTRACE_POKEDATA.
+	[d0c5ed82738c]
+
+	* plugins/sudoers/check.c:
+	Skip all of check_user() for intercept unless intercept_authenticate
+	set. Previously we were calling the PAM approval modules even in
+	intercept mode which can take a lot of time. We may wish to make PAM
+	approval configurable in intercept mode in the future.
+	[e06fbc7e4ca6]
+
+	* plugins/sudoers/sudoers.c:
+	Only set MODE_POLICY_INTERCEPTED on subsequent policy checks. This
+	fixes a bug where MODE_POLICY_INTERCEPTED was set too early if the
+	intercept option was set globally in sudoers. It should only be set
+	after the original command has executed.
+	[8f5d47c2635a]
+
+2022-08-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	intercept_verify also compares the environment. Also mention the
+	overhead involved in checking things.
+	[44da04558285]
+
+2022-08-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	ptrace_getregs: make compat check more generic No need to use
+	different checks for mips and non-mips, the compiler will optimize
+	away the superfluous check.
+	[0f2ff0f3f388]
+
+	* src/preload.c:
+	Correct type of sudoers_audit. GitHub issue #61
+	[17a7806ad3ba]
+
+2022-08-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sesh.c:
+	Fix shadowed variable warning.
+	[e200b6b5b4fd]
+
+2022-08-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.h:
+	Fix shadowed variable warning on aarch64.
+	[84169692bd1c]
+
+	* src/regress/intercept/test_ptrace.c:
+	Quiet another -Wwrite-strings warning.
+	[ff2860056976]
+
+	* src/exec_ptrace.c:
+	ptrace_getregs: try to determine compat mode if caller doesn't know.
+	In ptrace_verify_post_exec(), we don't know whether the executable
+	that is now running is a native or compat binary. In most cases
+	ptrace_getregs() will be able to figure it out for us.
+	[fb0fa29ff554]
+
+	* src/exec_ptrace.c:
+	ptrace_intercept_execve: fail syscall rather than killing process on
+	error. If the execve(2) args are bogus pointers, we should just
+	return an error instead of killing the process. For consistency with
+	the kernel, convert EIO from ptrace(2) to EFAULT. Also convert some
+	ptrace(2) warnings to debug printfs so sudo is less chatty.
+	[3d30c6d28005]
+
+2022-08-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	Treat argv and closure->run_argv of different sizes as a mismatch.
+	If argv and closure->run_argv match up to the point where we hit a
+	NULL but one of them has additional entries, we still need to
+	rewrite argv.
+	[91d522d9c3b6]
+
+	* src/exec_ptrace.c:
+	Handle the case where argc is 0 when allocating space for argv. We
+	need to pass the pathname to the policy plugin in argv[0] so we must
+	be sure to allocate space for it even if argc is 0.
+	[953f92c9e7a5]
+
+	* src/sudo_intercept.c:
+	copy_vector: treat a NULL pointer as an empty vector. Linux
+	execve(2) allows argv to be NULL so we must allocate an empty vector
+	in this case and not return an error.
+	[cf30608ed6cb]
+
+	* src/exec_preload.c:
+	Update debug_decl name for sudo_preload_dso ->
+	sudo_preload_dso_alloc change.
+	[b0db53a62c7a]
+
+	* src/exec_intercept.c:
+	Handle the case where argc is 0 when rebuilding argv. We need to
+	pass the pathname to the policy plugin in argv[0] so we must be sure
+	to allocate space for it even if argc is 0.
+	[10358fc408a1]
+
+	* src/exec_ptrace.c:
+	Handle sysconf(_SC_ARG_MAX) failure, Coverity CID 276504.
+	[ddb88da56bd7]
+
+	* plugins/sudoers/match_digest.c:
+	Avoid a Coverity false positive.
+	[dd9fd747bd7f]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Remove cast from time_t to int to avoid a Coverity false positive.
+	The cast should not be required.
+	[a305b10eb17e]
+
+2022-08-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/group_plugin.c:
+	Use multilib rules to look for a 64-bit group plugin on failure. If
+	sudo_dso_load() fails on a 64-bit system, try to load a 64-bit
+	native version of the file using system-dependent multilib rules. If
+	we don't support multilib on the platform, check for a version of
+	the file that ends in "64" before the .so suffix.
+	[d36bcc89ee34]
+
+	* docs/sudo_plugin.man.in:
+	regen
+	[c14c0882a07d]
+
+2022-08-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/env.c, src/env_hooks.c:
+	In putenv(3) replacement reject a string with no '=' or that starts
+	with one.
+	[59c6e6e5232b]
+
+2022-08-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* LICENSE.md:
+	Update copyright year for embedded zlib.
+	[2c52d016e583]
+
+2022-08-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Use our own arc4random() in preference to the glibc version. The
+	glibc arc4random() may fail in chroot on older kernels and exit.
+	[9b4a62c9f468]
+
+	* lib/util/sudo_dso.c:
+	sudo_dso_load: restore original error for AIX on failure. For AIX,
+	if dlopen() fails we try again with RTLD_MEMBER set and a default
+	member (shr.o or shr_64.o). However, if that also fails, the user
+	will receive a useless error message that doesn't correspond to the
+	actual problem. We now retry the original dlopen() if the fallback
+	to RTLD_MEMBER fails, which has the effect of restoring the original
+	error message.
+	[ec539996a4aa]
+
+2022-08-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #165 from bdrung/xdg-current-desktop
+
+	Add XDG_CURRENT_DESKTOP to initial_keepenv_table
+	[3d2e82e32ea8]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.12.
+	[08c096ada8b2]
+
+	* docs/sudo_plugin.mdoc.in, include/sudo_plugin.h, plugins/python/regr
+	ess/testdata/check_multiple_approval_plugin_and_arguments.stdout,
+	src/exec.c:
+	Bump the sudo plugin minor version. The "update_ticket" entry was
+	added to the settings list and the "intercept_verify" entry was
+	added to the command_info list.
+	[3259f3199798]
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in, plugins/sudoers/check.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.h,
+	src/parse_args.c, src/sudo.c, src/sudo.h, src/sudo_usage.h.in:
+	Add a way to run a command without updating the cached credentials.
+	This can also be used to test for whether or not the user's
+	credentials are currently cached.
+	[f5825a6f881b]
+
+	* Merge pull request #168 from likunyur/lky
+
+	Remove unnecessary initialization and casts.
+	[fcb251c895ce]
+
+	* Merge pull request #169 from kempstonjoystick/main
+
+	Fix incorrect SHA384/512 digest calculation.
+	[f016c3a37255]
+
+2022-08-02  Tim Shearer  <timtimminz@gmail.com>
+
+	* lib/util/sha2.c:
+	Fix incorrect SHA384/512 digest calculation.
+
+	Resolves an issue where certain message sizes result in an incorrect
+	checksum. Specifically, when: (n*8) mod 1024 == 896 where n is the
+	file size in bytes.
+	[e9f235a8d432]
+
+2022-08-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec.c, src/selinux.c, src/sesh.c, src/sudo.c, src/sudo.h:
+	Defer chdir(2) until sesh when running with SELinux. We need to be
+	running with the correct security context or the chdir(2) may fail.
+	GitHub issue #160.
+	[a8713dd21be9]
+
+2022-08-01  Li zeming  <zeming@nfschina.com>
+
+	* lib/util/arc4random.c:
+	util/arc4random: (void*) type pointer passing address could remove
+	cast
+
+	Signed-off-by: Li zeming <zeming@nfschina.com>
+	[aa4e8c73f131]
+
+	* lib/iolog/hostcheck.c:
+	iolog/hostcheck: These two parameters do not need to be initialized
+	and assigned, the following code is directly assigned
+
+	Signed-off-by: Li zeming <zeming@nfschina.com>
+	[dd657435f277]
+
+2022-07-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #166 from c4rlo/patch-1
+
+	visudo.c: add nvim (Neovim) to lineno_editor list
+	[97e0a7b00daa]
+
+2022-07-31  Carlo Teubner  <435950+c4rlo@users.noreply.github.com>
+
+	* plugins/sudoers/visudo.c:
+	visudo.c: add nvim (Neovim) to lineno_editor list
+
+	Neovim supports it: https://neovim.io/doc/user/starting.html#-+
+	[020b59cf0f6b]
+
+2022-07-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Document the TOCTOU issue with intercept mode. Describe how
+	intercept_verify attempts to reduce the risk.
+	[b118de8d4c66]
+
+	* etc/codespell.exclude, etc/codespell.ignore:
+	Update a codespell exclude pattern.
+	[3193ffb4c938]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/policy.c, src/exec_ptrace.c, src/sudo.c, src/sudo.h:
+	Add intercept_verify sudoers option to control execve(2) argument
+	checking.
+	[79131cfb0125]
+
+	* src/exec_ptrace.c:
+	Use PTRACE_EVENT_EXEC to stop execution before return from
+	execve(2). We can now verify that the arguments match what we
+	accepted before the command actually runs. If there is a mismatch,
+	the process is killed. Shell scripts must be handled specially since
+	the path executed will be the interpreter, not the script name.
+	Linux allows interpreters to be nested up to 4 deep.
+	[5e7b1828dbb0]
+
+	* plugins/sudoers/sudoers.c:
+	Only set MODE_POLICY_INTERCEPTED if we are running a command. Fixes
+	an error with "sudo -l" when intercept is enabled globally.
+	[7a1d0ff5a498]
+
+2022-07-29  Benjamin Drung  <bdrung@ubuntu.com>
+
+	* plugins/sudoers/env.c:
+	Add XDG_CURRENT_DESKTOP to initial_keepenv_table
+
+	Qt needs `XDG_CURRENT_DESKTOP` to be set to determine the correct
+	theme.
+
+	Since `DISPLAY` and `XAUTHORITY` are already in the default table of
+	variables to preserve in the environment, just add
+	`XDG_CURRENT_DESKTOP` to it.
+
+	Bug: https://launchpad.net/bugs/1958055 Signed-off-by: Benjamin
+	Drung <bdrung@ubuntu.com>
+	[aa5132684c89]
+
+2022-07-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	The length returned by ptrace_read_string() include the NUL. We were
+	wasting a extra byte in the string table for each entry.
+	[b1220aae7141]
+
+2022-07-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_compat.h, include/sudo_util.h:
+	Use gcc's malloc attribute for malloc-like allocation functions.
+	[bff3b0ab89c5]
+
+	* lib/util/mmap_alloc.c:
+	Avoid a Coverity positive.
+	[81f526688296]
+
+	* src/exec_preload.c:
+	fmtstr: add missing va_end() for the overflow case Coverity CID
+	275335
+	[42a4f4467ca5]
+
+	* lib/util/sudo_debug.c:
+	Fix potential NULL pointer deference found by clang-analyzer.
+	[5b0a9c0f2e71]
+
+	* src/sudo.c, src/sudo_intercept_common.c:
+	Quiet some harmless PVS-Studio warnings.
+	[9b9cc92f0585]
+
+	* src/exec_intercept.c:
+	Reject relative command paths if runcwd is not set. This is now
+	treated as a policy rejection.
+	[bf35a6818c77]
+
+	* src/exec_intercept.c:
+	intercept_check_policy: close saved_dir before returning
+	[04adba5e85fa]
+
+	* src/exec_intercept.c:
+	Change to runcwd during the policy check where possible. Otherwise,
+	attempts to run "./command" from a shell with intercept set will
+	fail if the current working directory is different from the main
+	sudo process.
+	[cd218f081cf2]
+
+2022-07-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_util.h, lib/util/mmap_alloc.c, lib/util/util.exp.in,
+	src/sudo_intercept.c:
+	For preload DSO make copies of cmnd, argv, envp and map them read-
+	only.
+	[56a160c55e4c]
+
+	* src/exec_preload.c, src/sudo_exec.h, src/sudo_intercept.c,
+	src/sudo_intercept_common.c:
+	Use sudo_mmap_alloc functions in DSO-based intercept code.
+	[806dacd141ad]
+
+	* lib/util/snprintf.c:
+	Use sudo_mmap_alloc functions instead of private versions. We no
+	longer need to keep track of the allocation size.
+	[6f375ed7a927]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/mmap_alloc.c, lib/util/util.exp.in:
+	Add sudo_mmap_{alloc,allocarrary,strdup,free} functions. These
+	allocate memory via mmap anonymous regions and store the mapped size
+	immediately before the returned pointer as an unsigned long. They
+	are intended to be used in cases where malloc(3) and free(3) are
+	unsuitable due to concerns about corrupting global state in multi-
+	threaded programs or signal handlers.
+	[803b4a82bedd]
+
+	* docs/sudoers.ldap.man.in, docs/sudoers.ldap.mdoc.in:
+	Sync with schema.OpenLDAP for user/group utf8 support.
+	[14705b52a4f9]
+
+	* Merge pull request #163 from Firstyear/20220725-sudo-ldap-schema
+
+	Update sudoUser to be utf8 in ldap schemas
+	[91354fc2ed23]
+
+	* src/sudo_intercept.c:
+	resolve_path: skip non-regular files
+	[2ed5efdb48ea]
+
+2022-07-25  William Brown  <wbrown@suse.de>
+
+	* docs/schema.OpenLDAP, docs/schema.iPlanet, docs/schema.olcSudo:
+	Update sudoUser to be utf8 in ldap schemas
+
+	In most unix-style LDAP servers, uid is a utf8 string defined by OID
+	1.3.6.1.4.1.1466.115.121.1.15. However, sudoUser was defined as an
+	IA5 String (OID 1.3.6.1.4.1.1466.115.121.1.26) which meant that
+	sudoUser could only represent a subset of possible values.
+
+	In some cases when using sudoers.ldap, the uid from the machine
+	which was utf8 was fed back into sudo which would then issue a
+	search for sudoUsers. If this uid contained utf8 characters, the
+	ldap server would refuse to match into sudoUsers because these were
+	limited to IA5.
+
+	This is a safe-forward upgrade as IA5 is a subset of UTF8 meaning
+	that this change will not impact existing deployments and their
+	rules.
+	[7a47e711ca88]
+
+2022-07-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_intercept.c, src/sudo.c:
+	Make sure the plugin provides a command, argv and envp.
+	[7e4e93118622]
+
+	* lib/util/sudo_debug.c, src/exec_intercept.c, src/exec_preload.c,
+	src/exec_ptrace.c, src/sudo_intercept.c,
+	src/sudo_intercept_common.c:
+	Linux execve(2) allows argv or envp to be NULL. Add checks to make
+	sure we don't deference a NULL pointer.
+	[be380b71df62]
+
+2022-07-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_intercept.c:
+	intercept_check_policy: add oom label and fix approval failure case.
+	If the approval plugin fails we need to set the state to
+	POLICY_REJECT just like we do if the policy rejected the command.
+	[e7ba37e32af7]
+
+2022-07-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_csv.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_merge.c, plugins/sudoers/def_data.in,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/policy.c, src/apparmor.c:
+	Fix a few whitespace issues.
+	[deb6391a3ba0]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Increase the realloc increment from 128 to 1024. The contents of the
+	env_add array should not include the leading "env=" prefix.
+	[d8c0067fc3fd]
+
+	* plugins/sudoers/env.c:
+	sudo_putenv_nodebug: require that the environment string include a
+	'='
+	[fb200f301070]
+
+2022-07-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/visudo.c:
+	If update_defaults() fails, treat it as a parse error.
+	[d9860eb2257a]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add additional PVS-studio suppression comments for generated code.
+	[dfb89944dcce]
+
+2022-07-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match_command.c:
+	Fix compilation error when SUDOERS_NAME_MATCH is defined.
+	[3b76707bc5fa]
+
+	* plugins/sudoers/match_command.c:
+	Fix a NOPASSWD issue with a non-existent command when fdexec=always
+	In command_matches_all(), if the command is fully-qualified and
+	open_cmnd() return false, only treat it as an error if we are able
+	to stat(2) the command. For "sudo ALL" a non-existent command is not
+	an error.
+	[e2d756137ce9]
+
+	* plugins/sudoers/regress/testsudoers/test18.sh:
+	Quote ^foo$ on command line to protect it from the shell.
+	[0f1274e0be93]
+
+2022-07-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/regress/logwrap/check_wrap.c,
+	lib/util/regress/closefrom/closefrom_test.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsig/strsig_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/strtofoo/strtobool_test.c,
+	lib/util/regress/strtofoo/strtoid_test.c,
+	lib/util/regress/strtofoo/strtomode_test.c,
+	lib/util/regress/strtofoo/strtonum_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/uuid/uuid_test.c,
+	logsrvd/regress/logsrvd_conf/logsrvd_conf_test.c,
+	plugins/python/regress/check_python_examples.c, src/exec_ptrace.c:
+	Add explicit include of unistd.h for getopt(3) and related
+	variables.
+	[e1c369cd5ae8]
+
+2022-07-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c, src/sudo_intercept_common.c:
+	Merge pull request #161 from likunyur/lky
+
+	sudoers/cvtsudoers: Remove the repeated ';' from code
+	[9b961a3b9c86]
+
+2022-07-04  Li kunyu  <kunyu@nfschina.com>
+
+	* src/sudo_intercept_common.c:
+	src/send: Remove the repeated ';' from code
+
+	Signed-off-by: Li kunyu <kunyu@nfschina.com>
+	[6fc809eac0b1]
+
+	* plugins/sudoers/cvtsudoers.c:
+	sudoers/cvtsudoers: Remove the repeated ';' from code
+
+	Signed-off-by: Li kunyu <kunyu@nfschina.com>
+	[75582c880c30]
+
+2022-07-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/timegm.c:
+	In timegm() initialize tm_isdst to 0 like tzcode does.
+	[d3f2d10c3559]
+
+2022-06-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/intercept.pb-c.h, include/sudo_event.h,
+	src/exec_intercept.c, src/exec_intercept.h, src/intercept.pb-c.c,
+	src/intercept.proto, src/sudo_intercept_common.c:
+	Stop sending an InterceptResponse to a PolicyCheckRequest for
+	log_subcmds. There's no real reason for the command to wait for sudo
+	send back a response that will always be a PolicyAcceptMessage.
+	[d2fe28a652d0]
+
+	* plugins/sudoers/sudoers.c:
+	sudoers_main: defer setting return value until the end when running
+	a command Otherwise, we could return success when there was an error
+	from a system call or memory allocation failure.
+	[bd993a2948ce]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Save the initial command run via sudo and use it when logging exit
+	status. Otherwise, if we are in intercept mode or logging sub-
+	commands the exit status will be logged with the wrong command.
+	[54e3494473ac]
+
+2022-06-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/zlib/zconf.h.in:
+	Define _LARGEFILE64_SOURCE if _FILE_OFFSET_BITS == 64. Fixes a
+	-Wwrite-strings warning on 32-bit systems.
+	[61eff691496f]
+
+	* lib/util/strsignal.c:
+	Quiet another -Wwrite-strings warning.
+	[a03bb85d581d]
+
+	* lib/protobuf-c/protobuf-c.c:
+	Fix a clang analyzer 14 warning about a possible NULL deref.
+	[4c0db4ac3e1d]
+
+	* lib/iolog/Makefile.in, lib/logsrv/Makefile.in,
+	lib/protobuf-c/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Regenerate dependencies
+	[ff7de2b59097]
+
+	* scripts/mkdep.pl:
+	Do not check files generated by protbuf-c with PVS-Studio
+	[86f56c21339f]
+
+	* logsrvd/logsrv_util.c, logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_queue.c, logsrvd/sendlog.c, logsrvd/tls_client.c,
+	plugins/sudoers/log_client.c, src/sudo_intercept_common.c:
+	Quiet some harmless PVS Studio warnings.
+	[476fbef7a0c4]
+
+	* logsrvd/logsrvd_conf.c, logsrvd/sendlog.c:
+	Use "unable to allocate memory" warning on malloc failure. This is
+	consistent with the rest of the sudo source code.
+	[5954fc067647]
+
+	* lib/eventlog/Makefile.in, lib/fuzzstub/Makefile.in,
+	lib/iolog/Makefile.in, lib/iolog/host_port.c,
+	lib/logsrv/Makefile.in, lib/protobuf-c/Makefile.in,
+	lib/util/Makefile.in, lib/util/getentropy.c, lib/util/roundup.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrv_util.c, logsrvd/logsrvd.c,
+	logsrvd/logsrvd_conf.c, logsrvd/logsrvd_journal.c,
+	logsrvd/logsrvd_local.c, logsrvd/logsrvd_queue.c,
+	logsrvd/logsrvd_relay.c, logsrvd/sendlog.c, logsrvd/tls_client.c,
+	logsrvd/tls_init.c, plugins/sudoers/log_client.c, src/Makefile.in,
+	src/apparmor.c:
+	Add missing PVS Studio Open Source comments. Also avoid checking
+	protobuf-c source and protobuf-c generated files.
+	[e1277c1f6585]
+
+	* lib/iolog/host_port.c, lib/iolog/hostcheck.c, lib/util/roundup.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrv_util.c, logsrvd/logsrvd.c,
+	logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_journal.c, logsrvd/logsrvd_local.c,
+	logsrvd/logsrvd_queue.c, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c,
+	logsrvd/sendlog.h, logsrvd/tls_client.c, logsrvd/tls_common.h,
+	logsrvd/tls_init.c, plugins/python/pyhelpers.h,
+	plugins/python/regress/iohelpers.h, plugins/sudoers/log_client.c:
+	Use #include <config.h> not #include "config.h" for consistency.
+	Otherwise, some compilers may do the wrong thing in a build dir if
+	there is a config.h file in the source dir too.
+	[79aaab18dc6d]
+
+2022-06-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/group_plugin.c:
+	Update group_plugin_load() stub to match its prototype.
+	[9ea7126e6d5c]
+
+	* configure, configure.ac, include/sudo_iolog.h,
+	lib/eventlog/eventlog.c, lib/eventlog/logwrap.c,
+	lib/iolog/host_port.c, lib/iolog/regress/host_port/host_port_test.c,
+	lib/iolog/regress/iolog_mkpath/check_iolog_mkpath.c, lib/util/aix.c,
+	lib/util/getgrouplist.c, lib/util/getopt_long.c, lib/util/lbuf.c,
+	lib/util/logfac.c, lib/util/logpri.c,
+	lib/util/regress/progname/progname_test.c, lib/util/snprintf.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_local.c, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c,
+	plugins/audit_json/audit_json.c,
+	plugins/python/python_convmessage.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/sudo_python_module.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_csv.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/editor.c,
+	plugins/sudoers/env.c, plugins/sudoers/exptilde.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/insults.h, plugins/sudoers/iolog.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/log_client.c, plugins/sudoers/logging.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c,
+	plugins/sudoers/regress/editor/check_editor.c,
+	plugins/sudoers/regress/exptilde/check_exptilde.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/serialize_list/check_serialize_list.c,
+	plugins/sudoers/regress/unescape/check_unesc.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoers_hooks.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/edit_open.c, src/exec_common.c, src/parse_args.c,
+	src/regress/noexec/check_noexec.c, src/selinux.c, src/sudo.c,
+	src/sudo_edit.c, src/sudo_intercept.c:
+	Make sudo pass -Wwrite-strings
+	[7ac3dd7b1634]
+
+	* configure, configure.ac:
+	A typo prevented -Wno-deprecated-declarations from being used on
+	macOS.
+	[4d6d4b9e7191]
+
+2022-06-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/preload.c:
+	Fix missing prototype warning.
+	[66e460d3c1d2]
+
+	* lib/zlib/zconf.h.in:
+	Define _LFS64_LARGEFILE, _LARGEFILE64_SOURCE if 64-bit or
+	_LARGE_FILES set. autoconf does not define _LARGEFILE64_SOURCE by
+	default but zlib expects it (its own configure script will define
+	it). Fixes a missing prototype for crc32_combine_gen64() on AIX and
+	HP-UX.
+	[c5b314bebbcb]
+
+	* configure, configure.ac, include/sudo_iolog.h, include/sudo_util.h,
+	lib/iolog/host_port.c, lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	lib/iolog/regress/iolog_json/check_iolog_json.c,
+	lib/iolog/regress/iolog_timing/check_iolog_timing.c,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/mktemp/mktemp_test.c, lib/util/strtoid.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c, logsrvd/sendlog.c,
+	plugins/python/pyhelpers.c, plugins/python/python_plugin_approval.c,
+	plugins/python/python_plugin_approval_multi.inc,
+	plugins/python/python_plugin_audit.c,
+	plugins/python/python_plugin_audit_multi.inc,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_group.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_io_multi.inc,
+	plugins/python/python_plugin_policy.c,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/sudo_python_module.c, plugins/sudoers/audit.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/iolog.c, plugins/sudoers/log_client.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_stubs.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/stubs.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/tsgetgrpw.h,
+	plugins/sudoers/unesc_str.c, src/copy_file.c, src/exec_ptrace.c,
+	src/load_plugins.c, src/net_ifs.c, src/sudo.h, src/sudo_intercept.c,
+	src/sudo_intercept_common.c, src/sudo_noexec.c:
+	Make sudo pass -Wmissing-prototypes
+	[195b024b9f54]
+
+	* src/exec_ptrace.c:
+	Include inttypes.h if stdint.h is not present. Bug #1035
+	[da6185c4c418]
+
+2022-06-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	readlink(2) does NUL-terminate the buffer, do it manually. Fixes a
+	bug where the current working directory could include garbage in
+	intercept mode using ptrace(2).
+	[dc7c547f518f]
+
+	* src/exec_preload.c, src/sudo_exec.h, src/sudo_intercept_common.c:
+	sudo_preload_dso: make the envp function argument const This lets us
+	fix an inappropriate cast in sudo_intercept_common.c.
+	[c2fa860b684e]
+
+	* src/exec_intercept.c:
+	intercept_write: remove unused CD_USE_PTRACE code. It is not
+	possible to end up in intercept_write when CD_USE_PTRACE is set.
+	[f8bdc5e37294]
+
+2022-06-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_11p3 for changeset 6e671475b373
+	[59e5766213e9] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Merge sudo 1.9.11p3 from tip.
+	[6e671475b373] [SUDO_1_9_11p3] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.11p3
+	[c96ded63ae46]
+
+	* src/exec_intercept.c, src/sudo_intercept_common.c:
+	Set TCP_NODELAY on the socket used for intercept IPC to reduce
+	latency. On some systems, Nagle's algorithm was delaying receipt of
+	the data, causing commands with intercept or log_subcmds to run
+	slowly. Related to Bug #1034.
+	[11b129850ac1]
+
+	* src/sudo_intercept_common.c:
+	Use blocking I/O when talking to the sudo process. Also check for
+	EAGAIN/EINTR when reading the message size. Fixes a problem seen on
+	AIX where recv_intercept_response() could fail unexpectedly. Bug
+	#1034.
+	[8554618665a2]
+
+	* src/exec_intercept.c:
+	Add debug printfs when send/recv return EAGAIN or EINTR. These are
+	not actually errors but can help gain insight into what is going on
+	and, in the case of EAGAIN, whether or not there may be a kernel
+	resource starvation problem.
+	[fd2dee906d2f]
+
+2022-06-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c:
+	log_exit_status: make local variables match struct evlog members.
+	[f93d5141e818]
+
+2022-06-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/getgrouplist.c:
+	Quiet a compiler warning on macOS. The getgrouplist() groups array
+	on macOS is int * instead of gid_t *.
+	[c64bf72a1416]
+
+2022-06-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_11p2 for changeset 9e4705cb1db5
+	[2a4b6b814432] <1.9>
+
+	* NEWS, configure, configure.ac, include/sudo_compat.h:
+	Merge sudo 1.9.11p2 from tip.
+	[9e4705cb1db5] [SUDO_1_9_11p2] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.11p2
+	[9505276e5c97]
+
+2022-06-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.h:
+	Fix compilation on Linux/x32; GitHub issue #158
+	[8cebfdd49205]
+
+2022-06-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c:
+	Fix pasto in comment after HAVE_PRIV_SET #endif
+	[2275ab3b016d]
+
+	* include/sudo_compat.h:
+	Fix typo, we should define SSIZE_MAX if it is not defined.
+	[51c68f801479]
+
+2022-06-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/env.c:
+	Change black list -> blocklist This was missed in the previous
+	conversion.
+	[da610ebb5cb1]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/log_client.c, plugins/sudoers/log_client.h,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoers.h:
+	Save a pointer to the event_alloc parameter in the plugin open
+	function. That way we don't need to pass event_alloc around to the
+	log client functions.
+	[a8a47f3770b3]
+
+	* lib/protobuf-c/protobuf-c.c:
+	Fix regression with zero-length messages introduced in protobuf-c PR
+	500.
+	[42062b9f75d5]
+
+2022-06-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_11p1 for changeset 06b0f12fe91c
+	[feb8ae553833] <1.9>
+
+	* NEWS, config.h.in, configure, configure.ac:
+	Merge sudo 1.9.11p1 from tip.
+	[06b0f12fe91c] [SUDO_1_9_11p1] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.11p1
+	[7fcfdaacb15e]
+
+2022-06-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	Make read and write events persistent and disable as needed. For the
+	read callback, disable reader when the buffer is full. For the write
+	callback, disable writer when the buffer is consumed.
+	[2b6953dc4224]
+
+	* config.h.in, configure, configure.ac, src/sudo_exec.h,
+	src/sudo_noexec.c:
+	Check for SECCOMP_MODE_FILTER not SECCOMP_SET_MODE_FILTER. This
+	matches the actual prctl() call we use.
+	[4222768293d1]
+
+	* Merge pull request #157 from 0x2b3bfa0/improve-tag-spec-ebnf-docs
+
+	Improve Tag_Spec EBNF documentation
+	[f528335aded5]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c:
+	Treat EINTR in a callback like we do EAGAIN. We shouldn't get EINTR
+	in practice since we set SA_RESTART when registering signal handlers
+	but it doesn't hurt to be consistent.
+	[acf3394e2df2]
+
+	* Merge pull request #156 from delroth/aarch64-build
+
+	exec_ptrace: fix missing sudo_pt_regs on aarch64
+	[a7062c609a96]
+
+2022-06-07  Pierre Bourdon  <delroth@gmail.com>
+
+	* src/exec_ptrace.h:
+	exec_ptrace: fix missing sudo_pt_regs on aarch64
+
+	AArch64 already had an existing "user_pt_regs" struct and didn't
+	need a struct alias before the renaming to "sudo_pt_regs". Make the
+	code build again by adding the now missing alias.
+
+	Fixes: 2eb8ff17
+	[3b55f40e9b83]
+
+2022-06-07  Helio Machado  <0x2b3bfa0+git@googlemail.com>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Improve Tag_Spec EBNF documentation
+	[7e23ec31d124]
+
+2022-06-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #154 from 0x2b3bfa0/fix-tag-spec-docs
+
+	Add missing colon in Tag_Spec documentation
+	[ec8f4610b677]
+
+	* Merge pull request #152 from particleflux/fix-sudoers-typo
+
+	Fix typo in sudoers comment
+	[bbbcff4c14ba]
+
+2022-06-07  Helio Machado  <0x2b3bfa0+git@googlemail.com>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Add missing colon in Tag_Spec documentation
+	[e6f4c612e22a]
+
+2022-06-07  Stefan Linke  <particleflux@gmail.com>
+
+	* plugins/sudoers/sudoers.in:
+	Fix typo in sudoers comment
+
+	Fix a typo in the sudoers comment about `maxseq` param.
+
+	Introduced by 906eb19ece47023c659b4b3db2e7a6bb57dff0d9 in 1.9.11.
+	[b38fae41b3eb]
+
+2022-06-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/protobuf-c/protobuf-c.c:
+	Only shift unsigned values to avoid implementation-specific
+	behavior. This converts the arithmetic shifts to logical shifts.
+	[e25aa8e9891a]
+
+	* lib/protobuf-c/protobuf-c.c:
+	Fix issue protobuf-c#499: unsigned integer overflow Signed-off-by:
+	10054172 <hui.zhang@thalesgroup.com>
+	[f3637be4df4f]
+
+	* include/sudo_event.h, lib/util/event_select.c:
+	Fix building with select (not poll) when fd_set is not defined in
+	sys/types.h. We can use a void * for the fd_set arrays and just add
+	a cast when using the FD_SET macros.
+	[5c636cbc11f0]
+
+	* src/exec_pty.c:
+	Reinstall the event handler if we get EAGAIN from read/write
+	callback. The read and write events do not set SUDO_EV_PERSIST so we
+	need to explicitly re-enable the event if there is still data to be
+	read. Bug #963.
+	[0006cb6531f4]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c:
+	If write(2) returns EAGAIN just re-enter the event loop. This is
+	consistent with how we handle EAGAIN for read(2).
+	[e6478d917a0f]
+
+	* .hgtags:
+	Added tag SUDO_1_9_11 for changeset d495c99554f7
+	[74c59bc5c323] <1.9>
+
+	* NEWS, config.h.in, configure, configure.ac, include/sudo_compat.h,
+	logsrvd/tls_init.c, plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Merge sudo 1.9.11 from tip.
+	[d495c99554f7] [SUDO_1_9_11] <1.9>
+
+	* docs/sudo_plugin_python.man.in, docs/sudo_plugin_python.mdoc.in:
+	Document how setting ModulePath affects the Python search path. Also
+	advise the user to use a unique prefix to avoid name space
+	collisions with installed Python modules. Bug #1031.
+	[68a9d50d7806]
+
+	* configure, configure.ac, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in:
+	Add EXAMPLES variables for use in the man pages for the examples
+	directory.
+	[148272d9a6d3]
+
+2022-06-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po:
+	Updated translations from translationproject.org
+	[985902730e5b]
+
+	* plugins/sudoers/po/hr.mo, po/hr.mo:
+	Rebuild Croatian message catalog.
+	[438136f65c13]
+
+2022-06-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .gitignore, .hgignore:
+	Add new test binaries to the ignore files.
+	[ea9de2ded48d]
+
+	* po/cs.mo, po/cs.po:
+	Updated translations from translationproject.org
+	[eac0aba546ed]
+
+	* lib/protobuf-c/protobuf-c.c:
+	Define WORDS_BIGENDIAN on big endian systems. Instead of a configure
+	check, we use endian.h (or a fallback).
+	[4d5603a9528c]
+
+	* include/intercept.pb-c.h, include/log_server.pb-c.h,
+	include/protobuf-c/protobuf-c.h, lib/protobuf-c/protobuf-c.c,
+	scripts/unanon:
+	Update to protobuf-c 1.4.0
+	[47ff9b8bab21]
+
+	* logsrvd/logsrvd.c, plugins/sudoers/cvtsudoers_csv.c:
+	Quiet two clang analyzer false positives.
+	[2c878f7853cc]
+
+	* src/exec_intercept.c:
+	Move a comment to the correct location.
+	[caacb3fae078]
+
+	* logsrvd/logsrvd.c:
+	union sockaddr_union: pass in sockaddr_union * instead of sockaddr
+	*. This eliminates the need for a few casts and is consistent with
+	how create_listener() is written.
+	[4def05f8d895]
+
+	* src/exec_ptrace.c:
+	Eliminate some dead stores that clang-analyzer complains about.
+	[3aac29fe0101]
+
+	* src/exec_ptrace.c:
+	ptrace_read_vec: don't try to free memory on the error path This is
+	leftover from when ptrace_read_string() allocated its own memory.
+	[7f5b5d21bce9]
+
+	* config.h.in, configure, configure.ac, src/sudo_intercept.c:
+	Avoid using vfork(2) in the DSO system(3) wrapper. Traditional
+	vfork(2) semantics make it unsafe for use for more than just
+	vfork(2) + execve(2).
+	[9a8ce7aef55d]
+
+2022-06-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* po/vi.mo, po/vi.po:
+	Updated translations from translationproject.org
+	[e3197ef8a98d]
+
+	* NEWS:
+	Mention sudo_logsrvd.conf "log_server" parsing fix.
+	[575a31b83bfd]
+
+	* MANIFEST, logsrvd/Makefile.in,
+	logsrvd/regress/logsrvd_conf/sudo_logsrvd.conf.1.in,
+	logsrvd/regress/logsrvd_conf/sudo_logsrvd.conf.2.in,
+	logsrvd/regress/logsrvd_conf/tls/sudo_logsrvd.conf.1.in,
+	logsrvd/regress/logsrvd_conf/tls/sudo_logsrvd.conf.2.in:
+	For logsrvd_conf_test include both tls and non-tls configs.
+	[ec1815793aab]
+
+	* MANIFEST, logsrvd/Makefile.in,
+	logsrvd/regress/logsrvd_conf/cacert.pem,
+	logsrvd/regress/logsrvd_conf/logsrvd_cert.pem,
+	logsrvd/regress/logsrvd_conf/logsrvd_conf_test.c,
+	logsrvd/regress/logsrvd_conf/logsrvd_dhparams.pem,
+	logsrvd/regress/logsrvd_conf/logsrvd_key.pem,
+	logsrvd/regress/logsrvd_conf/sudo_logsrvd.conf.1.in,
+	logsrvd/regress/logsrvd_conf/sudo_logsrvd.conf.2.in:
+	Add a simple regression test for logsrvd.conf parser. Unlike the
+	parser fuzzer, this includes sample certs and keys. This test would
+	have detected the BIO_new_file() bug in set_dhparams().
+	[7ddabb9d022f]
+
+	* logsrvd/logsrvd_conf.c:
+	Fix inverted logic when setting server_log. A value that starts with
+	a '/' should be treated as a path.
+	[8941fd924fbf]
+
+	* plugins/audit_json/Makefile.in, plugins/sample_approval/Makefile.in:
+	Use abs_top_builddir instead of `pwd`/$(top_builddir).
+	[0f4e20a7aeed]
+
+2022-06-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/regress/parse_gids/parse_gids_test.c:
+	Plug a memory leak.
+	[8a9eb498ed55]
+
+	* plugins/sudoers/parse_ldif.c:
+	Fix bug in last commit, need to reinitialize role to NULL.
+	[1e454b967993]
+
+	* plugins/sudoers/parse_ldif.c:
+	Simplify the check for when we can reuse the previous user and host
+	specs. This makes the code easier to read and quiets a cppcheck
+	false positive.
+	[037c4943f1ac]
+
+	* docs/Makefile.in:
+	Install the plugin man pages in section 5 (or 4 for System V). The
+	manual had the correct section in the text but was installed in the
+	wrong directory.
+	[5df7d3f9a010]
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/ro.mo, plugins/sudoers/po/ro.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po, po/de.mo,
+	po/de.po, po/eo.mo, po/eo.po, po/fr.mo, po/fr.po, po/hr.mo,
+	po/hr.po, po/ko.mo, po/ko.po, po/pl.mo, po/pl.po, po/ro.mo,
+	po/ro.po, po/uk.mo, po/uk.po:
+	Updated translations from translationproject.org
+	[9ac84e5c9250]
+
+	* NEWS:
+	Sudo now supports intercepting system(3).
+	[a46db96a3b03]
+
+2022-05-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/log_client.c:
+	Only display "unable to connect to log server" warning once.
+	Previously, in intercept mode, if the log server is unreachable the
+	message would be printed for each sub-command.
+	[df4c53518bb7]
+
+	* src/exec.c, src/exec_monitor.c, src/exec_nopty.c, src/sudo_exec.h:
+	When using ptrace(2), push the point where we suspend into
+	exec_cmnd(). This should reduce the amount of time the child has to
+	wait for the parent to use PTRACE_SEIZE to seize control and then
+	PTRACE_CONT to continue the child.
+	[f9caab4bf18b]
+
+	* config.h.in, configure, configure.ac, src/sudo_intercept.c:
+	Add configure check for vfork(2) and fall back to fork(2) if
+	missing.
+	[ddfaba8d2a09]
+
+	* docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, src/intercept.exp.in, src/sudo_intercept.c:
+	Add support for intercepting the system(3) function. This also means
+	we can log system(3) with log_subcmds.
+	[aca241d96c0b]
+
+	* include/compat/endian.h:
+	Newer compilers define __BYTE_ORDER__ and
+	__ORDER_{BIG,LITTLE}_ENDIAN__ Also add riscv the little endian list.
+	[55731e5517fc]
+
+2022-05-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	On AIX, fmemopen(3) has a bug where feof() returns false at EOF. See
+	https://www.ibm.com/support/pages/apar/IJ11845
+	[a703278bceed]
+
+2022-05-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/defaults.c:
+	Fix potential signed integer overflow on 32-bit CPUs. Converting
+	fractional minutes to nanoseconds could overflow a 32-bit integer,
+	use long long instead.
+	[b1d2afc0cc4d]
+
+	* plugins/sudoers/Makefile.in:
+	Fix path to example sudoers file, it is now in the build dir.
+	[899850a04adf]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	init_options: initialize apparmor_profile to NULL
+	[ad0de9e0474f]
+
+	* NEWS:
+	Update with latest 1.9.11 changes.
+	[12650d2b6184]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Fix typo
+	[ce83f628330c]
+
+	* docs/CONTRIBUTORS.md:
+	Update contributors.
+	[5b69f27ea398]
+
+	* logsrvd/tls_init.c:
+	Fix uninitialized use of ca_store when building with wolfSSL.
+	[e7cc6d8d9f7e]
+
+	* docker/debian/testing/Dockerfile, docker/ubuntu/devel/Dockerfile,
+	docker/ubuntu/latest/Dockerfile, docker/ubuntu/rolling/Dockerfile:
+	Newer Debian/Ubuntu uses libsepol-dev not libsepol1-dev.
+	[b2c1326bfb0d]
+
+	* configure, configure.ac, plugins/sudoers/def_data.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/toke.c, src/Makefile.in:
+	Regenerate files after merging AppArmor integration.
+	[d24fcec2cb87]
+
+	* Merge pull request #148 from kernelmethod/apparmor_support
+
+	Add AppArmor support to sudo
+	[fcbfb2410afd]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	src/parse_args.c, src/sudo.c, src/sudo.h:
+	Merge branch 'main' into apparmor_support
+	[7832ecc5eb7f]
+
+2022-05-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_intercept.c:
+	Pass envp, not environ, to real execve() from exec_wrapper() if
+	possible. The replacement execve() function was passing the global
+	environ to exec_wrapper() instead of the envp parameter. This caused
+	the command to be run with the wrong environment on AIX systems, and
+	possibly others, when intercept or log_subcmds was enabled. Bug
+	#1030.
+	[dc0187c68c1b]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update .pot files for 1.9.11
+	[b4c8ec57842f]
+
+	* src/exec_ptrace.c:
+	Consolidate some translatable strings.
+	[05dae7c3c8da]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_journal.c,
+	logsrvd/logsrvd_relay.c, logsrvd/sendlog.c,
+	plugins/sudoers/log_client.c, src/exec_intercept.c:
+	Standardize protobuf "unable to unpack" warning messages.
+	[6f4e026c7a02]
+
+	* docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, plugins/python/regress/testdata/check_multipl
+	e_approval_plugin_and_arguments.stdout, src/exec.c:
+	Bump plugin minor version and document new intercept-related
+	settings. There should have been a minor version bump for sudo 1.9.8
+	when intercept was originally implemented.
+	[2b7591704df4]
+
+2022-05-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Reset intercept_allow_setid if intercept_type changes from trace to
+	dso. But only reset intercept_allow_setid if the user didn't
+	explicitly set it.
+	[e398111d824e]
+
+2022-05-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo-logsrvd.pp, etc/sudo-python.pp, etc/sudo.pp:
+	CentOS Stream only uses a major version number, no minor version.
+	This prevents the packages from being created as foo.el.arch.rpm
+	since we were assuming that the version number was two digits.
+	[a3caed91ea8c]
+
+	* src/exec_ptrace.c, src/exec_ptrace.h:
+	Add support for running o32 and n32 binaries on mips64.
+	[887ab363f2a4]
+
+	* src/exec_ptrace.c, src/exec_ptrace.h, src/sudo_exec.h:
+	Enable ptrace support for MIPS but only for log_subcmds. It is not
+	possible to change the syscall return value on MIPS so we cannot
+	support full intercept mode. Another complication on MIPS is that if
+	a system call is invoked via syscall(__NR_###), v0 holds
+	__NR_O32_Linux and the real syscall is in the first arg (a0) and
+	other args are shifted by one.
+	[0345a4137047]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.h,
+	src/exec_ptrace.c, src/parse_args.c, src/sudo.c, src/sudo.h,
+	src/sudo_exec.h:
+	Add intercept_type sudoers option to set intercept/log_subcmds
+	mechanism.
+	[b97e461f7da1]
+
+2022-05-23  kernelmethod  <wss2ec@virginia.edu>
+
+	* MANIFEST, include/sudo_debug.h, src/Makefile.in, src/apparmor.c,
+	src/parse_args.c, src/sudo.c, src/sudo.h:
+	Add an apparmor_profile sudo setting
+
+	Define a new sudo setting, `apparmor_profile`, that can be used to
+	pass in an AppArmor profile that should be used to confine commands.
+	If apparmor_profile is specified, sudo will execute the command
+	using the new `apparmor_execve` function, which confines the command
+	under the provided profile before exec'ing it.
+	[a54897efe031]
+
+	* plugins/sudoers/check.c, plugins/sudoers/cvtsudoers_csv.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_merge.c, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.dict,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.dict,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/toke.l:
+	Add an APPARMOR_PROFILE user spec option to sudoers
+
+	sudoers now supports an APPARMOR_PROFILE option, which can be
+	specified as e.g.
+
+	 alice ALL=(ALL:ALL) APPARMOR_PROFILE=foo ALL
+
+	The line above says "user alice can run any command as any
+	user/group, under confinement by the AppArmor profile 'foo'."
+	Profiles can be specified in any way that complies with the rules of
+	aa_change_profile(2). For instance, the sudoers configuration
+
+	 alice ALL=(ALL:ALL) APPARMOR_PROFILE=unconfined ALL
+
+	allows alice to run any command unconfined (i.e., without an
+	AppArmor profile), while
+
+	 alice ALL=(ALL:ALL) APPARMOR_PROFILE=foo//&bar ALL
+
+	tells sudoers that alice can run any command under the stacked
+	AppArmor profiles 'foo' and 'bar'.
+
+	The intention of this option is to give sysadmins on Linux distros
+	supporting AppArmor better options for fine-grained access control.
+	Among other things, this option can enforce mandatory access control
+	(MAC) over the operations that a privileged user is able to perform
+	to ensure that they cannot privesc past the boundaries of a
+	specified profile. It can also be used to limit which users are able
+	to get unconfined system access, by enforcing a default AppArmor
+	profile on all users and then specifying
+	'APPARMOR_PROFILE=unconfined' for a privileged subset of users.
+	[2afe8c910959]
+
+	* config.h.in, configure.ac, scripts/mkdep.pl, scripts/mkpkg:
+	Add a --with-apparmor build flag
+
+	Add a new build flag, --with-apparmor, that builds sudo with
+	AppArmor support. Modify the build script for Debian and Ubuntu to
+	enable this flag by default.
+	[596b4e6dce4d]
+
+	* INSTALL.md, docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Add documentation for AppArmor support
+
+	- Document the AppArmor userspec option in the sudoers man pages.
+	- Add information about the --with-apparmor build configuration option
+	to INSTALL.md.
+	[524dde965b94]
+
+2022-05-22  kernelmethod  <wss2ec@virginia.edu>
+
+	* docker/debian/latest/Dockerfile, docker/debian/testing/Dockerfile,
+	docker/ubuntu/devel/Dockerfile, docker/ubuntu/latest/Dockerfile,
+	docker/ubuntu/rolling/Dockerfile:
+	Add libapparmor-dev to the Debian and Ubuntu Dockerfiles
+
+	Install libapparmor-dev on Debian- and Ubuntu-based Docker images so
+	that they can build sudo with AppArmor support.
+	[8491c8b6d240]
+
+2022-05-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_nopty.c, src/exec_pty.c:
+	Pass the WUNTRACED flag to waitpid() even if __WALL is present.
+	Otherwise, we won't get the wait status of a suspended command that
+	is not being traced.
+	[7c2b46ec73be]
+
+	* configure, configure.ac, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, logsrvd/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Use explicit library dependencies instead of implicit. We now
+	include all the dependent libraries when linking. Fixes a linking
+	problem on CentOS Stream 9.
+	[6f06cdbb1552]
+
+	* plugins/sudoers/logging.c:
+	mail_parse_errors: allocate the correct amount of space for mail
+	body. Use strlen(), not sizeof(), on "problem parsing sudoers" since
+	it is a tranlated string and not a constant. This was caught by the
+	existing overflow checks.
+	[5aa53136cd9d]
+
+2022-05-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, src/Makefile.in, src/exec_nopty.c, src/exec_pty.c,
+	src/regress/intercept/test_ptrace.c, src/sudo_exec.h,
+	src/suspend_nopty.c:
+	Move code to suspend sudo when no pty is in use to separate file.
+	Use this in test_ptrace.c to be able to suspend just like sudo does.
+	[ddef421918b7]
+
+2022-05-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_nopty.c, src/exec_ptrace.c, src/exec_pty.c,
+	src/regress/intercept/test_ptrace.c, src/sudo_exec.h:
+	Fix suspending a sudo-run shell in ptrace intercept mode with no
+	pty. When ptracing a process, we receive the signal-delivery-stop
+	signal before the group-stop signal. If sudo is running the command
+	in the same terminal, we need to wait until the stop signal is
+	actually delivered to the command before we can suspend sudo itself.
+	If we suspend sudo before receiving the group-stop, the command will
+	be restarted with PTRACE_LISTEN too late and will miss the SIGCONT
+	from sudo.
+	[bf9a482ecddd]
+
+	* docs/TROUBLESHOOTING.md, docs/sudo_logsrvd.man.in,
+	docs/sudo_logsrvd.mdoc.in:
+	OpenSSL 3.x requires the key usage extension be present in CA and
+	certs. Certificates generated with a CA that doesn't set the key
+	usage extension will fail to validate if "tls_verify" is enabled.
+	[3ae4ef1ecf57]
+
+	* logsrvd/tls_init.c:
+	Include the cert or ca file in error messages where applicable.
+	[3e0558886a3d]
+
+	* logsrvd/tls_init.c:
+	Add missing include of string.h for strerror(3).
+	[253a5634d441]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c,
+	logsrvd/tls_client.c, logsrvd/tls_init.c,
+	plugins/sudoers/log_client.c:
+	If ERR_reason_error_string() returns NULL, fall back on
+	strerror(errno). That way we get reasonable error messages for
+	missing files, etc.
+	[d2423ef0e284]
+
+	* logsrvd/tls_init.c:
+	set_dhparams: pass BIO_new_file() "r" for the file mode, not
+	O_RDONLY. Unlike BIO_new_fp(), BIO_new_file() takes an fopen-style
+	mode string.
+	[7a67aec88cb4]
+
+	* src/exec_ptrace.c:
+	The set_sc_arg3, get_sc_arg3 and set_sc_arg4 functions are not used.
+	Use ifdef notyet to disable for now since they may be used in the
+	future.
+	[99d2f2a42da5]
+
+2022-05-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.h, src/sudo_exec.h:
+	Use __x86_64__ preprocessor symbol, not __amd64__ Also clarify a
+	comment about MIPS ptrace.
+	[b02ad513eb64]
+
+	* src/exec_ptrace.h, src/sudo_exec.h:
+	ptrace support has been tested on Debian/s390x. It should also work
+	on s390 but this has not been tested. I have not added a compat mode
+	to trace 31-bit binaries on s390x due to the lack of a test system.
+	[3176433e7456]
+
+	* src/exec_ptrace.h:
+	Define sudo_pt_regs instead of user_pt_regs and include the struct
+	keyword. On s390, the struct is typedef'd without a name.
+	[b2b74f378eef]
+
+	* src/exec_ptrace.h, src/sudo_exec.h:
+	ptrace support has been tested on Debian/riscv64.
+	[e1011074d984]
+
+2022-05-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.in:
+	Add maxseq setting to log_output example. This should make it more
+	obvious that you need to adjust maxseq unless you have (virtually)
+	unlimited disk space.
+	[5203240a248b]
+
+	* scripts/mkpkg:
+	Fix dependency check for libssl on Debian/Ubuntu with OpenSSL 3.
+	Also add check for python 3.10 and 3.11 and remove versions < 3.4.
+	Fixes building on Ubuntu 22.04.
+	[c9114582911c]
+
+2022-05-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.h:
+	Tracing 32-bit arm binaries from a 64-bit sudo works.
+	[c1e1602874ed]
+
+	* src/exec_ptrace.c:
+	ptrace_write_string: the terminating NUL fix was reverted by
+	mistake.
+	[587dd11b2783]
+
+	* src/exec_ptrace.h, src/sudo_exec.h:
+	ptrace-based intercept has now been tested on 32-bit arm
+	[493b17a89e63]
+
+2022-05-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.h:
+	Don't use PTRACE_SET_SYSCALL for 32-bit arm binaries running on
+	aarch64. Use PTRACE_SETREGSET with NT_ARM_SYSTEM_CALL instead just
+	like we would for a 64-bit binary. Newer Linux headers don't define
+	PTRACE_SET_SYSCALL for aarch64.
+	[5930846e9c9e]
+
+	* src/regress/intercept/test_ptrace.c:
+	Replace verbose flag with debug flag. This is more accurate since it
+	actually uses the debug subsystem.
+	[dda8b8af8bd2]
+
+	* src/exec_ptrace.h:
+	Initial cut at MIPS support, untested. Mips is a bit different in
+	that most Linux distros appear to use the n32 ABI on 64-bit CPUs. We
+	don't currently support tracing a 64-bit binary from a 32-bit sudo.
+	We could suport tracing o32 ABI binaries in compat mode, though.
+	[05e5e246463a]
+
+2022-05-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/regress/intercept/test_ptrace.c:
+	Add have_seccomp_action("trap") call to check for
+	SECCOMP_MODE_FILTER.
+	[250c6b72c4f4]
+
+	* src/exec_ptrace.c, src/exec_ptrace.h:
+	Add arm-specific code to set the system call number. Fixes rejection
+	of commands due to policy on arm when in intercept mode.
+	[74c5bd26713b]
+
+	* scripts/mkpkg:
+	Fix OS major version detection on CentOS Stream
+	[cd4d5aaf59a7]
+
+	* src/exec_ptrace.c:
+	Repair ptrace_write_vec() for compat binaries.
+	[77ee302b0631]
+
+	* src/regress/intercept/test_ptrace.c:
+	Fix a crash when not run in verbose mode.
+	[adf481623228]
+
+	* src/exec_ptrace.c:
+	ptrace_intercept_execve: read back the updated syscall args in test
+	mode. This makes it easier to detect problems with the syscall
+	rewrite code when testing with test_ptrace.
+	[4eb9e09d90d9]
+
+2022-05-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c, src/exec_ptrace.h, src/sudo_exec.h:
+	Enable ptrace intercept on powerpc. Tested on ppc64 and ppc64le.
+	[fbd12baa1a02]
+
+	* src/exec_ptrace.c:
+	Fix tracing compat binaries on big endian systems. We need to swap
+	the order of the two 32-bit addresses for big-endian.
+	[375004a3ef09]
+
+	* src/exec_ptrace.c:
+	Move code to write a string vector to ptrace_write_vec().
+	[8401e0397f11]
+
+	* src/exec_ptrace.c:
+	Fix compilation error on systems with no compat arch. Currently only
+	affects i386.
+	[b95c707298c5]
+
+	* MANIFEST, src/Makefile.in, src/exec_intercept.h, src/exec_ptrace.c,
+	src/regress/intercept/test_ptrace.c, src/sudo_exec.h:
+	Add test_ptrace program to test ptrace-based intercept support.
+	[5f7162bcdbfd]
+
+	* src/exec_ptrace.c:
+	Use unsigned long for addresses so we don't have to worry about sign
+	extension.
+	[7a0d4ea2fa70]
+
+2022-05-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	ptrace_write_string: make sure we always write the terminating NUL.
+	We can't check *str for NUL since it may not have been written yet.
+	[9d95217981ac]
+
+	* src/exec_ptrace.c:
+	Fix compilation error when SECCOMP_AUDIT_ARCH_COMPAT is not defined.
+	[3162054bac24]
+
+2022-05-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c, src/exec_ptrace.h:
+	It is now safe to make WORDALIGN use compat (not native) aligment.
+	We allocate space for an extra pointer between argv and the string
+	table for compat binaries so there is no need to align address to
+	sizeof(long).
+	[898626f1cdf6]
+
+	* src/exec_ptrace.c, src/exec_ptrace.h:
+	Use the entire word in ptrace_get_vec_len() and ptrace_read_vec().
+	For compat binaries, use the upper 32-bits as the next word instead
+	of calling ptrace(2) to get it. This reduces the number of ptrace(2)
+	calls when reading argv and envp for compat binaries.
+	[cf5d1ae47dbe]
+
+2022-05-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	We don't need to align strings in the string table. We align the
+	start of the string table to a word boundary to help prevent overlap
+	when writing the pointers. However, the actual strings themselves
+	don't need to be aligned.
+	[219a1a07fc2e]
+
+2022-05-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	Avoid potentially overwriting string table when writing argv. In
+	compat mode, if argc is odd, writing the last pointer of argv will
+	overlap with the address of argv[0], so leave an extra word in
+	between. Also remove incorrect comments about PTRACE_PEEKDATA
+	unaligned access.
+	[13f7e63a31bd]
+
+	* src/exec_ptrace.c, src/exec_ptrace.h:
+	Use native word size for padding and when reading/writing strings.
+	If we try to use the compat word size we can end up in a situation
+	where a subsequent PTRACE_POKEDATA overwrites part of what we've
+	already written since it always writes in sizeof(long) units.
+	[e0d7fdc3f8e2]
+
+2022-05-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_ptrace.c:
+	ptrace_intercept_execve: rewrite path to exec if changed by the
+	policy
+	[089f0e32cf2a]
+
+	* src/exec_ptrace.c:
+	ptrace_intercept_execve: plug memory leak of get_execve_info()
+	buffer
+	[5ce2cf252c80]
+
+	* MANIFEST, src/Makefile.in, src/exec_intercept.h, src/exec_ptrace.c,
+	src/exec_ptrace.h:
+	Move register definitions to exec_ptrace.h
+	[59cc9bec6925]
+
+	* src/exec_ptrace.c:
+	Add support for intercepting 32-bit binaries on 64-bit systems. We
+	need to define the ptrace register struct ourselves for the 32-bit
+	system since there is no good way to get it from the system headers.
+	Currently only implemented for x86_64 and aarch64.
+	[a0407bb1fee0]
+
+	* src/exec_ptrace.c:
+	Add setters and getters for ptrace(2) register access. This will be
+	used when running 32-bit binaries from a 64-bit sudo.
+	[f7da9453d9fa]
+
+	* src/exec_ptrace.c:
+	exec_ptrace_handled: don't return early if ptrace_intercept_execve()
+	fails. We need to continue the traced process even if there is a
+	fatal error. Otherwise, sudo will appear to hang as the running
+	process is left in PTRACE_EVENT stop.
+	[5b3bd75c4486]
+
+	* src/exec_ptrace.c:
+	Don't use PTRACE_GETREGS, it is too complicated when runing compat
+	binaries. Unlike PTRACE_GETREGSET, PTRACE_GETREGS requires that we
+	manually map registers from 64-bit to 32-bit layouts when running,
+	e.g. a 32-bit binary from a 64-bit sudo process.
+	[bb3476230373]
+
+2022-05-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, src/exec_nopty.c, src/exec_pty.c,
+	src/parse_args.c, src/sudo.c, src/sudo.h, src/sudo_exec.h:
+	Initialize intercept_allow_setid to true if we use ptrace(2) and
+	seccomp(2).
+	[57e58c0ada44]
+
+2022-05-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_nopty.c, src/exec_ptrace.c, src/exec_pty.c,
+	src/sudo_exec.h:
+	If the process is already being traced, just resume it and clear
+	flags. This makes it possible to run sudo in ptrace intercept mode
+	from within a shell (or other process) that is already being traced
+	by sudo.
+	[db4d7cd5f673]
+
+	* src/exec_ptrace.c:
+	exec_ptrace_handled: fix delivery of non-stop signals. We need to
+	deliver signals to the tracee as long as it is not a group stop.
+	Fixes a hang while tracing another sudo process.
+	[4ede8b4cfbd9]
+
+	* src/exec_nopty.c:
+	Make SIGCHLD handler more consistent with the pty version. No real
+	change other than a few debug statements.
+	[bd52284b1e2a]
+
+	* plugins/sudoers/parse.c:
+	sudoers_lookup_check: preserve intercepted flag when reinitializing
+	cmnd_info Otherwise we may not reject an attempt to run a set-user-
+	ID command.
+	[43d72d1537b2]
+
+	* src/exec_nopty.c, src/exec_pty.c:
+	Kill the command if intercept_setup() or ptrace_seize() fail.
+	[1037f81b327b]
+
+2022-05-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match_command.c:
+	Move intercept setid check out of do_stat() and into its own
+	function. For command_matches_all() we should only perform the setid
+	check if the file exists and intercept is enabled. Otherwise, we can
+	end up returning an error if the fully-qualified command does not
+	exist. Fixes a regression introduced in sudo 1.9.0 with the support
+	for digests in conjunction with "sudo ALL".
+	[1b5f9ed2160a]
+
+	* src/exec_ptrace.c:
+	Add support for intercepting x32 binaries on Linux x64_64.
+	[c5fc89f38c43]
+
+2022-04-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.11
+	[d3e832f94348]
+
+	* plugins/sudoers/auth/kerb5.c, src/exec_ptrace.c:
+	Fix typos
+	[8ef3e84fc62e]
+
+	* MANIFEST, docs/CONTRIBUTORS.md, po/ka.mo, po/ka.po:
+	New Georgian translation from translationproject.org
+	[f6b9c7d2192c]
+
+	* src/exec_ptrace.c:
+	Short-circuit the policy check if the command doesn't exist.
+	Otherwise, both sudo and the shell will report the error.
+	[f16f1b6705d9]
+
+	* src/exec_ptrace.c:
+	Add support for replacing argv in ptrace intecept mode. The new argv
+	is written below the tracee's stack and the system call argument is
+	replaced with the new argv address.
+	[3974c784be8b]
+
+	* src/exec_ptrace.c:
+	Check architecture in the seccomp filter. Currently only supports
+	the native architecture.
+	[13f88e436ae0]
+
+	* src/exec_common.c, src/exec_monitor.c, src/exec_nopty.c,
+	src/exec_ptrace.c:
+	Suspend the child process and wait for SIGUSR when using ptrace.
+	This fixes a race condition in ptrace-based intercept mode when
+	running the command in a pty. It was possible for the monitor to
+	receive SIGCHLD when the command sent itself SIGSTOP before the main
+	sudo process did.
+	[cf1f0bea9931]
+
+	* plugins/sudoers/parse.c, src/exec.c, src/selinux.c, src/sudo.h:
+	Enable intercept and log_subcmds for SELinux using ptrace and
+	seccomp.
+	[5d7a3df4457e]
+
+	* src/exec_intercept.c, src/exec_intercept.h, src/exec_ptrace.c,
+	src/sudo.c, src/sudo.h:
+	For ptrace intercept mode, do not do a policy check for the initial
+	command. We can skip the policy check for the execve(2) of the
+	initial command since it has already been check. Otherwise, we would
+	log the command twice. When using fexecve(2) due to a digest check,
+	there should be no need to skip the initial command since it will be
+	executed via execveat(2) not execve(2). However, on older kernels
+	without execveat(2), glibc will emulate fexecve(2) using /proc which
+	will result in the extra log entry.
+	[e411d6bc3855]
+
+	* docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in:
+	Update intercept documentation.
+	[f44f1cb2a5d2]
+
+	* src/exec_intercept.c, src/exec_ptrace.c:
+	In ptrace(2) intercept mode, add execveat to the seccomp(2) filter.
+	This allows us to avoid logging the initial command twice regardless
+	of whether the kernel supports execveat(2) or not.
+	[d39bd5adac13]
+
+	* src/exec_ptrace.c:
+	Use PTRACE_GETREGS/PTRACE_SETREGS on platforms that support it. This
+	has a better chance of working on things like user-mode Linux.
+	[c53475bd4020]
+
+	* MANIFEST, src/Makefile.in, src/exec_intercept.c,
+	src/exec_intercept.h, src/exec_nopty.c, src/exec_ptrace.c,
+	src/exec_pty.c, src/sudo_exec.h:
+	Check the policy for ptrace-based intercept mode.
+	[6eadd667ca6d]
+
+	* src/exec_ptrace.c:
+	Add support for getting the execve(2) arguments via ptrace(2). This
+	will be used to perform a policy check in intercept mode.
+	[84b23ae53e2f]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_common.c,
+	src/exec_intercept.c, src/exec_nopty.c, src/exec_ptrace.c,
+	src/exec_pty.c, src/sudo.h, src/sudo_exec.h:
+	Add scaffolding for ptrace-based intercept mode.
+	[34a6269ac4eb]
+
+	* include/sudo_compat.h, src/exec_monitor.c, src/exec_nopty.c,
+	src/exec_pty.c:
+	Stop using the WCONTINUED flag with waitpid(2). We don't use it for
+	anything other than a debug message and it will cause problems when
+	intercept mode starts using ptrace(2).
+	[1f55993d68eb]
+
+	* src/exec_nopty.c, src/exec_pty.c:
+	Handle multiple child processes in the SIGCHLD handler. This is
+	required by the uncoming ptrace intercept code.
+	[6dd72fb8f53f]
+
+2022-04-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrvd_journal.c,
+	plugins/sudoers/log_client.c:
+	sudo_logsrvd: update elapsed time for winsize and suspend in journal
+	mode Fixes a bug in store-first relay mode where the commit point
+	messages sent by the server were incorrect.
+	[5607e8c7b559]
+
+2022-04-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/visudo.man.in, docs/visudo.mdoc.in:
+	Fix typo; GitHub issue #144
+	[fb1a539569b4]
+
+2022-04-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/TROUBLESHOOTING.md:
+	Expand section about expired accounts to include /etc/shadow info.
+	GitHub issue #143
+	[78368dadddfb]
+
+	* src/exec_monitor.c:
+	Add struct command details * to struct monitor_closure. This will be
+	used in the future by the ptrace intercept code.
+	[0603acf1ff96]
+
+	* src/exec.c:
+	Translate "unable to set limit privileges" strings.
+	[a8426e224497]
+
+	* ABOUT-NLS, MANIFEST, docs/CONTRIBUTING.md:
+	Remove ABOUT-NLS file, it is no longer maintained as part of GNU
+	gettext. Expand the Translations section in CONTRIBUTING.md.
+	[b4f0269a8f13]
+
+	* src/exec.c, src/exec_intercept.c:
+	Don't require a pty for intercept or log_subcmmds. The code to take
+	back control of the tty before a policy check doesn't appear to be
+	needed. If the command is run in its own pty, sudo has control over
+	the user's tty. If the command is run in the user's tty, sudo should
+	be in the foreground process group.
+	[bddcc0d9fee6]
+
+2022-04-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac:
+	Define _TIME_BITS=64 on systems that define __TIMESIZE, like GNU
+	libc. This should be replaced by a specialized autoconf macro when
+	one becomes available.
+	[f63b7f9ea5c2]
+
+2022-04-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/regress/testdata/check_example_group_plugin_is_able_t
+	o_debug.log, plugins/python/regress/testhelpers.c:
+	clean_output: prune lines that consisting of '^' characters and
+	whitespace. Starting with Python 3.11, backtraces may contain a line
+	with '^' characters to bring attention to the important part of the
+	line. Also replace "REJECT" with "0" in backtrace output for Python
+	3.11.
+	[f6a5d1c05b2b]
+
+2022-04-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Fix check for EVP_MD_CTX_new() when -pthread is in Libs.private.
+	[4f3fd0d1fd34]
+
+2022-04-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, lib/eventlog/Makefile.in,
+	lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/protobuf-c/Makefile.in,
+	lib/util/Makefile.in, lib/zlib/Makefile.in, logsrvd/Makefile.in,
+	plugins/audit_json/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/python/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_approval/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Rename SSP_(C|LD)FLAGS -> HARDENING_(C|LD)FLAGS
+	[92aa57606481]
+
+	* INSTALL.md:
+	Mention other hardening compilation and linker options.
+	[7da9cf428e39]
+
+2022-03-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Fix check for EVP_MD_CTX_new using static libcrypto with
+	dependencies.
+	[c02d6b6e474c]
+
+	* configure, m4/libtool.m4, m4/ltoptions.m4, m4/ltsugar.m4,
+	m4/ltversion.m4, m4/lt~obsolete.m4, scripts/ltmain.sh:
+	Update to libtool 2.4.7.
+	[b8824f6b792c]
+
+2022-03-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	--enable-openssl: don't add non-existent directories to
+	PKG_CONFIG_LIBDIR
+	[daa9cab172da]
+
+2022-03-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Fix a typo in the AIX section.
+	[4d122a222632]
+
+2022-03-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/zlib/crc32.c, lib/zlib/crc32.h, lib/zlib/deflate.c,
+	lib/zlib/deflate.h, lib/zlib/gzguts.h, lib/zlib/gzlib.c,
+	lib/zlib/gzread.c, lib/zlib/gzwrite.c, lib/zlib/infback.c,
+	lib/zlib/inffast.c, lib/zlib/inflate.c, lib/zlib/inflate.h,
+	lib/zlib/inftrees.c, lib/zlib/trees.c, lib/zlib/zlib.exp,
+	lib/zlib/zlib.h, lib/zlib/zutil.c, lib/zlib/zutil.h:
+	Update embedded copy of zlib to version 1.2.12. Fixes CVE-2018-25032
+	[3e2517079d86]
+
+2022-03-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/kerb5.c:
+	Minor style nit.
+	[9bdde2c81a3d]
+
+	* Merge pull request #138 from dfskoll/main
+
+	If we're using Kerberos, don't overwrite a custom prompt
+	[266b04c9ee0a]
+
+2022-03-16  Dianne Skoll  <dianne@skoll.ca>
+
+	* plugins/sudoers/auth/kerb5.c:
+	If we're using Kerberos, don't overwrite a custom prompt if one was
+	given with -p
+
+	Thanks to @thend20 for testing this patch.
+	[e62136f88c3e]
+
+2022-03-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/conversation.c:
+	Write the \r\n pair to ttyfp if possible, falling back on fp. This
+	is consistent with the vfprintf() call and fixes a problem
+	introduced by the last commit where the newline could be written
+	before the message instead of after.
+	[3aaebbec4ee5]
+
+	* include/sudo_util.h,
+	plugins/sudoers/regress/starttime/check_starttime.c:
+	Adjust starttime test when run under Debian faketime. Bug #1026
+	[b8ac7dec6e11]
+
+2022-03-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/conversation.c:
+	sudo_conversation_printf: convert trailing nl to cr + nl combo. This
+	fixes output when the terminal is in raw mode and is consistent with
+	how sudo_conversation() behaves.
+	[e377f2a71021]
+
+	* lib/eventlog/eventlog.c, src/exec_monitor.c, src/exec_nopty.c,
+	src/exec_pty.c, src/tgetpass.c:
+	Block SIGCHLD when forking the mailer. Otherwise, it may be picked
+	up by the signal handler instead of our waitpid(2) call. Don't warn
+	if waitpid() returns 0 in a SIGCHLD handler.
+	[e34a3f90de5b]
+
+	* plugins/sudoers/sudoers.c:
+	Do not warn, log or send mail for errors when reinitializing
+	defaults. If there is a problem, we would have already warned,
+	logged or mailed it. The one exception is the initial defaults,
+	which should never fail.
+	[0d273f4d307d]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/parse.c, plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/sudoers.c:
+	If there are multiple parse errors, send them in a single mail
+	message.
+	[5de37ad1101f]
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/python/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Unset LANGUAGE when running tests, otherwise it may override LC_ALL.
+	Bug #1025.
+	[87573102f25b]
+
+2022-03-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/visudo.c:
+	Looser owner/permission checks for an uninstalled sudoers file. We
+	don't check the owner or permissions on a sudoers file that is
+	specified as an argument to visudo by default. However, the owner
+	and mode of files included via @includedir were still checked. This
+	commit makes the owner and permissions checks for filed included via
+	@includedir follow the same as for the original sudoers file.
+	[db78857306d4]
+
+	* lib/util/regress/getdelim/getdelim_test.c:
+	getdelim_test: increase longstr to check end pointer after realloc
+	This would have caught the recent bug in our getdelim replacement
+	when run under address-sanitizer or valgrind.
+	[6559a42a3205]
+
+	* plugins/sudoers/check_aliases.c:
+	Add missing va_start/va_end around call to sudoers_error_hook().
+	Coverity CID 250885
+	[49d026ba67b2]
+
+	* lib/util/getdelim.c:
+	Correctly update the end pointer when we expand the buffer. From
+	Robert Manner.
+	[99617ae8332d]
+
+2022-03-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/secure_path.c:
+	sudo_secure_path: pass the struct stat * argument directly to
+	stat(2) Set the pointer to a struct stat on the stack if st is NULL.
+	Avoids a needless memcpy() at the end.
+	[11636745ce29]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Fix off-by-one when storing line number in userspec. We store the
+	line number *after* parsing the newline so we need to subtract one.
+	[40d6521a966e]
+
+	* lib/eventlog/eventlog.c:
+	For alert messages, the command or runuser may not be set. This
+	fixes the logging of parse errors when JSON logging is enabled.
+	[cfde228ef422]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.h,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c:
+	Pass file, line and column to sudoers defaults callbacks.
+	[04a26b1a224c]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/check_aliases.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/file.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/parse.h, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/sudoers/test18.toke.ok,
+	plugins/sudoers/regress/visudo/test2.err.ok,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/visudo.c:
+	Add a hook for sudoers parse errors (including defaults and
+	aliases). The hook can be used to log parser errors (sudoers module)
+	or keep track of which files have an error (visudo). Previously, we
+	only kept track of a single parse error.
+	[601915bb6265]
+
+2022-03-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/file.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/sudoers/test18.out.ok,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c:
+	Add a source to struct sudo_nss and use it if getdefs() fails. Also
+	remove useless "Problem with defaults entries" warning in
+	testsudoers.
+	[f9ba65e975a0]
+
+2022-03-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c:
+	Plug a few test memory leaks now that they return from main().
+	[dc4db97a1d57]
+
+2022-03-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/regress/logwrap/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c:
+	Remove extra newline in sudo_warnx() calls.
+	[3366401671fc]
+
+	* plugins/sudoers/check_aliases.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/file.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c:
+	Preserve the column and error message when there is a syntax error.
+	This information is now included in the error mail sent to root.
+	[a224b006bfb3]
+
+	* plugins/python/python_plugin_common.c:
+	Deinit python subinterpreters in reverse order (last to first). This
+	appears to work around a crash on OpenBSD with Python 3.9.10.
+	[ad4d7b33da9b]
+
+2022-03-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_10 for changeset 3557db693da4
+	[edcb9bf4d4c3] <1.9>
+
+	* NEWS, config.h.in, configure, configure.ac, include/sudo_compat.h,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Merge sudo 1.9.10 from tip.
+	[3557db693da4] [SUDO_1_9_10] <1.9>
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/python/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	For 'make check-verbose' run fuzzers with -verbose=1 This is the
+	default for libFuzzer but not for the stub fuzzer lib.
+	[7f2551a87c08]
+
+2022-03-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL.md:
+	INSTALL.md: Mention "make check" and "make check-verbose"
+	[17a30e329ba7]
+
+	* scripts/generate_test_coverage.sh:
+	Repair generate_test_coverage.sh after move to scripts directory.
+	[ffef93da0436]
+
+	* Makefile.in, docs/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/eventlog/Makefile.in,
+	lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/protobuf-c/Makefile.in,
+	lib/util/Makefile.in, lib/zlib/Makefile.in, logsrvd/Makefile.in,
+	plugins/audit_json/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/python/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_approval/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Add check-verbose Makefile target that runs tests in verbose mode.
+	[929d079dbfc7]
+
+	* lib/eventlog/regress/logwrap/check_wrap.c,
+	lib/iolog/regress/host_port/host_port_test.c,
+	lib/iolog/regress/iolog_filter/check_iolog_filter.c,
+	lib/iolog/regress/iolog_json/check_iolog_json.c,
+	lib/iolog/regress/iolog_mkpath/check_iolog_mkpath.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/iolog/regress/iolog_timing/check_iolog_timing.c,
+	lib/util/regress/closefrom/closefrom_test.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/getdelim/getdelim_test.c,
+	lib/util/regress/getgrouplist/getgids.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/mktemp/mktemp_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsig/strsig_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/strtofoo/strtobool_test.c,
+	lib/util/regress/strtofoo/strtoid_test.c,
+	lib/util/regress/strtofoo/strtomode_test.c,
+	lib/util/regress/strtofoo/strtonum_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/uuid/uuid_test.c:
+	Add -v option parsing to regress tests, currently a no-op. This will
+	be used by a "check-verbose" target in the future.
+	[9cdcc23e6a70]
+
+2022-03-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/testhelpers.h:
+	Less verbose output unless the -v option is used. Also display a
+	test summary at the end.
+	[b18a8f6526e9]
+
+	* src/regress/net_ifs/check_net_ifs.c,
+	src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c:
+	verbose flag is boolean, not int
+	[8663ac48be27]
+
+	* configure.ac:
+	Update copyright year.
+	[461698b72a64]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Regenerate dependencies.
+	[f007ec225986]
+
+	* MANIFEST, configure, configure.ac, lib/util/Makefile.in,
+	lib/util/regress/closefrom/closefrom_test.c:
+	Add sudo_closefrom() regression test.
+	[14f4439a8437]
+
+	* NEWS, config.h.in, configure, configure.ac, lib/util/closefrom.c:
+	Use close_range(2) in closefrom() emulation if available. On Linux,
+	prefer our own closefrom() emulation since the glibc version may
+	fail if /proc is not present and close_range() is not supported. On
+	FreeBSD, closefrom(3) will either call the closefrom or close_range
+	system call, depending on which is available.
+	[d84eff07783f]
+
+	* configure, configure.ac:
+	Repair --enable-pvs-studio on Linux.
+	[add3c7fff7f5]
+
+	* configure, configure.ac:
+	Mention apple radar 3710161 in the comment about broken macOS
+	poll(2).
+	[ffb6c8c070dc]
+
+2022-02-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/regress/net_ifs/check_net_ifs.c,
+	src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c:
+	Only display test totals unless run in verbose mode.
+	[f543b41f226e]
+
+	* lib/util/regress/harness.in, plugins/sudoers/regress/harness.in:
+	Allow test harness to be run from any directory. Also add missing
+	copyright notice.
+	[5e60bc5beb52]
+
+	* lib/util/regress/harness.in:
+	Adapt test harness for lib/util and move to regress directory.
+	[f415d958bca7]
+
+	* .gitignore, .hgignore, MANIFEST, configure, configure.ac,
+	lib/util/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/harness.in, plugins/sudoers/regress/harness.in:
+	Adapt test harness for lib/util and move to regress directory.
+	[5f488712f797]
+
+	* lib/fuzzstub/fuzzstub.c:
+	Make fuzzer stub main() quiet by default. LLVM LibFuzzer displays
+	the input and running time by default but we don't care about that
+	for the stub fuzzer library.
+	[728005c2de78]
+
+	* .gitignore, .hgignore, MANIFEST, configure, configure.ac,
+	plugins/sudoers/Makefile.in, plugins/sudoers/harness.in:
+	Move the cvtsudoers/sudoers/testsudoers/visudo tests into a script.
+	It is easier to maintain these tests in script form. The output now
+	more closely matches that of the other tests. The harness script can
+	be invoked directly and supports running specific tests.
+	[fbad6e93201e]
+
+2022-02-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po:
+	Updated translations from translationproject.org
+	[b2622a56fcbc]
+
+2022-02-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	sudo_regex_compile_v1 stub: set errstr on error
+	[2da61535e60d]
+
+	* logsrvd/Makefile.in, logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	fuzz_logsrvd_conf: add stub version of sudo_regex_compile_v1(). We
+	want to fuzz our parser, not the libc regular expression code.
+	[2662a181acc8]
+
+	* plugins/sudoers/regress/testsudoers/test18.out.ok,
+	plugins/sudoers/regress/testsudoers/test18.sh:
+	testsudoers/test18: don't rely on /usr/bin/w being present Fixes a
+	test failure on Alpine Linux.
+	[5b3915cef32b]
+
+2022-02-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Add configure check for gzclearerr() when using system zlib.
+	[388dd60cd577]
+
+	* configure, configure.ac:
+	Fix PVS-Studio platform check for macOS.
+	[cc46ae5d60a3]
+
+	* plugins/sudoers/ldap.c:
+	sudo_ldap_parse_options: fix memory leak of sudoRole cn string.
+	Coverity CID 249976
+	[bcf86c362e05]
+
+	* src/sudo_intercept_common.c:
+	command_allowed: plug memory leak on strdup() failure. Coverity CID
+	249972
+	[f15a58ed68d6]
+
+2022-02-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/check.c:
+	display_lecture: just return if callback is NULL
+	[3e7352fbc28b]
+
+	* lib/eventlog/eventlog.c:
+	For alert messages it is possible for evlog to be NULL. Coverity CID
+	238641
+	[3e89523699fd]
+
+	* logsrvd/logsrv_util.c:
+	iolog_seekto: initialize struct timing_closure before using.
+	Coverity CID 249977
+	[ea53680a2367]
+
+	* logsrvd/iolog_writer.c:
+	iolog_rewrite: initialize struct timing_closure before using.
+	Coverity CID 249971
+	[d214237f3ce8]
+
+	* scripts/mkpkg:
+	Allow ARCH_FLAGS to be overridden and handle macOS 12.
+	[f04f3405fa50]
+
+	* scripts/mkpkg:
+	Prefer if [ ... ]; then over if test ...; then.
+	[4ba3e6ed7280]
+
+	* .circleci/config.yml:
+	Do not build with -Werror on macOS. Some macOS warnings are bogus,
+	for instance it has an incorrect getgrouplist(3) definition.
+	[7e5f469cb0ec]
+
+	* .circleci/config.yml:
+	Build and test macos with circleci.
+	[fc62dc986646]
+
+2022-02-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Mention lecture behavior change.
+	[cc034a54eb11]
+
+	* lib/iolog/regress/iolog_filter/check_iolog_filter.c:
+	Fix compilation on systems without a real openat(2).
+	[25067ad6772b]
+
+	* plugins/sudoers/match_digest.c:
+	Better warning message when the digest in sudoers is the wrong
+	length.
+	[c2043906f356]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Do not disable fuzzer output if SUDO_FUZZ_VERBOSE env variable is
+	set.
+	[fd3d5706ffda]
+
+2022-02-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/afs.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
+	plugins/sudoers/check.h, plugins/sudoers/timestamp.c:
+	Display the lecture immediately before prompting for a password.
+	This means we no longer display the lecture unless the user is going
+	to enter a password. Authentication methods that don't interact with
+	the user via the terminal don't trigger the lecture.
+	[17ef981664c3]
+
+	* NEWS, plugins/sudoers/logging.c:
+	Add back warning when a user is not allowed to run a command.
+	Previously, the warning was displayed when a user was not in the
+	sudoers file, or was present but not listed for the local host. The
+	new behavior is to display the warning if a command is denied and
+	mail is sent to the administrator. Whether or not mail is sent is
+	controlled by the "mail_*" flags in sudoers. The warning text is now
+	"This incident has been reported to the administrator." which is
+	hopefully less confusing. The message will not be printed if either
+	the "mailto" or "mailerpath" sudoers settings are disabled.
+	[dcaeadb7e558]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Document that negating mailto or mailerpath disables sending mail.
+	[02d8aabd9af3]
+
+	* TODO:
+	Remove obsolete TODO file.
+	[98e112abab92]
+
+2022-02-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c:
+	Don't try to send mail if mailto not set or the mailer is not
+	present.
+	[37166e692a9c]
+
+2022-02-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fi.mo,
+	po/fi.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/ja.mo,
+	po/ja.po, po/ko.mo, po/ko.po, po/pl.mo, po/pl.po, po/ro.mo,
+	po/ro.po, po/sr.mo, po/sr.po, po/uk.mo, po/uk.po, po/vi.mo,
+	po/vi.po, po/zh_CN.mo, po/zh_CN.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[194b42011062]
+
+	* MANIFEST, lib/iolog/Makefile.in,
+	lib/iolog/regress/iolog_filter/check_iolog_filter.c,
+	lib/iolog/regress/iolog_filter/test1/log,
+	lib/iolog/regress/iolog_filter/test1/timing,
+	lib/iolog/regress/iolog_filter/test1/ttyin,
+	lib/iolog/regress/iolog_filter/test1/ttyin.filtered,
+	lib/iolog/regress/iolog_filter/test1/ttyout,
+	lib/iolog/regress/iolog_filter/test2/log,
+	lib/iolog/regress/iolog_filter/test2/timing,
+	lib/iolog/regress/iolog_filter/test2/ttyin,
+	lib/iolog/regress/iolog_filter/test2/ttyin.filtered,
+	lib/iolog/regress/iolog_filter/test2/ttyout,
+	lib/iolog/regress/iolog_filter/test3/log,
+	lib/iolog/regress/iolog_filter/test3/timing,
+	lib/iolog/regress/iolog_filter/test3/ttyin,
+	lib/iolog/regress/iolog_filter/test3/ttyin.filtered,
+	lib/iolog/regress/iolog_filter/test3/ttyout:
+	Add tests for iolog filtering. This is the functionality used by the
+	log_passwords and passprompt_regex options.
+	[07e587dfd765]
+
+	* lib/iolog/iolog_filter.c:
+	iolog_pwfilt_run: apply regex on ttyout even if we disabled
+	filtering. The heuristic used to decide when to disable filtering is
+	when we see another ttyout buffer or find a cr or nl in the ttyin
+	buffer. However, we should also check the buffer that caused us to
+	disable filtering for a matching regex that would re-enable
+	filtering. Programs that prompt for a password twice might otherwise
+	not have the second password filtered.
+	[f34bf167c3b4]
+
+2022-02-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL.md, README.LDAP.md, docs/TROUBLESHOOTING.md,
+	docs/UPGRADE.md, docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in,
+	docs/sudo.man.in, docs/sudo.mdoc.in, docs/sudo_logsrv.proto.man.in,
+	docs/sudo_logsrv.proto.mdoc.in, docs/sudo_logsrvd.conf.man.in,
+	docs/sudo_logsrvd.conf.mdoc.in, docs/sudo_plugin.man.in,
+	docs/sudo_plugin.mdoc.in, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in, docs/sudoers.ldap.man.in,
+	docs/sudoers.ldap.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in,
+	examples/sudo_logsrvd.conf.in:
+	Avoid using "note that" and "note: " in documentation.
+	[d75995c86fe0]
+
+	* INSTALL.md, README.LDAP.md, README.md, docs/CONTRIBUTING.md,
+	docs/CONTRIBUTORS.md, docs/SECURITY.md, docs/TROUBLESHOOTING.md,
+	docs/UPGRADE.md, docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudo.man.in,
+	docs/sudo.mdoc.in, docs/sudo_logsrv.proto.man.in,
+	docs/sudo_logsrv.proto.mdoc.in, docs/sudo_logsrvd.conf.man.in,
+	docs/sudo_logsrvd.conf.mdoc.in, docs/sudo_logsrvd.man.in,
+	docs/sudo_logsrvd.mdoc.in, docs/sudo_plugin.man.in,
+	docs/sudo_plugin.mdoc.in, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in, docs/sudo_sendlog.man.in,
+	docs/sudo_sendlog.mdoc.in, docs/sudoers.ldap.man.in,
+	docs/sudoers.ldap.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, docs/sudoers_timestamp.man.in,
+	docs/sudoers_timestamp.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in:
+	Remove "please" from the documentation, it is considered bad style.
+	[9c4a7bc1b48c]
+
+	* docs/UPGRADE.md:
+	Mention regular expressions and "sudo -l -U user" behavior change.
+	[9bf947ed3e30]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	Add security notes about regular expressions in sudoers rules.
+	[1748e3a05906]
+
+	* NEWS:
+	Update NEWS for GitHub issue #134.
+	[c69636554901]
+
+2022-02-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c:
+	do_logfile_sudo: plug memory leak of full_line Coverity CID 249329
+	[d1d2bc51077a]
+
+	* plugins/sudoers/logging.c:
+	log_server_alert: plug potential memory leak Coverity CID 249328
+	[4d01a8e7dffb]
+
+	* plugins/sudoers/logging.c:
+	fmt_authfail_message: compute the exact amount of space needed.
+	Instead of truncating on overflow, warn and return NULL.
+	[96542ddc9674]
+
+	* plugins/sudoers/parse.c:
+	Fix potential NULL deref if getpwuid(0) fails. Coverity CID 249326
+	[23249273cd01]
+
+2022-02-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in, plugins/sudoers/parse.c,
+	plugins/sudoers/policy.c:
+	Restrict "sudo -U other -l" to users with sudo ALL for root or
+	"other". Having "sudo ALL" permissions in no longer sufficient to be
+	able to list another user's privileges. The invoking user must now
+	have "sudo ALL" for root or the target user. GitHub issue #134
+	[e2b4f8400599]
+
+2022-02-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Reword some of the NEWS items for 1.9.10.
+	[b2d757e7889c]
+
+2022-02-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo_logsrvd.conf.man.in, docs/sudo_logsrvd.conf.mdoc.in,
+	docs/sudoers.man.in, docs/sudoers.mdoc.in, lib/util/regex.c,
+	po/sudo.pot:
+	Limit regular expressions to 1024 characters each. Avoids a problem
+	with the fuzzer creating large regular expressions that blow up the
+	glibc regcomp().
+	[83b1cac11c79]
+
+2022-02-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .gitignore, .hgignore, MANIFEST, configure, configure.ac,
+	examples/Makefile.in, examples/sudo.conf.in, examples/syslog.conf,
+	examples/syslog.conf.in:
+	Substitute values in the example syslog.conf too. Also update ignore
+	files for example changes
+	[b13a7e6a630c]
+
+	* MANIFEST, configure, configure.ac, docs/sudo.conf.man.in,
+	docs/sudo.conf.mdoc.in, docs/sudo.man.in, docs/sudo.mdoc.in,
+	docs/sudo_logsrvd.conf.man.in, docs/sudo_logsrvd.conf.mdoc.in,
+	docs/sudo_plugin_python.man.in, docs/sudo_plugin_python.mdoc.in,
+	docs/sudoers.man.in, docs/sudoers.mdoc.in, examples/Makefile.in,
+	examples/sudo_logsrvd.conf, examples/sudo_logsrvd.conf.in,
+	examples/sudoers, examples/sudoers.in:
+	Substitute paths set by configure in examples. Bug #1023
+	[f528fe7a8f88]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update Project-Id-Version to 1.9.10.
+	[0ad7934baa9f]
+
+	* plugins/sudoers/po/sudoers.pot:
+	Update .pot files for 1.9.10
+	[c7a477455e2e]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.10
+	[b437c4c37971]
+
+	* MANIFEST, docs/sudo_logsrvd.conf.man.in,
+	docs/sudo_logsrvd.conf.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, include/sudo_util.h, lib/iolog/iolog_filter.c,
+	lib/util/Makefile.in, lib/util/regex.c, lib/util/util.exp.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/regress/sudoers/test28.in,
+	plugins/sudoers/regress/sudoers/test28.json.ok,
+	plugins/sudoers/regress/sudoers/test28.ldif.ok,
+	plugins/sudoers/regress/sudoers/test28.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test28.out.ok,
+	plugins/sudoers/regress/sudoers/test28.toke.ok,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.h, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c:
+	Add helper function to compile a regex that supports (?i).
+	[d680d423d2df]
+
+2022-02-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, configure, configure.ac, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, examples/sudoers,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/parse.h, plugins/sudoers/regress/sudoers/test28.in,
+	plugins/sudoers/regress/sudoers/test28.json.ok,
+	plugins/sudoers/regress/sudoers/test28.ldif.ok,
+	plugins/sudoers/regress/sudoers/test28.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test28.out.ok,
+	plugins/sudoers/regress/sudoers/test28.toke.ok,
+	plugins/sudoers/regress/sudoers/test29.in,
+	plugins/sudoers/regress/sudoers/test29.json.ok,
+	plugins/sudoers/regress/sudoers/test29.ldif.ok,
+	plugins/sudoers/regress/sudoers/test29.out.ok,
+	plugins/sudoers/regress/sudoers/test29.toke.ok,
+	plugins/sudoers/regress/testsudoers/test18.out.ok,
+	plugins/sudoers/regress/testsudoers/test18.sh,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c:
+	Add support for matching command and args using regular expressions.
+	Either the command, its arguments or both may be (separate) regular
+	expressions.
+	[bef0b1a14771]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Clear sudoers_errstr after it is used. This way we avoid printing
+	the same error message more than once if there are multiple ERROR
+	tokens returned from the lexer.
+	[8a7509cd1c46]
+
+	* logsrvd/logsrvd_local.c:
+	store_iobuf_local: fix potential double free on the error path.
+	[f9a0e3cb3c7f]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudo.man.in,
+	docs/sudo.mdoc.in, docs/sudo_logsrv.proto.man.in,
+	docs/sudo_logsrv.proto.mdoc.in, docs/sudo_logsrvd.conf.man.in,
+	docs/sudo_logsrvd.conf.mdoc.in, docs/sudo_logsrvd.man.in,
+	docs/sudo_logsrvd.mdoc.in, docs/sudo_plugin.man.in,
+	docs/sudo_plugin.mdoc.in, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in, docs/sudo_sendlog.man.in,
+	docs/sudo_sendlog.mdoc.in, docs/sudoers.ldap.man.in,
+	docs/sudoers.ldap.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, docs/sudoers_timestamp.man.in,
+	docs/sudoers_timestamp.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in:
+	Update links to sudo web site and reference markdown docs.
+	[da9a9eb04f04]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudo.man.in,
+	docs/sudo.mdoc.in, docs/sudo_logsrvd.man.in,
+	docs/sudo_logsrvd.mdoc.in, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in:
+	Use a 4n indent for code blocks instead of the default 6n.
+	[7322dd26a3d4]
+
+	* plugins/sudoers/testsudoers.c:
+	testsudoers: disable argument permutation in GNU getopt This makes
+	it easier to test commands with arguments.
+	[fb005b03a75e]
+
+	* lib/iolog/iolog_filter.c:
+	iolog_pwfilt_run: fix types in error return
+	[663deea257d0]
+
+	* lib/iolog/iolog_filter.c, plugins/sudoers/iolog.c:
+	Free potential leaks of passprompt_regex_handle. Coverity CID 249057
+	[d562ea42ab66]
+
+2022-02-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #133 from Dzejrou/main
+
+	Do not unset user timeout when no default timeout is set.
+	[58504381014e]
+
+2022-02-09  Jaroslav Jindrak  <dzejrou@gmail.com>
+
+	* plugins/sudoers/policy.c:
+	Do not unset user timeout when no default timeout is set.
+	[25f32be7d18d]
+
+2022-02-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/fmtsudoers.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/sudoers/test2.in,
+	plugins/sudoers/regress/sudoers/test2.json.ok,
+	plugins/sudoers/regress/sudoers/test2.ldif.ok,
+	plugins/sudoers/regress/sudoers/test2.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test2.out.ok,
+	plugins/sudoers/regress/sudoers/test2.toke.ok:
+	Don't escape double quotes (") in a command when printing it.
+	Previously, cvtsudoers and "sudo -l" would escape double quotes in a
+	command or command line argument, which is not valid sudoers syntax.
+	[3bd0505b03e2]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in:
+	A few minor (mostly cosmetic) fixes. Add missing ALL to Runas_Member
+	and Host. Replace some tabs with spaces. Fix the syntax of a
+	sudoedit example.
+	[a943116eb35b]
+
+2022-02-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #132 from ninedotnine/patch-1
+
+	Sync example sudoers with default sudoers
+	[8c903452e624]
+
+2022-02-04  dan soucy  <ninedotnine@users.noreply.github.com>
+
+	* examples/sudoers:
+	Sync example sudoers with default sudoers
+
+	`sudoers.in` was changed by 1d13533
+	[f34657ff9345]
+
+2022-02-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* ABOUT-NLS, INSTALL.md, NEWS, README.LDAP.md, docs/CONTRIBUTING.md,
+	plugins/sudoers/po/README, po/README:
+	Upgrade http links to https where possible and fix some broken
+	links.
+	[e33d61fdafdb]
+
+2022-02-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c:
+	Remove "This incident will be reported." from user warnings. This
+	used to indicate that email had been sent to the administrator
+	telling them that someone tried to run sudo. Whether or not sudo
+	sends email is now configurable, so the warning may not be accurate.
+	It is also confusing to the user since they will not know who the
+	incident is being reported to. See also https://xkcd.com/838/
+	[b2860bb51393]
+
+	* plugins/sudoers/sssd.c:
+	Log fn_get_values() return code in the debug log on error. Also move
+	a nested switch() statement out of 'case 0' for improved
+	readability.
+	[ad609804a70c]
+
+	* plugins/sudoers/sssd.c:
+	Do not return an error if we cannot connect to the SSSD connector.
+	This may simply mean that nsswitch.conf lists sss as a sudoers
+	source but SSSD is not configured for sudo. Otherwise, the user will
+	receive a useless "problem with defaults entries" when the sssd
+	backend tries to fetch the global defaults. Bug #1022.
+	[60bb147ed3e6]
+
+	* plugins/sudoers/log_client.c, plugins/sudoers/logging.c:
+	Set client_closure to NULL after freeing it.
+	[20da8f0c9226]
+
+	* plugins/sudoers/log_client.c:
+	client_closure_alloc: init write_bufs/free_bufs before other
+	allocations. We must initialize the tail queues before any possible
+	call to client_closure_free(), such as due to malloc() failure.
+	[5dd7d1ba2b76]
+
+	* logsrvd/logsrvd_journal.c:
+	Add missing default return in last commit.
+	[e17820ba6ff8]
+
+	* logsrvd/logsrvd_journal.c:
+	sudo_logsrvd: make sure journal exists before writing the alert
+	message. Fixes a potential NULL dereference when journaling an alert
+	message.
+	[19d109fb1420]
+
+	* include/sudo_compat.h:
+	Fix compilation on Debian kFreeBSD. The configure script correctly
+	detects that utimensat() and futimens() are missing but the headers
+	define stub versions of the functions. Including sys/stat.h pulls in
+	the system definitions so we can override them safely. Bug #1021.
+	[10775e14164a]
+
+2022-02-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/ttyname.c:
+	Add fallback if /proc/self/stat or /proc/pid/psinfo is missing or
+	invalid. If the /proc file indicates no terminal is present there is
+	no fallback. Bug #1020
+	[c32620c9f115]
+
+2022-02-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in, plugins/sudoers/check.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c:
+	Add sudoers option to perform authentication even in non-interative
+	mode. If noninteractive_auth is set, authentication methods that do
+	not require input from the user's terminal may proceed. It is off by
+	default, which restores the pre-1.9.9 behavior of "sudo -n".
+	[f06dcd0957d0]
+
+	* MANIFEST, lib/iolog/iolog_filter.c,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.7:
+	Work around a glibc regcomp() bug with repeated '+' operators. Glibc
+	regcomp() has a bug where it uses excessive memory for repeated '+'
+	ops. Collapse them to avoid running the fuzzer out of memory.
+	[db423326311f]
+
+	* logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.1,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.2,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.3,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.4,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.5,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.6:
+	Rebase seed corpus on updated sudo_logsrvd.conf example.
+	[1f30b95c6ce6]
+
+	* logsrvd/logsrvd_conf.c:
+	Fix parsing of "retry_interval" in the relay section. The setting
+	was present but the callback was missing so it could not be parsed
+	in the conf file.
+	[09666425a392]
+
+	* logsrvd/logsrvd_conf.c:
+	Use TIME_T_MAX as the upper limit when parsing timeouts.
+	[989eaa812d4e]
+
+	* plugins/sudoers/auth/pam.c:
+	converse: don't set response pointer on error Linux pam_conv(3) says
+	not to set the pointer on PAM_CONV_ERR.
+	[79934c8631c0]
+
+2022-01-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/sudoers4:
+	Add missing sudoers4 test file for new cvtsudoers test.
+	[5b9f3084d9e9]
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_merge.c,
+	plugins/sudoers/regress/cvtsudoers/test38.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test38.sh:
+	defaults_check_conflict: it is only really a conflict if the binding
+	match If the Defaults name matched but the binding does not, we can
+	simply leave it be. Fixes a problem where given two sudoers sources
+	that have a host specified, if they contain conflicting Defaults
+	entries we would drop one of the Defaults instead of keeping both
+	after making them host-specific.
+	[9b8ad3d1e163]
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_merge.c,
+	plugins/sudoers/regress/cvtsudoers/sudoers1,
+	plugins/sudoers/regress/cvtsudoers/sudoers2,
+	plugins/sudoers/regress/cvtsudoers/sudoers3,
+	plugins/sudoers/regress/cvtsudoers/test34.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test34.sh,
+	plugins/sudoers/regress/cvtsudoers/test35.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test35.sh,
+	plugins/sudoers/regress/cvtsudoers/test36.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test36.sh,
+	plugins/sudoers/regress/cvtsudoers/test37.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test37.sh:
+	Make it possible to merge a host-based Defaults with a global one.
+	We convert the global Defaults to a host-based one with a single
+	"ALL" member. Later, when we simplify the host list, we'll convert
+	this back to a global Defaults.
+	[152c16a608c1]
+
+2022-01-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd_conf.c:
+	Check for garbage after [section] in sudo_logsrvd.conf.
+	[46a222b60747]
+
+	* logsrvd/regress/fuzz/fuzz_logsrvd_conf.dict,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.dict:
+	Sync fuzzing dictionary with current configuration keyword list.
+	[9af3929a2f6a]
+
+2022-01-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo_logsrvd.conf.man.in, docs/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, logsrvd/logsrvd_local.c:
+	Add new log_passwords and passprompt_regex settings. When logging
+	terminal input, if log_passwords is false and any of the regular
+	expressions in the passprompt_regex list are found in the terminal
+	output, terminal input will be replaced with '*' characters until a
+	newline or carriage return is found in the input or an output
+	character is received.
+	[1d07eaada99c]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/serialize_list/check_serialize_list.c,
+	plugins/sudoers/regress/unescape/check_unesc.c,
+	plugins/sudoers/serialize_list.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/unesc_str.c:
+	Escape/unescape commas when serializing/deserializing a stringlist.
+	[17c422c0b236]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.h,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c:
+	Pass the operator to the Defaults callback too. That way we can tell
+	what to do in callbacks for lists.
+	[d541809b62bf]
+
+	* MANIFEST, include/sudo_iolog.h, lib/iolog/Makefile.in,
+	lib/iolog/iolog_filter.c:
+	lib/iolog: add support for filtering password out of tty input If a
+	password regex is found in the tty output, tty input will be
+	replaced with '*' chars until a newline or another tty output
+	character is received.
+	[19c3a58dfe29]
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c:
+	Add a new sudoers settings log_passwords and passprompt_regex. When
+	logging terminal input, if log_passwords is disabled and any of the
+	regular expressions in the passprompt_regex list are found in the
+	terminal output, terminal input will be replaced with '*' characters
+	until a newline or carriage return is found in the input or an
+	output character is received.
+	[5fa969cfdef4]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
+	Add a flag to avoid splitting list entries on white space.
+	[32ac4cd5eae7]
+
+2022-01-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_9 for changeset 296f4f986a7a
+	[cba838829505] <1.9>
+
+	* NEWS, config.h.in, configure, configure.ac, include/sudo_compat.h,
+	logsrvd/tls_init.c, plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Merge sudo 1.9.9 from tip.
+	[296f4f986a7a] [SUDO_1_9_9] <1.9>
+
+	* docs/sudoers.ldap.man.in, docs/sudoers.ldap.mdoc.in:
+	"plain text" -> "plaintext" for consistency.
+	[6cbefac27286]
+
+2022-01-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* po/ro.mo, po/ro.po:
+	Updated translations from translationproject.org
+	[c264de490846]
+
+	* INSTALL.configure:
+	Sync with autoconf git.
+	[efd6e2df1b4f]
+
+	* scripts/mkdep.pl:
+	Fix potential infinite loop when trying to format long lines.
+	[e17a3b7b657b]
+
+2022-01-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in:
+	Document how commands are passed to the shell for the -i and -s
+	options. The concatenation of command and arguments and escaping of
+	special characters was not documented. Text adapted from GitHub
+	issue #121 from Kris Rinzwind
+	[852f803234af]
+
+	* docs/TROUBLESHOOTING.md:
+	Also mention no_new_privs error in the troubleshooting guide.
+	[70cc0679098f]
+
+	* INSTALL.md, docs/TROUBLESHOOTING.md, docs/sudo.conf.man.in,
+	docs/sudo.conf.mdoc.in, docs/sudo.man.in, docs/sudo.mdoc.in,
+	docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in,
+	docs/sudo_plugin_python.man.in, docs/sudo_plugin_python.mdoc.in,
+	docs/sudoers.ldap.man.in, docs/sudoers.ldap.mdoc.in,
+	docs/sudoers.man.in, docs/sudoers.mdoc.in, docs/visudo.man.in,
+	docs/visudo.mdoc.in:
+	Replace uid and gid with user-ID and group-ID in more places.
+	[2b6bc95509fd]
+
+2022-01-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL.md:
+	PAM is enabled on NetBSD by default too.
+	[3bc31511f687]
+
+	* INSTALL.md, README.LDAP.md, docs/HISTORY.md,
+	docs/TROUBLESHOOTING.md, docs/UPGRADE.md:
+	Use the Oxford comma consistently, it is helpful in technical
+	documents.
+	[3df4b26d035e]
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in:
+	Document the error message when no_new_privs is set.
+	[492a154dec10]
+
+	* docs/sudoers.ldap.man.in, docs/sudoers.ldap.mdoc.in:
+	Sudo now recovers from sudoers syntax errors.
+	[77d457c4e722]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	docs/sudo.conf.man.in, docs/sudo.conf.mdoc.in, docs/sudo.man.in,
+	docs/sudo.mdoc.in, docs/sudo_logsrv.proto.man.in,
+	docs/sudo_logsrv.proto.mdoc.in, docs/sudo_logsrvd.conf.man.in,
+	docs/sudo_logsrvd.conf.mdoc.in, docs/sudo_plugin.man.in,
+	docs/sudo_plugin.mdoc.in, docs/sudo_plugin_python.man.in,
+	docs/sudo_plugin_python.mdoc.in, docs/sudoers.ldap.man.in,
+	docs/sudoers.ldap.mdoc.in, docs/sudoers.man.in,
+	docs/sudoers.mdoc.in, docs/sudoreplay.man.in,
+	docs/sudoreplay.mdoc.in, docs/visudo.man.in, docs/visudo.mdoc.in,
+	examples/sudo.conf.in, examples/sudo_logsrvd.conf:
+	Use the Oxford comma consistently, it is helpful in technical
+	documents.
+	[e8d29c772963]
+
+	* INSTALL.md:
+	Mention docker configuration.
+	[8312350518cb]
+
+	* plugins/sudoers/ldap_util.c:
+	Quiet a cppcheck false positive.
+	[023468af3269]
+
+	* docs/CONTRIBUTING.md:
+	Mention https://www.sudo.ws/security/fuzzing/ in the fuzzing
+	section.
+	[87767f7b89ad]
+
+	* plugins/sudoers/sssd.c:
+	Fix logic inversion when setting negated flag.
+	[3e4051bc9f30]
+
+	* src/sudo.c:
+	Quiet a PVS-Studio format string warning.
+	[77e953f3c46f]
+
+2022-01-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Regen .pot files.
+	[b999972bc90d]
+
+	* NEWS:
+	Bug #1016, #1017 and negated sudoUser in LDAP.
+	[4ec54e728437]
+
+	* plugins/sudoers/defaults.c:
+	Don't set/run early Defaults if a custom defaults_list is specified.
+	Defaults settings passed in by the front end are already "early" so
+	there is no need to treat any of them as special.
+
+	Otherwise, we end up running the early defaults callbacks before
+	sudoers has been parsed. This means that, for instance, it is not
+	possible to disable the fqdn flag before its callback is run if sudo
+	is build with the --with-fqdn option. Bug #1016.
+	[8c6eaa503793]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
+	Mark is_early_default(), run_early_defaults(), set_early_default()
+	static. They are not used outside of defaults.c.
+	[1045e8c7a92e]
+
+	* plugins/sudoers/sssd.c:
+	Add support in SSSD for negated users.
+	[bca3d02cdd8b]
+
+	* docs/sudoers.ldap.man.in, docs/sudoers.ldap.mdoc.in,
+	plugins/sudoers/ldap.c:
+	Add support in the LDAP filter for negated users. Based on a diff
+	from Simon Lees
+	[e1d48d44229e]
+
+2022-01-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/mkdir_parents.c:
+	Use PATH_MAX, not NAME_MAX+1 for the directory entry length. On some
+	systems, such as Solaris, the max length of a directory entry is
+	filesystem-dependent. We could use fpathconf() and dynamically
+	allocate the name but it is simpler to just use PATH_MAX here.
+	[d1a097783717]
+
+	* plugins/python/python_plugin_common.c:
+	Only emulate Py_FinalizeEx for Python 3.[0-5].
+	[b314942c0f2f]
+
+	* lib/util/getcwd.c, lib/util/mkdir_parents.c:
+	Use POSIX NAME_MAX, not the obsolete MAXNAMLEN define. Fixes
+	compilation with musl libc.
+	[a1609b2d968f]
+
+2022-01-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/limits.c:
+	When applying fallback limits, make sure we don't reduce rlim_max.
+	Fixes a problem where sudo could reduce the max stack size on some
+	systems if the original limit was higher than the fallback limit,
+	but not unlimited/infinity.
+	[1fef77204f17]
+
+	* src/limits.c:
+	Don't modify the stack limit if it is >= SUDO_STACK_MIN.
+	[b9e473780083]
+
+	* plugins/sudoers/Makefile.in:
+	The pre-install target requires visudo, add an explicit dependency.
+	[b5b073d2fc9b]
+
+2022-01-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo.c:
+	If sudo is not set-user-ID root, check for the no_new_privs flag on
+	Linux. This flag disables set-user-ID at execve(2) time and may be
+	set by default for some containers. GitHub issue #129.
+	[462249058274]
+
+2022-01-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/sudoers.man.in, docs/sudoers.mdoc.in,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.h,
+	src/parse_args.c:
+	Add pam_askpass_service sudoers setting for "sudo -A". This makes it
+	possible to use a different PAM configuration for when "sudo -A" is
+	used. The main use case is to only use PAM modules that can interact
+	with the askpass program. GitHub issue #112.
+	[5f59bc3f9d81]
+
+2022-01-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/iolog_loginfo.c:
+	Improve debugging info when fdopen() fails.
+	[0d9711d8564a]
+
+2022-01-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sssd.c:
+	sss_sudo_free_values() checks for NULL, no need to do it manually.
+	[ccf012907a01]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Quiet a clang analyzer false positive.
+	[90b6791616b0]
+
+2022-01-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Quiet a clang analyzer false positive.
+	[3c66e9be5f24]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Fix return value for non-interactive mode for non-standalone auth
+	methods. AUTH_NONINTERACTIVE was being stored in the wrong variable.
+	[199a180e7fab]
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po, po/fi.mo,
+	po/fi.po, po/ko.mo, po/ko.po, po/tr.mo, po/tr.po:
+	Updated translations from translationproject.org
+	[032877650fe6]
+
+	* plugins/sudoers/cvtsudoers_merge.c:
+	defaults_var_matches() should return bool, not enum match_result.
+	Remove enum match_result as it is no longer used.
+	[6559769ddcd1]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.c:
+	Quiet two PVS-studio warnings.
+	[3a7c89cff3d6]
+
+	* plugins/sudoers/auth/pam.c:
+	Remove PAM_TTY workaround for old, buggy PAM modules. In the past,
+	some PAM modules assumed that PAM_TTY was set and would misbehave
+	(or crash) if not. This was primarily obsolete versions of Linux-
+	PAM, so it should now be safe to remove this. Setting PAM_TTY to an
+	empty string can cause its own set of issues. GitHub issue #74
+	[491cb67ea43b]
+
+2022-01-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Mention fix for Bug #956 and GitHub issue #83.
+	[8692b9985381]
+
+	* plugins/sudoers/auth/API, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/check.c,
+	plugins/sudoers/logging.c, plugins/sudoers/sudoers.h:
+	Push non-interactive mode checking down into the auth methods. For
+	"sudo -n" we only want to reject a command if user input is actually
+	required. In the case of PAM at least, we may not need to interact
+	with the user. Bug #956, GitHub issue #83
+	[bc9653ffe82f]
+
+2022-01-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_merge.c,
+	plugins/sudoers/regress/cvtsudoers/sudoers1,
+	plugins/sudoers/regress/cvtsudoers/sudoers2,
+	plugins/sudoers/regress/cvtsudoers/sudoers3,
+	plugins/sudoers/regress/cvtsudoers/test34.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test35.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test36.out.ok:
+	userspec_overridden: fix checks when there is more than one userspec
+	[199996d29f50]
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_merge.c,
+	plugins/sudoers/regress/cvtsudoers/test35.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test36.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test36.sh:
+	Fix merging of global/ALL entries when each input file has a host.
+	If a host is specified for the input file, cvtsudoers will bind
+	global Defaults to that host and change host "ALL" in a userspec to
+	the host name. However, if all the input files have matching hosts
+	we can simplify the merged file by converting back to ALL after
+	resolving conflicts.
+	[bfdb2edfca71]
+
+	* LICENSE.md:
+	Welcome to 2022.
+	[039e8c0efd7e]
+
+	* docs/Makefile.in:
+	LICENSE.md moved to the top-level src dir.
+	[b1c2687eef9d]
+
+2021-12-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #127 from Tyler887/main
+
+	Typo
+	[c4780c2a3056]
+
+2021-12-22  Tyler887  <tylermageeshields@gmail.com>
+
+	* INSTALL.md:
+	Typo
+	[b650bec9f275]
+
+2021-12-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, docs/UPGRADE.md, plugins/sudoers/policy.c, src/selinux.c,
+	src/sudo.c:
+	Back out changes to enable SELinux by default. This may return in a
+	future release in a different form.
+	[73e46fbe5c27]
+
+	* LICENSE.md, MANIFEST, README.md, docs/LICENSE.md:
+	Move LICENSE.md out of docs and back to the top-level. GitHub
+	expects it to be in the top-level directory.
+	[3c62dd396aff]
+
+2021-12-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_merge.c,
+	plugins/sudoers/regress/cvtsudoers/test35.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test35.sh:
+	cvtsudoers: fix a regression when merging matching Defaults. If a
+	host is specified with a sudoers file, we have to treat Defaults as
+	Defaults@host checking for duplicates.
+	[9db413953938]
+
+2021-12-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	add_defaults: add defs == NULL check to quiet coverity false
+	positive
+	[a534eee04069]
+
+2021-12-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_merge.c,
+	plugins/sudoers/regress/cvtsudoers/test34.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test34.sh:
+	When merging Defaults, allow a subsequent global Defaults (no
+	binding) to override a prior Defaults setting with a binding.
+	[0be52fa6d4d8]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	add_defaults: defs can never be NULL
+	[9ba97823b757]
+
+	* plugins/sudoers/cvtsudoers_merge.c:
+	Plug memory leak when making a default host-specific. We don't need
+	to allocate new space for the binding list, just the members of the
+	list.
+	[5667d09136f2]
+
+2021-12-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, examples/Makefile.in, examples/cvtsudoers.conf:
+	Add an example cvtsudoers.conf file.
+	[aa738148e712]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h:
+	Add group_file, match_local, and passwd_file to cvtsudoers.conf.
+	Previously, these were only settable via command line options.
+	[a7a8b0af3c42]
+
+2021-12-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/TROUBLESHOOTING.md:
+	Remove question about running Solaris 11 binaries on Solaris 10.
+	Current versions of sudo use many APIs that are not present on
+	Solaris 10. If you want a sudo Solaris 10 binary, build it on
+	Solaris 10, not 11.
+	[0346a46cf595]
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/test34.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test34.sh:
+	Add simple test for cvtsudoers merge functionality.
+	[fda86b17249a]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fr.mo,
+	po/fr.po, po/hr.mo, po/hr.po, po/ja.mo, po/ja.po, po/pl.mo,
+	po/pl.po, po/sr.mo, po/sr.po, po/uk.mo, po/uk.po, po/zh_CN.mo,
+	po/zh_CN.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[edfdaac9b1e7]
+
+	* MANIFEST, plugins/sudoers/po/es.mo, plugins/sudoers/po/es.po:
+	Add sudoers Spanish translation from translationproject.org
+	[502d45c0af5f]
+
+2021-12-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Bugs #1013 and #1014
+	[1a7b533c5829]
+
+	* lib/util/mkdir_parents.c:
+	sudo_mkdir_parents: make sure the path we created is a directory For
+	extra paranoia, verify that the directory we created is still a
+	directory before we fchown() it.
+	[75c23aaa9fca]
+
+	* docs/sudo.man.in, docs/sudo.mdoc.in:
+	In SECURITY NOTES, clarify that PATH may be overridden by the
+	policy. Bug #1014
+	[4f7035d6b921]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/mkdir_parents.c, lib/util/mkdirat.c, logsrvd/logsrvd.c,
+	plugins/sudoers/timestamp.c, scripts/mkdep.pl:
+	Avoid TOCTOU in sudo_mkdir_parents() using openat(2) and mkdirat(2).
+	This also allows us to make path const as it should be.
+	[46db77e4afb8]
+
+	* plugins/sudoers/ldap_conf.c, plugins/sudoers/sudo_ldap_conf.h:
+	Sudo parsed "deref" and "tls_reqcert" in ldap.conf but didn't set
+	the options. The switch() in the sudo_ldap_set_options_table()
+	function needed to be updated to treat CONF_DEREF_VAL and
+	CONF_REQCERT_VAL data types as int. Fix from Dennis Filder. Bug
+	#1013.
+	[5f5bdf9010d7]
+
+2021-12-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/SECURITY.md:
+	Minor formatting tweak so we can import into the sudo web site.
+	[220c647b6635]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/pwutil_impl.c:
+	Fix CodeQL "Multiplication result converted to larger type"
+	warnings.
+	[a17db0b94018]
+
+2021-12-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/SECURITY.md:
+	Surround email addresses with angle brackets, not square backets.
+	[b9514c0165f2]
+
+2021-12-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po, po/fa.mo,
+	po/fa.po, po/fi.mo, po/fi.po, po/ja.mo, po/ja.po, po/sr.mo,
+	po/sr.po, po/zh_CN.mo, po/zh_CN.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[b2815226875b]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update .pot files for 1.9.9
+	[e4e903808160]
+
+2021-12-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* README.LDAP.md, docs/CONTRIBUTING.md, docs/TROUBLESHOOTING.md,
+	docs/UPGRADE.md:
+	Minor formatting tweaks.
+	[eee91b1fc68c]
+
+2021-12-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL, INSTALL.md, MANIFEST, README, README.LDAP, README.LDAP.md,
+	README.md, docs/CONTRIBUTING.md, docs/CONTRIBUTORS,
+	docs/CONTRIBUTORS.md, docs/HISTORY, docs/HISTORY.md, docs/LICENSE,
+	docs/LICENSE.md, docs/Makefile.in, docs/TROUBLESHOOTING,
+	docs/TROUBLESHOOTING.md, docs/UPGRADE, docs/UPGRADE.md, etc/sudo-
+	logsrvd.pp, etc/sudo-python.pp, etc/sudo.pp:
+	Convert README and docs files to markdown. This makes things look
+	better on GitHub and we can use the markdown version directly in the
+	new sudo web site.
+	[1cdcbce74a73]
+
+2021-12-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/SECURITY.md:
+	Policy -> Disclosure Policy
+	[13f278869e03]
+
+	* Merge pull request #124 from juspence/main
+
+	Allow sudo -g anyone and sudo -u anyone -g anytwo
+	[1a000f5aaba1]
+
+2021-12-04  juspence  <87657842+juspence@users.noreply.github.com>
+
+	* plugins/sudoers/sudoers.in:
+	Allow sudo -g anyone and sudo -u anyone -g anytwo
+
+	When only the user (ALL) is specified explicitly, and the group is
+	implied, only sudo -u works. Specifying both the user and group,
+	like (ALL:ALL), is required to:
+
+	1) Use sudo -g by itself (with no -u user) 2) Use sudo -u and -g
+	together, with a -g group that is different from the -u user's
+	primary group
+	[ca31aaa0b074]
+
+2021-12-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/Makefile.in:
+	Add build dir to include search path for mksiglist.h and mksigname.h
+	Fixes out of tree builds on systems without sys_siglist[] or
+	sys_signame[]. GitHub issue #123.
+	[fccd76813052]
+
+2021-11-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_merge.c,
+	plugins/sudoers/regress/cvtsudoers/sudoers1,
+	plugins/sudoers/regress/cvtsudoers/sudoers2,
+	plugins/sudoers/regress/cvtsudoers/sudoers3:
+	cvtsudoers: better merging of lists that are not exact duplicates
+	When merging rules, if one list would be overridden by another,
+	remove the overridden rule and continue merging.
+	[19dc52bd9c6f]
+
+2021-11-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Update NEWS with latest changes.
+	[fafe74e0b20f]
+
+2021-11-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/edit_open.c:
+	dir_is_writable: don't treat EPERM from faccessat() as a fatal
+	error. We can get EPERM on Linux with SELinux. GitHub issue #122.
+	[25bbc56b2f6d]
+
+2021-11-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_merge.c:
+	cvtsudoers: add -l option to log merge actions The "-l logfile"
+	option can be used to store a log of what actions cvtsudoers took
+	when merging multiple files. For example, which aliases were
+	renamed, which entries were overriden or removed as duplicated.
+	[fa96976882aa]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.9
+	[dad415a982bc]
+
+2021-11-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, docs/CONTRIBUTORS, po/fa.mo, po/fa.po:
+	New Persian (Farsi) translation from translationproject.org
+	[3665533a7219]
+
+2021-11-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_csv.c:
+	Quiet a PVS Studio warning. The warning that need_comma is always
+	false is correct but in this case it is better to use a consistent
+	construct so that if the code is re-ordered no bugs are introduced.
+	[5109a34444f5]
+
+	* lib/util/getentropy.c:
+	Pass correct size to free_zero(). Coverity CID 241233
+	[2ba51f57deb5]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_csv.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_merge.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/fmtsudoers_cvt.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/parse_ldif.c:
+	Add reference counting to Defaults bindings. Previously, we checked
+	that the previous entry's binding pointer was not the same while
+	freeing. However, to be able to merge Defaults records we cannot
+	rely on Defaults entries with the same binding being immediately
+	adjacent. This removes the prev_binding checks in favor of a
+	reference count which allows us to plug the memory leak in
+	cvtsudoers when merging Defaults.
+	[0a789516622b]
+
+2021-11-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_merge.c, plugins/sudoers/parse.h:
+	cvtsudoers: merge aliases when multiple sudoers files are specified
+	Duplicate aliases are remove. If there are conflicting alias names,
+	the conflicts are renamed by appending a numerical suffix. For
+	example, if there are two SERVERS Host_Aliases, the second one will
+	be renamed to SERVERS_1.
+	[d9b602626b8c]
+
+	* plugins/sudoers/cvtsudoers_merge.c:
+	cvtsudoers: merge Defaults when multiple sudoers files are specified
+	If a hostname is specified with the sudoers file, it will be used to
+	make the Defaults setting host-specific, if possible. Duplicate
+	Defaults settings are removed and conflicts are warned about. It is
+	not possible to resolve all conflicts automatically.
+	[756b05304ccb]
+
+	* plugins/sudoers/cvtsudoers_merge.c:
+	cvtsudoers: merge userspecs when multiple sudoers files are
+	specified If a hostname is specified with the sudoers file, it will
+	be used to make the userspec host-specific, if possible. Duplicate
+	userspecs are removed but conflicting entries are not currently
+	pruned.
+	[643b533bb4f4]
+
+	* docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in:
+	Document how to merge sudoers files with cvtsudoers.
+	[241c3786f5a8]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.h,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c, plugins/sudoers/sssd.c:
+	init_parse_tree() now takes ownership of lhost and shost, if any.
+	This means that lhost and shost in struct sudoers_parse_tree are no
+	longer const and that free_parse_tree() will free lhost/shost. The
+	only consumer that passed in lho.st/shost was the SSSD back-end
+	which has been updated to avoid a double-free.
+	[650bb75666fb]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_merge.c:
+	cvtsudoers: use init_parse_tree() to initialize a parse tree. Also
+	free the parse tree before exit.
+	[9d8f8bb88192]
+
+	* MANIFEST, Makefile.in, etc/macos-background.png, etc/sudo-
+	logsrvd.pp, etc/sudo-python.pp, etc/sudo.pp:
+	Add a background image for the macOS installer.
+	[39889307b278]
+
+	* scripts/pp:
+	Update PolyPkg
+	[44b1d08be1b0]
+
+2021-11-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	mkpkg: handle a macOS SDK that just uses the major version. For
+	example, MacOSX11.sdk instead of MacOSX11.3.sdk.
+	[ce41fc5aa672]
+
+	* lib/util/Makefile.in:
+	Add missing dependencies for timegm.
+	[b20c4936504b]
+
+2021-11-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c:
+	Add support for specifying the hostname as a prefix to the sudoers
+	file. If present, the host name is copied into the struct
+	sudoers_parse_tree.
+	[e87e11cccb6e]
+
+2021-11-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c:
+	cvtsudoers: parse multiple sudoers files and store them in a tail
+	queue In the future the parsed files will be merged before they are
+	output.
+	[89c77b3f4157]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.h:
+	Add sudoers_parse_tree_list, a tail queue of struct
+	sudoers_parse_tree. This will be used to store multiple parse trees
+	and merge them into a single sudoers_parse_tree.
+	[073ada18f18b]
+
+	* docs/CONTRIBUTING.md:
+	Fix formatting of links.
+	[df50208b3f70]
+
+	* MANIFEST, docs/CONTRIBUTING.md:
+	Add contributing guide.
+	[a99f3a0757f6]
+
+	* .github/workflows/codeql-analysis.yml:
+	Create codeql-analysis.yml
+	[efab25dab29c]
+
+2021-11-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, docs/SECURITY.md:
+	Add security doc, inspired by the Microsoft template.
+	[0a8012f8ee35]
+
+	* .gitignore, .hgignore, INSTALL, MANIFEST, Makefile.in, README,
+	configure, configure.ac, doc/CONTRIBUTORS, doc/HISTORY, doc/LICENSE,
+	doc/Makefile.in, doc/TROUBLESHOOTING, doc/UPGRADE,
+	doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in, doc/fixman.sh,
+	doc/fixmdoc.sed, doc/schema.ActiveDirectory, doc/schema.OpenLDAP,
+	doc/schema.iPlanet, doc/schema.olcSudo, doc/sudo.conf.man.in,
+	doc/sudo.conf.man.in.sed, doc/sudo.conf.mdoc.in, doc/sudo.man.in,
+	doc/sudo.man.in.sed, doc/sudo.mdoc.in, doc/sudo_logsrv.proto.man.in,
+	doc/sudo_logsrv.proto.mdoc.in, doc/sudo_logsrvd.conf.man.in,
+	doc/sudo_logsrvd.conf.mdoc.in, doc/sudo_logsrvd.man.in,
+	doc/sudo_logsrvd.mdoc.in, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudo_plugin_python.man.in,
+	doc/sudo_plugin_python.mdoc.in, doc/sudo_sendlog.man.in,
+	doc/sudo_sendlog.mdoc.in, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in,
+	doc/sudoers.man.in.sed, doc/sudoers.mdoc.in,
+	doc/sudoers_timestamp.man.in, doc/sudoers_timestamp.mdoc.in,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.man.in,
+	doc/visudo.mdoc.in, docs/CONTRIBUTORS, docs/HISTORY, docs/LICENSE,
+	docs/Makefile.in, docs/TROUBLESHOOTING, docs/UPGRADE,
+	docs/cvtsudoers.man.in, docs/cvtsudoers.mdoc.in, docs/fixman.sh,
+	docs/fixmdoc.sed, docs/schema.ActiveDirectory, docs/schema.OpenLDAP,
+	docs/schema.iPlanet, docs/schema.olcSudo, docs/sudo.conf.man.in,
+	docs/sudo.conf.man.in.sed, docs/sudo.conf.mdoc.in, docs/sudo.man.in,
+	docs/sudo.man.in.sed, docs/sudo.mdoc.in,
+	docs/sudo_logsrv.proto.man.in, docs/sudo_logsrv.proto.mdoc.in,
+	docs/sudo_logsrvd.conf.man.in, docs/sudo_logsrvd.conf.mdoc.in,
+	docs/sudo_logsrvd.man.in, docs/sudo_logsrvd.mdoc.in,
+	docs/sudo_plugin.man.in, docs/sudo_plugin.mdoc.in,
+	docs/sudo_plugin_python.man.in, docs/sudo_plugin_python.mdoc.in,
+	docs/sudo_sendlog.man.in, docs/sudo_sendlog.mdoc.in,
+	docs/sudoers.ldap.man.in, docs/sudoers.ldap.mdoc.in,
+	docs/sudoers.man.in, docs/sudoers.man.in.sed, docs/sudoers.mdoc.in,
+	docs/sudoers_timestamp.man.in, docs/sudoers_timestamp.mdoc.in,
+	docs/sudoreplay.man.in, docs/sudoreplay.mdoc.in, docs/visudo.man.in,
+	docs/visudo.mdoc.in, etc/codespell.skip:
+	Rename "doc" directory to "docs" for better GitHub compatibility.
+	[1268c3ae0916]
+
+	* lib/util/Makefile.in:
+	Use $(SED), not sed, when generating mksiglist.h/mksigname.h
+	[7a7b636a3f32]
+
+	* configure, configure.ac, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Add configure check for sha1sum and use "openssh dgst -sha1" if
+	missing. Only needed when building the seed corpus zip files.
+	[3c74ceba0446]
+
+	* include/sudo_compat.h:
+	sudo_compat.h: include unistd.h regardless of OS type This helps to
+	avoid issues with mismatched headers and libraries.
+	[4a22435a2832]
+
+2021-11-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/visudo.c:
+	install_sudoers: fix return value when there is no temp file to
+	install This can happen when no changes were made. Also preserve the
+	edited temp file on error if we are unable to move it into place.
+	[01c1052ac874]
+
+	* plugins/python/regress/testdata/check_multiple_approval_plugin_and_a
+	rguments.stdout:
+	Bump plugin version in test data to 1.18.
+	[138b9f6a6143]
+
+	* plugins/sudoers/defaults.c:
+	free_defs_val: free rlimits like strings (which they are).
+	[ade32de829cb]
+
+	* plugins/sudoers/visudo.c:
+	Rename {check,set}_perms variable to {check,set}_mode. Avoids a name
+	clash with the set_perms() function.
+	[a2dfa0d36690]
+
+	* src/edit_open.c:
+	Avoid symbol name clash with is_writable() function variable. Rename
+	"is_writable" variable to "writable".
+	[a52bd106933b]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document new resource limit settings.
+	[022e51bff860]
+
+	* doc/UPGRADE:
+	Mention that the core dump size resource limit now defaults to 0.
+	[22997e8008c9]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, src/exec.c:
+	Document resource limit support in command_info[] and Bump plugin
+	API minor. This is supported beginning with sudo 1.9.9 and plugin
+	API 1.17.
+	[2004a71a11b3]
+
+2021-11-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/defaults.c,
+	src/limits.c:
+	Use strtoul() on systems without strtoull(). We can assume that
+	systems without strtoull() have 32-bit resource limits.
+	[59c1be5a0387]
+
+	* src/exec.c, src/limits.c, src/sudo.c, src/sudo.h:
+	Add front-end support for setting resouce limits. The special value
+	"user" means preserve the invoking user's limit. The value "default"
+	means don't override the default limit for the user as assigned by
+	the system (PAM, loging.conf, userdb, etc).
+	[7ad6961d5d72]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/mkdefaults,
+	plugins/sudoers/policy.c:
+	Add basic support for setting resource limits in sudoers. The
+	default for rlimit_core is "0,0" Resource limits are passed back to
+	the front-end in command_info[] when set.
+	[298d5e228635]
+
+	* src/edit_open.c:
+	switch_user_nonfatal: only define if using faccessat()
+	[1a6b2c0240f5]
+
+2021-11-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/visudo.man.in, doc/visudo.mdoc.in, plugins/sudoers/visudo.c:
+	visudo: add -O and -P options to check/set owner and permissions.
+	This can be used in conjunction with the -c option to check that the
+	sudoers file ownership and permissions are correct. Bug #1007
+	[1f20721148b0]
+
+2021-11-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/UPGRADE:
+	UPGRADE: mention SELinux behavior change.
+	[0b8cef633225]
+
+	* src/selinux.c, src/sudo.h, src/sudo_edit.c:
+	Rename selinux_setcon -> selinux_setexeccon
+	[50bde2e4d922]
+
+	* src/selinux.c:
+	In the SELinux role is "unconfined_r", disable SELinux support. We
+	only want to apply SELinux to confined users. This is a bit of a
+	hack as unconfined_r is specific to the targeted policy.
+	[aaa8ee97f31e]
+
+	* src/exec_monitor.c, src/exec_nopty.c, src/selinux.c, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c:
+	Separate out the code to compute the context from selinux_setup().
+	This makes it possible to determine whether we really need to
+	execute the command via the sesh helper. What was left of
+	selinux_setup() is now selinux_relabel_tty() and
+	selinux_audit_role_change().
+	[687a81e59fdd]
+
+	* plugins/sudoers/policy.c, src/selinux.c, src/sudo.c:
+	Pass status of selinux sudoers setting to front-end as selinux-rbac.
+	The front-end uses this to decide whether or not to enable SELinux.
+	If selinux-rbac is true _or_ if it is not present and selinux_role
+	or selinux_type are set, SELinux support is enabled. Previously,
+	SELinux support was only enabled if a role was specified.
+	[2f21ae08ebbd]
+
+	* src/edit_open.c:
+	dir_is_writable: add fallback if changing UIDs fails The SELinux
+	policy may not allow uid/gid changes which will break the
+	writability checks and cause sudoedit to fail.
+	[5c5928a0c314]
+
+2021-11-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Build python package on Fedora
+	[7261434fc60c]
+
+2021-11-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/selinux.c:
+	Make get_exec_context static, it is unused outside selinux.c.
+	[be59f91e53dd]
+
+	* doc/sudo.conf.mdoc.in:
+	Fix lint warning: skipping paragraph macro: Pp before Bd
+	[f84297a652d8]
+
+2021-10-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	Escape some minus signs ('-') as required by newer groff.
+	[4a1a2d6d5c19]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/timegm.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/gentime.c,
+	plugins/sudoers/gmtoff.c, plugins/sudoers/parse.h, scripts/mkdep.pl:
+	parse_gentime: use timegm() to generate time since the epoch The
+	timegm() function is non-standard but widely available. Provide an
+	implementation for those systems that lack it. Bug #1006
+	[3ca20dfdb44c]
+
+	* include/sudo_compat.h, lib/util/Makefile.in, scripts/mkdep.pl:
+	Fix pasto in gmtime_r and localtime_r macros. Also add missing
+	Makefile targets for them.
+	[2310e188fdd4]
+
+	* plugins/sudoers/gmtoff.c:
+	Take daylight saving time into consideration when computing offset.
+	Otherwise, the resulting time may be off by and hour, depending on
+	whether DST is currently active compared to the target time.
+	[20c60fe8e8fc]
+
+2021-10-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Back out f2d82771e7dd, arm64e on macOS is still in preview state.
+	Until arm64e on macOS is finalized, continue to build arm64
+	packages.
+	[6c3bbd6ffc3a]
+
+2021-10-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Build arm64e ABI binaries on macOS 11 and above. We originally used
+	arm64 here but the correct ABI is arm64e. The arm64 arch will be
+	removed in a future release.
+	[f2d82771e7dd]
+
+	* logsrvd/logsrvd_local.c:
+	Use iolog_openat() when opening the log.json file in the I/O log
+	dir.
+	[9041b20b8d01]
+
+2021-10-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/tls_init.c:
+	Use BIO_new_file() not BIO_new_fd() to read dhparams file. Older
+	versions of OpenSSL and wolfSSL lack BIO_new_fd(). Also explicitly
+	include openssl/bio.h and openssl/dh.h for wolfSSL.
+	[8338f58d5ba0]
+
+	* INSTALL, config.h.in, configure, configure.ac:
+	wolfSSL not WolfSSL
+	[4ee7f96ef87c]
+
+	* .circleci/config.yml:
+	Add wolfSSL variant to continuous integration tests.
+	[dbbab23e069c]
+
+	* docker/debian/latest/Dockerfile, docker/debian/testing/Dockerfile,
+	docker/ubuntu/devel/Dockerfile, docker/ubuntu/latest/Dockerfile,
+	docker/ubuntu/rolling/Dockerfile:
+	Add libwolfssl-dev to Debian and Ubuntu Dockerfiles Fedora does not
+	appear to have an official wolfssl package.
+	[12c0feaa0ebb]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	White space in an include file path supported by sudo 1.9.1 or
+	higher.
+	[9a22034de181]
+
+2021-10-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/iolog/hostcheck.c,
+	lib/util/digest_openssl.c, lib/util/getentropy.c, logsrvd/logsrvd.c,
+	logsrvd/logsrvd.h, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c,
+	logsrvd/sendlog.h, logsrvd/tls_client.c, logsrvd/tls_common.h,
+	logsrvd/tls_init.c, plugins/sudoers/log_client.c,
+	plugins/sudoers/log_client.h:
+	Add support for WolfSSL's OpenSSL compatibility layer. Based on
+	changes from Hayden Roche
+	[568557ecb77b]
+
+	* lib/util/Makefile.in, plugins/sudoers/Makefile.in:
+	regenerate dependencies
+	[d36bf7724e49]
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, logsrvd/logsrvd_journal.c,
+	logsrvd/logsrvd_local.c, logsrvd/logsrvd_queue.c,
+	logsrvd/logsrvd_relay.c, logsrvd/regress/fuzz/fuzz_logsrvd_conf.c,
+	logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Move include of log_server.pb-c.h into logsrvd.h and sendlog.h This
+	way there is no include file order issue with the
+	PROTOBUF_C_VERSION_NUMBER check.
+	[23678487ffaf]
+
+	* docker/debian/latest/Dockerfile, docker/debian/testing/Dockerfile,
+	docker/fedora/latest/Dockerfile, docker/fedora/rawhide/Dockerfile,
+	docker/ubuntu/devel/Dockerfile, docker/ubuntu/latest/Dockerfile,
+	docker/ubuntu/rolling/Dockerfile:
+	Add pkg-config to all Dockerfile
+	[63457bb84c4d]
+
+2021-10-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/tls_init.c:
+	Use SSL_FILETYPE_PEM with SSL_CTX_use_PrivateKey_file, not
+	X509_FILETYPE_PEM While they are defined to the same value in
+	OpenSSL one should not rely on this.
+	[1a1557931dbf]
+
+2021-10-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Fix setting _PATH_ASAN_LIB, need to double up the square brackets.
+	[98143164620a]
+
+	* logsrvd/sendlog.c:
+	sudo_sendlog: send runenv, rungid and runuid from log.json too With
+	this change, sudo_sendlog can now round-trip sudo-style I/O logs
+	that use the newer log.json format without losing any information.
+	[d9d3dad6cca3]
+
+2021-10-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, lib/util/arc4random.c:
+	arc4random: need to include sys/random.h on Solaris too. This was
+	removed when Linux genentropy() was disabled.
+	[18ea9b386950]
+
+2021-10-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/hostcheck.c, lib/util/inet_ntop.c, logsrvd/logsrv_util.h,
+	plugins/sudoers/log_client.h:
+	Make sure INET_ADDRSTRLEN and INET6_ADDRSTRLEN are defined.
+	[e347465e0a05]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/log_client.c, plugins/sudoers/log_client.h,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h:
+	Only include log_client.h if SUDOERS_LOG_CLIENT is defined.
+	[c318f74cf2a8]
+
+	* Merge pull request #118 from larb0b/main
+
+	Define MAP_FAILED where relevant if undefined
+	[74f3e9f1a1f4]
+
+2021-10-21  Larkin Nickle  <me@larbob.org>
+
+	* lib/util/getentropy.c, lib/util/regress/mktemp/mktemp_test.c,
+	lib/util/snprintf.c:
+	Define MAP_FAILED where relevant if undefined
+
+	On systems such as HP-UX 10.20, MAP_FAILED is not defined.
+	[9f4976caa567]
+
+2021-10-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, m4/libtool.m4:
+	Improve macOS version detection to support macOS 11 and simplify
+	legacy logic From Jeremy Huddleston Sequoia
+	[f09b45ab460a]
+
+	* logsrvd/sendlog.c:
+	sudo_sendlog: send multiple I/O log records together if possible Try
+	to fill the write buffer and then send to the server instead of
+	sending records one at a time.
+	[0b084cd75d64]
+
+	* logsrvd/sendlog.c, logsrvd/sendlog.h:
+	sudo_sendlog: support multiple write buffers like sudo_logsrvd
+	[a46b88eff200]
+
+	* configure, configure.ac, lib/util/Makefile.in:
+	Always link libsudo_util.so with libcrypto.so if using OpenSSL. We
+	may need to use RAND_bytes() in the getentropy() emulation.
+	[9c805a008d76]
+
+	* config.h.in, configure, configure.ac, lib/util/getentropy.c,
+	plugins/sudoers/boottime.c:
+	Add an explicit check for sys/sysctl.h. This test needs to be done
+	after AC_LANG_WERROR to avoid including sys/sysctl.h on systems
+	where it is marked as deprecated via a #warning directive.
+	[d9f1f97b0f37]
+
+	* config.h.in, configure, configure.ac, lib/util/arc4random.c:
+	Use our own getentropy() by default on Linux. The glibc getentropy()
+	emulation will fail on older kernels that don't support getrandom().
+	Also use sudo_fatal() instead of sending SIGKILL on getentropy()
+	failure. GitHub issue #117.
+	[1ca9d10ff780]
+
+	* lib/util/getentropy.c:
+	Use the OpenSSL RAND_bytes() function if getrandom() fails.
+	[5f82f6d2ea36]
+
+	* lib/util/Makefile.in, lib/util/arc4random_buf.c, scripts/mkdep.pl:
+	Fix compilation of standalone arc4random_buf(). Apparently this code
+	was never compiled anywhere.
+	[a66c68c3a976]
+
+	* lib/util/uuid.c:
+	sudo_uuid_create: no longer need a union for the uuid.
+	[a9277bf0078c]
+
+2021-10-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog_free.c:
+	eventlog_free: free signal_name too
+	[1da686483f2a]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.dict:
+	Add new log.json keywords
+	[f4a30fc6c4ed]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c:
+	fuzz_iolog_json: initialize exit_value to -1
+	[bac9826b95a1]
+
+	* logsrvd/logsrvd.c:
+	Fix potential use-after-free when calling iolog_flush_all(). We need
+	to call iolog_flush_all() _before_ scheduling the commit point. If
+	we fail to schedule to commit point, the closure will be freed.
+	Coverity CID 220557
+	[364736f15a06]
+
+	* logsrvd/sendlog.c:
+	sendlog: use runargv from log.json if available
+	[88a0f4d7bb94]
+
+	* logsrvd/sendlog.c:
+	sudo_sendlog: send exit data in eventlog if present
+	[fdacc0f68c56]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	logsrvd/logsrvd_local.c, plugins/sudoers/logging.c:
+	No longer need to pass exit params to eventlog_exit(), use struct
+	eventlog. Now that struct eventlog includes the exit parameters we
+	can simplify how eventlog_exit() is called.
+	[8580c0e8334d]
+
+	* include/sudo_eventlog.h, lib/iolog/iolog_json.c,
+	lib/iolog/iolog_loginfo.c, logsrvd/iolog_writer.c:
+	Read command run_time, signal and exit_value from I/O log log.json
+	file.
+	[05223c4cca0c]
+
+	* logsrvd/logsrvd_local.c:
+	Log the command run-time and exit status in the I/O log.
+	[8b02b373f79b]
+
+	* lib/eventlog/eventlog.c:
+	format_json: fix pasto when setting dumped_core boolean
+	[ca11285c088a]
+
+2021-10-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c, logsrvd/logsrvd_local.c:
+	Handle a missing run_time in an ExitMessage. It is now possible to
+	pass a NULL run_time to eventlog_exit().
+	[f3e989682931]
+
+2021-10-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	logsrvd/logsrvd.c:
+	No need to flush logs before commit point if we flush after each
+	write. Also document that logs are flushed before sending a commit
+	point even when flushing is disabled.
+	[50323241569d]
+
+2021-10-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, include/sudo_iolog.h, lib/iolog/Makefile.in,
+	lib/iolog/iolog_conf.c, lib/iolog/iolog_flush.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Flush I/O logs before we send a commit point. The commit point
+	message means we have written the data to disk so we should not be
+	buffering it any longer. We do not currently fsync(2) the data after
+	flushing, perhaps we should.
+	[5233172b7531]
+
+	* logsrvd/logsrv_util.c:
+	Do not treat a resume point of [0, 0] as an error. If the connecton
+	is interrupted before sudo sends back a commit_point message,
+	resuming at [0, 0] is correct. Also add a warning on unexpected EOF
+	parsing the timing file.
+	[105f29878ad7]
+
+2021-10-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Display a more helpful message if the user tries to run "sudo cd".
+	Since "cd" is a shell built-in command it cannot be run directly via
+	sudo. The user either needs to spawn a shell via "sudo -s" or use
+	the -D option to run a command in a specific directory.
+	[4d45797dfb11]
+
+	* configure, configure.ac:
+	Don't install sudoers.a when configured with --enable-static-
+	sudoers. We already avoid installing it when --disable-shared-util
+	is specified.
+	[0d2022bc07cb]
+
+2021-10-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	mkpkg: preserve make exit value on exit Fixes a problem where the
+	exit value from mkpkg was 0 even on error.
+	[0d0f15bf10cf]
+
+	* plugins/sudoers/cvtsudoers_csv.c:
+	Fix typos in SELinux and Solaris priv support.
+	[16b9a1459f1d]
+
+	* MANIFEST, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers.h, plugins/sudoers/cvtsudoers_csv.c:
+	cvtsudoers: initial support for CSV output For CSV output we double
+	quotes strings that contain commas. For each literal double quote
+	character present inside the string, two double quotes are output.
+	[8f7763b74563]
+
+	* lib/iolog/Makefile.in, lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	regenerate dependencies
+	[09d11b5c7d41]
+
+	* docker/README, etc/codespell.ignore:
+	Fix typo and avoid a codespell false positive.
+	[81a365b29c3c]
+
+2021-10-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .circleci/config.yml:
+	Add build-nointercept and test-nointercept
+	[d39877327ccc]
+
+2021-10-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .circleci/config.yml:
+	circleci: test multiple build options We now do separate builds with
+	LDAP/SSSD enabled, logsrv client/server disabled, and static-sudoers
+	enabled.
+	[4d8a9b45156c]
+
+	* configure, configure.ac, plugins/sudoers/Makefile.in:
+	Fix fuzzer build with when --enable-static-sudoers is used. This
+	introduces a sudoers-specific version of LT_STATIC instead of
+	appending the --tag=disable-shared to SUDOERS_LDFLAGS. I've also
+	removed the -static flag as it should not be needed.
+	[864a2fd4e3f7]
+
+2021-10-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* docker/README:
+	Mention --security-opt=seccomp=unconfined workaround for bleeding
+	edge. May be needed for Fedora rawhide and Ubuntu testing, among
+	others.
+	[a465fdb0a7de]
+
+	* configure, configure.ac:
+	Try to handle the case where libasan.so is a linker script. Fixes
+	check_noexec with ASAN on Fedora where libasan.so just includes the
+	actual library file.
+	[f96d1d0cea53]
+
+	* .circleci/config.yml, docker/README,
+	docker/fedora/latest/Dockerfile, docker/fedora/rawhide/Dockerfile:
+	Enable address and undefined behavior sanitizers in CI builds. We
+	need to disable leak sanitizer during "make check" because it uses
+	ptrace which is not allowed for unprivileged containers.
+	[9378e3856a60]
+
+2021-10-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .circleci/config.yml:
+	Switch to Ubuntu latest for circleci build.
+	[1270ca1ba47d]
+
+	* .circleci/config.yml, docker/debian/latest/Dockerfile,
+	docker/debian/testing/Dockerfile, docker/fedora/latest/Dockerfile,
+	docker/fedora/rawhide/Dockerfile, docker/ubuntu/devel/Dockerfile,
+	docker/ubuntu/latest/Dockerfile, docker/ubuntu/rolling/Dockerfile:
+	Add build user for circleci instead of running as root.
+	[27dcb5218cb2]
+
+	* .circleci/config.yml, MANIFEST, docker/README,
+	docker/debian/latest/Dockerfile, docker/debian/testing/Dockerfile,
+	docker/fedora/latest/Dockerfile, docker/fedora/rawhide/Dockerfile,
+	docker/ubuntu/devel/Dockerfile, docker/ubuntu/latest/Dockerfile,
+	docker/ubuntu/rolling/Dockerfile:
+	Use circleci for continuous integegration. Build container
+	descriptions are in the new docker directory.
+	[d5b5b16b0624]
+
+2021-10-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .gitignore, .hgignore:
+	Update ignore file.
+	[7fe8afa88e96]
+
+2021-10-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoreplay.c:
+	Sync "sudo -l" output with normal sudo log format. It now prints
+	runchroot and runcwd (falling back on cwd). As a result, submithost
+	is now printed first, matching sudo. Also avoid printing NULL
+	pointers and skip entries that don't have at least command,
+	submituser and runuser set.
+	[0d6b96ec88a1]
+
+	* lib/iolog/iolog_json.c:
+	iolog_parse_json_object: optimize for large argv
+	[5fa1929189a3]
+
+2021-09-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Add "-fcf-protection" to SSP_CFLAGS and SSP_LDFLAGS if supported.
+	Can be disabled via --disable-hardening.
+	[589507ecadf4]
+
+	* configure, configure.ac:
+	Add "-z now" to hardened link options if supported. Can be disabled
+	via --disable-hardening.
+	[11ff1d86440b]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/editor.c,
+	plugins/sudoers/regress/editor/check_editor.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/visudo.c:
+	find_editor: remove the env_error argument There is no case where we
+	should fail to find an editor just because the values of EDITOR,
+	VISUAL and SUDO_EDITOR are unavailable. Both sudoedit and the
+	"env_editor" sudoers setting are documented as falling back on the
+	hard-coded list of editors in the "editors" sudoers setting. Bug
+	#1000
+	[caa529a0cab6]
+
+	* plugins/sudoers/check_aliases.c:
+	Use sudo_printf(SUDO_CONV_ERROR_MSG) instead of fprintf(stderr).
+	Avoids extraneous output in the fuzzer.
+	[981d3abd96c7]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Stub out sudo_printf() and avoid other use of stderr in fuzzers.
+	This makes it possible to parse sudoers without using quiet mode,
+	resulting in better coverage.
+	[3215cad4174f]
+
+2021-09-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Use a consistent version of fuzz_conversation() with all fuzzers.
+	Also undo a change to fuzz_sudoers.c that snuck in to the last
+	commit.
+	[8a94b06302b7]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c,
+	plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Fuzzers should not produce output. Excessive output makes the fuzzer
+	runs much less efficient.
+	[b9c485009c0f]
+
+	* logsrvd/logsrv_util.c:
+	expand_buf: fix conditional for when we need to preserve existing
+	data It is possible for the buffer offset to be zero when the length
+	is non-zero. The proper value to use is the same as is used for the
+	memcpy/memmove size. Fixes buffer corruption caused by a very long
+	command line that usually results in a dropped connection.
+	[59a4319b3463]
+
+2021-09-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, lib/util/closefrom.c:
+	Emulate closefrom() on macOS using proc_pidinfo(). This avoids
+	relying on /dev/fd which may not exist in a chroot jail. Adapted
+	from a change in OpenSSH by likan_999.student AT sina.com
+	[2e86d4150ce5]
+
+2021-09-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/edit_open.c:
+	Handle EMLINK and EFTYPE errno values for O_NOFOLLOW failure.
+	FreeBSD returns EMLINK and NetBSD returns EFTYPE instead of ELOOP.
+	This is only used to present the user with a more appropriate error
+	message.
+	[ca5499c8c40f]
+
+2021-09-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c:
+	Fix typo in last commit, use boolean AND not bitwise.
+	[685bd5d9ce6f]
+
+	* doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.h:
+	Add the ability to filter/match by command via the -m option. For
+	example "cvtsudoers -m cmd=/bin/ls" would only display entries that
+	would allow /bin/ls to be allowed or denied.
+	[3534a0170c59]
+
+2021-09-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers.h, plugins/sudoers/pwutil.c:
+	Add --group-file and --passwd-file options to cvtsudoers. These are
+	based on the code in testsudoers.
+	[3286dd5dd0bf]
+
+2021-09-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/mkdir_parents.c:
+	Move cppcheck suppression annotation to where it needs to be.
+	[17d601bc91f3]
+
+	* lib/util/mksigname.c:
+	format string fix: print signal number as unsigned. Quiets a
+	cppcheck warning; mksiglist.c already has this fixed.
+	[a28b72dceec4]
+
+	* plugins/sudoers/ldap_util.c:
+	Fix memory leak on error path if snprintf() overflows. Coverity CID
+	188804
+	[73872d2e2cd0]
+
+2021-09-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c:
+	Avoid reinitializing other auth methods.
+	[af0495460943]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	expand_include: add bounds checking when expanding %h escape.
+	[3c0ca1f0d4e5]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Check snprintf() return values even if we preallocated the correct
+	amount. There are no remaining unchecked snprintf() that can
+	actually overflow.
+	[0eaf1d4daa84]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_nextid.c:
+	iolog_nextid(): make iolog_dir argument const. We make a copy of the
+	directory so there's no real reason that parameter can't be const.
+	[f278847ca9aa]
+
+	* plugins/sudoers/ldap_util.c:
+	Amend truncation fix, the real problem was the size passed to
+	snprintf(). sudo_rcstr_alloc() takes a length (not a size) parameter
+	so when calling snprintf() we need to add one to the length.
+	[92f8a8b86d20]
+
+	* plugins/sudoers/ldap_util.c:
+	Fix truncation of the last char of the sudoRole cn passed to
+	append_default(). This string is primarily used for warning
+	messages. Also check the snprintf() return value to avoid silent
+	truncation. GitHub issue #115
+	[22b8d7bc62f8]
+
+2021-09-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_8p2 for changeset 9edebc604c58
+	[67357c8687d3] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.8p2
+	[9edebc604c58] [SUDO_1_9_8p2] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.8p2
+	[f29fdeb8ae5b]
+
+	* etc/codespell.exclude:
+	Standardize on "front-end" not "front end" in the man pages.
+	[b0ad634852e7]
+
+	* configure, configure.ac:
+	fix typo
+	[4d8738449daa]
+
+	* logsrvd/logsrvd_journal.c:
+	Reuse existing journal file for an accepted/rejected sub-command.
+	Otherwise we end up with zero-length files in the incoming queue dir
+	and may end up relaying one of those instead of the actual journal
+	file.
+	[4789371a43f3] <1.9>
+
+	* logsrvd/logsrvd_journal.c:
+	Reuse existing journal file for an accepted/rejected sub-command.
+	Otherwise we end up with zero-length files in the incoming queue dir
+	and may end up relaying one of those instead of the actual journal
+	file.
+	[545897a2761c]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Re-enable error output for the sudoers parser. It is only the alias
+	and defaults warnings we need to suppress.
+	[114bd7756a7c]
+
+	* src/exec_intercept.c:
+	Add intercept_cleanup() stub for when building w/o intercept
+	support.
+	[bd6f32a90787]
+
+	* src/exec_intercept.c, src/exec_nopty.c, src/exec_pty.c,
+	src/sudo_exec.h:
+	Add intercept_cleanup() to free the closure used by
+	intercept_accept_cb().
+	[55f6aea8b517]
+
+	* plugins/sudoers/auth/pam.c:
+	Don't re-initialize PAM for sub-commands.
+	[41d7d61e4ac5] <1.9>
+
+	* plugins/sudoers/auth/pam.c:
+	Don't re-initialize PAM for sub-commands.
+	[faa7aec4d145]
+
+	* logsrvd/logsrvd_local.c:
+	sudo_logsrvd: only send log ID for first command of a session There
+	is no need to send the log ID for each sub-command.
+	[e21b40af74f2] <1.9>
+
+	* logsrvd/logsrvd_local.c:
+	sudo_logsrvd: only send log ID for first command of a session There
+	is no need to send the log ID for each sub-command.
+	[625b18c5f821]
+
+	* plugins/sudoers/log_client.c:
+	Only store the first log id received from the server. Plugs a small
+	memory leak in intercept mode if the log server sends the log ID
+	again for sub-commands.
+	[e20563f3e152] <1.9>
+
+	* plugins/sudoers/log_client.c:
+	Only store the first log id received from the server. Plugs a small
+	memory leak in intercept mode if the log server sends the log ID
+	again for sub-commands.
+	[ca2ad5b219cd]
+
+2021-09-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	fuzz_sudoers: don't warn about unknown defaults entries Some fuzzing
+	inputs cause a huge number of warnings and displaying them all can
+	result in the fuzz run timing out. If we disable the warnings we can
+	avoid the timeout.
+	[4823ee305937]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/policy.c:
+	Limit paths for command, cwd and chroot to PATH_MAX bytes. This
+	helps prevent the fuzzer from going off the rails.
+	[9550fa76a645]
+
+	* plugins/sudoers/sudoers.c:
+	sudo -i: missing NULL terminator when moving argv to make room for
+	--login Fixes a potential crash for "sudo -i" when the target user
+	has bash as the shell (which needs the --login option). Bug #998.
+	[32644aae1eab] <1.9>
+
+	* plugins/sudoers/sudoers.c:
+	sudo -i: missing NULL terminator when moving argv to make room for
+	--login Fixes a potential crash for "sudo -i" when the target user
+	has bash as the shell (which needs the --login option). Bug #998.
+	[4b297f2ead15]
+
+	* lib/eventlog/eventlog.c:
+	Only append argv[] to the log line if argv[0] is not NULL. It should
+	not be possible to reach this point with a command defined but
+	argv[] empty but it doesn't hurt to check.
+	[61f9cf744673]
+
+2021-09-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/check_aliases.c:
+	Only warn about an undefined alias or a cycle a single time. There's
+	no point in warning about the same problem multiple times. This
+	implementation assumes a small number of warnings and so just uses a
+	simple listed link.
+	[4461f65d1bad]
+
+	* configure, configure.ac:
+	Remove now-unused CHECK_INTERCEPT variable.
+	[447dbf8bea48]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Quiet pvs-studio false positive: V557 Array overrun is possible.
+	Make the zero length check explicit so as not to confuse static (or
+	human) analyzers.
+	[512ab29a9f28]
+
+2021-09-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test17.out.ok,
+	plugins/sudoers/regress/testsudoers/test17.sh:
+	Test that digest matching works with LDAP sudoCommand: ALL
+	[f7ec49401d4f]
+
+	* plugins/sudoers/ldap_util.c:
+	Allow a digest to be specified with the "ALL" command for ldap/sssd
+	back-ends. This has been possible with sudoers file entries since
+	sudo 1.9.0 but no corresponding change was made for ldap/sssd.
+	[89a30bbd7dac]
+
+	* lib/eventlog/eventlog.c:
+	Use localtime_r() not gmtime_r() when formatting the local time.
+	This is consistent with how sudo formatted time stamps prior to the
+	logging code being split off into libeventlog. We only need to use
+	gmtime_r() for ISO 8601 time.
+	[aee6e29ba9d6]
+
+	* lib/eventlog/eventlog.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/util/sudo_debug.c, plugins/audit_json/audit_json.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/timestr.c:
+	Check strftime(3) return value in all cases. Old versions of
+	strftime(3) didn't guarantee to NUL-terminate the buffer so we
+	explicitly clear the last byte of the buffer and check it.
+	[bc402e4bd4d2]
+
+	* config.h.in, configure, configure.ac, logsrvd/tls_init.c:
+	tls_init.c: use SSL_CTX_set0_tmp_dh_pkey if present. Fixes a warning
+	on OpenSSL 3.0 and plugs a memory leak of dhparams on config reload.
+	[02027ea86d3b]
+
+	* configure, configure.ac, lib/util/digest_openssl.c:
+	Use the EVP digest routines instead of calling SHA2 functions
+	directly. Avoids compiler warnings with OpenSSL 3.0.
+	EVP_MD_CTX_new() is only available for OpenSSL 1.1 and higher--we
+	will fall back to sudo's SHA2 code if necessary.
+	[6fbac28175f9]
+
+	* configure, configure.ac:
+	When using pkg-config, don't assume the names of the ssl and crypto
+	libs. On the HP-UX build machines these are named libssl_pic.a and
+	libcrypto_pic.a to avoid conflicting with the system libs.
+	[a8eb772b3a4d]
+
+	* lib/util/sudo_debug.c:
+	Store milliseconds in the debug file timestamp. Sometime second
+	granularity is not enough.
+	[1df3e75f1133]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/gmtime_r.c, lib/util/localtime_r.c:
+	Add gmtime_r and localtime_r tests and compat if missing.
+	[709671c493a3]
+
+	* lib/eventlog/eventlog.c, lib/iolog/iolog_path.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/util/sudo_debug.c, plugins/audit_json/audit_json.c,
+	plugins/sample_approval/sample_approval.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/gmtoff.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.c, plugins/sudoers/timestr.c:
+	Use gmtime_r() and localtime_r() instead of gmtime() and
+	localtime().
+	[5758514b25cb]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Plugin lines are for approval and audit plugins too.
+	[67bb7c0687f2]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, doc/sudo.man.in,
+	doc/sudo.mdoc.in, doc/sudo_logsrvd.man.in, doc/sudo_logsrvd.mdoc.in,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in,
+	doc/sudo_sendlog.man.in, doc/sudo_sendlog.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/visudo.man.in,
+	doc/visudo.mdoc.in:
+	Standardize on "front-end" not "front end" in the man pages.
+	[68748f8cc8a6]
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test16.out.ok,
+	plugins/sudoers/regress/testsudoers/test16.sh:
+	Add a test to exercise Bug #994
+	[eef2ece0e8d4]
+
+	* scripts/mkpkg:
+	mkpkg: limit the number of cores used to 16
+	[5b8f2aa834b8]
+
+2021-09-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	fix typo
+	[120b1e7d2aca]
+
+	* .hgtags:
+	Added tag SUDO_1_9_8p1 for changeset feb396a0d60d
+	[e5f560a935fc] <1.9>
+
+	* configure, configure.ac:
+	Merge sudo 1.9.8p1 from tip
+	[feb396a0d60d] [SUDO_1_9_8p1] <1.9>
+
+	* NEWS:
+	Bug #994.
+	[14ea3a741b25]
+
+	* plugins/sudoers/ldap_util.c:
+	Always allocate a struct sudo_command for the command, even for ALL.
+	This was missed in the previous set of changes, resulting in a crash
+	for LDAP and SSSD rules that give sudo "ALL" privileges. Bug #994.
+	[91d0379b068a]
+
+	* plugins/sudoers/Makefile.in:
+	Add SUDOERS_LDFLAGS to FUZZ_LDFLAGS Fixes a fuzzer link error when
+	building with ldap if the ldap libs are not in the default library
+	search path.
+	[a450881f9763]
+
+	* configure, configure.ac:
+	Fix the OpenSSL link order for the non-pkg-config case. Since -lssl
+	depends on -lcrypto, -lcrypto must be listed after -lssl. Fixes
+	linking of non-dynamic OpenSSL libs.
+	[787724ab6e87]
+
+2021-09-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.8p1
+	[fc8c69d55348]
+
+	* src/sudo_intercept_common.c:
+	sudo_interposer_init: verify message type from sudo We should only
+	get a HelloResponse from sudo at this point.
+	[a021319260b3]
+
+	* include/intercept.pb-c.h, src/exec_intercept.c,
+	src/intercept.pb-c.c, src/intercept.proto,
+	src/sudo_intercept_common.c:
+	Avoid symbol name clash to fix --enable-static-sudoers linking.
+	[5cc5e415844f]
+
+2021-09-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/policy.c:
+	append_defaults() should not be passed a value for boolean flags.
+	The operation should simply be set to true/false. Also treat a NULL
+	file as coming from the front-end. Bug #993.
+	[86e69d358916]
+
+2021-09-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, plugins/python/Makefile.in,
+	scripts/mkdep.pl, src/Makefile.in:
+	Teach mkdep.pl about --tag=disable-static in LTFLAGS. If static objs
+	are disabled we need to add explicit dependencies for .o files. The
+	OpenBSD libtool doesn't use a pic object file when linking
+	executables so we need to build the non-pic objects too.
+	[cdefeeb41a64]
+
+	* configure, configure.ac:
+	Use SUDO_APPEND_LIBPATH when appending to LIBTLS and LIBMD. The
+	OpenSSL pkgconfig files only include -L paths, not -R paths. Using
+	SUDO_APPEND_LIBPATH ensures the rpath is set correctly so the
+	binaries will run (not just link).
+	[29d051972287]
+
+	* INSTALL, configure, configure.ac:
+	Add --enable-openssl-pkgconfig-template option. This can be used to
+	find the correct openssl pkg-config file if it is not named
+	"openssl" (also libcrypto).
+	[77cd3463cefa]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Some POSIX yacc fixes for bison 3.8 yyerror() must be extern void
+	declare tokens with type instead of using separate %type lines
+	[c4e57f9e7df5]
+
+2021-09-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_8 for changeset e25cff5d148b
+	[4067d7a889fa] <1.9>
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	logsrvd/tls_init.c, plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Merge sudo 1.9.8 from tip
+	[e25cff5d148b] [SUDO_1_9_8] <1.9>
+
+	* .gitignore, .hgignore:
+	Add src/intercept.exp to ignore files.
+	[4eaa182a8808]
+
+2021-09-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo:
+	regen
+	[8c168099301b]
+
+	* NEWS:
+	Mention --enable-static-sudoers fix.
+	[c93a42253fd0]
+
+	* configure, configure.ac:
+	Fix typo introduced in 1.9.7 that set SUDO_LDFLAGS to
+	SUDOERS_LDFLAGS. Copy pasta is not always the best kind of pasta.
+	[08188442f77b]
+
+	* MANIFEST, configure, configure.ac, m4/sudo.m4, src/Makefile.in,
+	src/intercept.exp, src/intercept.exp.in, src/sudo_intercept.c:
+	sudo_intercept.so: only replace execvpe() if it is present.
+	execvpe() is a GNU extension also found on *BSD (but not macOS).
+	[26153ad9c6ca]
+
+	* NEWS:
+	We now intercept more than just execve().
+	[33e453f035f8]
+
+2021-09-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_intercept.c:
+	Implement simple PATH resolution for execvp(). We want to use PATH
+	from the current value of the environment, not the initial value of
+	PATH when the policy was opened. This is a little different from how
+	real execvp() works since we use stat() instead of just execve().
+	[fae58e1962cc]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, src/intercept.exp, src/sudo_intercept.c:
+	Add support for execl, execle, execlp, execvp, and execvpe.
+	Currently, PATH traversal is handled by sudoers which uses the
+	original PATH, not the one updated by the shell.
+	[59dfbbd39bf6]
+
+2021-09-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y:
+	Remove conditional include of alloca.h, we don't define
+	HAVE_ALLOCA_H. The configure check for alloca() was removed long ago
+	but this got missed.
+	[4c64529df149]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Define RBAC and mention incompatibility with intercept/log_subcmds.
+	[a44d8f96cad6]
+
+2021-09-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_intercept.c:
+	Fix computation of the token address when handling a partial read.
+	We want to treat it as an array of bytes, not an array of tokens.
+	Coverity CID 240011
+	[0bb3fb3315ce]
+
+	* plugins/sudoers/parse.c:
+	Quiet a PVS-Studio format string warning.
+	[4e445c646dc8]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Regen .pot files.
+	[4cec17bc24da]
+
+	* plugins/sudoers/po/cs.po:
+	Updated translations from translationproject.org
+	[62fdbab57411]
+
+2021-09-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/Makefile.in:
+	regen
+	[a2f37ca5473b]
+
+	* configure, configure.ac, lib/util/sudo_conf.c, scripts/mkdep.pl,
+	src/Makefile.in, src/exec_common.c, src/exec_intercept.c:
+	Do not compile intercept code if --disable-intercept is specified.
+	[9d31e2822c24]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	We now intercept execv() too.
+	[f0eac891cb5c]
+
+	* INSTALL:
+	INSTALL: --disable-intercept will also disable "log_subcmds"
+	[55ddfdae455d]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/parse.c:
+	Can't use intercept or log_subcmds with SELinux RBAC. SELinux policy
+	will prevent the inherited socket from sudo from being used and may
+	also restrict the ability to connect back to the sudo process.
+	[b73409172859]
+
+	* m4/ax_prog_cc_for_build.m4:
+	Fix typo in comment.
+	[3259f09e6952]
+
+	* po/cs.mo, po/cs.po:
+	Updated translations from translationproject.org
+	[7543d0d50ee2]
+
+	* include/intercept.pb-c.h, src/exec_intercept.c,
+	src/intercept.pb-c.c, src/intercept.proto, src/sudo_exec.h,
+	src/sudo_intercept_common.c:
+	Switch to a 128-bit token instead of a 64-bit secret. Protobuf
+	doesn't have a 128-bit type so use two u64s. We now support partial
+	reads of the token.
+	[e39ece25fb3b]
+
+2021-08-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, lib/util/Makefile.in, lib/util/regress/uuid/uuid_test.c,
+	lib/util/uuid.c:
+	Fix random uuid generation, no need to convert between byte order.
+	Also add regression test.
+	[fd2940acffc2]
+
+	* include/intercept.pb-c.h, src/exec_intercept.c,
+	src/intercept.pb-c.c, src/intercept.proto,
+	src/sudo_intercept_common.c:
+	sudo_intercept.so: send the secret immediately after connecting.
+	Sending the secret out of band, before the message size is read,
+	should make it harder to mount a DoS attack.
+	[4c8b6577bd8c]
+
+	* src/sudo_intercept_common.c:
+	Handle reading large messages that don't fit in a single recv(). We
+	know the length of what we are receiving so just loop until we have
+	it all, get EOF or an error.
+	[1b8aa927ea83]
+
+	* configure, configure.ac:
+	Add checks for -fstack-clash-protection and -Wl,-z,noexecstack We
+	use -Wc,-fstack-clash-protection as the linker flag to prevent
+	libtool from removing it from the link line.
+	[7cd701b5039e]
+
+	* src/exec_intercept.c:
+	Make the sudo side of the intercept socket non-blocking.
+	[3fe7129ea1f2]
+
+	* src/exec_intercept.c:
+	Handle partial read/write by dropping back into the event loop.
+	[fa216d963e18]
+
+	* src/exec_intercept.c:
+	intercept_check_policy: Fix double free introduced in last commit If
+	the command is not accepted we don't rebuild command_info[] and must
+	not free it. It will be freed by the policy instead.
+	[8bbd2af0924b]
+
+2021-08-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/intercept.pb-c.h, src/exec_intercept.c,
+	src/intercept.pb-c.c, src/intercept.proto,
+	src/sudo_intercept_common.c:
+	Update runcwd in command_info[] before passing it to the audit
+	plugin. Since sudoers does rejected commands itself the runcwd will
+	still not be correct for those.
+	[5462a5e1d760]
+
+	* src/exec_preload.c:
+	Fix LD_PRELOAD formatting when there is an existing LD_PRELOAD var.
+	[04d8d7750ff6]
+
+2021-08-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_intercept.c:
+	intercept_check_policy: fix potential NUL dereference on the error
+	path.
+	[4d1b3f39ccb1]
+
+	* NEWS, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/policy.c, src/exec.c,
+	src/exec_common.c, src/exec_nopty.c, src/exec_pty.c, src/sudo.c,
+	src/sudo.h:
+	Rename log_children -> log_subcmds
+	[abd73fc939c3]
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/eo.mo,
+	po/eo.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/ko.mo,
+	po/ko.po, po/pl.mo, po/pl.po, po/pt.mo, po/pt.po, po/pt_BR.mo,
+	po/pt_BR.po, po/tr.mo, po/tr.po, po/uk.mo, po/uk.po, po/zh_CN.mo,
+	po/zh_CN.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[f948528780fb]
+
+	* lib/util/sudo_debug.c:
+	Add sudo_debug_register_v2() stub for fuzzing build.
+	[ba522c0c2075]
+
+	* src/exec_intercept.c:
+	Fix use-after-free on error. Also remove useless free of a ptr that
+	is always NULL on the error path.
+	[75200535be80]
+
+	* src/exec_common.c:
+	No longer need to remap intercept fd but we do need to remap debug
+	fd. The intercept fd is closed in the ctor but the debug fd will
+	still be open.
+	[b48125b884f3]
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c, lib/util/util.exp.in,
+	logsrvd/logsrvd.c, logsrvd/sendlog.c,
+	plugins/audit_json/audit_json.c, plugins/python/sudo_python_debug.c,
+	plugins/sample_approval/sample_approval.c,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoreplay.c,
+	src/sesh.c, src/sudo.c, src/sudo_intercept_common.c:
+	sudo_debug_register: add minfd argument to specify lowest fd number
+	Use this in sudo_intercept.so to avoid allocating a low-numbered fd
+	which the shell reserves for use by scripts.
+	[50b23c4d0531]
+
+	* src/exec_intercept.c:
+	Fix command name of sub-command in logs when log_children is set.
+	[c1b35686d8b4]
+
+2021-08-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	log_allowed: pass struct eventlog * instead of argv[] and envp[].
+	This lets us log based on the command_info[] list passed in from the
+	front-end. Previously, much of the struct eventlog was constructed
+	from internal sudoers state instead.
+	[4c4a7ddfeba3]
+
+	* include/sudo_compat.h:
+	sudo_compat.h: include unistd.h on HP-UX to safely redefine
+	pread/pwrite HP-UX 11.31 defines static functions for pread() and
+	pwrite() which will conflict with our macros.
+	[2dd64cdc261f]
+
+	* config.h.in, configure, configure.ac, include/intercept.pb-c.h,
+	src/exec_intercept.c, src/exec_nopty.c, src/exec_pty.c,
+	src/intercept.pb-c.c, src/intercept.proto, src/sudo_exec.h,
+	src/sudo_intercept_common.c:
+	Change intercept IPC to use a localhost socket instead of inherited
+	fd. This allows intercept mode to work with shells that close all
+	open fds upon startup. The ctor in sudo_intercept.so requests the
+	port number and secret over the socket inherited from the parent
+	then closes it. For each policy request, a TCP connection is made to
+	the sudo parent process to perform the policy check. Child processes
+	re-use the TCP socket to request the port number and secret just
+	like the initial process started by sudo does.
+	[7e7e4a389f11]
+
+	* src/exec_intercept.c:
+	Add a state variable to intercept_closure, replaces policy_result.
+	[60fae103a4cd]
+
+	* plugins/sudoers/match_command.c:
+	command_matches: avoid printf("%s") of NULL in debug for sudo ALL.
+	[5c81c2c32b4c]
+
+	* Merge pull request #111 from commodo/fix-cflags
+
+	lib/util/Makefile.in: use host CFLAGS and CPPFLAGS for
+	mksig{name,list}
+	[ee86d28da792]
+
+2021-08-25  Alexandru Ardelean  <ardeleanalex@gmail.com>
+
+	* lib/util/Makefile.in:
+	lib: util: Makefile.in: use host CFLAGS and CPPFLAGS for
+	mksig{name,list}
+
+	When cross-build support was added for mkig{name,list} was added,
+	the CFLAGS and CPPFLAGS should have been updated to the
+	HOSTCFLAGS/HOSTCPPFLAGS vars.
+
+	In a cross-build scenario, some of these flags don't match what the
+	compiler can understand (because they may be architecture specific)
+	and may fail the build.
+
+	Using the HOSTCFLAGS/HOSTCPPFLAGS works and builds successfully.
+	Also the output binary works on the target.
+
+	This is in continuation of
+	- https://github.com/sudo-project/sudo/pull/104
+	- https://github.com/sudo-project/sudo/pull/109
+
+	Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
+	[f76870e1a6c5]
+
+2021-08-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_intercept.c:
+	Fold intercept_closure_reset() into intercept_close().
+	[ff00ab240672]
+
+	* src/exec_preload.c:
+	Fix typo that caused SUDO_INTERCEPT_FD to overwrite LD_PRELOAD.
+	[e4cd1043c7bb]
+
+	* src/exec_preload.c:
+	Fix off-by-one that could result in duplicate SUDO_INTERCEPT_FD
+	vars.
+	[9044d0dff708]
+
+	* src/sudo_intercept.c:
+	Fix typo in macOS execv change.
+	[1c637d909382]
+
+2021-08-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, src/intercept.exp, src/sudo_intercept.c:
+	Add execv(3) support to sudo_intercept.so. This allows intercept to
+	work with csh which uses execv(3) not execve(2).
+	[690ebf72b6f8]
+
+2021-08-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in:
+	Sync the list of functions trapped by sudo_noexec.so.
+	[b1f7799209ff]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Add a Debug example for sudo_intercept.so Don't try to enumerate all
+	the sudo programs that support debugging since all of them do.
+	[9c1201eaaca2]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Update sudoers Debug example to match the debug changes from sudo
+	1.8.12.
+	[7c831aa9b6d5]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	sudo_intercept.so only intercepts execve(2) for now.
+	[7314abc72fb9]
+
+	* plugins/sudoers/parse.c:
+	Fix formatting for bound defaults with multiple entries in the
+	binding. The entries in the binding were separated with " ," instead
+	of ", ".
+	[14442701f793]
+
+	* MANIFEST, src/Makefile.in, src/intercept.exp:
+	Add exports file for sudo_intercept.so that only exports execve()
+	[ac97417435ab]
+
+	* src/Makefile.in, src/sudo_intercept.c, src/sudo_intercept_common.c:
+	Add some debugging to the sudo_intercept.so.
+	[2dee003b5cc7]
+
+	* config.h.in, configure, configure.ac:
+	Use AC_FUNC_FSEEKO instead of AC_CHECK_FUNCS_ONCE([fseeko]). This
+	will define _LARGEFILE_SOURCE, if needed, to make the prototype
+	visible on older systems.
+	[3f4314f6a795]
+
+2021-08-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	We still need the pread/pwrite hack for HP-UX 11.11 at least. This
+	time around, avoid defining _LARGEFILE64_SOURCE and just declare
+	pread64/pwrite64 ourselves.
+	[66e01b14a10f]
+
+	* include/sudo_compat.h:
+	Fix prototypes for sudo_pread() and sudo_pwrite().
+	[15acfc576a71]
+
+	* src/exec_intercept.c:
+	intercept_fd_cb: store the passed fd in newfd, not fd only affects
+	the old BSD-style fd passing code, not POSIX-style.
+	[4b13aa4593ba]
+
+	* lib/util/Makefile.in:
+	Fix mksiglist and mksigname dependencies.
+	[31519cc5ec2b]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	set-user-ID and set-group-ID not set user-ID and set group-ID.
+	[0ddf5fedc896]
+
+	* NEWS:
+	The fix for bug #989 will make sudo 1.9.8. Also mention
+	intercept_authenticate and intercept_allow_setid.
+	[fa8b7444486b]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[c8993c070218]
+
+	* .gitignore, .hgignore, MANIFEST, aclocal.m4, configure,
+	configure.ac, lib/util/Makefile.in, lib/util/mksiglist.c,
+	lib/util/mksiglist.h, lib/util/mksigname.c, lib/util/mksigname.h,
+	lib/util/sys_siglist.h, lib/util/sys_signame.h,
+	m4/ax_prog_cc_for_build.m4:
+	Cross-build support for mksigname and mksiglist We must build these
+	with the host C compiler but use the target preprocessor to generate
+	the output.
+	[bf2919b63fb9]
+
+2021-08-19  a1346054  <36859588+a1346054@users.noreply.github.com>
+
+	* .clang-format, INSTALL, MANIFEST, autogen.sh, doc/LICENSE,
+	etc/sudo.pp, examples/Makefile.in:
+	Minor cleanup (#110)
+
+	* fix trivial shell script issues
+	* remove trailing whitespace
+	[f9d4de3dee50]
+
+2021-08-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd_conf.c, plugins/sudoers/check.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/exptilde.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
+	plugins/sudoers/mkdefaults, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/tsdump.c:
+	Replace messages like "unknown foo: %s" with "unknown foo %s". The
+	colon really doesn't belong there; we generally use a colon to
+	separate a message from the warning detail.
+	[a1b99c8821ae]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	log_server_peer_cert and log_server_peer_key are not required by
+	default. They are only required if sudo_logsrvd has tls_checkpeer
+	enabled.
+	[0d9099ce5d74]
+
+	* logsrvd/logsrvd_conf.c:
+	Sync warning messages with sudoers/logging.c Avoids 3 translation
+	strings that were effectively duplicated.
+	[eb058a820998]
+
+2021-08-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/protobuf-c/Makefile.in, src/Makefile.in:
+	regen
+	[ab9d4b22d7cb]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/match_command.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Add intercept_allow_setid sudoers option, disabled by default. With
+	this change, a shell in intercept mode cannot run a setuid or setgid
+	binary by default. On most systems, the dynamic loader will ignore
+	LD_PRELOAD for setuid/setgid binaries such as sudo which would
+	effectively disable intercept mode.
+	[cdb876f62882]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/match.c:
+	Always allocate a struct sudo_command for the command, even for ALL.
+	Previously we special-cased handling of ALL but this complicates
+	some upcoming changes.
+	[d552109d739c]
+
+2021-08-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/codespell.exclude:
+	Update TAGS_CHANGED macro based on parse.h
+	[261e4bad3f55]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in:
+	Better document the limitations of intercept mode. Also mention
+	log_children under "Preventing shell escapes"
+	[0dfca8d0672d]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update .pot files for 1.9.8.
+	[ed2582c37765]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Try to clarify log_server_peer_key and log_server_peer_cert. These
+	are client-side not server-side.
+	[ffa4ee3e2557]
+
+	* logsrvd/logsrvd_conf.c:
+	Print the section when warning about an illegal key in the conf
+	file. This should make it easier to tell when a setting is present
+	in the wrong section.
+	[8150a7775155]
+
+2021-08-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c:
+	new_logline: limit offset to two significant digits after the
+	decimal Now instead of TSID=0001L3@5.168230749 we would log
+	TSID=0001L3@5.16.
+	[089f7a1285cb]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_journal.c:
+	Set umask to be less restrictive before creating parent directories.
+	Otherwise we could end up creating them with a more restrictive mode
+	than indended. Coverity CID 221592
+	[1bbb3621106a]
+
+	* lib/eventlog/eventlog.c:
+	new_logline: handle case where evlog is NULL
+	[e14ded2179e8]
+
+	* logsrvd/logsrvd_local.c:
+	store_alert_local: fix memory leak on error path Coverity CID 238642
+	[2a3c7fb50c38]
+
+	* plugins/sudoers/audit.c:
+	log_server_accept: fix memory leak of evlog when logging a sub-
+	command. Coverity CID 238643
+	[36a7325b3dc2]
+
+	* src/exec_intercept.c:
+	Fix memory leak when client requests secret. Move closure allocation
+	closer to where it is used.
+	[773ffe0cb216]
+
+	* logsrvd/logsrvd_local.c:
+	store_accept_local: fix return value on error
+	[de0d06a1ade2]
+
+2021-08-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c:
+	Cast iolog_offset.tv_sec to long long for %lld printf format. Quiets
+	a compiler warning on systems where tv_sec in struct timeval is not
+	long long.
+	[54d757357a00]
+
+	* doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	lib/iolog/iolog_timing.c, plugins/sudoers/sudoreplay.c:
+	Add support for an optional offset when parsing the ID to replay.
+	The offset is a suffix in the form of @sec[.nanosec]
+	[f8cda41ea0ae]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	logsrvd/logsrvd_local.c, plugins/sudoers/logging.c:
+	For intercepted commands, log an offset into the current I/O log.
+	This can be used with sudoreplay to jump to when a specific command
+	was executed within a session log.
+	[fd9431d7c878]
+
+	* logsrvd/logsrvd_local.c:
+	Don't overwrite closure->evlog for sub-commands.
+	[925c97582b1d]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Older Solaris has getusershell() et al but does not declare it.
+	[df4cd6a5e07f]
+
+	* src/exec_intercept.c, src/exec_nopty.c, src/exec_pty.c,
+	src/sudo_intercept_common.c:
+	Add missing stdint.h and sudo_rand.h includes. Needed for
+	arc4random() and uin64_t.
+	[47fd965524fe]
+
+	* include/intercept.pb-c.h, src/exec_intercept.c, src/exec_nopty.c,
+	src/exec_pty.c, src/intercept.pb-c.c, src/intercept.proto,
+	src/sudo_exec.h, src/sudo_intercept_common.c:
+	Pass a secret value to sudo_intercept.so and verify after policy
+	check. The goal is to make it harder for someone to have a fake
+	policy checker. This will not stop a determined adversary since the
+	secret is present in the address space of the running process.
+	[7938c63384df]
+
+2021-08-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_intercept.c:
+	Split off intercept code into exec_intercept.c.
+	[2c05715c4885]
+
+	* scripts/mkpkg:
+	Add trivial support for FreeBSD packages. The actual FreeBSD port
+	supports multiple options but this is sufficient for testing
+	purposes.
+	[6bb8a1cdf26c]
+
+	* scripts/pp:
+	FreeBSD: Set default directory and file mode if not specified in
+	%files Otherwise, a mode of 0 will be used, potentially rendering
+	the system unusable.
+	[a3be86a5f85f]
+
+	* plugins/sudoers/logging.c:
+	Use same check for intercepted commands as log_server_accept().
+	Previously, log_server_reject() and log_server_alert() just checked
+	whether client_closure has been set.
+	[41177f7c32f4]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c,
+	plugins/sudoers/log_client.c:
+	Call shutdown() on sockets before closing() if they are connected.
+	This should ensure that the other side sees any queued data before
+	the connection is dropped.
+	[beaafc6c17cf]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c, logsrvd/sendlog.c,
+	plugins/sudoers/log_client.c:
+	If SSL_shutdown() returns 0 it needs to be called one more time.
+	[52bb0acfb659]
+
+	* plugins/sudoers/editor.c:
+	resolve_editor: sudoers_gc_remove(editor) before freeing it.
+	[534cc939264f]
+
+2021-08-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/mksigname.h, lib/util/siglist.in:
+	Sync siglist.in with the generated files. The change to prefer
+	SIGSYS over SIGUNUSED wasn't made to siglist.in. Also, mksigname.c
+	doesn't need to explicitly set sudo_sys_signame[0].
+	[c331b05f8fc5]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/editor.c,
+	plugins/sudoers/gc.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add garbage collection to resolve_editor(). Fixes a leak when
+	evaluating the policy multiple times if sudoedit is set.
+	[ab011d864e87]
+
+2021-08-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_common.c:
+	Fix compilation when configure option --disable-shared is specified.
+	[98687e01c8e4]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/check.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Add intercept_authenticate sudoers option, defaults to false. By
+	default, sudoers will not require authentication of commands run via
+	an intercepted session. To require authenticaton of subsequent
+	commands, enable intercept_authenticate in sudoers.
+	[b428c75da1ad]
+
+	* config.h.in, configure, configure.ac, src/exec.c,
+	src/sudo_intercept_common.c:
+	If msg_control is not present in struct msghdr use msg_accrights
+	instead. Fixes building on Solaris and probably others. It is
+	possible to expose msg_control on Solaris but this requires a
+	specific set of feature flag defines which can cause other
+	complications.
+	[6ee77b869a8c]
+
+	* configure, configure.ac, src/exec_preload.c:
+	Require that our dso be first in the list to make sure it takes
+	effect. Otherwise, another dso could take precedence and ours would
+	not be run.
+	[58ba4086357c]
+
+	* configure, configure.ac, pathnames.h.in, src/Makefile.in,
+	src/exec_preload.c:
+	If building with address sanitizer make sure its DSO is first.
+	Address sanitizer requires that it be preloaded before any other DSO
+	in LD_PRELOAD. This should not be required for clang, which links in
+	asan statically by default.
+	[a812062f42a8]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
+	Plug some memory leaks when sudoers_policy_main is called multiple
+	times. These would get cleaned up a policy close time but we don't
+	want to bloat sudo's memory footprint when running a shell with
+	multiple commands.
+	[7fee001ffeae]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/log_client.c, plugins/sudoers/log_client.h,
+	plugins/sudoers/logging.c:
+	Fix logging intercepted commands to a log server in sudoers. Only
+	available when the server supports the subcommands capability.
+	[5975770561de]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	Use a separate uuid for intercepted commands. We use the uuid to
+	match the command with its exit status.
+	[467f0db6e2c6]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
+	Avoid some double frees in the fuzzer Now that sudoers free old
+	values of NewArgv and command_info the fuzzer needs to reset those
+	values. Otherwise we end up with stashed values that have already
+	been garbage collected.
+	[2a1b5808d272]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.8
+	[bc96c8f95abf]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/policy.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Add "intercept" Defaults setting to allow interception of sub-
+	commands. This causes "intercept" to be set to true in
+	command_info[] which the sudo front-end will use to determine
+	whether or not to intercept attempts to run further commands, such
+	as from a shell. Also add "log_children" which will use the same
+	mechanism but only log (audit) further commands.
+	[f42e11c0fde9]
+
+	* INSTALL, configure, configure.ac, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, examples/sudo.conf.in, include/sudo_conf.h,
+	lib/util/sudo_conf.c, lib/util/util.exp.in, pathnames.h.in,
+	src/Makefile.in, src/exec.c, src/exec_common.c, src/selinux.c,
+	src/sesh.c, src/sudo.c, src/sudo.h, src/sudo_exec.h:
+	Add support for loading the sudo_intercept.so DSO.
+	[47d84cc8a8ed]
+
+	* include/sudo_compat.h, src/exec.c, src/exec_common.c,
+	src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c, src/selinux.c,
+	src/sesh.c, src/sudo_exec.h:
+	Allocate a socketpair to communicate with sudo_intercept.so over.
+	This is used for the intercept and log_children options.
+	[b40091760952]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/file.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_ldap.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Make it possible to call the sudoers policy check function multiple
+	times. We need to reset the Defaults values to their original state.
+	[3187e87d7fb6]
+
+	* plugins/sudoers/set_perms.c:
+	Allow set_perms(PERM_INITIAL) to be called more than once. If the
+	perm stack depth is non-zero when set_perms(PERM_INITIAL) is called,
+	rewind it first and re-initialize the stack depth to 0. Fixes a
+	user-after-free bug if set_perms(PERM_INITIAL) is called multiple
+	times.
+	[fdf9a2e07eb1]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	Use run_argv and run_envp passed into the audit plugin for event
+	logging. Previously we used NewArgv[] and env_get() but now that
+	logging is performed via an audit plugin we should use the values
+	passed in.
+	[d8e031fc2389]
+
+	* doc/sudo_logsrv.proto.man.in, doc/sudo_logsrv.proto.mdoc.in,
+	include/log_server.pb-c.h, lib/logsrv/log_server.pb-c.c,
+	lib/logsrv/log_server.proto, logsrvd/logsrvd.c:
+	Allow multiple accept/reject messages during a logsrv conversation.
+	The log server now advertises a subcommands flag if it supports
+	logging subcommands (e.g. commands run from a sudo-spawned program
+	like a shell). The client should only log additional commands during
+	a session if this flag is set in the ServerHello message.
+	[5b88982604e8]
+
+	* MANIFEST, Makefile.in, configure, configure.ac,
+	lib/logsrv/Makefile.in, lib/logsrv/protobuf-c.c,
+	lib/protobuf-c/Makefile.in, lib/protobuf-c/protobuf-c.c:
+	Add separate convenience lib for protobuf-c We need to use it for
+	sudo <-> sudo_intercept.so communication.
+	[9529d7f9db18]
+
+	* MANIFEST, include/intercept.pb-c.h, src/Makefile.in,
+	src/intercept.pb-c.c, src/intercept.proto:
+	Define protocol for sudo <-> sudo_intercept.so communication. Uses
+	google protocol buffers.
+	[139ba292e226]
+
+	* src/exec.c, src/sudo.c, src/sudo.h:
+	Implement the sudo side of the sudo_intercept.so communication.
+	[4a7face9ed17]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_common.c,
+	src/sudo_exec.h, src/sudo_intercept.c, src/sudo_intercept_common.c:
+	Implement sudo_intercept.so. Uses protobuf to talk to main sudo
+	process over a socketpair.
+	[fc21ae0f663e]
+
+	* src/sudo.c, src/sudo.h:
+	Add return values for most of the plugin function wrappers that
+	returned void. Previously, they would just exit if there was an
+	error. Now the error is passed back up the stack so we can use them
+	in sudo_intercept.so.
+	[87cb4b0e7dff]
+
+	* src/sudo.c:
+	Reduce the number of function args passed to plugin wrappers. This
+	makes sudo_settings, user_info, submit_argv, submit_envp and
+	submit_optind global. This will be required for calling the wrapper
+	from outside of sudo.c where we may not have access to those
+	variables.
+	[525bffcf911c]
+
+	* src/exec.c, src/sudo.c, src/sudo.h:
+	Call the approval plugin after the policy plugin accepts a command.
+	Previously, for intercepted commands we only called the policy
+	plugin.
+	[4df18aaa8708]
+
+	* src/exec.c:
+	Take control of the tty and save its settings before doing a policy
+	check. Otherwise the policy plugin won't be able to read the
+	password.
+	[6a422974d472]
+
+	* MANIFEST, src/Makefile.in, src/exec_common.c, src/exec_preload.c,
+	src/sudo_exec.h, src/sudo_intercept.c, src/sudo_intercept_common.c:
+	Move preload_dso() to its own file and rename to sudo_preload_dso().
+	It now takes an intercept fd as an optional argument instead of a
+	list of extra variables to add. This lets us check whether it is
+	already set to the expected value (and add it if not).
+	sudo_intercept.so now uses sudo_preload_dso() to make sure that
+	LD_PRELOAD and SUDO_INTERCEPT_FD are set properly before executing.
+	[447e96378d01]
+
+	* src/exec_preload.c, src/sudo_intercept_common.c:
+	Add debug support to sudo_intercept.so
+	[586ea125cebb]
+
+	* src/exec.c, src/exec_nopty.c, src/exec_pty.c:
+	Make the log_children option only log and not check policy.
+	[0524c7e87174]
+
+	* plugins/sudoers/prompt.c:
+	expand_prompt: use correct strlcpy() size parameter The available
+	size passed to strlcpy() was computed incorrectly. Switch to
+	updating the length after writing to the new prompt instead of
+	computing it each time. The actual buffer size is computed and
+	allocated correctly so there is no real consequence to this bug.
+	Found by Qualys.
+	[c03f1c2f8f35]
+
+2021-08-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf:
+	The tls_verify setting only affects server behavior, not the client.
+	Originally, there was a flag in the ServerHello message to indicate
+	that the client should verify the server cert, but this was removed
+	TLS was moved to a separate port. Client validation of the server
+	certificate is now configured in the sudoers file instead.
+	[344b51f3eee3]
+
+2021-08-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	On macOS, don't disable tty tickets and set password timeout to 0.
+	This more closely matches the options used by the macOS version of
+	sudo.
+	[bd21c492921c]
+
+	* plugins/sudoers/find_path.c:
+	Add some debugging info to find_path()
+	[dd7aebb432d6]
+
+2021-07-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/iolog_mkdtemp.c:
+	iolog_mkdtemp: umask must not be more restrictive than the file
+	modes. We need this even though we will be calling mkdtemp() since
+	the umask affects the mode of any parent directories.
+	[c545b3369eae]
+
+2021-07-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/visudo.c:
+	Plug memory leak in error path when sudoers cannot be opened.
+	[3df6b32149b8]
+
+	* plugins/sudoers/defaults.c:
+	Trying to use "+=" or "-=" operators on a non-list is an error.
+	Previously, they were simply treated as "=" for non-lists.
+	[3e0d47d0b4ea]
+
+	* src/regress/net_ifs/check_net_ifs.c:
+	Plug a memory leak in check_net_ifs found by address sanitizer.
+	[bff1ad993476]
+
+	* configure, configure.ac:
+	Prefix sanitizer and fuzzer options with -XCClinker in ASAN_LDFLAGS.
+	Otherwise libtool may ignore the options when linking.
+	[ed1120f3813d]
+
+2021-07-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/tls_init.c:
+	Display the correct error message if X509_verify_cert() fails. We
+	must use X509_STORE_CTX_get_error() and
+	X509_verify_cert_error_string() instead of the generic OpenSSL error
+	functions.
+	[778bbbe68e28]
+
+	* lib/eventlog/eventlog.c:
+	In new_logline check for NULL args->reason for EVLOG_RAW. This can't
+	happen in practice since we never set EVLOG_RAW without passing in a
+	reason. Coverity CID 237142 237143
+	[83f9038151db]
+
+	* lib/eventlog/eventlog.c:
+	format_json: don't dereference evlog if it is NULL. Also silence a
+	PVS Studio false positive.
+	[150039f65d26]
+
+2021-07-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_7p2 for changeset 590e06825ec4
+	[cf3865846c94] <1.9>
+
+	* configure, configure.ac:
+	Bump version to 1.9.7p2
+	[590e06825ec4] [SUDO_1_9_7p2] <1.9>
+
+	* configure, configure.ac:
+	Bump version to 1.9.7p2
+	[388bf6af8434]
+
+	* NEWS:
+	Sudo 1.9.7p2
+	[c3bd2eb0d779] <1.9>
+
+	* NEWS:
+	Sudo 1.9.7p2
+	[153a6c96a8ec]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	logsrvd/tls_client.c, logsrvd/tls_init.c,
+	plugins/sudoers/log_client.c:
+	Use TLS_method() instead of TLS_client_method() throughout. OpenSSL
+	returns an error for SSL_accept() if TLS_client_method() was used to
+	generate the context (LibreSSL doesn't care).
+
+	Prior to sudo 1.9.7, TLS_client_method() and TLS_server_method()
+	were used in the TLS client and server initialization code
+	respectively. This was refactored in sudo 1.9.7 to allow the code to
+	be shared. Bug #988
+	[f2bf4aca30d4] <1.9>
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	logsrvd/tls_client.c, logsrvd/tls_init.c,
+	plugins/sudoers/log_client.c:
+	Use TLS_method() instead of TLS_client_method() throughout. OpenSSL
+	returns an error for SSL_accept() if TLS_client_method() was used to
+	generate the context (LibreSSL doesn't care).
+
+	Prior to sudo 1.9.7, TLS_client_method() and TLS_server_method()
+	were used in the TLS client and server initialization code
+	respectively. This was refactored in sudo 1.9.7 to allow the code to
+	be shared. Bug #988
+	[1ca00726b4d6]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Only replace getaddrinfo for
+	FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION. This works around an issue
+	on SCO which uses inline functions in the header files which call
+	the actual, versioned, library function.
+	[f010d83f0168] <1.9>
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Only replace getaddrinfo for
+	FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION. This works around an issue
+	on SCO which uses inline functions in the header files which call
+	the actual, versioned, library function.
+	[64cbf884b7f9]
+
+2021-07-26  MertsA  <andrewmerts@gmail.com>
+
+	* src/utmp.c:
+	Rewind utmp file pointer after searching for entry (#108)
+
+	getutline() advances the file pointer until it matches or reaches
+	EOF. pututline() starts from the current position in utmp. This
+	rewinds the file pointer to the beginning to avoid allocating
+	additional spurious utmp entries.
+	[af1463026fd1] <1.9>
+
+	* src/utmp.c:
+	Rewind utmp file pointer after searching for entry (#108)
+
+	getutline() advances the file pointer until it matches or reaches
+	EOF. pututline() starts from the current position in utmp. This
+	rewinds the file pointer to the beginning to avoid allocating
+	additional spurious utmp entries.
+	[142555f7a47e]
+
+2021-07-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, m4/sudo.m4:
+	Use AC_CACHE_CHECK in place of AC_MSG_CHECKING + AC_CACHE_VAL where
+	possible.
+	[7b0fb8de8276]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Add configure check for va_copy instead of using #ifdef This
+	prevents the va_copy compat #define from being used if sudo_compat.h
+	is somehow included before stdarg.h.
+	[6d283753e47b] <1.9>
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Add configure check for va_copy instead of using #ifdef This
+	prevents the va_copy compat #define from being used if sudo_compat.h
+	is somehow included before stdarg.h.
+	[fcfd53b859ac]
+
+2021-07-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/limits.c:
+	Avoid using RLIM_INFINITY for the nofile soft limit to prevent
+	closefrom_fallback() from closing too many file descriptors.
+	[edbcd5c82d4d] <1.9>
+
+	* src/limits.c:
+	Avoid using RLIM_INFINITY for the nofile soft limit to prevent
+	closefrom_fallback() from closing too many file descriptors.
+	[e807ca9bfb6a]
+
+	* plugins/sudoers/logging.c:
+	Include signal.h for SIG2STR_MAX and sig2str().
+	[ad17a1be07e2]
+
+2021-07-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	logsrvd/iolog_writer.c, plugins/sudoers/logging.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.h:
+	Create a UUID and log it in the JSON version of the event log.
+	[8a1ad98fac51]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	logsrvd/logsrvd_local.c, plugins/sudoers/logging.c:
+	Remove unused info_cb and info arguments from eventlog_exit()
+	[c614ef1afa12]
+
+2021-07-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c:
+	Add support for logging exit status events. For sudo-formatted logs,
+	this is a record with "EXIT=number" and potentially "SIGNAL=name"
+	after the command. For JSON-format logs, a new "exit" record is
+	logged which contains an "exit_value" and potentially "signal" and
+	"core_dumped". JSON-format logs now incude a UUID to associate the
+	"exit" record with the "accept" record.
+	[52e40ae4b79a]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Add log_exit_status sudoers option to log when a command exits. This
+	option defaults to off.
+	[cac3ca7ad193]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, logsrvd/logsrvd_local.c:
+	Add log_exit setting in the sudo_logsrvd.conf eventlog stanza This
+	causes sudo_logsrvd to log a record with the exit status or
+	terminating signal in response to an ExitMessage.
+	[1a15f676974a]
+
+2021-07-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/python_plugin_common.c:
+	Check that the python module we actually loaded is what we intended.
+	This is intended to provide a more useful error message if the user
+	defines a module which conflicts with a system python module. For
+	example, a module called test.py would conflicts with the system
+	python test module.
+	[345523b6e87d] <1.9>
+
+	* plugins/python/python_plugin_common.c:
+	Check that the python module we actually loaded is what we intended.
+	This is intended to provide a more useful error message if the user
+	defines a module which conflicts with a system python module. For
+	example, a module called test.py would conflicts with the system
+	python test module.
+	[0676191e4741]
+
+2021-07-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/CONTRIBUTORS:
+	Mention that xkcd inspired the sandwich logo.
+	[c7839328e21f]
+
+	* doc/HISTORY:
+	Mention log server and fuzzers under Quest contributions.
+	[f4a081f75cd0]
+
+2021-06-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sesh.c, src/sudo.c, src/sudo_edit.c:
+	Don't assume that the number of groups returned by getgroups() is
+	static. On systems where getgroups() returns results based on more
+	than just the per-process group vector in the kernel it is possible
+	for the number of groups to change in between invocations. Based on
+	GitHub PR #106 from Pierre-Olivier Martel.
+	[832fa2480024] <1.9>
+
+	* src/sesh.c, src/sudo.c, src/sudo_edit.c:
+	Don't assume that the number of groups returned by getgroups() is
+	static. On systems where getgroups() returns results based on more
+	than just the per-process group vector in the kernel it is possible
+	for the number of groups to change in between invocations. Based on
+	GitHub PR #106 from Pierre-Olivier Martel.
+	[dbc7a173a7b8]
+
+	* doc/Makefile.in:
+	Use "mandoc -Tlint -Wwarning" instead of -Wstyle. The style checks
+	now include "referenced manual not found" warnings which is not
+	helpful.
+	[251757f22498]
+
+2021-06-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/Makefile.in, src/Makefile.in:
+	regen
+	[c6a21b385d57]
+
+2021-06-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/fuzzstub/fuzzstub.c:
+	Change ms from size_t to long. Avoids a spurious test failure on
+	Solaris 9
+	[5e204b959000] <1.9>
+
+	* lib/fuzzstub/fuzzstub.c:
+	Change ms from size_t to long. Avoids a spurious test failure on
+	Solaris 9
+	[c26f8d233ea9]
+
+	* plugins/sudoers/interfaces.c, src/net_ifs.c:
+	Move definition of INADDR_NONE from interfaces.c to net_ifs.c. Fixes
+	compilation on Solaris 9.
+	[d05bca21f145] <1.9>
+
+	* plugins/sudoers/interfaces.c, src/net_ifs.c:
+	Move definition of INADDR_NONE from interfaces.c to net_ifs.c. Fixes
+	compilation on Solaris 9.
+	[9da2276cf944]
+
+2021-06-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c:
+	Fix dead store found by clang analyzer.
+	[5c85aeef651e]
+
+	* logsrvd/logsrvd_conf.c:
+	Fix prefix skipping when the prefix is embedded and not separate.
+	This doesn't currently matter since the progname and the ": " are
+	stored in separate messages. Found by clang analyzer.
+	[321e90e1b347]
+
+	* logsrvd/logsrvd_relay.c:
+	Remove dead store found by clang analyzer.
+	[5fd56f26e1ba]
+
+2021-06-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/audit_json/audit_json.c:
+	Make sure we store an octal number (like umask) as a string. JSON
+	doesn't (portably) support octal numbers with a leading zero.
+	[a0c8392f2f7a] <1.9>
+
+	* plugins/audit_json/audit_json.c:
+	Make sure we store an octal number (like umask) as a string. JSON
+	doesn't (portably) support octal numbers with a leading zero.
+	[3ac37bb42f1e]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	Replace logsrvd_is_early() with logsrvd_warn_stderr(). This is now
+	defined in logsrvd_conf.c which removes a dependency on another
+	compilation unit for the fuzzer.
+	[3594cf3ec397]
+
+2021-06-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd_local.c:
+	Silence a compiler warning on Solaris.
+	[fd9ba461b601]
+
+	* logsrvd/logsrvd.c:
+	Reduce scope of errstr variable so it is only declared for OpenSSL.
+	[eebe09a17f4b]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[05b8391c6d13]
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrv_util.c, logsrvd/logsrvd.c,
+	logsrvd/logsrvd_conf.c, logsrvd/logsrvd_journal.c,
+	logsrvd/logsrvd_local.c, logsrvd/logsrvd_queue.c,
+	logsrvd/logsrvd_relay.c, logsrvd/sendlog.c, logsrvd/tls_init.c:
+	Use sudo_warnx?() instead of sudo_debug_printf for errors. We now
+	hook the warn functions so the messages are logged. The messages
+	still show up in the debug log too.
+	[9e25dc71b4cc]
+
+2021-06-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/vsyslog.c,
+	scripts/mkdep.pl:
+	Remove vsyslog(3) emulation, it is no longer used.
+	[7d1b78c2037a]
+
+2021-06-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd_conf.c, logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	If logsrvd_config not set fall back to using stderr for warnings.
+	Also fix fuzz_logsrvd_conf link error.
+	[eeaafe1b3e09]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c:
+	Add support for logging server warning/error messages. We can use
+	sudo_warn_set_conversation() to set a conversation function that
+	either writes to a log file or calls syslog().
+	[5d8e13f053d0]
+
+2021-06-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_7p1 for changeset d936a99e842d
+	[9bc246c519f3] <1.9>
+
+	* Merge sudo 1.9.7p1 from tip
+	[d936a99e842d] [SUDO_1_9_7p1] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.7p1
+	[29f478993ef3]
+
+2021-06-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/audit_json/audit_json.c:
+	Check arrays that are passed in for NULL before using them.
+	[925ba5b0f2cb]
+
+	* configure, configure.ac:
+	Disable nss_search()-based group lookups on HP-UX for now. There is
+	a crash when "group: compat" is used in /etc/nsswitch.conf that I
+	haven't been able to debug. Since HP-UX doesn't ship the appropriate
+	headers it is likely that there is a mismatch between
+	include/compat/nss_dbdefs.h and what HP actually uses.
+	[28b00005c785]
+
+2021-06-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Remove logsrvd closure ERROR state and use a boolean flag instead.
+	Fixes a bug where we would not insert a journal file that failed to
+	relay into the queue because its state was changed from CONNECTING
+	to ERROR after failing to connect.
+	[638285a4bedb]
+
+	* include/compat/nss_dbdefs.h, lib/util/getgrouplist.c:
+	Add NSS_TRYAGAIN and correct buflen in struct nss_XbyY_buf_t. Add
+	some function argument names. Also use struct nss_db_state * instead
+	of void * in nss_db_root_t. We don't define struct nss_db_state but
+	since it is a pointer all we need is a forward declaration.
+	[bc848fb97671]
+
+2021-06-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/fuzzstub/fuzzstub.c, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in:
+	Make sure we link with libsudo_util *after* libfuzzstub. This only
+	affects builds with a static libsudo_util. Also fix a warning on HP-
+	UX about main not being public.
+	[18ff1f108c4e]
+
+	* MANIFEST, lib/util/Makefile.in,
+	lib/util/regress/getgrouplist/getgids.c:
+	Add getgids utility to simular "id -G" using sudo_getgrouplist2()
+	[aed11065818d]
+
+	* lib/util/getgrouplist.c:
+	Make sure we don't read or write past the end of the group buffer.
+	We need to leave room for the terminating NULL in gr_mem. It is
+	possible for gbm->numgids > gbm->maxgids if we ran out of room.
+	[25a3ee849fd4]
+
+2021-06-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/getgrouplist.c:
+	Add some debugging to sudo_getgrouplist2().
+	[4d79e92c8ee8]
+
+2021-06-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/load_plugins.c:
+	Fix some debug_decl typos and remove an unneeded cast.
+	[fafa91ac3def]
+
+	* plugins/sudoers/defaults.h:
+	T_TIMEOUT is not a bitwise flag so doesn't need to be a power of 2.
+	[66019af6d642]
+
+2021-05-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/load_plugins.c:
+	sudo_stat_plugin(): set errno but do not warn if plugin path too
+	long. The caller will display the warning (using errno) so there is
+	no need to do it twice.
+	[c8614b374a35]
+
+2021-05-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	sudoreplay does not parse sudoers to find the value of iolog_dir.
+	The default value for the I/O log directory is set at build time.
+	[3cf72612e992]
+
+	* plugins/sudoers/policy.c:
+	Fix group list ref leak in sudoers_policy_store_result() on error
+	path.
+	[34785448a275]
+
+2021-05-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c:
+	Update comment to match reality.
+	[ec3e0a40d1ec]
+
+2021-05-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, scripts/ltmain.sh, src/Makefile.in:
+	Build sudo_noexec.so as a module on systems other then Darwin. On
+	Darwin, shared modules and shared libraries are not interchangable
+	and since we preload sudo_noexec.so via DYLD_INSERT_LIBRARIES it
+	must be a library, not a module. We must relax the requirement that
+	libraries begin with a "lib" prefix to work around this difference.
+	This does mean you must use sudo's libtool on Darwin (macOS) but
+	that is already a requirement on other systems (notably HP-UX and
+	SCO) due to a number of libtool patches we require that haven't be
+	accepted upstream. This is a different fix for PR #102.
+	[2e5454c56d3c]
+
+	* configure, configure.ac:
+	Use -Wno-deprecated-declarations on macOS This quiets warnings about
+	LDAP and audit libraries being deprecated. We will use them until
+	they are removed in a future version of macOS.
+	[6fbdf644865c]
+
+2021-05-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Use /usr/bin/cc on FreeBSD and macOS.
+	[7d6bcea0e544]
+
+	* plugins/sudoers/log_client.c:
+	Don't include errno in "unable to connect to log server" message.
+	There should be a more specific message, usually with an error
+	string, displayed earlier.
+	[e599f9b0fd1c]
+
+	* src/ttyname.c:
+	Fix compiler warning on FreeBSD.
+	[2c6fc866fb5b]
+
+	* lib/iolog/hostcheck.c:
+	Explicitly include netinet/in.h for struct sockaddr_in and
+	sockaddr+_in6. Fixes a compilation problem on FreeBSD.
+	[2277c8f37c34]
+
+2021-05-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_7 for changeset f0ce54d4288c
+	[58968ec7a457] <1.9>
+
+	* Merge sudo 1.9.7 from tip
+	[f0ce54d4288c] [SUDO_1_9_7] <1.9>
+
+2021-05-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po:
+	Updated translations from translationproject.org
+	[3d6d49097b98]
+
+	* plugins/sudoers/log_client.c:
+	Better warning when close function is passed a non-terminal signal.
+	[8b8628249e4d]
+
+	* logsrvd/logsrvd_local.c:
+	Remove line causing store_suspend_local() to return false on
+	success. This is something that should have been removed as part of
+	the local I/O logging refactor.
+	[e8ae1e61b8b2]
+
+	* src/exec_pty.c:
+	Don't set the command status in the closure when the command is
+	suspended. This should only be set for signals that terminate the
+	process. Fixes a bug where the sudo front-end could call the plugin
+	close function with a non-terminal signal argument.
+	[a95024bfb6e8]
+
+2021-05-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/pyhelpers.c, plugins/python/python_plugin_policy.c:
+	Quiet -Wshadow warnings from gcc.
+	[7ff2985ba650]
+
+	* NEWS, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	The -g option may also be used with any group the target user
+	belongs to. The description in the Runas_Spec section incorrectly
+	stated that the -g option could not be used if no runas group was
+	set. Bug #975.
+	[67d1948d1aa8]
+
+	* configure, configure.ac:
+	Remove redundant "configuring Sudo version X.YY" line. We now
+	display this along with the summary info at the end.
+	[0d7c908f8d4c]
+
+	* configure, configure.ac:
+	Don't check for -Wl,-z,relro twice.
+	[a30dce71fb26]
+
+2021-05-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po:
+	Updated translations from translationproject.org
+	[9303a20fe480]
+
+	* scripts/mkpkg:
+	Build python plugin for RHEL 6 as well.
+	[edaa6ec0e255]
+
+	* configure, configure.ac:
+	Remove shell-style quotes in configure warning/error/notice
+	messages. Square bracket quotes are used, no need for shell-style
+	double quotes.
+	[e6de284df511]
+
+	* NEWS, configure, configure.ac:
+	Summarize configure settings after all tests have run. This makes it
+	a lot easier to see what features have been enabled.
+	[12ea96affed5]
+
+2021-05-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL, configure, configure.ac:
+	Remove --with-efence option, there are better options available.
+	[78fd5ceb2c52]
+
+	* NEWS:
+	Move misplaced changes into the 1.9.7 section where they belong.
+	[1519f7a4669b]
+
+	* lib/util/regress/sudo_conf/conf_test.c:
+	Awful hack to pass on macOS where group_source=dynamic by default.
+	[b038bfab8c34]
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po,
+	plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po, po/ca.mo,
+	po/ca.po, po/it.mo, po/it.po, po/sr.mo, po/sr.po:
+	Updated translations from translationproject.org
+	[7b156da85d13]
+
+	* NEWS:
+	Document late stage 1.9.7 changes.
+	[28756df7dcb4]
+
+	* doc/sudo_sendlog.man.in, doc/sudo_sendlog.mdoc.in,
+	logsrvd/sendlog.c, logsrvd/sendlog.h:
+	sudo_sendlog: rename -m (max-time) to -s (stop-after).
+	[4f016111b242]
+
+	* logsrvd/logsrv_util.c, logsrvd/logsrvd.c, logsrvd/logsrvd_journal.c:
+	Update closure->elapsed_time in journal_seek(). Otherwise the commit
+	point messages won't be accurate when restarting.
+	[6cd4db44b8ee]
+
+	* doc/sudo_sendlog.man.in, doc/sudo_sendlog.mdoc.in,
+	logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Add "-m elapsed" option to specify the max elapsed time of records
+	to send. Useful for testing the ability of the server to handle
+	restarted log transfers.
+	[cd9c9235e320]
+
+2021-05-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c:
+	Disable reading from client or relay when sending error to client.
+	We treat an error from the relay as fatal and must stop processing
+	data from both client and relay to make sure we don't get out of
+	sync.
+	[258f9691b3d9]
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd_local.c:
+	Fix I/O log restart of locally-store logs. This got broken a while
+	ago when evlog in struct connection_closure was changed to a
+	pointer.
+	[8b59122891f9]
+
+	* scripts/pp:
+	Fix detection of the volatile flag when other flags are present.
+	Otherwise flags fields like "volatile,ignore-other" will be ignored
+	by the Debian and BSD back ends.
+	[0d120b9eab71]
+
+	* src/limits.c:
+	Fix debug message when prctl(PR_SET_DUMPABLE, 0, 0, 0, 0) fails.
+	GitHub issue #101
+	[7d266c174457]
+
+	* logsrvd/logsrvd_relay.c, logsrvd/sendlog.c, logsrvd/tls_client.c,
+	logsrvd/tls_common.h, plugins/sudoers/log_client.c:
+	Don't hard-code the TLS connect timeout, use normal connect timeout.
+	For sudo_logsrvd, this is the relay connect_timeout setting. For
+	sudoers, this is the log_server_timeout setting.
+	[49e29f187f5a]
+
+2021-05-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd_queue.c:
+	Add missing closedir(3) in logsrvd_queue_scan(). Coverity CID 221591
+	[e9745c64a721]
+
+	* NEWS:
+	Mention "log_server_verify" bug fix.
+	[a70060c34e7a]
+
+	* configure, configure.ac, doc/sudo_logsrvd.conf.man.in,
+	doc/sudo_logsrvd.conf.mdoc.in, examples/sudo_logsrvd.conf,
+	m4/sudo.m4, pathnames.h.in:
+	Rename logsrvd log dir to /var/log/sudo_logsrvd.
+	[fb979be9927e]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, logsrvd/logsrvd_queue.c:
+	Make the failed relay retry interval configurable. This is the
+	amount of time to wait before trying to resend a journal to the
+	relay server after a connection error.
+	[cbc04201a63e]
+
+2021-05-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_journal.c, logsrvd/logsrvd_queue.c,
+	logsrvd/logsrvd_relay.c:
+	Send outgoing messages to the relay server on startup. Also attempt
+	to retry messages that could not be relayed periodically.
+	[7ed12983af85]
+
+	* lib/util/fatal.c:
+	Avoid clobbering errno in warning().
+	[3282a7db7f51]
+
+	* logsrvd/logsrvd_relay.c:
+	Set relay name string to NULL after dropping the reference.
+	Otherwise it is possible to decrement the reference more than once.
+	[245d4e60ea21]
+
+2021-04-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog.c:
+	Fix cut & pasto that prevented the verify_server option from being
+	set. The "log_server_verify" setting passed from the policy plugin
+	was applied to the "keepalive" option instead of "verify_server".
+	From Krisztian Kovacs.
+	[06f716981ad0]
+
+2021-04-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.man.in, doc/sudo_logsrvd.mdoc.in,
+	logsrvd/logsrvd.c:
+	Write client and server information to debug file on SIGUSR1 This
+	can be used to debug client problems such as a connection not being
+	closed as expected.
+	[e6e3a4ba02f4]
+
+	* doc/sudo_logsrvd.man.in, doc/sudo_logsrvd.mdoc.in:
+	Document journal file directories in store_first mode.
+	[a08de0c20127]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_journal.c:
+	Create journal files in an incoming directory, move to outgoing when
+	complete. This will make it possible to process completed journal
+	files periodically if the relay server is down.
+	[5ced00c6eb7e]
+
+	* logsrvd/logsrvd_relay.c:
+	Add missing connection_close() call for relay-only connections. For
+	an immediate relay we will close the connection when the client
+	disconnects (or there is a timeout). However, for store-and-forward
+	mode the client has already disconnected at the time we are
+	relaying.
+	[e51e98489c6d]
+
+2021-04-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[4aa3f848b223]
+
+	* logsrvd/logsrvd_conf.c:
+	Replace non-ascii characters in warning string.
+	[5e99ac170a15]
+
+	* lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/editor/check_editor.c,
+	plugins/sudoers/regress/exptilde/check_exptilde.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/regress/starttime/check_starttime.c,
+	plugins/sudoers/regress/unescape/check_unesc.c:
+	Quiet clang analyzer false positive in regress tests.
+	[190ad1f287d8]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/iolog_writer.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_local.c:
+	Move local iolog log functions to logsrvd_local.c
+	[e16e2a1d8209]
+
+	* logsrvd/logsrvd_relay.c:
+	Better client error reporting on relay server connection error. More
+	detailed error messages may be found in the debug log.
+	[d0807790327d]
+
+	* logsrvd/logsrvd.c:
+	Update debug pid string when sudo_logsrvd becomes a daemon.
+	[33069e2da7d5]
+
+2021-04-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c:
+	Must call SSL_shutdown() before closing the underlying socket. This
+	got broken by some code rearrangement when relay mode was added.
+	[a3a8c4d10565]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c:
+	Recover if the client or relay server closes the TLS connection
+	uncleanly. The other end of the connection should perform a proper
+	TLS shutdown but as long as we are in the correct state there is no
+	need to treat this as a user-visible error.
+	[90887bc2235f]
+
+	* NEWS, aclocal.m4, configure, configure.ac:
+	Sudo 1.9.7
+	[c1ea457eca11]
+
+	* MANIFEST, plugins/python/Makefile.in, plugins/python/lsan_suppr.txt:
+	Add a suppression file for the libpython leaks. This is a big hammer
+	but it seems like the best we can do for now. Allows "make check" to
+	succeed when address sanitizer is used.
+	[4500cd1e835e]
+
+2021-04-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/editor.c,
+	plugins/sudoers/regress/editor/check_editor.c:
+	When spliting EDITOR check for escaped quote characters. Also add
+	check_editor to sudoers "make check".
+	[0d8001299358]
+
+2021-04-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/editor.c,
+	plugins/sudoers/regress/editor/check_editor.c:
+	Treat a lone backslash at the end of a string as a literal
+	backslash. GitHub issue #99
+	[40a53e523003]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in:
+	Fix typo.
+	[614379733a17]
+
+2021-04-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/pyhelpers.c:
+	Avoid a potential NULL dereference when mutating args_str. Coverit
+	CID 221401
+	[69f3c7f8e524]
+
+	* logsrvd/logsrvd_journal.c:
+	Avoid calling fread() with a NUL buffer if msg_len is 0. Coverity
+	CID 221399
+	[ed605b7a3186]
+
+	* logsrvd/logsrvd.c:
+	Set a restrictive umask so new files are only read/write by owner.
+	Coverity CID 221402
+	[595465e4baa2]
+
+	* logsrvd/logsrvd.c:
+	In connection_closure_free() only close sock if it is not -1. When
+	relaying from a journal there will be no socket. Coverity CID 221403
+	[fd4f27067c3f]
+
+	* logsrvd/logsrvd.c:
+	Avoid potential NULL dereference in get_free_buf(). Coverity CID
+	221400
+	[6cb5491bf812]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_relay.c:
+	Remove some now-dead code in the error path. Coverity CID 221397 and
+	221398
+	[edc860f72f98]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_journal.c,
+	logsrvd/logsrvd_relay.c:
+	Use function pointers for each client message type instead of
+	conditionals. This separats out the message handler from the
+	functions that store or relay the message contents.
+	[f596480880fa]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_relay.c:
+	Add enqueue_error_message() helper function. Formats and enqueues an
+	error message and enables the write event.
+	[122bd89fe5e3]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_journal.c,
+	logsrvd/logsrvd_relay.c:
+	Forward the journaled entry after it has been stored locally.
+	[a187d5a7ea28]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_journal.c:
+	Stash the value of the store_first config setting in
+	connection_closure. If the configuration changes it should not
+	affect a connection that is already in progress.
+	[6617c2b7ece5]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/iolog_writer.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_journal.c, logsrvd/logsrvd_relay.c:
+	Journal messages to disk when store_first is set in the relay
+	section. Instead of forwarding messages immediately, they are
+	journaled locally in wire format. This will be used to implement
+	relay store-and-forward mode.
+	[aa0c537258e7]
+
+	* INSTALL, configure, configure.ac, doc/sudo_logsrvd.conf.man.in,
+	doc/sudo_logsrvd.conf.mdoc.in, doc/sudo_logsrvd.mdoc.in,
+	logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c, m4/sudo.m4,
+	pathnames.h.in:
+	Add configuration for sudo_logsrvd store-and-forward mode. Adds
+	"relay_dir" and "store_first" settings to sudo_logsrvd.conf in the
+	[relay] section. Also adds a --with-relaydir configure argument to
+	change the default value (usually /var/log/logsrvd-relay.
+	[6f064ed6d20e]
+
+	* src/signal.c:
+	Make sure SIGCHLD is not ignored when sudo is executed. If SIGCHLD
+	is ignored there is a race condition between when the process is
+	executed and when the SIGCHLD handler is installed. This fixes the
+	bug described by GitHub PR #98
+	[b4c91a0f72e7]
+
+2021-04-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac:
+	Remove the HP-UX 11.0 pread64() hack, it causes problems on modern
+	HP-UX.
+	[fea8ebd0b88d]
+
+	* src/limits.c:
+	Add minimum value to consider when overriding resource limits.
+	Currently only used for RLIMIT_DATA and RLIMIT_AS.
+
+	This works around a problem on HP-UX where setting RLIMIT_DATA
+	changes the resource limits for both 32-bit and 64-bit processes.
+	HP-UX processes start out with RLIMIT_DATA set based on the values
+	of the maxdsiz and maxdsiz_64bit kernel tunables, depending on
+	whether they are 32-bit or 64-bit. By default this limit is 1GB for
+	32-bit processes and 4GB for 64-bit. However, once RLIMIT_DATA is
+	changed, it does not appear to be possible to restore the old
+	values. This can result in a 64-bit process that is executed by a
+	32-bit shell getting the 32-bit RLIMIT_DATA instead of the 64-bit
+	one. Bug #973
+	[8778a27abfaf]
+
+2021-04-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd_relay.c:
+	Don't use msg_len as a length after converting it to network byte
+	order.
+	[3f2496be1130]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_relay.c:
+	Use the packed message buffer when relaying if possible. There's no
+	need to rebuild the message buffer for anything but RestartMessage
+	and ClientHello.
+	[903fa50f48c9]
+
+2021-04-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_relay.c:
+	Allocate the data buffer in get_free_buf() too. We always know the
+	size of the data buffer we need at allocation time.
+	[c02dc245aa40]
+
+2021-04-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_relay.c:
+	Relay ChangeWindowSize and CommandSuspend events too.
+	[cb20a1de47e3]
+
+2021-04-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/pyhelpers.c, plugins/python/regress/testdata/check_ex
+	ample_debugging_c_calls@diag.log, plugins/python/regress/testdata/ch
+	eck_example_debugging_c_calls@info.log, plugins/python/regress/testd
+	ata/check_example_group_plugin_is_able_to_debug.log:
+	Regenerate test output with python 3.10a7 Also adjust debug tests so
+	they pass on older python versions
+	[03aeda971872]
+
+	* configure, m4/python.m4:
+	determine Python (3.10) version number correctly. from upstream
+	automake
+	[1f4136509aca]
+
+	* MANIFEST, aclocal.m4, m4/python.m4, m4/runlog.m4:
+	Move python.m4 and runlog.m4 to the m4 directory. Previously they
+	were inline in aclocal.m4.
+	[6ec4c92539a7]
+
+2021-04-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Add hiuxmpp where we have hpux for special cases. Also move the HP-
+	UX 11.00 pread(2) workaround into the section where pread(2) is
+	tested for, not before it.
+	[f6cc1820e0fb]
+
+	* etc/sudo-logsrvd.pp, etc/sudo-python.pp:
+	Only replace the last instance of "sudo" in example and doc dir.
+	Otherwise we end up with weird paths for a prefix like /opt/sudo.
+	[113bdf79f00f]
+
+2021-04-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.mdoc.in:
+	Fix lint warning.
+	[aa4a4f0b0da1]
+
+	* doc/sudo_logsrvd.man.in, doc/sudo_logsrvd.mdoc.in:
+	Mention relay mode and update TLS example.
+	[a50a23542c05]
+
+	* etc/sudo-logsrvd.pp, etc/sudo.pp:
+	If libssl_dep was not passed in, use ldd to determine its value.
+	Normally, mkpkg will figure this out, but if the user does "make
+	package" outside of the mkpkg script, libssl_dep will not be set.
+	[87329797daca]
+
+2021-04-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL, configure, configure.ac, doc/UPGRADE:
+	Enable the use of OpenSSL if log client/server not disabled. This
+	adds a dependency on OpenSSL unless it is explicitly disabled
+	(--disable-openssl) or the sudo log client and server are disabled
+	(--disable-log-client and --disable-log-server).
+	[618f504240d2]
+
+2021-04-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/codespell.skip:
+	configure aux scripts moved to the scripts directory
+	[1cfcbfd128ed]
+
+	* logsrvd/Makefile.in, logsrvd/logsrvd_conf.c:
+	Set logsrvd_config to NULL in logsrvd_conf_cleanup() after freeing
+	it. Fixes a double free in fuzz_logsrvd_conf (but not sudo_logsrvd
+	itself). Also fix linking fuzz_logsrvd_conf with OpenSSL.
+	[ad78729467d4]
+
+	* logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.1,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.2,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.3,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.4,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.5,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.6,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.dict:
+	Update sudo_logsrvd.conf fuzzer to match configuration changes.
+	[85ae32ce6f44]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf:
+	Document relay configuration changes.
+	[d66eb842a6ef]
+
+2021-04-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_relay.c:
+	Move relay configuration into its own section and add TLS options.
+	TLS options in the relay section will be used if specified,
+	otherwise the TLS options from the server section are used.
+	[0695e9b9b067]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_relay.c:
+	Add "server" and "relay" to getters/callbacks specific to server and
+	relay.
+	[618b4fa5325c]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_relay.c:
+	Remove struct logsrvd_tls_config. Now that the SSL context is
+	initialized in logsrvd_conf.c there's no need to export TLS
+	configuration other than tls_check_peer.
+	[4fb0fdc417e1]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/logsrvd_relay.c:
+	No longer need struct logsrvd_tls_runtime, use SSL_CTX instead.
+	[61e0bdf1499d]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c:
+	Move allocation of the TLS context to logsrvd_conf_apply(). This way
+	we get certificate errors at configuration time, not after. It also
+	means that a change to the config file that renders the TLS settings
+	invalid will no longer cause the server to exit. The new config will
+	just be ignored as if there was a syntax error.
+	[352ecb58618f]
+
+	* logsrvd/tls_init.c:
+	Only initialize the SSL library once.
+	[e17215eec1d6]
+
+2021-04-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/timestamp.c:
+	Sanity check struct timespec in timestamp file. Coverity CID 220564
+	[68dfceeb105e]
+
+	* plugins/sudoers/timestamp.c:
+	Check lseek(fd, 0, SEEK_CUR) for -1 return value. Not actually
+	possible in practice. Coverity CID 220568.
+	[27105922d3be]
+
+	* src/net_ifs.c:
+	Check for NULL ifa->ifa_addr and ifa->ifa_netmask in both loops.
+	[373961966099]
+
+2021-04-07  Radovan Sroka  <rsroka@redhat.com>
+
+	* src/sudo_edit.c:
+	Fixed bad condition for sesh args
+
+	In selinux_edit_copy_tfiles() when there is only one file and the
+	open() fails then number of arguments is lower than expected. Sudo
+	should return error with or without "Defaults !sudoedit_checkdir"
+	set.
+
+	This was found with regression testing of CVE-2021-23240.
+
+	Signed-off-by: Radovan Sroka <rsroka@redhat.com>
+	[947ce862c0bf]
+
+2021-04-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/net_ifs.c:
+	Plug memory leak on overflow; Coverity CID 220556
+	[86b71e5dec5c]
+
+	* logsrvd/logsrvd.c:
+	In schedule_commit_point() do not free the closure on error. It is
+	the caller's responsibility to free resources on error. Coverity CID
+	220557
+	[e6629496ab03]
+
+	* plugins/sudoers/pwutil.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Cast NULL terminator argument to char * when calling sudo_mkgrent().
+	Avoids a portability issue on systems where NULL is not a pointer.
+	[cdb9cf0ad2ea]
+
+	* logsrvd/tls_init.c:
+	Rename LOGSRVD_DEFAULT_CIPHER_LST13 to DEFAULT_CIPHER_LST13
+	[a5d7da05cf09]
+
+	* logsrvd/tls_client.c:
+	Include string.h for strerror(3) prototype.
+	[57f5cfe43a89]
+
+	* logsrvd/logsrvd_relay.c:
+	Move connect_relay_tls() so we don't need a prototype for it. Fixes
+	a warning when sudo is not configured to use OpenSSL.
+	[0c73cfebf32b]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf:
+	Document relay and connect_timeout server settings.
+	[a101d54b451e]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/logsrv_util.h,
+	logsrvd/sendlog.c, logsrvd/sendlog.h, logsrvd/tls_client.c,
+	logsrvd/tls_common.h:
+	Move common TLS client code to tls_client.c and use it in sendlog.c.
+	[5334b6c4bef8]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	Rename listen_address -> server_address and add reference counting.
+	This will be used by the upcoming relay mode.
+	[f8ef9c83c3c8]
+
+	* logsrvd/logsrvd.c:
+	Try to send an error message to client for some client_msg_cb()
+	failures.
+	[0805636e8114]
+
+	* logsrvd/logsrvd.c:
+	Split most of server_commit_cb() out into schedule_commit_point().
+	This allows it to be used by the relay code too.
+	[c985c2f9e5d5]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, logsrvd/logsrvd_relay.c:
+	Add a relay mode to sudo_logsrvd where it forwards instead of
+	stores. Relay hosts are be specified in the server section of
+	sudo_logsrvd.conf.
+	[071c231e76a9]
+
+	* logsrvd/Makefile.in, logsrvd/logsrvd.h, logsrvd/logsrvd_relay.c,
+	logsrvd/sendlog.c, logsrvd/tls_common.h:
+	Add support for relaying to another sudo_logsrvd via TLS.
+	[c47397ce4098]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/rcstr.c, lib/util/util.exp.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/alias.c, plugins/sudoers/check_aliases.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/rcstr.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/visudo.c:
+	Move reference-counted string code from sudoers to libsudo_util. It
+	will be used by sudo_logsrvd too.
+	[d228aaf9b6fa]
+
+	* logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c, logsrvd/logsrvd_relay.c:
+	Add sa_host to struct server_address as a ref counted string. Also
+	convert sa_str to ref counted string.
+	[4e8abb84c11d]
+
+	* logsrvd/logsrvd_conf.c:
+	Don't allow a wildcard address for the relay parameter.
+	[4a80d18d025b]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	Add logsrvd_conf_cleanup() to free the conf data structures on exit.
+	There is no longer a need to do anything in shutdown_cb() other than
+	break out of the event loop.
+	[9e4d7456fb7a]
+
+	* src/tgetpass.c:
+	Set user group list when executing the askpass helper. Under normal
+	circumstances the existing group list will match the list fetched by
+	sudo. However, if sudo is executed by a process that has changed the
+	group list via setgroups(2) and "group_source" in sudo.conf is set
+	to "dynamic" it is possible for them to be different.
+
+	If group_source in sudo.conf is set to "dynamic" it is possible for
+	the group list
+	[2b1d4ffb9cf6]
+
+	* logsrvd/logsrv_util.h, logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Use a tailq of write buffers instead of a single one per connection.
+	This allows us to queue up multiple messages for writing like the
+	sudoers client supports. Currently, each connection has its own free
+	list. In the future we may want a single free list with low and high
+	water marks.
+	[b5df1b4d79c7]
+
+	* configure.ac:
+	Increase autoconf minimum version to 2.70. Some of the macros
+	deprecated in 2.70 are required by older versions. For example,
+	AC_PROG_CC now does the work of AC_PROG_CC_STDC. Bug #972
+	[223a584b6241]
+
+	* MANIFEST, Makefile.in, config.guess, config.sub, configure,
+	configure.ac, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, install-sh, lib/util/Makefile.in,
+	lib/zlib/Makefile.in, logsrvd/Makefile.in, ltmain.sh,
+	plugins/audit_json/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/python/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_approval/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, scripts/config.guess,
+	scripts/config.sub, scripts/install-sh, scripts/ltmain.sh,
+	src/Makefile.in:
+	Move autoconf auxiliary files to the scripts directory.
+	[5ea8182c11d9]
+
+2021-04-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in:
+	Document SUCCESS=return support in sudoers nsswitch.conf entries.
+	Based on a patch from Dennis Filder. Bug #971.
+	[1d631d1b6244]
+
+2021-04-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/audit.c:
+	Move log_server_accept() out from under the #ifdef
+	SUDOERS_LOG_CLIENT Fixes a link error when sudo is configured with
+	--disable-log-client.
+	[1bb7efdbddd5]
+
+2021-04-01  Radovan Sroka  <rsroka@redhat.com>
+
+	* src/selinux.c:
+	Removed depricated security_context_t
+
+	Signed-off-by: Radovan Sroka <rsroka@redhat.com>
+	[14aba55909fc]
+
+2021-03-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/sendlog.c:
+	Return NULL if init_tls_client_context() fails. Otherwise, we will
+	call SSL_new with a freed SSL context. Bug #970
+	[5fbadce88524]
+
+2021-03-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/parse_args.c:
+	Use separate getopt config for sudoedit. Avoids a problem where the
+	user gets an exclusive usage error message when using a sudo-
+	specific option. GitHub issue #95
+	[b6207568e50a]
+
+	* src/parse_args.c, src/sudo_usage.h.in:
+	Add -h and -V to sudoedit usage and customize help output for
+	sudoedit. Also add missing -B option to usage strings.
+	[0d8fa214f8c3]
+
+	* src/parse_args.c:
+	Don't report a usage error for "sudo -V". GitHub issue #95
+	[a18573251751]
+
+	* etc/sudo-logsrvd.pp, etc/sudo-python.pp, etc/sudo.pp:
+	Do not include parent directories in rpm and deb files. Fixes a
+	directory conflict with the AIX sudo rpm package. Other deb/rpm
+	packages were not affected because parent dirs are omitted for a
+	prefix of /usr.
+	[f7d8db9670bb]
+
+2021-03-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/net_ifs.c:
+	SCO OpenServer uses SIOCGIFANUM, not SIOCGIFNUM. On OpenServer,
+	SIOCGIFNUM is the number of network interfaces, not the number of
+	ifreq structs.
+	[a992ea37b071]
+
+2021-03-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/net_ifs.c:
+	Add support for HP-UX SIOCGLIFNUM and SIOCGLIFCONF ioctls. We need
+	to use both SIOCGIFCONF and SIOCGLIFCONF since SIOCGLIFCONF only
+	returns IPv6 addresses.
+	[7a53304872b9]
+
+2021-03-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/net_ifs.c:
+	Move get_net_ifs stub to the top and remove unused INET_ADDRSTRLEN
+	def.
+	[15bb7bc0ecb8]
+
+	* src/net_ifs.c:
+	No longer need ifr_tmp variable, just reuse ifr. Now that we store
+	the string version of the address before fetching the netmask we can
+	just re-use ifr. This simplifies things and is safer since if there
+	is space for the address there must also be space for the mask.
+	[89ade84d0a6d]
+
+	* src/net_ifs.c:
+	SCO OpenServer 5 returns a bogus value for SIOCGIFNUM. Gleaned from
+	sendmail.
+	[0616f2103f0b]
+
+	* src/net_ifs.c:
+	Use SIOCGSIZIFCONF or SIOCGIFNUM where available. Still falls back
+	to a loop if not but now maxes out at 2048 interfaces instead of
+	potentially looping forever.
+	[f19cd2f827d5]
+
+	* configure, configure.ac, src/net_ifs.c:
+	Remove support for obsolete ISC UNIX and MIPS RISC/OS systems. They
+	were getting in the way of net_its.c simplification.
+	[4e2b7ce2fb7b]
+
+2021-03-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/net_ifs.c:
+	Use SIOCGLIFCONF to get interface list where supported (Solaris).
+	HP-UX has a SIOCGLIFCONF but it is incompatible (and appears to only
+	return IPv6 addresses). Also add IPv6 support using SIOCGIFCONF
+	(probably AIX only) and make sure ifr_tmpbuf[] is properly aligned.
+	[d2eebba41618]
+
+	* MANIFEST, src/Makefile.in, src/regress/net_ifs/check_net_ifs.c:
+	Add simple regress check to display the network interfaces found.
+	[6c1a5a50056e]
+
+2021-03-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL:
+	Suggest clang 11 or higher, some fuzzers may hang when used with
+	clang 10.
+	[abcf94949ca2]
+
+2021-03-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, logsrvd/Makefile.in,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.dict:
+	Add dictionary file for fuzz_logsrvd_conf.
+	[f9e154751a5f]
+
+	* Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/eventlog/Makefile.in,
+	lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	logsrvd/Makefile.in, plugins/audit_json/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_approval/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Add a new "fuzz" target that executes the fuzzers for 8192 runs
+	each. To run indefinately, set FUZZ_RUNS=-1, e.g. "make FUZZ_RUNS=-1
+	fuzz"
+	[5fd3d7e9430f]
+
+	* MANIFEST, lib/iolog/Makefile.in,
+	lib/iolog/regress/corpus/log_json/id.json,
+	lib/iolog/regress/corpus/log_json/ls.json,
+	lib/iolog/regress/corpus/log_json/mailq.json,
+	lib/iolog/regress/corpus/log_json/make.json,
+	lib/iolog/regress/corpus/log_json/pkg_add.json,
+	lib/iolog/regress/corpus/log_json/pkg_delete.json,
+	lib/iolog/regress/corpus/log_json/printenv.json,
+	lib/iolog/regress/corpus/log_legacy/id.log,
+	lib/iolog/regress/corpus/log_legacy/ls.log,
+	lib/iolog/regress/corpus/log_legacy/mailq.log,
+	lib/iolog/regress/corpus/log_legacy/make.log,
+	lib/iolog/regress/corpus/log_legacy/pkg_add.log,
+	lib/iolog/regress/corpus/log_legacy/pkg_delete.log,
+	lib/iolog/regress/corpus/log_legacy/printenv.log,
+	lib/iolog/regress/corpus/seed/log_json/id.json,
+	lib/iolog/regress/corpus/seed/log_json/ls.json,
+	lib/iolog/regress/corpus/seed/log_json/mailq.json,
+	lib/iolog/regress/corpus/seed/log_json/make.json,
+	lib/iolog/regress/corpus/seed/log_json/pkg_add.json,
+	lib/iolog/regress/corpus/seed/log_json/pkg_delete.json,
+	lib/iolog/regress/corpus/seed/log_json/printenv.json,
+	lib/iolog/regress/corpus/seed/log_legacy/id.log,
+	lib/iolog/regress/corpus/seed/log_legacy/ls.log,
+	lib/iolog/regress/corpus/seed/log_legacy/mailq.log,
+	lib/iolog/regress/corpus/seed/log_legacy/make.log,
+	lib/iolog/regress/corpus/seed/log_legacy/pkg_add.log,
+	lib/iolog/regress/corpus/seed/log_legacy/pkg_delete.log,
+	lib/iolog/regress/corpus/seed/log_legacy/printenv.log,
+	lib/iolog/regress/corpus/seed/timing/timing.1,
+	lib/iolog/regress/corpus/seed/timing/timing.2,
+	lib/iolog/regress/corpus/seed/timing/timing.3,
+	lib/iolog/regress/corpus/seed/timing/timing.4,
+	lib/iolog/regress/corpus/timing/timing.1,
+	lib/iolog/regress/corpus/timing/timing.2,
+	lib/iolog/regress/corpus/timing/timing.3,
+	lib/iolog/regress/corpus/timing/timing.4, lib/util/Makefile.in,
+	lib/util/regress/corpus/seed/sudo_conf/sudo.conf.1,
+	lib/util/regress/corpus/seed/sudo_conf/sudo.conf.2,
+	lib/util/regress/corpus/seed/sudo_conf/sudo.conf.3,
+	lib/util/regress/corpus/sudo_conf/sudo.conf.1,
+	lib/util/regress/corpus/sudo_conf/sudo.conf.2,
+	lib/util/regress/corpus/sudo_conf/sudo.conf.3, logsrvd/Makefile.in,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.1,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.2,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.3,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.4,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.5,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.6,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.1,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.2,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.3,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.4,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.5,
+	logsrvd/regress/corpus/seed/logsrvd_conf/logsrvd.conf.6,
+	plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/corpus/policy/policy.1,
+	plugins/sudoers/regress/corpus/policy/policy.2,
+	plugins/sudoers/regress/corpus/policy/policy.3,
+	plugins/sudoers/regress/corpus/policy/policy.4,
+	plugins/sudoers/regress/corpus/policy/policy.5,
+	plugins/sudoers/regress/corpus/seed/policy/policy.1,
+	plugins/sudoers/regress/corpus/seed/policy/policy.2,
+	plugins/sudoers/regress/corpus/seed/policy/policy.3,
+	plugins/sudoers/regress/corpus/seed/policy/policy.4,
+	plugins/sudoers/regress/corpus/seed/policy/policy.5:
+	Move corpus files to a seed subdirectory.
+	[ba6dd7f30d22]
+
+	* lib/fuzzstub/fuzzstub.c:
+	We can now rely on LLVMFuzzerTestOneInput to flush stdout.
+	[f20f353eeb87]
+
+	* plugins/sudoers/Makefile.in:
+	Fix fuzz_sudoers output comparison when fuzzing is enabled.
+	libFuzzer outputs additional info to stderr that our stub doesn't.
+	[49434e4eceaa]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Flush stdout before successful return from LLVMFuzzerTestOneInput().
+	Fixes a problem with diag lines from libFuzzer being interspersed
+	with test output.
+	[f0b701120128]
+
+	* configure, configure.ac:
+	Use --allow-multiple-definition to work around an issue with ld.lld.
+	For fuzz_policy we redefine getaddrinfo/freeaddrinfo to work around
+	a DNS timeout problem with name resolution and CIfuzz. However, this
+	causes a link failure when sanitizers are enabled on systems that
+	use ld.lld as their linker. Use a big hammer to avoid the link
+	error.
+	[2b9df5329c0e]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/testsudoers_pwutil.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h:
+	Do not redefine system group and passwd functions for testsudoers.
+	Instead, prefix the replacements with "testsudoers_" and use a
+	custom pwutil backend so they get used.
+	[6bfd2f8d01c0]
+
+	* Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/eventlog/Makefile.in,
+	lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	logsrvd/Makefile.in, plugins/audit_json/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_approval/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Rename "fuzz" makefile target to "check-fuzzer". It's purpose is to
+	run the fuzzers are part of a normal "make check" to avoid bit rot,
+	not to perform a fuzzer run. The fuzz_logsrvd_conf fuzzer was not
+	wired up to "make check" previously.
+	[01c03ccfd3f0]
+
+2021-03-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_6p1 for changeset 055f2a618604
+	[5376bc9e3b85] <1.9>
+
+	* Merge sudo 1.9.6p1 from tip
+	[055f2a618604] [SUDO_1_9_6p1] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.6p1
+	[93d95d3f23b1]
+
+2021-03-15  Alexandru Ardelean  <aardelean@deviqon.com>
+
+	* plugins/sudoers/policy.c:
+	plugins: sudoers: policy: add MODE_IMPLIED_SHELL to RUN_VALID_FLAGS
+
+	Since this flag isn't set, the sudo_mode variable gets invalidated
+	and running the 'sudo' command seems to error out with message
+	'sudoers_policy_check: invalid mode flags from sudo front end:
+	0x80001"'
+	[b98b418f1997]
+
+2021-03-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_6 for changeset e3e96490e48f
+	[2e377fa2b87c] <1.9>
+
+	* config.guess, config.sub:
+	Merge sudo 1.9.6 from tip
+	[e3e96490e48f] [SUDO_1_9_6] <1.9>
+
+	* NEWS:
+	fix typo
+	[c7367647bd7c]
+
+2021-03-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Bug #968
+	[e08853fca88e]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/sendlog.c, logsrvd/sendlog.h, logsrvd/tls_common.h,
+	logsrvd/tls_init.c:
+	Move common TLS initialization code to tls_init.c.
+	[118c7d41ad48]
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po, po/tr.mo,
+	po/tr.po:
+	Updated translations from translationproject.org
+	[cbc05710d6ba]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/gram.c:
+	Use HAVE_STDINT_H instead of trying to guess based on
+	__STDC_VERSION__. Fixes compilation with pre-C99 headers when the
+	compiler supports C99.
+	[05ebf79d02c7]
+
+	* include/sudo_compat.h, lib/util/secure_path.c:
+	Remove compatibility defines for POSIX sys/stat.h macros. Modern
+	systems have them and we no longer support pre-POSIX systems. This
+	fixes potential redefinition of the macros if sys/stat.h is included
+	after sudo_compat.h. Bug #968.
+	[d10d0b9b60e1]
+
+	* lib/eventlog/logwrap.c,
+	plugins/python/python_plugin_approval_multi.inc,
+	plugins/python/python_plugin_audit_multi.inc,
+	plugins/python/python_plugin_io_multi.inc, src/get_pty.c:
+	Quiet a few Solaris Studio compiler warnings.
+	[1d82509f2e44]
+
+	* configure, configure.ac:
+	Add -Wno-unknown-pragmas along with -Wall. We don't want warnings
+	about unknown pragmas in system headers.
+	[ac15fa0e3d95]
+
+	* scripts/pp:
+	Solaris 11.4 removed /usr/bin/optisa, use /usr/bin/isainfo instead.
+	[97d8bb91cf02]
+
+2021-03-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Compare OS name against freebsd* and netbsd* not freebsd and netbsd.
+	Fixes an issue on NetBSD where host_os starts with netbsdelf.
+	[2e813d52a7d6]
+
+	* plugins/sudoers/Makefile.in:
+	Add @SUDOERS_LIBS@ to FUZZ_LIBS for -lutil on FreeBSD and NetBSD
+	[38a7b3a9eb90]
+
+	* lib/util/Makefile.in, plugins/python/Makefile.in, src/Makefile.in:
+	Set locale for all "make check" targets.
+	[1a80048486d4]
+
+2021-03-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	AIX 6.1 may have a broken fmemopen(). We only use it for the fuzzers
+	so ignore it for AIX < 7.1.
+	[ad909c1479ff]
+
+2021-03-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/pp:
+	Only put specific directories in the ROOT section of the AIX
+	package. Previously, /usr and /opt were placed in USR and everything
+	else went in ROOT. Now, only /dev, /etc, /sbin and /var go in ROOT.
+	[6f1fbe8fea31]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fi.mo,
+	po/fi.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/ja.mo,
+	po/ja.po, po/ko.mo, po/ko.po, po/pl.mo, po/pl.po, po/pt.mo,
+	po/pt.po, po/pt_BR.mo, po/pt_BR.po, po/uk.mo, po/uk.po, po/zh_CN.mo,
+	po/zh_CN.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[53c17c8d56e9]
+
+2021-03-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c:
+	Remove unused tls parameter, we now use a per-address tls flag.
+	[2be727a37b9c]
+
+2021-03-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document double escaping of backslashes. Bug #961.
+	[ae51e4899555]
+
+	* NEWS, configure, configure.ac:
+	No longer need to define _DARWIN_UNLIMITED_GETGROUPS on macOS. We
+	now define _DARWIN_C_SOURCE which accomplishes the same thing.
+	[c233df4c1ae4]
+
+	* plugins/sudoers/auth/pam.c:
+	Fix a potential use-after-free in conversation function. The prompt
+	passed in to sudo_pam_verify() will be freed later by
+	check_user_interactive() so we need to reset the stashed value. From
+	Pavel Heimlich. Bug #967.
+	[86bc6ee3c493]
+
+	* plugins/sudoers/pwutil.c:
+	No need to update cp after storing gr->gr_name, it is not used,
+	Coverity CID 219314
+	[27bace364dc9]
+
+2021-03-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Mention GitHub issue #56.
+	[47b8b9fac52b]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[923899bcc63d]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Log peer address in sudo_logsrvd JSON-format logs. The peer that
+	connected to us might not be the same host where the log entry
+	originated.
+	[4e2488efaf97]
+
+	* NEWS, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	lib/util/sudo_conf.c:
+	Make "group_source=dynamic" the default on macOS. Recent versions of
+	macOS do not reliably return all of a user's non-local groups via
+	getgroups(2), even when _DARWIN_UNLIMITED_GETGROUPS is defined. Bug
+	#946.
+	[491720b06a68]
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	For regess/fuzz set LC_ALL to C.UTF-8 if possible, falling back on
+	C. Works around a crash in leak sanitizer when the locale is set to
+	C and TLS support is enabled.
+	[4345912b9bd8]
+
+2021-03-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Initialize the lbuf used by sudoers_trace_print() in init_lexer().
+	Free the old buffer if there is one, otherwise it would never be
+	freed.
+	[1893ecc06718]
+
+	* lib/util/lbuf.c:
+	In sudo_lbuf_destroy(), reset error, len and size.
+	[7a6f980c2215]
+
+	* NEWS:
+	Mention the integer overflow check in store_timespec().
+	[f41519e1dae9]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	In find_path() stub only make a copy in outfile if returning FOUND.
+	Fixed a recently-introduced memory leak in the fuzzer.
+	[2045b1afc0b5]
+
+2021-02-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sudo_debug.c:
+	Disable debug code for FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION It
+	will not be used and just confuses the coverage stats.
+	[3307c855b77d]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Expand stub getaddrinfo() to resolve "localhost".
+	[e1035616ad99]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Improve fuzz_policy coverage and set defaults in setdefs not parse.
+	Now exercises session open/close and set additional defaults to
+	exercise more code paths.
+	[2843a0b930fd]
+
+	* plugins/sudoers/match_command.c, plugins/sudoers/match_digest.c:
+	Improve SUDOERS_NAME_MATCH support. Now supports digests and
+	performs better directory matching.
+	[2f2d63596256]
+
+	* plugins/sudoers/policy.c:
+	Add MODE_CHECK to LIST_VALID_FLAGS, fixes "sudo -l command".
+	[eff4cbe95d75]
+
+2021-02-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, include/sudo_iolog.h, lib/iolog/Makefile.in,
+	lib/iolog/iolog_clearerr.c, lib/iolog/iolog_close.c,
+	lib/iolog/iolog_eof.c, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_gets.c, lib/iolog/iolog_mkdirs.c,
+	lib/iolog/iolog_mkdtemp.c, lib/iolog/iolog_mkpath.c,
+	lib/iolog/iolog_nextid.c, lib/iolog/iolog_open.c,
+	lib/iolog/iolog_openat.c, lib/iolog/iolog_read.c,
+	lib/iolog/iolog_seek.c, lib/iolog/iolog_swapids.c,
+	lib/iolog/iolog_util.c, lib/iolog/iolog_write.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c, logsrvd/iolog_writer.c,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	Split iolog_fileio.c into multiple files.
+	[9b7c4f1b781f]
+
+	* plugins/sudoers/defaults.c:
+	Correct the integer overflow check in store_timespec(). Fixes oss-
+	fuzz issue #31463
+	[3765d5c4ecd3]
+
+	* plugins/sudoers/regress/sudoers/test27.ldif2sudo.ok:
+	Update file that was missed in test27 changes.
+	[5824f54afa88]
+
+	* MANIFEST, include/sudo_iolog.h, lib/iolog/Makefile.in,
+	lib/iolog/iolog_conf.c, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_loginfo.c:
+	Break out I/O log config handling into iolog_conf.c.
+	[546f503f9bb4]
+
+	* lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	logsrvd/Makefile.in, plugins/sudoers/Makefile.in:
+	regen Makefile.in
+	[43c54f94e9c8]
+
+	* examples/Makefile.in, lib/eventlog/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Add some missing files to the clean target
+	[20754fec5ff1]
+
+	* plugins/sudoers/regress/sudoers/test27.in,
+	plugins/sudoers/regress/sudoers/test27.json.ok,
+	plugins/sudoers/regress/sudoers/test27.ldif.ok,
+	plugins/sudoers/regress/sudoers/test27.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test27.out.ok,
+	plugins/sudoers/regress/sudoers/test27.toke.ok:
+	Add netgroup check to sudoers test27
+	[1b45a6794b2d]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.out.ok:
+	Sync with fuzz_sudoers changes.
+	[1481cef048ad]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Fuzz with runuser and rungroup specified too.
+	[2d8ceb465cea]
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test27.in,
+	plugins/sudoers/regress/sudoers/test27.json.ok,
+	plugins/sudoers/regress/sudoers/test27.ldif.ok,
+	plugins/sudoers/regress/sudoers/test27.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test27.out.ok,
+	plugins/sudoers/regress/sudoers/test27.toke.ok:
+	Add test to exercise RunasSpec without a RunasUser.
+	[ee22ac488aca]
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test22.sudo.ok,
+	plugins/sudoers/regress/sudoers/test23.sudo.ok,
+	plugins/sudoers/regress/sudoers/test24.sudo.ok,
+	plugins/sudoers/regress/sudoers/test26.sudo.ok:
+	Remove unused regress files.
+	[71d943734bb8]
+
+	* logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	Don't try to run getters if we failed to parse the config file.
+	[734bb56c24ed]
+
+2021-02-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Add a stub getaddrinfo(3) to avoid a DNS timeout in CIfuzz.
+	[5f725de1e3ad]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Fix runchroot, runcwd, tty_tickets. Add timestampowner.
+	[d8a945bea98d]
+
+	* plugins/sudoers/policy.c:
+	Only add command_info to garbage collector on successful return.
+	Otherwise it will be freed on failure.
+	[c3d0461efaa1]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Add user millert to group sudo, which is often the exempt group.
+	[fac833a2cf3b]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Add some defaults settings in sudo_file_parse(). We don't have a
+	real policy file but we still want to exercise callbacks in
+	sudoers.c.
+	[9f3d3f668973]
+
+	* plugins/sudoers/sudoers.c:
+	Do not free sudo_user.iolog_{file,path} in sudo_user_free(). They
+	are not dynamically allocated.
+	[59c102ba67cf]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_timing.c:
+	Remove unnecessary warnings, we want to fail silently.
+	[4b1ee5dd2cb4]
+
+	* logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	No longer need to stub out eventlog config functions.
+	[08c40b6a63c9]
+
+	* MANIFEST, logsrvd/Makefile.in,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.4,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.5,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.6,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	Call public getters in logsrvd.conf fuzzer and add to corpus. Now
+	exercises the syslog config erorr path.
+	[0b314e4e0696]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Add more passes to policy fuzzer Now execises list, list other user
+	and show_version.
+	[21a1cc9665ec]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Implement sudoers_policy_deregister_hooks() Register/deregister
+	hooks in fuzz_policy and also call show_version().
+	[8849644a75de]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Add sudoers debug register/deregister.
+	[5fba9b19c6fa]
+
+	* plugins/sudoers/defaults.c:
+	Remove unnecessary break statement.
+	[aa18c2957f82]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.out.ok,
+	plugins/sudoers/regress/sudoers/test14.in,
+	plugins/sudoers/regress/sudoers/test14.json.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test14.out.ok,
+	plugins/sudoers/regress/sudoers/test14.toke.ok:
+	Include a sha384 digest in the test corpus.
+	[6c405febff10]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Parse sudoers file in the C locale.
+	[82d6afbe499b]
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test26.in,
+	plugins/sudoers/regress/sudoers/test26.json.ok,
+	plugins/sudoers/regress/sudoers/test26.ldif.ok,
+	plugins/sudoers/regress/sudoers/test26.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test26.out.ok,
+	plugins/sudoers/regress/sudoers/test26.sudo.ok,
+	plugins/sudoers/regress/sudoers/test26.toke.ok:
+	Add regress test with all current Defaults settings. Currently skips
+	SELinux and Solaris privilege settings.
+	[79e82a58ccde]
+
+2021-02-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers_hooks.c:
+	Move env hooks into sudoers_hooks.c.
+	[7296d05b9206]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	No need to call check_defaults() and check_aliases() in quiet mode.
+	[0d0f93849388]
+
+	* plugins/sudoers/gc.c:
+	sudoers_gc_init() is not currently used
+	[e74d2870ae25]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/fmtsudoers_cvt.c:
+	Split fmtsudoers.c into the parts used by sudoers plugin and
+	cvtsudoers. Only testsudoers and cvtsudoers use the full set of
+	formatting functions.
+	[8c57e80ae655]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Check defaults settings too.
+	[7dc7d66f47e7]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_stubs.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Add fuzzer-specific stubs source file.
+	[815c28958d42]
+
+	* Makefile.in:
+	Do not overwrite existing ChangeLog file if there is no hg/git dir.
+	We don't want "make install" from a source tarball to nuke the
+	ChangeLog.
+	[f7aba6a01d85]
+
+	* lib/iolog/Makefile.in, lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Remove fuzzer targets in "make clean"
+	[25b068bc254b]
+
+	* .gitignore, .hgignore:
+	Ignore fuzzer targets
+	[d920254ce731]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Set program name in fuzzers so we get consisten warnings.
+	[1ee4b5478d1c]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Use real eventlog config fuctions instead of stubs.
+	[eed6fc4df1f6]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_loginfo.c:
+	Move iolog info log writing to iolog_loginfo.c
+	[292915dae440]
+
+	* MANIFEST, lib/iolog/Makefile.in, lib/iolog/iolog_loginfo.c,
+	lib/iolog/iolog_timing.c, lib/iolog/iolog_util.c,
+	lib/iolog/regress/iolog_timing/check_iolog_timing.c,
+	lib/iolog/regress/iolog_util/check_iolog_util.c:
+	Split iolog_util.c into iolog_loginfo.c and iolog_timing.c. Also
+	rename check_iolog_util -> check_iolog_timing.
+	[5b5249e4aa96]
+
+	* MANIFEST, lib/iolog/Makefile.in, lib/iolog/iolog_legacy.c,
+	lib/iolog/iolog_util.c:
+	Move legacy I/O log info file parsing to iolog_legacy.c
+	[94b767bb56c7]
+
+	* MANIFEST, include/sudo_eventlog.h, lib/eventlog/Makefile.in,
+	lib/eventlog/eventlog.c, lib/eventlog/eventlog_conf.c:
+	Move eventlog config code into eventlog_conf.c
+	[656d65215e50]
+
+	* MANIFEST, lib/eventlog/Makefile.in, lib/eventlog/eventlog.c,
+	lib/eventlog/eventlog_free.c:
+	Move eventlog_free() into its own file.
+	[a5ff36ac0ebb]
+
+	* logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	Stub out eventlog and iolog configuration setters.
+	[cc32ba7436cd]
+
+	* MANIFEST, plugins/sudoers/defaults.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.out.ok:
+	Update Defaults settings after parsing sudoers. Also stub out
+	dump_defaults when fuzzing as it is not used.
+	[fa1e7c7b42c2]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/b64_decode.c,
+	plugins/sudoers/b64_encode.c, plugins/sudoers/base64.c:
+	Split base64 encode/decode functions into separate source files.
+	They are independent functions.
+	[ab0904c5122c]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	fuzz_printf and fuzz_conversation can be stubs.
+	[9b11c9a3f3c3]
+
+2021-02-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Exercise tilde expansion if used in runcwd or runchroot.
+	[a6f0995c6a55]
+
+	* plugins/sudoers/check_aliases.c:
+	Move alias checking code out of visudo.c and into check_aliases.c.
+	[5c0a91978441]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Check aliases in fuzz_sudoers if the policy parsed correctly.
+	[b272e634f204]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/parse.h,
+	plugins/sudoers/visudo.c:
+	Move alias checking code out of visudo.c and into check_aliases.c.
+	[b9c23c958935]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	We don't need to link fuzz_sudoers with file.c.
+	[4fcd15e8cdcf]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.dict,
+	lib/util/regress/fuzz/fuzz_sudo_conf.dict,
+	plugins/sudoers/regress/fuzz/fuzz_policy.dict,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.dict,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.dict:
+	Strings in dictionary files need to be quoted.
+	[8a95ea335d2d]
+
+	* MANIFEST, lib/iolog/Makefile.in,
+	lib/iolog/regress/fuzz/fuzz_iolog_json.dict, lib/util/Makefile.in,
+	lib/util/regress/fuzz/fuzz_sudo_conf.dict,
+	plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_policy.dict,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.dict,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.dict:
+	Add dictionary files for fuzzers where possible.
+	[4d9147fd50fd]
+
+2021-02-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Also free safe_cmnd so it doesn't leak.
+	[5071a1ffa5d0]
+
+	* plugins/sudoers/stubs.c, plugins/sudoers/testsudoers.c:
+	Return NOT_FOUND from the set_cmnd_path() stub since we don't set
+	user_cmnd. The purpose of set_cmnd_path() is to reset user_cmnd
+	based on a new runchroot. For the stub version we don't modify
+	user_cmnd and so must not return a status of FOUND. Fixes oss-fuzz
+	issue #31250 which only affected the fuzzer and not sudo.
+	[36fe416668df]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.out.ok:
+	Fix fuzz_sudoers output matching.
+	[6cec1e5aa799]
+
+	* lib/fuzzstub/fuzzstub.c:
+	Print "running" and "executed" lines to stderr like libfuzzer does.
+	[b76b7a4a6ff3]
+
+	* plugins/sudoers/pwutil_impl.c:
+	Support passing sudo_make_gidlist_item() an array of gids. The gids
+	are formatted as strings, not gid_t.
+	[d1608f63ae91]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.out.ok:
+	Prime user/group cached and set the interface list. Also match
+	parsed policy against multiple users.
+	[ec19b5658a2a]
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.h:
+	Add sudo_mkgrent(), to be used to prime the group cache in
+	tests/fuzzers.
+	[333f0887abbc]
+
+2021-02-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Perform matching in fuzz_sudoers for inputs that parse correctly.
+	The fuzzer now exercised the normal match code as well as the
+	pseudo-command (list, validate, etc) match code. Privileges are also
+	listed for well-formed sudoers file.
+	[8caf505d7341]
+
+	* plugins/sudoers/match_command.c, plugins/sudoers/match_digest.c,
+	plugins/sudoers/parse.h:
+	Add back SUDOERS_NAME_MATCH and enable it when fuzzing. This avoids
+	the test environment from influencing sudoers matching.
+	[496b3a7184a8]
+
+	* plugins/sudoers/match_command.c:
+	Add missing globfree(3) in command_matches_glob() when matching a
+	directory.
+	[1d6d28d6eb61]
+
+2021-02-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sudo_dso.c:
+	Add support on AIX for loading plugins that are .a (not .so) files.
+	It is possible to specify the member name in parens after the path,
+	e.g. sudoers.a(shr.o) for 32-bit or sudoers.a(shr_64.o) for 64-bit.
+	If no member is specified in the path and dlopen() fails with
+	ENOEXEC, try again with an explicit member, either shr.o or
+	shr_64.o.
+	[90d975989148]
+
+	* Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/eventlog/Makefile.in,
+	lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	logsrvd/Makefile.in, plugins/audit_json/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_approval/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Add clean rules to .PHONY target.
+	[dea3468f3f7b]
+
+2021-02-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/eventlog/Makefile.in,
+	lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	logsrvd/Makefile.in, plugins/audit_json/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_approval/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Add install-fuzz Makefile target to install the fuzzers and seed
+	corpus. The FUZZ_DESTDIR make variable needs to be set in the
+	environment or on the command line.
+	[89c4dc1e8cb0]
+
+	* plugins/sudoers/Makefile.in:
+	Only display fuzz_policy output if the fuzzer exits with an error.
+	[c6927227be4a]
+
+	* plugins/sudoers/regress/corpus/policy/policy.1,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Call list, validate and invalidate entry points too. We need a
+	separate open/close for each one.
+	[fbbc5bdb4541]
+
+	* INSTALL, configure, configure.ac:
+	Add --disable-ssp configure option. This allows for disabling
+	-fstack-protector without turning off the other hardening options.
+	[1d9ca18e4fa9]
+
+	* lib/util/regress/getdelim/getdelim_test.c:
+	Test the error case by closing the underlying fd. Note that we don't
+	use ferror() here since our getdelim() has no way to set the error
+	flag if there is a memory allocation error.
+	[df0464968e2c]
+
+	* lib/util/regress/getdelim/getdelim_test.c:
+	Test the case where getdelim() must reallocate the buffer.
+	Reproduces Bug #960.
+	[df4dbc0830be]
+
+	* lib/eventlog/eventlog.c:
+	When logging JSON to syslog, wrap the contents in a "sudo" object.
+	This makes it easier for log parsers to identify what is a sudo log
+	entry.
+	[2c96aeaabc8e]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Restore the check for sudoers_policy.close == NULL. The fuzzers run
+	as part of "make check" too in which case NO_LEAKS won't be defined
+	and the close function will be set to NULL.
+	[8418ff5f6dfb]
+
+	* lib/iolog/iolog_json.c:
+	Use %td when printing the difference of two pointers.
+	[608de9ab3902]
+
+	* plugins/sudoers/parse.c:
+	Don't print a NULL as a string if role/type/privs/limitprivs is not
+	set. We can't rely on printf("%s", NULL) not crashing.
+	[4a04efbcbff9]
+
+	* plugins/sudoers/sudoers.c:
+	Fix compilation error on Solaris introduced with sudo_user_free().
+	[0ce4e0ac807e]
+
+2021-02-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Bug #960.
+	[82303f217d8b]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Distinguish between EOF and error using feof(3), not ferror(3). Our
+	getdelim(3) emulation won't set the error flag if the error is due
+	to an allocation failure. This explains the premature EOF without
+	error seen in Bug #960.
+	[5a70875f92fa]
+
+	* lib/util/getdelim.c:
+	Reset end pointer when reallocing the line buffer in getdelim().
+	Fixes excessive memory allocations for long lines. Bug #960.
+	[d6dd6893b38a]
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Remove duplicated MALLOC_OPTIONS and MALLOC_CONF env variables.
+	[2f7695aadad9]
+
+	* lib/iolog/iolog_json.c:
+	On parse error, display line and column instead of the offending
+	line.
+	[bbda04a5b05d]
+
+	* logsrvd/Makefile.in, plugins/sudoers/Makefile.in:
+	regen
+	[20e093fd76f0]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.6
+	[1c76fe52426f]
+
+2021-02-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/iolog_json.c, lib/iolog/iolog_util.c:
+	Pass I/O log memory allocation errors up to the caller.
+	[4777add71679]
+
+	* INSTALL, config.h.in, configure, configure.ac, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, pathnames.h.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/timestamp.c:
+	Add admin_flag sudoers option and make --enable-admin-flag take a
+	path. It is now possible to disable the Ubuntu admin flag in sudoers
+	or change its location. GitHub issue #56
+	[d77c3876fa95]
+
+	* plugins/sudoers/exptilde.c,
+	plugins/sudoers/regress/exptilde/check_exptilde.c:
+	Fix tilde expansion of paths with no user like ~/foo. The '/'
+	separator was missing in the resulting path.
+	[dbba61f76d6c]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, lib/util/sudo_conf.c,
+	plugins/sudoers/policy.c:
+	Limit max_groups in sudo.conf to 1024. The max_groups setting should
+	no longer be needed anyway.
+	[aee7843e0c7d]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
+	In sudoers_policy_close() call sudoers_cleanup() instead of
+	sudo_user_free(). If we didn't call sudoers_policy_main() due to an
+	early error there may be more things to clean up.
+	[683d69d84aa6]
+
+	* plugins/sudoers/policy.c:
+	Check for invalid flag combinations from front-end for all cases.
+	The checks are now performed in the check_policy, list, validate and
+	invalidate functions instead of as part of the open function. We
+	can't perform the checks in open because we don't yet know what
+	operation is going to be performed.
+	[b09105b3bb42]
+
+	* plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c:
+	Always dynamically allocate user_cmnd, it is freed in
+	sudo_user_free(). Instead of setting user_cmnd in the policy
+	functions, always set argv. Calling sudoers_policy_main() with argc
+	of 0 is no longer allowed.
+	[820f1f4e5c44]
+
+	* plugins/sudoers/policy.c:
+	No need for sudoers_cleanup() in sudoers_policy_invalidate(). The
+	sudoers close() function is now called even for "sudo -k". Also no
+	need to set user_cmnd, it is not used in this code path.
+	[c2c9832c32f4]
+
+2021-02-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/logsrvd_conf.c,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.1,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.2,
+	logsrvd/regress/corpus/logsrvd_conf/logsrvd.conf.3,
+	logsrvd/regress/fuzz/fuzz_logsrvd_conf.c:
+	Add simple fuzzer for sudo_logsrvd.conf parser.
+	[8b5cd9e24656]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_timing.c:
+	Fix unlinking of timing temp file.
+	[8b0ce6d777c8]
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	plugins/python/Makefile.in, plugins/sudoers/Makefile.in:
+	Set MALLOC_OPTIONS and MALLOC_CONF for all regress targets.
+	[47e8b85d1d9a]
+
+	* MANIFEST, lib/util/Makefile.in,
+	lib/util/regress/corpus/sudo_conf/sudo.conf.1,
+	lib/util/regress/corpus/sudo_conf/sudo.conf.2,
+	lib/util/regress/corpus/sudo_conf/sudo.conf.3,
+	lib/util/regress/fuzz/fuzz_sudo_conf.c:
+	Add simple fuzzer for sudo.conf parser.
+	[8a530402f936]
+
+	* plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Free struct sudo_user in sudoers_policy_close() and
+	sudoers_cleanup(). Also, do not NULL out the close function if
+	NO_LEAKS is defined.
+	[f3fbf78e6e41]
+
+	* MANIFEST, lib/iolog/Makefile.in,
+	lib/iolog/regress/corpus/log_legacy/id,
+	lib/iolog/regress/corpus/log_legacy/id.log,
+	lib/iolog/regress/corpus/log_legacy/ls,
+	lib/iolog/regress/corpus/log_legacy/ls.log,
+	lib/iolog/regress/corpus/log_legacy/mailq,
+	lib/iolog/regress/corpus/log_legacy/mailq.log,
+	lib/iolog/regress/corpus/log_legacy/make,
+	lib/iolog/regress/corpus/log_legacy/make.log,
+	lib/iolog/regress/corpus/log_legacy/pkg_add,
+	lib/iolog/regress/corpus/log_legacy/pkg_add.log,
+	lib/iolog/regress/corpus/log_legacy/pkg_delete,
+	lib/iolog/regress/corpus/log_legacy/pkg_delete.log,
+	lib/iolog/regress/corpus/log_legacy/printenv,
+	lib/iolog/regress/corpus/log_legacy/printenv.log,
+	plugins/sudoers/Makefile.in:
+	For "make fuzz" only fuzz the seed corpus. This way we avoid files
+	generated by the fuzzer itself.
+	[42ace1dec313]
+
+2021-02-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/env.c, plugins/sudoers/gc.c,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Fix sudoers garbage collection and run it in policy fuzzer.
+	[c0d572fd9921]
+
+	* .github/workflows/main.yml:
+	Rename master -> main
+	[57000edd1aff]
+
+	* plugins/sudoers/policy.c:
+	Do not include errno string for invalid params from front-end.
+	[2d0b55b3041f]
+
+	* plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	Always dynamically allocate user_role, user_type, user_privs,
+	user_limitprivs
+	[f5992824219d]
+
+	* plugins/sudoers/policy.c:
+	Remove dead code, front-end does not set runas_privs or
+	runas_limitprivs
+	[6ce3da323452]
+
+	* plugins/sudoers/iolog.c:
+	Plug memory leak if there are duplicate user_info or command_info
+	entries.
+	[21865246a4dc]
+
+2021-02-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .github/workflows/main.yml:
+	Add CIFuzz workflow to run fuzzers on push or PR.
+	https://google.github.io/oss-fuzz/getting-started/continuous-
+	integration/
+	[47f1c8015ec5]
+
+	* plugins/sudoers/check.h, plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/timestamp.c:
+	Move create_admin_success_flag() to timestamp.c.
+	[0675f230288c]
+
+	* configure, configure.ac:
+	Error out if fuzzer/sanitizer enabled but not supported by the
+	compiler.
+	[289afba93f79]
+
+	* plugins/sudoers/regress/fuzz/fuzz_policy.c:
+	The push() function was not updating the size after reallocating.
+	[e089aaeee3b2]
+
+	* plugins/sudoers/pwutil_impl.c, src/sudo.c:
+	If sudo_getgrouplist2() returns -1, clamp ngroups based on
+	max_groups. The ngroups parameter is an out parameter that is filled
+	in with the actual number of groups, which may be less than the
+	static number allocated when max_groups is set in sudo.conf. Fixes a
+	potential out of bounds read found by LLVM libFuzzer.
+	[a26461ccf891]
+
+2021-02-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c:
+	Reset sudoers path, owner and mode before parsing plugin arguments.
+	This is only needed when calling sudoers_policy_deserialize_info()
+	more than once, which is true for the policy fuzzer.
+	[a25a6210f48c]
+
+	* plugins/sudoers/sudoers.c:
+	Cleanup sudoers sources on denial and error too.
+	[454b7adcfa21]
+
+	* plugins/sudoers/pwutil.c:
+	Fix sudo_getgrgid reference count bug when gid doesn't exist. This
+	one was missed when the other user/group lookup functions were
+	fixed.
+	[20e3fad6768b]
+
+	* plugins/sudoers/policy.c:
+	Plug memory leak if there are duplicate user_info entries.
+	[b8ddcfa0a051]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/corpus/policy/policy.1,
+	plugins/sudoers/regress/corpus/policy/policy.2,
+	plugins/sudoers/regress/corpus/policy/policy.3,
+	plugins/sudoers/regress/corpus/policy/policy.4,
+	plugins/sudoers/regress/corpus/policy/policy.5,
+	plugins/sudoers/regress/fuzz/fuzz_policy.c,
+	plugins/sudoers/sudoers.c:
+	Fuzz sudoers policy module API. Includes a test case to reproduce
+	CVE-2021-3156.
+	[576d065759cf]
+
+	* lib/iolog/Makefile.in, plugins/sudoers/Makefile.in:
+	Make fuzz targets depend on fuzzer stub library. We really want a
+	dependency on $(LIB_FUZZING_ENGINE) but that could be a flag like
+	"-fsanitize=fuzzer" instead of a path.
+	[0963418f1cf9]
+
+	* lib/util/Makefile.in:
+	regen
+	[dd872eceb19e]
+
+	* MANIFEST, plugins/sudoers/Makefile.in:
+	Move audit.c from libparsesudoers to the sudoers module itself. Now
+	that audit.c contains the audit module it doesn't belong in
+	libparsesudoers.
+	[3df4f6e10f54]
+
+	* configure, configure.ac:
+	Do not pass AX_APPEND_FLAG more than a single flag. GitHub issue #92
+	[ed9ccdd41231]
+
+2021-02-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	logsrvd/Makefile.in, plugins/sudoers/Makefile.in:
+	Fix up some .la file library dependencies. libsudo_iolog.la already
+	depends on libsudo_util.la and libsudo_eventlog.la so we don't need
+	to list those explicitly when libsudo_iolog.la is listed.
+	[d8b55cf698b5]
+
+	* lib/eventlog/eventlog.c, lib/util/Makefile.in, lib/util/progname.c,
+	lib/util/regress/progname/progname_test.c, lib/util/sudo_conf.c,
+	lib/util/util.exp.in, plugins/sudoers/audit.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/match_command.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/sudo_edit.c, src/sudo_noexec.c:
+	Use sudo_basename() instead of doing the equivalent manually.
+	[67e2b5d68a73]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/basename.c, lib/util/util.exp.in:
+	Add a GNU-compatible version of basename(3). Unlike POSIX
+	basename(3), the GNU variant does not modify its argument. Note that
+	basename of a path ending in "/" returns an empty string.
+	[693e1d39718a]
+
+2021-02-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/iolog_fileio.c:
+	feof(3) returns non-zero at EOF, not necessarily 1. On Illumos at
+	least it returns a value other than 1.
+	[fc2242fe7c6e]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Portable workaround for getdelim(3) implementations modify buf on
+	EOF. We should assume that the contents of buf are undefined when
+	getdelim(3) returns -1. We now peek ahead one char and skip the
+	getdelim(3) call if EOF is detected. This will preserve the original
+	value of the last line.
+	[1e353f05a0fa]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Some getdelim(3) implementations write a NUL to the buffer on EOF.
+	AIX and Illumos appear to have this behavior. We now preserve the
+	first character of the buffer on EOF to work around this. Fixes
+	reporting of syntax errors on the last line of a file.
+	[22611c14c1d1]
+
+	* plugins/sudoers/Makefile.in:
+	Fuzz the example sudoers file, not the default one. The default
+	sudoers uses @includedir which can result in different output,
+	depending on the permissions of /etc/sudoers.d.
+	[1b325a1d0e0a]
+
+	* configure, configure.ac:
+	illumos has a broken fmemopen(3), don't use it.
+	[d297ee0339e6]
+
+2021-02-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Add configure check for SSIZE_MAX
+	[ca7699154705]
+
+	* lib/iolog/iolog_json.c:
+	Suppress PVS Studio false positives.
+	[6d8fcec047e5]
+
+	* src/sesh.c:
+	Silence a clang analyzer false positive.
+	[8bc3e89f6fbb]
+
+	* plugins/sudoers/toke_util.c:
+	Silence a clang analyzer false positive.
+	[2489166fc372]
+
+	* lib/fuzzstub/fuzzstub.c:
+	Fix CID 217123, size check always false on 64-bit systems.
+	[3c018b5d43a8]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Make open_sudoers() always return NULL like fuzz_sudoers.c
+	[042de90307ae]
+
+	* plugins/sudoers/regress/sudoers/test4.toke.ok,
+	plugins/sudoers/regress/sudoers/test5.toke.ok,
+	plugins/sudoers/regress/sudoers/test7.toke.ok,
+	plugins/sudoers/regress/sudoers/test8.toke.ok:
+	Update *.toke.ok now that lexer doesn't call sudoerserror() itself.
+	[d60c0d33b5b4]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.h, plugins/sudoers/toke.l:
+	The lexer now sets an error string before returning ERROR. The
+	parser will use that when reporting on an ERROR state. This prevents
+	the lexer from reporting errors about tokens that are not actually
+	consumed by the parser and we don't have to worry about both the
+	lexer and the parser reporting errors. It also means we only get one
+	error per sudoers line.
+	[7ffb0d28862f]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Go back to storing the last error file/line in sudoerserrorf(). This
+	is still the best way to avoid displaying more than one error per
+	line.
+	[21da59d69c5f]
+
+	* configure, configure.ac:
+	Add -fsanitize=fuzzer-no-link to ASAN_LDFLAGS too, not just
+	ASAN_CFLAGS.
+	[d3c719c72d79]
+
+	* MANIFEST, Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/eventlog/Makefile.in,
+	lib/fuzzstub/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	logsrvd/Makefile.in, plugins/audit_json/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_approval/Makefile.in,
+	plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.out.ok,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Add fuzz Makefile target and run fuzzer corpus in make check.
+	[a66085f05dea]
+
+2021-02-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, Makefile.in, configure, configure.ac,
+	lib/fuzzstub/Makefile.in, lib/fuzzstub/fuzzstub.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Add stub library that just feeds files to the fuzzing target. This
+	will allow the fuzzers to be run as part of "make check".
+	[aa8fda20c3f8]
+
+	* scripts/mkpkg:
+	Append to CFLAGS and LDFLAGS instead of overriding them when adding
+	-m64.
+	[d02cf3c28198]
+
+	* config.h.in, configure, configure.ac,
+	lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Fall back to a temp file if fmemopen() is not available().
+	[87f804b98c18]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Add missing return statement when NO_LEAKS is not defined.
+	[25b8e1041b62]
+
+	* lib/eventlog/Makefile.in:
+	Remove remnants of liblogsrv.
+	[5030114bb12f]
+
+	* INSTALL, configure, configure.ac, lib/iolog/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Add --enable-fuzzer-linker and --enable-fuzzer-engine options. These
+	will allow the fuzzers to be built as part of oss-fuzz.
+	[c3176bd8b95b]
+
+2021-02-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .gitignore, .hgignore:
+	Sync ignore files.
+	[ddf136d412f7]
+
+	* plugins/sudoers/Makefile.in:
+	Fix linking of sudoers fuzzers with static libsudo_util.
+	[86d07a5a671d]
+
+	* INSTALL, configure, configure.ac, lib/iolog/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Add --enable-fuzzer option to use when building fuzzers
+	[01e31362c2b0]
+
+	* INSTALL, configure, configure.ac:
+	Replace --enable-asan with --enable-sanitizer It is not possible to
+	set the sanitizer flags at configure time.
+	[115d869e1d55]
+
+2021-02-06  Anton Bershanskiy  <45960703+bershanskiy@users.noreply.github.com>
+
+	* src/copy_file.c:
+	Fix comment typo in src/copy_file.c
+	[60dbf6da4712]
+
+2021-02-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/Makefile.in, lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_timing.c,
+	plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Build (but don't run) fuzzers as part of "make check". Uses a stub
+	to make it possible to link w/o libfuzzer. The goal is to ensure the
+	fuzzers are always buildable and avoid bit rot.
+	[9186e252b8bf]
+
+	* lib/iolog/Makefile.in, plugins/sudoers/Makefile.in:
+	Add libsudo_eventlog.la as a dependency of libsudo_iolog.la No
+	longer need to link against libsudo_eventlog.la in sudoers.
+	[508097f86035]
+
+2021-02-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, lib/iolog/regress/corpus/log_json/id.json,
+	lib/iolog/regress/corpus/log_json/ls.json,
+	lib/iolog/regress/corpus/log_json/mailq.json,
+	lib/iolog/regress/corpus/log_json/make.json,
+	lib/iolog/regress/corpus/log_json/pkg_add.json,
+	lib/iolog/regress/corpus/log_json/pkg_delete.json,
+	lib/iolog/regress/corpus/log_json/printenv.json,
+	lib/iolog/regress/corpus/log_legacy/id,
+	lib/iolog/regress/corpus/log_legacy/ls,
+	lib/iolog/regress/corpus/log_legacy/mailq,
+	lib/iolog/regress/corpus/log_legacy/make,
+	lib/iolog/regress/corpus/log_legacy/pkg_add,
+	lib/iolog/regress/corpus/log_legacy/pkg_delete,
+	lib/iolog/regress/corpus/log_legacy/printenv,
+	lib/iolog/regress/corpus/timing/timing.1,
+	lib/iolog/regress/corpus/timing/timing.2,
+	lib/iolog/regress/corpus/timing/timing.3,
+	lib/iolog/regress/corpus/timing/timing.4:
+	Add more test files for fuzzers.
+	[22256acfbe23]
+
+2021-02-05  Daniel Milnes  <thebeanogamer@gmail.com>
+
+	* doc/sudo.mdoc.in:
+	Fix the typo in the mdoc
+	[e0ad7f93e678]
+
+	* doc/sudo.man.in:
+	Fix a tiny typo in the Sudo manpage
+	[d52c308677bf]
+
+2021-02-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, lib/iolog/regress/fuzz/fuzz_iolog_timing.c:
+	fuzzer for I/O log timing files
+	[7b32f8eecfd6]
+
+	* lib/iolog/iolog_json.c:
+	In JSON, name/value pairs must be separated by a comma. Previously
+	we didn't require the comma to be there.
+	[bb70cecf6360]
+
+	* lib/iolog/iolog_json.c:
+	Detect integer overflow when converting JSON_ARRAY to string vector.
+	Extremely unlikely to happen but better safe than sorry.
+	[60a7a4d3a1d8]
+
+2021-02-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Only strip double quotes from an include path if len >= 2. Found
+	locally using libfuzzer/oss-fuzz.
+	[274d0a05081b]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Don't allow the sudoers fuzzer to open include files. If we allow
+	the fuzzer to choose include paths it will include random files in
+	the file system. This leads to bug reports that cannot be
+	reproduced.
+	[b8ffce94f30a]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	If getdelim() returns a string with embedded NULs, truncate on first
+	one. This should avoid some issues with the fuzzer.
+	[e90e61d4bb0e]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Reallocate the buffer correctly when appending a newline. Fixes a
+	potential buffer overflow introduced in the last commit.
+	[50b0f77aed5f]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y:
+	Don't free the alias name in alias_add() if the alias already
+	exists. We need to be able to display it using alias_error(). Only
+	free what we actually allocated in alias_add() on error and let the
+	caller handle cleanup. Note that we cannot completely fill in the
+	alias until it is inserted. Otherwise, we will have modified the
+	file and members parameters even if there was an error. As a result,
+	we have to remove those from the leak list after alias_add(), not
+	before.
+	[6a920646d7d1]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix NUL termination when parsing a sudoers file with no ending
+	newline. oss-fuzz issue #30252
+	[5c75d8e15966]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	sudoersrestart() does not reset state to INITIAL, do it in
+	init_lexer(). Fixes spurious errors from fuzz_sudoers, which calls
+	the parser multiple times.
+	[bf2c1c3b82e6]
+
+	* plugins/sudoers/regress/parser/check_fill.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.h, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c:
+	Push lexer leak tracking down into check_fill.c. This lets us track
+	things correctly when buffers are realloc()d. Rewrote fill() and
+	append() to be more readable.
+	[a1e61a4a7aad]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c:
+	Use sudoersrestart() in fuzz_sudoers.c Since we run the parser
+	multiple times we need to restart it each time.
+	[64792d363f62]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Parser needs user_shost for the %h escape in @include expansion.
+	Fixes oss-fuzz issue #30238
+	[b043e413be31]
+
+	* INSTALL:
+	The --disable-leaks option is not recommended for production use.
+	[cb37a56f4e99]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Remove options from the leak list before freeing them. Should fix
+	oss-fuzz issue #30236
+	[1ee6dac8c027]
+
+	* MANIFEST, include/sudo_iolog.h, lib/iolog/iolog_util.c,
+	lib/iolog/regress/fuzz/fuzz_iolog_legacy.c:
+	Add fuzzer for legacy I/O log info file.
+	[3f4ed83660ca]
+
+	* doc/Makefile.in, plugins/sudoers/Makefile.in:
+	Fix uninstall target; there were missing line continuation chars.
+	GitHub issue #87
+	[02cffb51c15c]
+
+2021-02-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/parse_ldif.c:
+	Don't close fp in sudoers_parse_ldif() The caller should be the one
+	to handle this.
+	[e8d830851379]
+
+	* .gitignore, .hgignore:
+	Update ignore files.
+	[0c8245d8097c]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y:
+	Got back to calling alias_free() on alias_add() failure. We now need
+	to remove the name and members from the leak list
+	*before* calling alias_add() since alias_add() will consume them for
+	both success and failure.
+	[65c95a84f8ca]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	close sudoersin, not fp, and reset it to be safe
+	[f616d1c7c09a]
+
+	* lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Add missing fclose(3) of fmemopen(3) stream; it does not modify the
+	data.
+	[9207901dcccd]
+
+	* lib/iolog/iolog_json.c:
+	Check for unexpected value after checking the name, not before.
+	[6f973cc4378d]
+
+	* lib/util/progname.c:
+	Allow getprogname() to succeed as long as __progname is present.
+	Also simplify the progname code so we only need a single
+	implementation.
+	[300a29bd117e]
+
+	* lib/iolog/iolog_json.c:
+	Fix potential leak of evlog->runuser. Also warn if we find an
+	unexpected JSON type.
+	[0ec615b3d4e0]
+
+2021-02-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Parse into a local parse_tree and add missing cleanup. Since
+	parsed_policy is for the sudoers parser we should declare our own.
+	[c418d65e7bb4]
+
+	* plugins/sudoers/regress/fuzz/fuzz_sudoers.c:
+	Call init_parser() after parsing to clean up completely.
+	[2063d26ab401]
+
+	* MANIFEST, plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/regress/sudoers/test25.in,
+	plugins/sudoers/regress/sudoers/test25.json.ok,
+	plugins/sudoers/regress/sudoers/test25.ldif.ok,
+	plugins/sudoers/regress/sudoers/test25.out.ok,
+	plugins/sudoers/regress/sudoers/test25.toke.ok,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c:
+	Plug a few more parser leaks.
+	[c9478efdd65d]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Make parser_leak_remove(type, NULL) a no-op.
+	[7699e99a028a]
+
+	* MANIFEST, lib/iolog/regress/fuzz/fuzz_iolog_json.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers.c,
+	plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.c:
+	Add initial fuzzers to be used by oss-fuzz. These are not yet hooked
+	up to the sudo build.
+	[5593a755f359]
+
+	* plugins/sudoers/gc.c, plugins/sudoers/sudoers.h:
+	Garbage collect unused gc_remove() function.
+	[ff561edd846e]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/testsudoers/test11.sh,
+	plugins/sudoers/regress/testsudoers/test12.sh,
+	plugins/sudoers/regress/testsudoers/test13.sh,
+	plugins/sudoers/regress/testsudoers/test4.sh,
+	plugins/sudoers/regress/testsudoers/test5.sh:
+	The parser should be leak free, re-enable leak detection in ASAN.
+	[a89599540a5a]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.h, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c:
+	Add garbage collection to the sudoers parser to clean up on error.
+	This makes it possible to avoid memory leaks when there is a parse
+	error.
+	[ef739da324bb]
+
+2021-01-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_ldap.h:
+	Move new_member_all to ldap_util.c, it is only used by ldap/sssd.
+	[9df2efb6956a]
+
+2021-01-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/iolog_json.c:
+	Fix crashes trying to parse invalid JSON. Found locally using
+	libfuzzer/oss-fuzz.
+	[b74c8c260d60]
+
+	* lib/iolog/iolog_json.c:
+	Plug memory leak if a key is listed more than once in the log.json
+	file.
+	[764ef247f13e]
+
+	* lib/iolog/regress/iolog_json/check_iolog_json.c:
+	Fix crash when file does not exist.
+	[55a46b75e6ed]
+
+	* plugins/sudoers/gentime.c:
+	Strict tz offset parsing. Fixes an out of bounds read found locally
+	using libfuzzer/oss-fuzz.
+	[72266f1af75d]
+
+	* plugins/sudoers/ldap_util.c:
+	Don't leak memory for duplicate command options. The last option
+	wins but we also now warn about the duplicate. Found locally using
+	libfuzzer/oss-fuzz.
+	[f1cd342e62f7]
+
+	* plugins/sudoers/ldap_util.c:
+	Copy command options when converting a sudoRole with multiple
+	sudoCommands. A sudoRole with multiple sudoCommands is converted to
+	a privilege with multiple cmndspecs. However, we were not copying
+	some of the command options to subsequent cmndspecs in the list.
+	[d8309574a756]
+
+	* plugins/sudoers/parse_ldif.c:
+	Fix memory leak if the last line is folded. Fixes issue 30080 by
+	ClusterFuzz-External
+	[404f38aa19a6]
+
+	* INSTALL, configure, configure.ac:
+	Add --disable-leaks configure option. This enables the extra freeing
+	of memory before exit also enabled by --enable-asan. To be used by
+	oss-fuzz.
+	[faddd42273a4]
+
+	* plugins/sudoers/gentime.c:
+	Stricter parsing of generalized time. Fixes potential out of bounds
+	read found by libfuzzer/oss-fuzz.
+	[4548e29ea5e0]
+
+2021-01-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse_ldif.c:
+	Don't bother calling ldif_to_sudoers() if there are no roles to
+	convert.
+	[242394d46fb1]
+
+	* lib/iolog/iolog_json.c:
+	In json_stack_push() treat stack exhaustion like memory allocation
+	failure. Return NULL instead of treating as a fatal error. This
+	should make life a little easier for oss-fuzz.
+	[84c7c3b7971a]
+
+	* plugins/sudoers/sudoers.c:
+	Update comment about return values for resolve_host().
+	[0e92fe582db1]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/policy.c:
+	Fix NO_ROOT_MAILER, broken by the eventlog refactor in sudo 1.9.4.
+	init_eventlog_config() is called immediately after initializing the
+	Defaults settings, which is before struct sudo_user is setup. This
+	adds a call to eventlog_set_mailuid() if NO_ROOT_MAILER is defined
+	after the invoking user is determined. Reported by Roman Fiedler.
+	[e0d4f196ba02]
+
+2021-01-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST:
+	Add plugins/sudoers/strvec_join.c
+	[1dfeb8ab9fdb]
+
+	* plugins/sudoers/strvec_join.c, plugins/sudoers/sudoers.c:
+	Fix compilation on systems without a native strlcpy() function.
+	[7b28feb4350a]
+
+	* logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Break up the long help string into multiple printf() statements. AIX
+	xlc compiler doesn't like cpp directives in between strings. Also
+	fixes a complaint from cppcheck and makes translation easier.
+	[e55b4061f598]
+
+	* plugins/sudoers/regress/unescape/check_unesc.c,
+	plugins/sudoers/strvec_join.c, plugins/sudoers/sudoers.h:
+	strvec_join: free result on error and actually use separator char
+	[801546807a8a]
+
+2021-01-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/unescape/check_unesc.c:
+	Test strvec_join() using strlcpy_unesc(). Emulates an overflow like:
+	sudoedit -s '\' `perl -e 'print "A" x 65536'`
+	[8d9a063adde5]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/strvec_join.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Refactor code to flatten an argument vector into a string. This is
+	used when building up the user_args string.
+	[a6ae655d91a1]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/unescape/check_unesc.c,
+	plugins/sudoers/strlcpy_unesc.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add strlcpy_unescape() function to undo escaping from front-end.
+	Includes unit test.
+	[abfaa390d275]
+
+	* plugins/sudoers/parse_ldif.c:
+	Add missing check for reallocarray() failure. Found by OSS-Fuzz.
+	[fcda06966ed7]
+
+2021-01-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/pyhelpers.c, plugins/python/pyhelpers.h,
+	plugins/python/python_convmessage.c,
+	plugins/python/sudo_python_module.c:
+	Remove Py_SSIZE2SIZE to quiet cppcheck warnings. Tuple size cannot
+	be negative and we already handle the case where it is zero.
+	[d6ec5e558a0e]
+
+	* src/parse_args.c:
+	The program name may now only be "sudo" or "sudoedit". We no longer
+	need to check for any string that ends in "edit".
+	[caed524c6ba0]
+
+2021-01-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_5p2 for changeset 83685ffbc4df
+	[74a2ddc3e4a4] <1.9>
+
+	* Merge sudo 1.9.5p2 from tip
+	[83685ffbc4df] [SUDO_1_9_5p2] <1.9>
+
+	* plugins/sudoers/timestamp.c:
+	Fix the memset offset when converting a v1 timestamp to TS_LOCKEXCL.
+	We want to zero the struct starting at flags, not type (which was
+	just set). Found by Qualys.
+	[09f98816fc89]
+
+	* src/parse_args.c:
+	Don't assume that argv is allocated as a single flat buffer. While
+	this is how the kernel behaves it is not a portable assumption. The
+	assumption may also be violated if getopt_long(3) permutes
+	arguments. Found by Qualys.
+	[c125fbe68783]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.5p2
+	[89a357d8da4e]
+
+	* src/parse_args.c:
+	Reset valid_flags to MODE_NONINTERACTIVE for sudoedit. This is
+	consistent with how the -e option is handled. Also reject -H and -P
+	flags for sudoedit as was done in sudo 1.7. Found by Qualys, this is
+	part of the fix for CVE-2021-3156.
+	[9b97f1787804]
+
+	* plugins/sudoers/policy.c:
+	Add sudoedit flag checks in plugin that are consistent with front-
+	end. Don't assume the sudo front-end is sending reasonable mode
+	flags. These checks need to be kept consistent between the sudo
+	front-end and the sudoers plugin.
+	[a97dc92eae6b]
+
+	* plugins/sudoers/sudoers.c:
+	Fix potential buffer overflow when unescaping backslashes in
+	user_args. Also, do not try to unescaping backslashes unless in run
+	mode *and* we are running the command via a shell. Found by Qualys,
+	this fixes CVE-2021-3156.
+	[049ad90590be]
+
+2021-01-22  Fabrice Fontaine  <fontaine.fabrice@gmail.com>
+
+	* lib/eventlog/Makefile.in:
+	lib/eventlog/Makefile.in: fix static build without closefrom
+
+	Since version 1.9.4 and https://github.com/sudo-
+	project/sudo/commit/bd1ca79cca827a92e904f022e49df121931d4ff5, when
+	closefrom is not available, libsudo_eventlog.a depends on
+	libsudo_util.a. So reflect this dependency in the libtool file to
+	avoid the following static build failure of logsrvd:
+
+	/bin/bash ../libtool --tag=disable-static --mode=link
+	/home/buildroot/autobuild/instance-1/output-1/host/bin/powerpc-
+	linux-gcc -o sudo_logsrvd logsrv_util.o iolog_writer.o logsrvd.o
+	logsrvd_conf.o -static -Wl,--enable-new-dtags -Wl,-z,relro
+	../lib/iolog/libsudo_iolog.la ../lib/eventlog/libsudo_eventlog.la
+	../lib/logsrv/liblogsrv.la /bin/bash ../libtool --tag=disable-static
+	--mode=link
+	/home/buildroot/autobuild/instance-1/output-1/host/bin/powerpc-
+	linux-gcc -o sudo_sendlog logsrv_util.o sendlog.o -static -Wl,--
+	enable-new-dtags -Wl,-z,relro ../lib/iolog/libsudo_iolog.la
+	../lib/eventlog/libsudo_eventlog.la ../lib/logsrv/liblogsrv.la
+	libtool: link:
+	/home/buildroot/autobuild/instance-1/output-1/host/bin/powerpc-
+	linux-gcc -o sudo_logsrvd logsrv_util.o iolog_writer.o logsrvd.o
+	logsrvd_conf.o -static -Wl,--enable-new-dtags -Wl,-z -Wl,relro
+	../lib/iolog/.libs/libsudo_iolog.a /home/buildroot/autobuild/instanc
+	e-1/output-1/build/sudo-1.9.5p1/lib/util/.libs/libsudo_util.a
+	-lpthread -lz ../lib/eventlog/.libs/libsudo_eventlog.a
+	../lib/logsrv/.libs/liblogsrv.a
+	/home/buildroot/autobuild/instance-1/output-1/host/opt/ext-
+	toolchain/bin/../lib/gcc/powerpc-buildroot-linux-
+	uclibc/8.3.0/../../../../powerpc-buildroot-linux-uclibc/bin/ld:
+	../lib/eventlog/.libs/libsudo_eventlog.a(eventlog.o): in function
+	`send_mail.constprop.1': eventlog.c:(.text+0x149c): undefined
+	reference to `sudo_closefrom' collect2: error: ld returned 1 exit
+	status
+
+	Fixes:
+	 - http://autobuild.buildroot.org/results/515b45f876fa9de03c9235f86017f
+	4dc10eb3b54
+
+	Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
+	[4e42d276c336]
+
+2021-01-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/log_client.c:
+	Do not add an unfinished write buffer to the queue if it is already
+	present. In client_msg_cb() we only remove a buffer from the queue
+	when it is finished. Inserting the buf again can cause a cycle in
+	the queue.
+	[b398dcc0933d]
+
+2021-01-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/log_client.c:
+	Fix problem when SSL_read() returns SSL_ERROR_WANT_WRITE. This can
+	happen when the socket cannot be written to immediately. We need to
+	set the read_instead_of_write flag in that case, _not_
+	write_instead_of_read. Also sync comments with sendlog.c. Bug #954
+	[e4239bb932aa]
+
+2021-01-18  Pavel Březina  <pbrezina@redhat.com>
+
+	* plugins/sudoers/auth/pam.c:
+	pam: pass KRB5CCNAME to pam_authenticate environment if available
+
+	If a PAM module wants to authenticate user using GSSAPI, the
+	authentication is broken if non-default ccache name is used in
+	KRB5CCNAME environment variable.
+
+	One way to mitigate this would be to add this to env_keep, but this
+	also makes the variable available in the executed command which may
+	not be always desirable.
+
+	This patch sets KRB5CCNAME for pam_authenticate only, if it is
+	available and not yet set.
+	[90aba6ba6e03]
+
+2021-01-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/progname.c:
+	Fix setprogname() emulation on systems without it. For fully-
+	qualified paths, store the string starting after the last slash, not
+	at the slash itself.
+	[111fde52d116]
+
+2021-01-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_5p1 for changeset 3a873a732416
+	[e837c76279bc] <1.9>
+
+	* Merge sudo 1.9.5p1 from tip
+	[3a873a732416] [SUDO_1_9_5p1] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.5p1
+	[2dbbab94d4b6]
+
+	* src/sudo_edit.c:
+	Run the editor with the user's real and effective uid and gid. Fixes
+	a bug introduced in sudo 1.9.5 where the editor was run setuid root
+	unless SELinux RBAC was in use.
+	[30fe53c07aa7]
+
+	* NEWS:
+	fix typo
+	[52e7767881ba]
+
+	* src/copy_file.c, src/edit_open.c:
+	Add casts to quiet two warnings on Solaris.
+	[f76126f6d68d]
+
+2021-01-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_5 for changeset 4059f5520d9d
+	[ee76c8a938de] <1.9>
+
+	* Merge sudo 1.9.5 from tip
+	[4059f5520d9d] [SUDO_1_9_5] <1.9>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update .pot files for 1.9.5.
+	[49dae07bda23]
+
+2021-01-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac, doc/LICENSE, etc/sudo-logsrvd.pp,
+	etc/sudo-python.pp, etc/sudo.pp:
+	Sudo 1.9.5
+	[3a0e500981a8]
+
+	* doc/sudoers.man.in, doc/sudoers.man.in.sed, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/policy.c:
+	Allow SELinux support to be disabled via the sudoers file. Defaults
+	to true if sudo is built with SELinux support and SELinux is not
+	disabled on the system.
+	[c457eaae8692]
+
+2021-01-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/python_importblocker.c:
+	Add a comment to verify_import() to clarify its purpose.
+	[30ef680f4104]
+
+	* lib/eventlog/eventlog.c, lib/util/arc4random.c,
+	lib/util/sudo_debug.c, plugins/audit_json/audit_json.c,
+	plugins/python/python_convmessage.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/rcstr.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c,
+	src/exec_common.c, src/sesh.c, src/sudo.c, src/sudo_edit.c:
+	Suppress PVS Studio false positives.
+	[077f46549351]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Plug a memory leak in sudoerserrorf().
+	[a3c14cf0283e]
+
+	* plugins/sudoers/editor.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/parse.h,
+	plugins/sudoers/starttime.c, plugins/sudoers/tsgetgrpw.c,
+	src/ttyname.c:
+	Quiet a few harmless cppcheck warnings.
+	[ab123790b3fd]
+
+	* src/copy_file.c, src/sudo_edit.c:
+	In sudoedit, use sudo_check_temp_file() for non-SELinux too.
+	[b5d5bd506487]
+
+	* MANIFEST, src/Makefile.in, src/edit_open.c, src/sesh.c,
+	src/sudo_edit.c, src/sudo_edit.h, src/sudo_exec.h:
+	Move safe open code out of sudo_edit.c and into edit_open.c.
+	[108fcca05798]
+
+	* src/Makefile.in, src/edit_open.c, src/sesh.c, src/sudo_edit.c,
+	src/sudo_edit.h:
+	Add directory writability checks for SELinux RBAC sudoedit. These
+	were never added to the SELinux RBAC path.
+	[0d4f28b5a8e2]
+
+	* src/edit_open.c, src/exec.c, src/exec_pty.c, src/sesh.c, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c, src/sudo_edit.h, src/tgetpass.c:
+	Add struct sudo_cred to hold the invoking or runas user credentials.
+	We can use this when we need to pass around credential info instead
+	of the user_details and command_details structs.
+	[20594f3f00c1]
+
+	* src/edit_open.c, src/sesh.c, src/sudo_edit.c, src/sudo_edit.h:
+	Rename run_cred -> cur_cred and stash existing creds in
+	set_tmpdir(). For sudo_edit_open() et al what we need is a copy of
+	the current cred to restore after dir_is_writable() changes to the
+	user cred.
+	[dcfce8a11282]
+
+	* configure, configure.ac, include/sudo_compat.h, lib/util/progname.c:
+	Add setprogname(3) for those without it.
+	[e2f1d1ecedb0]
+
+	* src/sesh.c, src/sudo_edit.c:
+	Split up sesh_sudoedit() so it is organized more like sudo_edit.c.
+	The new sesh_edit_create_tfiles() and sesh_edit_copy_tfiles()
+	functions are analogous to sudo_edit_create_tfiles() and
+	sudo_edit_copy_tfiles(). Also use "sudoedit" in the warning/error
+	messages from sesh_sudoedit(). Otherwise, the user gets a mix of
+	messages from sudoedit and sesh.
+	[5510be4b2129]
+
+	* Makefile.in, lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/audit_json/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/python/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_approval/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Remove the --force option from the cppcheck args, it causes errors.
+	[57f2ad72e874]
+
+	* include/sudo_util.h, lib/util/progname.c, lib/util/util.exp.in,
+	src/sudo.c:
+	For sudo, only allow "sudo" or "sudoedit" as the program name. The
+	program name is also used when matching Debug lines in sudo.conf. We
+	don't want the user to be able to influence sudo.conf Debug
+	matching. The string "sudoedit" is treated the same as "sudo" in
+	sudo.conf. Problem reported by Matthias Gerstner of SUSE.
+	[1d32c53859f9]
+
+	* lib/iolog/iolog_fileio.c, lib/util/sudo_debug.c,
+	plugins/group_file/getgrent.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/tsgetgrpw.c:
+	Check the return value of fcntl() when setting FD_CLOEXEC. This
+	should never fail unless the fd is invalid. Problem reported by
+	Matthias Gerstner of SUSE.
+	[f1ca39a0d870]
+
+	* src/sudo_edit.c:
+	Fix potential directory existing info leak in sudoedit. When
+	creating a new file, sudoedit checks to make sure the parent
+	directory exists so it can provide the user with a sensible error
+	message. However, this could be used to test for the existence of
+	directories not normally accessible to the user by pointing to them
+	with a symbolic link when the parent directory is controlled by the
+	user. Problem reported by Matthias Gerstner of SUSE.
+	[ea19d0073c02]
+
+	* src/copy_file.c, src/sesh.c, src/sudo_edit.c, src/sudo_exec.h:
+	Add security checks before using temp files for SELinux RBAC
+	sudoedit. Otherwise, it may be possible for the user running
+	sudoedit to replace the newly-created temporary files with a
+	symbolic link and have sudoedit set the owner of an arbitrary file.
+	Problem reported by Matthias Gerstner of SUSE.
+	[8fcb36ef422a]
+
+	* plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po, po/ko.mo,
+	po/ko.po, po/sr.mo, po/sr.po, po/sv.mo, po/sv.po:
+	Updated translations from translationproject.org
+	[e68c92c767f1]
+
+2021-01-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Use debug_return_int() not debug_return_bool() to return -1. Found
+	by PVS Studio.
+	[f1f67ca51aeb]
+
+	* plugins/sudoers/logging.c:
+	Fix a crash introduced in 1.9.4 when running "sudo -i" as an unknown
+	user.
+	[d1a3f0f4d0f9]
+
+2021-01-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/check.c:
+	Make sure lecture file is a regular file before reading it.
+	[c9c68eff1e45]
+
+2021-01-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in, lib/eventlog/Makefile.in, lib/iolog/Makefile.in,
+	lib/logsrv/Makefile.in, lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/audit_json/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/group_file/plugin_test.c, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_approval/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/parse.h,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Minor fixes pointed out by cppcheck. Also add
+	compareBoolExpressionWithInt to suppression list.
+	[52316819700e]
+
+	* logsrvd/logsrvd.c:
+	Avoid potential use after free with eventlog-only connections.
+	Coverity CID 215884.
+	[cca5cffabe42]
+
+	* src/exec.c:
+	Cannot do direct exec of a command when SELinux RBAC is enabled.
+	[2706b0fc1451]
+
+	* MANIFEST, configure, configure.ac, include/sudo_compat.h,
+	lib/util/Makefile.in, lib/util/pread.c, lib/util/pwrite.c,
+	scripts/mkdep.pl:
+	Add emulation of pread(3) and pwrite(3) for systems without them.
+	This makes it possible to remove some ugly #ifdefs and only affects
+	very old systems.
+	[1c2a31bda598]
+
+	* lib/iolog/iolog_fileio.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/timestamp.c:
+	Remove #ifdefs around code using pread(3) and pwrite(3).
+	[3830fdf650df]
+
+	* plugins/sudoers/Makefile.in:
+	Regen now that ldap.c and sssd.c no longer need gram.h
+	[5cc4e107f301]
+
+2020-12-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/fatal.c:
+	Fix deregistration of a callback that is not at the head of the
+	list. The SLIST_FOREACH_PREVPTR macro doesn't work the way I thought
+	it did. Just store our own prev pointer and use that instead.
+	[04c290fe1fcb]
+
+2020-12-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/net_ifs.c:
+	Fix the buffer size parameter when serializing the interface list.
+	Problem reported by Matthias Gerstner of SUSE.
+	[b0cae3ac8e46]
+
+2020-12-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_4p2 for changeset 8aed5221ede9
+	[a74faf363dbb] <1.9>
+
+	* merge sudo 1.9.4p2 from tip
+	[8aed5221ede9] [SUDO_1_9_4p2] <1.9>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.4p2
+	[8bb8ec358990]
+
+	* plugins/sudoers/sudoers.c:
+	The runas user must be set before applying runas-based Defaults.
+	This effectively backs out changeset f738f5ac5350, which made it
+	possible to log the command when an invalid user was specified. The
+	policy plugin API doesn't supply the command until the check
+	function, at which point we've already denied the command due to the
+	invalid user. Bug #951.
+	[8a415f555cf9]
+
+2020-12-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/uncrustify-small.cfg, etc/uncrustify.cfg:
+	Don't enable mod_remove_empty_return We like to use an empty return
+	for stub functions.
+	[018ef129dc24]
+
+2020-12-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_4p1 for changeset 8f65fd9f0f57
+	[e27e424f9f56] <1.9>
+
+	* merge sudo 1.9.4p1 from tip
+	[8f65fd9f0f57] [SUDO_1_9_4p1] <1.9>
+
+	* plugins/sudoers/policy.c:
+	The lower bounds for the "closefrom" option is 3, not 4. This is a
+	regression introduced in sudo 1.8.9 with the strtonum() conversion.
+	Bug #950.
+	[fb06603b9a12]
+
+2020-12-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.4p1
+	[59c37ec1a128]
+
+2020-12-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Direct execution of a command is incompatible with using a log
+	server.
+	[91afbbde217a]
+
+	* plugins/sudoers/audit.c:
+	Set sudoers_audit.close to NULL if not using a log server.
+	[231abb92a3b2]
+
+2020-12-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.guess, config.h.in, config.sub, configure, configure.ac:
+	Regenerate configure script with autoconf 2.71. Also fix some
+	warnings from the new version.
+	[cd1c7615e861]
+
+2020-12-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, src/sudo.c:
+	Define _DARWIN_UNLIMITED_GETGROUPS on macOS to suport > 16 groups.
+	On macOS 10.6 and above, getgroups(2) can return more than
+	NGROUPS_MAX if _DARWIN_UNLIMITED_GETGROUPS or _DARWIN_C_SOURCE is
+	defined. Bug #946
+	[2e7d3c3cf18b]
+
+2020-12-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, examples/sudo.conf.in:
+	Comment out the default plugin lines in the example sudo.conf. Fixes
+	a problem when there are multiple versions of sudo installed and not
+	all suport the audit plugin, such as on macOS. GitHub issue #75
+	[aaed5d7a3471]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Store the user-provided runas user and group name in struct
+	sudo_user. This makes it available for event logging in case the
+	name doesn't resolve.
+	[98d70ba8a2a6]
+
+	* plugins/sudoers/logging.c:
+	Log submit group to event log.
+	[3e7ace99f7f8]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Store iolog_path in struct sudo_user for use in the event log.
+	[35bc39ec8ad5]
+
+2020-12-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c, plugins/sudoers/sudoers.c:
+	Defer lookup of runas user until sudoers_main() for better logging.
+	The log message now includes user info and the command attempted.
+	[f738f5ac5350]
+
+	* lib/eventlog/eventlog.c:
+	Don't assume that just because command is non-NULL, argv is non-
+	NULL.
+	[4fac4ae88e4e]
+
+	* plugins/sudoers/logging.c:
+	Fix a crash introduced in 1.9.4 when running command as an unknown
+	user. Bug #948
+	[8b24c140ec7c]
+
+2020-12-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c:
+	When shutting down the server, close non-I/O log connections
+	immediately. Avoids a timeout during server shutdown while the
+	server waits for active connections to close.
+	[26bfda2c8f67]
+
+	* src/sudo.c:
+	Audit errors from policy_init_session(), audit_accept(), and
+	audit_reject().
+	[638e583754ac]
+
+	* src/sudo.c:
+	Do not run the command if the audit accept function fails. Also add
+	warnings if the audit reject or error functions fail.
+	[ca94ef438961]
+
+	* plugins/sudoers/log_client.c:
+	Reduce the number of error messages when we can't connect to the
+	audit server. Add the error string to "unable to connect to log
+	server" instead of using an extra error message for the connect(2)
+	failure.
+	[25ac7ac5bfdf]
+
+	* plugins/sudoers/log_client.c:
+	Use correct error message when the TLS connection is dropped. Was:
+	"recv: Unknown error 0", now: "lost connection to log server".
+	[5c3f319b1f75]
+
+2020-12-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.h:
+	Change alias_add() to return bool and set errno on failure. This
+	fixes a localization problem where the error message could have been
+	reported in the wrong locale.
+	[1859fe3da40c]
+
+2020-11-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c:
+	Fix build when configured using --without-sendmail Bug #947
+	[41db1aad85bb]
+
+2020-11-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_4 for changeset 74705fb3b956
+	[45a5e742496e] <1.9>
+
+	* merge sudo 1.9.4 from tip
+	[74705fb3b956] [SUDO_1_9_4] <1.9>
+
+	* plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/hr.mo,
+	po/hr.po:
+	Updated translations from translationproject.org
+	[96a5cfe3c66b]
+
+2020-11-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	sudo_logsrvd.conf pid_file change.
+	[fdc0276c7e0e]
+
+	* logsrvd/logsrvd.c:
+	Don't try to unlink a NULL pointer.
+	[95babad9636a]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c:
+	If pid_file is set to an empty value, disable the use of a pid file.
+	[d4462105ab4b]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	logsrvd/logsrvd.c:
+	Don't overwrite sudo_logsrvd.pid if it is a symbolic link.
+	[d79f97a0a533]
+
+	* INSTALL, configure, configure.ac, etc/codespell.exclude,
+	plugins/sudoers/env.c:
+	Fix typo detected by codespell 2.0.0 Also avoid some new false
+	positives
+	[d973f44e2396]
+
+2020-11-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/uncrustify-small.cfg, etc/uncrustify.cfg,
+	plugins/python/regress/testhelpers.h, plugins/sudoers/env.c,
+	plugins/sudoers/sudo_ldap_conf.h:
+	Set pp_ignore_define_body=false in uncrustify config. Need to work
+	around a bug that produces closed brace errors, see
+	https://github.com/uncrustify/uncrustify/issues/2569
+	[5e4692fca707]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/hr.mo,
+	po/hr.po, po/it.mo, po/it.po:
+	Updated translations from translationproject.org
+	[156162e6e07e]
+
+2020-11-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sudo_conf.c:
+	Fix calling sudo_conf_read() multiple times with different
+	conf_types. The change to reinitialize the configuration data when
+	sudo_conf_read() is called again didn't take into account that sudo
+	calls sudo_conf_read() twice--once for the debug info and once for
+	everything else.
+	[b6869b7da3c2]
+
+2020-11-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
+	Don't free the private copy of the environment until the close
+	function. We may need to use it when logging from the audit reject
+	function.
+	[5118eb5797fb]
+
+	* plugins/sudoers/log_client.c:
+	It is possible for evlog->argv or evlog->envp to be NULL.
+	[798ff96301bf]
+
+	* src/exec_pty.c, src/sudo.c, src/sudo.h:
+	Pass command_info[] to audit plugin on I/O log plugin reject or
+	error. The audit plugin should cope with a NULL command_info but
+	there's no reason not to pass the info when we have it.
+	[e361897d0192]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	plugins/sudoers/audit.c:
+	For the audit plugin, command_info may be NULL. Fixes a NULL
+	dereference in sudoers_audit when an I/O logging plugin rejects
+	input/output or returns an error.
+	[9abee774e7e1]
+
+	* plugins/sudoers/defaults.c:
+	Add missing initialization of def_log_format to sudo.
+	[8c824f6dcfdd]
+
+2020-11-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac:
+	Newer LibreSSL has SSL_CTX_set_ciphersuites but it is not enabled.
+	Add a check for the function declaration in openssl/ssl.h.
+	[d6d0665572ec]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Event log data is sent to sudo_logsrvd even when not I/O logging.
+	[d720f4ad3d40]
+
+2020-11-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot:
+	Regenerate sudoers.pot for 1.9.4
+	[127283726e97]
+
+	* NEWS, configure, configure.ac:
+	Update for sudo 1.9.4.
+	[2cb747911aef]
+
+	* plugins/sudoers/audit.c:
+	Update struct eventlog based on command_info[] from front-end. The
+	I/O log path is not known until the I/O log plugins have run and
+	other plugins may alter the execution environment.
+	[3ad14a88052e]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/logging.h,
+	plugins/sudoers/regress/testsudoers/test13.out.ok,
+	plugins/sudoers/toke.h:
+	Add sudoerserrorf(), a printf-style yyerror() function. Use this to
+	display a better error message when using a reserved work in an
+	alias definition.
+	[1bb3915f61b6]
+
+2020-11-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Build universal binaries on macOS 11.0 and higher. The resulting
+	package should work on Macs based on Apple Silicon.
+	[91cdeda79e66]
+
+2020-11-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/editor.c:
+	Support EDITOR environment variable that includes quotes. Quote
+	support is limited to the beginning of a word. Also handles
+	characters escaped with a backslash.
+	[ebb7f3c6240c]
+
+2020-11-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/Makefile.in, plugins/python/pyhelpers.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/regress/iohelpers.h, plugins/python/regress/testdata/
+	check_example_debugging_c_calls@diag.log, plugins/python/regress/tes
+	tdata/check_example_debugging_c_calls@info.log, plugins/python/regre
+	ss/testdata/check_example_debugging_plugin@info.log, plugins/python/
+	regress/testdata/check_example_debugging_py_calls@diag.log, plugins/
+	python/regress/testdata/check_example_debugging_py_calls@info.log, p
+	lugins/python/regress/testdata/check_example_group_plugin_is_able_to
+	_debug.log, plugins/python/regress/testdata/check_example_io_plugin_
+	command_log.stored, plugins/python/regress/testdata/check_example_io
+	_plugin_command_log_multiple1.stored, plugins/python/regress/testdat
+	a/check_example_io_plugin_command_log_multiple2.stored, plugins/pyth
+	on/regress/testdata/check_example_io_plugin_failed_to_start_command.
+	stored, plugins/python/regress/testdata/check_example_io_plugin_fail
+	s_with_python_backtrace.stderr, plugins/python/regress/testdata/chec
+	k_example_policy_plugin_validate_invalidate.log, plugins/python/regr
+	ess/testdata/check_loading_fails_not_owned_by_root.stderr, plugins/p
+	ython/regress/testdata/check_loading_fails_wrong_classname.stderr, p
+	lugins/python/regress/testdata/check_loading_fails_wrong_path.stderr
+	, plugins/python/regress/testdata/check_multiple_approval_plugin_and
+	_arguments.stdout, plugins/python/regress/testdata/check_python_plug
+	ins_do_not_affect_each_other.stdout,
+	plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h:
+	Back out regex use in python tests, filter the output instead. This
+	makes it possible to regenerate the test output again. Also adds an
+	update_test_data target to the Makefile.
+	[3837f51a8072]
+
+	* plugins/sudoers/ldap.c:
+	Ignore sudoNotBefore and sudoNotAfter unless ldap.conf contains
+	SUDOERS_TIMED This is consistent with the pre-1.8.24 behavior. Bug
+	#945
+	[d1e1bb5a6cc1]
+
+	* src/sudo.c:
+	Stay setuid until just before executing the command. Fixes a problem
+	with pam_xauth which checks effective and real uids to get the real
+	identity of the user.
+	[2c6fef0107c8]
+
+2020-11-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sssd.c:
+	Introduce new_member_all() for code that doesn't include gram.h. The
+	ldap and sssd back-ends no longer require gram.h which fixes a
+	compilation issue with IBM LDAP.
+	[1729532cda27]
+
+	* lib/util/sudo_conf.c, lib/util/sudo_debug.c, logsrvd/logsrvd.c:
+	On SIGHUP, deregister the old debug instance before registering a
+	new one. Otherwise, if debugging is enabled we will get an extra log
+	instance each time sudo_logsrvd reeives SIGHUP which results in
+	duplicate lines in the debug log.
+	[538633994d8a]
+
+2020-11-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/log_client.c, plugins/sudoers/log_client.h:
+	Refactor code to format the client message after the hello.
+	[12d29d129166]
+
+	* doc/sudo_logsrv.proto.man.in, doc/sudo_logsrv.proto.mdoc.in,
+	include/log_server.pb-c.h, lib/eventlog/eventlog.c,
+	lib/logsrv/log_server.pb-c.c, lib/logsrv/log_server.proto,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c,
+	plugins/sudoers/log_client.c:
+	Add info_msgs to AlertMessage and populate it. This lets us log
+	eventlog info along with the alert if it is available.
+	[493a047a4463]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	Use sudoers_to_eventlog() and init_log_details() in
+	sudoers_audit_accept(). log_deserialize_info() can be private to
+	iolog.c again.
+	[0b4e03904f3d]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/log_client.c,
+	plugins/sudoers/log_client.h, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	Log reject and alert messages to the log server if one is defined.
+	[087cf87d10af]
+
+	* plugins/sudoers/logging.c:
+	Treat an authentication failure as a reject, not an alert. This
+	matters when logging via sudo_logsrvd. It also lets us remove a
+	special case in vlog_warning().
+	[ae489d3f20a8]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h, plugins/sudoers/log_client.c,
+	plugins/sudoers/sudoers.c:
+	Rename iolog_client -> log_client. The logsrvd client code is now
+	used for more than just I/O logging.
+	[ea47ce43bbee]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_plugin.h,
+	plugins/sudoers/log_client.c, plugins/sudoers/log_client.h:
+	Rename iolog_plugin.h to log_client.h. It is no longer I/O log
+	specific and is used by sudoers_audit too.
+	[cde784a59490]
+
+	* configure, configure.ac:
+	Remove hack to define YYTOKENTYPE, it breaks newer bison.
+	[8b919ef33db7]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h:
+	Regenerate with bison 3.7.3
+	[9fb81b933c43]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c:
+	Use struct eventlog *evlog, not struct eventlog *details.
+	[a9b5f3c2902f]
+
+2020-11-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c:
+	For logsrvd AlertMessages, evlog will be NULL.
+	[d048f7b429d5]
+
+	* lib/eventlog/eventlog.c:
+	Append errstr to reason for alert and reject events if specified.
+	Previously, we logged the error string separately but this is not
+	consistent with how it is logged in other formats.
+	[68c76e530248]
+
+	* plugins/sudoers/logging.c:
+	Fix cut & pasto in debug subsystem.
+	[c39dd60b6d2d]
+
+2020-11-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Refactor code to format InfoMesage array into fmt_info_messages().
+	Add free_info_messages() to free the array.
+	[e6223d325c77]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	Log accept messages in sudoers_audit if not I/O logging.
+	[cdb5c443c97d]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	Refactor sudoers_io_open_remote() into log_server_open(). Also
+	rename client_close() to log_server_close(). This keeps more of the
+	client code details out of iolog.c and will be used when logging
+	accept messages from the audit plugin.
+	[e3f6ba6768b8]
+
+	* plugins/sudoers/iolog.c:
+	Move argv and envp setting into iolog_deserialize_info().
+	[613b97f1d7bc]
+
+	* logsrvd/logsrvd.c:
+	Avoid early return in handle_accept() if expect_iobufs not set.
+	[918adc8234f0]
+
+2020-11-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, plugins/python/regress/testdata/check_multipl
+	e_approval_plugin_and_arguments.stdout, src/exec.c,
+	src/load_plugins.c:
+	Add event_alloc to the audit plugin API. The sudoers audit plugin
+	will use this to communicate with sudo_logsrvd.
+	[c2fc2911476b]
+
+	* logsrvd/sendlog.c, plugins/sudoers/iolog_client.c:
+	Set server_name before initiating TLS connection so verify function
+	works. Fixes a crash in the SSL_VERIFY_PEER callback. Also call
+	inet_ntop(3) with addr pointer, not sockaddr pointer so we get the
+	correct IP address.
+	[7a7dcebbe889]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h,
+	plugins/sudoers/regress/sudoers/test18.toke.ok,
+	plugins/sudoers/regress/sudoers/test2.ldif.ok,
+	plugins/sudoers/regress/sudoers/test3.ldif.ok,
+	plugins/sudoers/regress/sudoers/test6.ldif.ok,
+	plugins/sudoers/regress/visudo/test2.err.ok,
+	plugins/sudoers/regress/visudo/test3.err.ok,
+	plugins/sudoers/visudo.c:
+	Store column number for aliases, defaults and userspecs too. This is
+	used to provided the column number along with the line number in
+	error messages. For aliases we store the column of the alias name,
+	not the value since that is what visudo generally needs.
+	[1c9d86b88517]
+
+2020-11-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/regress/testsudoers/test11.out.ok,
+	plugins/sudoers/regress/testsudoers/test12.out.ok,
+	plugins/sudoers/regress/testsudoers/test13.out.ok:
+	Display column number in parse error messages too. Bug #841
+	[0aea28dec8f2]
+
+	* plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h:
+	Move tls initialized flag into client_closure. We may call
+	tls_init() from multiple places in the future so a static
+	initialized flag will cause problems.
+	[00b2b02c24c5]
+
+	* plugins/sudoers/cvtsudoers_json.c:
+	Fix -Wshadow warnings caused by json enum member.
+	[ea336980bb6a]
+
+2020-10-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* ABOUT-NLS, INSTALL, NEWS, configure.ac, doc/UPGRADE,
+	doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/sudoers_timestamp.man.in, doc/sudoers_timestamp.mdoc.in,
+	doc/visudo.man.in, doc/visudo.mdoc.in, examples/sudo.conf.in,
+	include/compat/getaddrinfo.h, install-sh, lib/util/getaddrinfo.c,
+	lib/util/getentropy.c, lib/util/regress/sudo_conf/test1.in,
+	lib/util/regress/sudo_parseln/test1.in,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/strtoid.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c, logsrvd/sendlog.c,
+	m4/sudo.m4, plugins/group_file/group_file.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.in,
+	plugins/sudoers/editor.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/gram.y,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/stubs.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/load_plugins.c, src/sudo.c,
+	src/sudo_noexec.c, src/tgetpass.c:
+	Apply Google inclusive language guidelines. Also replace backwards
+	with backward.
+	[678fbce6054f]
+
+2020-10-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in:
+	Refernce IBM LDAP libs, not Tivoli since that is how it is packaged.
+	We still use Tivoli when talking about the server itself but refer
+	to it as the "IBM Tivoli Directory Server".
+	[9f97a7e6b67a]
+
+	* doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in:
+	Add a newline before "This option is ..."
+	[853f819f0241]
+
+	* doc/sudoers.man.in:
+	regen
+	[8b29097f2cd1]
+
+2020-10-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/regress/logwrap/check_wrap.c,
+	lib/eventlog/regress/logwrap/check_wrap.in,
+	lib/eventlog/regress/logwrap/check_wrap.out.ok:
+	Test eventlog_writeln() when word wrap is disabled.
+	[73acb7fbef59]
+
+	* configure, configure.ac:
+	Bison generates an extra enum containing the parser tokens. This
+	conflicts with the IBM ldap.h at least. Prevent it from being
+	exposed by defining YYTOKENTYPE.
+	[f3445ad76687]
+
+	* configure, configure.ac:
+	IBM LDAP packages use a lib64 directory for 64-bit libraries. We
+	need to add this to LDFLAGS so the linker is able to find the
+	correct libs when building 64-bit binaries.
+	[701b83f6cd13]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/ldap.c:
+	Use ssl_err2string() in message on ldap_ssl_client_init() failure.
+	Displaying SSL reason code directly is not user-friendly.
+	[aaf272403f3e]
+
+2020-10-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c:
+	For JSON logs, write the most important log elements first. This is
+	important for syslog where the record could be truncated.
+	[58fc957c41bb]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/logging.c, plugins/sudoers/sudoers.c:
+	Add log_format sudoers setting to select sudo or json format logs.
+	Defaults to sudo-format logs.
+	[2936d2750af0]
+
+	* include/sudo_json.h, lib/eventlog/eventlog.c, lib/util/json.c:
+	Support "minimal" JSON which skips all non-essention whitespace.
+	This replaces the old "compact" mode which is only used for syslog.
+	[be07bca67019]
+
+	* plugins/sudoers/logging.c:
+	Don't warn about log failure more than once.
+	[b4dc59a58d1d]
+
+2020-10-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/eventlog/eventlog.c:
+	Check for fdopen(3) failure in send_mail().
+	[e08b17bf26ce]
+
+	* MANIFEST, include/sudo_eventlog.h, lib/eventlog/Makefile.in,
+	lib/eventlog/eventlog.c, lib/eventlog/logwrap.c,
+	lib/eventlog/regress/logwrap/check_wrap.c,
+	lib/eventlog/regress/logwrap/check_wrap.in,
+	lib/eventlog/regress/logwrap/check_wrap.out.ok,
+	plugins/sudoers/Makefile.in, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/logwrap.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/logging/check_wrap.in,
+	plugins/sudoers/regress/logging/check_wrap.out.ok,
+	plugins/sudoers/sudoers.c:
+	Add support for file log line wrapping in libeventlog.
+	[935c30cf7633]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	logsrvd/logsrvd_conf.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/stubs.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c:
+	Use real setters for the eventlog config. This makes it possible to
+	have a base config that the callers can modify instead of replacing
+	the config wholesale.
+	[2ca1e7d376c2]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/policy.c, plugins/sudoers/stubs.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c:
+	Use libeventlog in sudoers instead of doing our own logging.
+	[d8306755201a]
+
+	* lib/eventlog/eventlog.c, plugins/sudoers/logging.c:
+	Log the short version of the tty in sudoers-format logs. This is
+	consistent with historical practice.
+	[69440e4659a8]
+
+	* lib/eventlog/eventlog.c:
+	Add default values in eventlog_setconf().
+	[582d359a8ec0]
+
+	* include/sudo_eventlog.h, lib/eventlog/Makefile.in,
+	lib/eventlog/eventlog.c, logsrvd/logsrvd.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/logging.h:
+	Add support for mailing eventlog entries and for logging raw
+	messages. These will be used by the sudoers plugin.
+	[acab8209ddd0]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c,
+	lib/iolog/iolog_fileio.c:
+	If no JSON callback is provided, store the contents of struct
+	eventlog. This moves the JSON formatting of struct eventlog out of
+	libsudo_iolog and into libsudo_eventlog where it belongs.
+	[260a7ec65485]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c, logsrvd/logsrvd.c:
+	struct eventlog contains submit_time, no need to pass it in
+	directly.
+	[a3ac404e6a59]
+
+	* include/sudo_eventlog.h, lib/eventlog/eventlog.c, logsrvd/logsrvd.c:
+	Add an errstr argument to eventlog_alert().
+	[e2afd2f1c092]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h:
+	Make a copy of the strings stored in iolog_details and struct
+	eventlog. Previously, we just made the strings const and relied on
+	the front-end not changing them. Now the sudoers I/O log plugin
+	behavior is consistent with the policy plugin.
+	[406632298bd5]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h:
+	Use struct eventlog in iolog_details.
+	[c22e05f420fe]
+
+	* include/sudo_eventlog.h, include/sudo_iolog.h,
+	lib/eventlog/eventlog.c, lib/iolog/Makefile.in,
+	lib/iolog/iolog_fileio.c, lib/iolog/iolog_json.c,
+	lib/iolog/iolog_util.c, logsrvd/Makefile.in, logsrvd/iolog_writer.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/sendlog.c,
+	logsrvd/sendlog.h, plugins/sudoers/Makefile.in,
+	plugins/sudoers/iolog.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoreplay.c:
+	Use struct eventlog in place of struct iolog_info.
+	[9fef7a5f077b]
+
+	* logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	No longer need eventlog-related getters in logsrvd.c
+	[e3ab80a9a892]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c:
+	Use libeventlog in sudo_logsrvd.
+	[3dd22be50c30]
+
+	* MANIFEST, Makefile.in, configure, configure.ac,
+	include/sudo_eventlog.h, lib/eventlog/Makefile.in,
+	lib/eventlog/eventlog.c, logsrvd/logsrvd.h:
+	Refactor eventlog code into a library
+	[2e02c25be009]
+
+2020-10-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/Makefile.in, lib/logsrv/Makefile.in, lib/util/Makefile.in,
+	logsrvd/Makefile.in, plugins/python/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	regen Makefiles
+	[d9064a0c53ae]
+
+	* scripts/mkpkg:
+	Build 64-bit binaries on HP-UX ia64
+	[3f8b599e7d7f]
+
+2020-10-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in:
+	Explicitly set umask when running tests. Some tests create files
+	that must not be world-writable.
+	[9186ea1d2696]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	sudoers_policy_store() -> sudoers_policy_store_result()
+	[3dad5322916b]
+
+2020-10-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Rename sudoers_policy_exec_setup() -> sudoers_policy_store(). It is
+	called even when there is no command to execute. Also pass in status
+	of whether or not the command was accepted.
+	[a0ded23e81c4]
+
+2020-10-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/cvtsudoers/test1.sh,
+	plugins/sudoers/regress/cvtsudoers/test10.sh,
+	plugins/sudoers/regress/cvtsudoers/test11.sh,
+	plugins/sudoers/regress/cvtsudoers/test12.sh,
+	plugins/sudoers/regress/cvtsudoers/test13.sh,
+	plugins/sudoers/regress/cvtsudoers/test14.sh,
+	plugins/sudoers/regress/cvtsudoers/test15.sh,
+	plugins/sudoers/regress/cvtsudoers/test16.sh,
+	plugins/sudoers/regress/cvtsudoers/test17.sh,
+	plugins/sudoers/regress/cvtsudoers/test18.sh,
+	plugins/sudoers/regress/cvtsudoers/test19.sh,
+	plugins/sudoers/regress/cvtsudoers/test2.sh,
+	plugins/sudoers/regress/cvtsudoers/test20.sh,
+	plugins/sudoers/regress/cvtsudoers/test21.sh,
+	plugins/sudoers/regress/cvtsudoers/test22.sh,
+	plugins/sudoers/regress/cvtsudoers/test23.sh,
+	plugins/sudoers/regress/cvtsudoers/test24.sh,
+	plugins/sudoers/regress/cvtsudoers/test25.sh,
+	plugins/sudoers/regress/cvtsudoers/test26.sh,
+	plugins/sudoers/regress/cvtsudoers/test27.sh,
+	plugins/sudoers/regress/cvtsudoers/test28.sh,
+	plugins/sudoers/regress/cvtsudoers/test29.sh,
+	plugins/sudoers/regress/cvtsudoers/test3.sh,
+	plugins/sudoers/regress/cvtsudoers/test30.sh,
+	plugins/sudoers/regress/cvtsudoers/test31.sh,
+	plugins/sudoers/regress/cvtsudoers/test32.sh,
+	plugins/sudoers/regress/cvtsudoers/test33.sh,
+	plugins/sudoers/regress/cvtsudoers/test4.sh,
+	plugins/sudoers/regress/cvtsudoers/test5.sh,
+	plugins/sudoers/regress/cvtsudoers/test6.sh,
+	plugins/sudoers/regress/cvtsudoers/test7.sh,
+	plugins/sudoers/regress/cvtsudoers/test8.sh,
+	plugins/sudoers/regress/cvtsudoers/test9.sh,
+	plugins/sudoers/regress/testsudoers/test1.sh,
+	plugins/sudoers/regress/testsudoers/test10.sh,
+	plugins/sudoers/regress/testsudoers/test11.sh,
+	plugins/sudoers/regress/testsudoers/test12.sh,
+	plugins/sudoers/regress/testsudoers/test13.sh,
+	plugins/sudoers/regress/testsudoers/test14.sh,
+	plugins/sudoers/regress/testsudoers/test15.sh,
+	plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.sh,
+	plugins/sudoers/regress/testsudoers/test4.sh,
+	plugins/sudoers/regress/testsudoers/test5.sh,
+	plugins/sudoers/regress/testsudoers/test6.sh,
+	plugins/sudoers/regress/testsudoers/test7.sh,
+	plugins/sudoers/regress/testsudoers/test8.sh,
+	plugins/sudoers/regress/testsudoers/test9.sh,
+	plugins/sudoers/regress/visudo/test1.sh,
+	plugins/sudoers/regress/visudo/test10.sh,
+	plugins/sudoers/regress/visudo/test2.sh,
+	plugins/sudoers/regress/visudo/test3.sh,
+	plugins/sudoers/regress/visudo/test4.sh,
+	plugins/sudoers/regress/visudo/test5.sh,
+	plugins/sudoers/regress/visudo/test6.sh,
+	plugins/sudoers/regress/visudo/test7.sh,
+	plugins/sudoers/regress/visudo/test8.sh,
+	plugins/sudoers/regress/visudo/test9.sh:
+	Pass path to testsudoers, visudo or cvtsudoers in the environment.
+	Falls back on the unqualified command if the environment variable is
+	not set.
+	[a7b8c413b66d]
+
+2020-10-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sssd.c:
+	Init cmnds to NULL in rule_to_priv() so we don't free a bogus
+	pointer. In the sssd backend, the rule_to_priv() cleanup code
+	assumes cmnds can be passed to fn_free_values(), which was not the
+	case if we receive an error getting values for "sudoCommand". This
+	is a regression introduced in sudo 1.9.1. Fix from Ron Bowes. GitHub
+	issue #67.
+	[a3fe4615f039]
+
+2020-10-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match_command.c, plugins/sudoers/match_digest.c,
+	plugins/sudoers/parse.h:
+	Pass runchroot to match_digest() too. We use the open fd for the
+	actual I/O but having runchroot makes it possible to report the
+	correct file name in error messages.
+	[2e1d142e2fe5]
+
+2020-10-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	GitHub issue #61 was fixed in sudo 1.9.3.
+	[55e54b3111f0]
+
+2020-09-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/def_data.h, plugins/sudoers/mkdefaults:
+	Fix indentation of enum def_tuple.
+	[237db08cc1a3]
+
+2020-09-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Remove special case EOF handling; lines now always end in a newline.
+	Previously we needed to emulate some of the state transitions that
+	happen at end-of-line at end-of-file as well. Those are no longer
+	needed now that we are guaranteed to always have a newline at the
+	end.
+	[4c0c21b081f7]
+
+2020-09-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Increment sudolinebuf.size after realloc().
+	[b871905c3442]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y,
+	plugins/sudoers/regress/sudoers/test13.toke.ok,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add a newline at end of line if one is missing. This is simpler than
+	having to support entries that end at EOF too.
+	[cb335acb1064]
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test14.out.ok,
+	plugins/sudoers/regress/testsudoers/test14.sh,
+	plugins/sudoers/regress/testsudoers/test15.out.ok,
+	plugins/sudoers/regress/testsudoers/test15.sh:
+	Add tests for entries without a newline.
+	[98a50d8301a8]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix handling of a command spec without a newline at the end. For
+	include files, we may need to inject a newline token now that the
+	grammar requires lines to end with a newline or EOF. There is no END
+	(EOF) token processed after popping off an include file since
+	everything is just treated as one big file.
+	[3e6c62ea7237]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Mark sudoerserror() messages for translation.
+	[d6a173cea48b]
+
+	* plugins/sudoers/regress/sudoers/test8.toke.ok,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix line number accounting when a string contains a newline. Strings
+	are not allowed to span multiple lines without a continuation
+	character. Also provide a better error message if we are in the
+	middle of a string and hit EOF.
+	[cf34b0a3beba]
+
+2020-09-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/sudoers.h, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Use sudoerschar (yychar) instead of last_token. The parser already
+	provides a way to examing the last token processed, we don't need to
+	add our own.
+	[ba35fe36bd56]
+
+2020-09-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/closefrom.c, lib/util/getentropy.c, lib/util/pipe2.c,
+	lib/util/term.c, lib/util/ttyname_dev.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/env.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/gmtoff.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.h, plugins/sudoers/policy.c,
+	plugins/sudoers/starttime.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	plugins/system_group/system_group.c, src/load_plugins.c, src/sudo.c,
+	src/sudo_plugin_int.h, src/tgetpass.c, src/ttyname.c:
+	Fix -Wshadow warnings.
+	[5480e97a1160]
+
+	* configure, configure.ac:
+	Add -Wshadow to warning flags if the compiler supports it.
+	[6f29b5ebc2b8]
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test13.out.ok,
+	plugins/sudoers/regress/testsudoers/test13.sh:
+	Add test for syntax error when defining an alias using a reserved
+	word.
+	[4c90b3952ed1]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix pasto, TIMEOUT not CMND_TIMEOUT.
+	[842ad3a578f2]
+
+	* NEWS, doc/UPGRADE, doc/sudoers.man.in, doc/sudoers.man.in.sed,
+	doc/sudoers.mdoc.in:
+	Document reserved words that cannot be used as alias names. Bug #941
+	[4b37a2174cd2]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/sudoers_version.h:
+	Detect when a reserved word is used when declaring an alias. Now
+	instead of "syntax error, unexpected CHROOT, expecting ALIAS" the
+	message is "syntax error, reserved word used as an alias name" Bug
+	#941
+	[dfc55de5526c]
+
+2020-09-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_3p1 for changeset 02c47b39359e
+	[23bf4d95356d] <1.9>
+
+	* merge sudo 1.9.3p1 from tip
+	[02c47b39359e] [SUDO_1_9_3p1] <1.9>
+
+	* plugins/sudoers/sudoers.c:
+	Fix potential NULL deref in debug code.
+	[c6b8910ac7dc]
+
+	* plugins/sudoers/getspwuid.c:
+	Close the passwd db before calling getpwnam_shadow(3). Otherwise, we
+	will get the non-shadow passwd entry ("*") since we called
+	setpassent(3) earlier to keep the passwd db open.
+	[71ee5e16e4c5]
+
+	* configure, configure.ac:
+	Fix configure test for crypt(3) when it is present in libc. Fixes a
+	regression introduced in sudo 1.9.3.
+	[0d77733de667]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sudoers.c:
+	Add SLOG_AUDIT flag for log_warningx() to also audit the message.
+	This lets us combine audit_failure() and log_warningx() calls with
+	the same message.
+	[23a8a5eab2ff]
+
+	* plugins/sudoers/sudoers.c:
+	Log when user-specified command line options are rejected by
+	sudoers. We already audit those but in some cases they were not
+	logged as well.
+	[30d991993763]
+
+	* NEWS, configure, configure.ac:
+	Update for sudo 1.9.3p1
+	[0cbbb7608c3f]
+
+2020-09-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_3 for changeset bdd40c087bec
+	[eca7e986d20f] <1.9>
+
+	* merge sudo 1.9.3 from tip
+	[bdd40c087bec] [SUDO_1_9_3] <1.9>
+
+2020-09-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Move warning about plaintext password to the end of configure. It is
+	unlikely to be noticed at the beginning of the output.
+	[b3b5abcedc73]
+
+2020-09-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/eo.mo,
+	po/eo.po, po/fi.mo, po/fi.po, po/fr.mo, po/fr.po:
+	Updated translations from translationproject.org
+	[54b5484b2756]
+
+2020-09-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/auth/passwd.c:
+	Use a simple string compare on systems without crypt(3). This is
+	only used on systems without PAM, BSD authentication or AIX
+	authentication. Bug #940.
+	[aed39197f364]
+
+	* src/utmp.c:
+	Fix typo in last commit.
+	[30a77a50f7b2]
+
+2020-09-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_edit.c:
+	Only use faccessat(3) if AT_EACCESS is defined. Apparently Android
+	(bionic) has faccessat() but not AT_EACCESS. Bug #940.
+	[18604919a023]
+
+	* src/utmp.c:
+	Guard use of ttyslot() with HAVE_TTYSLOT, fix guard for
+	utmp_setid(). This should make it easier to compile sudo on Android
+	which doesn't provide a way to write to the utmp file. Bug #940.
+	[69fe5b8426cd]
+
+2020-09-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* po/zh_CN.mo, po/zh_CN.po:
+	Updated translations from translationproject.org
+	[ef72535d71a5]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fi.mo,
+	po/fi.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/it.mo,
+	po/it.po, po/ja.mo, po/ja.po, po/pl.mo, po/pl.po, po/pt.mo,
+	po/pt.po, po/pt_BR.mo, po/pt_BR.po, po/sr.mo, po/sr.po, po/tr.mo,
+	po/tr.po, po/uk.mo, po/uk.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[48fdb293a803]
+
+	* configure, configure.ac, plugins/sudoers/po/sudoers.pot:
+	Back out sudo 1.9.3b1 version change.
+	[70cee88da8b1]
+
+2020-09-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac, plugins/sudoers/defaults.c,
+	plugins/sudoers/po/sudoers.pot:
+	Fix typo in warning for T_CHPATH, list '~' not '*' twice. Bug #938
+	[d516bebe9644]
+
+2020-09-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update .pot files for 1.9.3.
+	[47cedd231dd6]
+
+2020-09-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Add missing check for strdup() failure. Coverity CID 214243
+	[86cf4da0cd81]
+
+	* examples/sudoers:
+	Sync example sudoers with manual page.
+	[1ccf32907f11]
+
+2020-09-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Add simple runchroot and runcwd examples. Also document the
+	limitation of command-based Defaults settings.
+	[6a610884670c]
+
+	* plugins/sudoers/sudoers.c:
+	Add callback for runchroot Defaults and require password -D/-R
+	checks. Using a command-based Default for runchroot will still only
+	work for paths that exist both in and outside the chroot.
+	[a50148e16b89]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_command.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c:
+	Pass a struct to the match functions to track the resolved command.
+	This makes it possible to update user_cmnd and cmnd_status modified
+	by per-rule CHROOT settings.
+	[c71faa1f5ea1]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/editor.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/stubs.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c:
+	Take the chroot into account when search for the command. This could
+	a a user-specific chroot via the -R option, a runchroot Defaults
+	value, or a per-command CHROOT spec in the sudoers rule.
+	[d8765611b48c]
+
+2020-09-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Remove closefrom_fallback() from lib/util/util.exp. It is a static
+	function and should not be exported.
+	[dc09dc563197]
+
+2020-09-06  Evan Anderson  <evan@eaanderson.com>
+
+	* configure, m4/sudo.m4:
+	configure: Fix runstatedir handling for distros that do not support
+	it
+
+	runstatedir was added in yet-to-be released autoconf 2.70. Some
+	distros are shipping this addition in their autoconf packages, but
+	others, such as Fedora, are not. This causes the rundir variable to
+	be set incorrectly if the configure script is regenerated with an
+	unpatched autoconf since the runstatedir variable set is deleted
+	after regeneration. This change works around that problem by
+	checking that runstatedir is non-empty before potentially using it
+	to set the rundir variable
+	[35c1eb25dd9d]
+
+2020-09-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/Makefile.in:
+	We need to link with NET_LIBS for gai_strerror() on some systems.
+	From Tim Rice
+	[b10aeb7ec2ed]
+
+	* ltmain.sh:
+	Fix sco library versioning; fallout from frebsd-elf reorg. From Tim
+	Rice
+	[072a37c2d3cb]
+
+	* configure, configure.ac:
+	SVR4/5 fixes and long password support for OpenServer 6 & 5. From
+	Tim Rice
+	[8622970c77c3]
+
+	* lib/logsrv/protobuf-c.c:
+	Use config.h to handle systems without inline function support.
+	[1ba5301de713]
+
+	* configure, configure.ac:
+	Prefer dlopen() over shl_load() on HP-UX 11.11 and higher.
+	[065316970f79]
+
+	* include/sudo_fatal.h, lib/util/fatal.c:
+	Define sudo_warn_setlocale_t and use sudo_conv_t in sudo_fatal.h.
+	Works around a bug in older versions of the HP ANSI C compiler and
+	results in more readable code.
+	[0e53ec783100]
+
+	* configure, configure.ac:
+	HP-UX cc may not allow __declspec(dllexport) to be used in
+	conjunction with "#pragma HP_DEFINED_EXTERNAL" when redefining
+	standard libc functions.
+	[7190082c3a09]
+
+2020-09-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Fix check for hiding unexported symbols on HP-UX. We need to pass
+	the -b option to the compiler, not just the linker, so it will
+	choose the PIC C runtime.
+	[bc1b9351cbce]
+
+	* src/regress/ttyname/check_ttyname.c:
+	Check that the files are character devices before comparing st_rdev.
+	[d9f8b730d131]
+
+	* src/regress/ttyname/check_ttyname.c:
+	Fix regress when ttyname(3) returns the same device under a
+	different name. On systems that have both new and old pty names we
+	can end up with a name mismatch even though the underlying device is
+	the same.
+	[3760f44d81d4]
+
+	* plugins/sudoers/regress/testsudoers/test3.sh:
+	Use the same pattern of redefining TESTDIR as test10.sh. Adapted
+	from a diff from Tim Rice.
+	[378590625bfd]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	Rename sa_len -> sa_size to avoid a conflict on UnixWare and others.
+	On some systems, sa_len is a #define for 4.4BSD compatibility.
+	[a369d15175dd]
+
+	* plugins/sudoers/pwutil.c:
+	Include strings.h for strcasecmp(3). From Tim Rice
+	[27be3ee47426]
+
+	* lib/util/getentropy.c:
+	Add missing #ifdef HAVE_CLOCK_GETTIME in getentropy_fallback() From
+	Tim Rice
+	[4bdcf1048196]
+
+	* plugins/sudoers/Makefile.in:
+	Regen for check_exptilde.o
+	[b3e2a87b5144]
+
+	* lib/util/Makefile.in, scripts/mkdep.pl:
+	Add missing dependency info for cfmakeraw.lo in lib/util/Makefile.in
+	From Tim Rice
+	[18d953844745]
+
+	* plugins/sudoers/auth/pam.c:
+	Be consistent and use __hpux not __hpux__ like the rest of sudo.
+	[dd5ef59dc980]
+
+	* lib/logsrv/protobuf-c.c:
+	Replace "static inline" with "static __inline" for older compilers.
+	[a09412277d0f]
+
+	* MANIFEST, include/log_server.pb-c.h, lib/logsrv/Makefile.in,
+	lib/logsrv/log_server.pb-c.c, logsrvd/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/sendlog.c,
+	plugins/sudoers/iolog_client.c, scripts/unanon:
+	Post-process protoc-c files to avoid depending on anonymous unions.
+	Based on a patch from Michael Osipov. GitHub issue #60
+	[13ab1ec22477]
+
+	* src/preload.c:
+	Add sudoers_audit to sudo_sudoers_plugin_symbols[] array. Fixes
+	loading of sudoers_audit when configured with --enable-static-
+	sudoers. GitHub issue #61
+	[f0bd4b5cd7b3]
+
+2020-09-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Fix copy and paste error; Coverity CID 214191
+	[49044d66dffc]
+
+	* plugins/sudoers/visudo.c:
+	Fix memory leak on error found by the clang 10.01 analyzer.
+	[12de4dd014eb]
+
+	* src/limits.c:
+	Use correct size for curlim and maxlim.
+	[1fc6aea5ece0]
+
+	* configure, configure.ac, doc/Makefile.in:
+	Only install man pages for logsrvd and python plugin if we build
+	them. GitHub issue #58
+	[e92799dd4886]
+
+	* Makefile.in, configure, configure.ac, doc/Makefile.in:
+	Remove obsolete mansrcdir variable, add _SRC suffix to LOGSRV and
+	LOGSRVD
+	[aa9c0f8cb227]
+
+2020-09-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/eventlog.c, plugins/sudoers/logging.c:
+	If the command was run in a chroot, add it to the log.
+	[0cda78f7ed40]
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test12.out.ok,
+	plugins/sudoers/regress/testsudoers/test12.sh:
+	Add test of multiple syntax errors. Where possible, the portion of
+	the line before the error should be still be interpreted.
+	[3af61a54586f]
+
+	* logsrvd/eventlog.c, logsrvd/iolog_writer.c,
+	plugins/sudoers/logging.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Log the runcwd not submitcwd in the sudo-style log file. The log
+	entry should reflect the working directory the command actually ran
+	in.
+	[a477dee74683]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Fix error recovery in a privilege after a ':' separator.
+	[02c4b5872a38]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Initialize runchroot and runcwd in init_options()
+	[13bebf71955d]
+
+	* MANIFEST:
+	Fix path to check_exptilde.c
+	[7dc831cbd59d]
+
+	* include/log_server.pb-c.h, include/protobuf-c/protobuf-c.h,
+	lib/logsrv/protobuf-c.c:
+	Update to protobuf-c 1.3.3
+	[22a88bccb611]
+
+2020-09-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h:
+	Regenerate the parser with "bison -y" for verbose syntax error
+	messages.
+	[e1530c5b8960]
+
+	* NEWS:
+	Add chroot/chdir changes.
+	[9367855da7d1]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/parse_args.c, src/sudo_usage.h.in:
+	Support "*" for CWD/CHROOT to allow user to specify cwd or chroot.
+	Adds two new command line options, -D (--chdir) and -R (--chroot)
+	that can only be used when sudoers sets runcwd or runchroot to "*".
+	[afeb73867b66]
+
+	* MANIFEST, lib/util/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/exptilde.c,
+	plugins/sudoers/regress/exptilde/check_exptilde.c:
+	Unit test for exptilde
+	[f0d7b0031fea]
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/parse.c,
+	plugins/sudoers/regress/sudoers/test24.in,
+	plugins/sudoers/regress/sudoers/test24.json.ok,
+	plugins/sudoers/regress/sudoers/test24.ldif.ok,
+	plugins/sudoers/regress/sudoers/test24.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test24.out.ok,
+	plugins/sudoers/regress/sudoers/test24.sudo.ok,
+	plugins/sudoers/regress/sudoers/test24.toke.ok:
+	Add support for runchroot and runcwd to "sudo -l" and cvtsudoers.
+	[9f5ecd22d822]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_json.c, lib/iolog/iolog_util.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.h, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h:
+	Read/write runchroot and runcwd entries in the JSON event log.
+	[3edb8305abe9]
+
+	* MANIFEST, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/exptilde.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/sudoers/test1.toke.ok,
+	plugins/sudoers/regress/sudoers/test11.toke.ok,
+	plugins/sudoers/regress/sudoers/test12.toke.ok,
+	plugins/sudoers/regress/sudoers/test13.toke.ok,
+	plugins/sudoers/regress/sudoers/test14.toke.ok,
+	plugins/sudoers/regress/sudoers/test15.toke.ok,
+	plugins/sudoers/regress/sudoers/test16.toke.ok,
+	plugins/sudoers/regress/sudoers/test17.toke.ok,
+	plugins/sudoers/regress/sudoers/test18.toke.ok,
+	plugins/sudoers/regress/sudoers/test19.toke.ok,
+	plugins/sudoers/regress/sudoers/test22.toke.ok,
+	plugins/sudoers/regress/sudoers/test3.toke.ok,
+	plugins/sudoers/regress/sudoers/test4.toke.ok,
+	plugins/sudoers/regress/sudoers/test6.toke.ok,
+	plugins/sudoers/regress/sudoers/test8.toke.ok,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers_version.h,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add CHROOT and CWD sudoers options. Also matching runchroot and
+	runcwd Defaults settings.
+	[2f0aca92c360]
+
+2020-08-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, plugins/python/regress/testdata/check_multipl
+	e_approval_plugin_and_arguments.stdout, src/exec.c, src/limits.c,
+	src/sudo.c, src/sudo.h:
+	Pass resource limits values to the plugin in user_info[] Sudo resets
+	the resource limits early in its execution so the plugin cannot tell
+	what the original limits were itself.
+	[64957c5875f3]
+
+	* doc/Makefile.in, doc/sudo_logsrvd.man.in,
+	doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in,
+	lib/logsrv/Makefile.in, lib/util/cfmakeraw.c, lib/util/fchmodat.c,
+	lib/util/fstatat.c, lib/util/getdelim.c, lib/util/getusershell.c,
+	lib/util/openat.c, lib/util/regress/getdelim/getdelim_test.c,
+	lib/util/regress/strsig/strsig_test.c,
+	lib/util/regress/strtofoo/strtobool_test.c,
+	lib/util/regress/strtofoo/strtoid_test.c,
+	lib/util/regress/strtofoo/strtomode_test.c,
+	lib/util/regress/strtofoo/strtonum_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/roundup.c,
+	lib/util/strtoid.c, lib/util/strtonum.c, lib/util/term.c,
+	lib/util/unlinkat.c, logsrvd/Makefile.in, logsrvd/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrv_util.c,
+	plugins/python/Makefile.in, plugins/python/pyhelpers.c,
+	plugins/python/pyhelpers.h, plugins/python/python_baseplugin.c,
+	plugins/python/python_convmessage.c,
+	plugins/python/python_importblocker.c,
+	plugins/python/python_loghandler.c,
+	plugins/python/python_plugin_approval.c,
+	plugins/python/python_plugin_audit.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/python_plugin_group.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c,
+	plugins/python/sudo_python_debug.c,
+	plugins/python/sudo_python_module.c,
+	plugins/python/sudo_python_module.h, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse_ldif.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/starttime.c,
+	plugins/sudoers/tsdump.c, src/exec_monitor.c, src/exec_nopty.c,
+	src/limits.c, src/ttyname.c:
+	Update copyright year on some files where it was out of date.
+	[2086262cd012]
+
+2020-08-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/visudo.man.in,
+	doc/visudo.mdoc.in:
+	Refer to "syntax error" instead of "parse error". This is the term
+	the parser uses when there is an actual error.
+	[7134b6869432]
+
+	* plugins/sudoers/visudo.c:
+	Remove superfluous "parse error in sudoers near line N" message. The
+	sudoers parser now produces better syntax error messages so we don't
+	need visudo to print its own.
+	[9c32131fb6ac]
+
+	* plugins/sudoers/visudo.c:
+	Don't override errorfile and errorlineno set by check_aliases(). Now
+	that alias parsing stores the file and line number, visudo can use
+	that information to go to the line with an error when re-editing.
+	[896d1f73ca02]
+
+2020-08-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, lib/util/sig2str.c,
+	lib/util/str2sig.c:
+	Use sigabbrev_np(3) to access signal abbreviations if supported.
+	glibc-2.32 has removed sys_sigabbrev[], we can use sigabbrev_np(3)
+	instead.
+	[e30482f26924]
+
+2020-08-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Briefly describe how to restore historical parse error behavior.
+	[1ede927d99b3]
+
+	* NEWS, doc/UPGRADE:
+	Mention eof-of-line terminator and plugin argument changes.
+	[96cd7a3477fa]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, src/load_plugins.c:
+	Fix sudoers_policy plugin options when sudoers_audit is not listed.
+	As of sudo 1.9.1 the sudoers file is opened by the audit plugin, not
+	the policy plugin. As a result, plugin options set for
+	sudoers_policy have no effect. If sudoers_policy has plugin options
+	in sudo.conf and sudoers_audit is not listed, move the options to
+	sudoers_audit so they will have an effect.
+	[839a9a9c0cc3]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/file.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.h:
+	sudoers error recovery can be configured via an "error_recovery"
+	setting. This setting is an argument to the sudoers plugin, similar
+	to how sudoers_file, sudoers_mode, sudoers_uid, etc. are
+	implemented. The default value is true.
+	[86f7059f9e45]
+
+	* plugins/sudoers/regress/testsudoers/test11.sh:
+	Make this test pass with bison's verbose error messages.
+	[a2a8e4ca3f63]
+
+2020-08-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Recover from a syntax error after the ':' in a privilege spec. For
+	compound privilege specs, don't throw away the entire thing if we
+	have a syntax error, only the part after the error is encountered.
+	[d6ef4e6ca624]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/regress/sudoers/test5.toke.ok:
+	Add explicit end-of-line matching in the parser for better error
+	messages. A valid line in sudoers must end in a newline or EOF.
+	Previously, it was possible (though not documented) to have multiple
+	user specs on a single line. Now, each must be on its own line.
+	[9f513e9b10ee]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Add NOMATCH token and use it in the lexer for an unmatched pattern.
+	The ERROR token is now only used for errors detected by the lexer
+	and for which we've already printed an error. This lets us remove
+	the hack in sudoerserror() and just check last_token to determine
+	whether or not to display the error.
+	[0ca11ad5b7f3]
+
+2020-08-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Enable error recovery for syntax erorrs that don't end with a
+	newline. A syntax error on the last line of a sudoers file with no
+	trailing newline is now recoverable.
+	[020f76d7f369]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/regress/testsudoers/test11.out.ok:
+	Add error recovery for unexpected tokens after include/includedir.
+	[1aedd819916d]
+
+	* NEWS:
+	Sudo 1.9.3 changes so far.
+	[bc6c6321a065]
+
+	* configure, configure.ac:
+	sudo 1.9.3
+	[432950d9f778]
+
+2020-08-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/pp:
+	Format the macOS minor version number with two digits. This way we
+	get consistent 4-digit version numbers even for macOS verions like
+	10.3 or 11.0 where the minor number is a single digit. For example.
+	10.3 will be formatted as 1003 and 11.0 will be 1100.
+	[7f48e10be9ae]
+
+2020-08-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/zlib/infback.c, lib/zlib/inflate.c:
+	Add missing ZFALLTHROUGH and use spaces not tabs.
+	[4b1c71cfb8a9]
+
+	* scripts/pp:
+	Fix probe for macOS Big Sur "sw_vers -productName" now returns
+	"macOS", not "Mac OS X"
+	[4caad8ca5b0c]
+
+2020-08-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/pyhelpers.c, plugins/python/python_plugin_common.h,
+	plugins/python/sudo_python_module.c, src/parse_args.c,
+	src/selinux.c:
+	Fix some warnings from pvs-studio
+	[fa83bb619209]
+
+	* Makefile.in, lib/iolog/iolog_fileio.c, lib/iolog/iolog_json.c,
+	lib/util/aix.c, lib/util/sudo_debug.c, logsrvd/logsrvd.c,
+	logsrvd/sendlog.c, plugins/audit_json/audit_json.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/env.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/copy_file.c, src/exec.c, src/exec_common.c, src/exec_monitor.c,
+	src/exec_nopty.c, src/exec_pty.c, src/load_plugins.c,
+	src/parse_args.c, src/selinux.c, src/sesh.c, src/solaris.c,
+	src/sudo.c, src/sudo_edit.c, src/tgetpass.c, src/utmp.c:
+	Fix some warnings from pvs-studio
+	[164a51c446da]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sssd.c:
+	Use angle quotes when including gram.h and def_data.c. Otherwise, we
+	can include the wrong file when doing an out-of-source build when
+	configured using --with-devel.
+	[105e52a86e22]
+
+	* lib/util/fatal.c, lib/util/regress/fnmatch/fnm_test.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c, logsrvd/sendlog.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_command.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
+	src/parse_args.c:
+	Move inclusion of compat headers up with the system headers. Now
+	that sudo_dso_public is defined in config.h we don't need
+	sudo_compat.h before including the compat headers.
+	[da2103ee7ba8]
+
+	* config.h.in, configure.ac, include/compat/fnmatch.h,
+	include/compat/getaddrinfo.h, include/compat/getopt.h,
+	include/compat/glob.h, include/compat/sha2.h, include/sudo_compat.h,
+	include/sudo_conf.h, include/sudo_debug.h, include/sudo_digest.h,
+	include/sudo_dso.h, include/sudo_event.h, include/sudo_fatal.h,
+	include/sudo_json.h, include/sudo_lbuf.h, include/sudo_rand.h,
+	include/sudo_util.h, lib/iolog/regress/host_port/host_port_test.c,
+	lib/iolog/regress/iolog_json/check_iolog_json.c,
+	lib/iolog/regress/iolog_mkpath/check_iolog_mkpath.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/iolog/regress/iolog_util/check_iolog_util.c,
+	lib/util/mksiglist.c, lib/util/mksigname.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/getdelim/getdelim_test.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/mktemp/mktemp_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsig/strsig_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/strtofoo/strtobool_test.c,
+	lib/util/regress/strtofoo/strtoid_test.c,
+	lib/util/regress/strtofoo/strtomode_test.c,
+	lib/util/regress/strtofoo/strtonum_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/term.c,
+	logsrvd/logsrvd.c, logsrvd/sendlog.c,
+	plugins/audit_json/audit_json.c, plugins/group_file/group_file.c,
+	plugins/group_file/plugin_test.c,
+	plugins/python/python_plugin_approval.c,
+	plugins/python/python_plugin_audit.c,
+	plugins/python/python_plugin_group.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c,
+	plugins/sample/sample_plugin.c,
+	plugins/sample_approval/sample_approval.c, plugins/sudoers/audit.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/regress/starttime/check_starttime.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/tsdump.c,
+	plugins/sudoers/visudo.c, plugins/system_group/system_group.c,
+	src/env_hooks.c, src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c, src/sesh.c, src/sudo.c,
+	src/sudo_noexec.c:
+	Rename __dso_public -> sudo_dso_public and move to config.h.
+	[12550ec04e3a]
+
+	* lib/iolog/host_port.c, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_json.c, lib/iolog/iolog_path.c,
+	lib/iolog/iolog_util.c, lib/util/ttyname_dev.c, logsrvd/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrv_util.c, logsrvd/logsrvd.c,
+	logsrvd/logsrvd_conf.c, logsrvd/sendlog.c,
+	plugins/audit_json/audit_json.c, plugins/sample/sample_plugin.c,
+	plugins/sample_approval/sample_approval.c, plugins/sudoers/locale.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	src/net_ifs.c, src/sesh.c, src/sudo.h:
+	We no longer need to include sudo_gettext.h before sudo_compat.h
+	[660770ab7e7b]
+
+	* .gitignore, .hgignore:
+	Add *.map to the ignore file.
+	[e96b46d418db]
+
+2020-08-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/uncrustify.cfg:
+	Update to uncrustify 0.71.0
+	[dabd7b24c0d9]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in:
+	Mention visudo in sudo(8) and document sudoers error recovery.
+	[44acd34811fb]
+
+2020-08-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, lib/util/freezero.c,
+	lib/util/getentropy.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	scripts/mkdep.pl, src/conversation.c:
+	Use OpenBSD-compatible freezero() in place of explicit_bzero() +
+	free()
+	[af0a9ed1e259]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_compat.h, include/sudo_plugin.h, lib/util/Makefile.in,
+	lib/util/arc4random.c, lib/util/explicit_bzero.c,
+	lib/util/getentropy.c, lib/util/memset_s.c, lib/util/sha2.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, scripts/mkdep.pl,
+	src/conversation.c:
+	Switch from memset_s() -> explicit_bzero(). memset_s() (and all of
+	Annex K) is likely to be removed from the a future version of the
+	standard.
+	[c0f81ef1ee3c]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Define YYERROR_VERBOSE for bison and rename COMMENT -> '\n' This
+	results in better error messages when there is a parse error
+	[7ba896f285a9]
+
+	* plugins/sudoers/mkdefaults:
+	Some minor cleanup. Use ntuples instead of tuple_last Strip leading
+	and trailing double quotes using a single gsub() ntuples will never
+	be zero so don't bother checking No need to explicitly close files
+	in END
+	[b841147900df]
+
+2020-08-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/event.c, plugins/sudoers/cvtsudoers_pwutil.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/logging.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, src/selinux.c:
+	Quiet some clang 10 analyzer warnings.
+	[4147311f6278]
+
+	* logsrvd/sendlog.c:
+	Refactor freeing of InfoMessage list into free_info_messages(). Also
+	fixes a false positive from the clang analyzer.
+	[25a6f0035a33]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y,
+	plugins/sudoers/regress/testsudoers/test11.out.ok,
+	plugins/sudoers/regress/testsudoers/test11.sh:
+	Require that a @include line end with a newline or EOF. We now parse
+	the entire line before reading the include file. This is less
+	surprising behavior and results in better error messages.
+	[ad6a2c991db6]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.c,
+	plugins/sudoers/regress/sudoers/test1.out.ok,
+	plugins/sudoers/regress/sudoers/test10.out.ok,
+	plugins/sudoers/regress/sudoers/test11.out.ok,
+	plugins/sudoers/regress/sudoers/test12.out.ok,
+	plugins/sudoers/regress/sudoers/test13.out.ok,
+	plugins/sudoers/regress/sudoers/test14.out.ok,
+	plugins/sudoers/regress/sudoers/test15.out.ok,
+	plugins/sudoers/regress/sudoers/test16.out.ok,
+	plugins/sudoers/regress/sudoers/test17.out.ok,
+	plugins/sudoers/regress/sudoers/test18.out.ok,
+	plugins/sudoers/regress/sudoers/test18.toke.ok,
+	plugins/sudoers/regress/sudoers/test19.out.ok,
+	plugins/sudoers/regress/sudoers/test2.out.ok,
+	plugins/sudoers/regress/sudoers/test20.out.ok,
+	plugins/sudoers/regress/sudoers/test21.out.ok,
+	plugins/sudoers/regress/sudoers/test22.out.ok,
+	plugins/sudoers/regress/sudoers/test23.out.ok,
+	plugins/sudoers/regress/sudoers/test3.out.ok,
+	plugins/sudoers/regress/sudoers/test4.out.ok,
+	plugins/sudoers/regress/sudoers/test4.toke.ok,
+	plugins/sudoers/regress/sudoers/test5.out.ok,
+	plugins/sudoers/regress/sudoers/test5.toke.ok,
+	plugins/sudoers/regress/sudoers/test6.out.ok,
+	plugins/sudoers/regress/sudoers/test7.out.ok,
+	plugins/sudoers/regress/sudoers/test7.toke.ok,
+	plugins/sudoers/regress/sudoers/test8.out.ok,
+	plugins/sudoers/regress/sudoers/test8.toke.ok,
+	plugins/sudoers/regress/sudoers/test9.out.ok,
+	plugins/sudoers/regress/testsudoers/test1.out.ok,
+	plugins/sudoers/regress/testsudoers/test10.out.ok,
+	plugins/sudoers/regress/testsudoers/test11.out.ok,
+	plugins/sudoers/regress/testsudoers/test2.out.ok,
+	plugins/sudoers/regress/testsudoers/test3.out.ok,
+	plugins/sudoers/regress/testsudoers/test4.out.ok,
+	plugins/sudoers/regress/testsudoers/test5.out.ok,
+	plugins/sudoers/regress/testsudoers/test6.out.ok,
+	plugins/sudoers/regress/testsudoers/test7.out.ok,
+	plugins/sudoers/regress/testsudoers/test8.out.ok,
+	plugins/sudoers/regress/testsudoers/test9.out.ok,
+	plugins/sudoers/regress/visudo/test2.err.ok,
+	plugins/sudoers/regress/visudo/test3.err.ok,
+	plugins/sudoers/regress/visudo/test8.err.ok,
+	plugins/sudoers/regress/visudo/test8.sh,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/visudo.c:
+	Display more specific parser error messages when possible.
+	[91dd5d67bb83]
+
+	* plugins/sudoers/file.c:
+	Let the sudoers parser recover after a parse error. We currently
+	just discard the line with the error.
+	[712537665215]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/regress/testsudoers/test11.out.ok,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l:
+	Keep track of the position of the current token for error messages.
+	[a5f6bd38267e]
+
+2020-08-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[28026a042255]
+
+	* plugins/sample_approval/sample_approval.exp:
+	Sync sample_approval.exp with sample_approval.c
+	[e810da8a6772]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/regress/testsudoers/test11.out.ok,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l:
+	Store the current line in our own buffer for better error messages.
+	[33b2042e0028]
+
+2020-08-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo-logsrvd.pp, etc/sudo.pp, scripts/mkpkg:
+	Fix libssl dependency on Debian-based systems. Older systems may
+	still have libssl1.0.0, not libssl1.1.
+	[0de802ec595a]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add workaround for yyless() not resetting yy_at_bol.
+	[5defcd893f6a]
+
+2020-08-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Always use a linker script to hide symbols if it is supported. We
+	use this even if the compiler has symbol visibility support so we
+	will notice mismatches between the exports file and __dso_public
+	annotations in the source code.
+	[1679ac3124b1]
+
+	* MANIFEST, configure, configure.ac, plugins/python/python_plugin.exp,
+	plugins/python/python_plugin.exp.in:
+	Rename python_plugin.exp.in -> python_plugin.exp There is nothing
+	dynamic in this file.
+	[f34cc08c026c]
+
+	* MANIFEST, configure, configure.ac,
+	plugins/python/python_plugin.exp.in,
+	plugins/python/python_plugin_approval_multi.inc,
+	plugins/python/python_plugin_audit_multi.inc:
+	Add missing python_plugin.exp.in file and remove unneeded
+	__dso_public This fixes building the python plugin on systems where
+	the compiler doesn't support symbol hiding (but wherethe linker
+	does).
+	[e0305faf8282]
+
+2020-08-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/mkdefaults:
+	Use "foo in bar" syntax for testing existence of a key.
+	[0807ae0db0a7]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/toke.c:
+	Replace /*FALLTHROUGH*/ in generated code.
+	[a7590ec10b16]
+
+2020-08-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/zlib/infback.c, lib/zlib/inflate.c, lib/zlib/zconf.h.in:
+	Add ZFALLTHROUGH macro to use instead of /* FALLTHROUGH */ comments.
+	[92ec8a466095]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/arc4random_buf.c, lib/util/glob.c, lib/util/snprintf.c,
+	lib/util/strtonum.c, logsrvd/sendlog.c, plugins/python/pyhelpers.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/check.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse_ldif.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_printf.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/conversation.c, src/exec_monitor.c,
+	src/exec_pty.c, src/parse_args.c, src/regress/noexec/check_noexec.c,
+	src/tgetpass.c:
+	Use the fallthrough attribute instead of /* FALLTHROUGH */ comments.
+	[ce33e87ddfd6]
+
+2020-07-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/mkdefaults:
+	Rewrite mkdefaults in awk.
+	[f069ca4eae59]
+
+2020-07-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/CONTRIBUTORS:
+	Update translators.
+	[5252e2d1a61a]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in, src/copy_file.c:
+	Prompt user before truncating a file to zero bytes. Bug #922.
+	[8bfaa57d5bd4]
+
+2020-07-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_2 for changeset a411d532a5f4
+	[84e81d1fe48f] <1.9>
+
+	* merge sudo 1.9.2 from tip
+	[a411d532a5f4] [SUDO_1_9_2] <1.9>
+
+2020-07-21  kuberlog  <collinalexbell@gmail.com>
+
+	* config.h.in, configure.ac:
+	configure.ac: fix documentation about lecture
+	[382c2809eda1]
+
+2020-07-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/ro.mo, plugins/sudoers/po/ro.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/ja.mo,
+	po/ja.po, po/ko.mo, po/ko.po, po/pl.mo, po/pl.po, po/pt.mo,
+	po/pt.po, po/pt_BR.mo, po/pt_BR.po, po/ro.mo, po/ro.po, po/tr.mo,
+	po/tr.po, po/uk.mo, po/uk.po, po/zh_CN.mo, po/zh_CN.po, po/zh_TW.mo,
+	po/zh_TW.po:
+	Updated translations from translationproject.org
+	[74fbf2ca39e1]
+
+2020-07-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Handle openssl where there is no separate libcrypto pkgconfig file.
+	In this case, just use the full openssl libs to get the sha2
+	functions.
+	[f724510bb416]
+
+	* INSTALL, configure, configure.ac:
+	Ignore --enable-gcrypt if --enable-openssl is also specified.
+	[39d493d7e549]
+
+2020-07-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.2
+	[9af764b239c2]
+
+	* config.h.in, configure, configure.ac:
+	Fix some warnings displayed by autoconf 2.69b This fixes the missing
+	HAVE_GSSAPI_GSSAPI_H define in config.h.in. TODO: replace
+	shadow_funcs variable in function checks with literals
+	[9d8f67e1f8fe]
+
+2020-07-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/audit.c:
+	Initialize sudo_conv and sudo_printf in sudoers_audit_open(). We
+	will need them if there is an error parsing sudoers and leaving them
+	unset can result in NULL deref. Also set the text domain to
+	"sudoers" like we do for the policy and I/O logging open functions.
+	Bug #934.
+	[e88919ff4900]
+
+2020-07-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/ro.mo, plugins/sudoers/po/ro.po, po/it.mo,
+	po/it.po, po/ko.mo, po/ko.po, po/ro.mo, po/ro.po:
+	Updated translations from translationproject.org
+	[2488a1479208]
+
+2020-07-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.exp:
+	Export sudoers_audit symbol for compilers without symbol visibility.
+	[081f6729cb38]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document the contents of the log.json file.
+	[b1ea749fffc2]
+
+	* lib/iolog/iolog_fileio.c:
+	Fix typo, runas_uid should be runas_gid.
+	[7b2c0fd84a60]
+
+	* examples/sudo.conf.in:
+	Add sudoers_audit line for completeness, matching the documentation.
+	When sudoers is loaded as a policy plugin, it will be loaded
+	automatically as an audit plugin. Listing it explicitly in the
+	default sudo.conf file helps bring attention to the fact that
+	sudoers now supports the audit plugin type.
+	[7145a02ed280]
+
+	* plugins/sudoers/defaults.c:
+	Add some debugging statements around Defaults lookup.
+	[b95e2a9b6555]
+
+	* plugins/sudoers/sudoers.in:
+	Replace #includedir with @includedir in default sudoers file.
+	[d18945ec728e]
+
+2020-06-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, m4/libtool.m4:
+	Allow HP-UX share libs and modules to link against static libs.
+	hppa64 and ia64 use PIC by default
+	[0553c60b922a]
+
+2020-06-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Use pkg-config to find the openssl cflags and libs if possible. We
+	support linking against static openssl libs too.
+	[55442f4fea5e]
+
+2020-06-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/pp:
+	Fix parsing of /etc/redhat-release on RHEL 8. RedHat dropped the
+	word "server" from the release name in redhat-release which results
+	in the awk script printing the wrong field. Instead of using awk,
+	just use sed to pull out the version number immediately following
+	the word "release".
+	[a283acb4622a]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen without `scare quotes'
+	[31f021892137]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in,
+	src/parse_args.c, src/sudo.c:
+	Replace or remove use of `scare quotes' These don't translate well
+	and look odd in many fonts.
+	[3c7fa8f93543]
+
+2020-06-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/zlib/infback.c, lib/zlib/inflate.c:
+	Add FALLTHROUGH comments to quiet -Wimplicit-fallthrough
+	[f724957b7cae]
+
+	* src/solaris.c:
+	Fix implicit fallthrough warning and add break to default cases.
+	[74d8c68eb160]
+
+	* configure, configure.ac, m4/ax_func_snprintf.m4, m4/sudo.m4:
+	Fix some warnings from configure test programs.
+	[6cff0cdb066a]
+
+	* configure, configure.ac:
+	Add -Wimplicit-fallthrough to --enable-warnings if available. Note
+	that clang 10 has support for -Wimplicit-fallthrough in C code but
+	doesn't recognize lint-style FALLTHROUGH comments like gcc does so
+	we can't use it.
+	[cf70a1ab3ea9]
+
+	* configure, configure.ac:
+	Drop old test for -lcposix for ISC Unix.
+	[1bfd474c8819]
+
+2020-06-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* README:
+	Mention sudo-blog announce list.
+	[526dc0cc1e83]
+
+	* NEWS:
+	Bugs #860 and #917 were fixed in 1.9.0.
+	[51a347785dbf]
+
+2020-06-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_1 for changeset 06b47089122a
+	[94c1c10ddbbd] <1.9>
+
+	* merge sudo 1.9.1 from tip
+	[06b47089122a] [SUDO_1_9_1] <1.9>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen to fix a typo
+	[9755e76fcd8b]
+
+	* MANIFEST, lib/iolog/Makefile.in,
+	lib/iolog/regress/iolog_mkpath/check_iolog_mkpath.c:
+	Add regress test to catch swapids() bug when called by
+	iolog_mkdtemp()
+	[deff1dc2f144]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po, po/ro.mo,
+	po/ro.po:
+	Updated translations from translationproject.org
+	[9007c89029ea]
+
+2020-06-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in:
+	Document the order in which the plugin open/close functions are
+	called.
+	[48ec66882e1a]
+
+	* NEWS, lib/iolog/iolog_fileio.c:
+	Fix a typo that prevented swapids() from restoring the original gid.
+	This led to a regression when the iolog_file setting ends in six or
+	more X's or when the I/O logs are stored on NFS.
+	[522d8ec470cb]
+
+2020-06-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_monitor.c, src/exec_pty.c, src/get_pty.c, src/sudo.h,
+	src/sudo_exec.h:
+	Replace master/slave in code with leader/follower.
+	[230f5343d961]
+
+	* NEWS, doc/sudoers.man.in, doc/sudoers.mdoc.in, examples/sudoers,
+	plugins/sudoers/regress/cvtsudoers/sudoers,
+	plugins/sudoers/regress/cvtsudoers/sudoers.defs,
+	plugins/sudoers/regress/cvtsudoers/test13.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test19.out.ok,
+	plugins/sudoers/regress/visudo/test6.sh:
+	Replace terms master and blacklist in docs and examples.
+	[2908ac6c0fe0]
+
+	* NEWS:
+	Bug #929
+	[c1f5a01d1af6]
+
+2020-06-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_edit.c:
+	Clean up temporary sudoedit files on success; Bug #929 This is a
+	regression introduced in sudo 1.9.0.
+	[2bc4822b7382]
+
+2020-06-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	New Romanian translation
+	[fd753dfa0a84]
+
+2020-06-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fi.mo,
+	po/fi.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/pl.mo,
+	po/pl.po, po/pt.mo, po/pt.po, po/pt_BR.mo, po/pt_BR.po, po/sv.mo,
+	po/sv.po, po/tr.mo, po/tr.po, po/uk.mo, po/uk.po, po/zh_CN.mo,
+	po/zh_CN.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[570aacc81015]
+
+	* MANIFEST, doc/CONTRIBUTORS, plugins/sudoers/po/ro.mo,
+	plugins/sudoers/po/ro.po, po/ro.mo, po/ro.po:
+	Romanian translation from translationproject.org.
+	[1e277907378e]
+
+	* NEWS:
+	Add missing entry for the LDAP/SSSD sudoHost regression. Also add
+	new Romanian translation
+	[624eb5e8e612]
+
+2020-06-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Fix a typo in the audit string when "sudo -E" is not allowed.
+	[85bcb3b1f7d8]
+
+2020-06-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/regress/testhelpers.c:
+	Check asprintf() return value.
+	[456bb2d7c37f]
+
+	* scripts/mkpkg:
+	Prefer the python3 in /usr/bin on Solaris. The /opt/csw version, if
+	it exists, may be a 32-bit version which we can't link with. Also
+	handle the case where the /usr/bin/python3 link is missing.
+	[2ed7715e6b2e]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Declare getdelim(3) if it exists in libc but is not prototyped in
+	stdio.h. This can happen on systems with a gcc packages that was
+	built on and older versions of the OS where getdelim(3) was not
+	present.
+	[e78803280641]
+
+	* aclocal.m4, configure, configure.ac:
+	For python3-config, only use -I and -L/-l from --cflags and
+	--ldflags output. Otherwise we may get other flags used to build
+	python that conflict with what sudo uses.
+	[7a8d3c5fd2ae]
+
+	* scripts/mkpkg:
+	Build 64-bit binaries and the python package on Solaris 11 and
+	above. No longer prefer the Solaris Studio C compiler over gcc, it
+	causes issues with the Python plugin.
+	[a92f9641bd07]
+
+	* logsrvd/sendlog.c:
+	Fix memory leak on error in fmt_info_messages().
+	[511ac9ba6819]
+
+	* NEWS:
+	Update for 1.9.1b1
+	[562b0add8e04]
+
+2020-06-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen for sudo 1.9.1
+	[8960aceb2519]
+
+2020-06-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	Add basic support for reject and error audit events to sudoers. This
+	is only used when logging events from plugins other than sudoers,
+	such as an approval plugin. With this change, if an approval plugin
+	rejects the command the denial will be logged in the sudoers log
+	file using the message from the approval plugin.
+	[c7abc39b0e37]
+
+	* plugins/sudoers/bsm_audit.c, plugins/sudoers/solaris_audit.c,
+	scripts/mkpkg:
+	Fix Solaris and BSM audit warnings. Use BSM audit on Illumos, which
+	lacks Solaris audit.
+	[3844e8a24f59]
+
+	* plugins/sudoers/policy.c:
+	Track whether the session was opened in sudoers. In
+	sudoers_policy_close() only warn about being unable to run the
+	command if we actually opened the session (and thus passed all
+	approval plugins).
+	[f99b434d121b]
+
+	* src/sudo.c:
+	Only display an error in the built-in policy close if command is
+	set. If a policy or approval plugin denies the command,
+	command_details will not have been filled out.
+	[245024004df2]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sssd.c:
+	Avoid passing NULL to printf in match debug code for LDAP/SSSD. The
+	file name in struct userspec was not set for the LDAP and SSSD
+	backends. There is no actual file in this case so set the name to
+	LDAP/SSSD. Also add a guard to make sure we don't try to print NULL
+	in sudoers_lookup_check() if name is left unset.
+	[240efcda496e]
+
+2020-06-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/linux_audit.c, plugins/sudoers/linux_audit.h:
+	Add missing const to linux_audit_command()'s argv function argument.
+	[cb219f1ccb6e]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	When converting LDAP to sudoers, ignore entries with no sudoHost
+	attribute. Otherwise, sudo_ldap_role_to_priv() will treat a NULL
+	host list as as the "ALL" wildcard. This regression was introduced
+	in sudo 1.8.23, which was the first version to convert LDAP sudoRole
+	objects to sudoers internal data structures. Thanks to Andreas
+	Mueller for reporting and debugging this problem.
+	[484d0d3b892e]
+
+2020-06-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, src/load_plugins.c:
+	Load the sudoers module as an audit plugin if loaded as a policy
+	plugin. Now that logging of successful commands is performed by
+	sudoers as an audit plugin we need to load sudoers_audit if
+	sudoers_policy is also loaded. Otherwise, accpted commands will not
+	be logged.
+	[f20bee20f4c7]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/bsm_audit.h,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/policy.c, plugins/sudoers/solaris_audit.c,
+	plugins/sudoers/solaris_audit.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Defer logging of the successful command until approval plugins have
+	run. This adds audit plugin support to the sudoers module, currently
+	only used for accept events. As a result, the sudoers file is now
+	initially parsed as an audit plugin.
+	[552c13bd0287]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in,
+	include/sudo_plugin.h, plugins/audit_json/audit_json.c,
+	plugins/python/sudo_python_module.c, src/sudo.c:
+	Add support for "accept" audit events sent by the sudo front-end.
+	With this change, the sudo front-end will send an "accept" audit
+	event to the audit plugins after all the I/O logging plugins have
+	been initialized. This can be used by an audit plugin that does not
+	care about the result of the individual policy and approval plugins
+	and only wants to receive a single "accept" event if all policy and
+	approval plugins have succeeded. The plugin_type argument for events
+	sent by the front-end is SUDO_FRONT_END (0).
+	[6b3cb94fedb9]
+
+	* src/exec_pty.c:
+	If event loop fails due to ENXIO, remove /dev/tty events and
+	recover. This fixes an issue on Solaris 11.4 (and probably others)
+	with "sudo reboot" when I/O logging is enabled. Previously, sudo
+	would kill the command if it was still running after the event loop
+	terminated, leaving the system in a half-dead state.
+	[e12e3040b067]
+
+2020-06-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	Don't try to suspend sudo if the user's tty has gone away. Fixes a
+	problem on Solaris 11.4 (and possibly others) where sudo continually
+	tries to put itself in the background after the user's terminal has
+	been revoked.
+	[92f172b46b9c]
+
+	* src/exec_pty.c:
+	Back out WIP code that was mistakenly committed.
+	[41f57239b2c4]
+
+	* scripts/mkpkg:
+	Don't enable BSM audit on Solaris 10, it is missing AUE_sudo
+	[3b32087b1ed3]
+
+	* src/exec_pty.c, src/get_pty.c:
+	On Solaris 11.4 the openpty(3) prototype lives in termios.h.
+	[d6e353e8b9df]
+
+	* plugins/sudoers/solaris_audit.c:
+	Add missing stdlib.h include and fix solaris_audit_failure() error
+	return.
+	[5748d8fd24c4]
+
+	* scripts/mkpkg:
+	Use Solaris audit for Solaris 11, not BSM audit. BSM audit is no
+	longer supported in Solaris 11.4.
+	[01f2189f439d]
+
+2020-05-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec.c:
+	Check audit plugins for a close function too before execing command
+	directly. We cannot exec the command directly if any of the policy
+	or audit plugins use a close function.
+	[5aa6db56ce32]
+
+2020-05-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Mention Bug #927.
+	[0fd9e757d80b]
+
+2020-05-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, m4/sudo.m4:
+	Add basic support for --runstatedir If the user specifies
+	--runstatedir but not --with-rundir, use runstatdir as the parent
+	directory of the sudo rundir.
+
+	In the future we may deprecate --with-rundir in favor of
+	--runstatedir but that will require changes for systems with no
+	/var/run directory.
+	[14879831fe6e]
+
+	* MANIFEST, NEWS, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y,
+	plugins/sudoers/regress/testsudoers/test10.out.ok,
+	plugins/sudoers/regress/testsudoers/test10.sh,
+	plugins/sudoers/regress/testsudoers/test11.out.ok,
+	plugins/sudoers/regress/testsudoers/test11.sh,
+	plugins/sudoers/regress/testsudoers/test2.out.ok,
+	plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.out.ok,
+	plugins/sudoers/regress/testsudoers/test3.sh,
+	plugins/sudoers/regress/testsudoers/test4.sh,
+	plugins/sudoers/regress/testsudoers/test5.sh,
+	plugins/sudoers/regress/testsudoers/test8.out.ok,
+	plugins/sudoers/regress/testsudoers/test8.sh,
+	plugins/sudoers/regress/testsudoers/test9.out.ok,
+	plugins/sudoers/regress/testsudoers/test9.sh,
+	plugins/sudoers/sudoers_version.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l:
+	Add support for @include and @includedir These are less confusing
+	than #include and #includedir when the hash character is also the
+	comment character.
+
+	This commit also adds real parsing of include directives as opposed
+	to the pure lexer approach used previously. As a result, it is now
+	possible to include files with spaces by either using a double-
+	quoted string or escaping the space characters with a backslash.
+	[c422a5c8ea5d]
+
+2020-05-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/iolog_fileio.c:
+	In iolog_openat() enable the write bit on pre-existing files if
+	needed. This prevents problems caused by the change to strip the
+	write bit from the timing file when it is finished.
+	[a6b0da3f7b94]
+
+	* plugins/sudoers/visudo.c:
+	In visudo check that an include file is regular file before using
+	it. Avoids a generic "input in flex scanner failed" error message.
+	[287d90d359a6]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix a memory leak on error when including a file or directory.
+	[02db03f7b565]
+
+2020-05-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.9.1
+	[57a1a5f05500]
+
+	* doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	Add a follow option (-F) to support replaying a live session. By
+	default, sudoreplay will exit when it reaches the end of the timing
+	file. With the -F option, it will keep going until the timing file
+	is finished and its write bit is cleared.
+	[12ab27768cad]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c:
+	Add iolog_clearerr() that acts like clearerr(3). Works for both
+	compressed and uncompressed I/O logs.
+	[c83b88285c2c]
+
+	* plugins/sudoers/iolog.c:
+	Clear the write bit from the I/O log timing file when it is
+	complete. This matches the behavior of sudo_logsrvd.
+	[0bc8a012db26]
+
+	* logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Use PACKAGE_VERSION instead of 0.1 as the client and server version.
+	[d1e3ac049cf7]
+
+	* lib/util/Makefile.in, lib/util/aix.c, lib/util/fatal.c,
+	lib/util/getusershell.c, lib/util/gidlist.c, lib/util/json.c,
+	lib/util/mkdir_parents.c, lib/util/strsignal.c, lib/util/strtoid.c,
+	lib/util/strtomode.c, lib/util/strtonum.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c:
+	Set DEFAULT_TEXT_DOMAIN in lib/util's Makefile not individual .c
+	files. We no longer need to include sudo_gettext.h before
+	sudo_compat.h
+	[ead9b6a434b8]
+
+	* lib/iolog/iolog_fileio.c, lib/iolog/iolog_json.c,
+	lib/iolog/iolog_path.c, lib/iolog/iolog_util.c,
+	lib/iolog/regress/host_port/host_port_test.c,
+	lib/iolog/regress/iolog_json/check_iolog_json.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/iolog/regress/iolog_util/check_iolog_util.c,
+	lib/util/digest_gcrypt.c, lib/util/event.c, lib/util/event_select.c,
+	lib/util/fnmatch.c, lib/util/getaddrinfo.c, lib/util/getcwd.c,
+	lib/util/getdelim.c, lib/util/getgrouplist.c,
+	lib/util/getopt_long.c, lib/util/glob.c, lib/util/inet_pton.c,
+	lib/util/json.c, lib/util/key_val.c, lib/util/lbuf.c,
+	lib/util/locking.c, lib/util/mkdir_parents.c, lib/util/mktemp.c,
+	lib/util/parseln.c, lib/util/progname.c, lib/util/pw_dup.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/getdelim/getdelim_test.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/mktemp/mktemp_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/secure_path.c,
+	lib/util/sha2.c, lib/util/sig2str.c, lib/util/snprintf.c,
+	lib/util/str2sig.c, lib/util/strndup.c, lib/util/strtobool.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/sudo_dso.c,
+	lib/util/term.c, lib/util/ttyname_dev.c, lib/util/vsyslog.c,
+	plugins/audit_json/audit_json.c, plugins/group_file/getgrent.c,
+	plugins/group_file/group_file.c, plugins/python/sudo_python_debug.c,
+	plugins/sample/sample_plugin.c,
+	plugins/sample_approval/sample_approval.c, plugins/sudoers/alias.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/check.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/editor.c, plugins/sudoers/env.c,
+	plugins/sudoers/env_pattern.c, plugins/sudoers/filedigest.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gentime.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path_escapes.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logwrap.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/match_digest.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse_ldif.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/rcstr.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/starttime.c, plugins/sudoers/strlist.c,
+	plugins/sudoers/stubs.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timeout.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsdump.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	plugins/system_group/system_group.c, src/conversation.c,
+	src/env_hooks.c, src/exec.c, src/exec_common.c, src/exec_monitor.c,
+	src/exec_nopty.c, src/exec_pty.c, src/get_pty.c, src/hooks.c,
+	src/limits.c, src/load_plugins.c, src/net_ifs.c, src/parse_args.c,
+	src/preserve_fds.c, src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c, src/signal.c, src/sudo.c,
+	src/sudo_edit.c, src/sudo_noexec.c, src/tcsetpgrp_nobg.c,
+	src/tgetpass.c, src/ttyname.c, src/utmp.c:
+	Include string.h unconditionally and only use strings.h for
+	strn?casecmp() In the pre-POSIX days BSD had strings.h, not
+	string.h. Now strings.h is only used for non-ANSI string functions.
+	[f7f633de570a]
+
+	* lib/iolog/host_port.c, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_json.c, lib/iolog/iolog_path.c,
+	lib/iolog/iolog_util.c,
+	lib/iolog/regress/host_port/host_port_test.c,
+	lib/iolog/regress/iolog_json/check_iolog_json.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/iolog/regress/iolog_util/check_iolog_util.c, lib/util/aix.c,
+	lib/util/arc4random.c, lib/util/arc4random_buf.c,
+	lib/util/arc4random_uniform.c, lib/util/cfmakeraw.c,
+	lib/util/closefrom.c, lib/util/digest.c, lib/util/digest_gcrypt.c,
+	lib/util/digest_openssl.c, lib/util/dup3.c, lib/util/event_poll.c,
+	lib/util/event_select.c, lib/util/fatal.c, lib/util/fchmodat.c,
+	lib/util/fnmatch.c, lib/util/fstatat.c, lib/util/getaddrinfo.c,
+	lib/util/getcwd.c, lib/util/getdelim.c, lib/util/getgrouplist.c,
+	lib/util/gethostname.c, lib/util/getopt_long.c, lib/util/gettime.c,
+	lib/util/getusershell.c, lib/util/gidlist.c, lib/util/glob.c,
+	lib/util/isblank.c, lib/util/json.c, lib/util/key_val.c,
+	lib/util/lbuf.c, lib/util/locking.c, lib/util/logfac.c,
+	lib/util/logpri.c, lib/util/memset_s.c, lib/util/mkdir_parents.c,
+	lib/util/mksiglist.c, lib/util/mksigname.c, lib/util/mktemp.c,
+	lib/util/openat.c, lib/util/parseln.c, lib/util/pipe2.c,
+	lib/util/progname.c, lib/util/pw_dup.c, lib/util/reallocarray.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/mktemp/mktemp_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsig/strsig_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/strtofoo/strtobool_test.c,
+	lib/util/regress/strtofoo/strtoid_test.c,
+	lib/util/regress/strtofoo/strtomode_test.c,
+	lib/util/regress/strtofoo/strtonum_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/roundup.c,
+	lib/util/secure_path.c, lib/util/setgroups.c, lib/util/sha2.c,
+	lib/util/sig2str.c, lib/util/snprintf.c, lib/util/str2sig.c,
+	lib/util/strlcat.c, lib/util/strlcpy.c, lib/util/strndup.c,
+	lib/util/strsignal.c, lib/util/strsplit.c, lib/util/strtobool.c,
+	lib/util/strtoid.c, lib/util/strtomode.c, lib/util/strtonum.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/sudo_dso.c,
+	lib/util/term.c, lib/util/ttysize.c, lib/util/unlinkat.c,
+	lib/util/utimens.c, lib/util/uuid.c,
+	plugins/audit_json/audit_json.c, plugins/group_file/getgrent.c,
+	plugins/group_file/group_file.c, plugins/group_file/plugin_test.c,
+	plugins/python/regress/testhelpers.h,
+	plugins/python/sudo_python_debug.h, plugins/sample/sample_plugin.c,
+	plugins/sample_approval/sample_approval.c, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/base64.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/check.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/digestname.c, plugins/sudoers/editor.c,
+	plugins/sudoers/env.c, plugins/sudoers/env_pattern.c,
+	plugins/sudoers/file.c, plugins/sudoers/filedigest.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gc.c, plugins/sudoers/gentime.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/gmtoff.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/hexchar.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_path_escapes.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/match_digest.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse_ldif.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/rcstr.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/regress/starttime/check_starttime.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/solaris_audit.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/strlist.c,
+	plugins/sudoers/stubs.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudo_printf.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timeout.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/timestr.c,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsdump.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	plugins/system_group/system_group.c, src/conversation.c,
+	src/copy_file.c, src/env_hooks.c, src/exec.c, src/exec_common.c,
+	src/exec_nopty.c, src/get_pty.c, src/hooks.c, src/limits.c,
+	src/load_plugins.c, src/openbsd.c, src/parse_args.c, src/preload.c,
+	src/preserve_fds.c, src/selinux.c, src/sesh.c, src/signal.c,
+	src/solaris.c, src/sudo_edit.c, src/tcsetpgrp_nobg.c,
+	src/tgetpass.c, src/utmp.c:
+	We no longer need to include headers we don't use for sudo*.h files.
+	Previously we needed to include headers required by the various
+	sudo*h files. Now those files are more self-sufficient and we should
+	only include headers needed by code in the various .c files.
+	[72cbeae218e7]
+
+	* include/sudo_compat.h, include/sudo_conf.h, include/sudo_debug.h,
+	include/sudo_iolog.h, include/sudo_json.h, include/sudo_util.h,
+	plugins/sudoers/sudoers.h:
+	Add dependent system includes to make sudo_*.h more standalone. In
+	the past we've relied on the various .c files to include the system
+	headers that define types that the sudo_*.h headers require. This is
+	fragile and can cause issues when includes get re-ordered.
+	[a9fb765c0fba]
+
+	* plugins/sudoers/env.c:
+	Fix typo in PERLIO_DEBUG (trailing whitespace). This has no effect
+	unless env_reset is disabled. From Allan Wirth
+	[bdf9c9e7f455]
+
+2020-05-17  Sebastian Rasmussen  <sebras@gmail.com>
+
+	* plugins/sudoers/visudo.c:
+	Fix typo in warning message.
+	[01b8fab9fdf5]
+
+2020-05-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/mksiglist.h, lib/util/mksigname.h:
+	Prefer SIGSYS if SIGUNUSED is defined to the same value. Fixes a
+	regress failure on musl libc where SIGSYS and SIGUNUSED share the
+	same value.
+	[e030acf8a670]
+
+	* plugins/python/regress/testhelpers.h:
+	Add missing sys/wait.h include; fixes a compilation problem on musl
+	libc.
+	[9a6a09e74a14]
+
+	* lib/iolog/hostcheck.c:
+	Add missing sys/types.h include; fixes a compilation problem on musl
+	libc.
+	[7c8ea831203b]
+
+	* include/sudo_compat.h:
+	Only define WCONTINUED and WIFCONTINUED if neither are already
+	defined. Fixes a warning on musl libc where WIFCONTINUED is defined
+	in stdlib.h for some reason.
+	[9f55ae24b479]
+
+2020-05-16  Dan Robertson  <dan@dlrobertson.com>
+
+	* include/sudo_debug.h:
+	Fix includes when building with musl
+
+	Include sys/types.h for mode_t and id_t in sudo_debug.h
+	[15abb56a1edf]
+
+2020-05-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Enable OpenSSL on RHEL 6 too. The version of OpenSSL in RHEL 6 is
+	new enough for the log server to use.
+	[853fd8a74207]
+
+	* logsrvd/logsrvd_conf.c:
+	Don't print errno for the "TLS not supported" message.
+	[c94540d3d632]
+
+2020-05-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo-logsrvd.pp, etc/sudo-python.pp:
+	Fix macOS bundle IDs for sudo-logsrvd and sudo-python packages
+	[a9f6aea56e40]
+
+2020-05-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/eventlog.c:
+	Add iolog_path to the JSON-format event log
+	[924d8836ead0]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Rename FLUSHED state to FINISHED This makes more sense when
+	receiving event-only logs.
+	[9e2736246e0d]
+
+2020-05-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Fix handling of connections without associated I/O logs. This fixes
+	reject events as well as accept events without the expect_iobufs
+	flag set.
+	[3ddb52ae0af4]
+
+	* logsrvd/sendlog.c:
+	Fix handling of accept and reject messages without an I/O log. Only
+	set expect_iobufs in AcceptMessage if sending I/O logs. Set state to
+	FINISHED immediately after sending a RejectMessage.
+	[767e75944d4f]
+
+	* doc/sudo_sendlog.man.in, doc/sudo_sendlog.mdoc.in,
+	logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Add -A and -R options to test logging of accept and reject events.
+	If -A is specified, no I/O will be sent, only the accept event. For
+	-R, a reject event with the specified reason is sent.
+	[90db0e6f9b68]
+
+	* configure, configure.ac:
+	cfmakeraw(3) is broken on AIX, don't use it there The cfmakeraw(3)
+	function exists but does not set VMIN to 1 or VTIME to 0 in c_cc[]
+	in struct termios, which makes it useless. The AIX version also
+	doesn't clear the CSIZE and PARENB flags from c_cflag.
+	[bbdcae2c5fb5]
+
+	* NEWS:
+	fix pastos
+	[cbf517081e74]
+
+2020-05-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgtags:
+	Added tag SUDO_1_9_0 for changeset 706d726a2f8e
+	[d1f2b4ee59d5] <1.9>
+
+	* MANIFEST, include/sudo_iolog.h, include/sudo_util.h,
+	lib/iolog/Makefile.in, lib/iolog/host_port.c,
+	lib/iolog/regress/host_port/host_port_test.c, lib/util/Makefile.in,
+	lib/util/host_port.c, lib/util/regress/host_port/host_port_test.c,
+	lib/util/util.exp.in, logsrvd/logsrvd_conf.c,
+	plugins/sudoers/iolog_client.c:
+	Rename sudo_parse_host_port -> iolog_parse_host_port and mv to
+	lib/iolog It is not used outside of the I/O log client and server
+	and the host:port syntax may change in the future.
+	[706d726a2f8e] [SUDO_1_9_0]
+
+	* plugins/sudoers/sudoreplay.c:
+	Remove duplicate inclusion of time.h
+	[f560858325d5]
+
+2020-05-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c,
+	plugins/sudoers/iolog_client.c:
+	Only enable TLS listener by default if we have a cert for it. We
+	want the log server to work with the default configuration. If the
+	default certificate path exists, it will be used with the default
+	listener. If the user explicitly enabled a TLS listener we always
+	attempt to use it. If TLS was specified but no cert file was set,
+	the default location will be used (and an error will occur if the
+	cert cannot be loaded).
+	[16ade34c38ee]
+
+2020-05-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen for 1.9.0 final
+	[99e507035253]
+
+	* logsrvd/Makefile.in:
+	regen
+	[555d817825b0]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in, src/parse_args.c:
+	The --preserve-env=list option may be specified more than once.
+	[8066a9d1b04b]
+
+	* doc/sudo_logsrv.proto.man.in, doc/sudo_logsrv.proto.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Quiet some warnings from igor.
+	[4df4fd274023]
+
+	* MANIFEST, Makefile.in, etc/codespell.exclude, etc/codespell.ignore,
+	etc/codespell.skip:
+	Plumb in codespell with a "make spell" target.
+	[4b1de7ee8648]
+
+	* configure, configure.ac, install-sh:
+	Fix a few more typos.
+	[d22a8c46c743]
+
+2020-05-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, doc/sudo.man.in, doc/sudo.mdoc.in, src/parse_args.c:
+	Don't allow duplicate values for command line options that take an
+	argument. Previously, if multiple instances of the same command line
+	option were specified, the last one would be used. This meant that,
+	for example, "sudo -u someuser -u otheruser id" would run the
+	command as "otheruser". This has the potential to cause problems for
+	programs that run sudo with a user-specified command that do not use
+	the "--" option to indicate that no more options should be
+	processed. While this is a bug in the calling program, there is
+	little downside to erroring out when multiple options of the same
+	type are specified on the command line. Bug #924
+	[66e2612e7672]
+
+	* NEWS:
+	Debian bug #734752
+	[d3285c45ac4b]
+
+	* src/sudo.c, src/sudo.h:
+	Look up runas user by name, not euid, where possible. Fixes a
+	problem when there are multiple users with the same user-ID where
+	the PAM session modules could be called with the wrong user name.
+	Debian bug #734752
+	[b45608f29a02]
+
+	* src/sesh.c:
+	Fix ironic typo in spelling fixes. Bug #925
+	[73de90df6ff9]
+
+	* scripts/pp:
+	Sync PolyPkg from upstream.
+	[ac5e4b830177]
+
+	* NEWS, TODO, config.h.in, configure.ac,
+	doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in,
+	etc/sudo.pp, include/compat/getaddrinfo.h, include/sudo_event.h,
+	include/sudo_util.h, lib/util/fnmatch.c, lib/util/getaddrinfo.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, logsrvd/logsrvd.c,
+	plugins/audit_json/audit_json.c,
+	plugins/python/example_debugging.py,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/testhelpers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_client.c, plugins/sudoers/parse.h,
+	plugins/sudoers/pwutil.h,
+	plugins/sudoers/regress/cvtsudoers/test30.sh, scripts/mkdep.pl,
+	src/exec.c, src/exec_monitor.c, src/exec_pty.c, src/sesh.c:
+	Apply spelling fixes. Fixes from PR #30 (ka7) and Bug #925
+	(fossies.org codespell)
+	[1fb13dc3991b]
+
+2020-05-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in, etc/sudo-python.pp:
+	Use the proper python version in the libpython dependency on Debian.
+	The configure script already detects the python version, we just
+	need to use it.
+	[4e49c53f206f]
+
+	* plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po, po/ja.mo,
+	po/ja.po, po/sv.mo, po/sv.po:
+	Updated translations from translationproject.org
+	[abdb2d6fe7cb]
+
+	* NEWS:
+	Bug #922 and Bug #923
+	[7a77f74c436f]
+
+2020-05-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo.pp:
+	Fix Debian ldap dependency broken in last commit.
+	[4980b1b653ef]
+
+	* etc/sudo.pp:
+	Fix "make package" on Debian when linux_audit is not set.
+	[a00d7dec5821]
+
+	* doc/sudo_logsrv.proto.man.in, doc/sudo_logsrv.proto.mdoc.in,
+	include/log_server.pb-c.h, lib/logsrv/log_server.pb-c.c,
+	lib/logsrv/log_server.proto, logsrvd/logsrvd.c, logsrvd/sendlog.c,
+	plugins/sudoers/iolog_client.c:
+	Add a ClientHello message that client sends to the server. This
+	makes it easier to detect a plaintext client sending to a TLS port.
+	Without this, the TLS server will be silent as it waits for the
+	client to initiate the TLS connection.
+	[22c033bcf456]
+
+	* logsrvd/sendlog.c, plugins/sudoers/iolog_client.c:
+	Better error messages when there is a problem with the TLS
+	connection. If SSL_read, SSL_write or SSL_connect fails we can use
+	the reason string to let the user know what the problem is.
+	[92f603e37e40]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	logsrvd/logsrvd_conf.c:
+	Make the default certificate and key paths match the example file.
+	[f642836bfcf0]
+
+	* logsrvd/logsrvd.c, plugins/sudoers/iolog_client.c:
+	Warn about tls errors during startup so the user has a clue. We
+	write messages to stderr until we become a daemon.
+	[25ad61aa7dab]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	doc/sudo_sendlog.man.in, doc/sudo_sendlog.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, include/log_server.pb-c.h,
+	lib/logsrv/log_server.pb-c.c, lib/logsrv/log_server.proto,
+	logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Remove the tls parameter from the ServerHello message. The TLS
+	connection is now initiated before ServerHello is received.
+	[9d8b76f14cda]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h,
+	plugins/sudoers/policy.c:
+	Adapt sudoers iolog client to log server dual port changes. The TLS
+	handshake now occurs before the ServerHello message is read. This
+	fixes potential man-in-the-middle attacks and works better with TLS
+	1.3.
+	[8137b029a3fe]
+
+	* doc/sudo_logsrv.proto.man.in, doc/sudo_logsrv.proto.mdoc.in,
+	doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf, logsrvd/logsrv_util.h,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/sendlog.c:
+	Use port 30343 for plaintext and port 30344 for TLS. For TLS
+	connections we now do the TLS handshake immediately before the
+	ServerHello message. This lets the client recieve an alert from the
+	server is there is a handshake error after the TLS connect has
+	succeeded. It also means that the contents of the ServerHello are
+	protected from a man-in-the-middle attack.
+	[bb4d8b57b3dd]
+
+	* include/sudo_util.h, lib/util/host_port.c,
+	lib/util/regress/host_port/host_port_test.c, logsrvd/logsrvd_conf.c,
+	plugins/sudoers/iolog_client.c:
+	Add support for a tls flag in sudo_parse_host_port(). If the string
+	"(tls)" appears at the end, the tls flag is set to true and the
+	default tls port is used if necessary.
+	[f0d9a225cd75]
+
+	* logsrvd/sendlog.c, plugins/sudoers/iolog_client.c:
+	Plug memory leaks in sudo_sendlog
+	[886254bcae6a]
+
+	* lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c:
+	Handle EAGAIN like we do ENOMEM from poll() and select(). On some
+	systems, poll() and select() can return EAGAIN instead of ENOMEM if
+	there is a kernel resource shortage. In this case we just re-enter
+	the event loop and retry.
+	[048df2548dcc]
+
+2020-05-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Use the --embed when running "python3-config --ldflags" if
+	supported. Newer versions of python3-config only include libpython
+	in the output when the --embed is used. Otherwise, "python3-config
+	--libs" and "python3-config --ldflags" only list the libraries
+	python is dependent on and not the python library itself.
+	[d90dc892c726]
+
+2020-04-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/sendlog.c, plugins/sudoers/iolog_client.c:
+	On error, remove the connection with an error without freeing the
+	closure. Fixes the final message at the end when there is a network
+	error.
+	[0e1952eb707b]
+
+	* lib/util/event_poll.c:
+	Do not call poll(2) or ppoll(2) with nfds > RLIMIT_NOFILE. Both
+	poll(2) and ppoll(2) will return EINVAL if the nfds function
+	argument is larger than the max files per process resource limit.
+	Prevent this by limiting the max number entries in the pfds[] array
+	to the RLIMIT_NOFILE soft limit.
+	[ab0f798bb024]
+
+2020-04-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_event.h, lib/util/event.c:
+	The timeout parameter of sudo_ev_add() should be const.
+	[de85c8897aad]
+
+2020-04-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Don't free TLS on error in tls_init(), it is freed in
+	client_closure_free(). Fixes a double free on error introduced with
+	the TLS state cleanup in client_closure_free().
+	[f1b478f2ec13]
+
+	* logsrvd/logsrvd.c:
+	Check for tls_config->dhparams_path being non-NULL before using it.
+	[09348a25bfd2]
+
+2020-04-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_sendlog.man.in, doc/sudo_sendlog.mdoc.in:
+	Document the TLS and test options.
+	[e5f6b6c46c25]
+
+	* logsrvd/sendlog.c:
+	Allow -t option even without OpenSSL Also add -t to the usage
+	message
+	[d874c9a67ed6]
+
+	* logsrvd/sendlog.c:
+	Use sudo_strtonum() instead of relying on strtoll(). Older, pre-C99,
+	systems may not include strtoll() in their C library.
+	[a1a610bbe022]
+
+	* include/protobuf-c/protobuf-c.h:
+	Allow this to build on systems without stdint.h by using config.h.
+	Old, pre-C99, systems may have inttypes.h but not stdint.h.
+	[72e603875b82]
+
+2020-04-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo-logsrvd.pp, scripts/pp:
+	Fix support for pp_systemd_disabled and check for systemd existence.
+	On our build schroots we don't have systemctl installed but do have
+	the /etc/systemd and /lib/systemd (or /usr/lib/systemd) directories.
+	[93917f4130b0]
+
+	* etc/sudo-logsrvd.pp:
+	Set pp_macos_service_id instead of
+	pp_macos_default_service_id_prefix. It is only effective to set
+	pp_macos_default_service_id_prefix in the indivisual %service
+	sections (and not %set) so we may was well use pp_macos_service_id
+	which includes the service name.
+	[84ccf13e7076]
+
+	* etc/sudo-logsrvd.pp:
+	Set launchd service id prefix to "ws.sudo." The default value in
+	PolyPkg is "com.quest.rc."
+	[eb581d74573e]
+
+	* scripts/pp:
+	Fix macOS package creation.
+	[556c0051c0fc]
+
+2020-04-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Shut down the TLS connection cleanly in client_closure_free(). Also
+	free the SSL data which is part of the client closure.
+	[258ec8832cbd]
+
+	* src/exec_monitor.c, src/exec_nopty.c, src/selinux.c, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c, src/sudo_exec.h:
+	Fix sudoedit when running with SELinux RBAC mode. We can't use
+	run_command() to run sesh, that will use the sudo event loop (and
+	might run it in a pty!). There's no need to relabel the tty when
+	copying files. Get the path to sesh from sudo.conf.
+
+	Currently, for SELinux RBAC, the editor runs with the target user's
+	security context. This defeats the purpose of sudoedit. Fixing that
+	requires passing file descriptors between the main sudo process
+	(running with the invoking user's security context) and sesh
+	(runnning with the target user's security context).
+	[81c9ec600894]
+
+	* MANIFEST, src/Makefile.in, src/copy_file.c, src/sesh.c,
+	src/sudo_edit.c, src/sudo_exec.h:
+	Refactor the sudoedit code to copy files so it can be shared. The
+	SELinux sudoedit code now extends the destination file the same way
+	the non-SELinux version does.
+	[82c44299309e]
+
+	* src/sudo_edit.c:
+	Do not remove sudoedit temporary files if we cannot overwrite the
+	real file. The warning message says the files were preserved but
+	they actually got removed.
+	[685f2de6bb2e]
+
+	* include/compat/glob.h, lib/util/glob.c:
+	Make gl_pathc, gl_matchc and gl_offs size_t in glob_t to match
+	POSIX.
+	[c3586082d3ea]
+
+	* scripts/pp:
+	Only remove the systemd unit service file if we copied it manually.
+	If the service file was installed as part of the package it will be
+	removed automatically when the package is uninstalled.
+	[e98e1493c5bf]
+
+2020-04-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrv.proto.man.in, doc/sudo_logsrv.proto.mdoc.in:
+	Document TLS settings in ServerHello
+	[22ae16f41585]
+
+2020-04-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_edit.c:
+	Extend the original file before to the new size before updating it.
+	Instead of opening the original file for writing w/ tuncation, we
+	first extend the file with zeroes (by writing, not seeking), then
+	overwrite it. This should allow sudo to fail early if the disk is
+	out of space before it overwrites the original file.
+	[aef4db03e9e1]
+
+	* src/sudo.c:
+	I/O log plugins should be closed *before* the policy plugin, not
+	after.
+	[dec6fccf63d4]
+
+	* plugins/sudoers/set_perms.c:
+	Fix typo
+	[82b0efbb6c26]
+
+	* plugins/sudoers/iolog.c:
+	Only display error string once on I/O error. We already include the
+	error string in the format so no need to use errno too.
+	[59795855d6a2]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/policy.c:
+	Free passwd and group caches in I/O plugin after log_warning(), not
+	before. The logging functions may try to use the cache via
+	set_perms(PERM_ROOT).
+	[652b925b9658]
+
+2020-04-17  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c:
+	add missing shudown of TLS connection
+	[14b25a0f4f6b]
+
+2020-04-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo-logsrvd.pp, scripts/pp:
+	Disable systemd support on Linux systems that don't use it.
+	[3c01c91dbfb2]
+
+2020-04-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	1.9.0 final
+	[acf3b4592384]
+
+	* etc/sudo-logsrvd.pp, scripts/pp:
+	Update PolyPkg from my branch with systemd support.
+	[a7a487496209]
+
+2020-04-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/example_conversation.py,
+	plugins/python/example_io_plugin.py, plugins/python/regress/testdata
+	/check_example_io_plugin_fails_with_python_backtrace.stdout:
+	If the signal.Signals enum is not present, search the dictionary.
+	The Signals enum was added in Python 3.5. If it is not present we
+	need to iterate over the dictionary items, looking for signal name
+	to number mappings. Fixes the signal tests with Python 3.4.
+	[22811794ed46]
+
+	* plugins/python/regress/check_python_examples.c,
+	plugins/python/sudo_python_module.c:
+	Python dictionaries are sparse so we cannot use pos as an index.
+	When converting sudo options from a dictionary to a tuple we need to
+	track the current index into the tuple separately from the position
+	of the dictionary entry.
+	[07cb8a0c7f21]
+
+2020-04-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo-logsrvd.pp:
+	Fix handling of /etc/sudo_logsrvd.conf in the sudo-logsrvd package.
+	For rpm and deb we include the file directly and mark it volatile.
+	For all others we copy it in the postinstall script from the example
+	dir if the file doesn't already exist.
+	[83264a96b923]
+
+	* scripts/mkpkg:
+	Check for the Sun Studio C compiler on Solaris under /opt. Also
+	intialize with_python to false.
+	[52e28d55f9a6]
+
+	* po/sudo.pot:
+	regen
+	[faaacb7777d4]
+
+	* lib/util/parseln.c:
+	Explicitly include stdio.h for getdelim(3)
+	[3b0bff3ef388]
+
+	* logsrvd/logsrvd.c:
+	Reload sudo.conf upon SIGUP This makes it possible to update the
+	Debug settings in sudo.conf and have them take effect on reload.
+	[9fb7baf9a3ad]
+
+	* logsrvd/logsrvd.c, logsrvd/sendlog.c,
+	plugins/sudoers/iolog_client.c:
+	Store the result of ERR_get_error() so we can use it for both warn
+	and debug. Otherwise, only the debug framework gets the actual error
+	and the user won't see the problem.
+	[039565f16d13]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	Disable IPv4-mapped IPv6 addresses in the listener. Also store the
+	host + port string and use it in error messages.
+	[3fbac477ef6b]
+
+	* configure, configure.ac, examples/Makefile.in:
+	Install the example sudo_logsrvd.conf unless one already exists
+	[89c41b936c44]
+
+2020-04-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* examples/sudo_logsrvd.conf:
+	Make the path to logsrvd_cert.pem match the documentation.
+	[b2a45e7c9cdb]
+
+	* etc/sudo-logsrvd.pp, logsrvd/logsrvd.c:
+	Create the pid file parent directory if it doesn't already exist.
+	Also package the run directory in the sudo_logsrvd PolyPkg file.
+	[ac8b573e8545]
+
+	* configure, configure.ac:
+	Sudo 1.9.0rc1
+	[7d437646afc2]
+
+	* MANIFEST:
+	Include all python plugin files in MANIFEST, not the directory
+	itself.
+	[4aa09dd70b9e]
+
+	* plugins/python/example_approval_plugin.py,
+	plugins/python/example_audit_plugin.py,
+	plugins/python/example_group_plugin.py,
+	plugins/python/example_io_plugin.py,
+	plugins/python/example_policy_plugin.py, plugins/python/regress/test
+	data/check_example_io_plugin_fails_with_python_backtrace.stdout:
+	Avoid using typing annotations so tests run with Python 3.4.
+	[88b7048bc4a6]
+
+	* plugins/python/python_plugin_common.c, plugins/python/regress/testda
+	ta/check_loading_fails_missing_classname.stderr:
+	Sort the list of possible plugins before printing it. This gives
+	more reproducible error messages for the tests.
+	[ea33f4970268]
+
+	* plugins/python/regress/iohelpers.h, plugins/python/regress/testdata/
+	check_example_group_plugin_is_able_to_debug.log, plugins/python/regr
+	ess/testdata/check_example_io_plugin_command_log.stored, plugins/pyt
+	hon/regress/testdata/check_example_io_plugin_command_log_multiple1.s
+	tored, plugins/python/regress/testdata/check_example_io_plugin_comma
+	nd_log_multiple2.stored, plugins/python/regress/testdata/check_examp
+	le_io_plugin_failed_to_start_command.stored, plugins/python/regress/
+	testdata/check_example_io_plugin_fails_with_python_backtrace.stderr,
+	plugins/python/regress/testdata/check_loading_fails_wrong_path.stder
+	r, plugins/python/regress/testdata/check_multiple_approval_plugin_an
+	d_arguments.stdout, plugins/python/regress/testdata/check_python_plu
+	gins_do_not_affect_each_other.stdout,
+	plugins/python/regress/testhelpers.h:
+	Use regular expressions when matching expected and actual text.
+	[f2562728481a]
+
+	* plugins/python/regress/iohelpers.h, plugins/python/regress/testdata/
+	check_example_debugging_c_calls@info.log, plugins/python/regress/tes
+	tdata/check_example_debugging_plugin@info.log,
+	plugins/python/regress/testhelpers.c:
+	Use regex to match __init__.py instead of hacking it in
+	verify_log_lines()
+	[8bf71289e585]
+
+	* plugins/python/pyhelpers.c, plugins/python/python_plugin_common.c,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/iohelpers.c,
+	plugins/python/regress/plugin_approval_test.py, plugins/python/regre
+	ss/testdata/check_example_debugging_c_calls@diag.log, plugins/python
+	/regress/testdata/check_example_debugging_c_calls@info.log, plugins/
+	python/regress/testdata/check_example_debugging_py_calls@diag.log, p
+	lugins/python/regress/testdata/check_example_debugging_py_calls@info
+	.log, plugins/python/regress/testdata/check_example_policy_plugin_va
+	lidate_invalidate.log, plugins/python/regress/testdata/check_loading
+	_fails_wrong_classname.stderr, plugins/python/regress/testdata/check
+	_multiple_approval_plugin_and_arguments.stdout,
+	plugins/python/regress/testhelpers.h:
+	Make most python tests pass with Python 3.4 Dictionary order is not
+	stable in Python < 3.6 so we need to sort by key to have consistent
+	results. The LogHandler output is also different on older Python
+	versions. Also, don't stop running python tests after the first
+	error.
+	[aaa06cb5fac1]
+
+	* plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c:
+	Increase the maximum delay again for slower systems. Otherwise we
+	may get a spurious test failure.
+	[6660908aa93d]
+
+	* plugins/python/Makefile.in, plugins/sudoers/Makefile.in,
+	scripts/mkdep.pl:
+	Handle dependencies for .h files in the same directory as the
+	source. Fixes missing header dependencies for the sudoers and python
+	plugins.
+	[3109dd5cf61e]
+
+	* etc/sudo.pp:
+	Remove bits for Tru64 kit-style packages
+	[0e9a9580d76c]
+
+	* MANIFEST, Makefile.in, configure, configure.ac, etc/sudo-logsrvd.pp,
+	etc/sudo-python.pp, etc/sudo.pp:
+	Split sudo_logsrvd and the python plugin into their own packages.
+	[9aee8247f0ba]
+
+	* scripts/mkpkg:
+	Build python packages where possible.
+	[7a2b993bb8ac]
+
+2020-04-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Don't pass a NULL submitcwd or ttyname value to the server. It is
+	possible for the cwd and/or tty to be missing. If we send a NULL
+	pointer to the server where it expects a string the AcceptMessage
+	will fail to parse.
+	[4f96d1c6e41c]
+
+	* include/sudo_plugin.h:
+	Disable -Wstrict-prototypes for sudo_hook_fn_t typedef.
+	[15d2a1332865]
+
+	* plugins/python/python_plugin_common.c:
+	Fall back to using Py_Finalize() for Python version < 3.6
+	[e7ad63e57c79]
+
+2020-04-06  Robert Manner  <robert.manner@balabit.com>
+
+	* logsrvd/eventlog.c:
+	logsrvd/eventlog.c: add a newline after each log message for logfile
+	output
+	[457f77b8f3be]
+
+	* lib/iolog/iolog_fileio.c:
+	lib/iolog/iolog_fileio.c: do not call fchown on invalid fd
+
+	Fixes the warning in the log: iolog_write_info_file_json: unable to
+	fchown 0:0 /var/log/...: Bad file descriptor
+	[bccdaf007db8]
+
+	* logsrvd/iolog_writer.c:
+	logsrvd/iolog_writer.c: treat runuid, rungid 0 as valid (usually
+	==root)
+	[5a7c447e9619]
+
+2020-04-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* po/eo.mo, po/eo.po, po/sr.mo, po/sr.po:
+	Updated translations from translationproject.org
+	[6e47dbfdba2c]
+
+2020-04-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* examples/Makefile.in:
+	Install example sudo_logsrvd.conf file
+	[c1c6f4c8119d]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Make it clear in the sudoers grammar that sudoedit needs file args.
+	Debian bug #571621
+	[b6358b602623]
+
+2020-04-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Fixed Debian bugs #571621, #596631 and #669687
+	[6058c1c46739]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in, plugins/sudoers/env.c:
+	Truncate the command args at 4096 chars when formatting
+	SUDO_COMMAND. We have to limit the length of SUDO_COMMAND to avoid
+	getting E2BIG from execve(2) for very long argument vectors. The
+	command's environment also counts against the ARG_MAX limit. Debian
+	bug #596631
+	[ff1fa8e3377f]
+
+	* plugins/sudoers/auth/pam.c:
+	Do not try to delete creds we did not set. If pam_setcred() fails
+	when opening the PAM session, we don't want to call it with
+	PAM_DELETE_CRED when closing the session.
+	[c31039431c46]
+
+2020-04-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/API, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/check.c,
+	plugins/sudoers/sudoers.h:
+	Add a force flag to sudo_auth_cleanup() to force immediate cleanup.
+	This is used for PAM authentication to make sure pam_end() is called
+	via sudo_auth_cleanup() when the user authenticates successfully but
+	sudoers denies the command. Debian bug #669687
+	[98cb9d98f547]
+
+	* plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c:
+	Increase the maximum delay for slower systems. Otherwise we may get
+	a spurious test failure.
+	[e4c1fffd427c]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in:
+	Document when cwd_optional was added.
+	[165447e1d7fa]
+
+2020-03-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	plugins/sudoers/policy.c, src/exec.c, src/sudo.c, src/sudo.h:
+	Add cwd_optional to command details and enable it in the sudoers
+	plugin. If cwd_optional is set to true, a failure to set the cwd
+	will be a warning, not an error, and the command will still run.
+	Debian bug #598519
+	[a6694704d92f]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in:
+	The policy close function is responsible for closing the PAM
+	session.
+	[db4af211ff75]
+
+	* .clang-format:
+	Config file for clang-format 8.x and higher based on webkit style.
+	This approximates what I want the sudo coding style to look like.
+	Only deviations from webkit style are included.
+	[d3ec3a8401cf]
+
+	* src/exec_pty.c:
+	Don't kill the command just because the loop exited unexpectedly. We
+	currently have no good way to distinguish between an error executing
+	the command and an error while the command is running.
+
+	In the future, we should have additional status codes so we can tell
+	what type of condition caused the loop to exit.
+
+	For now, only kill the command if cstat is left uninitialized.
+	[9492d60783fe]
+
+2020-03-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c:
+	Write process ID as an unsigned int (with a cast). On Solaris, pid_t
+	may be typedef'd as a long but the actual range is 32 bits at most.
+	[b9a818d77142]
+
+	* doc/LICENSE:
+	Add license info for a few other files. These are all ISC licensed
+	but it is still best to have them all listed in one place.
+	[dd37dc484ea5]
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po,
+	plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/ca.mo,
+	po/ca.po, po/cs.mo, po/cs.po, po/de.mo, po/de.po, po/eo.mo,
+	po/eo.po, po/fi.mo, po/fi.po, po/fr.mo, po/fr.po, po/hr.mo,
+	po/hr.po, po/it.mo, po/it.po, po/ja.mo, po/ja.po, po/ko.mo,
+	po/ko.po, po/nb.mo, po/nb.po, po/pl.mo, po/pl.po, po/pt.mo,
+	po/pt.po, po/pt_BR.mo, po/pt_BR.po, po/sv.mo, po/sv.po, po/tr.mo,
+	po/tr.po, po/uk.mo, po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo,
+	po/zh_CN.po, po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[58d62352abff]
+
+	* lib/util/getusershell.c, lib/util/host_port.c, lib/util/roundup.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrv_util.c,
+	logsrvd/logsrv_util.h, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, logsrvd/sendlog.c, logsrvd/sendlog.h,
+	plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h:
+	Some new source files got created with my old email address.
+	[ede435f55f5c]
+
+	* .gitignore, .hgignore:
+	Ignore __pycache__ directories.
+	[5901cfb35a74]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_util.c, logsrvd/sendlog.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoreplay.c:
+	iolog_parse_loginfo() now opens the log file itself.
+	[bf03f505fc94]
+
+	* include/sudo_iolog.h, lib/iolog/Makefile.in,
+	lib/iolog/iolog_fileio.c, lib/iolog/iolog_util.c,
+	logsrvd/eventlog.c, logsrvd/iolog_writer.c, logsrvd/logsrvd.h,
+	logsrvd/sendlog.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/iolog.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoreplay.c:
+	Write an extended I/O info log in JSON format. This will be used by
+	sudoreplay if it exists to get more information about the command
+	being replayed.
+	[5fc89148c214]
+
+	* MANIFEST, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	include/sudo_iolog.h, lib/iolog/Makefile.in, lib/iolog/iolog_json.c,
+	lib/iolog/iolog_util.c, plugins/sudoers/sudoreplay.c:
+	Parse I/O JSON info file in JSON if present. The JSON version
+	includes more information than the original "log" file in the I/O
+	log dir.
+	[269ae210ea34]
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrvd.h:
+	Store runenv in the I/O log info file too.
+	[15f90fb3748f]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c:
+	Create files for check_iolog_plugin in the build dir, not src dir.
+	[bdaea95b47fc]
+
+	* include/sudo_json.h, lib/iolog/iolog_fileio.c, lib/util/json.c,
+	logsrvd/eventlog.c, logsrvd/iolog_writer.c, logsrvd/logsrvd.h,
+	plugins/audit_json/audit_json.c:
+	Do not use JSON_ARRAY with sudo_json_add_value()
+	[c74b75adb90f]
+
+	* MANIFEST, lib/iolog/Makefile.in, lib/iolog/iolog_json.c,
+	lib/iolog/iolog_json.h,
+	lib/iolog/regress/iolog_json/check_iolog_json.c,
+	lib/iolog/regress/iolog_json/test1.in,
+	lib/iolog/regress/iolog_json/test2.in,
+	lib/iolog/regress/iolog_json/test2.out.ok,
+	lib/iolog/regress/iolog_json/test3.in, lib/util/json.c:
+	Add tests for the simple json parser.
+	[9ede5000f4c7]
+
+	* lib/iolog/iolog_json.c:
+	Simply the JSON parsing code a bit. We can use a single stack for
+	nested objects and arrays. There is also no need to track the
+	current object and array separately. This allows us to remove the
+	array special case when assigning a value.
+	[4a34e528d9f0]
+
+	* NEWS:
+	Update NEWS for 1.9.0b5 changes
+	[bf8db62788d3]
+
+	* logsrvd/logsrvd.c:
+	sudo_logsrvd now exits with an error if it cannot open any listen
+	sockets.
+	[47a22f71e286]
+
+	* configure, doc/sudo_logsrvd.conf.man.in,
+	doc/sudo_logsrvd.conf.mdoc.in, doc/sudo_logsrvd.man.in,
+	doc/sudo_logsrvd.mdoc.in, examples/sudo_logsrvd.conf,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	m4/sudo.m4, pathnames.h.in:
+	Create a pidfile for sudo_logsrvd when not run with the -n flag.
+	[9f1b8edff6cc]
+
+	* etc/sudo.pp:
+	Add sudo_logsrvd as a service so it gets started at boot.
+	[d2ac9eb87dbf]
+
+	* plugins/sudoers/po/sudoers.pot:
+	Update sudoers.pot with json parser warnings.
+	[2b277f799d2e]
+
+2020-03-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* scripts/mkpkg:
+	Enable OpenSSL on systems that can support it.
+	[976370b9d9db]
+
+2020-03-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, logsrvd/logsrvd.c:
+	Add configure check for SSL_CTX_get0_certificate(). Dummy out
+	verify_server_cert() if it is not present to allow building on older
+	OpenSSL versions. Rewriting this to work with old OpenSSL is not
+	worth the trouble.
+	[61349d2533fe]
+
+	* lib/iolog/hostcheck.c:
+	Include stdlib.h for malloc(3) prototype. We shouldn't rely on it to
+	be implicitly included via OpenSSL headers.
+	[9f4f7d3d3662]
+
+2020-03-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c:
+	Only set errstr for plugin API version 1.15 and above.
+	[780722091e9f]
+
+2020-03-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Sudo 1.8.31p1
+	[40629e6fd692]
+
+	* src/limits.c:
+	Ignore a failure to restore the RLIMIT_CORE resource limit. Linux
+	containers don't allow RLIMIT_CORE to be set back to RLIM_INFINITY
+	if we set the limit to zero, even for root. This is not a problem
+	outside the container.
+	[1064b906ca68]
+
+2020-03-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[72ca06a294b4]
+
+	* include/sudo_event.h, lib/util/event.c:
+	Add SUDO_EV_MASK to mask off invalid event values. Now used by
+	sudo_ev_init() to avoid bogus events.
+	[10a5d1afa1c9]
+
+2020-03-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/python/regress/iohelpers.c,
+	plugins/python/regress/testhelpers.c:
+	Avoid using sprintf(), vsprintf(), strcat(), and strncat(). It is
+	less error-prone to use functions with a return value that indicates
+	when truncation ocurred.
+	[21938a3b1548]
+
+	* plugins/sudoers/match_digest.c:
+	Work around two Coverity false positives; CID 208813 208815
+	[389bf3749ed2]
+
+	* logsrvd/logsrvd.c:
+	Fix potential use-after-free; Coverity CID 208814
+	[e575532efe35]
+
+	* plugins/python/regress/iohelpers.h, plugins/python/regress/testdata/
+	check_example_debugging_c_calls@info.log, plugins/python/regress/tes
+	tdata/check_example_debugging_plugin@info.log,
+	plugins/python/regress/testhelpers.c:
+	Don't hard-code path to logging/__init__.py or line numbers. Allows
+	python plugin tests to success on versions other than 3.7.
+	[659d3d3fcb8b]
+
+	* doc/LICENSE:
+	Add copyright for the Python bindings.
+	[cc64df1f85f2]
+
+	* plugins/sudoers/match_command.c:
+	Fix typo introduced on systems with O_PATH or O_EXEC
+	[e8fea3eabf99]
+
+	* NEWS:
+	Update for sudo 1.9.0
+	[39158cb4af26]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/match.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/regress/sudoers/test14.in,
+	plugins/sudoers/regress/sudoers/test14.json.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test14.out.ok,
+	plugins/sudoers/regress/sudoers/test14.toke.ok,
+	plugins/sudoers/sudoers_version.h:
+	Allow the ALL keyword to be specified with a digest list.
+	[9856ed3cde7f]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_command.c, plugins/sudoers/match_digest.c,
+	plugins/sudoers/parse.h, plugins/sudoers/regress/sudoers/test14.in,
+	plugins/sudoers/regress/sudoers/test14.json.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test14.out.ok,
+	plugins/sudoers/regress/sudoers/test14.toke.ok,
+	plugins/sudoers/sudo_ldap.h:
+	Allow a list of digests to be specified for a command.
+	[e0e9ecee870b]
+
+	* plugins/sudoers/ldap_util.c, plugins/sudoers/parse_ldif.c:
+	A struct member of type ALL should have its name field set to NULL.
+	[484b9af004af]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Allow Cmd_Alias in addition to Cmnd_Alias. Some people find using
+	Cmd_Alias more natural.
+	[55edb5057091]
+
+2020-03-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c:
+	Add pam_ruser and pam_rhost sudoers flags.
+	[b1d494440004]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/sendlog.c,
+	logsrvd/sendlog.h:
+	Store the event base in the client closure. Explicitly passing the
+	event base removes the need to set a default base.
+	[0e4ae8d810f8]
+
+	* plugins/sudoers/iolog.c:
+	Revert change to initialize io_operations earlier. Instead, check
+	io_operations.open for NULL which is the case for "sudo -V". Also
+	move the early return in sudoers_io_open() for "sudo -V" until after
+	we have initialized debugging.
+	[0e9e7a99725d]
+
+2020-02-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog.c:
+	Initialize io_operations earlier.
+	[ab235d88f8ae]
+
+2020-02-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Mark up some remaining TODOs
+	[847c9328a7b5]
+
+	* src/conversation.c:
+	Sudo's -S option should override the SUDO_CONV_PREFER_TTY flag.
+	[f5737b68c0bf]
+
+	* plugins/python/pyhelpers.c, plugins/python/python_plugin_policy.c,
+	plugins/python/sudo_python_module.c:
+	Use C99 __func__ instead of gcc-specific __PRETTY_FUNCTION__
+	[db4f5d7c200e]
+
+2020-02-27  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/example_debugging.py, plugins/python/regress/testdata
+	/check_example_debugging_c_calls@diag.log, plugins/python/regress/te
+	stdata/check_example_debugging_c_calls@info.log, plugins/python/regr
+	ess/testdata/check_example_debugging_plugin@err.log, plugins/python/
+	regress/testdata/check_example_debugging_plugin@info.log:
+	plugins/python/regress: add a test and example of using the python
+	logger
+	[ed23b3ba375f]
+
+	* MANIFEST, doc/sudo_plugin_python.man.in,
+	doc/sudo_plugin_python.mdoc.in, plugins/python/Makefile.in,
+	plugins/python/python_baseplugin.c,
+	plugins/python/python_convmessage.c,
+	plugins/python/python_importblocker.c,
+	plugins/python/python_loghandler.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/sudo_python_module.c,
+	plugins/python/sudo_python_module.h:
+	plugins/python/sudo_module: add sudo.LogHandler
+
+	so python log system can be used with sudo logsystem. Loggers use it
+	by default (the handler is set on the root logger). If that is not
+	the intent, it can be overridden explicitly.
+	[45b8902ce188]
+
+2020-02-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL, Makefile.in, config.h.in, configure, configure.ac,
+	lib/iolog/iolog_fileio.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h, plugins/sudoers/sudoers.c:
+	Add --disable-log-server and --disable-log-client configure options.
+	These can be used to optionally disable building sudo_logsrvd and
+	support for remote I/O logging in the sudoers plugin respectively.
+	[bc802e022f22]
+
+2020-02-26  Robert Manner  <robert.manner@balabit.com>
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in,
+	plugins/python/python_plugin_common.c,
+	plugins/python/regress/check_python_examples.c, plugins/python/regre
+	ss/testdata/check_loading_fails_missing_classname.stderr, plugins/py
+	thon/regress/testdata/check_loading_succeeds_with_missing_classname.
+	stdout:
+	plugins/python: autodetect ClassName field
+
+	If "ClassName" is not specified, load the one and only sudo.Plugin
+	from the module (if so), otherwise display which plugins are
+	available from which the system admin can choose.
+	[b9dbbf1b6e97]
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in,
+	plugins/python/Makefile.in, plugins/python/python_plugin_common.c:
+	plugins/python/plugin_common: add a default search path for python
+	plugins
+
+	If the ModulePath is relative, assume it is under
+	"/usr/local/libexec/sudo/python" or wherever the sudo plugins are in
+	a "python" subdirectory.
+	[5f75db882754]
+
+	* plugins/python/regress/check_python_examples.c, plugins/python/regre
+	ss/testdata/check_example_audit_plugin_version_display.stdout, plugi
+	ns/python/regress/testdata/check_example_debugging_py_calls@info.log
+	, plugins/python/regress/testdata/check_example_io_plugin_version_di
+	splay_full.stdout, plugins/python/regress/testdata/check_example_pol
+	icy_plugin_version_display_full.stdout, plugins/python/regress/testd
+	ata/check_multiple_approval_plugin_and_arguments.stdout:
+	plugins/python/regress: update tests for show_version changes
+
+	- plugin->show_version is not marked NULL any more.
+	- if verbose, it also displays which python class was loaded from
+	which file
+	[e30a1e43e3c2]
+
+	* plugins/python/python_plugin_approval.c,
+	plugins/python/python_plugin_audit.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python: make show_version display the plugin in verbose mode
+
+	Before it only displayed the plugin version, now it also displays
+	which python plugin is loaded to be more useful.
+	[8c94175ead70]
+
+	* plugins/python/python_plugin_approval.c,
+	plugins/python/python_plugin_common.c:
+	plugins/python/approval: fix show_version crash when it is not
+	implemented
+
+	For approval plugins show_version is not optional.
+	[61f6b4679d6b]
+
+2020-02-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
+	Avoid calling sudoers_policy_exec_setup() on error. We only want to
+	pass the execution environment back for commands that are accepted
+	or rejected. Also avoid potentially freeing the wrong pointer when
+	garbage collection is enabled.
+	[a3a202e89951]
+
+2020-02-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/eventlog.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	Open event log at config time instead of open/close for each entry.
+	If logging via syslog, do the openlog() at config time instead. We
+	still lock the log file prior to writing to it but unlock
+	immediately after.
+	[3236bd001160]
+
+	* lib/util/locking.c:
+	Fix unlocking of an entire file with lockf(). Since lockf() uses the
+	files's current offset, we need to seek to the start of the file to
+	unlock the entire file.
+	[e415af1de6ca]
+
+2020-02-21  Robert Manner  <robert.manner@balabit.com>
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	doc/sudo_plugin_python: add approval plugin to supported plugins
+	[5034917e6902]
+
+2020-02-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/util.exp.in:
+	Add sudo_json_free_v1 to symbol exports file too.
+	[0a91a2986952]
+
+	* lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Regenerate dependencies to match the recent JSON changes.
+	[5da86c77629c]
+
+	* plugins/python/python_convmessage.c:
+	Add missing check for calloc(3) failure.
+	[589c32ff2cf1]
+
+2020-02-19  Robert Manner  <robert.manner@balabit.com>
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	doc/sudo_plugin_python: document approval plugin and PluginReject
+	[9e61203dcb8d]
+
+	* plugins/python/sudo_python_module.c:
+	plugins/python/sudo_python_module.c: remove unused declaration
+
+	We do not use structsequence any more.
+	[a5570ba5ad8b]
+
+2020-02-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Re-register listeners on SIGHUP. Previously, a config reload would
+	refresh the listener address list but the changes had no effect on
+	the actual addresses being listened on.
+	[c1c0ada6c594]
+
+	* logsrvd/logsrvd.c:
+	Fix compilation error when not built with OpenSSL support. Adds a
+	missing #ifdef HAVE_OPENSSL and reorders code to avoid the need for
+	a static init_tls_server_context() prototype.
+	[976c469eeb57]
+
+2020-02-18  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_plugin_common.c:
+	plugins/python: restore the original python inittab after
+	interpreter deinit
+	[b78a5d995de9]
+
+2020-02-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	include/sudo_json.h, lib/util/json.c, logsrvd/eventlog.c:
+	Add support for JSON structured logging using syslog. Note that
+	depending on the system, the default syslog buffer may not be large
+	enough to store all the logging data.
+	[15a6667b1198]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	examples/sudo_logsrvd.conf, logsrvd/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c:
+	Add support for JSON logging in sudo_logsrvd.
+	[8b013b899e3b]
+
+	* include/sudo_json.h, lib/util/json.c, lib/util/util.exp.in,
+	plugins/audit_json/audit_json.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/regress/sudoers/test10.json.ok,
+	plugins/sudoers/regress/sudoers/test9.json.ok:
+	Rework the JSON API to write to a memory buffer, not a stdio stream.
+	[ec4e4053e95e]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c:
+	Fix support for reloading the config in sudo_logsrvd. We need to re-
+	initialize the TLS server context. Also fix a memory leak of the TLS
+	parameters on reload.
+	[c4ca45502f3e]
+
+2020-02-17  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/pyhelpers.c, plugins/python/pyhelpers.h,
+	plugins/python/python_plugin_common.c,
+	plugins/python/regress/check_python_examples.c, plugins/python/regre
+	ss/testdata/check_example_debugging_load@diag.log,
+	plugins/python/regress/testhelpers.c:
+	plugins/python: only deinit interpreters when sudo unlinks the
+	plugin
+
+	This only happens when sudo unloads the last python plugin. The
+	reason doing so is because there are some python modules which does
+	not support importing them again after destroying the interpreter
+	which has imported them previously.
+
+	Another solution would be to just leak the interpreters (let the
+	kernel free up), but then there might be some python resources like
+	open files would not get cleaned up correctly if the plugin is badly
+	written.
+
+	Tests are meant to test the scenario sudo does, so I have modified
+	them to generally do not unlink but only a few times (~per plugin
+	type) so it does not use 48 interpreters (one gets started on every
+	plugin->open) and it is visible at least which type of plugin fails
+	deinit if there is an error.
+	[13cdead652aa]
+
+	* plugins/python/python_plugin_common.c,
+	plugins/python/sudo_python_debug.c:
+	plugins/python/debug: adapt debug refcount solution of sudoers
+	plugin
+	[dc815e383c39]
+
+2020-02-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	The environment in the accept message is runenv not submitenv. The
+	I/O logging plugin is passed the environment the command will run
+	with, not the user's original environment.
+	[b3e1ee513001]
+
+2020-02-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_compat.h, lib/iolog/iolog_fileio.c,
+	plugins/audit_json/audit_json.c, src/utmp.c:
+	Add compatibility define for fseeko(3). This is better than
+	cluttering up the code with #ifdefs for obsolete systems.
+	[a9123f768fe0]
+
+2020-02-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test8.out.ok,
+	plugins/sudoers/regress/testsudoers/test8.sh:
+	Add test for #include directive without a trailing newline.
+	[dfcfad5c7c41]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Don't require a newline at the end of include or includedir
+	directives.
+	[3d6aa5531609]
+
+2020-02-14  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/regress/testhelpers.c:
+	plugins/python/regress/testhelpers.c: replace fromisoformat
+
+	fromisoformat is only supported from python >=3.7
+	[86bf6de82376]
+
+2020-02-13  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_plugin_common.h,
+	plugins/python/sudo_python_module.c:
+	plugins/python: add missing annotations to help cpychecker
+	[fd66659bd681]
+
+	* plugins/python/python_plugin_common.c:
+	plugins/python/python_plugin_common.c: release py_args in close
+
+	even if the arguments are not used (eg. when there is no "close"
+	call in the plugin).
+
+	It was not really a memleak, because interpreter is deinitialized
+	anyway, which frees the object.
+	[5de8c111d40d]
+
+	* plugins/python/python_plugin_approval.c:
+	plugins/python/python_plugin_approval: fix negative ref count
+
+	The python_plugin_api_rc_call function already decrements the
+	refcount of py_args. Python avoids the double free, but the error
+	gets shown if using python debug build.
+	[4370af5b9092]
+
+2020-02-12  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/regress/check_python_examples.c:
+	plugins/python/regress: still some memleak fix
+	[c60050b79a5e]
+
+	* plugins/python/python_plugin_audit.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python: make storing errstr more explicit
+
+	The error is always stored in plugin_ctx, but it is only set into
+	errstr if the API version is enough. (Previously it worked the
+	opposite: we only stored the error if API level was enough.)
+	[5b4fa733c876]
+
+	* plugins/python/regress/check_python_examples.c:
+	plugins/python/regress: strengthen errstr verification
+
+	Tests did not catch the issue where errstr was not set correctly,
+	but its pointer contained the expected data, because the memory
+	allocator reused the same space for storing the string.
+
+	Now it is either verified to be NULL, or reset to NULL.
+	[973e52ed3f68]
+
+	* plugins/python/regress/check_python_examples.c:
+	plugins/python/regress: simplify plugin option creation
+	[628142f39c63]
+
+2020-02-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c, lib/util/util.exp.in,
+	plugins/audit_json/audit_json.c, plugins/python/sudo_python_debug.c,
+	plugins/sample_approval/sample_approval.c,
+	plugins/sudoers/sudoers_debug.c:
+	Move duplicated code to parse plugin debug flags to libsudo_util.
+	There's no need for four copies of sudo_debug_parse_flags().
+	[cfd9d624d8b1]
+
+2020-02-11  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_plugin_common.c,
+	plugins/python/sudo_python_module.c,
+	plugins/python/sudo_python_module.h:
+	plugins/python/sudo_module: let a reject also supply error message
+
+	Same as sudo.PluginError exception, have a sudo.PluginReject
+	exception as well. Added common base exception as well.
+	[e2e36f4778d4]
+
+	* plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/plugin_approval_test.py, plugins/python/regre
+	ss/testdata/check_multiple_approval_plugin_and_arguments.stderr, plu
+	gins/python/regress/testdata/check_multiple_approval_plugin_and_argu
+	ments.stdout, plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h:
+	plugins/python/regress: add tests for approval plugin
+	[31bd830a36fa]
+
+	* MANIFEST, plugins/python/Makefile.in,
+	plugins/python/python_plugin_approval.c,
+	plugins/python/python_plugin_approval_multi.inc,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/sudo_python_module.c:
+	plugins/python: add python approval plugin wrapper
+	[489ef35ac957]
+
+	* MANIFEST, plugins/python/Makefile.in,
+	plugins/python/example_approval_plugin.py:
+	plugins/python: add python approval plugin example
+	[4ed865e04c0a]
+
+2020-02-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test23.in,
+	plugins/sudoers/regress/sudoers/test23.json.ok,
+	plugins/sudoers/regress/sudoers/test23.ldif.ok,
+	plugins/sudoers/regress/sudoers/test23.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test23.out.ok,
+	plugins/sudoers/regress/sudoers/test23.sudo.ok,
+	plugins/sudoers/regress/sudoers/test23.toke.ok:
+	Add regress test for parsing Defaults lists. Currently only
+	env_check, env_delete, env_keep and log_servers are lists.
+	[dfda2dec37d3]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in:
+	Clarify that approval close happens after auditing. Also fix a few
+	typos.
+	[8f9fb2f0b5a7]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, plugins/sample_approval/sample_approval.c,
+	src/sudo.c:
+	Add open and close functions to the approval plugin API. We need a
+	close function to be able to to free memory allocated for errstr.
+	Unlike the other plugins, the close function is called immediately
+	after the plugin's check or show_version function. The plugin does
+	not remain open until the command completes.
+	[6611bafc8ace]
+
+	* plugins/audit_json/audit_json.c:
+	Use unique function names to avoid confusion with front-end
+	functions. Also add a missing sudo_debug_enter() after debug
+	registration.
+	[b127b0997ecb]
+
+	* scripts/log2cl.pl:
+	Use Text::Wrap instead of perl's built-in format function. This
+	still breaks log filename incorrectly but is a step in the right
+	direction.
+	[2184fe794ecb]
+
+	* Makefile.in, scripts/log2cl.pl:
+	Avoid changing directory when generating the ChangeLog file.
+	Instead, pass the repo path to either hg or log2cl.pl
+	[736e90c9fe6d]
+
+2020-02-10  Robert Manner  <robert.manner@balabit.com>
+
+	* src/sudo.c:
+	src/sudo.c: call audit plugin close when result is a wait status
+	[0bfe6bc588a3]
+
+	* Makefile.in:
+	Makefile.in: fix install target for out of source build
+
+	The scriptdir contained a path relative to where the target was
+	started. The scripts are called like "$scriptdir/script_name" which
+	is fine with relative path as well, until the current directory is
+	not changed. But things like cd $srcdir && $scriptdir/script_name
+	fails (if building in separate build directory).
+	[7c0958b47925]
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	doc/sudo_plugin_python: document python audit plugin support
+	[2a2f6227bae0]
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	doc/sudo_plugin_python: document returning error string
+	[cf32faa3805f]
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	doc/sudo_plugin_python: update python manual for constant -> enum
+	changes
+	[e2cd8737978c]
+
+2020-02-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/util/mksiglist.c, lib/util/mksigname.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/getdelim/getdelim_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c, logsrvd/logsrvd.c,
+	logsrvd/sendlog.c, plugins/group_file/plugin_test.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/logging.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/tsdump.c, plugins/sudoers/visudo.c, src/exec.c,
+	src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c,
+	src/parse_args.c, src/regress/noexec/check_noexec.c:
+	Use EXIT_SUCCESS and EXIT_FAILURE more consistently.
+	[1b78154a35f3]
+
+	* src/parse_args.c, src/sudo.c, src/sudo.h:
+	Mark main sudo usage() function __noreturn__. This splits the usage
+	printing out into display_usage().
+	[400d23c2a6f1]
+
+	* include/sudo_json.h, lib/util/json.c, lib/util/util.exp.in,
+	plugins/sudoers/cvtsudoers_json.c:
+	Use json functions from libsudo_util in cvtsudoers.
+	[c4316ce76fe6]
+
+2020-02-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sample_approval/sample_approval.c:
+	Check localtime() return value; coverity CID 208156
+	[e2697b46f7e2]
+
+	* plugins/audit_json/audit_json.c:
+	Check fseeko() return value; coverity CID 207993
+	[3abd610ae63b]
+
+	* logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Make restart and elapsed members of the closure structs not
+	pointers. Fixes coverity CID 207992
+	[2dbace19cb6a]
+
+	* lib/iolog/iolog_fileio.c:
+	Check return value of sudo_lock_file(); coverity CID 207991
+	[e2862d70dea8]
+
+	* logsrvd/logsrvd.c:
+	Only keepalive if accept() succeeded; coverity CID 207990
+	[0c35e46495a2]
+
+2020-02-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	generate_test_coverage.sh, include/Makefile.in,
+	lib/iolog/Makefile.in, lib/logsrv/Makefile.in, lib/util/Makefile.in,
+	lib/zlib/Makefile.in, log2cl.pl, logsrvd/Makefile.in, mkdep.pl,
+	mkinstalldirs, mkpkg, plugins/audit_json/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_approval/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in, pp,
+	scripts/generate_test_coverage.sh, scripts/log2cl.pl,
+	scripts/mkdep.pl, scripts/mkinstalldirs, scripts/mkpkg, scripts/pp,
+	src/Makefile.in:
+	Move some scripts from the top level src dir to a scripts dir.
+	[0be8e958cbc2]
+
+	* MANIFEST, plugins/sample_approval/Makefile.in,
+	plugins/sample_approval/sample_approval.c,
+	plugins/sample_approval/sample_approval.exp:
+	Add sample approval plugin that simply tests for "business hours"
+	[8005b14fd0c7]
+
+	* Makefile.in, configure, configure.ac:
+	Add sample approval plugin that simply tests for "business hours"
+	[9d7370fea2c3]
+
+	* src/load_plugins.c:
+	Refactor code to alloc and insert a new plugin_container. The only
+	outlier is the policy plugin which is not part of a list since there
+	can only be a single policy plugin.
+	[610c6e01eb0b]
+
+	* plugins/audit_json/audit_json.c:
+	Tech audit_json about approval plugin accept/reject
+	[b1e568bacd87]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, src/load_plugins.c, src/sudo.c,
+	src/sudo_plugin_int.h:
+	Add an approval plugin type that runs after the policy plugin. The
+	basic idea is that the approval plugin adds an additional layer of
+	policy. There can be multiple approval plugins.
+	[2b57fac1ad0b]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in:
+	plugin documentation fixes: o whitespace cleanup o show_version
+	doesn't have an errstr argument o document runas_user and
+	runas_group in command_info[] o add missing .El at before start of
+	audit section
+	[73cb9ca71ef7]
+
+2020-02-06  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/sudo_python_module.c:
+	plugins/python/sudo_python_module.c: fix options_as_dict if no equal
+	sign
+
+	The intented behaviour was that those get skipped, but the
+	PyList_GetItem sets the interpreter into error state, so python has
+	raised exception.
+	[4f99dd186eb9]
+
+	* plugins/python/regress/check_python_examples.c, plugins/python/regre
+	ss/testdata/check_example_audit_plugin_receives_accept.stdout, plugi
+	ns/python/regress/testdata/check_example_audit_plugin_receives_error
+	.stdout, plugins/python/regress/testdata/check_example_audit_plugin_
+	receives_reject.stdout, plugins/python/regress/testdata/check_exampl
+	e_audit_plugin_version_display.stdout, plugins/python/regress/testda
+	ta/check_example_audit_plugin_workflow_multiple.stderr, plugins/pyth
+	on/regress/testdata/check_example_audit_plugin_workflow_multiple.std
+	out:
+	plugins/python/regress/check_python_examples: add audit_plugin tests
+	[fcc483a569ff]
+
+	* plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python/python_plugin_common: close can get custom arguments
+
+	For the audit plugin. Ensure we do not fail if
+	plugin_ctx->py_instance is NULL (because plugin init has failed).
+	[dd1c0be3d8e7]
+
+	* plugins/python/example_group_plugin.py,
+	plugins/python/example_io_plugin.py,
+	plugins/python/example_policy_plugin.py, plugins/python/regress/test
+	data/check_example_io_plugin_fails_with_python_backtrace.stdout:
+	plugins/python/example_*.py: document returning error string
+	[ee55ef4a3cb6]
+
+	* plugins/python/example_conversation.py,
+	plugins/python/example_debugging.py,
+	plugins/python/example_group_plugin.py,
+	plugins/python/example_io_plugin.py,
+	plugins/python/example_policy_plugin.py, plugins/python/regress/test
+	data/check_example_debugging_c_calls@info.log, plugins/python/regres
+	s/testdata/check_example_debugging_plugin@info.log, plugins/python/r
+	egress/testdata/check_example_io_plugin_fails_with_python_backtrace.
+	stdout:
+	plugins/python/example*.py: pep8 fixes (mainly line too long)
+	[56b15859cc9a]
+
+2020-02-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/audit_json/audit_json.exp:
+	Exported symbol is audit_json
+	[a39e9cc1047b]
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	Silence lint warning.
+	[fbba7f8dc3ef]
+
+	* plugins/sudoers/policy.c:
+	Add runas_user and runas_group (if set) to command_info for audit
+	plugin. Otherwise, the audit plugin has to look up the runas name
+	and group by user or group ID.
+	[711731384693]
+
+	* src/tgetpass.c:
+	Only enable pwfeedback when reading password from /dev/tty. This
+	effectively disables pwfeedback when the -S or -A options are used.
+	[71da469aab20]
+
+2020-02-05  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/regress/check_python_examples.c:
+	plugins/python/regress: load/unload module for each testcase
+
+	so they can start from clean state. (My problem was optional
+	argument tests has destroyed the callbacks.)
+	[ab90adbb9328]
+
+	* plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/python_plugin_group.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c,
+	plugins/python/sudo_python_module.c,
+	plugins/python/sudo_python_module.h:
+	plugins/python: add support for callback errstr arguments
+
+	Plugins can raise a sudo.PluginError exception to add context
+	message for the failure.
+
+	The callback's errstr gets filled up with the specified message.
+	But, as sudo expects a string constant (will not free the string),
+	we store it in the plugin context at least until next callback
+	invocation.
+	[240bf4c627f0]
+
+	* plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/plugin_errorstr.py:
+	plugins/python/regress: add test for callback error msg return
+	[44a71a20f94c]
+
+	* plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python_plugin_io,policy: fix version display in verbose mode
+
+	Unfortunately the test did not catch this mistake, because it only
+	searches that "Python policy plugin API version" string is present
+	and does not check the version.
+	[7da28d01063f]
+
+2020-02-04  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/example_conversation.py,
+	plugins/python/example_debugging.py,
+	plugins/python/example_group_plugin.py,
+	plugins/python/example_io_plugin.py,
+	plugins/python/example_policy_plugin.py, plugins/python/pyhelpers.c,
+	plugins/python/pyhelpers.h, plugins/python/python_plugin_common.c, p
+	lugins/python/regress/testdata/check_example_debugging_c_calls@diag.
+	log, plugins/python/regress/testdata/check_example_debugging_c_calls
+	@info.log, plugins/python/regress/testdata/check_example_group_plugi
+	n_is_able_to_debug.log, plugins/python/sudo_python_module.c:
+	plugins/python/sudo_python_module.c: use IntEnums instead of
+	constants
+
+	It is a bit more code, but it is more "pythonic" and easier to debug
+	as the enum values also know their names.
+
+	It is also an API break, eg. sudo.RC_OK becomes sudo.RC.OK as
+	sudo.RC will be the "type" of the enum, but I guess that is
+	acceptable before the initial release.
+	[2a0845428e2b]
+
+2020-02-03  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_plugin_policy.c:
+	plugins/python/python_plugin_policy: add missing debug return
+	[2bf4cc35de9c]
+
+2020-02-03  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/sendlog.c:
+	fixed compiler error when sudo is configured without --enable-
+	openssl
+	[fb19fb96c41d]
+
+2020-02-03  Robert Manner  <robert.manner@balabit.com>
+
+	* MANIFEST, plugins/python/Makefile.in,
+	plugins/python/python_plugin_audit.c,
+	plugins/python/python_plugin_audit_multi.inc,
+	plugins/python/sudo_python_module.c:
+	plugins/python: add python audit plugin wrapper
+	[92bf3ccbd35d]
+
+	* MANIFEST, plugins/python/Makefile.in,
+	plugins/python/example_audit_plugin.py:
+	plugins/python: add example python audit plugin
+	[15abd19f6fdb]
+
+2020-02-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_plugin.man.in:
+	Regenerate .man.in files from .mdoc.in
+	[6d04628b3bbb]
+
+	* doc/sudo_plugin.mdoc.in:
+	Update documentation for setbase when the given base is NULL.
+	[03054c46d322]
+
+	* plugins/sudoers/iolog_client.c, src/sudo.c:
+	For plugin events, set the sudo event base for setbase(NULL). This
+	makes it possible for a plugin to change the event base to a local
+	one and then reset it back to its original value.
+	[f95ab1a5fd5a]
+
+2020-02-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Don't display "error in event loop" on loop break reading
+	ServerHello. We should already have displayed a more useful error
+	message. Otherwise, we can get two "error in event loop" warnings if
+	the TLS handshake fails (in addition to other error messages).
+	[c42b8158ab36]
+
+2020-01-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	Read ServerHello message synchronously before the command is
+	executed. Otherwise, the command could be run before the TLS
+	handshake completes.
+	[4dab1676ae41]
+
+2020-01-31  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/pyhelpers.c, plugins/python/pyhelpers.h,
+	plugins/python/python_convmessage.c:
+	plugins/python/pyhelpers: add helpers for attribute handling
+
+	to simplify code a bit.
+	[c3eb52c88a04]
+
+2020-01-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.mdoc.in:
+	Document audit plugin in the sudo_plugin manual.
+	[e2aab376bae1]
+
+	* include/sudo_plugin.h, plugins/audit_json/audit_json.c, src/sudo.c:
+	Change audit close arguments to a type and value. That way we can
+	distinguish between different error types.
+	[37abbe9f39b5]
+
+	* MANIFEST, Makefile.in, configure, configure.ac, m4/sudo.m4,
+	pathnames.h.in, plugins/audit_json/Makefile.in,
+	plugins/audit_json/audit_json.c, plugins/audit_json/audit_json.exp:
+	Example audit plugin that writes JSON output to a log file.
+	[295d9d1a1209]
+
+	* plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_io_multi.inc,
+	plugins/python/python_plugin_policy.c,
+	plugins/python/regress/check_python_examples.c:
+	Adapt python plugin to new plugin API changes
+	[974e76db3a3a]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Pass back a failure or error string to the front end. The
+	audit_failure() function now stores the failure string. This will
+	allow an audit plugin to log the reason if the user's request is a
+	rejected.
+	[5bb4e000a7ec]
+
+	* doc/sudo_plugin.mdoc.in, include/sudo_plugin.h, src/exec_pty.c,
+	src/load_plugins.c, src/parse_args.c, src/sudo.c, src/sudo.h,
+	src/sudo_plugin_int.h:
+	Define a new plugin type that receives accept and reject messages.
+	This can be used to implement logging-only plugins. The plugin
+	functions now take an errstr argument that can be used to return an
+	error string to be logged on failure or error.
+	[361aab49325f]
+
+	* MANIFEST, config.h.in, configure, configure.ac, include/sudo_rand.h,
+	lib/util/arc4random.c, lib/util/arc4random_buf.c:
+	Add tests for arc4random_buf() and an implementation for those
+	without.
+	[e89dabfd5a41]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/util.exp.in, lib/util/uuid.c:
+	Add code to generate universally unique identifiers. We create type
+	4, variant 1 uuids (random).
+	[22aff362662e]
+
+	* MANIFEST, include/sudo_json.h, lib/util/Makefile.in,
+	lib/util/json.c, lib/util/util.exp.in:
+	Add a simple API for writing JSON records. To be used by the
+	upcoming JSON audit module.
+	[734b29194a82]
+
+2020-01-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Sudo 1.8.31 changes.
+	[3d12f4cb4d9f]
+
+	* src/tgetpass.c:
+	Fix a buffer overflow when pwfeedback is enabled and input is a not
+	a tty. In getln() if the user enters ^U (erase line) and the
+	write(2) fails, the remaining buffer size is reset but the current
+	pointer is not. While here, fix an incorrect break for erase when
+	write(2) fails. Also disable pwfeedback when input is not a tty as
+	it cannot work. CVE-2019-18634 Credit: Joe Vennix from Apple
+	Information Security.
+	[4830bdf1a683]
+
+2020-01-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Fix warning about unresolved host name with "sudo -l -h hostname".
+	The resolve_host() function returns 0 on success, not bool.
+	[9af5bb6e4036]
+
+	* configure, configure.ac:
+	Check for presence of fseeko() regardless of utmp type.
+	[d0c254ba8311]
+
+	* plugins/python/regress/check_python_examples.c:
+	Fix typo in a test: python_policy->close not python_io->close
+	[34d8631cc501]
+
+	* lib/util/getentropy.c:
+	Allow getentropy.c to compile when MAP_ANON is unavailable.
+	[d707e07f1a9c]
+
+	* MANIFEST, lib/util/Makefile.in, lib/util/arc4random.c,
+	lib/util/arc4random.h:
+	Remove multi-thread support from arc4random. Sudo is not multi-
+	threaded so we don't need the added complexity.
+	[77c1795e0aaa]
+
+2020-01-28  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/sudo_python_module.c:
+	plugins/sudo_python_module: Fix double free in sudo.options_as_dict
+	function
+
+	PyArg_ParseTuple sets the py_config_tuple pointer, but it does not
+	increment the reference count, so by decrementing, we end up freeing
+	the argument passed in.
+	[511aeb75a905]
+
+	* plugins/python/example_io_plugin.py, plugins/python/regress/testdata
+	/check_example_io_plugin_fails_with_python_backtrace.stdout:
+	plugins/python/example_io_plugin: close the file at destroy
+
+	to avoid warning of debug python build.
+	[6730352ab2d8]
+
+2020-01-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/arc4random.h, lib/util/getentropy.c:
+	Backed out changeset 9dce3ebb2c37 MAP_SGI_ANYADDR cannot be used in
+	place of MAP_ANON
+	[b261d200435a]
+
+2020-01-28  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/Makefile.in,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h:
+	plugins/python: memleak fixes in test
+
+	The main problem was that string array objects were constructed
+	differently:
+	- if constructed by the test, then the elements were constant
+	- if constructed by the plugin, then the elements were allocated
+
+	Modified it so that now each array contains allocated strings so
+	they can be handled similarly. For freeing, I have used the
+	str_array_free function from the plugin, so I have linked its object
+	into the test runner.
+
+	Happy path is now free of "definitely lost" memleaks, so the test
+	can be used for valgrind.
+	[657ffd948be5]
+
+2020-01-28  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Refactor sudo_sendlog in order to be able to send one I/O log
+	multiple times in parallel (for testing purposes)
+	[c9afea455ab6]
+
+2020-01-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/arc4random.h, lib/util/getentropy.c:
+	Fix compilation on IRIX; Bug #915 IRIX lacks MAP_ANON (and
+	MAP_ANONYMOUS) but we can use the IRIX-specific flag MAP_SGI_ANYADDR
+	instead. From Kazuo Kuroi
+	[9dce3ebb2c37]
+
+2020-01-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/check.c:
+	Fix crash in sudo 1.8.30 when suspending sudo at the password
+	prompt. The closure pointer in sudo_conv_callback was being filled
+	in with a struct getpass_closure ** instead of a struct
+	getpass_closure *. The bug was introduced in the fix for Bug #910;
+	previously the closure variable was a struct getpass_closure, not a
+	pointer. Fix from Michael Norton; Bug #914.
+	[011b6a7663ef]
+
+2020-01-24  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/pyhelpers.c, plugins/python/pyhelpers.h,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/python_plugin_group.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python: use separate python interpreter for each plugin
+
+	On each plugin initialization we create a separate python
+	interpreter which gets stored in the plugin_ctx. The main
+	interpreter is stored in py_ctx and is used for creating more
+	interpreters (if more plugins get loaded) and final python
+	deinitialization.
+
+	The "traceback" module import and the ImportBlocker initialization
+	was moved, because it has to happen inside the plugin specific
+	interpreters.
+	[eb9308e5eacb]
+
+	* plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/plugin_conflict.py, plugins/python/regress/te
+	stdata/check_python_plugins_do_not_affect_each_other.stdout:
+	plugins/python/regress: add a failing textcase about python plugins
+	affect each other
+
+	Since python plugins are run inside the same interpreter, they
+	affect each other's state, which would be better to avoid.
+	[1628425d608c]
+
+2020-01-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in:
+	Document new tls_verify setting.
+	[3e4bc6e4d301]
+
+	* config.h.in, configure, configure.ac:
+	Use AC_CHECK_DECLS when checking for SSL_CTX_set_min_proto_version
+	Also use AC_CHECK_FUNCS to check for the other OpenSSL functions
+	[f3e36090a31e]
+
+2020-01-23  Robert Manner  <robert.manner@balabit.com>
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	doc/sudo_plugin_python: update doc about the multiple I/O plugin
+	loading
+	[08e7c479954b]
+
+	* plugins/python/Makefile.in:
+	plugins/python/Makefile.in: update autogenerated header dependencies
+	[54c0c7f11046]
+
+	* plugins/python/pyhelpers.c, plugins/python/pyhelpers.h,
+	plugins/python/python_plugin_common.c,
+	plugins/python/regress/check_python_examples.c, plugins/python/regre
+	ss/testdata/check_example_io_plugin_command_log_multiple.stderr,
+	plugins/python/sudo_python_module.c:
+	plugins/python/pyhelpers: have a default sudo_printf function
+
+	Adapted the default sudo_printf from sudoers plugin to be able to
+	print errors before plugin open() gets called. (This is used by the
+	multiple io plugin loading to display error for too much plugin
+	load.)
+
+	Since this makes us always have a sudo_log, I have removed the logic
+	about whether it is available or not.
+	[fdd4842b3ba2]
+
+	* src/load_plugins.c:
+	src/load_plugins.c: plugins can supply a clone function
+
+	if they want to support getting loaded multiple times.
+	[33ff0027f686]
+
+2020-01-23  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* examples/sudo_logsrvd.conf, include/log_server.pb-c.h,
+	lib/logsrv/log_server.pb-c.c, lib/logsrv/log_server.proto,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	plugins/sudoers/iolog_client.c:
+	logserver option to disable certificate verification on server side
+	and server authentication on client side
+	[9b171f3af727]
+
+2020-01-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/load_plugins.c:
+	Refactor code to allocate and fill struct plugin_container. This
+	will help avoid duplicate code in the audit and approval plugins.
+	[8ad9ba987131]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, examples/sudo_logsrvd.conf:
+	Document TCP keepalive options in the manual pages.
+	[7afe9293b503]
+
+	* doc/CONTRIBUTORS:
+	Add proper diacritical to Róbert's name.
+	[9ca9ea59cdd4]
+
+2020-01-22  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/regress/check_python_examples.c, plugins/python/regre
+	ss/testdata/check_example_io_plugin_command_log_multiple.stderr, plu
+	gins/python/regress/testdata/check_example_io_plugin_command_log_mul
+	tiple.stdout, plugins/python/regress/testdata/check_example_io_plugi
+	n_command_log_multiple1.stored, plugins/python/regress/testdata/chec
+	k_example_io_plugin_command_log_multiple2.stored,
+	plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h:
+	plugins/python/regress: add a testcase for multiple io plugin
+	loading
+
+	to verify 2 python plugins can work next to each other.
+	[916dd4f44bcf]
+
+2020-01-22  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* include/log_server.pb-c.h, lib/logsrv/log_server.pb-c.c,
+	lib/logsrv/log_server.proto, logsrvd/logsrvd.c, logsrvd/sendlog.c,
+	plugins/sudoers/iolog_client.c:
+	Rename tls_checkpeer to tls_reqcert in ServerHello message
+	[b69630f1f5b4]
+
+2020-01-22  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_baseplugin.c,
+	plugins/python/python_convmessage.c:
+	plugins/python: fix return value typo for the error case
+	[a7088391d8fb]
+
+2020-01-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* etc/sudo.pp, examples/Makefile.in, examples/sudo.conf.in:
+	Install a default sudo.conf file.
+	[e2b4613cced9]
+
+	* aclocal.m4, autogen.sh, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, logsrvd/logsrvd.c, logsrvd/sendlog.c,
+	plugins/sudoers/iolog_client.c:
+	Add support for building on OpenSSL 1.0.2. This adds compatibility
+	defines for some OpenSSL 1.1.x functions.
+	[17e50378c8ee]
+
+2020-01-21  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_io_multi.inc:
+	plugins/python/plugin_io: enable loading of multiple io plugins
+
+	Separate sudo io plugin symbols are created which stores wrapper
+	functions adding the context of which python plugin the callback is
+	about.
+
+	These sudo io plugin "slots" get generated with macros by the
+	preprocessor.
+
+	This makes sudo support loading multiple python IO plugins like
+	this: (note the differences in the symbol names)
+
+	Plugin python_io python_plugin.so ModulePath=...
+	ClassName=SudoIOPlugin1 Plugin python_io1 python_plugin.so
+	ModulePath=... ClassName=SudoIOPlugin2 Plugin python_io2
+	python_plugin.so ModulePath=... ClassName=SudoIOPlugin3
+	[cb45052d227a]
+
+2020-01-21  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h, plugins/sudoers/policy.c:
+	sudoers: disable SO_KEEPALIVE socket option based on
+	log_server_disable_keepalive flag in sudoers
+	[ad48ee6fbcb7]
+
+	* examples/sudo_logsrvd.conf, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c:
+	logserver: enable/disable SO_KEEPALIVE socket option based on
+	tcp_keepalive configuration option in sudo_logsrvd.conf
+	[c0d919468e95]
+
+2020-01-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/hostcheck.h:
+	No need to export the validate_hostname() symbol. We don't export
+	symbols in convenience libraries, only installed DSOs.
+	[f26897793700]
+
+	* lib/iolog/hostcheck.c:
+	Fix a few pointer signedness warnings on Linux.
+	[6a4f68430e69]
+
+	* include/sudo_compat.h, lib/iolog/hostcheck.c, logsrvd/logsrvd.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h, src/net_ifs.c:
+	Store the server host name and IP in client_closure_fill(). Also
+	check for getpeername() and inet_ntop() failure.
+	[22df6ff5fcaf]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/sendlog.c,
+	logsrvd/sendlog.h, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	Fix handling of SSL_ERROR_WANT_{READ,WRITE} during normal I/O. If we
+	get SSL_ERROR_WANT_WRITE during SSL_read(), we need to resume the
+	SSL_read(), not call SSL_write() as we were doing. Likewise for
+	SSL_ERROR_WANT_READ received from SSL_write(). This introduces a
+	flag so we call the proper callback even when the I/O direction
+	doesn't match the read/write calls.
+	[7162125ad7b7]
+
+	* lib/util/Makefile.in:
+	Add siglist.c and signame.c as dependencies for depend target. Fixes
+	running "make depend" in lib/util dir when siglist.c or signame.c
+	are not already present.
+	[9d7aa4107136]
+
+	* Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/iolog/Makefile.in, lib/logsrv/Makefile.in,
+	lib/util/Makefile.in, lib/zlib/Makefile.in, logsrvd/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Add abs_top_srcdir and abs_top_builddir and use them. Configure
+	provides absolution versions of srcdir, builddir, top_srcdir and
+	top_builddir. We can use these instead of calling pwd.
+	[597ba26af997]
+
+2020-01-20  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/Makefile.in:
+	plugins/python/Makefile.in: remove path prefix from examples to make
+	install target work
+	[ba31bde08e17]
+
+2020-01-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/iolog/Makefile.in:
+	Rebuild dependencies after hostcheck.c include changes.
+	[3a4e808e5038]
+
+2020-01-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/hostcheck.h, lib/iolog/hostcheck.c, logsrvd/logsrvd.c,
+	plugins/sudoers/iolog_client.c:
+	Add debugging statements to certificate checks.
+	[81f813c8c1f1]
+
+	* MANIFEST, lib/iolog/Makefile.in, lib/iolog/hostcheck.c,
+	plugins/sudoers/iolog.c:
+	Portability fixes and correct path to hostcheck.h in MANIFEST.
+	Include sys/socket.h for getpeername(). Link with -lnsl on Solaris
+	to get inet_pton().
+	[060371a21669]
+
+	* lib/iolog/Makefile.in, lib/logsrv/Makefile.in, lib/util/Makefile.in,
+	lib/zlib/Makefile.in, logsrvd/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/python/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Using "libtool --clean" to remove regular files is slow. We only
+	need to use libtool's clean mode to remove files created by libtool.
+	[510af2b052c6]
+
+2020-01-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .gitignore, .hgignore:
+	Add examples/sudo.conf to ignore files.
+	[9eb86d1b8661]
+
+	* doc/sudo.conf.mdoc.in, examples/sudo.conf.in:
+	Remove whitespace at the end of the line in example sudo.conf
+	[88b0ae1f8a18]
+
+	* doc/sudo_plugin_python.mdoc.in:
+	Fix mdoc lint warnings by removing .Pp before and after .Ss.
+	[e59218682d7f]
+
+2020-01-17  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/iohelpers.c,
+	plugins/python/regress/iohelpers.h,
+	plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h:
+	plugins/python/regress: add missing license texts
+	[b0e4b41b2834]
+
+2020-01-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c:
+	Fix TLS accept when SSL_accept() returns SSL_ERROR_WANT_WRITE. We
+	need to switch from SUDO_EV_READ to SUDO_EV_WRITE for this case.
+	[71ada9bfa056]
+
+	* logsrvd/sendlog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	Fix TLS connect when SSL_connect returns SSL_ERROR_WANT_READ. We
+	need to switch from SUDO_EV_WRITE to SUDO_EV_READ for this case.
+	Also make the tls connect events private to tls_timed_connect() with
+	their own closure. There is no need to store them in the client
+	closure.
+	[afda37d1dd26]
+
+	* logsrvd/iolog_writer.c:
+	Store submit time in struct iolog_info. Fixes missing time stamp in
+	remote I/O log info file.
+	[dcd1dfa00646]
+
+	* src/sudo_edit.c:
+	Treat EROFS (like EACCES) as a non-fatal error in dir_is_writable().
+	Fixes sudoedit on macOS 10.15 and above where the root file system
+	is mounted read-only. See https://support.apple.com/en-us/HT210650.
+	From Dan Villiom Podlaski Christiansen. Bug #913
+	[cc636a1af1b6]
+
+2020-01-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/event.c, plugins/sudoers/iolog_client.c:
+	Really fix flushing of data in client_close(). Now that we call
+	fmt_exit_message() from client_close() we do not need to try to
+	determine whether the read or write events were pending in the old
+	base.
+
+	We can't tell anyway because the active flag in the event was
+	cleared when the old sudo event base was destroyed. It is correct to
+	enable both the read and write events after formatting the
+	ExitMessage.
+	[c59e77060c37]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_path_escapes.c:
+	Use SUDOERS_DEBUG_* not SUDO_DEBUG_* in debug_decl() for the sudoers
+	plugin.
+	[2d0c049e689e]
+
+	* src/sudo.c, src/sudo_plugin_int.h:
+	Wrap calls to plugin event callbacks to use the plugin's debug
+	instance. Otherwise, the debug output in a plugin's event callback
+	will go to the sudo debug file, not sudoers.
+	[02e227cfc715]
+
+	* lib/util/regress/strsig/strsig_test.c:
+	FreeBSD is missing SIGLWP (aka SIGTHR) in sys_signame[]. Don't test
+	SIGLWP on FreeBSD where it is reserved for the thread library and is
+	not listed in sys_signame[].
+	[95cbafc79b4d]
+
+	* configure, configure.ac:
+	We want to use DT_RUNPATH in preference to DT_RPATH in ELF binaries.
+	Otherwise, LD_LIBRARY_PATH does not work when running the tests. The
+	GNU linker's --enable-new-dtags can be used to do this. We don't do
+	this on NetBSD where RPATH already supports LD_LIBRARY_PATH.
+	[2c6c9a348d81]
+
+2020-01-15  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/iolog_client.c:
+	do server identity validation in iolog plugin
+	[b1bec55bbed6]
+
+	* logsrvd/Makefile.in, logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	do client identity validation in logserver
+	[e415409dfe0b]
+
+	* MANIFEST, include/hostcheck.h, lib/iolog/Makefile.in,
+	lib/iolog/hostcheck.c:
+	implement host validation for the audit server SSL certificates
+	[7f48e57bece2]
+
+2020-01-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers_debug.c:
+	Fix reference counting when both sudoers policy and I/O log are
+	loaded. If both sudoers policy and I/O log plugins are loaded,
+	debug_files will be empty when the I/O plugin is initialized. This
+	changes the logic to always increase the reference count if the
+	instance is valid.
+	[18adfeb3727b]
+
+	* src/load_plugins.c:
+	Fix handling of duplicate policy and I/O plugins. The warning
+	message said the later I/O plugin was ignored but it actually
+	overwrote the existing one instead. The first registered plugin of
+	the same name now is used, as was intended. Specifying more than one
+	policy plugin is no longer a fatal error; this allows the admin to
+	fix the situation.
+	[dde476072346]
+
+2020-01-14  Robert Manner  <robert.manner@balabit.com>
+
+	* aclocal.m4, configure, configure.ac,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h,
+	plugins/python/sudo_python_debug.h:
+	plugins/python: various portability improvements
+	[d6aa5e2585ef]
+
+	* plugins/python/example_conversation.py,
+	plugins/python/example_io_plugin.py, plugins/python/regress/testdata
+	/check_example_conversation_plugin_reason_log_with_suspend.stdout, p
+	lugins/python/regress/testdata/check_example_io_plugin_command_log.s
+	tored, plugins/python/regress/testdata/check_example_io_plugin_fails
+	_with_python_backtrace.stdout:
+	plugins/python/example_{io,conversation}: avoid printing signal
+	number
+
+	They are platform dependant, so their test would fail on some
+	platforms. While we could create separate plugin for the tests, I
+	like the idea that the examples are ensured to be working.
+
+	I believe this is a good compromise for being able to auto update
+	the test cases.
+	[7b46d305e7d9]
+
+	* plugins/python/Makefile.in,
+	plugins/python/regress/check_python_examples.c:
+	plugins/python/regress: load the python plugin dynamically
+
+	instead of linking with it.
+	[084c61e7d565]
+
+2020-01-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_edit.c:
+	For sudoedit_checkdir consider a user-owner directory to be
+	writable. The non-faccessat() code already did this so this just
+	brings the faccessat() path into alignment. Bug #912
+	[91a1a9c0ba40]
+
+2020-01-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/CONTRIBUTORS:
+	Add newline before list of artwork authors.
+	[1be0fe5f7d7a]
+
+	* doc/LICENSE:
+	Update copyright year.
+	[f4ef4c1990af]
+
+2020-01-10  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/example_policy_plugin.py:
+	plugins/python/example_policy_plugin.py: extend user env changing
+	example
+
+	Make the demonstration extend the environment with a new variable.
+	Easier to read, and makes the testing able to check for that it is
+	working.
+	[77c09cc38298]
+
+	* generate_test_coverage.sh:
+	generate_test_coverage.sh: example script to ease test coverage
+	generation
+
+	Uses lcov and genhtml to generate test coverage. It is meant to be
+	run in a clean directory. Extra configure options can be added as
+	script arguments.
+
+	Example execution:
+
+	mkdir build cd build ../generate_test_coverage.sh --enable-python
+	[a52c480639aa]
+
+2020-01-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c:
+	Remove MAXSYSLOGTRIES, it is no longer used.
+	[dbd274fd8330]
+
+2020-01-09  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python/python_plugin_policy: fix validate() call
+
+	When calling validate() python function, TypeError exception was
+	thrown ("argument list must be a tuple"), because the call does not
+	have arguments, and python does not accept empty tuple for
+	execution. NULL must be used instead, which was handled as argument
+	construction failure previously.
+	[5ac3c2acee9b]
+
+	* plugins/python/example_policy_plugin.py:
+	plugins/python/example_policy_plugin.py: make allowed_commands
+	ordered
+
+	Storing them as "tuple" instead of "set", so they have a fix order.
+	This makes the output of the list() example stable. ("set" is
+	printed out in random order)
+	[470ccf46a088]
+
+	* plugins/python/example_io_plugin.py,
+	plugins/python/example_policy_plugin.py,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python: fix confusing version display
+
+	IO/Group/Policy Python API version is displayed instead of sudo
+	version, because that is not very meaningful in this context.
+
+	They are only displayed in verbose mode.
+
+	Example plugins express it more concrete that they are displaying
+	their version, not the API version.
+	[af9d969231a9]
+
+2020-01-08  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/example_conversation.py:
+	plugins/python/example_conversation.py: make log path configurable
+
+	Similarly to IO plugin example. (It is easier to test it this way.)
+	[6526a842ee21]
+
+2020-01-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo.c:
+	Iterate over io_plugins list in the iolog_* wrappers. Moving the
+	iteration into the wrapper functions simplifies the calling code.
+	[1e803fb8fd1f]
+
+	* src/sudo.c:
+	policy_plugin is global, no need to pass it to policy_* functions.
+	[676c85f87b3c]
+
+	* configure, configure.ac:
+	If --enable-openssl or --enable-gcrypt is given a path, append to
+	LDFLAGS. Previously we appended the path to SUDOERS_LDFLAGS but now
+	that we use OpenSSL in the log server, LDFLAGS is the correct one to
+	use.
+	[8b30cffe500f]
+
+	* doc/CONTRIBUTORS:
+	Add Robert Manner
+	[fe8bb27dcff3]
+
+2020-01-07  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/example_io_plugin.py:
+	plugins/python/example_io_plugin.py: fix backtrace during destructor
+
+	If the plugin fails to open the file for writing, constructor will
+	raise an exception and exit before creating the "_log" member
+	variable. So the destructor will also raise a backtrace. (Which
+	python ignores, but dumps out to stderr.)
+	[09cfa2edb38c]
+
+	* plugins/python/python_plugin_common.c:
+	plugins/python/python_plugin_common: raise debug level for module
+	import
+	[b261d22e3c2e]
+
+	* plugins/python/regress/testdata/check_example_conversation_plugin_re
+	ason_log_with_suspend.conversation, plugins/python/regress/testdata/
+	check_example_conversation_plugin_reason_log_with_suspend.stderr, pl
+	ugins/python/regress/testdata/check_example_conversation_plugin_reas
+	on_log_with_suspend.stdout, plugins/python/regress/testdata/check_ex
+	ample_conversation_plugin_reason_log_with_suspend.stored, plugins/py
+	thon/regress/testdata/check_example_conversation_plugin_reason_log_w
+	ithout_suspend.conversation, plugins/python/regress/testdata/check_e
+	xample_conversation_plugin_reason_log_without_suspend.stderr, plugin
+	s/python/regress/testdata/check_example_conversation_plugin_reason_l
+	og_without_suspend.stdout, plugins/python/regress/testdata/check_exa
+	mple_conversation_plugin_reason_log_without_suspend.stored, plugins/
+	python/regress/testdata/check_example_conversation_plugin_user_inter
+	rupts.conv, plugins/python/regress/testdata/check_example_conversati
+	on_plugin_user_interrupts.conversation, plugins/python/regress/testd
+	ata/check_example_conversation_plugin_user_interrupts.stderr, plugin
+	s/python/regress/testdata/check_example_conversation_plugin_user_int
+	errupts.stdout, plugins/python/regress/testdata/check_example_debugg
+	ing_c_calls@diag.log, plugins/python/regress/testdata/check_example_
+	debugging_c_calls@info.log, plugins/python/regress/testdata/check_ex
+	ample_debugging_load@diag.log, plugins/python/regress/testdata/check
+	_example_debugging_plugin@err.log, plugins/python/regress/testdata/c
+	heck_example_debugging_plugin@info.log, plugins/python/regress/testd
+	ata/check_example_debugging_py_calls@diag.log, plugins/python/regres
+	s/testdata/check_example_debugging_py_calls@info.log, plugins/python
+	/regress/testdata/check_example_debugging_sudo_cb@info.log, plugins/
+	python/regress/testdata/check_example_group_plugin_is_able_to_debug.
+	log, plugins/python/regress/testdata/check_example_io_plugin_command
+	_log.stderr, plugins/python/regress/testdata/check_example_io_plugin
+	_command_log.stdout, plugins/python/regress/testdata/check_example_i
+	o_plugin_command_log.stored, plugins/python/regress/testdata/check_e
+	xample_io_plugin_failed_to_start_command.stderr, plugins/python/regr
+	ess/testdata/check_example_io_plugin_failed_to_start_command.stdout,
+	plugins/python/regress/testdata/check_example_io_plugin_failed_to_st
+	art_command.stored, plugins/python/regress/testdata/check_example_io
+	_plugin_fails_with_python_backtrace.stderr, plugins/python/regress/t
+	estdata/check_example_io_plugin_fails_with_python_backtrace.stdout,
+	p
+	lugins/python/regress/testdata/check_example_io_plugin_version_displ
+	ay.stderr, plugins/python/regress/testdata/check_example_io_plugin_v
+	ersion_display.stdout, plugins/python/regress/testdata/check_example
+	_io_plugin_version_display.stored, plugins/python/regress/testdata/c
+	heck_example_policy_plugin_accepted_execution.stderr, plugins/python
+	/regress/testdata/check_example_policy_plugin_accepted_execution.std
+	out, plugins/python/regress/testdata/check_example_policy_plugin_den
+	ied_execution.stderr, plugins/python/regress/testdata/check_example_
+	policy_plugin_denied_execution.stdout, plugins/python/regress/testda
+	ta/check_example_policy_plugin_failed_execution.stderr, plugins/pyth
+	on/regress/testdata/check_example_policy_plugin_failed_execution.std
+	out, plugins/python/regress/testdata/check_example_policy_plugin_lis
+	t.stderr, plugins/python/regress/testdata/check_example_policy_plugi
+	n_list.stdout, plugins/python/regress/testdata/check_example_policy_
+	plugin_validate_invalidate.log, plugins/python/regress/testdata/chec
+	k_example_policy_plugin_version_display.stderr, plugins/python/regre
+	ss/testdata/check_example_policy_plugin_version_display.stdout, plug
+	ins/python/regress/testdata/check_loading_fails_missing_classname.st
+	derr, plugins/python/regress/testdata/check_loading_fails_missing_cl
+	assname.stdout, plugins/python/regress/testdata/check_loading_fails_
+	missing_path.stderr, plugins/python/regress/testdata/check_loading_f
+	ails_missing_path.stdout, plugins/python/regress/testdata/check_load
+	ing_fails_not_owned_by_root.stderr, plugins/python/regress/testdata/
+	check_loading_fails_not_owned_by_root.stdout, plugins/python/regress
+	/testdata/check_loading_fails_wrong_classname.stderr, plugins/python
+	/regress/testdata/check_loading_fails_wrong_classname.stdout, plugin
+	s/python/regress/testdata/check_loading_fails_wrong_path.stderr, plu
+	gins/python/regress/testdata/check_loading_fails_wrong_path.stdout:
+	plugins/python/regress/testdata: generated data for the pyplugin
+	tests
+	[cec6c9036644]
+
+	* plugins/python/example_debugging.py:
+	plugins/python/example_debugging: fix typo in comment
+	[38de8ea0b0e9]
+
+2020-01-06  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	save a pointer to the currently connected audit server in the
+	closure object
+	[f1c14c43ab40]
+
+2020-01-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/timestamp.c:
+	Sanity check size when converting the first record to TS_LOCKEXCL
+	Coverity CID 206591
+	[5b94873c4051]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c:
+	Fix coverity CID 206586. Potential use after free calling
+	gzstrerror() after gzclose().
+	[4bcba58004c8]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Use canonical pattern when freeing a tail queue. Avoids some
+	coverity false positives when using TAILQ_FOREACH_SAFE to free the
+	tail queue.
+	[9019d7ad9958]
+
+2020-01-03  Robert Manner  <robert.manner@balabit.com>
+
+	* MANIFEST, plugins/python/Makefile.in,
+	plugins/python/regress/check_python_examples.c,
+	plugins/python/regress/iohelpers.c,
+	plugins/python/regress/iohelpers.h,
+	plugins/python/regress/testdata/sudo.conf.developer_mode,
+	plugins/python/regress/testdata/sudo.conf.normal_mode,
+	plugins/python/regress/testhelpers.c,
+	plugins/python/regress/testhelpers.h:
+	plugins/python/regress: adds tests for python plugin feature and
+	examples
+	[7ab4daed9558]
+
+2020-01-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Avoid potential NULL deref in tls_timed_connect() error path.
+	Coverity CID 206396
+	[730687307b24]
+
+	* logsrvd/sendlog.c:
+	Check for sudo_ev_add() failure; Coverity CID 206395 206397
+	[7008560eac95]
+
+2020-01-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, examples/sudo.conf.in:
+	Update sample sudo.conf with all supported settings. The deprecated
+	"max_groups" setting is not documented.
+	[e17f7bf95578]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, examples/sudo.conf.in,
+	lib/util/regress/sudo_conf/test1.in,
+	lib/util/regress/sudo_parseln/test1.in:
+	Remove POD-style C<> markup (typewriter font) from sudo.conf
+	[b69d4743c860]
+
+	* MANIFEST, configure, configure.ac, examples/Makefile.in,
+	examples/sudo.conf, examples/sudo.conf.in:
+	Substitute plugin dir into examples/sudo.conf
+	[8c481a21c098]
+
+2020-01-02  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/sudoers/sudoers_debug.c:
+	plugins/sudoers/sudoers_debug.c: fix harmless debug deregistration
+	warning
+
+	If the debug sudoers subsystem is not registered, because it does
+	not get any file names to deal with (TAILQ_EMPTY(debug_files)),
+	deregistration of the subsystem outputs a warning:
+
+	 sudo: sudo_debug_deregister_v1: invalid instance ID -1, max -1
+
+	This patch prevents that by only increasing the refcount if the
+	debug_instance was registered successfully.
+	[939042599498]
+
+	* plugins/python/Makefile.in:
+	plugins/python/Makefile.in: fix the install path of examples
+
+	Examples are installed by default to "docdir", which refers to
+	PACKAGE_TARNAME variable which was empty for the python plugin
+	Makefile.in
+
+	So the examples were installed to '.../share/doc/examples' instead
+	of '.../share/doc/sudo/examples'. This also made them be skipped
+	from the package.
+
+	Also the install target now depends on install-doc so the examples
+	gets installed also (similarly as other examples).
+	[e4c07404a3fc]
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	doc/sudo_plugin_python: indent code examples for easier readability
+	[c91ee22bfc83]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	doc/sudo.conf: document developer_mode option
+	[127215dca183]
+
+2019-12-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/UPGRADE:
+	fix typo in previous
+	[3031418fba2b]
+
+	* Makefile.in:
+	In update-pot match *.c not *c.
+	[77a1139fef99]
+
+	* NEWS, doc/UPGRADE:
+	Changes in sudo 1.8.30
+	[dfaac62074f4]
+
+2019-12-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in:
+	Add check for up to date def_data.[ch] in check-dist target.
+	[ffaf150e76a5]
+
+2019-12-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/limits.c:
+	Use 64-bit resource limits on AIX.
+	[b8b76c47c8a7]
+
+	* src/limits.c:
+	When restoring old resource limits, try to recover if we receive
+	EINVAL. On NetBSD, setrlimit(2) can return EINVAL if the new soft
+	limit is lower than the current resource usage. This can be a
+	problem when restoring the old stack limit if sudo has raised it.
+	[50bdbdbea1b7]
+
+	* src/limits.c:
+	Sudo doesn't require such a large stack.
+	[f93eb9e0c105]
+
+	* plugins/sudoers/Makefile.in:
+	Restore check for readable /etc/sudoers in pre-install target. If
+	there is no installed sudoers there is nothing to check...
+	[99e65bc54052]
+
+	* config.h.in, configure, configure.ac:
+	Enable OpenBSD extensions on NetBSD to get reallocarray(3)
+	prototype.
+	[e303dca0c1cb]
+
+	* include/sudo_event.h:
+	Add forward declaration of struct timeval for deprecated APIs.
+	[e41bdbbbc067]
+
+	* lib/util/sig2str.c, lib/util/str2sig.c:
+	Fix compilation on systems with SIGRTMIN/SIGRTMAX but not
+	_SC_RTSIG_MAX.
+	[8e40c62e00f8]
+
+	* include/sudo_compat.h:
+	Older systems may not support WCONTINUED.
+	[730bede52ff0]
+
+	* plugins/sudoers/logging.c:
+	Support systems that have nl_langinfo(3) but not the CODESET define.
+	Fixes compilation on old NetBSD versions.
+	[03e7cff93172]
+
+	* plugins/sudoers/starttime.c:
+	Fix a typo; HAVE_KINFO_PROC2_NETBSD not HAVE_KINFO_PROC2_NETBSD2
+	[0c46a062f888]
+
+2019-12-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, Makefile.in, configure, configure.ac,
+	etc/init.d/aix.sh.in, etc/init.d/hpux.sh.in,
+	etc/init.d/sudo.conf.in, etc/sudo.pp, init.d/aix.sh.in,
+	init.d/hpux.sh.in, init.d/sudo.conf.in, src/Makefile.in, sudo.pp:
+	Move init.d and sudo.pp to the etc dir.
+	[81c9cbbc8ea9]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/cfmakeraw.c:
+	Add cfmakeraw() for systems without it.
+	[48f48eaf2a68]
+
+	* MANIFEST:
+	Remove indent.pro from MANIFEST
+	[2b6a24282b8c]
+
+	* .gitignore, .hgignore:
+	Add uncrustify.files to ignore file.
+	[056b0df738a9]
+
+	* doc/sudo_plugin_python.man.in, doc/sudo_plugin_python.mdoc.in:
+	Substitute @prefix@ in for the example paths. We can't use
+	@exampledir@ here since it contains Makefile variables.
+	[1744e2bcc813]
+
+2019-12-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_debug.h, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_path.c, lib/iolog/iolog_util.c, lib/util/aix.c,
+	lib/util/digest.c, lib/util/digest_gcrypt.c,
+	lib/util/digest_openssl.c, lib/util/event.c, lib/util/event_poll.c,
+	lib/util/event_select.c, lib/util/gettime.c,
+	lib/util/getusershell.c, lib/util/gidlist.c, lib/util/host_port.c,
+	lib/util/key_val.c, lib/util/lbuf.c, lib/util/locking.c,
+	lib/util/logfac.c, lib/util/logpri.c, lib/util/mkdir_parents.c,
+	lib/util/parseln.c, lib/util/secure_path.c, lib/util/setgroups.c,
+	lib/util/strsplit.c, lib/util/strtobool.c, lib/util/strtoid.c,
+	lib/util/strtomode.c, lib/util/sudo_conf.c, lib/util/term.c,
+	lib/util/ttyname_dev.c, lib/util/ttysize.c, logsrvd/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrv_util.c, logsrvd/logsrvd.c,
+	logsrvd/logsrvd_conf.c, logsrvd/sendlog.c,
+	plugins/python/python_plugin_common.c,
+	plugins/python/sudo_python_debug.c, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/base64.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/digestname.c, plugins/sudoers/editor.c,
+	plugins/sudoers/env.c, plugins/sudoers/env_pattern.c,
+	plugins/sudoers/file.c, plugins/sudoers/filedigest.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gc.c, plugins/sudoers/gentime.c,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/hexchar.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_path_escapes.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/match_command.c, plugins/sudoers/match_digest.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse_ldif.c,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/rcstr.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/starttime.c, plugins/sudoers/strlist.c,
+	plugins/sudoers/stubs.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timeout.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsdump.c,
+	plugins/sudoers/visudo.c, src/exec.c, src/exec_common.c,
+	src/exec_nopty.c, src/exec_pty.c, src/get_pty.c, src/hooks.c,
+	src/limits.c, src/load_plugins.c, src/net_ifs.c, src/parse_args.c,
+	src/preserve_fds.c, src/selinux.c, src/sesh.c, src/signal.c,
+	src/solaris.c, src/sudo.c, src/sudo_edit.c, src/tgetpass.c,
+	src/ttyname.c, src/utmp.c:
+	debug_decl and debug_decl_vars now require a semicolon at the end.
+	[c05890653007]
+
+2019-12-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, doc/Makefile.in, doc/sudo_plugin_python.man.in,
+	doc/sudo_plugin_python.mdoc.in:
+	Add sudo_plugin_python manual page. Based on markdown docs from
+	Robert Manner.
+	[65f2af21832d]
+
+2019-12-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c, src/limits.c:
+	Output the name of the limit when warning about setrlimit or
+	getrlimit. From Kimmo Suominen.
+	[92ed66b5cc1f]
+
+2019-12-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* aclocal.m4, config.h.in, configure:
+	regen
+	[81961af46679]
+
+	* MANIFEST:
+	Add python module files to MANIFEST
+	[f223a19117bb]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in:
+	Update SUDO_CONV_REPL_MAX in docs.
+	[120970879b36]
+
+	* Makefile.in:
+	Remove uncrustify.files in clean target
+	[ba843b8f2e80]
+
+2019-12-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in, etc/uncrustify-small.cfg, etc/uncrustify.cfg,
+	indent.pro:
+	Add uncrustify config file for new sudo code style.
+	[7c3b3f733134]
+
+	* include/sudo_plugin.h:
+	Bump SUDO_CONV_REPL_MAX from 255 to 1023
+	[9127fb27eb55]
+
+	* lib/util/digest_gcrypt.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/secureware.c:
+	Minor style cleanups. Remove extraneous break after return
+	statement. Convert two old K&R function declarations.
+	[19f8b7a3d2d1]
+
+2019-12-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/selinux.c:
+	Save/restore the raw form of the file context in case mctrans is not
+	available.
+	[786a04ba33ab]
+
+2019-12-10  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_plugin_common.c:
+	plugins/python: make group plugin able to debug
+
+	It does not get the debug settings, so it looks them up through
+	sudo_conf.
+	[fe4dbf8345b6]
+
+	* include/sudo_conf.h, lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_conf/test1.in,
+	lib/util/regress/sudo_conf/test1.out.ok,
+	lib/util/regress/sudo_conf/test2.out.ok,
+	lib/util/regress/sudo_conf/test3.out.ok,
+	lib/util/regress/sudo_conf/test4.out.ok,
+	lib/util/regress/sudo_conf/test5.out.ok,
+	lib/util/regress/sudo_conf/test6.out.ok,
+	lib/util/regress/sudo_conf/test7.out.ok,
+	lib/util/regress/sudo_conf/test8.err.ok,
+	lib/util/regress/sudo_conf/test8.in,
+	lib/util/regress/sudo_conf/test8.out.ok, lib/util/sudo_conf.c,
+	lib/util/util.exp.in, plugins/sudoers/group_plugin.c,
+	src/load_plugins.c:
+	src/load_plugins, plugins/sudoers: added developer_mode sudo.conf
+	option
+
+	It can be used to disable the enforcement that a plugin (shared
+	object or an imported python module) must be owned by root and not
+	modifiable by others. This can make plugin development easier.
+	[a9f86943d30c]
+
+2019-12-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, config.h.in, configure, configure.ac, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, include/sudo_compat.h, lib/util/Makefile.in,
+	lib/util/getusershell.c, mkdep.pl, plugins/sudoers/check.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add runas_check_shell flag to require a runas user to have a valid
+	shell. Not enabled by default.
+	[9e7936e0ccfe]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
+	Add a new flag "allow_unknown_runas_id" to control matching of
+	unknown IDs. Previous, sudo would always allow unknown user or group
+	IDs if the sudoers entry permitted it. This included the "ALL"
+	alias. With this change, the admin must explicitly enable support
+	for unknown IDs.
+	[ebdbb5c7f60b]
+
+2019-12-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/term.c:
+	Use cfmakeraw() in sudo_term_raw() instead of doing it manually.
+	[b8ff5f81399f]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	Fix event loop called via I/O log close function. We need to set
+	events that were pending in the old base in the new one. Fixes
+	sending the final I/O log data and the ExitMessage to the server.
+	[dcba4ce2196c]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_plugin.h, src/sudo.c:
+	Replace timeleft with pending in sudo plugin event API.
+	[5f49af23af38]
+
+	* plugins/sudoers/sudoreplay.c:
+	Use sudo_ev_pending() instead of the deprecated sudo_ev_timeleft().
+	[c6cce5275f1e]
+
+	* include/sudo_event.h, lib/util/event.c, lib/util/util.exp.in:
+	Add sudo_ev_pending(), used to check whether an event is pending.
+	[edcea66bda32]
+
+	* plugins/sudoers/Makefile.in:
+	Add TLS libs when linking check_iolog_plugin
+	[d84a5f5c6bc1]
+
+2019-12-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Remove extraneous newlines in some sudo_warnx() calls.
+	[d3dbf0f93372]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document log_server_cabundle, log_server_peer_cert and
+	log_server_peer_key
+	[edea4d048221]
+
+	* Merge pull request #16 from laczau/master
+
+	Proper handling of certificate chain file
+	[44939e511321]
+
+2019-12-06  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c:
+	cert files can contain the full chain of trust, so load all certs in
+	every case for verification
+	[ca26bb970ef5]
+
+2019-12-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in:
+	Sync init_session() prototype with sudo_plugin.h and fix a typo.
+	[1501cdfa8e76]
+
+2019-12-05  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/example_conversation.py,
+	plugins/python/example_debugging.py:
+	plugins/python: example plugin demonstrating conversation and debug
+	API
+	[e487d2240607]
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c, lib/util/util.exp.in:
+	lib/util/sudo_debug.c: add a function for querying if debugging is
+	needed
+
+	for a level. Rationale: this way we can avoid computing details for
+	the log which will not happen at all if the computation is slow.
+	[d636c26d192d]
+
+2019-12-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/check.c:
+	Only update the time stamp entry after the approval function has
+	succeeded. Bug #910
+	[9b2022e6f11d]
+
+2019-12-04  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/sudo_python_debug.c,
+	plugins/python/sudo_python_debug.h:
+	plugins/python: add sudo debug helpers
+	[1d48021e86ad]
+
+2019-12-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Merge pull request #14 from sudo-project/tls-config-default-values
+
+	Audit Server - add default values for cert paths
+	[f30a48f8b5d5]
+
+2019-12-04  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c:
+	add default values for cert paths
+	[a76ca8a3ca9f]
+
+2019-12-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sudo_debug.c:
+	Add reference counting to debug register/deregister. Fixes a
+	potential problem when an instance is re-registered.
+	[270e739fd0b3]
+
+	* plugins/sudoers/sudoers_debug.c:
+	Only deregister the sudoers debug instance on last close. Reference
+	count calls to sudoers_debug_register and only deregister
+	sudoers_debug_instance when refcnt reaches 0. Fixes a problem where
+	the debug system was deregistered when the sudoers policy is closed
+	even though the iolog plugin is active.
+	[2b73f3e9fc32]
+
+2019-12-02  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/python_importblocker.c:
+	plugins/python: add ImportBlocker which forbids loading unsafe
+	python modules
+
+	If non root can alter any imported python modules, he is able to run
+	anything he would like to as root user. This class is a helper to
+	avoid such situation.
+
+	This feature can be disabled with 'DeveloperMode=1' plugin option.
+	[26be6228724f]
+
+2019-11-28  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h:
+	implement tls layer in iolog plugin
+	[c25837909952]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/policy.c:
+	process tls config options
+	[510fdfd39d71]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in:
+	add audit server tls related configuration options to sudoers
+	[f4135025ff1d]
+
+	* plugins/sudoers/Makefile.in:
+	optionally link sudoers with openssl libs
+	[750f87200eab]
+
+2019-11-27  Laszlo Orban  <43516882+laczau@users.noreply.github.com>
+
+	* logsrvd/logsrvd.c:
+	Merge pull request #11 from sudo-project/audit-server-tls-async
+
+	Sudo audit Server - TLS protocol update
+	[923f6d914ec5]
+
+2019-11-26  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c:
+	disable timeout for the reader after ServerHello message
+	[e579450aafa1]
+
+2019-11-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c:
+	Exit if the first call to logsrvd_conf_read() fails. It is not fatal
+	if subsequent calls fail (due to SIGHUP) since we keep a copy of the
+	old config before installing the new one.
+	[c20866ea9d03]
+
+	* Makefile.in, plugins/sudoers/Makefile.in:
+	Add some missing files to "make clean" and "make distclean"
+	[d1b559e9e1ab]
+
+	* .gitignore, .hgignore:
+	Update .hgignore and convert to .gitignore
+	[c8b92b55e74a]
+
+2019-11-22  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	use event timeout instead of socket timeout
+	[5c72d1d18aec]
+
+	* logsrvd/sendlog.c, logsrvd/sendlog.h:
+	adapt sudo sendlog (async communication, unencrypted ServerHello
+	message)
+	[0269d852f6c6]
+
+	* logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	ServerHello message is now unencrypted, TLS communication has been
+	refactored to full async
+	[d138cbe2253e]
+
+	* include/log_server.pb-c.h, lib/logsrv/log_server.pb-c.c,
+	lib/logsrv/log_server.proto, logsrvd/logsrvd.c:
+	extend ServerHello message with two fields (tls, tls_checkpeer)
+	[6d7965d29cd4]
+
+2019-11-21  Robert Manner  <robert.manner@balabit.com>
+
+	* Makefile.in:
+	Makefile.in: fix calling log2cl when doing out of source build
+
+	If doing build out of source and not calling configure by absolute
+	path, $(top_srcdir) variable will contain a path relative to the
+	directory we stand in. So, after changing the current directory "cd
+	$(srcdir)", this path will point to somewhere else making the
+	install step fail.
+	[58a22fce613f]
+
+	* plugins/python/python_baseplugin.c,
+	plugins/python/python_convmessage.c,
+	plugins/python/sudo_python_module.c,
+	plugins/python/sudo_python_module.h:
+	plugins/python: add a sudo python module
+	[c512c48170ae]
+
+2019-11-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	plugins/sudoers/policy.c, src/sudo.c:
+	For plugin API 1.15 and up, always call the plugin close function.
+	Previously, it was only called when a command was run (including
+	sudoedit). Now, plugin operations list, validate, invalidate, and
+	show_version are also closed.
+	[6cdcb5624908]
+
+2019-11-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_client.c:
+	Avoid NULL deref on an error path if calloc() fails. Coverity CID
+	205873
+	[bad732813149]
+
+	* src/conversation.c:
+	Fix potential fd leak when converting trailing newline to cr + nl.
+	Coverity CID 205872
+	[4597abb8ee1f]
+
+	* doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	doc/sudo_logsrvd.man.in, doc/sudo_logsrvd.mdoc.in,
+	examples/sudo_logsrvd.conf:
+	Document the process of creating self-signed certificates for
+	sudo_logsrvd. Based on a document from Laszlo Orban.
+	[0be730e58f17]
+
+	* plugins/group_file/plugin_test.c:
+	Sync with argument handling in group_plugin.c
+	[937475aa2c3f]
+
+	* plugins/sudoers/group_plugin.c:
+	If a group plugin has optional arguments, NULL terminate the vector.
+	Otherwise, the plugin cannot determine the end of arguments. The
+	behavior now matches the plugin documentation.
+	[51e02f75a447]
+
+2019-11-19  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/example_group_plugin.py:
+	plugins/python: add example python group plugin
+	[9f9d7cc2d5db]
+
+	* plugins/python/example_policy_plugin.py:
+	plugins/python: add example python policy plugin
+	[6cc0d47edae0]
+
+	* plugins/python/example_io_plugin.py:
+	plugins/python: add example io python plugin
+	[d22532c34748]
+
+2019-11-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in, src/sudo.c:
+	If there is no session or terminal group ID, pass the plugin a value
+	of 0. This behavior already matches what is documented in the
+	sudo_plugin manual for "sid" but the "tcpgid" entry needed to be
+	updated.
+	[2d720153c4cf]
+
+	* plugins/sudoers/sudoers.c:
+	Don't touch the local iolog sequence file if we are logging remotely
+	[3c5dc60a9d11]
+
+	* plugins/sudoers/iolog_client.c:
+	Plug a memory leak found by leak sanitizer
+	[13aac57d0506]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_client.c,
+	plugins/sudoers/iolog_plugin.h:
+	Make a shallow copy of user_env in I/O plugin in case it is
+	reallocated. The policy plugin's session init function may
+	reallocate the user environment pointer. Fixes a use after free when
+	PAM is used.
+	[3eb35dac2743]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/policy.c:
+	Rename "log_server" in sudoers to "log_servers" to match I/O plugin.
+	[1dbe79c18760]
+
+2019-11-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/logsrvd.c:
+	Check closure->ssl for non-NULL instead of
+	logsrvd_conf_get_tls_opt(). It's a little more obvious this way and
+	ssl is only non-NULL when the tls option is enabled anyway.
+	[3436430c064b]
+
+	* logsrvd/logsrvd.c:
+	Init iolog_dir_fd and sock in connection_closure before adding to
+	list. Otherwise we could close the wrong fds in the error path.
+	[1643211f8b46]
+
+	* doc/CONTRIBUTORS:
+	Add Laszlo Orban
+	[2836214cd4b8]
+
+2019-11-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_logsrvd.conf.man.in:
+	regen
+	[4a44bfc42b4b]
+
+	* doc/sudo_logsrvd.conf.mdoc.in, examples/sudo_logsrvd.conf:
+	Change TLS example file locations to be under /etc/ssl/sudo.
+	[f4c302a3bcb9]
+
+	* doc/sudo_logsrvd.conf.mdoc.in, examples/sudo_logsrvd.conf:
+	Document sudo_logsrvd TLS configuration.
+	[97260e6acfaf]
+
+2019-11-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_event.h:
+	Include time.h for struct timespec.
+	[8bd80773d0fa]
+
+	* lib/util/util.exp.in:
+	Add sudo_ev_set_v1 to the exports file.
+	[fd6b66378e5d]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document the log_server and log_server_timeout options
+	[7d7429b73d25]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_client.c, plugins/sudoers/iolog_plugin.h,
+	plugins/sudoers/policy.c, src/exec_nopty.c, src/exec_pty.c,
+	src/sudo.c:
+	Add support for logging to the log server
+	[158a8e80faab]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_event.h, include/sudo_plugin.h, lib/util/event.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c, src/Makefile.in,
+	src/exec.c, src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c,
+	src/load_plugins.c, src/preload.c, src/sudo.c, src/sudo.h,
+	src/sudo_plugin_int.h:
+	Add a plugin interface to sudo main event loop.
+	[123662f454da]
+
+	* MANIFEST, Makefile.in, configure, configure.ac,
+	include/log_server.pb-c.h, include/protobuf-c/protobuf-c.h,
+	lib/logsrv/Makefile.in, lib/logsrv/log_server.pb-c.c,
+	lib/logsrv/log_server.proto, lib/logsrv/protobuf-c.c,
+	logsrvd/Makefile.in, logsrvd/log_server.pb-c.c,
+	logsrvd/log_server.pb-c.h, logsrvd/log_server.proto,
+	logsrvd/protobuf-c/protobuf-c.c, logsrvd/protobuf-c/protobuf-c.h:
+	Move protobuf-c.c, log_server.proto, log_server.pb-c.[ch] to
+	lib/logsrv
+	[6772a775471f]
+
+	* lib/util/event.c:
+	When freeing an event base, reset ev->base to NULL for associated
+	events.
+	[7199d3967059]
+
+	* logsrvd/logsrvd_conf.c:
+	Move cb_timeout() out from under the HAVE_OPENSSL ifdef.
+	[c7fc294ce21a]
+
+	* INSTALL, config.h.in, configure, configure.ac, logsrvd/Makefile.in,
+	logsrvd/logsrvd.c:
+	LibreSSL and older OpenSSL don't support SSL_CTX_set_ciphersuites().
+	Add a configure test and skip TLS 1.3 setup if it is missing. We
+	still accept the tls_ciphers13 config setting but it will be
+	ignored.
+	[06d478442971]
+
+	* logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Minor style nits that I missed during review.
+	[7209ccc5a3cf]
+
+	* logsrvd/sendlog.c:
+	Avoid calling SSL_CTX_free() on an uninitialized pointer in an error
+	path.
+	[2df423e30773]
+
+	* Merge pull request #9 from sudo-project/audit-server-tls-support
+
+	Audit server tls support
+	[0aded6c1deec]
+
+2019-11-13  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/Makefile.in, logsrvd/sendlog.c:
+	update sudo_sendlog to support openssl tls
+	[ab4be8367862]
+
+2019-11-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/limits.c:
+	Simplify resource limit fallback logic a bit.
+	[cdab60b50079]
+
+2019-11-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/CONTRIBUTORS:
+	Add sudo logo designers
+	[94c841c8bc28]
+
+	* src/limits.c:
+	Don't set the RLIMIT_STACK soft/hard limits to unlimited. Use 8Mb
+	for soft and 64Mb for hard. Works around issues on macOS and docker.
+	See also Bug #908
+	[1d7f52c32360]
+
+	* src/tgetpass.c:
+	Restore resource limits before executing the askpass program. Linux
+	with docker seems to have issues executing a program when the stack
+	size is unlimited. Bug #908
+	[28cb58a5ac94]
+
+	* src/conversation.c:
+	Check for replies pointer being NULL just in case.
+	[7c0c4c6b001e]
+
+2019-11-11  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* examples/sudo_logsrvd.conf, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c:
+	set timeout value for the socket
+	[e884292ab6c9]
+
+2019-11-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/conversation.c:
+	Convert trailing newline to carriage return + newline for tty. Does
+	not currently handle embedded newlines.
+	[ad195e045150]
+
+2019-11-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/fatal.c:
+	Only write a carriage return if output is to a tty.
+	[f605335649ea]
+
+	* lib/util/fatal.c:
+	Include a carriage return when printing warning messages. Otherwise,
+	if the command is running in a pty the output is stair-stepped.
+	[f23d4f0ed902]
+
+2019-11-08  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* configure, logsrvd/Makefile.in, logsrvd/logsrvd.c,
+	logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	make audit server openssl dependency optional; tls layer is compiled
+	only if sudo is built with --enable-openssl feature switch
+	[c360a34c89c0]
+
+2019-11-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/util.exp.in:
+	Add sudo_parse_host_port_v1 and sudo_pow2_roundup_v1 to exports
+	file.
+	[e8b529115871]
+
+2019-11-07  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c:
+	fixed segfault when connection_closure_free() tries to remove a non-
+	existent connection object from the list
+	[4d6dd38d59f6]
+
+2019-11-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/closefrom.c:
+	Fix typo in closefrom emulation.
+	[b23a6c512d4a]
+
+	* plugins/sudoers/env.c:
+	Do not warn about a missing /etc/environment file on Linux without
+	PAM. Bug #907
+	[f85ff5ee2caf]
+
+2019-11-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke_util.c,
+	plugins/sudoers/visudo.c:
+	Transparently handle the "sudo sudoedit" problem. Some admin are
+	confused about how to give users sudoedit permission and many users
+	try to run sudoedit via sudo instead of directly. If the user runs
+	"sudo sudoedit" sudo will now treat it as plain "sudoedit" after
+	issuing a warning. If the admin has specified a fully-qualified path
+	for sudoedit in sudoers, sudo will treat it as just "sudoedit" and
+	match accordingly. In visudo (but not sudo), a fully-qualified path
+	for sudoedit is now treated as an error.
+	[5cdcfd9a6c33]
+
+	* logsrvd/iolog_writer.c, logsrvd/sendlog.c:
+	Rename cwd -> submitcwd to match man page.
+	[bc9ea396055a]
+
+2019-11-05  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c:
+	verify server/client certs with CA certificate chain file
+	[a177af7d7bbf]
+
+2019-11-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, lib/util/Makefile.in, lib/util/host_port.c,
+	lib/util/regress/host_port/host_port_test.c:
+	Add unit test for parse_host_port and make an empty port an error.
+	[b6b895cdc010]
+
+2019-11-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/host_port.c:
+	Fill in host and port pointers on success.
+	[794368ebd367]
+
+2019-11-04  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c:
+	fix copy-paste mistake
+	[2fe897c77485]
+
+2019-11-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/host_port.c, logsrvd/logsrvd_conf.c:
+	Split out code to parse host:port into a utility function.
+	[d8331e72394d]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/roundup.c, logsrvd/logsrv_util.c, logsrvd/logsrv_util.h,
+	logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Move bufsize_roundup() -> sudo_pow2_roundup() in libsudo_util.
+	[791f5c353ef1]
+
+	* lib/iolog/Makefile.in, logsrvd/Makefile.in:
+	Add missing depend target
+	[75107bcfff3d]
+
+	* lib/iolog/Makefile.in, lib/util/Makefile.in, logsrvd/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	We haven't needed -I$(top_srcdir) for a long time.
+	[6974ea4a6c8c]
+
+	* lib/util/closefrom.c:
+	In closefrom_fallback() use the interval [OPEN_MAX, INT_MAX]. We
+	want to try closing at least OPEN_MAX fds but no more than INT_MAX.
+	On 64-bit systems it is possible for sysconf(_SC_OPEN_MAX) to return
+	a value larger than INT_MAX when the number of open files is
+	unlimited.
+	[08d6fea1c894]
+
+	* plugins/sudoers/logging.c, src/exec_monitor.c, src/selinux.c,
+	src/tgetpass.c:
+	Use dup3() instead of dup2(). This is less error prone since dup3()
+	returns an error if old == new. Sudo guarantees that fds 0-2 are
+	already open.
+	[a9ffaa8a8a55]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, lib/util/dup3.c,
+	mkdep.pl:
+	Add dup3() emulation.
+	[7bd8864dee7e]
+
+	* plugins/sudoers/logging.c, src/exec_monitor.c, src/exec_pty.c,
+	src/tgetpass.c:
+	Open all pipes using pipe2() with O_CLOEXEC. We no longer depend on
+	calling closefrom() before exec.
+	[176ae5cf1d94]
+
+	* src/exec.c, src/tgetpass.c:
+	Call closefrom() before we change to a non-root UID. This prevents
+	another process from changing the NOFILE resource limit of the child
+	process and defeating the closefrom() call. Reported by Joe Vennix
+	from Apple Information Security.
+	[f93d52b24976]
+
+	* MANIFEST, logsrvd/Makefile.in:
+	Regenerate Makefile and sort MANIFEST
+	[24664d6c9d47]
+
+2019-11-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in:
+	Reference timestamp_type and timestamp_timeout in sudoers. This
+	should help users find details on how time stamp files work.
+	[d5aa7c0b404c]
+
+2019-10-31  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* logsrvd/logsrvd.c:
+	process tls config params in the audit server and establish TLS
+	connection accordingly
+	[33ce32c140af]
+
+2019-10-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/limits.c:
+	macOS does not allow rlim_cur to be set to RLIM_INFINITY for
+	RLIMIT_NOFILE. We need to use OPEN_MAX instead as per the macOS
+	setrlimit manual. Bug #904
+	[2a00e62eaeb0]
+
+2019-10-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in:
+	Fix ChangeLog generation on a branch.
+	[69409e5b1179]
+
+2019-10-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* logsrvd/sendlog.c:
+	Remove unused copy of iolog_seekto().
+	[1d730d414cd9]
+
+2019-10-25  Laszlo Orban  <laszlo.orban@quest.com>
+
+	* examples/sudo_logsrvd.conf, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c:
+	add configuration options for TLS
+	[291a9986d6e9]
+
+2019-10-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, doc/Makefile.in, doc/sudo_logsrv.proto.man.in,
+	doc/sudo_logsrv.proto.mdoc.in, doc/sudo_logsrvd.conf.man.in,
+	doc/sudo_logsrvd.conf.mdoc.in, examples/sudo_logsrvd.conf,
+	logsrvd/iolog_writer.c:
+	Document the sudo log server protocol
+	[46de0934987c]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c,
+	logsrvd/logsrvd_conf.c, plugins/sudoers/iolog.c:
+	Read logsrvd.conf in two steps: first read, then apply if OK. This
+	fixes a problem where when logsrvd.conf was reloaded while running
+	(due to SIGHUP) and there was an error we could end up with a
+	partial config.
+	[d3244c318c5b]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_util.c,
+	lib/iolog/regress/iolog_util/check_iolog_util.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrv_util.c, logsrvd/sendlog.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoreplay.c:
+	Add iolog_ prefix to exported functions in iolog_util.c
+	[62027c8e1abd]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c,
+	logsrvd/logsrvd_conf.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c:
+	Simplify iolog_set_user and iolog_set_group
+	[e82c5078b02c]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, lib/util/fchmodat.c,
+	lib/util/fstatat.c, mkdep.pl:
+	Add fchmodat() and fstatat() emulation. Note that fchmodat()
+	emulation does not support AT_SYMLINK_NOFOLLOW
+	[8232c22e71c7]
+
+	* doc/sudo_logsrvd.man.in, doc/sudo_logsrvd.mdoc.in,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c:
+	Clear the write bit on the timing file for completed logs. This
+	allows us to tell whether or not a log can be restarted.
+	[b2180b6ef53b]
+
+	* logsrvd/logsrvd.c:
+	Redirect std{in,out,err} to /dev/null even when given the -n option.
+	[376186a8d9cc]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_path.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/iolog/regress/iolog_path/data, logsrvd/iolog_writer.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path_escapes.c,
+	plugins/sudoers/sudoers.c:
+	Simplify expand_iolog_path()
+	[4f0f85f659d1]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[e268d56da49c]
+
+	* examples/sudo_logsrvd.conf, include/sudo_iolog.h,
+	lib/iolog/iolog_fileio.c, logsrvd/Makefile.in, logsrvd/logsrvd.c,
+	logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c:
+	Make the logsrvd port and list address configurable.
+	[69d73358888d]
+
+	* Makefile.in, logsrvd/Makefile.in, logsrvd/iolog_writer.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd_conf.c, logsrvd/sendlog.c:
+	Mark logsrvd and sendlog strings for translation in the sudoers
+	domain
+	[24b1fd6250fb]
+
+	* logsrvd/Makefile.in, logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Add long option support to logsrvd and sendlog.
+	[ecb2fae83abb]
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h:
+	Return an error to the client on error instead of dropping the
+	connection.
+	[2e40ca902100]
+
+	* examples/sudo_logsrvd.conf, logsrvd/logsrvd_conf.c:
+	Convert sudo_logsrvd.conf to ini file format
+	[91dff03d0795]
+
+	* MANIFEST, examples/sudo_logsrvd.conf, include/sudo_util.h,
+	lib/util/Makefile.in, lib/util/logfac.c, lib/util/logpri.c,
+	lib/util/util.exp.in, logsrvd/Makefile.in, logsrvd/eventlog.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, plugins/sudoers/defaults.c:
+	Add basic support for event logging using a sudo-style log format.
+	[eb6aa3672e6f]
+
+	* logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Add OpenBSD malloc options.
+	[a0d79af0c430]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/buffer.c, logsrvd/buffer.h,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Allow messages up to 2Mb in size.
+	[af79754aaf53]
+
+	* MANIFEST, configure, configure.ac, doc/Makefile.in,
+	doc/sudo_logsrvd.conf.man.in, doc/sudo_logsrvd.conf.mdoc.in,
+	doc/sudo_logsrvd.man.in, doc/sudo_logsrvd.mdoc.in,
+	doc/sudo_sendlog.man.in, doc/sudo_sendlog.mdoc.in,
+	examples/sudo_logsrvd.conf, m4/sudo.m4:
+	Add manual pages for logsrvd and sendlog.
+	[f437259d81ae]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c:
+	Add restart support for compresses I/O logs.
+	[1191fac5ff52]
+
+	* logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Fix client side of restart. Seek to the target point there too so we
+	start sending from the right place.
+	[403bf22a6dad]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_util.c,
+	logsrvd/iolog_writer.c, logsrvd/sendlog.c,
+	plugins/sudoers/sudoreplay.c:
+	Move read_timing_record() into libsudo_iolog
+	[65a984f7fa7a]
+
+	* MANIFEST, lib/iolog/iolog_fileio.c, logsrvd/Makefile.in,
+	logsrvd/buffer.c, logsrvd/buffer.h, logsrvd/iolog_writer.c,
+	logsrvd/logsrv_util.c, logsrvd/logsrv_util.h, logsrvd/logsrvd.h,
+	logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Rename buffer.c -> logsrv_util.c and add iolog_seekto()
+	[0ff1a6fdaecd]
+
+	* logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Fix some warnings from the clang static analyzer.
+	[95de486cfb65]
+
+	* logsrvd/sendlog.c:
+	Fix Coverity CID 204353, fd leak on error path.
+	[3519d910c777]
+
+	* logsrvd/logsrvd_conf.c:
+	Fix Coverity CID 204355, resource leak on error path.
+	[c5c50c6bae16]
+
+	* lib/iolog/iolog_fileio.c:
+	Avoid TOCTOU in iolog_mkdirs; Coverity CID 204356
+	[0c8679a731f5]
+
+	* lib/util/mkdir_parents.c:
+	Avoid TOCTOU in sudo_mkdir_parents; Coverity CID 204357
+	[e9eeae60dff2]
+
+	* logsrvd/log_server.pb-c.c, logsrvd/log_server.pb-c.h,
+	logsrvd/log_server.proto:
+	Add NumberList to InfoMessage. Also make comments fit in 80 columns
+	when formatted as a man page.
+	[fd7af0bb2477]
+
+	* configure, configure.ac, include/sudo_rand.h, logsrvd/Makefile.in,
+	logsrvd/logsrvd.c:
+	Command line option processing for logsrvd
+	[0f2248532960]
+
+	* MANIFEST, examples/sudo_logsrvd.conf, logsrvd/Makefile.in,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/logsrvd_conf.c, pathnames.h.in:
+	Add config file support for logsrvd
+	[4e643a95c88b]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/mkdir_parents.c, lib/util/util.exp.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/mkdir_parents.c,
+	plugins/sudoers/sudoers.h:
+	Move mkdir_parents to libsudo_util.
+	[3f540eb94282]
+
+	* MANIFEST, Makefile.in, configure, configure.ac,
+	include/sudo_iolog.h, include/sudo_util.h, lib/iolog/Makefile.in,
+	lib/iolog/iolog_fileio.c, lib/iolog/iolog_path.c,
+	lib/iolog/iolog_util.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	lib/iolog/regress/iolog_path/data,
+	lib/iolog/regress/iolog_util/check_iolog_util.c,
+	lib/util/sudo_conf.c, logsrvd/Makefile.in, logsrvd/iolog_writer.c,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	logsrvd/sendlog.c, logsrvd/sendlog.h,
+	plugins/sample/sample_plugin.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog.h, plugins/sudoers/iolog_files.h,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/iolog_path_escapes.c,
+	plugins/sudoers/iolog_util.c, plugins/sudoers/iolog_util.h,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/iolog_path/data,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/iolog_util/check_iolog_util.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c, src/sudo.h:
+	Refactor code in sudoers that creates I/O log files to share with
+	logsrvd.
+	[3aa1fa95650d]
+
+	* Makefile.in, include/sudo_iolog.h, lib/iolog/iolog_path.c,
+	lib/iolog/regress/iolog_path/check_iolog_path.c,
+	logsrvd/iolog_writer.c, logsrvd/logsrvd.h, logsrvd/logsrvd_conf.c,
+	plugins/sudoers/iolog_path_escapes.c, plugins/sudoers/sudoers.c:
+	Enable sudo_logsrvd.conf settings.
+	[8e7b37d1d2a9]
+
+	* include/sudo_iolog.h, lib/iolog/iolog_fileio.c,
+	lib/iolog/iolog_util.c, logsrvd/iolog_writer.c, logsrvd/logsrvd.h,
+	logsrvd/sendlog.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoreplay.c:
+	Use openat(2) when opening files in the I/O log directory.
+	[1ab2e278e1d9]
+
+	* logsrvd/Makefile.in, sudo.pp:
+	Add sudo_ prefix to logsrvd and sendlog.
+	[acbaed157ae5]
+
+	* logsrvd/iolog_writer.c, logsrvd/log_server.pb-c.c,
+	logsrvd/log_server.pb-c.h, logsrvd/log_server.proto,
+	logsrvd/logsrvd.c, logsrvd/logsrvd.h, logsrvd/sendlog.c,
+	logsrvd/sendlog.h:
+	Rename ExecMessage -> AcceptMessage and add RejectMessage
+	[a080c4eb7c4b]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/openat.c, lib/util/unlinkat.c,
+	src/sudo_edit.c:
+	Move openat() emulation to lib/util and at unlinkat() emulation.
+	[756ace7fdf38]
+
+	* logsrvd/iolog_writer.c, logsrvd/logsrvd.c, logsrvd/sendlog.c:
+	Add debugging for logsrvd and sendlog
+	[4c86dbceb611]
+
+	* MANIFEST, doc/LICENSE, logsrvd/Makefile.in,
+	logsrvd/protobuf-c/protobuf-c.c, logsrvd/protobuf-c/protobuf-c.h:
+	Import protobuf-c source since to avoid an external dependency. The
+	files generated with protoc-c are not standalone. We need to include
+	protobuf-c.c and protobuf-c.h from the protobuf-c distribution too.
+	Building protoc-c requires a relative recent version of gcc which
+	limits its portability.
+	[0ea50a59cab7]
+
+	* logsrvd/Makefile.in, logsrvd/iolog_writer.c, logsrvd/logsrvd.c,
+	logsrvd/logsrvd.h, logsrvd/sendlog.c, logsrvd/sendlog.h:
+	Add support for restarting I/O log transfers.
+	[748e8f4f7fec]
+
+	* MANIFEST, Makefile.in, configure, configure.ac, logsrvd/Makefile.in,
+	logsrvd/iolog.h, logsrvd/iolog_reader.c, logsrvd/iolog_writer.c,
+	logsrvd/log_server.pb-c.c, logsrvd/log_server.pb-c.h,
+	logsrvd/log_server.proto, logsrvd/logsrvd.c, logsrvd/logsrvd.h,
+	logsrvd/sendlog.c, logsrvd/sendlog.h, sudo.pp:
+	Import proof of concept sudo log server.
+	[a0687ba66feb]
+
+	* MANIFEST, logsrvd/Makefile.in, logsrvd/iolog.h,
+	logsrvd/iolog_reader.c, logsrvd/iolog_writer.c, logsrvd/logsrvd.h,
+	logsrvd/sendlog.c, logsrvd/sendlog.h, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/iolog.h,
+	plugins/sudoers/iolog_util.c, plugins/sudoers/iolog_util.h,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/iolog_util/check_iolog_util.c,
+	plugins/sudoers/sudoreplay.c:
+	Refactor I/O log code so it can be shared between sudoers and
+	logsrvd
+	[b6608769ba8a]
+
+	* lib/util/strtonum.c:
+	Avoid invalid read when minval > maxval
+	[7f1a6f992e4f]
+
+2019-10-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, plugins/sudoers/policy.c, src/sudo.c:
+	Don't pass an invalid session or process group ID to the plugin.
+	Fixes a regression in 1.8.28 when there is no terminal session
+	leader.
+	[d9c626167b3c]
+
+2019-10-22  Robert Manner  <robert.manner@balabit.com>
+
+	* plugins/python/pyhelpers.c, plugins/python/pyhelpers.h,
+	plugins/python/pyhelpers_cpychecker.h,
+	plugins/python/python_plugin_common.c,
+	plugins/python/python_plugin_common.h,
+	plugins/python/python_plugin_group.c,
+	plugins/python/python_plugin_io.c,
+	plugins/python/python_plugin_policy.c:
+	plugins/python: a plugin which can load policy/io plugin written in
+	python
+	[2c7620c8052f]
+
+	* Makefile.in, configure.ac, plugins/python/Makefile.in:
+	Makefile.in, configure.ac: add python plugin build
+	[09b305e2cd54]
+
+2019-10-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[70f4543f177c]
+
+	* src/limits.c:
+	Not all systems support RLIMIT_NPROC and RLIMIT_RSS
+	[26b8e2afe755]
+
+	* doc/Makefile.in, examples/Makefile.in, include/Makefile.in,
+	lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Add depend target to all Makefile.in files.
+	[0a22d80ef716]
+
+	* NEWS, configure, configure.ac, doc/UPGRADE:
+	Sudo 1.8.29
+	[736c9a5c3720]
+
+	* MANIFEST, lib/util/Makefile.in, src/Makefile.in, src/exec.c,
+	src/limits.c, src/sudo.c, src/sudo.h:
+	Set resource limits in the sudo process to unlimited. We don't want
+	sudo to be limited by the caller's resource limits. The original
+	resource limits are restore before session setup.
+	[6c3bf214caf0]
+
+2019-10-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/starttime.c, src/ttyname.c:
+	Older FreeBSD needs sys/param.h included before sys/user.h. From
+	Darren Tucker
+	[88c060df0439]
+
+	* include/sudo_util.h, lib/util/getgrouplist.c, lib/util/gidlist.c,
+	lib/util/regress/strtofoo/strtoid_test.c, lib/util/strtoid.c,
+	lib/util/util.exp.in, plugins/group_file/getgrent.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/match.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	plugins/system_group/system_group.c, src/sudo.c:
+	Rename sudo_strtoid() to sudo_strtoidx() and add simplified
+	sudo_strtoid()
+	[94a418cdbae6]
+
+2019-10-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/UPGRADE, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/sudoers_timestamp.man.in, doc/sudoers_timestamp.mdoc.in,
+	doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/cvtsudoers_json.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/testsudoers.c, src/exec.c:
+	Refer to user-ID and group-ID instead of "user ID" and "group ID"
+	[36d7bd4ab52d]
+
+2019-10-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	sudoedit doesn't create a new PAM session so PAM umask does not
+	apply.
+	[8ae167d0ae7c]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, include/sudo_plugin.h,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/exec.c, src/sudo.c, src/sudo.h:
+	Change how the umask is handled with PAM and login.conf. If the
+	umask is explicitly set in sudoers, use that value regardless of
+	what is in PAM or login.conf. If using the default umask from
+	sudoers, allow PAM or login.conf to override it. Bug #900
+	[7c0a835ac512]
+
+2019-10-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/audit.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/logging.c:
+	Add log_allowed and log_denied sudoers flags, defaulting to true.
+	[fb1e188a3d05]
+
+	* lib/util/Makefile.in, plugins/sudoers/Makefile.in, src/Makefile.in:
+	Enable security auditing malloc options for "make check".
+	[333632dd3134]
+
+2019-10-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Be more consistent with how we talk about sudoers Defaults settings.
+	Use "flag" not "option" when referring to boolean flags. Use
+	"setting" in place of "Defaults setting" in most places. Use "the
+	foo option" instead of "sudo's foo option" for command line options.
+	[8058378c4b35]
+
+	* plugins/sudoers/Makefile.in:
+	No need to check existing sudoers file when installing to DESTDIR
+	This check can cause problems on systems where /etc/sudoers.d is not
+	readable.
+	[2ec01e9fe408]
+
+	* lib/util/str2sig.c:
+	Inclue sudo_util.h to get sudo_strtonum() prototype.
+	[8b0b4ee28d5f]
+
+	* lib/util/str2sig.c:
+	strtonum -> sudo_strtonum
+	[4d2363678583]
+
+	* MANIFEST:
+	Add split out strtofoo tests.
+	[0cc598502faf]
+
+	* lib/util/strtonum.c:
+	Make sure we don't go past the end of the string when out of range.
+	[2b89961c524a]
+
+	* lib/util/regress/strtofoo/strtonum_test.c, lib/util/strtonum.c:
+	Fix stronum() regress test and the errno value for out of range
+	numbers.
+	[3547d022bead]
+
+	* lib/util/Makefile.in, lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/strtofoo/strtobool_test.c,
+	lib/util/regress/strtofoo/strtoid_test.c,
+	lib/util/regress/strtofoo/strtomode_test.c,
+	lib/util/regress/strtofoo/strtonum_test.c:
+	Split atofoo.c regress into multiple tests.
+	[75b7547e33bd]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.28p1
+	[09ceaddc94f9]
+
+2019-10-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse.c:
+	The fix for bug #869 broke "sudo -v" when verifypw=all (the default)
+	[aac35bcd8584]
+
+2019-10-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_compat.h, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/closefrom.c, lib/util/getaddrinfo.c, lib/util/strtonum.c,
+	lib/util/sudo_conf.c, lib/util/ttysize.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_util.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/starttime/check_starttime.c,
+	src/parse_args.c, src/sesh.c, src/sudo.c, src/ttyname.c:
+	Use sudo_strtonum() explicitly instead of via a macro.
+	[f75f786eddd5]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/Makefile.in, lib/util/strtoid.c, lib/util/strtonum.c,
+	lib/util/util.exp.in, mkdep.pl:
+	Always use our own strtonum and implement sudo_strtoid in terms of
+	it.
+	[94b1114ef79d]
+
+	* plugins/sudoers/pwutil.c:
+	Use errno in warning when sudo_make_*_item() fails. Previously we
+	always said "out of memory" if not ENOENT.
+	[68e5a208c242]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/parse_ldif.c,
+	plugins/sudoers/regress/cvtsudoers/test26.err.ok,
+	plugins/sudoers/regress/cvtsudoers/test26.sh:
+	Reject non-LDIF input when converting from LDIF to sudoers or JSON.
+	[2d08d4aa0e01]
+
+2019-10-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/da.mo,
+	plugins/sudoers/po/el.mo, plugins/sudoers/po/eu.mo,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fur.mo,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hu.mo,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/lt.mo,
+	plugins/sudoers/po/nl.mo, plugins/sudoers/po/ru.mo,
+	plugins/sudoers/po/sk.mo, plugins/sudoers/po/sl.mo,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/tr.mo,
+	plugins/sudoers/po/zh_CN.mo, po/ast.mo, po/ca.mo, po/es.mo,
+	po/eu.mo, po/fi.mo, po/fur.mo, po/gl.mo, po/hr.mo, po/hu.mo,
+	po/ko.mo, po/nl.mo, po/nn.mo, po/ru.mo, po/sk.mo, po/sl.mo,
+	po/sr.mo, po/sudo.pot, po/vi.mo, po/zh_CN.mo:
+	regen
+	[362645d256b7]
+
+	* NEWS, lib/util/strtoid.c:
+	Treat an ID of -1 as invalid since that means "no change". Fixes
+	CVE-2019-14287. Found by Joe Vennix from Apple Information Security.
+	[83db8dba09e7]
+
+	* lib/util/regress/atofoo/atofoo_test.c,
+	plugins/sudoers/regress/testsudoers/test5.out.ok,
+	plugins/sudoers/regress/testsudoers/test5.sh:
+	Add sudo_strtoid() tests for -1 and range errors. Also adjust
+	testsudoers/test5 which relied upon gid -1 parsing.
+	[db06a8336c09]
+
+2019-10-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL, configure, configure.ac:
+	Back out compiler override for now.
+	[f03f7fd7ff8b]
+
+	* configure, configure.ac:
+	Only prefer clang over gcc on BSD systems.
+	[2309baa23a00]
+
+2019-10-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in:
+	Fix "make pvs-studio" run in a build dir
+	[a49635de3777]
+
+2019-09-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[430d45f3b461]
+
+	* NEWS:
+	Bug #898
+	[3d07895888e8]
+
+	* src/exec.c, src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c,
+	src/selinux.c, src/sudo.c, src/sudo.h:
+	Fix restoring the file context of the user's tty with SELinux. Also
+	fix broken tty labeling when running a command in a pty. Includes a
+	fix for a typo introduced in the last change set.
+	[eb3f547b08f8]
+
+	* lib/util/arc4random.c:
+	_rs_random_buf is currently unused
+	[e384fc3625e8]
+
+	* src/selinux.c:
+	Add some debugging around context setting and tty labeling Also be
+	more extact with error return values
+	[ed66480282c7]
+
+2019-09-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sudo_debug.c:
+	Better error message when debug log file cannot be opened.
+	[09e0cdff0c49]
+
+2019-09-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgignore:
+	Ignore in-tree build directory.
+	[66577c63f097]
+
+	* configure, configure.ac:
+	Set CC before AC_USE_SYSTEM_EXTENSIONS to get our preferred
+	compiler.
+	[6a318eeffb30]
+
+2019-09-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* pp:
+	Update Polypkg to the latest version from git.
+	[68bbecc25007]
+
+	* configure, configure.ac:
+	If no mandoc or nroff is present, install mdoc format manuals. If
+	there is no installed nroff/mandoc they will need to install groff
+	or heirloom doctools to format the manual pages.
+	[6dd386c1a378]
+
+2019-09-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in, include/sudo_plugin.h:
+	Refer to number of terminal lines, not rows, for consistency.
+	[566e3e38058f]
+
+2019-09-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* INSTALL, configure, configure.ac:
+	Prefer clang over gcc. We want to use clang on systems where clang
+	is the system compiler. It is less common to have clang installed on
+	systems where gcc is the system compiler.
+	[d29d764a4938]
+
+	* INSTALL:
+	No longer need bypass_last_login on HP-UX, warnings work with clang.
+	Also add deb package names for pam and ldap devel on Linux.
+	[6aff480b1f4b]
+
+	* src/parse_args.c:
+	Silence a warning from clang about string concatenation.
+	[cadba1a4d86d]
+
+2019-09-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, doc/UPGRADE:
+	sudoedit umask fix
+	[4bfc0e393e2a]
+
+2019-09-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/event.c:
+	Fix sorting of the time-based event queue.
+	[f12e5a877c8a]
+
+	* lib/util/event.c:
+	Support default base in got_exit, got_break, loopexit, loopbreak,
+	loopcontinue
+	[da02194b5ba9]
+
+2019-09-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_edit.c:
+	Create new files with the umask specified in sudoers.
+	[4d0b6152834b]
+
+2019-09-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse_ldif.c:
+	More case-insensitive compare for LDAP attributes and string lists.
+	Only the ALL keyword should be compared case-sensitive.
+	[87cd688b2648]
+
+2019-08-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo.h:
+	Enable asserts for Coverity too.
+	[b830f200a8bd]
+
+	* src/parse_args.c, src/sudo.h:
+	Add asserts() to avoid static analyzer false positives.
+	[860aca50028d]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Plug memory leak on malloc failure.
+	[1b35743703d4]
+
+	* plugins/sudoers/ldap_util.c:
+	Plug memory leak on malloc failure.
+	[c2257637d659]
+
+2019-08-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/pam.c:
+	Add sudo_pam_strerror(), like pam_strerror() but never returns NULL.
+	It also uses strerror(errno) for PAM_SYSTEM_ERR.
+	[b070d1702112]
+
+	* plugins/sudoers/auth/pam.c:
+	If pam_start() fails, display the PAM error using pam_strerror(). It
+	is legal to pass pam_strerror() a NULL handle.
+	[6403fa1479d8]
+
+2019-08-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	If the sudoreplay ID option is a fully-qualified path, use it
+	directly. Previously, one had to use the -d option to override the
+	I/O log directory.
+	[9fddb3ffc760]
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[f70579d2972b]
+
+	* MANIFEST, doc/sudo.conf.man.in.sed:
+	Add conditional for sesh path in sudo.conf manual.
+	[93b5c6fcf8f4]
+
+2019-08-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Bug #895
+	[d69984bccd0e]
+
+	* plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/check.c, plugins/sudoers/sudo_printf.c,
+	src/conversation.c:
+	Use the SUDO_CONV_PREFER_TTY flag during authentication. This
+	prevents the password and PAM prompts from being redirected. Bug
+	#895
+	[546082c674b7]
+
+2019-08-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* mkpkg:
+	Fix typo that prevented a missing linux audit lib from being
+	detected.
+	[b9412151615d]
+
+2019-08-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoreplay.c:
+	Use fputs(), not printf() for plain strings.
+	[b102ae1cb6da]
+
+	* NEWS:
+	Recent fixes.
+	[8249e98a05c8]
+
+	* plugins/sudoers/ldap.c:
+	Add user ID to the search filter when matching sudoUser. We already
+	support group IDs but the user ID was missing. From
+	sudo-1.8.23-ldapsearchuidfix.patch in RHEL 7.
+	[3da7b9f990be]
+
+	* plugins/sudoers/regress/sudoers/test2.json.ok,
+	plugins/sudoers/regress/sudoers/test2.toke.ok,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix parsing of double-quoted Defaults bindings that start with % or
+	+. From sudo-1.8.23-fix-double-quote-parsing-for-Defaults-
+	values.patch in RHEL 7.
+	[df613e67ef45]
+
+	* src/exec.c:
+	Restore core dump resource limit before the PAM session module is
+	run. Otherwise, we may override the limits set by PAM. Bug #894
+	[f35441098234]
+
+2019-08-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/sig2str.c, lib/util/str2sig.c:
+	sys_signame on macOS contains lower-cases names
+	[d7af71311b3d]
+
+	* MANIFEST, configure, configure.ac, lib/util/Makefile.in,
+	lib/util/regress/strsig/strsig_test.c:
+	Add regress tests for str2sig() and sig2str().
+	[fb73303699fb]
+
+	* lib/util/str2sig.c:
+	SIGIOT and SIGABRT are aliases on BSD systems.
+	[d35f75aba04a]
+
+	* lib/util/sig2str.c, lib/util/str2sig.c:
+	Fix handling of real-time signals.
+	[39066a5eabcb]
+
+2019-08-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	ipa_hostname fix
+	[54245ed09830]
+
+2019-08-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/file.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c:
+	Fix special handling of ipa_hostname that was lost in sudo 1.8.24.
+	We now include the long and short hostname in sudo parser container.
+	[b4f31dbe3109]
+
+2019-08-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_event.h:
+	Remove unused include file.
+	[0731078e72b1]
+
+2019-08-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, doc/UPGRADE:
+	Mention I/O log signal change in NEWS and UPGRADE files.
+	[ac7969640146]
+
+	* MANIFEST, NEWS, plugins/sudoers/po/ast.mo,
+	plugins/sudoers/po/ast.po:
+	Asturian translation for sudoers from translationproject.org.
+	[4f011f10129e]
+
+	* mkdep.pl:
+	Check source dir if source file is not listed in MANIFEST.
+	Previously, we just used the file name without $(srcdir).
+	[cd17ca929217]
+
+	* MANIFEST, config.h.in, configure, configure.ac, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, include/sudo_compat.h, lib/util/Makefile.in,
+	lib/util/str2sig.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_util.c:
+	Store signal name, not number in I/O log timing file. The "SIG"
+	prefix is not used so, e.g. SIGTERM -> "TERM". This makes the I/O
+	log files portable from one system to another. Older I/O log files
+	with signal numbers can still be replayed.
+	[5652f831b715]
+
+2019-07-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/utmp.c:
+	Disable stringop-truncation false positive warnings on gcc 8.
+	Strings in struct utmp/utmpx are not guaranteed to be NUL-
+	terminated.
+	[644b97bba318]
+
+	* plugins/group_file/plugin_test.c, src/net_ifs.c:
+	Replace non-essential strncpy() calls.
+	[2377cad6e155]
+
+2019-07-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Revert version back to 1.8.28
+	[4e2deb0b4925]
+
+	* lib/util/Makefile.in:
+	Link util functions being tested directly with the test harness.
+	Otherwise we may get the version from the installed libsudo_util.so.
+	[46c833080d13]
+
+2019-07-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt.mo, plugins/sudoers/po/pt.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/zh_TW.mo,
+	plugins/sudoers/po/zh_TW.po, po/cs.mo, po/cs.po, po/da.mo, po/da.po,
+	po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fr.mo, po/fr.po,
+	po/it.mo, po/it.po, po/ja.mo, po/ja.po, po/nb.mo, po/nb.po,
+	po/pl.mo, po/pl.po, po/pt.mo, po/pt.po, po/pt_BR.mo, po/pt_BR.po,
+	po/sv.mo, po/sv.po, po/tr.mo, po/tr.po, po/uk.mo, po/uk.po,
+	po/zh_TW.mo, po/zh_TW.po:
+	Updated translations from translationproject.org
+	[a5aa41ab05cb]
+
+2019-07-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/parse.c:
+	Use strftime(3) instead of formatting struct tm by hand. Fixes a
+	warning on newer versions of gcc.
+	[4a2fdb51bbe5]
+
+	* doc/sudo.man.in, doc/sudo.mdoc.in:
+	Update error message when the password cannot be read from the
+	terminal.
+	[9b329f92e8a0]
+
+	* NEWS:
+	Fix for Bug #888
+	[d64fc43adfdd]
+
+	* plugins/sudoers/match_command.c, plugins/sudoers/match_digest.c:
+	If the command in sudoers does not exist on the file system, match
+	by name. We still want to match the command even if it doesn't exist
+	so that the NOPASSWD flag on sudoers entries with non-existant paths
+	works as expected. Bug #888.
+	[0879054870be]
+
+	* NEWS, doc/TROUBLESHOOTING, po/sudo.pot, src/tgetpass.c:
+	More verbose error message when a password is required and no
+	terminal is present. Bug #828.
+	[f15ffeffff32]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[8e0fdf8e4cd5]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that PAM session modules are now run with the silent flag.
+	[b67b769a0532]
+
+2019-07-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Simpler change to retry sudo_secure_file() as root as needed.
+	[feb0c2309366]
+
+	* plugins/sudoers/sudoers.c:
+	If we are unable to stat() sudoers as non-root, try again as root.
+	By default, sudo relies soley on group permissions to read sudoers
+	to make it possible to store sudoers on NFS. However, if
+	/etc/sudoers is not accessible to non-root uids for some reason,
+	sudo will fail. Bug #880.
+	[6a50adb25f2e]
+
+2019-07-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Clarify that ttyin contains raw terminal input.
+	[eea9d33f85bd]
+
+2019-07-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Expand the description of the I/O log files.
+	[f15cefc9bbd8]
+
+	* doc/sudo.conf.mdoc.in:
+	Remove trailing whitespace.
+	[421e9f481c1d]
+
+2019-07-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in:
+	Rename PLUGINDIR -> plugindir
+	[75cc43534ee1]
+
+	* configure, configure.ac:
+	Use $libexecdir in default settings used by the documentation. The
+	web and pdf pages will substitute /usr/local/libexec for
+	$noexec_file. Also do substitution of variables using exec_prefix
+	even if we don't use them in the Makefile since the documentation
+	may reference them.
+	[b7a37b03b6db]
+
+	* doc/Makefile.in, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Add conditional for sesh path in sudo.conf manual.
+	[ec1f8f559bad]
+
+	* configure, configure.ac:
+	Update plugindir even when --disable-shared is specified. Otherwise,
+	the default value is substituted into the Makefiles and
+	documentation which may not match --prefix. Bug #886
+	[0f6c9a4af739]
+
+2019-06-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_util.h, lib/util/fatal.c, lib/util/inet_ntop.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/sudo_debug.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/timestamp.c, src/load_plugins.c, src/net_ifs.c,
+	src/sudo.c:
+	Add ssizeof macro that returns ssize_t. We can use this instead of
+	casting the result of size_t to int. Also change checks for
+	snprintf() returning <=0 to <0.
+	[da4a95a5d8ec]
+
+2019-06-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/TROUBLESHOOTING, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	sudoedit should be used for editing files instead of "sudo editor"
+	That way the user's editor config files are used by the editor.
+	[24bb1e6326ee]
+
+	* doc/TROUBLESHOOTING:
+	Move the section on HOME to be after the environment section. Also
+	strongly discourage the disabling of env_reset.
+	[7a41bddf5fde]
+
+2019-06-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/TROUBLESHOOTING:
+	Remove the Solaris last login question, add one about HOME. The PAM
+	session is opened with PAM_SILENT so last login info is not printed.
+	It is dangerous to preserve HOME from the user's environment.
+	[99be2cd98556]
+
+	* doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Use the term pseudo-terminal more consistently.
+	[129a0d2e5a33]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document why HOME should not be preserved from the user's
+	environment. Text was adapted from what is already present in the
+	UPGRADE file. Also mark set_home and always_set_home as obsolete.
+	[3cddca2f78de]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in:
+	Refer to command line options, not flags.
+	[5caa383e1f9b]
+
+	* NEWS:
+	sync
+	[fd7e952e3e43]
+
+	* doc/TROUBLESHOOTING:
+	sudo will now prompt for a password as long as /dev/tty is
+	available.
+	[a4241d432e63]
+
+	* MANIFEST, configure, configure.ac, doc/Makefile.in,
+	doc/cvtsudoers.cat, doc/sudo.cat, doc/sudo.conf.cat,
+	doc/sudo_plugin.cat, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers_timestamp.cat, doc/sudoreplay.cat, doc/visudo.cat:
+	Remove .cat pages, there is no need for them in the modern world.
+	Sudo only shipped .cat pages for Irix, which lacked nroff. Irix is
+	long dead and there are multiple open source nroff options.
+	[b7a48dc22bdb]
+
+	* INSTALL, configure.ac, doc/sudoers.cat, doc/visudo.cat:
+	Make env_editor the default. It is already the default in the
+	package script.
+	[a4f0c46ef5d6]
+
+	* INSTALL, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Don't describe env_editor as a security hole. Users that are able to
+	edit sudoers can grant themselves permissions so the fact that
+	visudo runs the editor as root is not a security issue.
+	[627f0a96ccc9]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Fix details of how EDITOR, VISUAL and SUDO_EDITOR are (or are not)
+	preserved. The description in the editor option was incorrect and
+	didn't mention env_keep. Reported by Sander Bos
+	[1b498d610672]
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Modern visudo locks the actual sudoers file, not the sudoers.tmp
+	file. Refer to sudoers.tmp as a temporary file, not a lock file.
+	Reported by Sander Bos
+	[3a449f316304]
+
+2019-06-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	In tty_present(), check for /dev/tty if sudo was unable to get the
+	tty name. For requiretty it is enough to check that /dev/tty is
+	available. If sudo can't get the tty from the kernel (missing
+	/proc?) that is OK.
+	[2102ffa0fa7e]
+
+	* src/tgetpass.c:
+	Don't refuse to use the tty unless /dev/tty is unavailable. We don't
+	care whether sudo was able to get the tty name from the kernel. All
+	that really matters is whether we are able to disable echo as
+	needed.
+	[a3376277883f]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Use of "they" was ambiguous.
+	[a39f42aa21ca]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Better description of secure_path. The secure_path option affects
+	the resolution of unqualified commands as well as the environment
+	that commands run with.
+	[e0534efa8271]
+
+	* doc/CONTRIBUTORS:
+	Add Sander Bos
+	[75f6f90c2f24]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix a few typos and awkward wording. Use the singular "they" instead
+	of he/she. Add back missing text in description of variables
+	starting with (). Based on changes from Sander Bos.
+	[d6b5068ae2ca]
+
+2019-06-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Clarify which environment variables are set based on the target
+	user.
+	[1e6ac7e5ef32]
+
+2019-06-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/Makefile.in:
+	libsudo_util depends on LT_DEP_LIBS even when building a static lib
+	[232370d6af88]
+
+	* aclocal.m4, config.h.in, configure, configure.ac,
+	lib/util/arc4random.c:
+	Solaris getentropy() requires that sys/random.h be included.
+	[f1ec0a7290a6]
+
+2019-05-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse.c:
+	Use the runhost for "User foo is not allowed to run sudo on bar."
+	Otherwise, if the -h option is specified sudo will print the local
+	host name instead of the host specified via -h.
+	[8e6836ff952c]
+
+2019-05-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/TROUBLESHOOTING:
+	Document that "no tty present and no askpass program specified" may
+	happen when /proc is not accessible.
+	[b551c47e55aa]
+
+2019-05-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/CONTRIBUTORS:
+	Add Sangamesh Mallayya and Michael Spradling
+	[73b3acddc973]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, src/parse_args.c,
+	src/sudo.h, src/tgetpass.c:
+	Add -B option to ring the bell before the password prompt.
+	[b2181b069809]
+
+	* plugins/sudoers/auth/aix_auth.c:
+	Allow the user to change their password if expired on AIX. Bug #883
+	[b1def2572198]
+
+2019-05-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/aix_auth.c:
+	When using AIX auth, don't display the AIX password incorrect
+	message. Avoids a "3004-300 You entered an invalid login name or
+	password" message in addition to sudo's own "Sorry, try again"
+	message.
+	[ee606cfc3c8c]
+
+2019-05-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* mkpkg:
+	AIX packages were not being build with optimization enabled.
+	[41563464b897]
+
+2019-05-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse.c, plugins/sudoers/parse.h:
+	Fix a typo.
+	[6cd3fdc40b13]
+
+	* mkpkg:
+	Support using macOS SDKs from
+	/Library/Developer/CommandLineTools/SDKs
+	[98399af73e06]
+
+2019-05-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/term.c:
+	It is safe to assume _POSIX_VDISABLE is defined. The old compat
+	defines were to support pre-termios systems.
+	[82153896cede]
+
+2019-05-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/pam.c:
+	Remove second catopen() which is never called.
+	[8a3db9d71297]
+
+2019-05-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/TROUBLESHOOTING:
+	Sudo's conversation functions now filters out the last login
+	information.
+	[ac21b18ba6bf]
+
+2019-04-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c:
+	Add pam_acct_mgmt setting to enable/disable PAM account validation.
+	[ec657af6eeb8]
+
+	* doc/cvtsudoers.cat, doc/sudo.cat, doc/sudo.conf.cat,
+	doc/sudo_plugin.cat, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers_timestamp.cat, doc/sudoreplay.cat, doc/visudo.cat:
+	regen
+	[d39b0636806f]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.28
+	[dd02af1b71e1]
+
+	* Makefile.in, configure.ac, doc/Makefile.in, doc/cvtsudoers.man.in,
+	doc/cvtsudoers.mdoc.in, doc/fixman.sh, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/sudoers_timestamp.man.in, doc/sudoers_timestamp.mdoc.in,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.man.in,
+	doc/visudo.mdoc.in, examples/Makefile.in, include/Makefile.in,
+	include/compat/charclass.h, include/compat/endian.h,
+	include/compat/fnmatch.h, include/compat/getopt.h,
+	include/compat/glob.h, include/compat/nss_dbdefs.h,
+	include/compat/sha2.h, include/sudo_compat.h, include/sudo_conf.h,
+	include/sudo_debug.h, include/sudo_digest.h, include/sudo_dso.h,
+	include/sudo_event.h, include/sudo_fatal.h, include/sudo_gettext.h,
+	include/sudo_lbuf.h, include/sudo_plugin.h, include/sudo_queue.h,
+	include/sudo_rand.h, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/aix.c, lib/util/arc4random.c, lib/util/arc4random.h,
+	lib/util/arc4random_uniform.c, lib/util/closefrom.c,
+	lib/util/digest.c, lib/util/digest_gcrypt.c,
+	lib/util/digest_openssl.c, lib/util/event.c, lib/util/event_poll.c,
+	lib/util/event_select.c, lib/util/fatal.c, lib/util/fnmatch.c,
+	lib/util/getcwd.c, lib/util/getdelim.c, lib/util/getentropy.c,
+	lib/util/getgrouplist.c, lib/util/gethostname.c,
+	lib/util/getopt_long.c, lib/util/gettime.c, lib/util/gidlist.c,
+	lib/util/glob.c, lib/util/inet_ntop.c, lib/util/inet_pton.c,
+	lib/util/isblank.c, lib/util/key_val.c, lib/util/lbuf.c,
+	lib/util/locking.c, lib/util/memrchr.c, lib/util/memset_s.c,
+	lib/util/mksiglist.c, lib/util/mksigname.c, lib/util/mktemp.c,
+	lib/util/nanosleep.c, lib/util/parseln.c, lib/util/pipe2.c,
+	lib/util/progname.c, lib/util/pw_dup.c, lib/util/reallocarray.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/getdelim/getdelim_test.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/sha2.c, lib/util/sig2str.c,
+	lib/util/snprintf.c, lib/util/strlcat.c, lib/util/strlcpy.c,
+	lib/util/strndup.c, lib/util/strnlen.c, lib/util/strsignal.c,
+	lib/util/strsplit.c, lib/util/strtobool.c, lib/util/strtoid.c,
+	lib/util/strtomode.c, lib/util/strtonum.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, lib/util/sudo_dso.c, lib/util/term.c,
+	lib/util/ttyname_dev.c, lib/util/ttysize.c, lib/util/utimens.c,
+	lib/util/vsyslog.c, lib/zlib/Makefile.in, log2cl.pl, m4/sudo.m4,
+	mkdep.pl, mkpkg, pathnames.h.in, plugins/group_file/Makefile.in,
+	plugins/group_file/getgrent.c, plugins/group_file/group_file.c,
+	plugins/group_file/plugin_test.c, plugins/sample/Makefile.in,
+	plugins/sample/sample_plugin.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/alias.c, plugins/sudoers/audit.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/base64.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/bsm_audit.h,
+	plugins/sudoers/check.c, plugins/sudoers/check.h,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/digestname.c,
+	plugins/sudoers/editor.c, plugins/sudoers/env.c,
+	plugins/sudoers/env_pattern.c, plugins/sudoers/file.c,
+	plugins/sudoers/filedigest.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/gc.c,
+	plugins/sudoers/gentime.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/gmtoff.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/hexchar.c,
+	plugins/sudoers/ins_2001.h, plugins/sudoers/ins_classic.h,
+	plugins/sudoers/ins_csops.h, plugins/sudoers/ins_goons.h,
+	plugins/sudoers/ins_python.h, plugins/sudoers/insults.h,
+	plugins/sudoers/interfaces.c, plugins/sudoers/interfaces.h,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog.h,
+	plugins/sudoers/iolog_event.h, plugins/sudoers/iolog_files.h,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/iolog_util.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/linux_audit.h, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/logwrap.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/match_command.c,
+	plugins/sudoers/match_digest.c, plugins/sudoers/mkdir_parents.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/parse_ldif.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil.h, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/rcstr.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/redblack.h,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/iolog_util/check_iolog_util.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/regress/starttime/check_starttime.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/solaris_audit.c,
+	plugins/sudoers/solaris_audit.h, plugins/sudoers/sssd.c,
+	plugins/sudoers/starttime.c, plugins/sudoers/strlist.c,
+	plugins/sudoers/strlist.h, plugins/sudoers/stubs.c,
+	plugins/sudoers/sudo_ldap.h, plugins/sudoers/sudo_ldap_conf.h,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudo_printf.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoers_debug.h, plugins/sudoers/sudoers_version.h,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timeout.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.h, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsdump.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h,
+	plugins/sudoers/visudo.c, plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.c, src/Makefile.in,
+	src/conversation.c, src/env_hooks.c, src/exec.c, src/exec_common.c,
+	src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c, src/get_pty.c,
+	src/hooks.c, src/load_plugins.c, src/net_ifs.c, src/openbsd.c,
+	src/parse_args.c, src/preload.c, src/preserve_fds.c,
+	src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/sesh.c,
+	src/signal.c, src/solaris.c, src/sudo.c, src/sudo.h,
+	src/sudo_edit.c, src/sudo_exec.h, src/sudo_noexec.c,
+	src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tcsetpgrp_nobg.c,
+	src/tgetpass.c, src/ttyname.c, src/utmp.c:
+	Add SPDX-License-Identifier to files.
+	[db66decfad24]
+
+2019-04-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/pam.c:
+	Filter out last login messages on HP-UX unless running a shell. HP-
+	UX in trusted mode will display last login messages as part of the
+	PAM account management module by libpam_comsec. There is no way to
+	suppress these messages from the PAM configuration in trusted mode
+	so we need to filter them in the conversation function. In regular
+	mode, similar (but different) messages may be produced by
+	libpam_hpsec.
+	[5bbb02c69b46]
+
+2019-04-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/closefrom.c:
+	FreeBSD's /dev/fd only contains fds 0-2 unless fdescfs is mounted.
+	In practice this doesn't matter since FreeBSD >= 8 has a native
+	closefrom
+	[bbeeb52550f1]
+
+2019-04-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c:
+	Keep debug fds open in send_mail() to aid in debugging. Adds
+	closefrom_nodebug() which acts like closefrom(3) but doesn't close
+	debug fds for use by send_mail(). Also moves the code to exec the
+	mailer to its own function.
+	[b1892425667a]
+
+2019-04-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/defaults.c:
+	Set def_mailerflags even if sendmail was not found at configure
+	time. Fixes a NULL dereference when mailerpath is set but
+	mailerflags is not. Bug #878
+	[6c57f5ddca54]
+
+2019-04-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, lib/util/getdelim.c,
+	lib/util/getline.c, lib/util/parseln.c,
+	lib/util/regress/getdelim/getdelim_test.c, mkdep.pl,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/iolog_util.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/parse_ldif.c, plugins/sudoers/sssd.c:
+	Add a proper getdelim(3) replacement and use it instead of
+	getline(3).
+	[2e06e45ffbd6]
+
+	* plugins/sudoers/auth/pam.c:
+	Restrict the PAM_TTY kludge to Solaris and Linux-PAM. Setting
+	PAM_TTY to the empty string causes problems with some modules on HP-
+	UX so restrict it to systems where it is fixes known issues.
+	[d61f4e20dc67]
+
+2019-03-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/getgrouplist.c:
+	Fix the counting of supplementary groups on AIX. We should not
+	assume that basegid will be present in the list of gids returned by
+	getgrset().
+	[6b5fa2805840]
+
+2019-03-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/pwutil.c:
+	Plug a memory leak on user/group lookup failure found by ASAN.
+	[aff673f310d0]
+
+2019-03-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/test3.d/root,
+	plugins/sudoers/regress/testsudoers/test3.sh:
+	Fix test failure when run by a user other than the file owner.
+	[c41ea7cfedf8]
+
+	* MANIFEST, plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/zh_TW.mo, plugins/sudoers/po/zh_TW.po, po/da.mo,
+	po/da.po, po/eo.mo, po/eo.po, po/es.mo, po/es.po, po/zh_TW.mo,
+	po/zh_TW.po:
+	Updated translations from translationproject.org
+	[484d7b28bdd6]
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/test1.sh,
+	plugins/sudoers/regress/cvtsudoers/test10.sh,
+	plugins/sudoers/regress/cvtsudoers/test11.sh,
+	plugins/sudoers/regress/cvtsudoers/test12.sh,
+	plugins/sudoers/regress/cvtsudoers/test13.sh,
+	plugins/sudoers/regress/cvtsudoers/test14.sh,
+	plugins/sudoers/regress/cvtsudoers/test15.sh,
+	plugins/sudoers/regress/cvtsudoers/test16.sh,
+	plugins/sudoers/regress/cvtsudoers/test17.sh,
+	plugins/sudoers/regress/cvtsudoers/test18.sh,
+	plugins/sudoers/regress/cvtsudoers/test19.sh,
+	plugins/sudoers/regress/cvtsudoers/test2.sh,
+	plugins/sudoers/regress/cvtsudoers/test20.sh,
+	plugins/sudoers/regress/cvtsudoers/test21.sh,
+	plugins/sudoers/regress/cvtsudoers/test22.sh,
+	plugins/sudoers/regress/cvtsudoers/test23.sh,
+	plugins/sudoers/regress/cvtsudoers/test24.sh,
+	plugins/sudoers/regress/cvtsudoers/test25.sh,
+	plugins/sudoers/regress/cvtsudoers/test26.err.ok,
+	plugins/sudoers/regress/cvtsudoers/test26.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test26.sh,
+	plugins/sudoers/regress/cvtsudoers/test27.sh,
+	plugins/sudoers/regress/cvtsudoers/test28.sh,
+	plugins/sudoers/regress/cvtsudoers/test29.sh,
+	plugins/sudoers/regress/cvtsudoers/test3.sh,
+	plugins/sudoers/regress/cvtsudoers/test30.sh,
+	plugins/sudoers/regress/cvtsudoers/test31.sh,
+	plugins/sudoers/regress/cvtsudoers/test32.err.ok,
+	plugins/sudoers/regress/cvtsudoers/test32.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test32.sh,
+	plugins/sudoers/regress/cvtsudoers/test33.sh,
+	plugins/sudoers/regress/cvtsudoers/test4.sh,
+	plugins/sudoers/regress/cvtsudoers/test5.sh,
+	plugins/sudoers/regress/cvtsudoers/test6.sh,
+	plugins/sudoers/regress/cvtsudoers/test7.sh,
+	plugins/sudoers/regress/cvtsudoers/test8.sh,
+	plugins/sudoers/regress/cvtsudoers/test9.sh:
+	Test cvtsudoers stdout and stderr separately. Fixes a test failure
+	on systems with musl libc. Bug #873
+	[e82a381f4f3d]
+
+2019-03-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/starttime.c, src/ttyname.c:
+	Better comment about EOVERFLOW and pstat_getproc(). Also remove some
+	useless casts.
+	[09a915110812]
+
+	* lib/util/closefrom.c:
+	Ignore EOVERFLOW from pstat_getproc(), it is not a fatal error. It
+	just means that one of the fields in pstat lacks the precision to
+	store a value. That's not an issue for pst_highestfd.
+	[bb7ed18e360b]
+
+	* sudo.pp:
+	update copyright year
+	[cff8184aeb11]
+
+2019-03-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/load_plugins.c:
+	Fix error message when a fully-qualified plugin path does not exist.
+	[318f7511c9bc]
+
+2019-03-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix unescaped '\' and remove an extra '[' in the definition of
+	digest.
+	[9ea1a400ebc9]
+
+2019-03-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Ignore carriage return before a linefeed. This allows sudo to parse
+	files with DOS-style line endings.
+	[65882b63a84d]
+
+2019-02-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	For sssd, the nsswitch.conf setting should be "sss" not "sssd". From
+	Johnathan Smith.
+	[5c07130d1bbc]
+
+2019-02-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
+	Add simple API for to allow reading environment data from different
+	sources. Currently, this is used to read a file like
+	/etc/environment.
+	[ce9161899719]
+
+2019-02-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Fix pasto; the unrestricted env file was read when we want the
+	restricted one.
+	[23b0b3c473db]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/parse.h, plugins/sudoers/strlist.c, src/sudo.h:
+	Be sure to include sudo_queue.h where needed instead of relying on
+	other headers.
+	[fe9418a9b378]
+
+2019-02-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/util.exp.in:
+	Only export sudo_arc4random_uniform() if arc4random_uniform() is
+	missing.
+	[e32a7243976d]
+
+	* lib/util/regress/vsyslog/vsyslog_test.c:
+	Quiet a warning on gcc 8
+	[fe8cad6564e2]
+
+	* include/sudo_compat.h:
+	AIX 7.1 defines O_CLOEXEC but it can't be used outside the kernel.
+	Redefine O_CLOEXEC if it doesn't fit in an int and pipe2() is
+	missing.
+	[3ef0220351ca]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/match.c,
+	plugins/sudoers/match_command.c, plugins/sudoers/match_digest.c,
+	plugins/sudoers/parse.h:
+	Split command match code out into match_command.c. Also remove
+	unused SUDOERS_NAME_MATCH code.
+	[2a7adb93a65e]
+
+2019-02-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match_digest.c:
+	Split out digest matching into its own file.
+	[93863918f934]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/match.c,
+	plugins/sudoers/parse.h:
+	Split out digest matching into its own file.
+	[aafdc9b976ed]
+
+2019-02-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Rename FOLLOW and NOFOLLOW tokens FOLLOWLNK and NOFOLLOWLNK. Fixes a
+	namespace collision on Solaris when bison is used.
+	[707b94b7c1e9]
+
+2019-02-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c:
+	Add stub definition of digest_matches() for SUDOERS_NAME_MATCH
+	[a322e57c85e0]
+
+	* plugins/sudoers/sudo_nss.c:
+	No longer need to include sudo_lbuf.h
+	[db110422b24c]
+
+	* mkpkg:
+	On RedHat/CentOS get the OS major version from /etc/redhat-release.
+	We cannot determine this from the output of "pp --probe" since it
+	doesn't contain a period to separate the major and minor numbers.
+	[78a27d62de0c]
+
+2019-02-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c:
+	Use SET macro instead of bitwise OR.
+	[b523937e8da8]
+
+	* plugins/sudoers/pwutil_impl.c:
+	In sudo_make_grlist_item() the calculation of total did not include
+	space for pointers to the group names.
+	[7c438dd62f45]
+
+	* plugins/sudoers/cvtsudoers_pwutil.c:
+	Use correct debug_decl() names.
+	[d0f02db8be20]
+
+	* plugins/sudoers/sudoers.h:
+	Add fallback values for sudoers uid, gid and mode if not set in
+	Makefile.
+	[21e41ed7a06c]
+
+2019-02-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/memset_s.c:
+	include stddef.h to make sure we get NULL
+	[d42b4c325c0c]
+
+2019-02-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/net_ifs.c:
+	Fix memory leak when there are no network interfaces or an error
+	occurs.
+	[7ba525ee9233]
+
+2019-01-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	Use $ac_cv_search_FUNCTION instead of $ac_lib and $ac_res. Fixes a
+	problem where libcrypt is not used with autoconf caching. Adapted
+	from a diff from Adam Labbe.
+	[5cfcade6ce3e]
+
+2019-01-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* po/de.mo, po/de.po, po/ko.mo, po/ko.po:
+	Updated translations from translationproject.org
+	[4995f6542a2c]
+
+2019-01-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse.c:
+	Fix listpw=never and verifypw=never. Bug #869
+	[ecb89088a884]
+
+2019-01-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/regress/vsyslog/vsyslog_test.c, lib/util/sig2str.c,
+	plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers_pwutil.c,
+	plugins/sudoers/env.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/starttime.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/tsdump.c, src/exec_monitor.c, src/exec_nopty.c,
+	src/exec_pty.c, src/sudo.c, src/ttyname.c:
+	Minor snprintf() usage tweaks: 1) don't assume snprintf() returns -1
+	on error, check for <0 2) when comparing return value of
+	sizeof(foo), cast the sizeof, not the len 3) cast return value to
+	void in cases where snprintf cannot fail
+	[2af6dfb31a49]
+
+2019-01-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	The AIX nofiles hard limit fix and bug #867 will make 1.8.27.
+	[a8b4710ff907]
+
+	* plugins/sudoers/auth/pam.c:
+	Use PAM_SILENT to prevent pam_lastlog from printing last login
+	information on RedHat except when explicitly running a shell.
+	Adapted from a patch from Nir Soffer. Bug #867
+	[b8b5d3445a3c]
+
+	* lib/util/aix.c:
+	Fix the default nofiles and stack hard limits. The table of default
+	hard limits in /etc/security/limits was out of date with respect to
+	the current documentation. The default hard limit for nofiles should
+	be unlimited, not 8196. The default hard limit for stack should be
+	4194304 blocks (which fits in an unsigned long on 32-bit platforms).
+	[68c8c05a0b9b]
+
+2019-01-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[3000c62ed0ba]
+
+	* NEWS:
+	Final updates for sudo 1.8.27.
+	[40d6ecb1f739]
+
+	* src/exec_pty.c:
+	Update copyright year
+	[adc9f4046585]
+
+	* doc/LICENSE:
+	Update for 2019
+	[ccbbad25d7c7]
+
+2019-01-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	Fix setting of utmp entry when running command in a pty. Regression
+	introduced in sudo 1.8.22.
+	[cf81f3fa1f3a]
+
+2018-12-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Use debug_return_int not debug_return_bool in resolve_host
+	[490241e14e68]
+
+	* NEWS, configure, configure.ac:
+	sudo 1.8.27
+	[f59a4a391a44]
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/visudo.c:
+	Allow the sudoers file to be specified without the -f option. Bug
+	#864
+	[eb3d4c4461ba]
+
+2018-12-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	The iolog_dir section is below the maxseq section, not above.
+	[35534e4f23d9]
+
+2018-12-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po, po/ja.mo,
+	po/ja.po:
+	Updated translations from translationproject.org
+	[270660da2de4]
+
+2018-12-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoreplay.c:
+	Add -n and -R options to help; reported by Radovan Sroka
+	[683df32eb950]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in:
+	Add missing description of padding option and missing argument to
+	-c.
+	[c762020f1694]
+
+	* plugins/sudoers/cvtsudoers.c:
+	The -c option was missing from the help info; from Radovan Sroka
+	[aa36d5c05b0b]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in:
+	Fix some typos; reported by Radovan Sroka
+	[d6137224dd47]
+
+2018-12-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/pam.c:
+	In sudo_pam_approval(), for the exempt case, only overwrite pam
+	status when the passwd is expired or needs to be updated.
+	[2c2d1ed1bb7e]
+
+2018-12-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/pam.c:
+	The fix for bug #843 was incomplete and caused pam_end() to be
+	called early. sudo_pam_approval() must not set the global pam status
+	to an error value if it returns AUTH_SUCCESS. Otherwise,
+	sudo_pam_cleanup() will call pam_end() before
+	sudo_pam_begin_session(). This resulted in a NULL PAM handle being
+	used in sudo_pam_begin_session().
+	[656aa910fbaf]
+
+2018-12-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec.c:
+	Don't run the command in a pty if no I/O plugins are logging
+	anything. That way an I/O plugin that doesn't actually log anything
+	won't cause the command to be run in a pty.
+	[ef83f35c9cb0]
+
+2018-11-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgignore:
+	Update ignore patterns to match doc changes.
+	[7438cdacc0e1]
+
+	* doc/fixmdoc.sed:
+	fix mode fixmdoc.sed
+	[d74c0b7c5932]
+
+2018-11-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/Makefile.in, doc/sudo.conf.man.in, doc/sudo.man.in,
+	doc/sudoers.ldap.man.in, doc/sudoers.man.in,
+	doc/sudoers_timestamp.man.in, doc/sudoreplay.man.in,
+	doc/visudo.man.in:
+	Fix section in the .TH line of *.man.in file. The substitution for
+	@mansectsu@ and @mansectform@ was broken. No longer need to strip
+	out OpenBSD from the header line.
+	[cb02c8496b21]
+
+	* doc/sudoers.man.in.sed:
+	Add sudoers.man.in.sed, missed from previous commit.
+	[a2113a52e6a7]
+
+	* doc/CONTRIBUTORS:
+	Add Guillem Jover
+	[db7a39f9726a]
+
+	* NEWS:
+	recent changes
+	[0c07a0cdf2ff]
+
+	* MANIFEST, doc/Makefile.in, doc/fixman.sh, doc/fixmdoc.sed,
+	doc/fixmdoc.sh, doc/sudo.cat, doc/sudo.man.in, doc/sudo.man.in.sed,
+	doc/sudo.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in:
+	Use roff conditionals in the manuals instead of post-processing. We
+	still need to process the resulting .man.in files to add back the
+	conditionals but this should be easier to debug as the changes are
+	visible in the .in file. Some minor postprocessing is still used to
+	make the manuals HP-UX friendly and to change "0 seconds" ->
+	unlimited after substitution.
+	[44316d271ab8]
+
+2018-11-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Sudo plugin manual updates and clarification from Guillem Jover:
+	- Add missing return information for show_version().
+	- Fix prototypes for several function pointers.
+	- Update SUDO_API_VERSION_MINOR.
+	- Add missing references to log_suspend() and change_winsize().
+	- Add missing "array.".
+	- Clarify that argc can be zero on sudo -V.
+	- Clarify size requirements for conversation array arguments.
+	- Clarify timeout zero value for struct sudo_conv_message.
+	- Clarify initial and final state of reply in struct sudo_conv_reply.
+	[1241cff4dd51]
+
+	* doc/fixmdoc.sh, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Revert changes to give arguments to the .Bx macro. This is intended
+	for things like .Bx 4.3 to generate "4.3BSD" so the argument ends up
+	before the BSD, not after. Just go back to using "BSD
+	authentication" and "BSD login classes" so fixmdoc.sh can operate
+	correctly. Bug #861
+	[c58965343318]
+
+2018-11-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/fixmdoc.sh, doc/sudo.mdoc.in, doc/sudoers.mdoc.in:
+	Update fixmdoc.sh to match the BSD -> .Bx changes in the manuals.
+	Bug #861
+	[7ddfb74781a1]
+
+2018-11-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, m4/sudo.m4, src/utmp.c:
+	Add support for utmps as found in HP-UX.
+	[f55312948139]
+
+2018-11-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, include/sudo_util.h,
+	lib/util/utimens.c:
+	Support st_nmtime in struct stat as found in HP-UX.
+	[0854b34cd2ea]
+
+	* lib/util/closefrom.c:
+	If fcntl fails, fall back to the /proc implementation.
+	[59a03e0d3148]
+
+2018-11-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Mention schema.olcSudo
+	[320adcd29a61]
+
+2018-11-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Mention schema.olcSudo here too.
+	[a19dff54603b]
+
+	* MANIFEST, README.LDAP, doc/CONTRIBUTORS, doc/schema.OpenLDAP,
+	doc/schema.olcSudo:
+	OpenLDAP schema file for Sudo in on-line configuration (OLC) format.
+	From Frederic Pasteleurs.
+	[1fcfa9f307a2]
+
+	* po/ast.mo, po/ast.po:
+	Updated translations from translationproject.org
+	[70f0ec8c721c]
+
+2018-11-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/closefrom.c:
+	Only use closefrom_fallback() if no better method exists. The
+	previous logic was too fragile.
+	[2510928e291f]
+
+2018-11-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/cs.mo,
+	po/cs.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/it.mo,
+	po/it.po, po/nb.mo, po/nb.po, po/pl.mo, po/pl.po, po/pt_BR.mo,
+	po/pt_BR.po, po/sv.mo, po/sv.po, po/tr.mo, po/tr.po, po/uk.mo,
+	po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo, po/zh_CN.po:
+	Updated translations from translationproject.org
+	[898154804015]
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, plugins/sudoers/po/pt.mo,
+	plugins/sudoers/po/pt.po, po/pt.mo, po/pt.po:
+	Portuguese translation for sudo and sudoers from
+	translationproject.org.
+	[4c49e5cf8936]
+
+2018-11-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, configure, configure.ac, include/sudo_fatal.h,
+	lib/util/Makefile.in, lib/util/fatal.c, lib/util/util.exp.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sudoers.c:
+	Add sudo_gai_fatal, sudo_gai_vfatal, sudo_gai_vwarn, sudo_gai_warn
+	and gai_log_warning that use gai_strerror() instead of strerror().
+	[9c37c5db3293]
+
+2018-10-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c:
+	Fix memory leak in runaslist_matches().
+	[f1366ad50eb3]
+
+2018-10-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	typo
+	[fc8aa243672a]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[f333405eb06c]
+
+	* NEWS:
+	More updates for 1.8.26
+	[1941961b232f]
+
+2018-10-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/regress/cvtsudoers/test33.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test33.sh:
+	Add support for negated sudoRunAsUser and sudoRunAsGroup entries.
+	[d0368336d92b]
+
+2018-10-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that the target user's groups may be specified via the -g
+	option.
+	[67b7643e3bcb]
+
+	* plugins/sudoers/tsgetgrpw.c:
+	Include getpwent() version of sudo_getgrouplist2_v1() from
+	getgrouplist.c
+	[60aa493504d1]
+
+	* MANIFEST, plugins/sudoers/regress/testsudoers/group,
+	plugins/sudoers/regress/testsudoers/test1.sh:
+	Use a testsudoers group file with known contents instead of the
+	system one.
+	[7a4499c92acd]
+
+	* plugins/sudoers/match.c, plugins/sudoers/parse.h,
+	plugins/sudoers/set_perms.c:
+	Allow the group set by "sudo -g" to be any of the target user's
+	groups. Previously, this was only allowed if the group matched the
+	target user's primary group ID (from the passwd database entry). The
+	sudoers policy will now allow the group if it is one of the target
+	user's supplemental groups as well.
+	[c43fedc19a01]
+
+2018-10-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/regress/getgrouplist/getgrouplist_test.c:
+	Skip sudo_getgrouplist2() check on systems with getgrouplist_2().
+	sudo_getgrouplist2() is just a wrapper on such systems and this
+	avoids a test failure on macOS where a user is automatically a
+	member of certain groups.
+	[26ba0c363b80]
+
+	* lib/util/util.exp.in:
+	Add missing exported symbol sudo_term_eof
+	[2d8e0438eba4]
+
+	* plugins/sudoers/ldap_conf.c:
+	Add missing #ifdef LDAP_OPT_X_TLS_REQUIRE_CERT Fixes problems
+	building on older LDAP sdks.
+	[1effb0f19867]
+
+	* MANIFEST:
+	add getgrouplist_test.c
+	[ca5bae341846]
+
+	* lib/util/regress/getgrouplist/getgrouplist_test.c:
+	Check the user's primary gid from the passwd file too.
+	[60ba98074d75]
+
+	* .hgignore:
+	ignore prologue
+	[589222ec2717]
+
+	* lib/util/aix.c, lib/util/arc4random.c,
+	lib/util/arc4random_uniform.c, lib/util/closefrom.c,
+	lib/util/digest.c, lib/util/digest_gcrypt.c,
+	lib/util/digest_openssl.c, lib/util/event.c, lib/util/event_poll.c,
+	lib/util/event_select.c, lib/util/fatal.c, lib/util/fnmatch.c,
+	lib/util/getentropy.c, lib/util/getgrouplist.c,
+	lib/util/gethostname.c, lib/util/getline.c, lib/util/getopt_long.c,
+	lib/util/gettime.c, lib/util/gidlist.c, lib/util/isblank.c,
+	lib/util/key_val.c, lib/util/lbuf.c, lib/util/locking.c,
+	lib/util/memrchr.c, lib/util/memset_s.c, lib/util/mksiglist.c,
+	lib/util/mksigname.c, lib/util/mktemp.c, lib/util/nanosleep.c,
+	lib/util/parseln.c, lib/util/pipe2.c, lib/util/progname.c,
+	lib/util/pw_dup.c, lib/util/reallocarray.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/sha2.c, lib/util/sig2str.c,
+	lib/util/strlcat.c, lib/util/strlcpy.c, lib/util/strndup.c,
+	lib/util/strnlen.c, lib/util/strsignal.c, lib/util/strsplit.c,
+	lib/util/strtobool.c, lib/util/strtoid.c, lib/util/strtomode.c,
+	lib/util/strtonum.c, lib/util/sudo_conf.c, lib/util/sudo_debug.c,
+	lib/util/sudo_dso.c, lib/util/term.c, lib/util/ttyname_dev.c,
+	lib/util/ttysize.c, lib/util/utimens.c, lib/util/vsyslog.c,
+	plugins/group_file/getgrent.c, plugins/group_file/group_file.c,
+	plugins/group_file/plugin_test.c, plugins/sample/sample_plugin.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/base64.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/digestname.c, plugins/sudoers/editor.c,
+	plugins/sudoers/env.c, plugins/sudoers/env_pattern.c,
+	plugins/sudoers/file.c, plugins/sudoers/filedigest.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gc.c, plugins/sudoers/gentime.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/gmtoff.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/hexchar.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/iolog_util.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/mkdir_parents.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse_ldif.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/rcstr.c,
+	plugins/sudoers/redblack.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/iolog_util/check_iolog_util.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/regress/starttime/check_starttime.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/solaris_audit.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/starttime.c,
+	plugins/sudoers/strlist.c, plugins/sudoers/stubs.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_printf.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timeout.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsdump.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	plugins/system_group/system_group.c, src/conversation.c,
+	src/env_hooks.c, src/exec.c, src/exec_common.c, src/exec_monitor.c,
+	src/exec_nopty.c, src/exec_pty.c, src/get_pty.c, src/hooks.c,
+	src/load_plugins.c, src/net_ifs.c, src/openbsd.c, src/parse_args.c,
+	src/preload.c, src/preserve_fds.c,
+	src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/sesh.c,
+	src/signal.c, src/solaris.c, src/sudo.c, src/sudo_edit.c,
+	src/sudo_noexec.c, src/tcsetpgrp_nobg.c, src/tgetpass.c,
+	src/ttyname.c, src/utmp.c:
+	Convert PVS-Studio comment to ANSI C.
+	[31f2aefe6d9b]
+
+	* Makefile.in, doc/Makefile.in, doc/cvtsudoers.man.in,
+	doc/cvtsudoers.mdoc.in, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/sudoers_timestamp.man.in, doc/sudoers_timestamp.mdoc.in,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.man.in,
+	doc/visudo.mdoc.in, examples/Makefile.in, include/Makefile.in,
+	include/sudo_lbuf.h, lib/util/Makefile.in, lib/util/digest.c,
+	lib/util/digest_gcrypt.c, lib/util/digest_openssl.c,
+	lib/util/lbuf.c, lib/util/setgroups.c, lib/util/ttysize.c,
+	lib/zlib/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/alias.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/base64.c,
+	plugins/sudoers/file.c, plugins/sudoers/filedigest.c,
+	plugins/sudoers/gentime.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timeout.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsdump.c,
+	plugins/system_group/Makefile.in, src/Makefile.in, src/sesh.c,
+	src/sudo_usage.h.in:
+	Fix some mangled text in the license block.
+	[86b88fbda4b4]
+
+	* lib/util/Makefile.in,
+	lib/util/regress/getgrouplist/getgrouplist_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c:
+	Add regress test for sudo_getgrouplist2(). This test assumes all the
+	groups in root's group list can be resolved by group ID.
+	[48564f85b7ed]
+
+2018-10-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	More changes in 1.8.26
+	[fe81e3e4b653]
+
+	* MANIFEST, doc/cvtsudoers.cat, doc/cvtsudoers.man.in,
+	doc/cvtsudoers.mdoc.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers.h, plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/cvtsudoers/test31.conf,
+	plugins/sudoers/regress/cvtsudoers/test31.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test31.sh,
+	plugins/sudoers/regress/cvtsudoers/test32.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test32.sh:
+	Add padding option to cvtsudoers. Bug #856
+	[6e31b0e37ba1]
+
+	* lib/util/getgrouplist.c:
+	Remove an errant grset++ in the AIX version of sudo_getgrouplist2().
+	Bug #857
+	[03b19227cab2]
+
+2018-10-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Pass --sourcetree-root to pvs-studio and don't check sudo_noexec.c.
+	Since we don't auto-generate dependencies for sudo_noexec.c we can't
+	easily check it from outside the source tree. This is not a problem
+	as it just contains stub functions.
+	[3cf842d30e45]
+
+	* MANIFEST, doc/CONTRIBUTORS, po/ast.mo, po/ast.po:
+	Asturian translation for sudo from translationproject.org
+	[dc0b31fa013c]
+
+2018-10-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/gettime.c:
+	Add support for CLOCK_MONOTONIC_RAW and CLOCK_UPTIME_RAW, present on
+	macOS.
+	[5f34c8de0707]
+
+	* INSTALL, configure, configure.ac:
+	Add --enable-pvs-studio configure option to create PVS-Studio.cfg.
+	[772e86227c11]
+
+	* lib/util/aix.c, lib/util/arc4random.c,
+	lib/util/arc4random_uniform.c, lib/util/closefrom.c,
+	lib/util/digest.c, lib/util/digest_gcrypt.c,
+	lib/util/digest_openssl.c, lib/util/event.c, lib/util/event_poll.c,
+	lib/util/event_select.c, lib/util/fatal.c, lib/util/fnmatch.c,
+	lib/util/getentropy.c, lib/util/getgrouplist.c,
+	lib/util/gethostname.c, lib/util/getline.c, lib/util/getopt_long.c,
+	lib/util/gettime.c, lib/util/gidlist.c, lib/util/isblank.c,
+	lib/util/key_val.c, lib/util/lbuf.c, lib/util/locking.c,
+	lib/util/memrchr.c, lib/util/memset_s.c, lib/util/mksiglist.c,
+	lib/util/mksigname.c, lib/util/mktemp.c, lib/util/nanosleep.c,
+	lib/util/parseln.c, lib/util/pipe2.c, lib/util/progname.c,
+	lib/util/pw_dup.c, lib/util/reallocarray.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/sha2.c, lib/util/sig2str.c,
+	lib/util/strlcat.c, lib/util/strlcpy.c, lib/util/strndup.c,
+	lib/util/strnlen.c, lib/util/strsignal.c, lib/util/strsplit.c,
+	lib/util/strtobool.c, lib/util/strtoid.c, lib/util/strtomode.c,
+	lib/util/strtonum.c, lib/util/sudo_conf.c, lib/util/sudo_debug.c,
+	lib/util/sudo_dso.c, lib/util/term.c, lib/util/ttyname_dev.c,
+	lib/util/ttysize.c, lib/util/utimens.c, lib/util/vsyslog.c,
+	plugins/group_file/getgrent.c, plugins/group_file/group_file.c,
+	plugins/group_file/plugin_test.c, plugins/sample/sample_plugin.c,
+	plugins/sudoers/alias.c, plugins/sudoers/audit.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/base64.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/check.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/digestname.c, plugins/sudoers/editor.c,
+	plugins/sudoers/env.c, plugins/sudoers/env_pattern.c,
+	plugins/sudoers/file.c, plugins/sudoers/filedigest.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gc.c, plugins/sudoers/gentime.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/gmtoff.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/hexchar.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/iolog_util.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/mkdir_parents.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse_ldif.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/rcstr.c,
+	plugins/sudoers/redblack.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/iolog_util/check_iolog_util.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/regress/starttime/check_starttime.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/solaris_audit.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/starttime.c,
+	plugins/sudoers/strlist.c, plugins/sudoers/stubs.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_printf.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timeout.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsdump.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	plugins/system_group/system_group.c, src/conversation.c,
+	src/env_hooks.c, src/exec.c, src/exec_common.c, src/exec_monitor.c,
+	src/exec_nopty.c, src/exec_pty.c, src/get_pty.c, src/hooks.c,
+	src/load_plugins.c, src/net_ifs.c, src/openbsd.c, src/parse_args.c,
+	src/preload.c, src/preserve_fds.c,
+	src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/sesh.c,
+	src/signal.c, src/solaris.c, src/sudo.c, src/sudo_edit.c,
+	src/sudo_noexec.c, src/tcsetpgrp_nobg.c, src/tgetpass.c,
+	src/ttyname.c, src/utmp.c:
+	Add comments in .c files so PVS-Studio will check them.
+	[b42b6dcb48a6]
+
+	* .hgignore, Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	mkdep.pl, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Add pvs-studio target and associated production rules.
+	[3dbcef5ac205]
+
+2018-10-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog_util.c:
+	Simplify range checks. No need to check for ERANGE in the cases
+	where we also check that the value is <= INT_MAX. Found by PVS-
+	Studio.
+	[45810a8437b6]
+
+2018-10-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/key_val.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/toke_util.c,
+	src/preserve_fds.c:
+	Avoid some PVS-Studio false positives.
+	[e4d8ce94fda7]
+
+	* src/sudo.c:
+	Remove some calls to sudo_fatalx(); just propagate the error return.
+	[bc9eefbf0cdf]
+
+	* src/sesh.c:
+	No need to check if fd_dst is -1 in sudoedit mode. Failure to open
+	the destination sudoedit file is fatal so there's no need to check
+	that fd_dst != -1 later on. Found by PVS-Studio.
+	[5530586ace16]
+
+	* plugins/sudoers/timestamp.c:
+	In timestamp_open() no need to free cookie on error, it is NULL.
+	Found by PVS-Studio.
+	[becfe97c72f8]
+
+2018-10-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap_util.c:
+	Fix a memory leak on malloc() error in sudo_ldap_role_to_priv().
+	Coverity CID 188804
+	[1bea56670410]
+
+	* plugins/sudoers/parse_ldif.c:
+	Move the allocation of role to be immediately before in_role is set.
+	This makes it clear that when in_role == true, role is non-NULL.
+	Also remove two dead stores.
+	[790d90c578c8]
+
+	* plugins/sudoers/parse_ldif.c:
+	Fix trimming of non-escaped trailing space in
+	ldif_parse_attribute(). Found by PVS-Studio.
+	[37fded3c77a4]
+
+	* plugins/sudoers/match.c:
+	Simplify the logic surrounding sudoers_args in command_args_match().
+	We only need to check that sudoers_args is non-NULL once. Found by
+	PVS-Studio.
+	[93c967145e82]
+
+	* plugins/sudoers/ldap.c:
+	If sudo_ldap_get_values_len() fails goto cleanup instead of oom.
+	This is not strictly necessary as there's not anything to cleanup in
+	this case but it is more consistent with the code that follows.
+	[d0d8b8b8dca8]
+
+	* plugins/sudoers/policy.c:
+	Fix handling of timeout values in sudoers. When passing the timeout
+	back to the front end, ignore the user-specified timeout if it is
+	not set (initialized to 0). Otherwise, sudo would choose a zero
+	user-specified timeout over the sudoers-specified timeout (non-
+	zero).
+	[6b08b3b918b7]
+
+2018-10-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_pwutil.c:
+	Fix cut & pastos in cvtsudoers_make_gritem()
+	[bd901c0394ba]
+
+	* plugins/sudoers/regress/sudoers/test17.ldif2sudo.ok:
+	Fix expected test output now that command_timeout is parsed
+	correctly in LDIF.
+	[ba6cfd26330e]
+
+	* lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c:
+	tv_nsec can never be negative after timespecsub. Found by PVS Studio
+	[ecfb93c9463c]
+
+2018-10-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Avoid potentially undefined behavior. Found by PVS Studio.
+	[ae76c69e0d6f]
+
+	* plugins/sudoers/ldap_util.c:
+	sudo_ldap_parse_option() never returns '=' as the operator. When
+	parsing command_timeout, role, type, privs and limitprivs, check
+	that val is non-NULL instead. Found by PVS Studio.
+	[10f8cff7cce7]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/toke.c:
+	Fix up #line entries that reference lex.sudoers.c.
+	[c724cef37b66]
+
+2018-10-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog.h, plugins/sudoers/iolog_util.c:
+	Fix workaround for broken sudo 1.8.7 timing files.
+	[78ef3625c650]
+
+	* plugins/sudoers/parse_ldif.c:
+	Fix memory leak when reusing the runas list. We need to free the
+	member list itself as well as its contents.
+	[62fb86a5c83f]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Some DIAGNOSTICS updates: Update error message for when the user's
+	uid does not exist in passwd. Remove "This error indicates" and some
+	other cosmetic cleanups.
+	[c73841e03014]
+
+	* src/sudo.c:
+	If the user's passwd entry cannot be resolved via the uid, use the
+	same error message as visudo.
+	[ce596b32dfbb]
+
+2018-10-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Add a DIAGNOSTICS section with an explanation of the more non-
+	trivial error messages.
+	[775419794f7d]
+
+	* plugins/sudoers/sudoreplay.c, src/exec_monitor.c, src/exec_nopty.c,
+	src/exec_pty.c:
+	Replace sudo_fatal(NULL) with an "unable to allocate memory" message
+	that includes the function name.
+	[26e19bcc0ce8]
+
+2018-10-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, src/tgetpass.c:
+	Make EOF handling while reading the password prompt more like
+	getpass(3). We now return the password as long as at least one
+	character has been read. Previously, EOF at the password prompt was
+	treated as if nothing was entered.
+	[fc2ed4a87e6f]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
+	regen
+	[2aee8680abc3]
+
+	* src/tgetpass.c:
+	Print a warning for password read issues. Issues include: timeout at
+	the password prompt, read error while reading the password, and EOF
+	reading the password.
+	[df1dcebe9ffa]
+
+2018-10-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/term.c, src/tgetpass.c:
+	Handle EOF on password input when pwfedback is enabled.
+	[4958978fc967]
+
+2018-10-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.mdoc.in:
+	Fix remaining instances of "e.g." without a trailing ','.
+	[8cbf11c04b3c]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/sudoers_timestamp.cat, doc/sudoers_timestamp.man.in,
+	doc/sudoers_timestamp.mdoc.in:
+	Use mdoc macros for BSD systems. All manuals now pass "make lint"
+	[7f23209a5e1c]
+
+	* doc/Makefile.in:
+	Use -Wstyle with -Tlint since sudo is not part of the base system.
+	This avoids "referenced manual not found" and "operating system
+	explicitly specified" warnings.
+	[e417e972a88a]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Document log_suspend() and fix the description of the
+	change_winsize() return value.
+	[be02b0fb26a9]
+
+2018-10-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, doc/sudoers_timestamp.cat,
+	doc/sudoers_timestamp.man.in, doc/sudoers_timestamp.mdoc.in,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Fix problems found by igor. Bug #854
+	[4ddcb625f3b7]
+
+	* doc/Makefile.in:
+	Sort DOCS and DEVDOCS and remove extra sudoers entry (it was listed
+	twice).
+	[abb2baac9373]
+
+	* doc/Makefile.in:
+	Add igor target to run igor(1) on the manuals.
+	[64be7fb868b3]
+
+2018-10-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	Add new -S option to sleep while the command was suspended. The
+	default behavior is now to not consider the time the command was
+	suspended as part of the normal inter-event delay.
+	[bb30f7b28126]
+
+	* MANIFEST, include/sudo_plugin.h, plugins/sudoers/Makefile.in,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog.h,
+	plugins/sudoers/iolog_event.h, plugins/sudoers/iolog_files.h,
+	plugins/sudoers/iolog_util.c, plugins/sudoers/iolog_util.h,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/iolog_util/check_iolog_util.c,
+	plugins/sudoers/sudoreplay.c, src/exec_pty.c:
+	Add a suspend event type to the I/O log to log suspend/resume of the
+	command so we can skip that delay during replay.
+	[8091d1835a31]
+
+	* src/exec_pty.c, src/sudo.c, src/sudo.h:
+	Initialize the pty rows/cols based on the values we stored in
+	user_details. This fixes a minor issue where we would send an extra
+	window size change event the first time the command was suspended.
+	[b2ae9be4d1d6]
+
+2018-09-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/sudo_ldap_conf.h:
+	Add support for OpenLDAP's TLS_REQCERT setting in ldap.conf.
+	[f07a14ae05cb]
+
+2018-09-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_util.h, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog_util.c,
+	plugins/sudoers/regress/starttime/check_starttime.c:
+	Move definition of TIME_T_MAX to sudo_util.h
+	[469c36d44950]
+
+	* NEWS, doc/UPGRADE:
+	Changes in 1.8.26 (so far).
+	[5c73b0d8c676]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/env.c:
+	Treat LOGIN, LOGNAME and USER specially. If one is preserved or
+	deleted we want to preserve or delete all of them.
+	[ea1782686195]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/env.c,
+	plugins/sudoers/logging.c, plugins/sudoers/regress/visudo/test6.sh:
+	Remove special handling of the USERNAME environment variable. It
+	used to be set on old versions of Fedora but that hasn't been the
+	case for some time. It's worth noting that ssh doesn't set USERNAME
+	either.
+	[5141bebd99c4]
+
+	* configure, configure.ac:
+	sudo 1.8.26
+	[cfe8d540328e]
+
+2018-09-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo.c:
+	Remove unused system_maxgroups argument from fill_group_list().
+	[debc4ca9d35f]
+
+	* lib/util/getgrouplist.c:
+	Pass getgrouplist() NGROUPS_MAX+1, not NGROUPS_MAX so we have room
+	for the primary gid.
+	[fccf07f2e8cf]
+
+2018-09-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_json.c:
+	In print_member_json_int() eliminate the need_newline variable and
+	just move the non-alias expansion printing bits into the else
+	clause, including the newline and comma printing.
+	[b40224fc6090]
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/test30.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test30.sh:
+	Add regress test for bug #853
+	[31544afc6013]
+
+	* plugins/sudoers/cvtsudoers_json.c:
+	When expanding an alias in print_member_json_int() avoid printing an
+	extra comma at the end of the entry. Bug #853.
+	[e73e09f8569a]
+
+2018-09-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/CONTRIBUTORS:
+	Add Kan Sasaki
+	[ff277fb5b0c9]
+
+	* NEWS, configure, configure.ac:
+	sudo 1.8.25p1
+	[c4f0a69e6356]
+
+	* lib/util/event_poll.c:
+	Fix a crash in the event system's poll() backend introduced with
+	support for nanosecond timers. Only affects systems without ppoll().
+	Bug #851
+	[54e561b11a0f]
+
+2018-09-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[04afa00445ef]
+
+2018-08-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c:
+	Allow for some clock drift due to ntpd, etc.
+	[2d72989fe7b1]
+
+	* plugins/sudoers/visudo.c:
+	If sudo_lock_file() fails for a reason other than the file already
+	being locked, give the user a chance to edit anyway.
+	[e5a963ecc083]
+
+2018-08-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/cvtsudoers/test28.sh:
+	Quick sort is not a stable sort; use distinct sudoOrder values so
+	the output is predictable.
+	[46ebc1169c0c]
+
+	* lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	plugins/sudoers/ldap.c,
+	plugins/sudoers/regress/parser/check_base64.c:
+	Fix warnings on OpenIndiana (Illumos)
+	[1b45d303b338]
+
+	* plugins/sudoers/ldap.c:
+	Correct ldap_to_sudoers() return value.
+	[16b0d144b196]
+
+	* NEWS:
+	Bug #849
+	[3e05bad00a44]
+
+	* plugins/sudoers/sssd.c:
+	The sssd backend used to take the first match, assuming that entries
+	were sorted in descending order by sudoOrder. That allowed it to
+	avoid iterating over the entire list of rules. Now that we convert
+	to a sudoers parse tree, we need to convert rules in ascending
+	order, not descending. The simplest way to accomplish this is to
+	simply iterate over the rules from last to first, reversing the sort
+	order. Bug #849
+	[63627909bb10]
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/test28.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test28.sh,
+	plugins/sudoers/regress/cvtsudoers/test29.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test29.sh:
+	Add some more ldif -> sudoers tests to verify sudoOrder.
+	[f41358fbd066]
+
+	* plugins/sudoers/ldap.c:
+	For conversion to a sudoers parse tree, ldap_entry_compare() now
+	needs to sort in ascending order, not descending. Bug #849
+	[9f23126cded8]
+
+2018-08-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c:
+	No need to set input_file for stdin in parse_ldif(); noted by clang
+	analyzer.
+	[c852e1c92dd2]
+
+	* plugins/sudoers/iolog_util.c:
+	Use TIME_T_MAX when parsing the I/O log file timestamp and disallow
+	negative times.
+	[bfb17118e584]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/iolog_util.c,
+	plugins/sudoers/iolog_util.h,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/regress/iolog_util/check_iolog_util.c,
+	plugins/sudoers/sudoreplay.c:
+	When parsing an I/O log timing line, store the result in a timespec,
+	not a double. The speed factor (for scaling the delay) in sudoreplay
+	is still a double but we only need to adjust the delay if the factor
+	is something other than 1.0.
+	[39077129d1f9]
+
+	* plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c:
+	Fix memory leak in test.
+	[94fb9f39dfee]
+
+	* doc/cvtsudoers.cat, doc/sudo.cat, doc/sudo.conf.cat,
+	doc/sudo_plugin.cat, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers_timestamp.cat, doc/sudoreplay.cat, doc/visudo.cat:
+	regen
+	[f2850c2f733a]
+
+2018-08-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/env.c:
+	Update conversion of DID_* to KEPT_* to match the new values of
+	DID_* and KEPT_*.
+	[6ce1bc30a4d1]
+
+	* NEWS, plugins/sudoers/env.c:
+	Set the LOGIN environment variable on AIX like we do LOGNAME.
+	[e6afb82d918c]
+
+2018-08-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, m4/sudo.m4,
+	plugins/sudoers/bsm_audit.c:
+	Add a test for the 4-argument au_close() function found in Solaris
+	11 instead of assuming it is present if __sun is defined. Fixes a
+	compilation error on OpenIndiana and older Solaris versions.
+	[4a4f91e28bbc]
+
+	* doc/CONTRIBUTORS:
+	Add Miguel Sanders and Scott Cheloha
+	[14aca7309a0a]
+
+	* NEWS:
+	testsudoers changes
+	[f008d473c933]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/testsudoers.c:
+	Add ldif support to testsudoers
+	[321f11b7badd]
+
+2018-08-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers.h, plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/parse.h, plugins/sudoers/parse_ldif.c:
+	Move ldif -> sudoers conversion code into parse_ldif.c
+	[497d55799d5b]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers.h, plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/strlist.c,
+	plugins/sudoers/strlist.h:
+	Move string list functions to their own file.
+	[a15902cde4eb]
+
+	* lib/util/Makefile.in:
+	sync
+	[9b1f98d4335f]
+
+2018-08-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_event.h, lib/util/event.c, lib/util/util.exp.in:
+	Backward ABI compatibility for even functions that use a timeval.
+	[01d9e617a923]
+
+	* lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c:
+	Use a monotonic timer for the event subsystem.
+	[acf30905a275]
+
+	* config.h.in, configure, configure.ac, include/sudo_event.h,
+	lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c,
+	plugins/sudoers/iolog_util.h, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoreplay.c:
+	Use struct timespec, not struct timeval in the event subsystem. Use
+	ppoll() or pselect() if avaialble which use timespec.
+	[b1bfccec8b13]
+
+2018-08-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgignore:
+	sync
+	[193fd33e9864]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c:
+	Eliminate most use of parsed_sudoers in cvtsudoers
+	[0d0504f61e3e]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_json.c, plugins/sudoers/parse.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Make alias_apply() take 3 arguments, the first being a pointer to
+	the struct sudoers_parse_tree.
+	[7802295c07fa]
+
+2018-08-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c:
+	Handle systems where root's gid is not 0.
+	[1fc92bad715a]
+
+	* plugins/sudoers/iolog_util.c, plugins/sudoers/iolog_util.h:
+	Add missing files from last commit.
+	[a155e07bb191]
+
+	* .hgignore, MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/po/sudoers.pot,
+	plugins/sudoers/regress/iolog_plugin/check_iolog_plugin.c,
+	plugins/sudoers/sudoreplay.c:
+	Add regress test for I/O log plugin endpoints
+	[bf9fbe5ff2a6]
+
+	* plugins/sudoers/iolog.c:
+	We cannot reuse last_time for the I/O log info file now that it is a
+	monotonic timer. Just call time(3) in write_info_log() directly.
+	[f2e1de732a91]
+
+	* src/exec_pty.c:
+	Move the loop to free the monitor_messages list into
+	free_exec_closure_pty()
+	[d6edc1a94e7e]
+
+	* po/sudo.pot:
+	regen
+	[6467f05a2fd0]
+
+2018-08-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* lib/util/getentropy.c:
+	Fix typo in last commit.
+	[38f3450b57fb]
+
+	* config.h.in, configure, configure.ac, lib/util/getentropy.c:
+	Do not assume all Linux has linux/random.h. Add missing
+	sys/syscall.h include
+	[8460f258e1af]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/sudo_edit.c:
+	Cast uid/gid to unsigned int before printing.
+	[37fcab8b4f97]
+
+	* include/sudo_compat.h:
+	Only include stdarg.h if we need it.
+	[c266d34454ba]
+
+	* plugins/sudoers/bsm_audit.c, plugins/sudoers/timestamp.c:
+	fix compiler warnings on Solaris 11
+	[6c92c438a38e]
+
+	* lib/util/getentropy.c:
+	Fix setting of errno when gotdata() fails.
+	[4fab71fa575f]
+
+	* plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/rcstr.c, plugins/sudoers/timestamp.c,
+	src/sudo_noexec.c:
+	Include stddef.h for offsetof() definition.
+	[15d13ae1ba46]
+
+	* NEWS:
+	Bugs 846 and 847
+	[a0ba7ad24812]
+
+	* include/sudo_compat.h:
+	We still need to include string.h for AIX (and possibly others) when
+	we are not using the system memset_r() function and rsize_t is
+	defined by the system headers.
+	[e1f8f7537209]
+
+	* configure, configure.ac, include/sudo_compat.h, mkpkg:
+	Add --enable-package-build to give configure a hint that we are
+	building a package. This can be used to avoid relying on libc
+	functions that may not be present in all libc versions for a
+	particular system. For instance, AIX 7.1 may or may not have
+	memset_s() and getline() present.
+	[7e843bed8435]
+
+	* include/sudo_compat.h:
+	AIX defines rsize_t in string.h, not stddef.h for use by the
+	memset_s() prototype. We use our own memset_s() on AIX since it is
+	not available on all BOS levels which makes package building
+	problematic.
+	[3724b47eadd8]
+
+2018-08-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/defaults.c:
+	Fix printing of T_TIMESPEC values.
+	[8775c17229a4]
+
+	* plugins/sudoers/iolog.c:
+	Remove unused struct script_buf
+	[fd27f67123b3]
+
+2018-08-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Document when the I/O log timing file entry bug was introduced.
+	[09a75d80487e]
+
+	* NEWS:
+	sync
+	[95fd54c61719]
+
+	* config.h.in, configure, configure.ac, lib/util/gettime.c:
+	HP-UX doesn't suport CLOCK_MONOTONIC but we can use gethrtime()
+	instead.
+	[3ec7d99444c0]
+
+	* src/exec_monitor.c, src/exec_pty.c:
+	Close the pty slave in the parent so that when the command and
+	monitor exit, the pty gets recycled without our having to close it
+	directly.
+	[fec53753cf52]
+
+	* lib/util/term.c, src/exec_monitor.c, src/exec_pty.c, src/sudo.h:
+	Move updating of the window size to the monitor process. This will
+	allow us to close the slave in the main sudo process in the future
+	so only the command and monitor have it open.
+	[07108a1c2edc]
+
+	* configure, configure.ac:
+	sudo 1.8.25
+	[4938ba570787]
+
+	* plugins/sudoers/regress/sudoers/test19.ldif2sudo.ok:
+	Fix test output for bug #845
+	[ee6f2d615bd8]
+
+	* plugins/sudoers/ldap_util.c:
+	Fix pasto when converting sudoNotAfter; from Miguel Sanders Bug #845
+	[69638cd6da60]
+
+2018-08-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* aclocal.m4, config.h.in, configure, configure.ac,
+	include/sudo_util.h, lib/util/gettime.c, lib/util/util.exp.in:
+	Add sudo_gettime_uptime() to measure time while not sleeping.
+	[a128e7d51740]
+
+	* plugins/sudoers/iolog.c:
+	Use a monotonic timer that only runs while not suspended for the
+	iolog timing values and write nsec-precision entries.
+	[7f37f0b24ce7]
+
+2018-08-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* mkpkg:
+	Detect number of CPUs on AIX.
+	[2b7c62b42da2]
+
+	* plugins/sudoers/iolog.c:
+	Fix I/O log timing file on systems without a C99-compatible
+	snprintf(). On those systems we use our own snprintf() that doesn't
+	support floating point. We don't actually need floating point in
+	this case since the we can print seconds and microseconds without
+	using it.
+	[4ea419ac5bee]
+
+	* NEWS:
+	Fix for Bug #844
+	[51cfeb79669c]
+
+	* src/sudo_edit.c:
+	Handle the case where O_PATH or O_SEARCH is defined but O_DIRECTORY
+	is not. In theory, O_DIRECTORY is redundant when O_SEARCH is
+	specified but it is legal for O_EXEC and O_SEARCH to have the same
+	value. Bug #844
+	[fb75d75c7249]
+
+2018-08-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	sync
+	[2be1b619a06a]
+
+	* plugins/sudoers/starttime.c:
+	Fix get_starttime() on HP-UX.
+	[329a4ad9f4ef]
+
+	* mkpkg:
+	Detect number of CPUs on HP-UX. Use MAKE environment variable if
+	set.
+	[c95ab5d6d392]
+
+	* src/net_ifs.c:
+	Avoid a compilation problem on HP-UX 11.31 with gcc and
+	machine/sys/getppdp.h
+	[b861e894271b]
+
+2018-08-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/Makefile.in:
+	Add CHECK_SYMBOLS_LDFLAGS to check_symbols target. Non-ELF HP-UX
+	executables don't support SHLIB_PATH or LD_LIBRARY_PATH unless ld is
+	passed the +s flag. This lets the check_symbols test pass on systems
+	where the ldap libraries aren't installed in the standard location.
+	[c2d6d3248fa4]
+
+2018-08-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/Makefile.in:
+	For the lint target, don't stop after the first manual that fails
+	lint.
+	[8a80d8e7b540]
+
+	* plugins/sudoers/timestamp.c:
+	Add debugging info so we can tell why a timestamp record doesn't
+	match.
+	[99ede76f9835]
+
+2018-08-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	typo
+	[8a5a11b921ea]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po, po/da.mo,
+	po/da.po:
+	sync with translationproject.org
+	[19f7eba39013]
+
+2018-08-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/iolog.c:
+	Fix the return value of sudoers_io_change_winsize() on success.
+	Otherwise, we only log a single window size change.
+	[d6cdab99f6f9]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po:
+	sync with translationproject.org
+	[4109b52f393f]
+
+2018-08-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	sync
+	[1448675b44aa]
+
+2018-08-07  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix ambiguity when talking about Aliases. We can't use User_Alias in
+	the grammar as both the definition of the Alias as well as its name.
+	This adds {User,Runas,Host,Cmnd}_Alias_Spec to help differentiate
+	between the name of the alias and its definition. Bug #834
+	[06678d12306f]
+
+	* doc/cvtsudoers.cat, doc/sudoreplay.cat:
+	regen
+	[d7237381675a]
+
+	* Makefile.in:
+	Warn if unable to run xgettext or msgfmt.
+	[d0cbba35cd49]
+
+2018-08-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/hr.mo,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/ja.mo,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pt_BR.mo,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/vi.mo:
+	sync with translationproject.org
+	[d1deb5cb5eb3]
+
+2018-08-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/fmtsudoers.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/policy.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Refactor code to convert defaults to tags and do conversion on
+	output for "sudo -l".
+
+	Remove the short_list (was long_list) global in favor of a verbose
+	argument.
+	[eae1e1e814e0]
+
+2018-08-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/policy.c:
+	Assign short_list true, not 1 now that it is a boolean.
+	[10354cd29439]
+
+	* plugins/sudoers/fmtsudoers.c:
+	fix typo
+	[ad7e93f375ba]
+
+2018-08-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/rcstr.c:
+	Fix a warning on FreeBSD which has a fancier __containerof
+	implementation.
+	[b5106a524232]
+
+	* plugins/sudoers/po/de.po, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.po, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/pl.po, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sv.po, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.po:
+	sync with translationproject.org
+	[ae5353cbeac4]
+
+2018-08-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* aclocal.m4, autogen.sh, config.h.in, configure:
+	Regen with aclocal 1.15.1.
+	[22c02e451333]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	For ldap/sssd, include defaults in the generate privilege unless we
+	are listing in short mode (in which case we convert them to tags if
+	possible). Fixes a problem where sudoOptions were not being applied
+	to the command.
+	[b21267488971]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/parse.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	update_defaults() needs to be able to take a defaults_list for the
+	ldap/sssd backends which support per-role defaults.
+	[ddbb07881a46]
+
+2018-07-31  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[29c5a09aaeaf]
+
+2018-07-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Update
+	[045b535f84b9]
+
+2018-07-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/file.c,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	o Move userspecs, defaults and aliases into a new struct
+	sudoers_parse_tree. o The parse tree is now passed to the alias,
+	match and defaults functions. o The nss API has been changed so that
+	the nss parse() function returns a pointer to a struct
+	sudoers_parse_tree which will be filled in by the getdefs() and
+	query() functions.
+	[bddb4676ad0e]
+
+	* lib/util/getgrouplist.c:
+	Don't need to preallocate 4 x NGROUP_MAX on AIX or BSD/Linux. For
+	BSD/Linux, getgrouplist(3) will tell us the number of groups if we
+	don't have enough. For AIX, we can count the entries in the group
+	set before allocating the group vector.
+	[c278fd947af4]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/check.c, plugins/sudoers/sudoers.h:
+	Ignore PAM_NEW_AUTHTOK_REQD and PAM_AUTHTOK_EXPIRED errors from
+	pam_acct_mgmt() if authentication is disabled for the user. Bug #843
+	[1dc39794cf0d]
+
+2018-07-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	Work around a bug on AIX where closing the pty slave causes the main
+	sudo process to lose its controlling tty (which was *not* the pty
+	slave).
+	[649a25b7f864]
+
+	* src/sudo.c:
+	Add missing aix_restoreauthdb() call to match the aix_setauthdb()
+	added in b8a011be9af7. Fixes issues on AIX where local users/groups
+	may not be resolved when some NIS/AD/LDAP is used for users.
+	[16e196a7a337]
+
+	* lib/util/getgrouplist.c:
+	Linux getgrouplist(3) returns the number of groups on success
+	instead of 0 like BSD.
+	[599a89afa4f5]
+
+2018-07-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* mkdep.pl, plugins/sudoers/Makefile.in:
+	When both a .o and .lo file was used in a Makefile, we used to make
+	the .o depend on the .lo. Unfortunately, this creates a race
+	condition for parallel make since libtool is not atomic (it creates
+	a .o and then renames it when building PIC objects for shared libs).
+
+	We always link with libtool so the only reason to prefer the .o over
+	the .lo file is to avoid mixing .o and .lo in the dependencies.
+	That's not a good enough reason so change mkdep.pl to warn when both
+	a .o and .lo are referenced in a Makefile and do nothing else.
+
+	Bug #842
+	[a8d94e6aed9f]
+
+2018-07-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap.c:
+	Avoid duplicate free when netgroup_base is invalid.
+	[5ce39dff77ba]
+
+2018-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/arc4random.h:
+	Use madvise(2) with MADV_WIPEONFORK if available.
+	[a11461409569]
+
+2018-07-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po, po/eo.mo,
+	po/eo.po:
+	sync with translationproject.org
+	[01bcfe7b30e5]
+
+	* NEWS:
+	Update.
+	[f5e0b1f909bb]
+
+2018-06-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	sync with schema.OpenLDAP
+	[d83420d8228d]
+
+	* doc/schema.OpenLDAP:
+	RFC 2849 specifies whitespace as the space character only so replace
+	tabs with spaces. Bug #840
+	[e9d5de6365ba]
+
+	* doc/schema.OpenLDAP:
+	Fix typo; bug #839
+	[dee2dad738de]
+
+2018-06-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Should no longer need to set max_groups.
+	[459119b11265]
+
+2018-06-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/pwutil_impl.c,
+	src/sudo.c:
+	Use new sudo_getgrouplist2() function instead of getgrouplist().
+	[8e88b6d3ea6f]
+
+	* configure, configure.ac, include/sudo_compat.h, include/sudo_util.h,
+	lib/util/Makefile.in, lib/util/getgrouplist.c, lib/util/util.exp.in:
+	Add sudo_getgrouplist2() to dynamically allocate the group vector.
+	This allows us to avoid repeatedly calling getgrouplist() with a
+	statically sized vector on macOS, Solaris, HP-UX, and AIX.
+	[55480e2ec7c2]
+
+	* src/conversation.c:
+	Fix fd leak introduced by SUDO_CONV_PREFER_TTY commit. Coverity CID
+	186605.
+	[fb6eb518bc4c]
+
+2018-06-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/sudoers_timestamp.cat, doc/sudoers_timestamp.man.in,
+	doc/sudoers_timestamp.mdoc.in, doc/visudo.cat, doc/visudo.man.in,
+	doc/visudo.mdoc.in:
+	Fix some issues pointed out by mandoc -Tlint
+	[7ace981c7334]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h, src/conversation.c:
+	Add SUDO_CONV_PREFER_TTY flag for conversation function to tell sudo
+	to try writing to /dev/tty first. Can be used in conjunction with
+	SUDO_CONV_INFO_MSG and SUDO_CONV_ERROR_MSG.
+	[a1e9420a7c5e]
+
+2018-06-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/LICENSE:
+	Update for arc4random.c, arc4random_uniform.c and getentropy.c
+	[168db3c8d590]
+
+2018-06-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/regress/noexec/check_noexec.c:
+	FreeBSD wordexp() returns WRDE_SYNTAX if it can't write to the shell
+	process. Since we've prevented execve() from succeeding this is the
+	error we get back from wordexp() on FreeBSD.
+	[2a7a73de30cf]
+
+2018-06-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/starttime.c:
+	Fix conversion of usec to nsec; from Scott Cheloha
+	[26fa756ea623]
+
+2018-06-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* include/sudo_plugin.h:
+	Fix typo.
+	[504256dc4ccc]
+
+2018-05-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	The getdefs() function now get called multiple times so use the
+	cached data if present.
+	[042be7ccab3c]
+
+	* plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c:
+	Return an empty defaults list, not NULL if there is no global
+	sudoers defaults entry in sss.
+	[8e16de465ee2]
+
+	* plugins/sudoers/file.c:
+	Fix memory leak of handle pointer on close.
+	[e4eb30e611d4]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Remove a needless copy when parsing options.
+	[60fe50b736a9]
+
+	* plugins/sudoers/file.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudoers.c:
+	Move cached userspecs and defaults into the handle object.
+	[37e4df73907d]
+
+2018-05-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Quiet a clang analyzer warning. It should not be possible for
+	pop_include() to be called when YY_CURRENT_BUFFER is NULL.
+	[148d79e5a44e]
+
+	* plugins/sudoers/file.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/sssd.c:
+	Reorder things to avoid the need to declare static functions.
+	[8f27e69fa9cb]
+
+2018-05-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, config.h.in, configure, configure.ac, include/sudo_rand.h,
+	lib/util/Makefile.in, lib/util/arc4random.c, lib/util/arc4random.h,
+	lib/util/arc4random_uniform.c, lib/util/chacha_private.h,
+	lib/util/getentropy.c, lib/util/util.exp.in, mkdep.pl:
+	Import arc4random() from libressl. This takes an all-in-one approach
+	instead of the one-file-per-OS approach that libressl takes. The
+	fallback code does not have as many OS-specific bits as libressl.
+	[310d65e466bd]
+
+	* lib/util/Makefile.in, lib/util/mktemp.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/insults.h:
+	Use arc4random for mkstemp() and insults.
+	[b8c7447756f2]
+
+	* MANIFEST, configure, configure.ac, include/sudo_digest.h,
+	lib/util/Makefile.in, lib/util/digest.c, lib/util/digest_gcrypt.c,
+	lib/util/digest_openssl.c, lib/util/util.exp.in, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/digestname.c,
+	plugins/sudoers/filedigest.c, plugins/sudoers/filedigest_gcrypt.c,
+	plugins/sudoers/filedigest_openssl.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/sudo_ldap.h, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Move digest code into libutil
+	[c53cf5c508eb]
+
+2018-05-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/cvtsudoers/test25.sh,
+	plugins/sudoers/regress/cvtsudoers/test26.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test26.sh,
+	plugins/sudoers/regress/cvtsudoers/test27.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test27.sh:
+	Check for invalid bas64 attributes.
+	[4218d11c8205]
+
+	* plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/parser/check_base64.c:
+	Fix pointer sign warnings.
+	[5ee724e3956e]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Add missing variable declaration for SELinux and Solaris.
+	[c8084f0508e5]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Handle empty string and treat it as safe.
+	[8029b97d8f4a]
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/cvtsudoers/test26.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test26.sh:
+	Add support for base64-encoding non-safe strings in LDIF output.
+	[b9fd1795f4ee]
+
+2018-05-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/base64.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_base64.c:
+	Add base64_encode() by Jon Mayo.
+	[a893ec3dc667]
+
+2018-05-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/cvtsudoers/test25.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test25.sh:
+	Add support for parsing base64-encoded attributes
+	[262dd9a526de]
+
+2018-05-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/sudoers/test2.ldif.ok:
+	rfc2253 says we need to escape " and leading and trailing space.
+	[1c0105a5eb1b]
+
+	* configure, configure.ac:
+	Define ZLIB_CONST so we get the const version of the API.
+	[71a629d0eb4b]
+
+2018-05-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/parse.c:
+	Fix logic inversion when handing the authenticate Defaults option
+	for "sudo -l" and "sudo -v" in long list mode.
+	[f8157d4c4f03]
+
+	* plugins/sudoers/sssd.c:
+	Set handle->pw before sss_to_sudoers() since sss_check_user() uses
+	it. Coverity CID 185651
+	[fa646e569352]
+
+	* plugins/sudoers/ldap_util.c:
+	Fix memory leak on error, CID 185602
+	[31c1ab085985]
+
+	* plugins/sudoers/ldap.c:
+	Some ldap_get_values_len -> sudo_ldap_get_values_len that were
+	missed before.
+	[d7f1877531be]
+
+	* plugins/sudoers/ldap_util.c:
+	When building up the cmndspec, add the actual command member last.
+	This simplifies the logic regarding the SETENV tag and alsomakes
+	"out of memory" cleanup simpler.
+	[d704f3b09ac1]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Fix format string mismatch, sudo_order is unsigned.
+	[ecc398e45b0a]
+
+	* plugins/sudoers/pwutil.c:
+	Add cppcheck annotation to suppress memory leak false positive.
+	[d4a0ae57c372]
+
+	* plugins/sudoers/ldap_util.c:
+	Sudo "ALL" implies the SETENV tag.
+	[7abc653b4d39]
+
+	* src/parse_args.c:
+	Only set MODE_PRESERVE_ENV when preserving the entire environment.
+	Fixes a problem introduced in 1.8.23 where "sudo -i" could not be
+	used in conjunction with --preserve-env=VARIABLE. Bug #835
+	[8ea75ca8fbd2]
+
+2018-05-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/file.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sssd.c:
+	Add free_userspecs() and free_default() and use them instead of
+	looping over the lists and calling free_userspec() and
+	free_default().
+	[797221539242]
+
+	* configure, configure.ac:
+	Depending on the bos level, AIX 6.1 may or may not include
+	getline/getdelim and AIX 7.1 may or may not include memset_s. Since
+	we need to build packages that will work on all AIX 6.1 and 7.1
+	machines, use our getline() and memset_s emulation.
+	[f5c427076b2c]
+
+2018-05-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap_util.c:
+	Do not leak struct sudo_command when the command is ALL. Coverity
+	CID 185602.
+	[d71ca4bc06bc]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.24
+	[7df3df9a3907]
+
+	* plugins/sudoers/sssd.c:
+	Improve comments about why we need to do a user check and how it
+	related to netgroups.
+	[605234ed0935]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Add checks for ldap/sss functions failing due to memory allocation
+	errors.
+	[0dfeb0d8ecf5]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Let the main sudoers lookup code check the host name. We still check
+	the user name so it is possible to use a single userspec but this
+	may change in the future.
+	[a74699b90213]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/file.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_ldap.h,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Simplify the nss interface such that each sudoers provider fills in
+	a per-nss list of userspecs and defaults instead of using separate
+	lookup and list functions. This makes it possible to have a single
+	implementation of the code for sudoers lookup and listing.
+	[50de9302de01]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/filedigest.c, plugins/sudoers/filedigest_gcrypt.c,
+	plugins/sudoers/filedigest_openssl.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_conf.c,
+	plugins/sudoers/ldap_util.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/parser/check_addr.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c:
+	Include parse.h in sudoers.h since it will soon be required.
+	[196abb590d96]
+
+	* plugins/sudoers/ldap_util.c:
+	Parse "ALL" as a command correctly.
+	[d969e7dfdbbc]
+
+2018-05-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c:
+	Add debug warning if lseek() fails (should not be possible).
+	[d568dc923c7d]
+
+	* plugins/sudoers/match.c:
+	Fix swapped args of lseek() when rewinding. This didn't cause a
+	problem because the value of SEEK_SET is 0.
+	[142591a3f333]
+
+2018-05-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/parser/check_hexchar.c:
+	Fix a format-truncation warning in newer gcc by avoiding using %0x
+	and %0X in the test. We are formatting a single byte so just do it
+	one nybble at a time.
+	[7c594a63598f]
+
+	* configure:
+	Regen with autoconf git commit
+	e17a30e987d7ee695fb4294a82d987ec3dc9b974 AC_HEADER_MAJOR: port to
+	glibc 2.25
+	[9fe77765c768]
+
+2018-05-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	No need to explicitly free role on EOF, it will be freed after the
+	loop is done.
+	[8d08c06b7622]
+
+	* plugins/sudoers/policy.c:
+	Garbage collect the command argv, envp and info vectors since they
+	are not available at policy close time.
+	[de22290a8ec5]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Plug memory leaks on parse error or when an LDIF entry doesn't match
+	the dn filter.
+	[4f48e740eed1]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Rename variables now that the string list functions are not ldap-
+	specific.
+	[640497f70551]
+
+2018-04-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	Fix typo
+	[6466295ba962]
+
+2018-04-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* configure, configure.ac:
+	fix version
+	[bfed601130b5]
+
+	* NEWS:
+	sync
+	[1c382f2aff27]
+
+	* configure, configure.ac, plugins/sudoers/po/zh_CN.mo,
+	plugins/sudoers/po/zh_CN.po, po/zh_CN.mo, po/zh_CN.po:
+	sync with translationproject.org
+	[ec28ff5acbd6]
+
+2018-04-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c:
+	O_EXEC for fexecve() not O_SEARCH.
+	[a156d8b38f31]
+
+	* doc/TROUBLESHOOTING:
+	Document how to suppress the last login message on Solaris.
+	[2926b670aca4]
+
+2018-04-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_json.c:
+	Fix compilation error with older Sun Studio compilers.
+	[0f735611642d]
+
+	* NEWS:
+	Update Bug #831 decription.
+	[d5e6a2a807b8]
+
+	* MANIFEST, doc/CONTRIBUTORS, po/zh_TW.mo, po/zh_TW.po:
+	Add Chinese(Taiwan) translation for sudo.
+	[5a4ba6769cca]
+
+	* plugins/sudoers/match.c:
+	Move the check for /dev/fd/N until *after* the digest has been
+	checked. We still need to be able to check the digest even if there
+	is no /dev/fd/N or fexecve().
+	[e0e086b4e764]
+
+2018-04-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c:
+	Rewind the fd after calling sudo_filedigest(). Otherwise, when
+	running a script via fexecve(), the interpreter may get EOF when
+	reading /dev/fd/N. This only appears to affect BSD systems with
+	fdescfs. Bug #831.
+	[d79f5125cc73]
+
+	* plugins/sudoers/match.c:
+	In open_cmnd(), return true, not false, if we the /dev/fd/N pathname
+	is not present. We don't want to fail a match because of this.
+	[72c4b499c019]
+
+	* NEWS:
+	Bug #831.
+	[700646725f45]
+
+	* plugins/sudoers/match.c:
+	We can only use fexecve() on a script if /dev/fd/N exists. Some
+	systems, such as FreeBSD, don't have /dev/fd mounted by default. Bug
+	#831
+	[30f7c5d64104]
+
+2018-04-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/el.mo, plugins/sudoers/po/el.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/eu.mo, plugins/sudoers/po/eu.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/fur.mo, plugins/sudoers/po/fur.po,
+	plugins/sudoers/po/hu.mo, plugins/sudoers/po/hu.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/lt.mo, plugins/sudoers/po/lt.po,
+	plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po,
+	plugins/sudoers/po/ru.mo, plugins/sudoers/po/ru.po,
+	plugins/sudoers/po/sk.mo, plugins/sudoers/po/sk.po,
+	plugins/sudoers/po/sl.mo, plugins/sudoers/po/sl.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/tr.mo, plugins/sudoers/po/tr.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/ca.mo,
+	po/ca.po, po/da.mo, po/da.po, po/de.mo, po/de.po, po/eo.mo,
+	po/eo.po, po/es.mo, po/es.po, po/eu.mo, po/eu.po, po/fi.mo,
+	po/fi.po, po/fur.mo, po/fur.po, po/gl.mo, po/gl.po, po/hu.mo,
+	po/hu.po, po/ko.mo, po/ko.po, po/nl.mo, po/nl.po, po/nn.mo,
+	po/nn.po, po/ru.mo, po/ru.po, po/sk.mo, po/sk.po, po/sl.mo,
+	po/sl.po, po/sr.mo, po/sr.po, po/vi.mo, po/vi.po, po/zh_CN.mo,
+	po/zh_CN.po:
+	sync with translationproject.org
+	[a786a841f30a]
+
+2018-04-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/el.mo, plugins/sudoers/po/el.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/eu.mo, plugins/sudoers/po/eu.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/fur.mo, plugins/sudoers/po/fur.po,
+	plugins/sudoers/po/hu.mo, plugins/sudoers/po/hu.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/lt.mo, plugins/sudoers/po/lt.po,
+	plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po,
+	plugins/sudoers/po/ru.mo, plugins/sudoers/po/ru.po,
+	plugins/sudoers/po/sk.mo, plugins/sudoers/po/sk.po,
+	plugins/sudoers/po/sl.mo, plugins/sudoers/po/sl.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/tr.mo, plugins/sudoers/po/tr.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/ca.mo,
+	po/ca.po, po/da.mo, po/da.po, po/de.mo, po/de.po, po/eo.mo,
+	po/eo.po, po/es.mo, po/es.po, po/eu.mo, po/eu.po, po/fi.mo,
+	po/fi.po, po/fur.mo, po/fur.po, po/gl.mo, po/gl.po, po/hu.mo,
+	po/hu.po, po/ko.mo, po/ko.po, po/nl.mo, po/nl.po, po/nn.mo,
+	po/nn.po, po/ru.mo, po/ru.po, po/sk.mo, po/sk.po, po/sl.mo,
+	po/sl.po, po/sr.mo, po/sr.po, po/vi.mo, po/vi.po, po/zh_CN.mo,
+	po/zh_CN.po:
+	sync with translationproject.org
+	[268a65ce44cb]
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/test23.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test23.sh,
+	plugins/sudoers/regress/cvtsudoers/test24.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test24.sh:
+	Add tests for round-tripping cvtsudoers, sudoers -> LDIF -> sudoers
+	and LDIF -> sudoers -> LDIF.
+	[370d4ba4dbb8]
+
+2018-04-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/regress/cvtsudoers/test22.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test22.sh:
+	Test the -b option when converting from LDIF.
+	[4d65c7c2ed01]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Fix the -b option when converting from LDIF.
+	[f3c1e4dbd61e]
+
+2018-04-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po, po/it.mo,
+	po/it.po:
+	sync with translationproject.org
+	[1953956c60fe]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	Fix some more typos.
+	[87fde92a1fa4]
+
+	* doc/Makefile.in:
+	mandoc now preserves the copyright notice, no need to do it
+	ourselves
+	[2c3f6841941a]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Describe the special handling of LOGNAME, USER and USERNAME. Fix
+	typos reported by aspell.
+	[e89bd28f4530]
+
+	* src/load_plugins.c:
+	Fix a memory leak on the error path.
+	[db5a4678e0e4]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that the editor setting is also used by sudoedit.
+	[2ae14439efd7]
+
+2018-04-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/load_plugins.c, src/sudo.c, src/sudo_plugin_int.h:
+	Plug memory leak when an I/O plugin is specified in sudo.conf but
+	the I/O plugin is not configured.
+	[5b5086d7152a]
+
+	* INSTALL, MANIFEST, NEWS, config.h.in, configure, configure.ac,
+	plugins/sudoers/Makefile.in, plugins/sudoers/ins_python.h,
+	plugins/sudoers/insults.h:
+	Monty Python insults from Philip Hudson
+	[8330cfc5ea19]
+
+2018-04-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in:
+	add examples
+	[830ff26a0dbc]
+
+	* doc/sudo.conf.man.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	doc/sudoers.ldap.man.in, doc/sudoers.man.in,
+	doc/sudoers_timestamp.man.in, doc/sudoreplay.man.in,
+	doc/visudo.man.in:
+	Update copyright year and regen man pages.
+	[6385891ebaa3]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, po/cs.mo,
+	po/cs.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/ja.mo,
+	po/ja.po, po/nb.mo, po/nb.po, po/pl.mo, po/pl.po, po/pt_BR.mo,
+	po/pt_BR.po, po/sv.mo, po/sv.po, po/tr.mo, po/tr.po, po/uk.mo,
+	po/uk.po:
+	sync with translationproject.org
+	[3495b17becb0]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/match.c:
+	Prune alias contents when pruning and expanding aliases. This abuses
+	the userlist_matches_filter() and hostlist_matches_filter()
+	functions. A better approach would be to call the correct function
+	from user_matches() and host_matches().
+	[0ae5f351b09f]
+
+	* MANIFEST, examples/sudoers, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/cvtsudoers/sudoers,
+	plugins/sudoers/regress/cvtsudoers/sudoers.defs,
+	plugins/sudoers/regress/cvtsudoers/test1.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test1.sh,
+	plugins/sudoers/regress/cvtsudoers/test10.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test10.sh,
+	plugins/sudoers/regress/cvtsudoers/test11.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test11.sh,
+	plugins/sudoers/regress/cvtsudoers/test12.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test12.sh,
+	plugins/sudoers/regress/cvtsudoers/test13.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test13.sh,
+	plugins/sudoers/regress/cvtsudoers/test14.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test14.sh,
+	plugins/sudoers/regress/cvtsudoers/test15.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test15.sh,
+	plugins/sudoers/regress/cvtsudoers/test16.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test16.sh,
+	plugins/sudoers/regress/cvtsudoers/test17.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test17.sh,
+	plugins/sudoers/regress/cvtsudoers/test18.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test18.sh,
+	plugins/sudoers/regress/cvtsudoers/test19.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test19.sh,
+	plugins/sudoers/regress/cvtsudoers/test2.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test2.sh,
+	plugins/sudoers/regress/cvtsudoers/test20.conf,
+	plugins/sudoers/regress/cvtsudoers/test20.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test20.sh,
+	plugins/sudoers/regress/cvtsudoers/test21.conf,
+	plugins/sudoers/regress/cvtsudoers/test21.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test21.sh,
+	plugins/sudoers/regress/cvtsudoers/test3.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test3.sh,
+	plugins/sudoers/regress/cvtsudoers/test4.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test4.sh,
+	plugins/sudoers/regress/cvtsudoers/test5.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test5.sh,
+	plugins/sudoers/regress/cvtsudoers/test6.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test6.sh,
+	plugins/sudoers/regress/cvtsudoers/test7.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test7.sh,
+	plugins/sudoers/regress/cvtsudoers/test8.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test8.sh,
+	plugins/sudoers/regress/cvtsudoers/test9.out.ok,
+	plugins/sudoers/regress/cvtsudoers/test9.sh:
+	cvtsudoers regress tests
+	[72fd218b5036]
+
+2018-04-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in:
+	Fix typo
+	[e572c36919b7]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Fix cut & pasto that prevented "-d command" from working.
+	[6e4ff7f23d0a]
+
+2018-04-13  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y:
+	Fix a user after free crash as well as a memory leak when filtering
+	Defaults.
+	[9bdd404ae6a4]
+
+2018-04-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in:
+	Document that a User_Alias or Host_Alias may be used in the match
+	filter.
+	[49b9306a6a6d]
+
+	* plugins/sudoers/fmtsudoers.c:
+	Don't always expand aliases when formatting a host-based Defaults
+	line. This was missed when expand_aliases support was added.
+	[ef12a033306c]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Allow host and user aliases to be specified in match filters.
+	[6bc8c0da4578]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update copyright year.
+	[e9c2eb23def1]
+
+2018-04-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/hu.mo, plugins/sudoers/po/hu.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, po/da.mo,
+	po/da.po, po/hr.mo, po/hr.po, po/hu.mo, po/hu.po, po/pt_BR.mo,
+	po/pt_BR.po, po/tr.mo, po/tr.po:
+	sync with translationproject.org
+	[4a0811073374]
+
+2018-04-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/parse.h:
+	When the -d option is used, remove aliases used by the non-converted
+	Defaults settings if the aliases are not also referenced by
+	userspecs.
+	[d07c4254b3dd]
+
+2018-04-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[9a4d88b2a965]
+
+	* NEWS:
+	update
+	[6ef9dde8fc9a]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in:
+	Mention -p and -M options in the description of -m.
+	[b20abfd14164]
+
+2018-04-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo_edit.c:
+	Check sudoedit temporary directory for writability before using it.
+	[1e29ade3f4b2]
+
+	* plugins/sudoers/regress/starttime/check_starttime.c:
+	Use btime in /proc/stat to determine system start time instead of
+	/proc/uptime. Fixes the process start time test when run from a
+	container where /proc/uptime is the uptime of the container but the
+	process start time is relative to the host system boot time. Bug
+	#829
+	[65ba61e55011]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/match.c, plugins/sudoers/parse.h:
+	Add option to prune non-matching entries from cvtsudoers output with
+	-m option is used.
+	[9a69ba35389d]
+
+2018-04-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h:
+	Allow defaults types and suppression list to be specified in the
+	config file.
+	[62dd7a96ac9b]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/parse.h, plugins/sudoers/visudo.c:
+	Refactor common alias code out of cvtsudoers and visudo and into
+	alias.c.
+	[b3ba3e6f24d2]
+
+2018-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/cvtsudoers.c:
+	Avoid NULL deref in an error path. CID 183467
+	[38ea56670f18]
+
+	* plugins/sudoers/cvtsudoers.c:
+	No need to initialize the last pointer passed to strtok_r(). This
+	was originally added to appease newer gcc but no longer seems to be
+	required. CID 183466, CID 183468, CID 183469
+	[b0a9b90603e1]
+
+	* plugins/sudoers/cvtsudoers_json.c:
+	Avoid false positive NULL dereference by uses value.u.string instead
+	of name as the former is guaranteed not to be NULL. Fixes CID
+	183465.
+	[c896d10f5626]
+
+2018-03-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[8a88e162fd0b]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Add a section on convertion from file-based sudoers.
+	[033c797b229d]
+
+2018-03-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c:
+	Add support for "cvtsudoers -d all"
+	[62e748b70105]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h:
+	Add -d option to control what type of Defaults entries are
+	converted.
+	[b723f0dae5c7]
+
+2018-03-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	In pty_close() we still need to check whether the pty master and
+	slave fds are open before closing them. When no tty is present but
+	we are I/O logging pty_close() will be called when there is no
+	actual pty in use.
+	[59201fb78427]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/sudo.conf.cat,
+	doc/sudoers_timestamp.cat, doc/visudo.cat:
+	regen
+	[186f3b58daf5]
+
+2018-03-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgignore:
+	ignore *.ldif2sudo regress output
+	[8d57e8a0013f]
+
+	* src/exec_pty.c:
+	In pty_close() there is no need to remove events associated with the
+	pty slave as there are none. We also don't need to check for the pty
+	fds being -1 since they are not closed elsewhere and pty_close() is
+	only called if pty_setup() succeeds.
+	[585a47fb5a8b]
+
+2018-03-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/Makefile.in, doc/cvtsudoers.mdoc.in:
+	Move cvtsudoers to section 1.
+	[69adcb2d24ff]
+
+	* src/exec_pty.c:
+	In pty_close() close the slave and remove any events associated with
+	it. Fixes a potential hang when performing the final flush on non-
+	BSD systems.
+	[40159d852c2d]
+
+2018-03-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap_util.c:
+	Fix typo in strcmp(), we are comparing var not val.
+	[07ccd7bae4f6]
+
+	* MANIFEST:
+	sync
+	[7960511e39dd]
+
+	* NEWS:
+	sync
+	[c655e7111ce9]
+
+2018-03-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[ff7b545844fb]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/sudoers.h:
+	Add -M option to cvtsudoers to force the use of the local passwd and
+	group databases when matching.
+	[ea58e2765a40]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c:
+	Add cvtsudoers command line option to suppress certain parts of the
+	security policy. Can be used to suppress displaying of Defaults
+	entries, aliases or privileges.
+	[b243efa695e6]
+
+2018-03-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/parser/check_gentime.c:
+	Silence a false positive from the clang static analyzer.
+	[bfde0594783e]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h:
+	Silence a false positive from the clang static analyzer.
+	[5257e321158d]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Fix memory leak on error path.
+	[1a13732abfd5]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[c139b8bed3c1]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_ldif.c:
+	Move cvtsudoers string functions into cvtsudoers.c
+	[4b5b799e7abc]
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[6ecb37e35c9f]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/cvtsudoers_pwutil.c, plugins/sudoers/parse.h:
+	Initial support filtering by user, group and host in cvtsudoers.
+	Currently forces alias expansion when a filter is applied and the
+	entire matching user or host list is printed, even the non-matching
+	entries. This effectively allows you to grep sudoers by user, group
+	and host.
+	[0adbf8d38eb4]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h:
+	Add free_default() to free a struct defaults pointer so we have a
+	single place where we free the defaults. A pointer to the previous
+	Default's binding may be passed in to avoid freeing an already free
+	binding.
+	[9d9ef007ee88]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Decrease bullet width to 1n.
+	[e6f3776fd72e]
+
+2018-03-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/sudo.c:
+	Add aix_setauthdb() before the initial getpwuid() call.
+	[b8a011be9af7]
+
+2018-03-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.h:
+	fix compilation on Solaris
+	[e31019b5f545]
+
+2018-03-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	Make "sudoreplay -m 0" skip the pauses entirely.
+	[d9a7fc9f5720]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	Document that a negative value for -m will elmininate the pauses.
+	[a025e96abb47]
+
+2018-03-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/testsudoers.c:
+	Update copyright date, remove unneeded include and add a few
+	comments.
+	[ac1bccd631e5]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/sudoers/test1.out.ok,
+	plugins/sudoers/regress/sudoers/test10.out.ok,
+	plugins/sudoers/regress/sudoers/test11.out.ok,
+	plugins/sudoers/regress/sudoers/test12.out.ok,
+	plugins/sudoers/regress/sudoers/test13.out.ok,
+	plugins/sudoers/regress/sudoers/test14.out.ok,
+	plugins/sudoers/regress/sudoers/test15.out.ok,
+	plugins/sudoers/regress/sudoers/test16.out.ok,
+	plugins/sudoers/regress/sudoers/test17.out.ok,
+	plugins/sudoers/regress/sudoers/test18.out.ok,
+	plugins/sudoers/regress/sudoers/test19.out.ok,
+	plugins/sudoers/regress/sudoers/test2.out.ok,
+	plugins/sudoers/regress/sudoers/test20.out.ok,
+	plugins/sudoers/regress/sudoers/test21.out.ok,
+	plugins/sudoers/regress/sudoers/test22.out.ok,
+	plugins/sudoers/regress/sudoers/test3.out.ok,
+	plugins/sudoers/regress/sudoers/test4.out.ok,
+	plugins/sudoers/regress/sudoers/test5.out.ok,
+	plugins/sudoers/regress/sudoers/test6.out.ok,
+	plugins/sudoers/regress/sudoers/test7.out.ok,
+	plugins/sudoers/regress/sudoers/test8.out.ok,
+	plugins/sudoers/regress/sudoers/test9.out.ok,
+	plugins/sudoers/testsudoers.c:
+	Use fmtsudoers functions in testsudoers.
+	[be27df4a5291]
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test22.in,
+	plugins/sudoers/regress/sudoers/test22.json.ok,
+	plugins/sudoers/regress/sudoers/test22.ldif.ok,
+	plugins/sudoers/regress/sudoers/test22.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test22.out.ok,
+	plugins/sudoers/regress/sudoers/test22.sudo.ok,
+	plugins/sudoers/regress/sudoers/test22.toke.ok:
+	Add test for empty runas user list.
+	[5598cf4c3329]
+
+	* plugins/sudoers/testsudoers.c:
+	Don't print an empty user list as ALL.
+	[806ee09f854d]
+
+	* plugins/sudoers/fmtsudoers.c, plugins/sudoers/parse.h:
+	In sudoers_format_userspecs make the separator optional and silence
+	a printf format warning.
+	[62c576cbec4b]
+
+	* plugins/sudoers/starttime.c:
+	Use correct defines when checking for sysctl kinfo_proc support.
+	[6017e45d14b9]
+
+	* plugins/sudoers/cvtsudoers_json.c:
+	Fix crash when converting sudoers entry with a runas list that is
+	present but empty.
+	[ff6b9ef53c6b]
+
+2018-03-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/starttime.c,
+	plugins/sudoers/sudoers.c, src/regress/ttyname/check_ttyname.c,
+	src/tgetpass.c, src/ttyname.c:
+	Less confusing sysctl checks for kinfo_proc.
+	[553f6b3f9c3b]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/match.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/sssd.c:
+	Add case_insensitive_group and case_insensitive_user sudoers
+	options, which are enabled by default.
+	[bd74d8b7fe83]
+
+2018-03-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/fmtsudoers.c:
+	Kill dead store found by clang-analyzer.
+	[af2021d3d396]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/ldap_util.c,
+	plugins/sudoers/parse.h,
+	plugins/sudoers/regress/sudoers/test2.ldif.ok,
+	plugins/sudoers/regress/sudoers/test3.ldif.ok,
+	plugins/sudoers/regress/sudoers/test6.ldif.ok,
+	plugins/sudoers/sssd.c:
+	Initial support for adding comments that will be emitted when
+	sudoers is formatted. Currently adds a comment for the source
+	sudoRole when converting from ldif -> sudoers.
+	[bf2e7f48f452]
+
+	* lib/util/lbuf.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/parse.h:
+	Special case comment lines in lbufs.
+	[10d6d229ffae]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Handle escaped commas when skipping over the cn.
+	[61aed7ff5e1c]
+
+2018-03-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/fmtsudoers.c,
+	plugins/sudoers/parse.h:
+	When formatting as sudoers, flush the lbuf after each userspec.
+	[060266dd440c]
+
+2018-03-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/sudoers/test1.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test15.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test16.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test17.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test19.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test2.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test20.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test21.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test3.ldif2sudo.ok,
+	plugins/sudoers/regress/sudoers/test6.ldif2sudo.ok:
+	Add tests for round-tripping sudoers -> ldif -> sudoers
+	[72e3e73fb612]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Add missing sudoOrder support to parse_ldif().
+	[8c5e9f22f0da]
+
+	* plugins/sudoers/ldap_util.c:
+	Add missing support for converting LOG_INPUT/LOG_OUTPUT tags and
+	expand support for NOMAIL tags.
+	[2820c8333381]
+
+	* plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/sudoers/test2.ldif.ok,
+	plugins/sudoers/regress/sudoers/test3.ldif.ok,
+	plugins/sudoers/regress/sudoers/test6.ldif.ok:
+	Don't emit an empty sudoRole for global defaults if there are none.
+	[2a69dccb7071]
+
+	* plugins/sudoers/ldap_util.c:
+	Avoid changing the order of non-negated hosts and commands. We still
+	put negated hosts/commands at the end of the list.
+	[e1aea92dd6dc]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Handle parsing boolean options that have no explicit value.
+	[b5d597faa23d]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Refactor the code that actually converts the role to sudoers format
+	into role_to_sudoers() now that it is more involved than just
+	calling sudo_ldap_role_to_priv().
+	[b876171ff96e]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	When merging two privileges, use the runas lists of the previous
+	privilege when possible. Otherwise, the generated sudoers line will
+	include a runas list for commands that is not necessary.
+	[337b49451947]
+
+2018-03-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/match.c:
+	Use a case-insensitive comparison when matching user and group names
+	in sudoers with the passwd or group database. This can be necessary
+	when users and groups are stored in AD or LDAP.
+	[bfccb8acc3e9]
+
+	* plugins/sudoers/Makefile.in:
+	Fix clean target for *.sudo regress files
+	[6f52a4aef93a]
+
+	* .hgignore:
+	ignore more binaries
+	[9adf244d0e9e]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Fix use of uninitialized variable (conf) if sudoers_debug_register()
+	happens to fail.
+	[0ef1765f14f4]
+
+2018-02-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Split conversion code out of parse_ldif() and into
+	ldif_to_sudoers().
+	[27c8b7001735]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Quiet a clang analyzer warning.
+	[21102c27dcce]
+
+	* MANIFEST, configure, configure.ac, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/ldap_common.c,
+	plugins/sudoers/ldap_util.c:
+	rename ldap_common.c -> ldap_util.c
+	[3093bdbb8a9b]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	When converting from ldif to sudoers, sudoRole objects with the same
+	user if possible. If both user and host are the same, merge into a
+	single privilege. This makes it possible to convert a sudoers entry
+	like:
+
+	 aaron shanty = NOEXEC: /usr/bin/vi, /usr/bin/more, EXEC: /bin/sh
+
+	to ldif and then back to sudoers as a single line. Currently, the
+	ldif entries to be merged must have the same or adjacent sudoOrder
+	attributes.
+	[74e5cef2e849]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	plug memory leaks
+	[a5268668c397]
+
+	* src/parse_args.c:
+	Restore line to set MODE_PRESERVE_ENV in flags when the -E command
+	line option is used. The caller doesn't check MODE_PRESERVE_ENV
+	these days but parse_args uses it to detect usage errors when -E is
+	used along with a mutually excusive option. Problem found by Yuriy
+	Vostrikov.
+	[b511e35d9be4]
+
+2018-02-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Add missing close parenthesis in "Including other files from within
+	sudoers" section. Bug #824
+	[3335cb2ce29f]
+
+2018-02-25  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap_common.c:
+	When converting from LDAP to sudoers, put negated hosts and commands
+	at the end of the list. Since LDAP doesn't guarantee attribute order
+	we need to make sure negated entries always override non- negated
+	ones.
+	[0ebff259c521]
+
+2018-02-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c:
+	We may need the hostname to resolve %h escapes in include files.
+	[3e57710762d3]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_ldif.c:
+	Setting a sudoOrder start point of 0 will disable creation of
+	sudoOrder attributes in the resulting LDIF output.
+	[4107f61b431b]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Don't need to fill in struct sudo_user since we don't do matching.
+	[cdc876d298b5]
+
+	* MANIFEST, doc/cvtsudoers.cat, doc/cvtsudoers.man.in,
+	doc/cvtsudoers.mdoc.in, pathnames.h.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers.h,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c:
+	Add support for setting default options in a config file. In
+	addition to expand_aliases, input_format and output_format, both the
+	initial sudoOrder and the increment when updating sudoOrder for
+	subsequent sudoRole objects can be specified. Command line options
+	have also been added for the start order and increment.
+	[d3121c039ddf]
+
+2018-02-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	cvtsudoers can now read LDIF
+	[99b7ed30c754]
+
+	* doc/UPGRADE:
+	Fix a typo.
+	[87f635970a5d]
+
+	* plugins/sudoers/fmtsudoers.c:
+	Deal with user_name not being set in cvtsudoers.
+	[421bb1dbff57]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_common.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_ldap.h:
+	Initial support for parsing sudoers LDIF files in cvtsudoers. This
+	makes it possible to convert from LDAP sudoers to a traditional
+	sudoers file. Semantic differences between file sudoers and LDAP
+	sudoers mean that LDIF -> sudoers is not completely equivalent.
+	[ddf513e2778f]
+
+2018-02-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/sudoers/test14.ldif.ok:
+	Fix LDIF conversion of commands with an associated digest.
+	[590ab0cb58e4]
+
+	* plugins/sudoers/ldap_common.c:
+	In array_to_member_list() use the correct type for netgroups and
+	user groups.
+	[359947d19131]
+
+	* plugins/sudoers/fmtsudoers.c:
+	Prepend digest to command if present. Fix printing of group IDs and
+	non-unix groups.
+	[5f9834b4bcbc]
+
+	* plugins/sudoers/cvtsudoers_json.c:
+	Fix gcc false positive for uninitialized variable
+	[d250b862c1ed]
+
+2018-02-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* pp:
+	Update Polypkg to the latest version from git.
+	[204ebffb502f]
+
+	* config.h.in, configure, configure.ac, src/sudo.c:
+	Use setpassent() and setgroupent() on systems that support it to
+	keep the passwd and group database open. Sudo does a lot of passwd
+	and group lookups so it can be beneficial to just leave the file
+	open.
+	[3d2d5bca9670]
+
+2018-02-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c, plugins/sudoers/fmtsudoers.c:
+	Add option to cvtsudoers to expand aliases in the output.
+	[1af56459fd7d]
+
+	* plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/regress/sudoers/test1.json.ok,
+	plugins/sudoers/regress/sudoers/test14.json.ok,
+	plugins/sudoers/regress/sudoers/test15.json.ok,
+	plugins/sudoers/regress/sudoers/test16.json.ok,
+	plugins/sudoers/regress/sudoers/test17.json.ok,
+	plugins/sudoers/regress/sudoers/test19.json.ok,
+	plugins/sudoers/regress/sudoers/test2.json.ok,
+	plugins/sudoers/regress/sudoers/test6.json.ok:
+	Fix conversion of "ALL" in the JSON output format, which was being
+	printed as an alias.
+	[3f7869688820]
+
+	* INSTALL, configure, configure.ac:
+	Clarify that --with-rundir and --with-vardir take sudo-specific
+	directory, e.g. /var/run/sudo and not just /var/run. Bug #823
+	[e1913085e544]
+
+	* src/exec_pty.c:
+	In pty_cleanup() we need to call sudo_term_restore() even if no I/O
+	plugins are present as long as /dev/tty exists. Fixes the use_pty
+	case with no I/O plugins.
+	[82fecef72998]
+
+	* include/sudo_event.h, lib/util/event.c, lib/util/util.exp.in,
+	plugins/sudoers/sudoreplay.c, src/exec_monitor.c, src/exec_nopty.c,
+	src/exec_pty.c:
+	Add sudo_ev_dispatch(), a wrapper for ev_loop() with no flags.
+	Similar the dispatch function in libevent.
+	[61e588fd50d0]
+
+	* INSTALL, configure, configure.ac, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, m4/sudo.m4:
+	Use /run in preference to /var/run if it exists. Bug #822
+	[ec2febe6f8a3]
+
+2018-02-14  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	mention common sudoers formatting changes
+	[b32825ca3e2f]
+
+2018-02-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, configure, configure.ac, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_conf.c, plugins/sudoers/sudo_ldap.h,
+	plugins/sudoers/sudo_ldap_conf.h:
+	Move LDAP configuration bits into ldap_conf.c
+	[1673e3c7855a]
+
+2018-02-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/ldap_common.c:
+	No longer need to include stddef.h
+	[a10a13dc73c7]
+
+	* plugins/sudoers/iolog.c:
+	Remove dead store, found by cppcheck.
+	[744e99ffc82e]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/ldap_common.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_ldap.h:
+	simplify iterator
+	[944fd546ec98]
+
+	* plugins/sudoers/mkdir_parents.c:
+	Silence a false positive from cppcheck.
+	[f94421968d8e]
+
+	* plugins/sudoers/tsdump.c:
+	Cast version to int when printing. Avoids a cppcheck warning.
+	[3312bec4f1e3]
+
+2018-02-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/ldap_common.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_ldap.h:
+	Use an iterator instead of fragile pointer arithmetic to iterate
+	over value arrays in sudo_ldap_role_to_priv().
+	[61752c5f3427]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/fmtsudoers.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c:
+	Move sudoers formatting code into fmtsudoers.
+	[ff25291c99f4]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/parse.c:
+	Clean up some XXX in parse.c
+	[19854e7d8ac7]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sssd.c:
+	Rename sudo_file_append_default() -> sudo_lbuf_append_default() and
+	use it for ldap and sssd too.
+	[dae22810f2dd]
+
+	* MANIFEST, configure, configure.ac, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/ldap.c,
+	plugins/sudoers/ldap_common.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_ldap.h:
+	Move common bits of ldap to sudoers conversion into ldap_common.c
+	and use it in sssd.c.
+	[5cca03f64b77]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h:
+	Convert ldap results into a sudoers userspec so we can use the "sudo
+	-l" output functions in parse.c.
+	[1422e10dc274]
+
+2018-02-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* sudo.pp:
+	Don't mark sudoers.dist volatile, it only gets used on systems that
+	don't have the concept of volatile files.
+	[c47fd17e62e3]
+
+2018-02-05  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.h:
+	Refactor member freeing code into free_member(). Refactor userspec
+	freeing code into free_userspec().
+	[ccc95e8b9f69]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Fix compilation with glibc where stdout is not constant.
+	[97a0302c29c8]
+
+2018-02-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap.c:
+	For "sudo -l", if a word includes spaces, print it in double quotes.
+	Also escape spaces in the command path. This matches the sudoers
+	quoting rules.
+	[04ace6decf3a]
+
+2018-02-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/ldap.c:
+	Display sudoNotBefore and sudoNotAfter in "sudo -l"
+	[ef7de4c8aa9e]
+
+	* plugins/sudoers/parse.c:
+	For "sudo -l", if a word includes spaces, print it in double quotes.
+	Also escape spaces in the command path. This matches the sudoers
+	quoting rules.
+	[fa12a254657c]
+
+	* plugins/sudoers/cvtsudoers.c:
+	Add back printing of negation operator ('!') when printing a word
+	with spaces in it.
+	[c69706a91817]
+
+	* plugins/sudoers/Makefile.in:
+	Use visudo to validate "cvtsudoers -f sudoers" output.
+	[06bae7204926]
+
+	* plugins/sudoers/regress/sudoers/test21.in,
+	plugins/sudoers/regress/sudoers/test21.json.ok,
+	plugins/sudoers/regress/sudoers/test21.ldif.ok,
+	plugins/sudoers/regress/sudoers/test21.out.ok,
+	plugins/sudoers/regress/sudoers/test21.toke.ok:
+	Remove syslog_goodpri and syslog_badpri without a value that causes
+	visudo to report an error.
+	[c1f696e49f49]
+
+	* plugins/sudoers/cvtsudoers.c:
+	When outputting sudoers, if a word includes spaces, print it in
+	double quotes. Also escape spaces in the command path.
+	[d040c1a21277]
+
+2018-02-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/alias.c, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/parse.h, plugins/sudoers/visudo.c:
+	Add sudoers output format to cvtsudoers. In the future this may be
+	used with filters to emit a partial sudoers file instead of a full
+	one.
+	[533d2c389213]
+
+	* plugins/sudoers/parse.c:
+	When printing a member name, quote sudoers special characters unless
+	it is a UID/GID, in which case we print the '#' unquoted.
+	[e4e8154c4fe9]
+
+	* plugins/sudoers/parse.c, plugins/sudoers/parse.h:
+	Move SUDOERS_QUOTED define to parse.h
+	[a813ec4acb5f]
+
+2018-01-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/timestamp.c:
+	Remove extraneous break statement and fix some whitespace.
+	[39df566c33e3]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	The max timeout for kernel time stamps is 60 minutes, not 3600
+	minutes.
+	[95be88c4f106]
+
+2018-01-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/testsudoers.c:
+	Check the return value of sudoers_debug_register(). Coverity CID
+	182574
+	[fb5449acdafd]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Fix memory leak, su->count is now 0 when it is unused, not 1.
+	Covertity CID 182573
+	[77019ded8f84]
+
+	* plugins/sudoers/cvtsudoers_ldif.c:
+	Quiet a clang analyzer false positive.
+	[ef04f7069df4]
+
+	* plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/sudoers/test2.ldif.ok,
+	plugins/sudoers/regress/sudoers/test6.ldif.ok:
+	Quote special characters when creating the cn as per RFC2253
+	[e49ff28c1fd7]
+
+	* NEWS, configure, configure.ac, doc/UPGRADE:
+	Sudo 1.8.23
+	[e364ed057d1d]
+
+	* doc/LICENSE:
+	Remove the C-style comment charactes from the getopt_long.c and
+	inet_pton.c license text as it was inconsistent with the rest of the
+	file and messed up the html formatting.
+	[a26679d2d0a7]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/sudoers2ldif,
+	sudo.pp:
+	Remove sudoers2ldif, it has been replaced by cvtsudoers.
+	[7563cc3768c2]
+
+2018-01-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_ldif.c:
+	Add -b option to specify the base dn.
+	[7cd4c46c33bf]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in:
+	Document limitations of LDIF conversion.
+	[e8c84362f084]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c:
+	Switch the default output format to LDIF
+	[a677c7b72a90]
+
+	* plugins/sudoers/visudo.c:
+	Execute cvtsudoers if the user runs "visudo -x" but also emit a
+	warning.
+	[53ec45a847d2]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/stubs.c,
+	plugins/sudoers/visudo.c:
+	Revert 04ec05108b2b, change the default input source back to stdin.
+	[df8d94f1bab4]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/sudoers/test1.ldif.ok,
+	plugins/sudoers/regress/sudoers/test10.ldif.ok,
+	plugins/sudoers/regress/sudoers/test11.ldif.ok,
+	plugins/sudoers/regress/sudoers/test12.ldif.ok,
+	plugins/sudoers/regress/sudoers/test13.ldif.ok,
+	plugins/sudoers/regress/sudoers/test14.ldif.ok,
+	plugins/sudoers/regress/sudoers/test15.ldif.ok,
+	plugins/sudoers/regress/sudoers/test16.ldif.ok,
+	plugins/sudoers/regress/sudoers/test17.ldif.ok,
+	plugins/sudoers/regress/sudoers/test18.ldif.ok,
+	plugins/sudoers/regress/sudoers/test19.ldif.ok,
+	plugins/sudoers/regress/sudoers/test2.ldif.ok,
+	plugins/sudoers/regress/sudoers/test20.ldif.ok,
+	plugins/sudoers/regress/sudoers/test21.ldif.ok,
+	plugins/sudoers/regress/sudoers/test3.ldif.ok,
+	plugins/sudoers/regress/sudoers/test4.ldif.ok,
+	plugins/sudoers/regress/sudoers/test5.ldif.ok,
+	plugins/sudoers/regress/sudoers/test6.ldif.ok,
+	plugins/sudoers/regress/sudoers/test7.ldif.ok,
+	plugins/sudoers/regress/sudoers/test8.ldif.ok,
+	plugins/sudoers/regress/sudoers/test9.ldif.ok:
+	Add LDIF conversion to sudoers tests
+	[997b79da8874]
+
+	* plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/cvtsudoers_ldif.c,
+	plugins/sudoers/regress/sudoers/test19.json.ok:
+	Add notbefore and notafter support to the backends.
+	[be50db300eda]
+
+2018-01-27  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* README.LDAP:
+	cvtsudoers instead of sudoers2ldif
+	[3909ea2c29c1]
+
+	* MANIFEST, doc/cvtsudoers.cat, doc/cvtsudoers.man.in,
+	doc/cvtsudoers.mdoc.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_ldif.c:
+	Add ldif backend to cvtsudoers, to replace sudoers2ldif
+	[f0e039c63488]
+
+	* plugins/sudoers/Makefile.in:
+	fix make check
+	[2cbedce72e3a]
+
+2018-01-26  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c:
+	Parse sudoers in the front end, not the back end.
+	[30d4e40ed69a]
+
+	* doc/Makefile.in:
+	install the cvtsudoers manual
+	[243d319fed1c]
+
+	* doc/cvtsudoers.cat, doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/stubs.c,
+	plugins/sudoers/visudo.c:
+	Use the built-in sudoers file location as the default sudoers file
+	for cvtsudoers and move parse_sudoers_options() to stubs.c since it
+	is shared between visudo.c and cvtsudoers.c.
+	[04ec05108b2b]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/cvtsudoers.c,
+	plugins/sudoers/stubs.c, plugins/sudoers/visudo.c:
+	Move common stub functions required by the parser out of visudo.c
+	and cvtsudoers.c and into stubs.c.
+	[a324cbde55a3]
+
+	* plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c:
+	Rename export_sudoers() to convert_sudoers_json() and move the check
+	for the same input and output file to the front-end.
+	[7c83c21ea479]
+
+	* sudo.pp:
+	add cvtsudoers
+	[e8ba851cafb4]
+
+	* MANIFEST, doc/Makefile.in, doc/cvtsudoers.cat,
+	doc/cvtsudoers.man.in, doc/cvtsudoers.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/cvtsudoers.c, plugins/sudoers/cvtsudoers_json.c,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c:
+	Move sudoers JSON conversion to cvtsudoers which will eventually
+	output to other formats too.
+	[e64a50657a88]
+
+	* plugins/sudoers/defaults.c:
+	Convert from time in minutes to timespec directly instead of
+	converting to double via strtod(). This makes it easier to catch
+	overflow.
+	[0d6ab7c21a15]
+
+2018-01-24  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	document that kernel tty timestamps don't support negative timeouts
+	[4ff726cf2010]
+
+2018-01-23  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/timestamp.c:
+	Fall back to ppid time stamps if timestamp_type == kernel and no tty
+	is present. This is consistent with timestamp_type == tty.
+	[26c527166a0c]
+
+	* plugins/sudoers/timestamp.c:
+	Do not call the TIOCSETVERAUTH ioctl with a negative number of
+	seconds. Also cap the max number of seconds at 3600 to avoid getting
+	EINVAL from TIOCSETVERAUTH.
+	[371744874743]
+
+2018-01-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/defaults.c:
+	Better conversion from double to nanoseconds.
+	[2f54790801c8]
+
+	* plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/mkdefaults,
+	plugins/sudoers/timestamp.c:
+	Store passwd_timeout and timestamp_timeout as a struct timespec
+	instead of as a float. Remove timeout argument to auth_getpass() as
+	it was never used.
+	[c4a3c60d0284]
+
+2018-01-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/mkdefaults:
+	Don't rely on perl being installed in /usr/local/bin
+	[e3274f56df43]
+
+2018-01-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* config.h.in, configure, configure.ac, lib/util/gettime.c,
+	lib/util/mktemp.c, lib/util/nanosleep.c, lib/util/utimens.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/check.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/net_ifs.c, src/sesh.c, src/sudo.c,
+	src/sudo_edit.c, src/utmp.c:
+	Remove use of AC_HEADER_TIME, only obsolete platforms actually need
+	this. Also stop removing sys/time.h unless the source file uses
+	struct timeval.
+	[a744b8a07685]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Remove duplicate options %type
+	[3ea3c3d477bf]
+
+2018-01-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/auth/API, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/check.c,
+	plugins/sudoers/sudoers.h:
+	Add an approval function to the sudo auth API which is run after the
+	user's password has been verified. The approval function is run even
+	if no password is required. This is currently only used for PAM (use
+	pam_acct_mgmt) and BSD auth (auth_approval).
+	[cab448ac8633]
+
+2018-01-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/tsdump.c:
+	treat uid as unsigned in error message
+	[2672d4ca3479]
+
+	* MANIFEST, plugins/sudoers/po/fur.mo:
+	Add missing plugins/sudoers/po/fur.mo file to repo.
+	[cfa503d7fcd4]
+
+	* NEWS:
+	Mention new sudoers_timestamp manual.
+	[f96ad00c4ba4]
+
+2018-01-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* .hgignore:
+	ignore tsdump
+	[39306d37c846]
+
+	* plugins/sudoers/tsdump.c:
+	Convert from mono time to real time before displaying time stamps.
+	[12f9e1f5e8e5]
+
+2018-01-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/solaris_audit.c:
+	Use PATH_MAX, not MAXPATHLEN.
+	[d3c7466aad1d]
+
+	* MANIFEST, config.h.in, configure, configure.ac, include/sudo_util.h,
+	lib/util/Makefile.in, lib/util/ttyname_dev.c, lib/util/util.exp.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/check.h,
+	plugins/sudoers/tsdump.c, src/ttyname.c:
+	Add tsdump, a simple utility to dump a timestamp file. To build, run
+	"make tsdump" in the plugins/sudoers directory (it is not built by
+	default). In order to map the tty device number to a name,
+	sudo_ttyname_dev() has been moved into libsudo_util.
+	[b79ae30fe6a4]
+
+2018-01-04  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po, po/uk.mo,
+	po/uk.po:
+	sync with translationproject.org
+	[71140a551c60]
+
+	* doc/LICENSE:
+	Welcome to 2018
+	[3ddea360d414]
+
+2017-12-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/fur.po, plugins/sudoers/po/nb.mo,
+	plugins/sudoers/po/nb.po, plugins/sudoers/po/zh_CN.mo,
+	plugins/sudoers/po/zh_CN.po:
+	sync with translationproject.org
+	[fbd54c7f59f1]
+
+2017-12-22  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/logging.c:
+	Silence a clang analyzer false positive.
+	[bfcdfe2c1376]
+
+	* doc/Makefile.in:
+	Remove extra $(srcdir)/sudoreplay.man.in target added by mistake.
+	[7e83806cc17e]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, po/ja.mo,
+	po/ja.po:
+	sync with translationproject.org
+	[27cf5abeeb1a]
+
+	* plugins/sudoers/timestamp.c:
+	Use a tty lock even for kernel time stamps so we can avoid
+	simultaneous password prompts.
+	[90a55098176b]
+
+	* NEWS:
+	visudo changes
+	[06c99aab6f7a]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/editor.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c:
+	Also honor SUDO_EDITOR in visudo. Previously is was only used by
+	sudoedit.
+	[9bccc7171a53]
+
+2017-12-21  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoers.c:
+	Stop looking for an editor as soon as we find one. A similar fix was
+	made to visudo some time ago.
+	[c6c5d968612a]
+
+	* doc/sudoers_timestamp.cat, doc/sudoers_timestamp.man.in,
+	doc/sudoers_timestamp.mdoc.in:
+	The session ID was added in 1.8.6p7 to prevent a user in another
+	session from re-using the time stamp file. Other minor cleanups.
+	[f733f7ea97a7]
+
+	* plugins/sudoers/check.h:
+	"time stamp" not "timestamp"
+	[af0f2d8b6d52]
+
+2017-12-20  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/timestamp.c:
+	Add "kernel" as a possible value of timestamp_type. Currently only
+	supported on OpenBSD.
+	[ca1a2a03e37d]
+
+	* MANIFEST, doc/Makefile.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, doc/sudoers_timestamp.cat,
+	doc/sudoers_timestamp.man.in, doc/sudoers_timestamp.mdoc.in,
+	plugins/sudoers/check.h:
+	Document the sudoers time stamp file format.
+	[d3470da8fde9]
+
+2017-12-19  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/starttime/check_starttime.c:
+	Verify start time of the current process, allowing for some clock
+	drift. For Linux, process start time is relative to boot time, not
+	wallclock time.
+	[4928645eaa1c]
+
+2017-12-18  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* NEWS:
+	sync
+	[aeffb7f82e10]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[8be51858eec1]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/starttime/check_starttime.c:
+	Trivial test for process start time. We don't try to check the
+	resulting timespec as it differs by platform. On most it is
+	wallclock time, on others it is relative to boot time (Linux).
+	[e74cf3bd4c87]
+
+	* lib/util/Makefile.in:
+	regen
+	[6de26735d666]
+
+2017-12-17  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/starttime.c:
+	Support start time on macOS and 4.4BSD
+	[81f2eebc7edb]
+
+2017-12-16  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/regress/env_match/check_env_pattern.c:
+	Include sys/types.h for mode_t used in sudoers.h.
+	[bdff1606f111]
+
+	* plugins/sudoers/starttime.c:
+	Fix compilation error on FreeBSD
+	[2c4962a7812c]
+
+	* plugins/sudoers/starttime.c:
+	Fix debug_decl(), it should be SUDOERS_DEBUG_UTIL Add debugging for
+	the successful case For Linux, don't NUL out *ep before parsing with
+	strtoull().
+	* * * Add missing debug info for the System V /proc version.
+	[2394c6d9375d]
+
+	* MANIFEST, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/check.h,
+	plugins/sudoers/starttime.c, plugins/sudoers/timestamp.c:
+	In the timestamp record, include the start time of the terminal
+	session leader for tty-based timestamps or the start time of the
+	parent process for ppid-based timestamps. Idea from Duncan
+	Overbruck.
+	[f0964b4cf4ac]
+
+2017-12-15  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/timestamp.c:
+	If the lock record doesn't match the expected record size we need to
+	seek to the end of the record as we otherwise may have gone too far
+	(or not far enough). Fixes interop problems when the time stamp
+	record changes size.
+	[e8e4c3815db5]
+
+2017-12-12  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	No need for a loop around the recv() now that we don't have to worry
+	about EINTR. CID 180697
+	[7cb966d69bc6]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Try to be clearer about sudo's exit value when the -l option is
+	used.
+	[efbddaa576a7]
+
+	* NEWS:
+	sync
+	[99fc4b347250]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap.c,
+	plugins/sudoers/sssd.c:
+	An empty RunAsUser means run as the invoking user, similar to how
+	the sudoers files works.
+	[576172386594]
+
+	* doc/sudoers.cat, doc/sudoers.man.in:
+	regen
+	[9b6d0064f410]
+
+2017-12-11  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/logging.c:
+	Add authfail_message sudoers option to allow the user to override
+	the default message of %d incorrect password attempt(s).
+	[f11e9d64a6da]
+
+	* plugins/sudoers/policy.c, src/parse_args.c:
+	Allow the plugin to determine whether or not an empty timeout is
+	allowed. For sudoers, an error will be returned for an empty
+	timeout.
+	[26511c049fb1]
+
+	* plugins/sudoers/timeout.c:
+	Return an error for an empty timeout string. Just use strtol() for
+	syntax checking instead of scanning with strspn().
+	[1fa1b712fbcc]
+
+	* src/parse_args.c, src/sudo_edit.c:
+	Change some _() into U_() since they are used for warn/fatal. We
+	always want to issue warnings in the user's locale.
+	[684331aee66e]
+
+	* Makefile.in:
+	update my email address
+	[b4ec26be6203]
+
+2017-12-10  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* log2cl.pl:
+	Don't print mercurial branch info for merges.
+	[489881774e52]
+
+	* log2cl.pl:
+	Use log size instead of using a separator between the log entry and
+	the file names.
+	[620c231f789b]
+
+	* src/parse_args.c:
+	Print usage and return an error when an empty argument is given for
+	all command line arguments other than -p and -E. Bug #817
+	[143be1bc8316]
+
+	* plugins/sudoers/policy.c:
+	Better input validation of settings passed by the sudo front-end.
+	Instead of ignoring an empty setting, throw an error.
+	[93cc4f4761f3]
+
+	* log2cl.pl:
+	Treat a blank line in a commit message as a line break. There
+	doesn't appear to be a way to make perl's format use a blank field
+	but at least the line break happens now.
+	[fbc3ff819341]
+
+2017-12-09  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* MANIFEST, Makefile.in, log2cl.pl:
+	Add script to generate ChangeLog from git log output.
+	[e8bfbd1ae6ef]
+
+2017-12-08  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h:
+	Don't include syslog.h from logging.h, just include it in the two .c
+	files it is actually needed.
+	[9ffc5ca9eb49]
+
+2017-12-06  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Document that in check mode, visudo does not check the owner/mode on
+	files specified with the -f flag.
+	[f5d86019e4c7]
+
+2017-12-03  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* Makefile.in, configure.ac, doc/HISTORY, doc/LICENSE,
+	doc/Makefile.in, doc/fixman.sh, doc/fixmdoc.sh,
+	doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, doc/sudo.man.in,
+	doc/sudo.mdoc.in, doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/sudoreplay.man.in,
+	doc/sudoreplay.mdoc.in, doc/visudo.man.in, doc/visudo.mdoc.in,
+	examples/Makefile.in, include/Makefile.in,
+	include/compat/charclass.h, include/compat/endian.h,
+	include/compat/fnmatch.h, include/compat/nss_dbdefs.h,
+	include/compat/sha2.h, include/sudo_compat.h, include/sudo_conf.h,
+	include/sudo_debug.h, include/sudo_dso.h, include/sudo_event.h,
+	include/sudo_fatal.h, include/sudo_gettext.h, include/sudo_lbuf.h,
+	include/sudo_plugin.h, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/aix.c, lib/util/closefrom.c, lib/util/event.c,
+	lib/util/event_poll.c, lib/util/event_select.c, lib/util/fatal.c,
+	lib/util/getgrouplist.c, lib/util/gethostname.c, lib/util/getline.c,
+	lib/util/getopt_long.c, lib/util/gettime.c, lib/util/gidlist.c,
+	lib/util/glob.c, lib/util/isblank.c, lib/util/key_val.c,
+	lib/util/lbuf.c, lib/util/locking.c, lib/util/memrchr.c,
+	lib/util/memset_s.c, lib/util/mksiglist.c, lib/util/mksigname.c,
+	lib/util/mktemp.c, lib/util/nanosleep.c, lib/util/parseln.c,
+	lib/util/pipe2.c, lib/util/progname.c, lib/util/pw_dup.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c,
+	lib/util/regress/vsyslog/vsyslog_test.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/sha2.c, lib/util/sig2str.c,
+	lib/util/snprintf.c, lib/util/strlcat.c, lib/util/strlcpy.c,
+	lib/util/strndup.c, lib/util/strnlen.c, lib/util/strsignal.c,
+	lib/util/strsplit.c, lib/util/strtobool.c, lib/util/strtoid.c,
+	lib/util/strtomode.c, lib/util/strtonum.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, lib/util/sudo_dso.c, lib/util/term.c,
+	lib/util/ttysize.c, lib/util/utimens.c, lib/util/vsyslog.c,
+	lib/zlib/Makefile.in, m4/sudo.m4, mkdep.pl, mkpkg, pathnames.h.in,
+	plugins/group_file/Makefile.in, plugins/group_file/getgrent.c,
+	plugins/group_file/group_file.c, plugins/group_file/plugin_test.c,
+	plugins/sample/Makefile.in, plugins/sample/sample_plugin.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/base64.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/bsm_audit.h, plugins/sudoers/check.c,
+	plugins/sudoers/check.h, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/digestname.c,
+	plugins/sudoers/editor.c, plugins/sudoers/env.c,
+	plugins/sudoers/env_pattern.c, plugins/sudoers/filedigest.c,
+	plugins/sudoers/filedigest_gcrypt.c,
+	plugins/sudoers/filedigest_openssl.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/gc.c, plugins/sudoers/gentime.c,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/gmtoff.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/hexchar.c, plugins/sudoers/ins_2001.h,
+	plugins/sudoers/ins_classic.h, plugins/sudoers/ins_csops.h,
+	plugins/sudoers/ins_goons.h, plugins/sudoers/insults.h,
+	plugins/sudoers/interfaces.c, plugins/sudoers/interfaces.h,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog.h,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/linux_audit.h,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/mkdir_parents.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/po/sudoers.pot,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil.h,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/rcstr.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudo_printf.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers2ldif,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoers_debug.h,
+	plugins/sudoers/sudoers_version.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timeout.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/timestr.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c,
+	plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.c, po/sudo.pot, src/Makefile.in,
+	src/conversation.c, src/env_hooks.c, src/exec.c, src/exec_common.c,
+	src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c, src/get_pty.c,
+	src/hooks.c, src/load_plugins.c, src/net_ifs.c, src/openbsd.c,
+	src/parse_args.c, src/preload.c, src/preserve_fds.c,
+	src/regress/noexec/check_noexec.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/sesh.c,
+	src/signal.c, src/solaris.c, src/sudo.c, src/sudo.h,
+	src/sudo_edit.c, src/sudo_exec.h, src/sudo_noexec.c,
+	src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tcsetpgrp_nobg.c,
+	src/tgetpass.c, src/ttyname.c, src/utmp.c, sudo.pp:
+	update my email to Todd.Miller@sudo.ws
+	[96110003e904]
+
+2017-12-02  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sudoreplay.c:
+	Add missing carriage return before prompt when replay is done.
+	[cf4b8bfcb3dd]
+
+	* src/exec_pty.c:
+	Track window size changes that happen while sudo is suspended
+	[cae06f75bde9]
+
+2017-12-01  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[26ae754b8416]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo_plugin.cat,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoreplay.cat,
+	doc/visudo.cat:
+	regen for sudo 1.8.22
+	[596d82da0158]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.22
+	[6b32c2f5d020]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Background processes started by the command will no longer receive
+	SIGHUP.
+	[47bcc3ae4362]
+
+	* src/exec_monitor.c:
+	When the command completes, make the monitor the foreground process
+	group before informing the main sudo process of the command's exit
+	status. This will prevent processes started by the command (which
+	runs in a different process group) from receiving SIGHUP since the
+	kernel sends SIGHUP to the foreground process group associated with
+	the terminal session. The monitor has a SIGHUP handler installed so
+	the signal is effectively ignored.
+	[9e163efe4afb]
+
+	* src/sudo.c:
+	Add debug printfs around group list retrieval.
+	[5f307b00153b]
+
+2017-11-30  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_pty.c:
+	Move call to sudo_ev_loopcontinue() into schedule_signal() itself.
+	We always want to prioritize signal forwarding.
+	[4b25dc24038b]
+
+	* src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c:
+	Don't loop over read/write, recv/send or tcgetpgrp/tcsetpgrp trying
+	to handle EINTR. We now use SA_RESTART with signals so this is not
+	needed and is potentially dangerous if it is possible to receive
+	SIGTTIN or SIGTTOU (which it currently is not).
+	[ba6885b57891]
+
+2017-11-29  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* src/exec_monitor.c, src/signal.c:
+	Sprinkle some extra debugging printfs
+	[bf33574bc603]
+
+	* src/exec_pty.c:
+	We don't need to be the foreground process to be able to write to
+	the terminal in most cases. If the background process tries to
+	modify the terminal flags it will receive SIGTTOU which is relayed
+	to the sudo front-end. This currently mishandles terminals with the
+	TOSTOP local flag set.
+	[3fc25570d482]
+
+	* src/exec_pty.c:
+	Handle receipt of SIGTTIN/SIGTTOU when reading/writing from/to the
+	tty. We can't use a signal event for these since that would restart
+	the system call after the signal was handled and the callback would
+	not get a chance to run. Fixes running a command in the background
+	that write to the tty when the TOSTOP terminal flag is set.
+	[5ac68f05249a]
+
+2017-11-28  Todd C. Miller  <Todd.Miller@sudo.ws>
+
+	* plugins/sudoers/sssd.c:
+	Avoid a double free when ipa_hostname is set in sssd.conf and it is
+	an unqualified host name. From Daniel Kopecek.
+
+	Also move the "unable to allocate memory" warning into
+	get_ipa_hostname() itself to make it easier to see where the
+	allocation failed in the debug log.
+	[14dacdea3319]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil.h,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	When running a command as the invoking user we cannot use the gid
+	list from the front-end since it may not correspond to the user's
+	aux group vector as defined by the group database.
+	[b456101fe509]
+
+	* lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/glob/globtest.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/parser/check_hexchar.c:
+	Add missing initprogname() calls.
+	[ad4f8d236d89]
+
+2017-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Better describe things when a command is run in a pty.
+	[0f34fc342ab5]
+
+2017-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Plug some memory leaks on error, some found by the clang static
+	analyzer.
+	[62844cc145b6]
+
+2017-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c:
+	Avoid calling cmnd_matches() in list/verify mode if we already have
+	a match.
+	[5bddfc911065]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sssd.c:
+	In list (-l) or verify (-v) mode, if we have a match but
+	authentication is required, clear FLAG_NOPASSWD so that when
+	listpw/verifypw is set to "all" and there are multiple sudoers
+	sources a password will be required unless none of the entries in
+	all sources require authentication. From Radovan Sroka of RedHat
+	[edac7222600a]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	When checking the results for "sudo -l" and "sudo -v", keep checking
+	even after we get a match since the value of doauth may depend on
+	evaluating all the results. From Radovan Sroka of RedHat.
+	[ae0704445bd4]
+
+2017-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	If passwd_tries is less than 1, check_user() will always return
+	false (since the user didn't authenticate). The normal reason for
+	this is an authentication error but in this case no authentication
+	was tries so no warning message has been displayed to the user. If
+	the user wasn't given a chance to authenticate, set inform_user to
+	true when calling log_denial() from sudoers_policy_main().
+
+	An alternate approach would be for check_user() to return true in
+	this case but seems more confusing.
+	[c8be95b46e9d]
+
+2017-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Document bash shell alias issue with "sudo -i".
+	[8affa5376277]
+
+2017-10-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/policy.c:
+	Return an error if the sudo front end doesn't set the user name,
+	user ID, group ID or host name. Bug #807
+	[03e281d93fff]
+
+	* lib/util/gethostname.c:
+	Treat an empty hostname as a failure and return NULL.
+	[fafb3a3083cb]
+
+2017-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers2ldif:
+	Add support for #include and #includedir from Natale Vinto.
+	[926deea0d506]
+
+2017-10-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Minor corrections from Tae Wong
+	[dbc5ee98ffa6]
+
+2017-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Add a warning that for "sudo -i command" and "sudo -s command" the
+	shell is not run in interactive mode which may change its behavior.
+	[76c19db05a1e]
+
+2017-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_compat.h, src/exec_pty.c:
+	Fix stair-stepped output when the output of a sudo command is piped
+	to another command and use_pty is set.
+	[e91e3f12d2d4]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	env_keep and env_check are also taken into account with "sudo -i".
+	Bug #806
+	[5f5568c6fdd9]
+
+2017-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, config.h.in, configure, configure.ac,
+	plugins/sudoers/ins_classic.h:
+	Make PC insults the default and add new configure option, enable-
+	offensive-insults, to enable the offensive insults.
+	[eb264d342601]
+
+2017-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Add missing translators from recent updates and one name change.
+	[20828c25ad92]
+
+2017-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/fur.po, plugins/sudoers/po/hr.mo,
+	plugins/sudoers/po/hr.po, plugins/sudoers/po/sv.mo,
+	plugins/sudoers/po/sv.po, po/hr.mo, po/hr.po, po/sv.mo, po/sv.po:
+	sync with translationproject.org
+	* * * sync with translationproject.org
+	[24bb066fa19f]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	More accurately describe the use_pty option now that its behavior
+	has changed with respect to interposition with a pipe. Also describe
+	some caveats with log_input.
+	[a87056499931]
+
+	* doc/UPGRADE:
+	Document changes in use_pty behavior when no terminal is present.
+	[a4b978693178]
+
+	* src/exec_pty.c:
+	Set ec->cmnd_pid to the correct value when receiving the command's
+	process ID from the monitor.
+	[a624309ba848]
+
+	* src/exec.c, src/exec_nopty.c, src/exec_pty.c, src/sudo_exec.h:
+	If /dev/tty is not available and no I/O logging plugins are
+	configured, fall back on exec_nopty() even if the policy plugin
+	requested a pty. We never allocate a pty when sudo is not run from a
+	terminal anyway.
+	[c9b9c6c4e0ad]
+
+	* src/exec_pty.c:
+	Do not set utmp_user if we did not actually allocate a pty.
+	[aa8e0fdea32b]
+
+2017-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	sudo 1.8.21p2
+	[94d18888e7c4]
+
+	* src/exec.c:
+	sudo_terminated() should not return true when SIGCHLD is pending.
+	Bug #801
+	[57f636b6489f]
+
+	* src/tgetpass.c:
+	Set SIGCHLD handler to SIG_DFL before forking the askpass command
+	and restore after. Otherwise, SIGCHLD will end up in the list of
+	pending signals and sudo_execute() will not execute the command.
+	[c171eeabdc72]
+
+	* lib/util/event.c:
+	The read and write sides of signal_pipe[] were swapped, resulting in
+	EBADF reading from and writing to the signal pipe on Linux and
+	probably others. On systems with bidirectional pipes this was not an
+	issue.
+	[7668f93e6544]
+
+2017-09-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Fix a logic error in 96651906de42 which prevented sudo from using
+	the PAM-supplied prompt. Bug #799
+	[6ee5cc13af69]
+
+2017-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.21p1
+	[7e6bf56cb06c]
+
+	* mkpkg:
+	The Fedora sudo package uses /etc/ldap.conf not /etc/sudo-ldap.conf.
+	[7b4e6f50e138]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	The fix for matching when no sudoRunAsUser is present in a sudoRole
+	was incomplete. If no -g option was specified on the command line
+	but sudoRunAsGroup is present in a sudoRole, we need to treat the
+	group match as failed instead of missing.
+	[3aaeeebd924c]
+
+	* plugins/sudoers/check.c, plugins/sudoers/defaults.c:
+	Sprinkle a few more debugging printfs.
+	[f7a40f9985cf]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix replaying sessions that contain input logs. When the inter-
+	record timeout expires we need to read the next record if there is
+	nothing to output.
+	[443b329ddc60]
+
+	* doc/visudo.cat:
+	regen
+	[7ace4ac32116]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Fix typo (Auguest vs. August). From David Pocock.
+	[98a792ff1c90]
+
+2017-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudo_nss.c:
+	Go back to returning true from display_privs() on non-error. This
+	results in "sudo -U otheruser -l" exiting with a status of 0 even
+	when otheruser is not allowed to run commands. This is appropriate
+	since the "sudo -l" command was successful. This does not change the
+	exit value when otheruser runs "sudo -l" themselves, the exit status
+	will be 1 since that user is not allowed to run commands. Requested
+	by Radovan Sroka.
+	[055b78015fcb]
+
+	* plugins/sudoers/ldap.c:
+	Fix the pass2 ldap query string when no search filter is defined.
+	Due to the addition of "(sudoUser=*)" to the query we always need
+	the AND operator, even if no search filter is present.
+	[631243487d27]
+
+2017-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_nopty.c:
+	Don't forward SIGINFO to the child when it is send by the kernel
+	(not another user process). This is consistent with the handling of
+	other keyboard-generated signals such as SIGINT, SIGQUIT and
+	SIGTSTP. Bug #796
+	[29603b0a4315]
+
+2017-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Fix path to LICENSE and NEWS files that get used in the installer.
+	Previously, the installed versions were used instead of the ones in
+	the destdir.
+	[689a5806f2de]
+
+2017-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po, po/fi.mo,
+	po/fi.po:
+	sync with translationproject.org
+	[32a0f3bbba31]
+
+2017-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* po/es.mo, po/es.po:
+	sync with translationproject.org
+	[bfa5659d66f2]
+
+2017-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po, po/it.mo,
+	po/it.po:
+	sync with translationproject.org
+	[05cd6ff68a4b]
+
+2017-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Preserving environment variables on the command line was bug #279
+	[46f2c7931a84]
+
+2017-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, po/fur.mo, po/fur.po:
+	Add Friulian translation for sudo from Fabio Tomat via
+	translationproject.org
+	[77fdb76e83c8]
+
+2017-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/cs.mo,
+	po/cs.po, po/fr.mo, po/fr.po, po/ko.mo, po/ko.po, po/nb.mo,
+	po/nb.po, po/pl.mo, po/pl.po, po/pt_BR.mo, po/pt_BR.po, po/sr.mo,
+	po/sr.po, po/sv.mo, po/sv.po, po/vi.mo, po/vi.po, po/zh_CN.mo,
+	po/zh_CN.po:
+	sync with translationproject.org
+	[0f18e2f30ff5]
+
+2017-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	In the Runas example that uses "boulder" make it clear that
+	"boulder" is a host name.
+	[6bca59aa5579]
+
+2017-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[9bb78048656f]
+
+	* NEWS, doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	src/parse_args.c:
+	Allow the user to specify a list of environment variables to
+	preserve. This adds an option paramter to the --preserve-env option,
+	a comma-separated list of variable names.
+	[a6bc511a2e81]
+
+2017-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, NEWS, config.h.in, configure, configure.ac,
+	doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/timestamp.c:
+	Replace tty_tickets option with timestamp_type which can be global,
+	ppid or tty. Defaults to tty (no change in behavior). Some users
+	want the ppid behavior.
+	[426161a2e06f]
+
+	* lib/util/Makefile.in, plugins/sudoers/Makefile.in:
+	regen
+	[b396e70a4a8b]
+
+	* plugins/sudoers/sudoers.c:
+	Don't send email about an unresolvable host name if fqdn is enabled
+	and the user specified the run host via the -h flag.
+	[59d7a8743943]
+
+2017-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	fix playback of stdout/stderr without embedded carriage returns
+	[f1a5b47be2db]
+
+2017-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Avoid unused variable warning when sasl is not used.
+	[3010fd3c5a7f]
+
+	* INSTALL, configure, configure.ac:
+	Add support for --enable-sasl and --disable-sasl to make it possible
+	to enable/disable support for LDAP with SASL authentication. Sudo
+	compiles in support for SASL authentiation by default if the
+	ldap_sasl_interactive_bind_s() function is detected. Bug #788
+	[cf94d407d576]
+
+	* NEWS:
+	List the correct pattern ("*=()*") in the env_delete description.
+	Use pseudo-tty instead of pseudo terminal for consistency.
+	[f2df0baea2f0]
+
+2017-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/closefrom.c:
+	Include pathnames.h for /dev/fd on FreeBSD and Mac OS X.
+	[b190dc607277]
+
+	* NEWS:
+	update for 1.8.21
+	[a3a38f6cba66]
+
+	* src/exec_pty.c:
+	No need to call sudo_ev_del() before sudo_ev_free(); sudo_ev_free()
+	will delete the event from its base before freeing it.
+	[ebf3dedcba5c]
+
+	* src/exec_pty.c:
+	Terminate the command if an I/O log function returns 0 or -1. This
+	was mistakenly removed by 25b7fd056614 in Sudo 1.8.18 with the
+	removal of the ignore_iolog_errors variable.
+	[e1dd18d95815]
+
+	* plugins/sudoers/sudoreplay.c:
+	Quiet a coverity false positive.
+	[b7a9c9e35fd0]
+
+	* plugins/sudoers/sudoreplay.c:
+	Change to a single event loop in sudoreplay and use signal events.
+	[7320de46cf48]
+
+2017-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	start new sentences on a new line
+	[ae35ab253de5]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Clarify how the variable prompt options interact with each other and
+	PAM.
+	[342b936c4aaa]
+
+	* plugins/sudoers/sudoers.c:
+	Don't set passprompt_override when SUDO_PROMPT is present. This
+	effectively reverts ed77d255f383.
+
+	We treat the SUDO_PROMPT environment variable similar to passprompt
+	in sudoers: it will only override a PAM prompt if the PAM prompt is
+	either "Password:" or "username's Password:".
+	[6dad2bd126d1]
+
+2017-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/logging.c:
+	Add syslog_pid sudoers option to log sudo's process ID when logging
+	via syslog. This is disabled by default to match historic behavior.
+	[f4dc29b0052c]
+
+	* plugins/sudoers/auth/pam.c:
+	When deciding which prompt to use (PAM's or sudo's) treat the PAM
+	prompt "username's Password:" as equivalent to "Password:". Some PAM
+	modules (on AIX at least) use this prompt.
+	[96651906de42]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
+	Add missing argument to a few of the defaults strings in the "sudo
+	-V" output.
+	[44546c4b87c3]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/visudo.c:
+	When examining environment variables or variables passed in from the
+	front-end, ignore variables with no value specified.
+	[8537a7fc6190]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Document that "-p prompt" overrides SUDO_PROMPT.
+	[d2e6b518d00d]
+
+	* plugins/sudoers/sudoers.c:
+	Enable passprompt_override by default if SUDO_PROMPT is present in
+	the environment. This is consistent with how "sudo -p prompt" is
+	handled.
+	[ed77d255f383]
+
+2017-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	When reading a single character via a switch() use "default: instead
+	of "case 1:" to quiet a coverity warning.
+	[ddcfc40159e4]
+
+	* plugins/sudoers/sudoreplay.c:
+	Initialize ch in getsize_cb() in case we are called with the wrong
+	initial state.
+	[a31431c59e14]
+
+	* plugins/sudoers/sudoreplay.c:
+	remove unused variable
+	[488054411049]
+
+	* plugins/sudoers/visudo.c:
+	Call install_sudoers() even when doedit is false. If a file in a
+	#includedir has a syntax error it will still have been edited and we
+	need to install the edited temp file.
+	[ab833e2d1791]
+
+	* plugins/sudoers/visudo.c:
+	Reparse sudoers if a new #include file was added. Otherwise the new
+	file will not get its syntax checked. Bug #791
+	[e584dc8bf306]
+
+2017-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	don't restore the cursor when setting terminal size, we don't want
+	the cursor to move
+	[9cbcb3372bcd]
+
+	* plugins/sudoers/sudoreplay.c:
+	Read the xterm terminal size using an event so we can easily time
+	out if needed.
+	[634524476741]
+
+	* lib/util/event.c, src/exec_nopty.c, src/exec_pty.c:
+	If we free the default base in sudo_ev_base_free(), reset the
+	default base to NULL.
+	[2a8f7938618b]
+
+2017-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_event.h, lib/util/event.c, lib/util/util.exp.in,
+	src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c:
+	Add the ability to set a default event base, to be used by plugins
+	which don't have access to the event base.
+	[dc159ea98b25]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	Allow sudoreplay to adjust the window size on xterm-like terminals.
+	[3358b1a9f01c]
+
+2017-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/term.c:
+	Clear input, output, control and local flags before copying them
+	from the source terminal. Otherwise, flags that are disabled in the
+	source terminal may still be enabled in the destination.
+	[ead41242b820]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h, src/exec_pty.c:
+	Pass window size change events to the plugin.
+	[529b5c9d16a4]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c:
+	Log window size change events in the sudoers I/O plugin. Let
+	sudoreplay parse a timing file with window change events (currently
+	ignored).
+	[a67f4627dfa7]
+
+	* Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Remove pointless subshells in targets that simply change the
+	directory and execute a command. The command is already run in a
+	shell so there is no need to execute a subshell in this case.
+	[e57639cb2f97]
+
+2017-07-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	Store the debug instance ID for I/O plugins too. Now iolog_open() is
+	consistent with policy_open().
+	[519abb3c09d0]
+
+2017-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, lib/util/mktemp.c:
+	Use getentropy() in mkstemp/mkdtemp replacement.
+	[8d8e45266858]
+
+	* configure, configure.ac, lib/util/closefrom.c, lib/util/mktemp.c,
+	pathnames.h.in, src/exec_pty.c, src/get_pty.c, src/ttyname.c:
+	Use _PATH_DEV consistently
+	[ca10a91539e0]
+
+2017-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/term.c:
+	When copying terminal settings from one tty to another only copy a
+	subset of the flags. Sudo now copies the same set of flags that
+	OpenSSH uses, which should be safe.
+	[2f12bc7a87d1]
+
+	* src/exec_monitor.c, src/exec_nopty.c:
+	Add debug warning when we have wait status but don't overwrite the
+	existing cstat.
+	[5ae8f8e75104]
+
+	* src/exec_monitor.c:
+	Better handling of SIGCONT from in command in the monitor. It is
+	useful to know when the command continued but we don't want to
+	inform the parent or store the wait status in this case. Fixes a
+	hang after multiple suspends on Linux.
+	[9cdbbb7ff3dd]
+
+2017-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.h:
+	avoid padding in struct cmndspec
+	[2529551a9c2d]
+
+2017-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in:
+	Fix the man section of sudo_plugin in cross-references.
+	[f964de570403]
+
+2017-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Don't treat an unchanged file as an error. From Xin Li.
+	[503e04f7856e]
+
+	* src/sudo_edit.c:
+	sudo_edit() must return a wait status but if there is an error, or
+	even if no changes were made to the file, it was returning 1 instead
+	which would be interpreted as the command having received SIGHUP.
+	Use the W_EXITCODE() to construct a proper wait status in the error
+	case too.
+	[62515bd6c64c]
+
+2017-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Avoid sign extension when assigning the value of tty_nr in
+	/proc/self/stat on Linux. It is an unsigned int value that is
+	printed as a signed int but dev_t is unsigned long long. We need to
+	cast to unsigned int before assigning to a dev_t.
+	[c198d1317560]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/env.c:
+	Instead of hard-coding a check for bash functions in
+	env_should_delete(), use a "*=()* " pattern in
+	initial_badenv_table[] to match them instead. This allows the user
+	to remove the check via env_delete.
+	[90c4dfd1d3a3]
+
+2017-06-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL.configure, configure.ac, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, mkpkg, sudo.pp:
+	Mac OS X -> macOS
+	[08f793d1f496]
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	devsearch is ignored on BSD, macOS and Solaris
+	[b041a1d64eda]
+
+2017-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/event.c:
+	Move the bits to fill in the new event base to sudo_ev_base_init(),
+	which is not currently exported.
+	[9be46693bed1]
+
+2017-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	A command name may also contain newline characters so read
+	/proc/self/stat until EOF. It is not legal for /proc/self/stat to
+	contain embedded NUL bytes so treat the file as corrupt if we see
+	any. With help from Qualys.
+
+	This is not exploitable due to the /dev traversal changes in sudo
+	1.8.20p1 (thanks Solar!).
+	[9ad60fe663e5]
+
+	* NEWS:
+	Sudo 1.8.20p2
+	[39f199a38383]
+
+2017-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/selinux.c:
+	After opening a tty device, fstat() and error out if it is not a
+	character device.
+	[e03cfa98f2b6]
+
+	* INSTALL, configure, configure.ac, doc/sudo.conf.cat,
+	doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in, include/sudo_conf.h,
+	lib/util/sudo_conf.c, lib/util/util.exp.in, pathnames.h.in,
+	src/ttyname.c:
+	Add a new "devsearch" Path setting to sudo.conf for configuring the
+	/dev paths to traverse instead of hard-coding a list in ttyname.c
+	The default value can be set at configure time.
+	[7ab1be502dc3]
+
+	* src/ttyname.c:
+	Use /proc/self consistently on Linux. As far as I know, only AIX
+	doesn't support /proc/self.
+	[ef737b5d4ed8]
+
+2017-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure:
+	Sudo 1.8.20p1
+	[c34da84ae8e4]
+
+	* src/ttyname.c:
+	Fix for CVE-2017-1000367, parsing of /proc/pid/stat on Linux when
+	the process name contains spaces. Since the user has control over
+	the command name this could be used by a user with sudo access to
+	overwrite an arbitrary file. Thanks to Qualys for investigating and
+	reporting this bug.
+
+	Also stop performing a breadth-first traversal of /dev when looking
+	for the device. Only the directories specified in search_devs[] are
+	checked.
+	[b5460cbbb11b]
+
+2017-05-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/event_select.c:
+	Fix potential memory leak on reallocarray() error. Coverity CID
+	169639
+	[c303e6eecc78]
+
+	* plugins/sudoers/bsm_audit.c:
+	Only fall back to deprecated getaudit() on FreeBSD. Fixes compiler
+	warnings on macOS.
+	[18f4699e417c]
+
+	* mkpkg:
+	Use clang on macOS if present
+	[a963454d1b9e]
+
+	* sudo.pp:
+	fix paths to LICENSE and NEWS files for macOS packages
+	[47103614311b]
+
+2017-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c:
+	To avoid overwriting existing command status, check for CMD_INVALID
+	instead of CMD_ERRNO or CMD_WSTATUS.
+	[5fec1fa81482]
+
+	* plugins/sudoers/regress/env_match/data:
+	Add some patterns that could result in exponential run time for
+	poorly written '*' matching.
+	[98f4d085c919]
+
+2017-05-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/ttysize.c, src/exec_pty.c:
+	On HP-UX 11.0, sys/ioctl.h is not sufficient to make struct winsize
+	visisble, we need termios.h too.
+	[211510123ad6]
+
+	* lib/util/ttysize.c:
+	Always used TIOCGWINSZ.
+	[82e679b8cd00]
+
+	* src/exec.c, src/sudo.c, src/sudo.h:
+	Move exec_setup(), unlimit_nproc() and restore_nproc() from sudo.c
+	to exec.c.
+	[9127e50cf4ec]
+
+	* src/sudo_edit.c:
+	No need to include selinux.h here.
+	[8bb07a8f4203]
+
+	* plugins/sudoers/regress/env_match/check_env_pattern.c:
+	Fix compilation error on macOS
+	[bc5e5c3d44f2]
+
+2017-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/term.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c, src/exec_monitor.c, src/exec_nopty.c,
+	src/exec_pty.c, src/signal.c, src/sudo.c, src/tcsetpgrp_nobg.c,
+	src/tgetpass.c:
+	Remove use of non-standard sigaction_t
+	[81a57af4c7a9]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/mkdir_parents.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c:
+	Use debug logging instead of ignore_result() where possible.
+	[9c9fde5b52cc]
+
+	* Makefile.in:
+	Add cov-build and cov-submit targets for checking with coverity.
+	[bf88b4439c7b]
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/ldap.c:
+	Avoid a clang analyzer false positive.
+	[9f4f915a2e28]
+
+	* plugins/sudoers/sudoreplay.c:
+	Restore the error message for sudo_ev_add() failure.
+	[267305606577]
+
+	* include/sudo_event.h, lib/util/event.c:
+	Add support for signal events in sudo's event subsystem
+	[0d48fab2dec8]
+
+	* include/sudo_event.h, lib/util/event.c:
+	Handle the possibility of the siginfo parameter in sa_sigaction
+	handler being NULL.
+	[0835ca553426]
+
+	* src/exec.c, src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c,
+	src/signal.c, src/sudo.h, src/sudo_exec.h:
+	Use SUDO_EV_SIGNAL and SUDO_EV_SIGINFO instead of managing the
+	signal_pipe explicitly.
+	[841e2ca6a4a6]
+
+	* lib/util/event.c:
+	Activate the sigevents inside the signal pipe callback itself and
+	call signal_pipe_cb() directly if the backend returns EINTR and the
+	signal_caught flag is set. This has the side effect of processing
+	signal events in the current pass of the event loop instead of the
+	next one.
+	[d94e202b8e57]
+
+	* src/signal.c:
+	Add SIGCHLD to the list of signals we install sudo_handler() for.
+	Otherwise, it is possible for the command to exit before the SIGCHLD
+	handler is installed. POSIX says that signals that are ignored by
+	default are still ignored even if the signal mask would block them.
+	We need to have a handler installed for SIGCHLD before the fork().
+	[a26f04459c37]
+
+	* MANIFEST, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
+	plugins/sudoers/env_pattern.c,
+	plugins/sudoers/regress/env_match/check_env_pattern.c,
+	plugins/sudoers/regress/env_match/data, plugins/sudoers/sudoers.h:
+	Add support for multiple '*' in env_keep, env_check and env_delete
+	entries.
+	[b55270a8ecc4]
+
+	* configure, configure.ac:
+	sudo 1.8.21
+	[76aa5455903e]
+
+	* include/sudo_compat.h, plugins/sudoers/timestamp.c,
+	src/tcsetpgrp_nobg.c, src/tgetpass.c:
+	Remove use of the non-standard SA_INTERRUPT
+	[3ec05ffb0dcb]
+
+	* include/sudo_queue.h:
+	Add workaround for clang static analyzer being confused by
+	LIST_REMOVE and TAILQ_REMOVE.
+	[ff8d278e8526]
+
+2017-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Fix "make check" when openssl or gcrypt is used. Bug #787
+	[7968686742e2]
+
+2017-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Only display string version of errno if sudo_ev_add() fails for now
+	[24244a02c93f]
+
+2017-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	update
+	[8e3359235e24]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Be clear that #includedir diverts control to the files in the
+	specified directory and, when parsing of those files is complete,
+	returns control to the original file. Bug #775
+	[f68769f15356]
+
+2017-05-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po, po/sr.mo,
+	po/sr.po:
+	sync with translationproject.org
+	[4552eaf8fabf]
+
+2017-05-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	update
+	[53d1c9424816]
+
+	* src/exec_monitor.c:
+	Fix a hang introduced in the last commit. Don't close the pty slave
+	until after we have the controlling tty.
+	[c9c19beb60ed]
+
+	* src/exec_monitor.c, src/exec_pty.c:
+	If any of std{in,out,err} are not hooked up to a tty only interpose
+	ourselves with a pipe if the plugin will actually log the data. This
+	avoids a problem with non-interactive commands where no tty is
+	present where sudo will consume stdin even when log_input is not
+	enabled in sudoers.
+	[a79edafdd307]
+
+	* NEWS:
+	update
+	[144ff056cd01]
+
+	* doc/TROUBLESHOOTING:
+	Update based on information from Michael Felt.
+	[7ea34380ba1d]
+
+2017-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	In check_input() when switch()ing on the return value of read(), use
+	the default label instead of 1 for the success case. It is only
+	reading a single byte so the two are equivalent but it reads better
+	using default.
+	[860682b86af5]
+
+	* plugins/sudoers/sudoreplay.c:
+	Check sudo_ev_add() return value. Coverity CID 168362
+	[b69779d3801f]
+
+	* plugins/sudoers/iolog.c:
+	Add io_open() wrapper for open(2) that retries with PERM_IOLOG if
+	open(2) fails with EACCES. Use io_open() instead of duplicate copies
+	of the same fallback code.
+	[09f7992f681b]
+
+	* plugins/sudoers/iolog.c:
+	Don't retry the open() if set_perms() fails.
+	[0808a9157037]
+
+	* plugins/sudoers/iolog.c:
+	Fix typo (fd2 vs. fd) caught by coverity, CID 168359.
+	[f68df770e06f]
+
+	* po/hu.mo, po/hu.po:
+	sync with translationproject.org
+	[ebef76dc27be]
+
+2017-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Warn people not to use --enable-asan in production.
+	[ecb5c1143ef4]
+
+	* configure, configure.ac, src/Makefile.in:
+	Move the invocation of check_noexec into the main "check" target but
+	only run it if not cross compiling and whe CHECK_NOEXEC is not
+	empty.
+	[cba8fd3337c2]
+
+	* src/Makefile.in:
+	Move @CHECK_NOEXEC@ to TEST_PROGS so it gets cleaned up properly.
+	[efaa9c44e749]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Move syslog_maxlen to the "Integers" section. Move syslog_goodpri
+	and syslog_badpri to the "Strings at can be used in a boolean
+	context" section.
+	[342dfe9dd37c]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix a pasto that resulted in an extra (empty) syslog_goodpri list
+	entry.
+	[eb0563c5b8dc]
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test20.in,
+	plugins/sudoers/regress/sudoers/test20.json.ok,
+	plugins/sudoers/regress/sudoers/test20.out.ok,
+	plugins/sudoers/regress/sudoers/test20.toke.ok,
+	plugins/sudoers/regress/sudoers/test21.in,
+	plugins/sudoers/regress/sudoers/test21.json.ok,
+	plugins/sudoers/regress/sudoers/test21.out.ok,
+	plugins/sudoers/regress/sudoers/test21.toke.ok:
+	Add tests for parsing tuples and syslog options.
+	[86f3da23b4df]
+
+	* plugins/sudoers/defaults.c:
+	Allow the syslog Defaults option to be used in a "true" boolean
+	context and use the compiled in default log facility in this case.
+	[4fab25217602]
+
+	* plugins/sudoers/defaults.c:
+	Allow a tuple to be set to boolean true. Regression introduced by
+	refactor of set_default_entry() in sudo 1.8.18.
+	[9b38728deb27]
+
+2017-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Replace the list of "dangerous" environment variables and explain
+	how sudo handles the environment instead.
+	[966cf87d1bed]
+
+2017-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/glob.c:
+	Fix exponential behavior in glob() with respect to multiple '*'. See
+	https://research.swtch.com/glob Adapted from https://perl5.git.perl.
+	org/perl.git/commit/33252c318625f3c6c89b816ee88481940e3e6f95
+	[3d187b0fb764]
+
+	* src/exec_pty.c:
+	We no longer need to write to the tty if the command was killed by a
+	signal. Sudo will terminate itself with the same signal the command
+	died from. Unfortunately, we lose the "core dumped" bit since sudo
+	itself will not dump core, but there doesn't appear to be a way
+	around that.
+	[1be331e0c4d4]
+
+2017-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	On Linux, if the command we ran dumped core, set PR_SET_DUMPABLE to
+	0. This will prevent sudo itself from dumping core in this case.
+	[cf5a5793ebf4]
+
+	* INSTALL:
+	Update path to sudo_noexec.so
+	[14e995667c8b]
+
+	* src/sudo.c:
+	If the command terminated due to a signal, sudo will send that same
+	signal to itself so the parent shell knows the command died from a
+	signal. However, we don't want sudo itself to dump core.
+	[8d823e6ec41e]
+
+2017-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	sync
+	[1704e6005b07]
+
+	* src/sudo.c:
+	The fix for Bug #722 contained a typo/thinko that resulted in the
+	exit status being 0 when a command was killed by a signal other than
+	SIGINT. This fixes the signal handler setup so sudo will terminate
+	with the same signal as the command. Bug #784.
+	[50b988d0c97f]
+
+	* sudo.pp:
+	Better check for /etc/rc.d/rc2.d/S90sudo on AIX
+	[93de5e34a6a3]
+
+	* src/Makefile.in:
+	Don't install the rc.d link when installing to a DESTDIR. DESTDIR is
+	generally only set when installing to a temporary directory for
+	packaging in which case the link should be made in a post-install
+	script.
+	[4200ef757b56]
+
+	* plugins/sudoers/Makefile.in, sudo.pp:
+	In "make install", install sample sudoers file as /etc/sudoers.dist
+	and copy it to /etc/sudoers if there is no existing /etc/sudoers.
+	Packages either contain /etc/sudoers (RPM and Debian) or
+	/etc/sudoers.dist (everything else).
+	[40f8e5806d71]
+
+	* Makefile.in, mkdep.pl:
+	Allow "make dist" and "make depend" to work for out of tree builds.
+	[7b7ba3f38abb]
+
+2017-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/zlib/Makefile.in:
+	Add missing $(srcdir) prefix to shlib_exp definition.
+	[c63e8e73507e]
+
+2017-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_compat.h:
+	Fix typo in killpg macro.
+	[f7392d21c915]
+
+	* include/sudo_compat.h:
+	Fix the killpg macro for systems without killpg() in libc.
+	[ba0c5162bc4a]
+
+2017-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Use the standard idiom for popping all entries from a tail queue.
+	The llvm checker gets confused by TAILQ_REMOVE and generate use-
+	after-free false positives.
+	[a88cacd23f09]
+
+	* src/exec_monitor.c, src/exec_nopty.c:
+	rewrite errpipe callbacks
+	[5c75729cea19]
+
+	* src/exec_monitor.c, src/exec_nopty.c:
+	use pipe2() with O_CLOEXEC instead of pipe() + fcntl() and
+	FD_CLOEXEC
+	[c8c9cc31c43a]
+
+	* src/exec_pty.c:
+	init io_pipe[][] to -1, not 0
+	[71012940a8f1]
+
+2017-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sssd.c:
+	In sudo_sss_check_user() it is not possible for handle to be NULL.
+	[de41ba76a4ce]
+
+	* plugins/sudoers/sssd.c:
+	Fix a use after free when the fqdn sudoOption is set and no hostname
+	value is present in sssd.conf.
+	[716a7c502cc0]
+
+	* src/sudo.c:
+	Avoid unused variable when getgrouplist_2() is available. It would
+	be nicer to just provide getgrouplist_2() (or the equivalent) and
+	avoid the ugly #ifdefs.
+	[2c7ac21feb5f]
+
+	* plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po, po/nb.mo,
+	po/nb.po:
+	sync with translationproject.org
+	[e91a983f9de6]
+
+2017-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[790d9a05f585]
+
+2017-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	In sudo_ttyname_scan() if dir is the empty string, set errno to
+	ENOENT before returning.
+	[f531ea6e489e]
+
+2017-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Try to make it clear that when match_group_by_gid is enabled, groups
+	in sudoers are looked up by group name instead of group ID. This
+	doesn't usually cause problems, but if there are conflicting group
+	entries (for example, from a local /etc/group file and an LDAP or AD
+	group database), whether the group is resolved by name or ID can be
+	used to work around conflicts.
+	[fe3bfca4fcce]
+
+2017-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po, po/ja.mo,
+	po/ja.po:
+	sync with translationproject.org
+	[94d36c45e345]
+
+	* plugins/sudoers/regress/parser/check_digest.c:
+	plug memory leak in check_digest
+	[40aab9e6e365]
+
+	* src/exec.c:
+	Check return value of dispatch_pending_signals() in case we received
+	SIGINT or SIGQUIT before executing the command.
+	[218758d1560d]
+
+2017-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	back out unintentional change to the version number
+	[799b396c1c69]
+
+2017-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/cs.mo,
+	po/cs.po, po/da.mo, po/da.po, po/de.mo, po/de.po, po/fr.mo,
+	po/fr.po, po/hr.mo, po/hr.po, po/it.mo, po/it.po, po/pl.mo,
+	po/pl.po, po/pt_BR.mo, po/pt_BR.po, po/tr.mo, po/tr.po, po/uk.mo,
+	po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo, po/zh_CN.po:
+	sync with translationproject.org
+	[04c4a3ec233d]
+
+2017-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_digest.out.ok:
+	Make check_digest test sudo_filedigest() itself instead of the
+	underlying SHA2 functions. That way we can test it regardless of
+	whether we use sudo's SHA2 functions or a library version.
+	[9834b37f1fb0]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that commands matched by "sudo ALL" are not affected by
+	fdexec.
+	[7cc3b770a2ff]
+
+2017-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for 1.8.20
+	[14a09000c1dc]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen for restricted_env_file
+	[81290b370c95]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Mention that iolog_user is useful for NFS.
+	[9c8f9dfdebf0]
+
+2017-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Only retry mkdir or create with PERM_IOLOG if errno is EACCES. Also
+	always use PERM_IOLOG for mkdtemp() since we cannot retry if it
+	fails. Since we are guaranteed to create a new directory there's no
+	real need to try w/o PERM_IOLOG in this case.
+	[c3c67d78e46a]
+
+2017-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Add fallback to PERM_IOLOG when making the final componenet of
+	iolog_dir.
+	[72924e4c8f5d]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/env.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Add restricted_env_file which is like env_file but subject to the
+	same restrictions as the user's own environment.
+	[ec887cc57a8b]
+
+	* plugins/sudoers/iolog.c:
+	quiet a warning on older zlib
+	[bcd3cac968a2]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/timestamp.c:
+	cast mode_t to unsigned int when printing with %o
+	[f9ca9ead134e]
+
+2017-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[f62e81f74d10]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/mkdir_parents.c,
+	plugins/sudoers/timestamp.c:
+	Set umask temporarily when creating files instead of changing the
+	mode after the fact. This is slightly less error prone.
+	[a9b4cf336b73]
+
+	* plugins/sudoers/iolog.c:
+	remove now-useless variable
+	[9a36b2449ac4]
+
+	* plugins/sudoers/mkdir_parents.c:
+	Don't set owner/mode on directories that already exist, only on
+	newly-created ones.
+	[2b616be0e165]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/mkdir_parents.c:
+	Explicitly set the file mode of I/O log files so the mode is not
+	affected by the invoking user's umask.
+	[ec7d5dd47b6b]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/iolog.c, plugins/sudoers/mkdir_parents.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c:
+	Add PERM_IOLOG so we can create I/O log files on an NFS-mounted
+	filesystem where root is remapped to an unprivileged user.
+	[01804a971cd5]
+
+	* plugins/sudoers/mkdir_parents.c:
+	Restore the '/' in the path before returning if we encounter an
+	error.
+	[bb12cfce16fd]
+
+	* plugins/sudoers/sssd.c:
+	zero out nss->handle after it has been freed to make sure we cannot
+	free it twice
+	[00d5340b7541]
+
+2017-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c:
+	When creating the timestamp directory, use the group of the
+	timestamp owner instead of inheriting the group of the parent
+	directory.
+	[7a4a10cafe08]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/iolog.c:
+	Add iolog_flush option.
+	[96baa17409cf]
+
+2017-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/iolog.c:
+	Don't allow the user to specify an I/O log file mode that sudo can't
+	read or write to. I/O logs must always be readable and writable by
+	the owner.
+	[b32e2ef04905]
+
+2017-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo_plugin.cat,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoreplay.cat,
+	doc/visudo.cat:
+	Regenerate the cat pages with newer mandoc which formats double
+	quotes as "foo" instead of ``foo''.
+	[5f14e527ae05]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Make it clear that I/O logs will be complete even if the command run
+	by sudo is terminated by a signal. The I/O log buffering just
+	prevents the logs from being displayed in real-time as the command
+	is running.
+	[072fd419ac1e]
+
+2017-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_monitor.c, src/signal.c, src/sudo.h:
+	Replace pipe_nonblock() with pipe2()
+	[c106b62d7835]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, lib/util/pipe2.c,
+	mkdep.pl:
+	Emulate pipe2() on systems without it.
+	[5a183dd380f0]
+
+2017-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/kerb5.c:
+	Fix declaration of sudo_krb5_verify() in the case where
+	krb5_verify_user() is not present. Bug #777
+	[eafd4e2d7c7f]
+
+	* plugins/sudoers/rcstr.c:
+	Use HAVE_STDBOOL_H to detect systems w/o stdbool.h. Bug #778
+	[dbac86777429]
+
+2017-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[2fc489ddc143]
+
+	* src/exec_monitor.c, src/exec_nopty.c, src/exec_pty.c:
+	Move SIGCHLD handling into handle_sigchld() functions and move the
+	remaining bits of dispatch_signal() into signal_pipe_cb()
+	[b120f5cfa8cc]
+
+2017-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/utmp.c:
+	e_termination should be set to the value of WTERMSIG not WEXITSTATUS
+	[95f37078ae8f]
+
+2017-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, src/Makefile.in, src/exec_nopty.c, src/sudo.h,
+	src/tcsetpgrp_nobg.c:
+	Add tcsetpgrp_nobg() which acts like tcsetpgrp() but returns -1 for
+	a background process. This is safer than blocking SIGTTOU which
+	would cause tcsetpgrp() to succeed in the background.
+	[7ab75c47b8bf]
+
+2017-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_nopty.c:
+	Prevent sudo from receiving SIGTTOU when it tries to restore the
+	controlling terminal. There appears to be a race with the shell
+	(bash) which we may lose.
+	[aab018fb9940]
+
+2017-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/timestamp.c, src/exec_monitor.c:
+	Add some casts to quiet gcc warnings on Solaris and remove a now-
+	useless debug printf.
+	[16c862eab0ce]
+
+	* src/exec_pty.c:
+	change debug info when suspending sudo
+	[f5c5ee07f8e3]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_monitor.c,
+	src/exec_nopty.c, src/exec_pty.c, src/sudo_exec.h:
+	Reorganize the command execution code to separate out the pty and
+	non-pty code paths into their own event loops. The non-pty exec code
+	is now contained in exec_nopty.c and the pty exec code is split
+	between exec_pty.c (parent process) and exec_monitor.c (session
+	leader). This results in a small bit of duplicated code but improves
+	readability. Some of the duplicated code will fall out in future
+	changes to the event subsystem (the signal pipe).
+	[fe239d2a3cbd]
+
+2017-02-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/ttysize.c, src/exec_pty.c:
+	Remove support for the TIOCGSIZE ioctl. Systems that use this rather
+	than TIOCGWINSZ are too old for sudo to build on anyway.
+	[0179b16c70f9]
+
+2017-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c:
+	Set the child pid to -1 after we've waited for it and take care to
+	avoid killing pid -1. This makes it a bit more explicit and removes
+	the need for a separate variable to track the child's status. Sudo
+	already stops processing signals after it receives SIGCHLD so it is
+	not vulnerable to CVE-2017-2616.
+	[1123704858ae]
+
+2017-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Update the description of strict mode to current reality. Aliases
+	haven't needed to be defined before they are used since sudo 1.7.
+	[9dc4ce4ec538]
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/regress/visudo/test2.err.ok,
+	plugins/sudoers/regress/visudo/test3.err.ok,
+	plugins/sudoers/visudo.c:
+	Go back to using a Warning/Error prefix in the message printed to
+	stderr for alias problems. Requested by Tomas Sykora.
+	[ad4dc6e34222]
+
+2017-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/filedigest.c, plugins/sudoers/filedigest_openssl.c:
+	fix copyright years
+	[b9f013f95bb2]
+
+2017-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/digestname.c,
+	plugins/sudoers/filedigest.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c, plugins/sudoers/visudo_json.c:
+	Move the file digest code out of match.c and into filedigest.c.
+	Inspired by RedHat changes that used libgcrypt. Also add
+	digest_type_to_name() to map a sudo digest type (int) to a name
+	(string) and use it.
+	[9213d8c94b8f]
+
+	* INSTALL, MANIFEST, configure, configure.ac, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/filedigest_openssl.c:
+	Add support for using the message digest functions in OpenSSL
+	instead of sudo's own SHA2 implementation.
+	[d77639c97e43]
+
+	* INSTALL, MANIFEST, configure, configure.ac, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/filedigest_gcrypt.c:
+	Add support for using the message digest functions in libgcrypt
+	instead of sudo's own SHA2 implementation.
+	[0259467c38dd]
+
+	* plugins/sudoers/gmtoff.c:
+	Check for gmtime() or localtime() returning NULL and just use a zero
+	offset in that case. Should not be possible.
+	[ed210dd8bf46]
+
+2017-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers2ldif:
+	Add support for ROLE, TYPE, PRIVS, LIMITPRIVS, TIMEOUT, NOTBEFORE
+	and NOTAFTER.
+	[d0310b017c78]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/timestr.c:
+	strftime() was in C89 so use it unconditionally.
+	[87bf66aa18fd]
+
+	* MANIFEST, config.h.in, configure, configure.ac, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, include/sudo_debug.h,
+	lib/util/sudo_debug.c, lib/util/util.exp.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/gentime.c,
+	plugins/sudoers/gmtoff.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_gentime.c,
+	plugins/sudoers/regress/sudoers/test19.in,
+	plugins/sudoers/regress/sudoers/test19.json.ok,
+	plugins/sudoers/regress/sudoers/test19.out.ok,
+	plugins/sudoers/regress/sudoers/test19.toke.ok,
+	plugins/sudoers/regress/visudo/test10.out.ok,
+	plugins/sudoers/regress/visudo/test10.sh,
+	plugins/sudoers/sudoers_version.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add NOTBEFORE and NOTAFTER command options similar to what is
+	already available in LDAP.
+	[3ba0f9567f83]
+
+2017-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[f2876eadc1f5]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h:
+	Bump version to 1.11 for timeout entry in settings[]
+	[7b288e4bab93]
+
+	* doc/sudo.conf.cat, doc/sudo_plugin.cat, doc/sudoers.ldap.cat,
+	doc/sudoreplay.cat, doc/visudo.cat:
+	regen
+	[8c059a57d367]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/parse_args.c, src/sudo_usage.h.in:
+	Add a command line option to specify the command timeout, as long as
+	sudoers does not specify a shorter time limit.
+	[a8ef7f923d0a]
+
+2017-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Better error message when the timeout value does not parse.
+	[2360fb093e3e]
+
+	* plugins/sudoers/timeout.c:
+	set errno to ERANGE not EOVERFLOW on range error
+	[9654e1acab0d]
+
+2017-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[46a124dd72aa]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h:
+	Merge command tags, SELinux type/role and Solaris privs settings
+	into "command options". This relaxes the order of things so tags and
+	other options can be interspersed.
+	[0970fd78cbe8]
+
+	* MANIFEST, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/ldap.c,
+	plugins/sudoers/mkdefaults, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/sudoers/test17.in,
+	plugins/sudoers/regress/sudoers/test17.json.ok,
+	plugins/sudoers/regress/sudoers/test17.out.ok,
+	plugins/sudoers/regress/sudoers/test17.toke.ok,
+	plugins/sudoers/regress/sudoers/test18.in,
+	plugins/sudoers/regress/sudoers/test18.json.ok,
+	plugins/sudoers/regress/sudoers/test18.out.ok,
+	plugins/sudoers/regress/sudoers/test18.toke.ok,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timeout.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/visudo_json.c:
+	Add support for command timeouts in sudoers. After the timeout, the
+	command will be terminated.
+	[a36a748e9324]
+
+	* doc/fixman.sh, doc/fixmdoc.sh, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h:
+	Split out tags again so they must precede the command and not allow
+	them to be mixed in with options.
+	[e7e7d60316cc]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Only inherit SELinux role/type and Solaris privilege sets if the
+	command does not include any. Previously, a command with only a role
+	would inherit a type from the previous command which is not what was
+	intended.
+	[171a3ad972e7]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	List SELinux role/type for "sudo -l" with LDAP and SSSd backends.
+	Also fix printing of the timeout.
+	[740723a49ab5]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Plug some memory leaks found by ASAN.
+	[08189098a5b6]
+
+	* plugins/sudoers/Makefile.in:
+	Only inhibit ASAN leak detector for tests that result in a parse
+	error. The parser cannot currently clean up completely on error.
+	[b2f82dcd2545]
+
+	* plugins/sudoers/rcstr.c:
+	supress cppcheck memory leak false positive
+	[e0caf2275a44]
+
+	* lib/util/strtoid.c:
+	fix typo that prevented compilation on FreeBSD
+	[27866f6a2b5e]
+
+2017-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/Makefile.in:
+	Link vsyslog.lo directly into vsyslog_test to make sure the syslog()
+	stub gets called. Otherwise, the real syslog will get called via
+	libutil on AIX.
+	[693bc8411a98]
+
+	* lib/util/regress/vsyslog/vsyslog_test.c:
+	Fix final test with a format > 2048 bytes. Keep track of tests run
+	in the syslog() stub so we can detect if the stub is not being
+	called.
+	[d10d784446c1]
+
+	* lib/zlib/deflate.c:
+	avoid redefining the MIN macro
+	[45b7b0ba0f01]
+
+	* plugins/sudoers/parse.h, plugins/sudoers/timestr.c:
+	Include parse.h in timestr.c which is where function prototype
+	lives.
+	[3ec9ec84a84c]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix for including a sudoers file that begins with the letter 'i'.
+	The hack to determine whether we are parsing an include or
+	includedir is no longer safe now that relative include paths are
+	permitted. Bug #776.
+	[4d9691a43867]
+
+2017-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
+	Display the value of syslog_maxlen in sudo -V output.
+	[0841ad36531c]
+
+2017-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c:
+	Add ignore_unknown_defaults flag to ignore unknown Defaults entries
+	in sudoers instead of producing a warning.
+	[a7fdb44677dd]
+
+2017-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Always set the close-on-exec bit on the fd used to generate the
+	digest (i.e. the command to run) on systems that lack fexecve(2).
+	That way we don't need to explicitly close it using #ifdefs.
+	[f840a22fac1c]
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po, po/ca.mo,
+	po/ca.po, po/eo.mo, po/eo.po, po/sv.mo, po/sv.po:
+	sync with translationproject.org
+	[57e877674892]
+
+	* NEWS:
+	first updates for 1.8.20
+	[118208688b08]
+
+	* configure, configure.ac:
+	sudo 1.8.20
+	[6cba125ea903]
+
+2017-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/LICENSE, lib/zlib/adler32.c, lib/zlib/compress.c,
+	lib/zlib/crc32.c, lib/zlib/deflate.c, lib/zlib/deflate.h,
+	lib/zlib/gzguts.h, lib/zlib/gzlib.c, lib/zlib/gzread.c,
+	lib/zlib/gzwrite.c, lib/zlib/infback.c, lib/zlib/inffast.c,
+	lib/zlib/inflate.c, lib/zlib/inflate.h, lib/zlib/inftrees.c,
+	lib/zlib/trees.c, lib/zlib/uncompr.c, lib/zlib/zconf.h.in,
+	lib/zlib/zlib.exp, lib/zlib/zlib.h, lib/zlib/zutil.c,
+	lib/zlib/zutil.h:
+	update zlib to version 1.2.11
+	[75a563663083]
+
+2017-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Fix fdexec=never when a digest is present.
+	[49d3ab5baad0]
+
+2017-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/match.c:
+	Add new fdexec sudoers setting to allow choose whether execve() or
+	fexecve() is used.
+	[6a7623aa9a64]
+
+	* src/exec.c, src/exec_pty.c:
+	Close execfd in parent processes where it is not needed.
+	[f44e334d43e2]
+
+2017-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Add support for digest matching when the command is a glob-style
+	pattern or a directory. For example:
+
+	millert ALL = sha224:TmUvLkp3a2txliSC2X6CiK42626qdKsH72m/PQ== /bin/
+	millert ALL = sha224:TmUvLkp3a2txliSC2X6CiK42626qdKsH72m/PQ== /bin/*
+
+	would only match /bin/ls (assuming the digest matches).
+
+	Previously, only explicit path matches checked the digest.
+	[d4f6822ba9bb]
+
+2017-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap.c:
+	Add support for SASL_MECH in ldap.conf; Bug #764
+	[d057bb7f2ddc]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix documentation bug, the contents of env_file have never been
+	subject to env_keep or env_check. However, variables are only added
+	if they have not already been preserved.
+	[4483b1b44709]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	examples/sudoers:
+	Safer example for rule that can change non-root passwords. GNU
+	getopts allows options to follow arguments so we need to be able to
+	deny things like "passwd root -q". From Paul "Joey" Clark. Bug #772
+	[c809f1372811]
+
+2017-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Don't overwrite the return value of ldap_sasl_interactive_bind_s()
+	by the subsequent call to sudo_set_krb5_ccache_name(). From Paul
+	Zirnik of SUSE.
+	[448baff2b586]
+
+	* plugins/sudoers/env.c:
+	In sudo_unsetenv_nodebug(), decrement envp.env_len after removing
+	the variable. From Paul Zirnik of SUSE.
+	[3d87a008671c]
+
+2017-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/Makefile.in:
+	only run vsyslog_test if it exists
+	[5323dfcfb009]
+
+	* MANIFEST, configure, configure.ac, lib/util/Makefile.in,
+	lib/util/regress/vsyslog/vsyslog_test.c:
+	Add regress for vsyslog replacement.
+	[1f767b8f5940]
+
+2017-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Define HAVE_NANOSLEEP if we find nanosleep in librt
+	[ec8d949bf411]
+
+	* configure, configure.ac:
+	sudo_nanosleep not nanosleep in util.exp.in
+	[18a3bca78962]
+
+	* configure, configure.ac:
+	add nanosleep to util.exp.in if needed
+	[6ac2e9266d67]
+
+	* NEWS, configure, configure.ac:
+	sudo 1.8.19p2
+	[9c15593a007a]
+
+	* lib/util/vsyslog.c:
+	Double the size of new_fmt[] and remove an extraneous break in the
+	%m handling that was leftover from an earlier edit.
+	[fcb28dc9cd4e]
+
+	* lib/util/vsyslog.c:
+	Fix typo, want vsnprintf not snprintf.
+	[2717f2125ecd]
+
+	* plugins/sudoers/logging.c:
+	move va_start() in mysyslog()
+	[b58ec40bbfc3]
+
+	* plugins/sudoers/sudoers.c:
+	Only treat failure of expand_iolog_path() as fatal if
+	ignore_iolog_errors is not set.
+	[1ba009311cf7]
+
+2017-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, lib/util/nanosleep.c,
+	mkdep.pl, src/exec_pty.c:
+	When waiting for the parent to grant us the tty, use nanosleep
+	instead of spinning to avoid hogging the CPU.
+	[76335b380d7c]
+
+	* src/sudo.c:
+	Use ROOT_UID instead of 0
+	[5ed03a4e0b0b]
+
+2017-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[99b26e2c523d]
+
+2017-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/interfaces.c,
+	plugins/sudoers/regress/visudo/test9.out.ok,
+	plugins/sudoers/regress/visudo/test9.sh, plugins/sudoers/visudo.c:
+	Fix crash in visudo introduced in sudo 1.8.9 when an IP address or
+	network is used in a host-based Defaults entry. Bug #766
+	[ff9001f126b5]
+
+2017-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, doc/LICENSE:
+	Avoid using the system strnlen/strndup on AIX < 6. Even if configure
+	correctly detects it is working on the build machine, the sudo
+	package may be run on a system with an old libc were it is broken.
+	[28d148db0aaa]
+
+2016-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	sudo 1.8.19p1
+	[7bfd43fa5caf]
+
+	* plugins/sudoers/defaults.c:
+	Fix logic bug when matching syslog priority and facility.
+	[576cc9eb850f]
+
+	* doc/HISTORY:
+	Dell spun off Quest so simplify the history by just talking about
+	Quest and not Dell.
+	[a66120495435]
+
+2016-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/LICENSE:
+	Fix copyright year
+	[3122e55195a6]
+
+	* NEWS:
+	typo
+	[ffe9e84928b6]
+
+2016-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_compat.h:
+	HAVE_DECL_GETGROUPLIST_2 is always defined if HAVE_GETGROUPLIST_2
+	is, we need to check its value, not whether it is defined.
+	[849eb3113149]
+
+2016-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po:
+	sync with translationproject.org
+	[abf5d356a33b]
+
+2016-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/sr.mo,
+	po/sr.po:
+	sync with translationproject.org
+	[fec672d5a4c7]
+
+	* config.h.in, configure.ac, include/sudo_compat.h,
+	plugins/sudoers/pwutil_impl.c, src/sudo.c:
+	Use getgrouplist_2() on macOS if available.
+	[3bf58af56d18]
+
+2016-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[3f4d52230317]
+
+	* plugins/sudoers/interfaces.c:
+	In set_interfaces() treat a parse error as fatal.
+	[7d0048108b1d]
+
+2016-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/regress/atofoo/atofoo_test.c:
+	Fix a clang warning on macOS
+	[58e9d192e907]
+
+2016-12-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, po/ko.mo,
+	po/ko.po, po/vi.mo, po/vi.po:
+	sync with translationproject.org
+	[99cce0f5fddc]
+
+	* NEWS:
+	update for 1.8.19b2
+	[18cfc9b8b8e7]
+
+	* plugins/sudoers/timestamp.c:
+	Ignore a boot time that is in the future, which can happen when the
+	clock is corrected down after boot. Otherwise, the timestamp file
+	will be unlinked each time sudo is run and a password is always
+	required.
+	[dd3b2b7ae709]
+
+2016-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/logging.c:
+	Allow syslog priority to be negated or set to "none" to disable
+	logging successes or failures.
+	[624eddac4ab1]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	Allow stdin and ttyin to be displayed too. The only one that is
+	really useful in sudoreplay is stdin when input is from a pipe.
+	[5aa8b3a90c84]
+
+	* src/regress/noexec/check_noexec.c:
+	Solaris 10 wordexp() returns 127 on execve() failure like popen()
+	does.
+	[f927c50dda17]
+
+	* config.h.in, configure, configure.ac, include/sudo_debug.h,
+	lib/util/regress/atofoo/atofoo_test.c, lib/util/strtoid.c,
+	lib/util/sudo_debug.c, lib/util/util.exp.in:
+	id_t is 64-bits on FreeBSD so use strtoll() there. Fixes the strtoid
+	regress.
+	[448a9857e89f]
+
+2016-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	fix typo
+	[92ea657a87f5]
+
+	* plugins/sudoers/sudoers.c:
+	Fix the "all" setting for verifypw and listpw; nopass would never be
+	true even if all the user's entries had the NOPASSWD tag. Regression
+	introduce in sudo 1.8.17. Bug #762
+	[c672e3ebfbe2]
+
+2016-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/cs.mo,
+	plugins/sudoers/po/cs.po, plugins/sudoers/po/da.mo,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/el.mo, plugins/sudoers/po/eo.mo,
+	plugins/sudoers/po/eu.mo, plugins/sudoers/po/fi.mo,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/hr.mo,
+	plugins/sudoers/po/hr.po, plugins/sudoers/po/hu.mo,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/ko.mo, plugins/sudoers/po/ko.po,
+	plugins/sudoers/po/lt.mo, plugins/sudoers/po/nb.mo,
+	plugins/sudoers/po/nb.po, plugins/sudoers/po/nl.mo,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/ru.mo, plugins/sudoers/po/sk.mo,
+	plugins/sudoers/po/sl.mo, plugins/sudoers/po/sr.mo,
+	plugins/sudoers/po/tr.mo, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/uk.po, plugins/sudoers/po/zh_CN.mo,
+	plugins/sudoers/po/zh_CN.po, po/cs.mo, po/cs.po, po/de.mo, po/de.po,
+	po/es.mo, po/es.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po,
+	po/it.mo, po/it.po, po/ja.mo, po/ja.po, po/ko.mo, po/ko.po,
+	po/nb.mo, po/nb.po, po/pl.mo, po/pl.po, po/pt_BR.mo, po/pt_BR.po,
+	po/tr.mo, po/tr.po, po/uk.mo, po/uk.po, po/zh_CN.mo, po/zh_CN.po:
+	sync with translationproject.org
+	[8a4ab570d132]
+
+2016-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/openbsd.c:
+	Just use malloc_options "S" on OpenBSD instead of "AFGJPR".
+	[2851cd2da1c7]
+
+2016-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update year in license
+	[e370bf3d1035]
+
+2016-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[d524f0306467]
+
+	* doc/sudo.conf.cat, doc/sudoers.ldap.cat, doc/sudoreplay.cat:
+	regen
+	[185328ea20c3]
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/visudo.c, src/sudo.c:
+	Add SUDO_DEBUG_INSTANCE_ERROR return value for sudo_debug_register()
+	and check for it in places where we check the return value of
+	sudo_debug_register().
+	[d1e74c5f21a6]
+
+2016-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	update for 1.8.19
+	[b248866c511d]
+
+2016-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/getspwuid.c:
+	Add support for getpwnam_shadow() on OpenBSD
+	[4db7ed374c33]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, plugins/sudoers/policy.c, src/sudo.c:
+	Add umask to user_info passed in from the front end to the plugin.
+	[4a4eee52a717]
+
+	* plugins/sudoers/auth/rfc1938.c:
+	Fix sign compare warning.
+	[8732d632cbff]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac, m4/ax_append_flag.m4,
+	m4/sudo.m4:
+	Use AX_APPEND_FLAG instead of SUDO_APPEND_CPPFLAGS and direct
+	modification of LDFLAGS.
+	[c1464dcd45e0]
+
+	* MANIFEST, configure, configure.ac, plugins/sudoers/aixcrypt.exp:
+	Remove aixcrypt.exp, it was a remnant of the 90's crypto wars where
+	crypt() was not exported.
+	[785d57666d41]
+
+	* doc/TROUBLESHOOTING:
+	Remove obsolete solaris issue with snprintf
+	[3ce6cc899026]
+
+	* INSTALL:
+	SunOS 4.x is no longer supported
+	[2239eb30ff2c]
+
+2016-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/regress/sudo_conf/test1.in, lib/util/sudo_conf.c:
+	Plug memory leak when a particular Path is set more than once.
+	[debc97dac01d]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Add sudo_ldap_is_negated() and sudo_ldap_is_negated() functions and
+	use them to parse negated entries instead of doing it manually.
+	[12010b64afe5]
+
+	* plugins/sudoers/ldap.c:
+	Fix printing of sudoedit_follow in "sudo -l"
+	[2094a8f880c4]
+
+	* plugins/sudoers/sssd.c:
+	For "sudo -l" print sudoOption sudoedit_follow as FOLLOW.
+	[9c860b1fa721]
+
+	* config.h.in, configure, configure.ac, include/sudo_conf.h,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_conf/test1.out.ok, lib/util/sudo_conf.c,
+	lib/util/util.exp.in, plugins/sudoers/policy.c, src/exec_common.c,
+	src/load_plugins.c, src/parse_args.c:
+	Always define _PATH_SUDO_NOEXEC, _PATH_SUDO_SESH,
+	_PATH_SUDO_PLUGIN_DIR, even if only defined to NULL. This means the
+	accessors can always be present.
+
+	Use RTLD_PRELOAD_VAR instead of _PATH_SUDO_NOEXEC to tell when
+	noexec is available.
+
+	Add ENABLE_SUDO_PLUGIN_API and use it instead of
+	_PATH_SUDO_PLUGIN_DIR to tell when the plugin API is available.
+
+	Add sudo_conf_clear_paths() to clear the path values so the regress
+	tests are not affected by compile-time settings.
+	[2b05e4a143d9]
+
+	* plugins/sudoers/ldap.c:
+	Use readline() in sudo_ldap_read_secret()
+	[3f0506e5cbe3]
+
+2016-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/sudo_conf.c:
+	Get rid of struct sudo_conf_paths and just use #defined index values
+	to access the path values. Make all accessors available even when
+	the feature is not enabled.
+	[58d1ec6170a8]
+
+	* configure, configure.ac, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	mkdep.pl, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Add ASAN_CFLAGS and ASAN_LDFLAGS and use -Wc prefix in ASAN_LDFLAGS
+	to prevent libtool from strippign them out. Avoid using ASAN flags
+	when building sudo_noexec.so.
+	[9644dd92e586]
+
+2016-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Disable noexec for HP-UX 10.x which probably doesn't support
+	LD_PRELOAD
+	[d87bc5ea4688]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/getspwuid.c:
+	Remove SunOS 4 support, it is not modern enough to run sudo.
+	[b6e15f8360b6]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/getspwuid.c:
+	Remove HP-UX 9 support, it is not modern enough for sudo.
+	[226dda48c1e1]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/getspwuid.c:
+	Remove Ultrix support, modern sudo can't run on Ultrix anyway.
+	[95a11ef29a2b]
+
+	* MANIFEST, configure, configure.ac, lib/util/sudo_conf.c,
+	src/Makefile.in, src/exec_common.c,
+	src/regress/noexec/check_noexec.c, src/sudo_exec.h:
+	Add regress for noexec functionality
+	[2cadd8e04677]
+
+	* src/Makefile.in:
+	Unbreak sudo_noexec on macOS where shared libraries and dynamic
+	modules are different. We still want to install sudo_noexec.so
+	without the "lib" prefix so some hackery is required.
+	[93d7b69491a1]
+
+	* configure, configure.ac:
+	Don't enable noexec for AIX 5.0-5.2, we need 5.3 and above.
+	[92cad0180239]
+
+2016-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/Makefile.in:
+	Need to link sudo_noexec.so with -ldl for dlsym() on some platforms.
+	Otherwise, the wordexp(3) wrapper will fail due to an undefined
+	symbol. Bug #761
+	[120a317ce25b]
+
+	* plugins/sudoers/visudo.c:
+	In strict mode, go to the file/line with an undefined aliases or
+	aliases cycle directly.
+	[b4f51b79bd9e]
+
+2016-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/visudo/test2.err.ok,
+	plugins/sudoers/regress/visudo/test3.err.ok,
+	plugins/sudoers/visudo.c:
+	Store the file/lineno for alias and userspec entries so we can
+	provide that info if there is an error.
+	[7deb4e41ca7b]
+
+2016-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/rcstr.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c:
+	Add simple reference-counted string allocator and use it for passing
+	around references to the sudoers path. This lets us avoid making
+	copies of the sudoers path for the errorfile as well as each
+	Defaults entry.
+	[afcff7b5b647]
+
+	* lib/util/sha2.c:
+	Cast len from size_t to uint64_t before bit shifting since we are
+	adding to count which is also uint64_t. Quiets a PVS-Studio warning.
+	[167210670b30]
+
+2016-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/regress/visudo/test7.out.ok,
+	plugins/sudoers/regress/visudo/test7.sh,
+	plugins/sudoers/regress/visudo/test8.err.ok,
+	plugins/sudoers/regress/visudo/test8.out.ok,
+	plugins/sudoers/regress/visudo/test8.sh:
+	Add checks for sudoers_locale early Defaults
+	[582c08c9418c]
+
+	* src/parse_args.c, src/sudo.c, src/sudo.h:
+	Add the argument vector allocated for -s and -i mode to the garbage
+	collector list. Avoids an ASAN warning on exit when the -s or -i
+	flags are used.
+	[652691a5216b]
+
+2016-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	add missing sudo_pw_delref/sudo_gr_delref to plug memory leak
+	[c4ba4c26e0c1]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_fill.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c:
+	Go back to parsing Defaults entries in update_defaults instead of as
+	sudoers is read. Otherwise, we cannot properly support early
+	defaults like sudoers_locale.
+	[ff1328a86b97]
+
+	* mkpkg:
+	Use expr instead of POSIX sh numerical expression to avoid a syntax
+	error on older shells.
+	[638383bb40d5]
+
+2016-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h:
+	Bump plugin minor version to 10 for sudo_mode, sudo_group and
+	sudo_user.
+	[0c65dc1f2874]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Fix a bug in host matching where a negated sudoHost entry would
+	prevent other sudoHosts following it from matching.
+	[40cbd5790106]
+
+	* plugins/sudoers/defaults.c:
+	Zero out sd_un before calling parse_default() so we don't try to
+	free stack garbage in the ldap/sssd backends.
+	[6b64a8e3a19d]
+
+2016-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Use "ret", not "rc" for the function return value.
+	[fdfe637adee6]
+
+	* include/sudo_compat.h, lib/util/strtomode.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/logging.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/sesh.c, src/sudo.c, src/sudo_edit.c:
+	Use sys/stat.h defines instead of bare octal values.
+	[215c80e09830]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/policy.c:
+	Pass iolog mode, group and user from policy plugin to I/O log
+	plugin.
+	[1ed4967771c8]
+
+2016-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_fill.c, plugins/sudoers/sssd.c:
+	Instead of parsing sudoers Defaults twice, parse once while reading
+	sudoers and then just set the parsed value in update_defaults().
+	[370d51681c6e]
+
+	* plugins/sudoers/defaults.c:
+	Use "struct defaults *d" instead of "struct defaults *def"
+	throughout for consistency and to avoid confusino with "struct
+	def_values *def". Use "str" not "var" for the string argument to
+	convert and store in sd_un for the store_* functions.
+	[5cc3efc609df]
+
+	* plugins/sudoers/parse.c:
+	In display_bound_defaults() rename dtype arg -> deftype.
+	[b3323960e1db]
+
+2016-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/regress/sudo_conf/test4.err.ok,
+	lib/util/regress/sudo_conf/test5.err.ok,
+	plugins/sudoers/regress/visudo/test2.err.ok,
+	plugins/sudoers/regress/visudo/test3.err.ok:
+	Update error output to match quoting changes.
+	[27bbf5004d1e]
+
+	* plugins/sudoers/defaults.c:
+	Avoid passing in a struct sudo_defs_types pointer to the store
+	functions. Pass in a pointer to the union to fill instead.
+	[ea956d00aae3]
+
+	* plugins/sudoers/defaults.h:
+	no longer need struct defaults forward referebce
+	[21e34ca85de5]
+
+2016-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/sudo_conf.c, plugins/sudoers/alias.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c, src/load_plugins.c:
+	Use "double quotes" in messages instead of a combination of the
+	accent (grave) mark and apostrophe.
+	[10dee3ecf3e1]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Add file:linenumber prefix to all Defaults warnings so we can see
+	them when running sudo too. For LDAP/SSSD we print the sudoRole
+	instead of the file name and omit the line number.
+	[5c6b95cd3792]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Use sudoedit in examples instead of "sudo vi"
+	[6008c208682c]
+
+2016-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c:
+	Only treat an unknown Defaults entry as a parse error in visudo, not
+	in sudo itself.
+	[8d8aa7ac5a32]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/visudo.c:
+	Instead of checking Defaults values after the fact, check them at
+	sudoers parse time. This makes it possible to display the file and
+	line number with the problem and for visudo to go right to the
+	error.
+	[ac66bd690d05]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h:
+	Refactor freeing of a member_list into free_members().
+	[d29daa01bb9c]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	add_defaults() now calls sudoerserror() itself instead of the caller
+	assuming any error means out of member.
+	[a25e51321e0b]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/mkdir_parents.c:
+	s/rval/ret/g -- old habits die hard
+	[fa55d08b233a]
+
+2016-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Remove inaccurate XXX comment, sudo_file_parse() sends mail on parse
+	error.
+	[052b0e112839]
+
+	* plugins/sudoers/visudo.c:
+	The fix for Bug #408 broke editing of files in an include dir that
+	have a syntax error. Normally, visudo does not edit those files, but
+	if a syntax error is detected in one, the user gets a chance to fix
+	it.
+	[6b00f9bfff31]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c:
+	Make a copy of the current sudoers path when assigning errorfile.
+	Fixes a potential use after free in visudo when there is an error in
+	one of the include files.
+	[eb6db5d15b61]
+
+	* plugins/sudoers/sudoers_debug.c:
+	sudoers_debug_register() was not setting the active debug instance
+	to sudoers_debug_instance when called from the I/O log plugin. This
+	is because it relied on sudo_debug_register to do that but
+	sudoers_debug_parse_flags() doesn't set debug_files[]
+	sudoers_debug_instance is already set (we can only init sudoers
+	debug once).
+
+	To work around this, just make sudoers_debug_instance the active
+	debug instance in sudoers_debug_register() when it is already set.
+	[71b0221c8c28]
+
+	* src/load_plugins.c:
+	Fix pasto when setting I/O plugin debug files
+	[03c3aab22e65]
+
+	* plugins/sudoers/iolog.c:
+	use cp instead of *cur when comparing against plugin_path
+	[f2dfe69549f5]
+
+2016-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/mkdir_parents.c:
+	In sudo_mkdir_parents() inherit the gid of / instead of using gid 0
+	for the first component.
+	[5f2bf33bccb5]
+
+	* plugins/sudoers/iolog.c:
+	We want to inherit the gid from the parent directory when not
+	setting permissions on intermerdiate directories.
+	[845f5a20b5fa]
+
+2016-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/mkdir_parents.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c:
+	Move io_mkdir_parents() to its own file and use it in ts_mkdirs().
+	[c1d55f588a60]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Make the I/O log file/dir permissions and owner configurable.
+	[e7a74f3dfa56]
+
+	* lib/util/Makefile.in, mkdep.pl:
+	Add vsyslog.lo
+	[18362a9ae32e]
+
+	* configure, configure.ac:
+	sudo 1.8.19
+	[97743604e6e3]
+
+2016-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c:
+	Don't try to syntax check an unrecognized Defaults value in visudo.
+	[e4972655b5d3]
+
+2016-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Create I/O log files with the same gid as the parent directory.
+	[0da5824e006d]
+
+	* plugins/sudoers/ldap.c:
+	Check for sudo_ldap_result_last_search() returning NULL. This can't
+	happen in practice because we always call
+	sudo_ldap_result_add_search() first which guarantees there is a
+	result to be found. Quiets a PVS-Studio warning.
+	[4f6074f40fbc]
+
+	* src/exec_pty.c:
+	Quiet a PVS-Studio warning about the spin loop when waiting for the
+	parent to assign us the terminal pgrp.
+	[d063a283477b]
+
+	* plugins/sudoers/env.c:
+	Fix incorrect strncmp() lengths. The check for USERNAME was only
+	looking at the first 5 characters (copy and paste error). The check
+	for SUDO_PS1 was not checking the trailing '=' character (off by one
+	error). Found by PVS-Studio.
+	[297380eb6940]
+
+	* plugins/sudoers/env.c:
+	When checking for old-style bash functions in the environment, check
+	for values starting with "() " (note the trailing space) rather than
+	"()". Bash will only treat the value as a function if the space
+	after "()" is present. The trailing space was already present in the
+	compare string but when it was added, the length passed to strncmp()
+	was not updated from 3 to 4. Found by PVS-Studio. No security
+	impact.
+	[7e35f39d356b]
+
+	* plugins/sudoers/set_perms.c:
+	Add some missing casts from uid_t/gid_t to int when printing uid/gid
+	values. We print these as signed so a value of -1 (no change) is
+	obvious. Quiets PVS-Studio warnings.
+	[9773e5b166e1]
+
+	* plugins/sudoers/timestamp.c:
+	def_timestamp_timeout is a double so compare against 0.0 not 0 to
+	avoid making it appear to be an integer type.
+	[8675db470ab7]
+
+	* plugins/sudoers/defaults.c:
+	When checking syslog facility or priority, move the string compare
+	into the body of the loop and return if it matches. If we finish the
+	loop it means we didn't find a match. This makes the code a little
+	bit more readable.
+	[d1df1649a01e]
+
+	* lib/util/strlcpy.c, lib/util/strnlen.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/logging.c,
+	plugins/sudoers/visudo_json.c, src/env_hooks.c, src/exec_pty.c:
+	Replace bare ";" in the body of for() loops with "continue;" for
+	improved readability.
+	[92eff8dbe5f8]
+
+2016-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.guess, config.sub:
+	Update from http://git.savannah.gnu.org/gitweb/?p=config.git
+	[86e6144dfdd7]
+
+	* config.guess, config.sub, configure, ltmain.sh, m4/libtool.m4,
+	m4/ltoptions.m4, m4/ltsugar.m4, m4/ltversion.m4, m4/lt~obsolete.m4:
+	Update to libtool 2.4.6
+	[8d85d9e8687b]
+
+2016-10-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/vsyslog.c:
+	Use a static buffer if possible.
+	[758ce6478994]
+
+	* MANIFEST, configure, configure.ac, include/sudo_compat.h,
+	lib/util/vsyslog.c, plugins/sudoers/logging.c:
+	add vsyslog() for systems without it.
+	[c6457f333252]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	There are now 14 tag values, not 10. Don't bother mentioning the
+	number since it keeps increasing. Bug #759
+	[17e4c900dc12]
+
+2016-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/logging.c:
+	Use vsyslog() if available.
+	[ea9b7a51eaec]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/logging.c:
+	Add syslog_maxlen to control the max size of syslog messages.
+	[5f9872d2073f]
+
+2016-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/tgetpass.c:
+	Don't generate SIGTOU when restoring the terminal modes. It doen't
+	make sense to suspend the process only to restore the terminal
+	settings since in this case the shell has already taken ownership of
+	the tty.
+	[981c26f3fc8f]
+
+	* plugins/sudoers/sudoreplay.c, src/exec_pty.c, src/tgetpass.c:
+	The flush parameter of sudo_term_restore() is bool, not int.
+	[c2597f1881f3]
+
+2016-10-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Add wordexp() to the list of functions wrapped by sudo_noexec.so.
+	[2e847ce3f02f]
+
+2016-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_noexec.c:
+	Need RTLD_NEXT for wordexp() on dlopen() systems. It is missing on
+	AIX 5.1 at least.
+	[167a518d8129]
+
+	* src/sudo_noexec.c:
+	add missing guard around wordexp()
+	[7b8357b0a358]
+
+	* NEWS:
+	expand on 1.8.18p1 changes
+	[f560e06ad584]
+
+2016-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	sudo 1.8.18p1
+	[a36e17d1c5db]
+
+	* config.h.in, configure, configure.ac, src/sudo_noexec.c:
+	Fix configure check for seccomp filter on Linux
+	[5d88d7cda853]
+
+2016-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, src/sudo_noexec.c:
+	Use a seccomp filter on Linux to disable execve(2) and execveat(2).
+	This still relies on LD_PRELOAD to work so it has the same issues as
+	the existing mether with respect to running 32-bit binaries on a
+	64-bit kernel.
+	[59d76bdc0f0c]
+
+	* src/Makefile.in:
+	regen
+	[9e313cb0900b]
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[5ca77049e5cd]
+
+2016-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, config.h.in, configure, configure.ac, src/sudo_noexec.c:
+	Wrap wordexp(3) in sudo_noexec.
+	[e7d09243e51b]
+
+2016-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Clean .json files created by "make check"
+	[d214117fbda1]
+
+2016-09-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* po/ca.mo, po/da.mo, po/eo.mo, po/es.mo, po/eu.mo, po/fi.mo,
+	po/gl.mo, po/hr.mo, po/hu.mo, po/ko.mo, po/nl.mo, po/ru.mo,
+	po/sk.mo, po/sl.mo, po/sr.mo, po/tr.mo:
+	recompile .po files
+	[3d91cbf75744]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Fix matching when no sudoRunAsUser is present in a sudoRole. If only
+	a sudoRunAsGroup is present, match on the invoking user if the -g
+	option was specified and the group matched. If no sudoRunAsGroup is
+	present and the -g option was specified, allow it if it matches the
+	passwd gid of the runas user. This matches the behavior of the
+	sudoers backend.
+	[e1a52c34da5e]
+
+	* plugins/sudoers/match.c:
+	runas_pw can no longer be NULL
+	[020c6ddcae11]
+
+2016-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	RunAsGroup without RunAsUser issues
+	[52d1547c9d3a]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	user_matched and group_matched must be type int, not bool
+	[204d8de97a05]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sssd.c:
+	Use RUNAS_USER_SPECIFIED and RUNAS_GROUP_SPECIFIED when deciding
+	whether to check runas user/group instead of checking runas_pw or
+	runas_gr.
+	[d17f223e8313]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	When matching against runas_default use userpw_matches() instead of
+	just strcasecmp().
+	[ce70077c5861]
+
+	* plugins/sudoers/testsudoers.c:
+	Set RUNAS_USER_SPECIFIED when -u is specified and/or
+	RUNAS_GROUP_SPECIFIED when -g is specified.
+	[fa7a1035a058]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Fix printing of the default runas user when a RunAsGroup is
+	specified but no RunAsUser is present.
+	[c05dabd194a1]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Only match against runas_default if both sudoRunAsUser and
+	sudoRunAsGroup are missing.
+	[019084f428b2]
+
+	* plugins/sudoers/match.c:
+	runas_pw can no longer be NULL here
+	[e73dcebafa15]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sssd.c:
+	Update check for whether or not the runas user was set in the ldap
+	and sssd backends to match the sudoers file backend. Introduces the
+	runas_user_set() macro to improve readability. Previously, runas_pw
+	was set late, now it is set before checking sudoers.
+	[d8280d8a96c9]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Document that negated sudoHosts are only supported by 1.8.18 and
+	higher.
+	[f56824fe61bc]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/testsudoers/test4.sh,
+	plugins/sudoers/regress/testsudoers/test5.sh:
+	Disable Address Sanitizer leak detection for tests which generate
+	parse errors. The parser leaks a bit on error.
+	[4b0ddb11df3a]
+
+	* plugins/sudoers/sssd.c:
+	Fix underflow in get_ipa_hostname() when trimming trailing
+	whitespace.
+	[875f2f5cd363]
+
+2016-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Document negated sudoHost entries.
+	[41d9853f89f7]
+
+	* plugins/sudoers/sssd.c:
+	Support negated sudoHost entries.
+	[7c25f9111633]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Document negated sudoHost entries.
+	[6c8444c6bc6c]
+
+	* plugins/sudoers/ldap.c:
+	Support negated sudoHost entries.
+	[1899906b8ef4]
+
+2016-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Don't check the username when matching a host netgroup unless
+	def_netgroup_tuple is enabled.
+	[238c8064542f]
+
+	* plugins/sudoers/match.c:
+	Move valid domain name check into a new valid_domain() function. Fix
+	memory leak if getdomainname(2) fails and avoid using heap garbage
+	for the domain name matching in this case.
+	[946f2441c90a]
+
+2016-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po, po/it.mo,
+	po/it.po:
+	sync with translationproject.org
+	[40eab0801eae]
+
+2016-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Add back line mistakenly removed in 0cf2a9351740
+	[8622c83c1474]
+
+	* plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po, po/nb.mo,
+	po/nb.po:
+	sync with translationproject.org
+	[f180826bb77b]
+
+2016-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Bug #757
+	[de67bc9e26f8]
+
+	* plugins/sudoers/sudoers.c:
+	Fix typo that broke short host name matching when the fqdn flag is
+	enabled. Bug #757
+	[605c03afc80f]
+
+2016-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_debug.h, lib/util/aix.c, lib/util/fnmatch.c,
+	lib/util/getgrouplist.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/strtoid.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, plugins/sample/sample_plugin.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
+	plugins/sudoers/env.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.c,
+	plugins/sudoers/policy.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c, src/env_hooks.c, src/exec.c,
+	src/exec_pty.c, src/get_pty.c, src/hooks.c, src/load_plugins.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/signal.c,
+	src/sudo.c, src/sudo_edit.c, src/tgetpass.c, src/ttyname.c,
+	src/utmp.c:
+	Be consistent with the naming of the variable used to store the
+	function return value. Previously, some code used "rval", some used
+	"ret". This standardizes on "ret" and uses "rc" for temporary return
+	codes.
+	[017866310d24]
+
+2016-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ca.po, plugins/sudoers/po/cs.mo,
+	plugins/sudoers/po/cs.po, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/el.po, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/eu.po, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.po, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/hu.po, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/ko.po, plugins/sudoers/po/lt.po,
+	plugins/sudoers/po/nb.po, plugins/sudoers/po/nl.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/ru.po, plugins/sudoers/po/sk.po,
+	plugins/sudoers/po/sl.po, plugins/sudoers/po/sr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/tr.po, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/uk.po, plugins/sudoers/po/vi.mo,
+	plugins/sudoers/po/vi.po, plugins/sudoers/po/zh_CN.mo,
+	plugins/sudoers/po/zh_CN.po, po/ca.po, po/cs.mo, po/cs.po, po/da.po,
+	po/de.mo, po/de.po, po/eo.po, po/es.po, po/eu.po, po/fi.po,
+	po/fr.mo, po/fr.po, po/gl.po, po/hr.po, po/hu.po, po/it.po,
+	po/ja.mo, po/ja.po, po/ko.po, po/nb.po, po/nl.po, po/pl.mo,
+	po/pl.po, po/pt_BR.mo, po/pt_BR.po, po/ru.po, po/sk.po, po/sl.po,
+	po/sr.po, po/sv.mo, po/sv.po, po/tr.po, po/uk.mo, po/uk.po,
+	po/vi.mo, po/vi.po, po/zh_CN.mo, po/zh_CN.po:
+	sync with translationproject.org
+	[6312962695df]
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, po/nn.mo, po/nn.po:
+	Norwegian Nynorsk translation of sudo from translationproject.org
+	[05203a266265]
+
+	* NEWS:
+	Fix for Bug #756
+	[89ff21579216]
+
+2016-09-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	In sudoers_main() avoid setting rval prematurely. Prevents a crash
+	when auditing fails after successfully authenticating. Bug #756
+	[d17a06bce04c]
+
+	* plugins/sudoers/defaults.c:
+	Apply match_group_by_gid early.
+	[1259c7fd66ca]
+
+2016-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	update
+	[292a9e21474e]
+
+	* src/ttyname.c:
+	Don't disable large file support for Linux, just SVR4-style /proc.
+	Otherwise, stat(2) may fail on Linux when running a 32-bit sudo on a
+	64-bit machine. Bug #755
+	[09450ce8b8a8]
+
+2016-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_util.h:
+	Make sudo_parseln() flags hex to make it more obvious that they are
+	bit flags.
+	[b912a078047e]
+
+	* plugins/sudoers/env.c:
+	Don't try to support line continuation in /etc/environment.
+	[d7e30e821c0e]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap.c:
+	No line continuation support in ldap.conf.
+	[211caaba2395]
+
+	* include/sudo_util.h, lib/util/parseln.c:
+	Add flag to sudo_parseln() to disable line continuation support.
+	[d2820247fc07]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	A comment character ('#') is only special at the beginning of the
+	line.
+	[b3b67b7e4fc0]
+
+	* include/sudo_util.h, lib/util/parseln.c,
+	lib/util/regress/sudo_parseln/parseln_test.c, lib/util/sudo_conf.c,
+	lib/util/util.exp.in, plugins/sudoers/env.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/sudo_nss.c:
+	Add a flags option to sudo_parseln() and a flag to only mach
+	comments at the beginning of the line. Use the flag when parsing
+	ldap.conf.
+	[40c560fc9a10]
+
+	* src/sudo.c:
+	If get_process_ttyname() fails for errno != ENOENT, just warn
+	instead of making it a fatal error. Bug #755
+	[1a028b861801]
+
+2016-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/mkdefaults:
+	use strict
+	[681281bc0f6d]
+
+	* plugins/sudoers/def_data.h, plugins/sudoers/mkdefaults:
+	Define def_foo in terms of the I_FOO index instead of a bare number.
+	[abb119f84ae6]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po:
+	sync with translationproject.org
+	[d339717f8692]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Mention that match_group_by_gid has no effect when sudoers is stored
+	in LDAP.
+	[5eb6ae45c699]
+
+	* include/sudo_compat.h, src/sudo.c:
+	Use W_EXITCODE to construct the wait status if sudo could not
+	execute the command. Fixes the sudo exit value for exec(3) failure.
+	[95eae2d60292]
+
+	* src/exec.c:
+	fix brace style
+	[54448c10b6b5]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[794b06ba727b]
+
+	* src/sudo.c:
+	It is possible for get_user_info() to fail for reasons other than
+	ENOMEM so print the warning message there rather than in main().
+	[8c24df8d6b78]
+
+2016-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	match_group_by_gid is only available in sudo 1.8.18 and above
+	[dd237eb540d0]
+
+	* doc/UPGRADE:
+	Mention match_group_by_gid
+	[417f27e9059a]
+
+	* NEWS, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document match_group_by_gid
+	[2234997acb8d]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/pwutil.c:
+	Add match_group_by_gid Defaults option to allow sites with slow
+	group lookups and a small number of groups in sudoers to match
+	groups by group ID instead of by group name.
+	[20714580da96]
+
+2016-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention "sudo -l command" bug fix.
+	[cb8ade186880]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Fix "sudo -l command" in the LDAP and SSS backends when the command
+	is not allowed.
+	[631038350b2a]
+
+2016-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c:
+	Use sudo_strsplit() instead of doing the equivalent manually.
+	[9eb6d1cc78bd]
+
+2016-08-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Move SIGPIPE bug fix to 1.8.18 where it belongs
+	[52509fd0100e]
+
+	* plugins/sudoers/defaults.c:
+	Fix memset size typo in previous commit.
+	[e00299f7c50f]
+
+	* plugins/sudoers/regress/visudo/test6.out.ok,
+	plugins/sudoers/regress/visudo/test6.sh:
+	Add regress for check_defaults() use-after-free bug.
+	[0b362678ca10]
+
+	* MANIFEST, plugins/sudoers/defaults.c:
+	Fix use-after-free in check_defaults(), reported by Radovan Sroka of
+	RedHat.
+	[ab3a4227c12f]
+
+2016-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	SIGPIPE bug fix
+	[24c9a12f7e59]
+
+	* src/signal.c:
+	Now that we ignore SIGPIPE in sudo we need to restore it at exec
+	time. Problem reported by Radovan Sroka of RedHat.
+	[3cfa7e3510ff]
+
+2016-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Fix appending to make_opts
+	[abe28b6b7663]
+
+	* NEWS:
+	Add Bug #753 and fix reference to Bug #752.
+	[e8c959e1cd6c]
+
+2016-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po, po/da.mo,
+	po/da.po, po/pt_BR.mo, po/pt_BR.po:
+	sync with translationproject.org
+	[219c3f0aeee7]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen pot files
+	[d0c56a4ff553]
+
+2016-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update with logging changes.
+	[f41beca23b99]
+
+	* plugins/sudoers/logging.c:
+	Avoid duplicate warnings when we cannot write to the log file. Also
+	send the warning in mail if possible.
+	[9b8509cff137]
+
+	* plugins/sudoers/iolog.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
+	Move the ignoring of I/O log plugin errors into the I/O log plugin
+	itself.
+	[25b7fd056614]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
+	Make the behavior when we cannot write to a log or audit file
+	configurable. File log failures are ignored by default for
+	consistency with syslog. Audit errors are ignored by default to
+	allow the admin to fix the issue. I/O log file errors are still
+	fatal by default since if I/O logging is activated it is usually to
+	have an audit trail. Bug #751
+	[dbd085e7c736]
+
+2016-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Make sure we print an error message to stderr (and not just send
+	mail) if do_logfile() fails. Bug #751
+	[7884a23a0cdc]
+
+2016-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c:
+	Separate out the supplemental group ID checks from the supplemental
+	group name checks in user_in_group(). We now call sudo_get_gidlist()
+	only when the group name in sudoers begins with a '#' (which is
+	seldom used).
+	[80534785d8b7]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil.h,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Cache the user's group IDs and group names separately and only
+	resolve group IDs -> names when needed. If the sudoers file doesn't
+	contain groups we will no longer try to resolve all the user's group
+	IDs to names, which can be expensive on some systems.
+	[8ce3564e896e]
+
+2016-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c:
+	Remove the "op" parameter from all the store_foo() functions except
+	store_list() where it is actually needed. For the others, a NULL
+	value indicates the setting was negated. This unconfuses static
+	analyzers (and perhaps humans too).
+	[fca031b57f15]
+
+	* plugins/sudoers/defaults.c:
+	Flags always have a NULL value. Regression introduced by refactor of
+	set_default_entry().
+	[71fe4fad097b]
+
+	* plugins/sudoers/defaults.c:
+	Set rc to true when setting a flag Defaults value.
+	[cf016b6aedd4]
+
+	* src/utmp.c:
+	suppress a cppcheck false positive
+	[0d44aa7cf05c]
+
+	* plugins/sudoers/defaults.c:
+	Refactor the error parts of set_default_entry() so the switch() is
+	mostly just calls to store_foo() functions. Avoids a lot of
+	duplicated error checking and silences a cppcheck false positive.
+	[1112b894007c]
+
+	* plugins/sudoers/defaults.c:
+	In set_default_entry() check for unsupported Defaults type.
+	[beb1ae20179f]
+
+	* lib/util/aix.c:
+	Add missing break in switch that sets the max limit for
+	RLIMIT_NOFILE. Found by cppcheck.
+	[39b1979b1b92]
+
+	* plugins/sudoers/defaults.c:
+	Check sudoers_initlocale return value and treat as oom. Coverity CID
+	141832
+	[b1cad9d6c49d]
+
+2016-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/match.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c:
+	Set runas_pw early and adjust runaslist_matches() to deal. Since we
+	now set runas_default early there is no need to call update_defaults
+	with SETDEF_RUNAS after sudoers has been parsed.
+	[35e0b08219a8]
+
+2016-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c:
+	Load sudoers group plugin via an early callback.
+	[0fc4382cd6e4]
+
+	* sudo.pp:
+	System Integrity Protection on Mac OS X won't allow us to write
+	directly to /etc or /var. We must install in /private/{etc,var}
+	instead.
+	[831c78241e78]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that fqdn, runas_default and sudoers_locale are parsed
+	early.
+	[beb4868c449e]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo_plugin.cat,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoreplay.cat,
+	doc/visudo.cat:
+	Regen for 1.8.18
+	[eb4feabb8fee]
+
+2016-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.h, plugins/sudoers/ldap.c,
+	plugins/sudoers/sssd.c:
+	Avoid passing around struct defaults when it is not needed. As a
+	result, we no longer need to include gram.h in the LDAP and SSSD
+	backends.
+	[14d0bfdc8bd2]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Instead of deferring setting early defaults until we have traversed
+	the entire defaults list, just defer running the callbacks.
+	Otherwise, if the last early default setting we see has a bad value
+	we won't set any defaults of that type even if there was an earlier
+	one that was valid.
+	[552863e5a097]
+
+	* plugins/sudoers/defaults.c:
+	Run callbacks once in set_default_entry() instead of each of the
+	store_foo() functions.
+	[b92b51c67845]
+
+2016-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Use /proc/cpuinfo on Linux instead of running lscpu
+	[450ea436dbe4]
+
+	* mkpkg:
+	If using GNU make on a multi-cpu system, use the -j flag to run make
+	jobs in parallel, up to the number of cpus/cores.
+	[7a6670de96dc]
+
+2016-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Only check SUDO_USER if euid is 0
+	[f42d00c94817]
+
+2016-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Initialize sudo_user based on the SUDO_USER environment variable if
+	present. This allows things like :Defaults:username editor=foo" to
+	work when visudo is run via sudo.
+	[a526d6f74198]
+
+2016-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Add function name in "command resumed" debug message
+	[e209f199a79f]
+
+	* src/exec_pty.c:
+	If waitpid() returns 0 or -1, display a warning, this should never
+	happen. Add a check for unhandled wait status (also should never
+	happen).
+	[983a0b79b527]
+
+	* plugins/sudoers/defaults.c:
+	Flag settings have a NULL value so we can't use that to test whether
+	an entry in struct early_default is set or not. Add a "set" member
+	and use that instead.
+	[68a7c0de9b0e]
+
+2016-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Explicitly check for a continued process with waitpid(2). Otherwise,
+	waitpid() will return 0 when the command is resumed after being
+	suspended, which we were treating the same as -1. Fixes suspend and
+	resume on Linux and probably others.
+	[54a464b116ad]
+
+	* plugins/sudoers/defaults.c:
+	Fix --with-fqdn, the value should be NULL since it is a flag.
+	[95bc8b82911e]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Add support for early defaults to the ldap and sssd backends.
+	[3a034360c177]
+
+2016-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Repair symlink check in sudo_edit_openat_nofollow() on systems
+	without O_NOFOLLOW, it must be done relative to dfd. Previously the
+	lstat() would always fail, possibly leading to a false positive.
+	Also add an early symlink check like in sudo_edit() while here.
+	[f72901c7f7cc]
+
+	* src/sudo_edit.c:
+	On systems that lack the O_NOFOLLOW open(2) flag, check in
+	sudo_edit_open() whether the path to be opened is symlink before
+	opening it. This is racey but we detect losing the last post-open
+	and it is better to fail early if possible. When editing a link to a
+	non-existent file, a zero-length file will be left behind but it is
+	too dangerous to try and remove it after the fact. Bug #753
+	[dac04f305262]
+
+	* src/sudo_edit.c:
+	Update debug_decl for sudo_edit_openat_nofollow() Remove unused
+	variables when O_NOFOLLOW is not present.
+	[8dc0afb1de58]
+
+2016-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/visudo.c:
+	Split set_default_entry() out of set_default() so we can call it
+	from check_defaults() to validate the defaults value. In visudo,
+	suppress warnings from update_defaults() and rely on
+	check_defaults() to provide warnings.
+	[7d9b50f42d0b]
+
+	* plugins/sudoers/defaults.c:
+	Split binding match code out of default_type_matches() into
+	default_binding_matches(). We can now use default_type_matches() in
+	check_defaults().
+	[c158768b12c5]
+
+	* plugins/sudoers/visudo.c:
+	Pass quiet flag to init_parser() and update_defaults() when doing
+	first parse of sudoers.
+	[3af76c1a0d84]
+
+2016-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Update defaults in visudo after sudoers has been edited so we pick
+	up locale changes. The init_defaults() function will now re-init the
+	sudoers locale.
+	[ceb099392289]
+
+2016-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/testsudoers.c:
+	Set sudoers locale before calling sudoersparse(). We don't need to
+	restore the user's locale since warnings are displayed in the user's
+	locale anyway.
+	[c44a38a496d1]
+
+	* plugins/sudoers/visudo.c:
+	Set the locale to the sudoers locale when parsing and restore the
+	user's locale afterward. Also set the warn/fatal locale helper
+	function so warning messages during a sudoers parse are displayed in
+	the user's own locale.
+	[a0b2cdb69d43]
+
+	* plugins/sudoers/logging.h:
+	Add forward decl of union sudo_defs_val to silence a gcc warning.
+	[9e717510f132]
+
+	* plugins/sudoers/sudoers.c:
+	Set the warn/fatal locale helper function in sudoers_policy_init()
+	so warning messages during sudoers loading are displayed in the
+	user's own locale.
+	[b6c7bab1ca80]
+
+	* plugins/sudoers/locale.c, plugins/sudoers/logging.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Move sudoers locale callback function to locale.c and user it in
+	visudo and testsudoers.
+	[7c4e9a71e252]
+
+	* plugins/sudoers/sudoers.c:
+	In cb_sudoers_locale() actually set the locale in addition to
+	storing its name. Otherwise, it won't take effect until sudoers
+	lookup time.
+	[ceb446c2168b]
+
+	* plugins/sudoers/defaults.c:
+	Fix regression that would cause early defaults entries to be set
+	multiple times.
+	[5f5cd02d5f0f]
+
+	* NEWS, configure, configure.ac:
+	sudo 1.8.18
+	[7c778904c39b]
+
+2016-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
+	Only set early defaults once, regardless of how many times the
+	variable is set in sudoers. This avoids running an early callback
+	more than once. For example, we don't want to call cb_fqdn() if sudo
+	is compiled with FQDN set but sudoers has "Defaults !fqdn".
+	[0c5d80939ea2]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
+	Make strings const in functions that set defaults as they are not
+	modified.
+	[d01f22ab1902]
+
+	* plugins/sudoers/sudoers.c:
+	In cb_fqdn() just return if the fqdn flag is set to false.
+	[0cb3d78aa944]
+
+2016-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c:
+	Implement callbacks for defaults flags (T_FLAG).
+	[936adcc98800]
+
+	* plugins/sudoers/sudoers.c:
+	add debug_decl for cb_runas_default and cb_sudoers_locale
+	[4667b1e14172]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
+	Convert fqdn to a callback and add it to the list of early defaults.
+	[df863787cf5e]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c:
+	Change defaults callbacks to take a union sudo_defs_val * instead of
+	a char *.
+	[c7730fa19e46]
+
+	* plugins/sudoers/defaults.c:
+	When updating defaults, process certain values fist since they can
+	influence how other defaults are parsed. Currently, runas_default
+	and sudoers_locale are processed early.
+	[32062737a1ae]
+
+2016-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke_util.c:
+	Fix typo introduced in last commit to fix fill_args() overflow
+	check.
+	[535d13b81c5d]
+
+	* plugins/sudoers/toke_util.c:
+	Fix underflow checl in fill_args().
+	[2c6852e65ad6]
+
+	* plugins/sudoers/toke_util.c:
+	Make sure we account for the trailing NUL when computing arg_size in
+	fill_args(). Bug #752
+	[c73c1ea4b230]
+
+	* plugins/sudoers/toke_util.c:
+	Make arg_size and arg_len unsigned since we do bitwise operations on
+	them.
+	[0a551c7a5e67]
+
+2016-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Only remove backup files as part of "make uninstall" when
+	INSTALL_BACKUP is set.
+	[c2541d2de89c]
+
+	* configure, configure.ac, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Only keep backups of installed files on HP-UX where you cannot
+	unlink a shared library that is in use.
+	[8763a1d0d515]
+
+2016-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Ignore a missing or insecure #includedir, it is not a fatal error.
+	[8a82818c9f0d]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Make sure we always call sudoerserror() on error in
+	read_dir_files(), otherwise sudo will not treat it as a fatal error.
+	[1a38da425ca0]
+
+2016-06-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Set the sudoers locale before opening the sudoers file. Previously
+	the sudoers locale was used when evaluating sudoers but not during
+	the inital parse. Bug #748
+	[c8deb0da75b4]
+
+	* plugins/sudoers/locale.c:
+	Add debugging
+	[5fbe2f109b92]
+
+	* plugins/sudoers/Makefile.in:
+	Don't link test programs with the sudoers-specific locale code if we
+	don't need to.
+	[41224154534e]
+
+	* plugins/sudoers/Makefile.in:
+	sudoreplay does not need to link with the sudoers-specific locale
+	code.
+	[348638a68f69]
+
+2016-06-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	new_digest was prototyped as static but not explicitly declared
+	static.
+	[52949a024acb]
+
+	* configure, configure.ac:
+	Some versions of HP-UX 11.11 do not expose struct sockaddr_ext if
+	_XOPEN_SOURCE_EXTENDED is defined. Only define
+	_XOPEN_SOURCE_EXTENDED if we can still compile net/if.h.
+	[0189ff7daa63]
+
+	* plugins/sudoers/Makefile.in:
+	Some versions of HP-UX make will ignore suffix rules if they are
+	empty.
+	[cffeee232752]
+
+2016-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Don't skip debug printfs in handle_sigchld() just because execve()
+	returned an error.
+	[0cf2a9351740]
+
+	* include/compat/charclass.h, include/sudo_compat.h, lib/util/aix.c,
+	lib/util/getaddrinfo.c, lib/util/sudo_debug.c,
+	plugins/sudoers/insults.h,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/sudoers_debug.c:
+	Add definition of nitems for those without it and use it throughout.
+	[4b30c8834fdd]
+
+2016-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Update copyright year.
+	[638c964e44fd]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.17p1
+	[bc30a172370c]
+
+	* src/sudo.c, src/sudo.h:
+	Set user groups in exec_setup() if they were not already set by
+	policy_init_session(). Bug #749
+	[3bf16489800c]
+
+2016-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Point the reader to the sudoers manual for the list of supported
+	arguments after the plugin path.
+	[40cbfa5deeb1]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	forgot to update date in last commit
+	[3872a46e229b]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Fix typo; cn=default should be cn=defaults
+	[06e097667465]
+
+2016-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Fold lines at 80 characters for the clean: target
+	[651623231cd8]
+
+	* lib/util/Makefile.in:
+	Remove mksiglist, siglist.c, mksigname, signame.c as part of
+	"distclean"
+	[ed7f58685633]
+
+2016-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po:
+	sync with translationproject.org
+	[a3bb8c15ef3d]
+
+	* plugins/sudoers/sssd.c:
+	LDAP sudoers doesn't support negated users, groups or netgroups.
+	[d6585245c24d]
+
+2016-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Bug #746
+	[e0bba3ae78c2]
+
+	* plugins/sudoers/match.c:
+	When matching paths with glob(3), check returned matches against
+	user_cmnd first if it is fully-qualified. This avoids a lot of
+	needless stat(2) calls and avoids a mismatch between safe_cmnd and
+	argv[0] if there are multiple matches with the same inode/dev due to
+	links. Bug #746.
+	[29bdba0cf2eb]
+
+	* NEWS:
+	Add execve failure in pty bug fix.
+	[941672cc6793]
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po:
+	sync with translationproject.org
+	[a4f789cedecc]
+
+	* src/exec_pty.c:
+	In handle_sigchld() fix the return value when we've already received
+	an exec error. We don't want to overwrite the error status but we do
+	need to indicate that the command is no longer running. Fixes as
+	hang on execve(2) error when running in a pty.
+	[797bed2c39a7]
+
+	* src/exec.c, src/exec_common.c:
+	Move sudo_debug_execve() call into sudo_execve().
+	[ab2ea3459a7c]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/sr.mo,
+	po/sr.po, po/sv.mo, po/sv.po:
+	sync with translationproject.org
+	[046ba9a0fca8]
+
+2016-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	update for 1.8.17 final
+	[a2f02775aba5]
+
+	* lib/util/aix.c:
+	Fix setting of hard stack limit when stack_hard is not specified in
+	/etc/security/limits. When 64-bit resource limits are supported we
+	can use the default value of 8388608 512-byte blocks directly. We
+	should only resort to using RLIM_SAVED_MAX for 32-bit resource
+	limits.
+	[cc4933fc41bd]
+
+2016-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[4ab85a46cf63]
+
+2016-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sssd.c:
+	Ignore empty ipa_hostname
+	[9421ade7b47f]
+
+	* plugins/sudoers/sssd.c:
+	Better martching of ipa_hostname in sssd.conf
+	[abd53491cb4b]
+
+2016-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.ac, pathnames.h.in,
+	plugins/sudoers/sssd.c:
+	Use the value of ipa_hostname from /etc/sssd/sssd.conf if present
+	instead of the system hostname.
+	[3f5cffcd8432]
+
+2016-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sssd.c:
+	When matching host, short-circuit the loop when we get a match. Only
+	check username as part of the netgroup when netgroup_tuple is
+	enabled.
+	[2eab4070dcf7]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Avoid using !strcmp()
+	[f976b3d973e0]
+
+2016-06-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sssd.c:
+	SSSD doesn't handle netgroups, we have to ensure they are correctly
+	filtered in sudo. The rules may contain mixed sudoUser specification
+	so we have to check not only for netgroup membership but also for
+	user and group matches. Adapted from a patch from Daniel Kopecek.
+	[50d8d88bcc28]
+
+2016-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Return PAM_CONV_ERR from the conversation function if getpass
+	returns NULL or the user pressed ^C.
+	[bec7e2ec26ff]
+
+	* plugins/sudoers/base64.c:
+	Make base64 decoding table-driven.
+	[2d001c111552]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Back out cfa26b99228f, it was already fixed differently. Caught by
+	regress checks.
+	[0584f80e9951]
+
+2016-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Allow double-quoted groups and netgroups to be part of a Defaults
+	spec. From Daniel Kopecek.
+	[cfa26b99228f]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	The sudoers.ldap manual is installed in section 4 or 5, not 1m or 8.
+	Also fix the section for ldap.conf cross-references.
+	[eb1c0a2b84a1]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Fix copy pasta, "sudoNotAfter" not "sudoNotBefore". Add missing word
+	"order" in a sentence describing sudoOrder.
+	[653cb783f89b]
+
+	* plugins/sudoers/sssd.c:
+	For sudo -ll (long list) print the SSSD role just like we do for the
+	LDAP backend. Adapted from sudo-1.8.6p3-sssdrulenames.patch
+	[46f962b1f3ef]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Setting timestamp_timeout less than zero only lasts until the next
+	reboot. Adapted from a RedHat patch.
+	[f8ce1dfebfe9]
+
+	* po/it.mo, po/it.po, po/nb.mo, po/nb.po:
+	sync with translationproject.org
+	[31b55426358b]
+
+2016-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/conversation.c:
+	fputs() is now specified as returning non-negative on success, not
+	explicitly zero. Fixes a failure on glibc.
+	[55f8a25d4af4]
+
+	* src/conversation.c:
+	Don't try to dereference replies[] if it is a NULL pointer.
+	[c4fdd838f2f5]
+
+	* plugins/sudoers/policy.c:
+	sudo_version should be unsigned
+	[7719d425c65a]
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/ca.mo,
+	po/ca.po, po/cs.mo, po/cs.po, po/da.mo, po/da.po, po/de.mo,
+	po/de.po, po/fr.mo, po/fr.po, po/hr.mo, po/hr.po, po/ja.mo,
+	po/ja.po, po/pl.mo, po/pl.po, po/sk.mo, po/sk.po, po/sv.mo,
+	po/sv.po, po/uk.mo, po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo,
+	po/zh_CN.po:
+	sync with translationproject.org
+	[e40cdc972d19]
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, plugins/sudoers/po/ko.mo,
+	plugins/sudoers/po/ko.po, po/ko.mo, po/ko.po:
+	Korean translation for sudo and sudoers from translationproject.org.
+	[188ffbed5bf2]
+
+	* NEWS, plugins/sudoers/auth/pam.c:
+	Ignore PAM_SESSION_ERR from pam_open_session() since this can
+	apparently happen on systems using Solaris-derived PAM. Other errors
+	from pam_open_session() are treated as fatal. This avoids the
+	"policy plugin failed session initialization" error message seen on
+	some systems.
+	[0f7f3e7ead21]
+
+2016-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, src/exec_pty.c:
+	Don't read from stdin when flushing final buffers in blocking mode.
+	Reading from the pipe can block too if the other end is not closed.
+	[a651f913a1ef]
+
+2016-05-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention visudo -x change.
+	[2fd35df055b2]
+
+	* plugins/sudoers/regress/sudoers/test1.json.ok,
+	plugins/sudoers/regress/sudoers/test14.json.ok,
+	plugins/sudoers/regress/sudoers/test15.json.ok,
+	plugins/sudoers/regress/sudoers/test16.json.ok,
+	plugins/sudoers/regress/sudoers/test2.json.ok,
+	plugins/sudoers/visudo_json.c:
+	There's no need to escape forward slashes in JSON output. While it
+	is legal to escape a forward slash, it is not required.
+	[044710f516a9]
+
+	* doc/UPGRADE:
+	Document that in 1.8.12 sudo started being able to check the NIS
+	domain on Solaris.
+	[bced94478c0e]
+
+2016-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Better description of the I/O logging pipe issue.
+	[6eee2f8a1fae]
+
+	* src/exec_pty.c:
+	In del_io_events(), avoid reading from the pty master in blocking
+	mode. We now do two passes, one with SUDO_EVLOOP_NONBLOCK and
+	another that could block if stdin is a pipe. This ensures we consume
+	the pipe until EOF.
+	[564ae2b4c305]
+
+	* lib/util/event.c:
+	Improve debug info in sudo_ev_add() and sudo_ev_del()
+	[ca839439ff22]
+
+	* src/exec_pty.c:
+	In pty_close(), call del_io_events with the SUDO_EVLOOP_ONCE flag so
+	the event loop will exit after a single run through. Otherwise, we
+	may hang at exit on non-BSD systems.
+	[e6c38d5a341b]
+
+2016-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* po/sudo.pot:
+	regen
+	[18a4570be506]
+
+2016-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Bump I/O buffer size to 64K. We don't use PIPE_BUF or _PC_PIPE_BUF
+	for this because that corresponds to the value for atomic pipe
+	writes. The actual pipe buffer is much larger on modern systems and
+	64K is what BSD and Linux support for large pipe buffers.
+	[3b5d995966ef]
+
+	* NEWS:
+	I/O logging bug fix
+	[934d755ac12c]
+
+	* src/exec_pty.c:
+	Don't use SUDO_EVLOOP_NONBLOCK when flushing buffers at pty close
+	time, only when the user suspends sudo. Fixes a problem where all
+	buffers might not get flushed at exit when logging I/O. Reproducible
+	via "sudo tar cf - foo | (cd /tmp && sudo tar xf -)" on OpenBSD.
+	[bbe0e18739ec]
+
+2016-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	Don't try to fflush(export_fp) or ferror(export_fp) if export_fp is
+	NULL, which can happen on the error path.
+	[ccfb4dd260fa]
+
+	* plugins/sudoers/sudoers.c, src/exec.c, src/exec_pty.c, src/sudo.c,
+	src/tgetpass.c:
+	O_NOCTTY has no effect when opening /dev/tty as the open can only
+	succeed if there is already a controlling tty.
+	[9ca106c499b2]
+
+	* src/sudo.c:
+	Do not need to open /dev/tty with O_NONBLOCK, it doesn't block on
+	first open like a physical terminal. By definition, if you have a
+	controlling tty, the first open (which might block) has already
+	occurred.
+	[15a5f006836a]
+
+	* src/selinux.c:
+	Use O_NOCTTY when opening a tty.
+	[5f9fd6458be4]
+
+	* src/Makefile.in:
+	regen
+	[105ef4533724]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	No need to set pass to NULL after freeing at the end of the loop it
+	since it is already set to NULL each time through the loop.
+	[2657b0b4260d]
+
+2016-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	SELinux fixes in 1.8.17.
+	[f743cf0d9c62]
+
+	* plugins/sudoers/logging.h, plugins/sudoers/logwrap.c:
+	Check fprintf() return value in writeln_wrap() and return the number
+	of characters actually written, or -1 on error.
+	[4739e0f58fa3]
+
+	* src/conversation.c:
+	Check fputs() return value.
+	[e85778cbe0e3]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Do not write directly to stdout/stderr, use sudo_printf which calls
+	the conversation function.
+	[e86d5ed4dca7]
+
+	* plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/securid5.c:
+	Do not write directly to stdout/stderr, use sudo_printf which calls
+	the conversation function.
+	[002a30fdb4e0]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/visudo_json.c:
+	Use ferror() after fflush() to check the error status of the stdio
+	stream we wrote to.
+	[fa1db13fe9ac]
+
+2016-05-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c:
+	printf() returns < 0 on error, not explicitly -1
+	[2a2385b941de]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo_plugin.cat,
+	doc/sudoers.ldap.cat, doc/sudoreplay.cat, doc/visudo.cat:
+	Regen for 1.8.17
+	[e24b0f944000]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that you need to preserve EDITOR and/or VISUAL for
+	env_editor to be useful.
+	[ef0ce8917307]
+
+	* src/selinux.c:
+	Fix last commit, now that argc is not reset we need to explicitly
+	start the copy from argv[1]. From Daniel Kopecek
+	[f52403ef587a]
+
+2016-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/selinux.c:
+	cosmetic change to warning string
+	[a2893e3f9b70]
+
+	* plugins/sudoers/auth/pam.c:
+	Avoid adding an extraneous warning string to sudoers.pot.
+	[6b07043b48f7]
+
+	* lib/util/snprintf.c:
+	Use EOVERFLOW, not ENOMEM for overflow conditions. For snprintf()
+	and vsnprintf(), POSIX says we should return -1 and set errno to
+	EOVERFLOW if the size param is > INT_MAX; also zero out the string
+	in this case (not mandated by POSIX) for safety.
+	[294720fc981a]
+
+2016-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Now that pam_open_session() failure is fatal we should print and log
+	an error from it. Bug #744
+	[0e98a92ef910]
+
+	* src/selinux.c:
+	Repair SELinux support, broken by 397722cdd7ec. From Daniel Kopecek.
+	[1246583c7c1f]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Remove sudo_mkpwcache() and sudo_mkgrcache(). We now create the
+	caches as needed on demand. Also remove calls to sudo_freepwcache()
+	and sudo_freegrcache() that are immediately followed by execve(),
+	they are not needed.
+	[60448afe813d]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Eliminate use of setpwent()/endpwent() and setgrent()/endgrent().
+	Sudo never iterates over the passwd or group file. Rename
+	sudo_set{pw,gr}ent() -> sudo_mk{pw,gr}cache() and use
+	sudo_free{pw,gr}cache() instead of sudo_end{pw,gr}ent().
+	[66e6f5e7b51b]
+
+2016-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.h:
+	Remove unnecessary NULL checks in the RUNAS_CHANGED macro. The only
+	place where the pointers could be NULL is in visudo_json.c but we
+	already check for "next" being NULL there. Quiets a cppcheck
+	warning.
+	[a0d84832c154]
+
+2016-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	In replay_session() free iov at the end of the function (if needed)
+	instead of after processing each line from the timing file. Coverity
+	CID 104843.
+	[5112f514af87]
+
+	* plugins/sudoers/sudoreplay.c:
+	Add io_log_read() and io_log_gets() to hide differences between
+	gzread/fread and gzgets/fgets. Check for premature EOF and error
+	from io_log_read(). Also sanity check the index in the timing file.
+	Coverity CID 104630.
+	[6a3b9932f567]
+
+	* src/exec_pty.c:
+	Break up io_callback() into read_callback() and write_callback() to
+	make it clear that we can't get an event with both read and write
+	set.
+	[cd3a1e182dd4]
+
+2016-05-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	In io_callback() make sure we clear SUDO_EV_READ if we close the fd.
+	It should not be possible for SUDO_EV_READ to be set when revent is
+	non-NULL but this makes static analyzers happier. Coverity CID
+	104124.
+	[7acc249fa098]
+
+	* plugins/sudoers/ldap.c:
+	In sudo_krb5_copy_cc_file() move the close(ofd) to the done: label
+	so we only have to cleanup in one place. Coverity CID 104577.
+	[0f189e70c59d]
+
+	* plugins/sudoers/ldap.c:
+	Fix memory leak in sudo_netgroup_lookup() in the non-error case.
+	Coverity CID 104572, 104573, 104574, 104575.
+	[7f9fb7a360b7]
+
+	* plugins/sudoers/ldap.c:
+	Fix fd leak in sudo_krb5_copy_cc_file() if restore_perms() fails.
+	Coverity CID 104571.
+	[d9434cdfb73c]
+
+	* plugins/sudoers/sudoreplay.c:
+	Free the events and event base before returning from
+	replay_session(). Coverity CID 104116, 104117.
+	[321216089e4a]
+
+	* src/sudo_edit.c:
+	In sudo_edit_create_tfiles(), fix fd leak if sudo_edit_mktemp()
+	fails. Coverity CID 104114.
+	[713de09ff956]
+
+	* src/sudo_edit.c:
+	Fix fd leak in sudo_edit_open_nonwritable() if dir_is_writable()
+	returns an error. Coverity CID 104113.
+	[314a57004f00]
+
+	* src/sudo_edit.c:
+	Fix memory leak of sesh_args in selinux_edit_copy_tfiles(). Coverity
+	CID 104112.
+	[ac7f0cbd07c9]
+
+	* plugins/sudoers/visudo.c:
+	Fix memory leak in get_editor() if resolve_editor() fails with an
+	error. Coverity CID 104107.
+	[e355b1f45bcb]
+
+	* src/sudo.c:
+	Fix memory leak on error if sudo_new_key_val() fails. Coverity CID
+	104103.
+	[c2ee1557aef2]
+
+	* plugins/sudoers/visudo.c:
+	Ignore the return value of the initial sudoersparse(), before we
+	have actually edited any files. Coverity CID 104078.
+	[184d9c6aec65]
+
+	* src/exec.c:
+	Ignore the result of send() on exec error, if it fails the other end
+	of the pipe is gone and we are headed for exit. Coverity CID 104066.
+	[cdcd7dfcbca1]
+
+	* plugins/sudoers/toke_util.c:
+	In fill_args() clean up properly if there is an internal overflow
+	(which should not be possible). Coverity CID 104569.
+	[0bc710e91ec4]
+
+	* plugins/sudoers/gc.c:
+	Fix logic inversion in sudoers_gc_remove(), currently unused.
+	Coverity CID 104568
+	[e29df8da11ea]
+
+2016-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	In io_mkdirs(), change the order from stat then mkdir, to mkdir then
+	stat. This more closely matches what "mkdir -p" does. Coverity CID
+	104120.
+	[e462528ff7ea]
+
+	* plugins/sudoers/timestamp.c:
+	In ts_mkdirs(), change the order from stat then mkdir, to mkdir then
+	stat. This more closely matches what "mkdir -p" does. Coverity CID
+	104119.
+	[c0c0e2662883]
+
+	* plugins/sudoers/sudoers.c:
+	Newer versions of Ubuntu have switched from using the "admin" group
+	to the "sudo" group to align with Debian.
+	create_admin_success_flag() now accepts either one.
+	https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1387347
+	[17b4d725dac4]
+
+	* plugins/sudoers/timestamp.c:
+	Cast off_t printed via printf(3) instead of assuming it is long
+	long.
+	[b1d398f4a8dc]
+
+	* plugins/sudoers/sudoers.c:
+	Instead of using stat(2) to see if the admin flag file exists and
+	creating it if not, just try to create the file and treat EEXIST as
+	a non-error. Coverity CID 104121.
+	[bd58b0a35a3c]
+
+	* MANIFEST, plugins/sample/README:
+	README file for the sample plugin that tells the user how to build,
+	install and enable it.
+	[8d7096ce78cc]
+
+	* plugins/sample/sample_plugin.c:
+	Fix compilation error and export sample_policy struct. From Michael
+	Evans
+	[5280c1576e7f]
+
+	* NEWS:
+	Update for 1.8.17
+	[979688a5ef13]
+
+	* configure, configure.ac:
+	Sudo 1.8.17
+	[09311b2e9697]
+
+	* plugins/sudoers/logging.c:
+	Check return value of restore_perms() in vlog_warning(). Coverity
+	CID 104079.
+	[86555dd0942d]
+
+	* plugins/sudoers/editor.c:
+	Fix memory leaks in resolve_editor() in the error path. Coverity CID
+	104109, 104110
+	[6ac3f7e3ada9]
+
+	* plugins/sudoers/policy.c:
+	Fix memory leak of gid_list in sudoers_policy_exec_setup() in the
+	error path. Coverity CID 104111.
+	[eac1e9489367]
+
+	* plugins/sudoers/logging.c:
+	Fix fd leak in do_logfile() if we fail to lock the log file.
+	Coverity CID 104115.
+	[164a693207a8]
+
+	* plugins/sudoers/sssd.c:
+	Fix memory leak of sss_result in sudo_sss_lookup() Coverity CID
+	104106
+	[7dcee1e6d76f]
+
+	* plugins/sudoers/iolog.c:
+	Fix fd leak in open_io_fd() if gzdopen/fdopen fails. Coverity CID
+	104105
+	[c4c2848c1167]
+
+	* plugins/sudoers/iolog.c:
+	Fix fd leak in io_nextid() in error path. Coverity CID 104104
+	[8920cdaab5bd]
+
+2016-05-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/timestamp.c:
+	Check lseek() return value. Coverity CID 104061.
+	[bf3bb4c80cfc]
+
+	* plugins/sudoers/timestamp.c:
+	Ignore ts_write() return value when disabling an entry with a bogus
+	timestamp. We ignore the timestamp entry even it doesn't succeed.
+	Coverity CID 104062.
+	[5e5925ebbc75]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/match.c,
+	plugins/sudoers/tsgetgrpw.c, src/exec.c, src/exec_pty.c, src/sudo.c:
+	Cast the return value of fcntl() to void when setting FD_CLOEXEC.
+	Coverity CID 104063, 104064, 104069, 104070, 104071, 104072, 104073,
+	104074
+	[48720d2f6658]
+
+	* plugins/group_file/getgrent.c:
+	Cast the return value of fcntl() to void when setting FD_CLOEXEC.
+	Coverity CID 104075, 104076, 104077.
+	[7fe1d9f97321]
+
+	* plugins/sudoers/env.c:
+	Avoid a false positive. Coverity CID 104056.
+	[0256978219a6]
+
+	* plugins/sudoers/visudo_json.c:
+	Avoid calling fclose(NULL) on error in export_sudoers(). Coverity
+	CID 104091.
+	[2f73d86ab929]
+
+	* plugins/sudoers/toke_util.c:
+	In fill_args(), check for "arg_size == 0" instead of
+	"sudoerslval.command.args == NULL" since the latter leads Coverity
+	to imply that sudoerslval.command.args could be NULL later on.
+	Coverity CID 104093.
+	[bab505438881]
+
+	* plugins/sudoers/sudoers.c:
+	Avoid calling fclose(NULL) if the sudoers file is not secure and
+	restore_perms() fails. Coverity CID 104090.
+	[150db126c221]
+
+2016-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.h, plugins/sudoers/toke_util.c:
+	In fill_args(), replace loop that increments arg_size() with a
+	simple add and mask. Should prevent a false positive from Coverity
+	CID 104094.
+	[411c7e398286]
+
+	* plugins/sudoers/sudoreplay.c:
+	In parse_expr(), move the "bad" label after the "default" case in
+	the switch(), not before it. This seemed to confuse Covertity,
+	resulting in a false positive, CID 104095.
+	[4371f26995fb]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	For "sudoreplay -l", not all predicates may be shortened to a single
+	character. Both 'c' and 't' have more than one possibility.
+	[29a5a9a313e2]
+
+	* src/exec.c, src/exec_pty.c, src/sudo.c:
+	pid_t is defined by POSIX as a signed integer type so we don't need
+	a cast when comparing to -1.
+	[98f0a86260a0]
+
+	* src/exec.c:
+	In dispatch_signal() for stopped processes check for tcgetpgrp()
+	returning -1. Also change checks from "saved_pgrp != -1" to "fd !=
+	-1". Coverity CID 104098.
+	[42ac4ad85900]
+
+	* src/selinux.c:
+	In relabel_tty() always jump to bad: on error, regardless of the
+	value of se_state.enforcing. On error, return -1 if enforcing, else
+	0. Coverity CID 104099.
+	[db1a54d718f1]
+
+	* config.h.in, configure.ac:
+	Define NO_LEAKS when sudo is built with Coverity.
+	[f4209b9ade8c]
+
+	* src/exec_pty.c:
+	In io_callback() if we write the complete buffer and find that there
+	is no associated reader just return as there is nothing else to be
+	done. In practice is it not possible for SUDO_EV_READ to be set if
+	revent is NULL but an early return is harmless and possibly easier
+	to understand. Coverity CID 104124.
+	[3b3eb45b701e]
+
+	* src/sudo_edit.c:
+	Handle read() returning -1 when creating temporary files. Coverity
+	CID 104100
+	[e82af51e4f48]
+
+	* plugins/sudoers/policy.c:
+	Fix cut and paste error when checking cols for 0. Coverity CID
+	104081
+	[22a3b7d9bce1]
+
+	* plugins/sudoers/pwutil.c:
+	Use a single debug message for cache hit or store to avoid another
+	situation where they get out of sync. Bug #743
+	[4cf484e9b016]
+
+	* plugins/sudoers/pwutil.c:
+	Sync the "cache hit" debug messages with the "cached" debug
+	messages. This fixes a bug where we could dereference a NULL pointer
+	when we look up a negative cached entry which is stored as a NULL
+	passwd or group struct pointer. Bug #743.
+	[1d13341d53ec]
+
+2016-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Remove the check for __sprintf_chk when checking for
+	_FORTIFY_SOURCE, Some implementations are purely header-file based.
+	As long as we can link a test program using sprintf() when
+	_FORTIFY_SOURCE=2 it should be safe to use.
+	[910af8ba4666]
+
+	* config.h.in, configure, configure.ac:
+	Remove configure checks for dev_t, id_t, ino_t, ptrdiff_t, size_t
+	and ssize_t. These have been specified by either ANSI C or POSIX for
+	long enough that if the system doesn't support them, it is unlikely
+	to be able to compile sudo anyway.
+	[c9fd433cfe27]
+
+	* src/sudo.c:
+	Do group setup in policy_init_session() before calling out to the
+	plugin. This makes it possible for the pam_group module to change
+	the group in pam_setcred(). It's a bit bogus since pam_setcred() is
+	documented as not changing the group or user ID, but pam_group is
+	shipped with stock Linux-PAM so we need to support it.
+	[814cda602541]
+
+2016-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Add missing newline when logging to a file (not syslog) and
+	loglinelen is set to a non-positive number. Bug #742
+	[ef0a5428a574]
+
+2016-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	style fix; fork_cmnd should start on a new line
+	[e8211fe0f8d7]
+
+2016-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, src/signal.c, src/sudo.c, src/tgetpass.c:
+	Ignore SIGPIPE for the duration of sudo and not just in a few select
+	places. We have no control over what nss, PAM modules or sudo
+	plugins might do so ignoring SIGPIPE is safest.
+	[7c919101b8ec]
+
+	* src/selinux.c:
+	Use string_to_security_class() instead of pulling SECCLASS_CHR_FILE
+	from flask.h. Avoids a warning with new SELinux includes.
+	[24f357b419c4]
+
+2016-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	When determining whether or not "sudo -l" or "sudo -b" should prompt
+	for a password, take all sudoers sources into account. In other
+	words, if both file and ldap sudoers sources are in use, "sudo -v"
+	will now require that all entries in both sources be have NOPASSWD
+	(file) or !authenticate (ldap) in the entries.
+	[51e2a5ecacc6]
+
+2016-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/sudo_auth.h:
+	If the auth_type setting in /etc/security/login.cfg is set to
+	PAM_AUTH but pam_start() fails, fall back to use AIX authentication.
+	Skip the auth_type check if sudo is not compiled with PAM support.
+	[cdbe432c465c]
+
+2016-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	The header for sudo.conf(5) should be SUDO.CONF(5) not SUDO(5).
+	[d3afd5bd550f]
+
+2016-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/policy.c:
+	hook_version and hook_type are unsigned so use 0, not -1 in the
+	final (empty) entry. Quiets a warning on Solaris Studio 12.2.
+	[4947de8e35b7]
+
+2016-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, config.h.in, configure, configure.ac,
+	plugins/sudoers/auth/pam.c:
+	Work around an ambiguity in the PAM spec with respect to the
+	conversation function. It is not clear whether the "struct
+	pam_message **msg" is an array of pointers or a pointer to an array.
+	Linux-PAM and OpenPAM use an array of pointers while Solaris/HP-
+	UX/AIX uses a pointer to an array. Bug #726.
+	[d2b926e2f7d6]
+
+2016-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po, po/eo.mo,
+	po/eo.po, po/it.mo, po/it.po, po/ja.mo, po/ja.po, po/ru.mo,
+	po/ru.po, po/sr.mo, po/sr.po:
+	sync with translationproject.org
+	[271c6738213d]
+
+2016-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Bug #738
+	[9e7974480cdc]
+
+2016-02-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po, po/nb.mo,
+	po/nb.po:
+	sync with translationproject.org
+	[6aa32f6e5240]
+
+	* lib/util/regress/fnmatch/fnm_test.in:
+	Better test for negated character classes.
+	[635e3c17bca1]
+
+	* lib/util/regress/fnmatch/fnm_test.in:
+	Add test for negated character class
+	[0d813e098864]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/fr.mo, po/fr.po, po/pl.mo,
+	po/pl.po, po/pt_BR.mo, po/pt_BR.po, po/uk.mo, po/uk.po, po/vi.mo,
+	po/vi.po, po/zh_CN.mo, po/zh_CN.po:
+	sync with translationproject.org
+	[9398ffdc7719]
+
+	* NEWS:
+	sync
+	[a27a7d40491e]
+
+	* lib/util/fnmatch.c:
+	Fix negation of character classes.
+	[aed07c013a41]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Fix the check for whether a user is allowed to lists another user's
+	privileges. The "matched" variable is not boolean, it can also have
+	the value UNSPEC so we need to check explicitly for true. Bug #738
+	[e8ed706fda03]
+
+	* plugins/sudoers/auth/pam.c:
+	Log the number of PAM messages in the conversation function at debug
+	level.
+	[3f16eea5875f]
+
+2016-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Don't check for posix_spawn() or posix_spawnp() if we were unable to
+	find spawn.h. This should only be a problem on systems with broken
+	headers. Bug #730
+	[5e5b0646dca4]
+
+2016-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	update for 1.8.16
+	[bad5e6534f39]
+
+	* doc/CONTRIBUTORS, plugins/sudoers/sudoers2ldif:
+	Fix documented bug with duplicate role names and turn on perl
+	warnings. Based on a diff from Aaron Peschel
+	[344a1c1f5c93]
+
+2016-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/aix.c:
+	Add declaration of getauthdb() for AIX 5.1
+	[f758960bcfd6]
+
+2016-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[e61e1241f15f]
+
+	* plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po:
+	sync with translationproject.org
+	[2f3dea24199b]
+
+	* INSTALL:
+	Add a note that --with-solaris-audit is only for Solaris 11 and
+	above. Bug #737
+	[6722331c2830]
+
+2016-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Remove last remnants of the deprecated --with-stow option.
+	[8616d6de7ecd]
+
+	* src/Makefile.in:
+	src/load_plugins.c needs _PATH_SUDO_CONF so allow it to be
+	overridden via the Makefile like other consumers of _PATH_SUDO_CONF.
+	Bug #735
+	[10148ef883ec]
+
+2016-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, include/sudo_util.h, lib/util/aix.c,
+	lib/util/getgrouplist.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil.h, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/set_perms.c, src/sudo.c:
+	Add an administrative domain to the passwd/group cache key for AIX
+	which can have different name <-> ID mappings depending on whether
+	the database is local, LDAP, etc.
+	[5319c11aefe9]
+
+	* mkpkg, sudo.pp:
+	Fedora dropped "core" from the name some time ago so just match on
+	f[0-9] for the rpm distro name provided by pp. Since the version
+	numbers of Fedora and RHEL are so different switch to defining
+	variables to indicate which features should be enabled. Works for
+	Fedora 23.
+	[4ec50b352293]
+
+2016-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg, sudo.pp:
+	Treat fedora core like centos/rhel for package building.
+	[0dfc607d07a1]
+
+2016-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/parser/check_fill.c:
+	Plug some memory leaks in the tests.
+	[ce76ba538867]
+
+	* plugins/sudoers/toke_util.c:
+	If realloc of sudoerslval.command.args fails, reset
+	sudoerslval.command.args as well as arg_len and arg_size after
+	freeing sudoerslval.command.args.
+	[6481bad56e6a]
+
+	* src/exec_pty.c:
+	When freeing the iobs after pty tear-down, also free the associated
+	event structures. Quiets a memory leak warnings from address
+	sanitizer and valgrind.
+	[f19c689a2ded]
+
+2016-01-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	iolog_compress should be bool, not int
+	[b437123a242b]
+
+	* plugins/sudoers/visudo.c:
+	Quiet address sanitizer leak detector.
+	[b7ce672331f6]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
+	plugins/sudoers/gc.c, plugins/sudoers/sudoers.h:
+	Simple garbage collection (really a to-be-freed list) for the
+	sudoers plugin. Almost identical to what sudo.c uses. Currenly only
+	the environment strings are collected at exit time which is enough
+	to quiet address sanitizer's leak detector.
+	[47f32e047b1a]
+
+	* src/sudo.c:
+	Rename gc_cleanup to gc_run and remove I/O plugins from the plugin
+	list when freeing them.
+	[ea640f0b46f9]
+
+	* src/sudo.c:
+	Free up the garbage via an atexit() handler instead of requiring a
+	call to gc_exit.
+	[cc9c96d88595]
+
+	* src/sudo_edit.c:
+	Plug a memory leak in sudo_edit.
+	[cab9a13a669b]
+
+2016-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	mention --enable-asan
+	[ee2bc0f60c8b]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Try to deconfuse static analyzers a bit.
+	[7e728c76f5df]
+
+	* plugins/sudoers/sssd.c:
+	Avoid possible NULL deref found by clang analyzer.
+	[8bb3cbfe0446]
+
+	* config.h.in, configure, configure.ac:
+	Add --enable-asan configure flag to enable address sanitizer
+	[8aae250fb68e]
+
+	* src/sudo.c, src/sudo_plugin_int.h, src/ttyname.c:
+	Add support for garbage collecting info passed to the plugin before
+	exit to appease address sanitizer's leak detector (and valgrind's
+	leak checker). We can't free these sooner since the plugin may be
+	using the memory. For plugin API 2.0 it should be make clear that
+	the plugin must make a copy of the data in the arrays passed in to
+	the plugin's open() function. Only enabled if NO_LEAKS is defined.
+	[8458bcb165d8]
+
+	* plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c:
+	auth_getpass() returns a dynamically allocated copy of the plaintext
+	password which needs to be freed after checking (and clearing) it.
+	[28d2c83c3ac4]
+
+	* src/sudo.c:
+	Remove sudo_fatalx() calls from format_plugin_settings().
+	[96a18a3ccc49]
+
+	* plugins/sudoers/sssd.c:
+	fn_free_result() (aka sss_sudo_free_result() in sss_sudo.c) handles
+	a NULL poiner so there's no need to check before calling it. Add
+	missing initialization of sss_sudo_result to NULL in
+	sudo_sss_setdefs().
+	[fa1c8eaed6ac]
+
+	* plugins/sudoers/sssd.c:
+	Add missing return when user is not found in sudo_sss_result_get().
+	Previously we fell through to the default case which just logged a
+	debug message and returned so this just avoids the extra (generic)
+	debug message.
+	[68c2201f3a85]
+
+2016-01-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/gettime.c:
+	Fix a warning on AIX.
+	[4ebc19a143ff]
+
+	* src/sudo.c:
+	Pass updated user_env_out, not envp, to the I/O open function.
+	[f02e6f32f189]
+
+	* src/sudo.c:
+	Pass updated argv/envp to the I/O open function like the plugin API
+	documents.
+	[ff9f4fae5cf3]
+
+2016-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Add check for I/O log file handle being NULL. This could only happen
+	if the front-end calls iolog_open with argc == 0 but actually runs a
+	command.
+	[5113a3c04494]
+
+2016-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c:
+	Additional debugging for pwutil functions.
+	[908b83c3acbb]
+
+	* config.h.in, configure, configure.ac, lib/util/aix.c:
+	When calling setauthdb(), save the old registry value so we can
+	restore it properly. Previously we were setting the registry to
+	unrestricted instead of actually restoring it.
+	[5a2921412663]
+
+	* plugins/sudoers/sudoers.c:
+	Use SUDOERS_DEBUG_UTIL not SUDO_DEBUG_UTIL in the plugin.
+	[79b012777e71]
+
+2016-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/sudo_debug.c:
+	When parsing debug entries, don't make a lower value override a
+	higher one. For example, for "pcomm@debug,all@warn" the "all@warn"
+	should not set pcomm to "warn" when it is already at "debug".
+	[031037a56e51]
+
+2016-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/policy.c:
+	Set sudoedit_checkdir=false in command_details when it is disabled
+	in sudoers.
+	[811dd43b29f5]
+
+	* include/sudo_compat.h, lib/util/strtobool.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/sssd.c, src/sudo_edit.c:
+	Update copyright year
+	[5ec484920763]
+
+	* src/sudo_edit.c:
+	If the user runs "sudoedit /" we will receive ENOENT from openat(2)
+	and sudoedit will try to create a file with the null string. If path
+	is empty, open the cwd instead so sudoedit can give a sensible error
+	message.
+	[fc39d5804f1f]
+
+	* lib/util/strtobool.c:
+	Log an error for invalid boolean strings.
+	[004afa5e05c5]
+
+	* src/sudo.c:
+	Fix off by one error in new SET_FLAG macro.
+	[5bdce4edf8b9]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document the race with sudoedit_checkdir in 1.8.15.
+	[cb7aed3367e9]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Document sudoedit_checkdir
+	[89f2452272ad]
+
+2016-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	There are no systems that support O_SEARCH/O_PATH that do not also
+	support O_DIRECTORY so simplify the definition of DIR_OPEN_FLAGS a
+	bit.
+	[a48f11ea53b3]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[8ae4d883ac59]
+
+	* NEWS, doc/UPGRADE:
+	Add 1.8.16 changes
+	[8d3a3f5cdf59]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/defaults.c,
+	src/sudo.c:
+	Make sudoedit_checkdir the default and update the documentation
+	accordingly.
+	[84bbc1b73411]
+
+	* src/sudo.c:
+	Add a SET_FLAG macro to simplify parsing command details boolean
+	flags. Previously, flags were only set and never cleared even if the
+	boolean value was false. This was not a problem as there were no
+	default flags for the plugin to enable. That will change in the
+	future.
+	[75f24ca13f41]
+
+2016-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Need to be root when switching to a different user.
+	[06d5f010b607]
+
+	* src/sudo_edit.c:
+	Use O_SEARCH on systems without O_PATH if present. It can be used
+	for a similar purpose.
+	[3f559a389bf9]
+
+	* config.h.in, configure, configure.ac, src/sudo_edit.c:
+	Use faccessat(2) for directory writability instead of doing the
+	checks manually where possible. This also allows us to remove the
+	#ifdef __linux__ bits since we no longer use fstat(2) on Linux with
+	an O_PATH fd.
+	[fe50d0c1f1b9]
+
+2016-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Add "I/O LOG FILES" section to the manual and move many of the
+	details from the log_input and log_output descriptions to it.
+	[a604903f5ae3]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Use "Nm sudoers" when talking about the plugin and "Em sudoers" when
+	talking about the sudoers file.
+	[727a68b02de7]
+
+2016-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/zlib/zlib.exp:
+	Remove gzopen_w which is only defined on Windows.
+	[a73236903e7b]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Work around the buggy pread(2) on 32-bit HP-UX 11.00 by using
+	pread64() on that platform.
+	[31c4be934115]
+
+2016-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c, plugins/sudoers/testsudoers.c:
+	Add support for matching the entire netgroup tuple (user, host,
+	domain).
+	[9f694ba7c86d]
+
+	* plugins/sudoers/ldap.c:
+	Use asprintf() to generate the netgroup filter instead of using lots
+	of concatenation.
+	[f8290c040aea]
+
+	* lib/util/util.exp.in:
+	Add missing sudo_debug_exit_ssize_t_v1 symbol.
+	[9407fb25dfa4]
+
+2016-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Silence warning in digest_matches() on systems with no fexecve(2).
+	[0cd3cc8fa195]
+
+	* plugins/sudoers/sssd.c:
+	Fix free() of invalid pointer introduced in the commit that stripped
+	whitespace between a '!' and the name in a sudoOption.
+	[4d2c1761c752]
+
+	* plugins/sudoers/ldap.c:
+	Fix free() of invalid pointer introduced in the commit that stripped
+	whitespace between a '!' and the name in a sudoOption.
+	[14391603a9e5]
+
+	* src/sudo_edit.c:
+	Add missing dfd argument to the version of
+	sudo_edit_openat_nofollow() for systems without O_NOFOLLOW.
+	[574e4a840879]
+
+	* plugins/sudoers/ldap.c:
+	In sudo_netgroup_lookup() only build up the search filter once
+	instead of once per netgroup_base.
+	[a03440237078]
+
+	* plugins/sudoers/ldap.c:
+	It is safe to pass ldap_msgfree() a NULL pointer.
+	[abc2eaddbf83]
+
+	* plugins/sudoers/ldap.c:
+	On overflow, warn before freeing anything.
+	[2e3bcfa4a8f9]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Use user_runhost and user_srunhost instead of user_host and
+	user_shost. Fixes "sudo -l -h other_host" for LDAP and sssd.
+	[e1abfdc82242]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
+	Update description of sudoedit_checkdir. Reported by Sander Bos.
+	[ee44e7255096]
+
+	* src/sudo_edit.c:
+	No need to check whether the fd we opened is really a directory in
+	sudo_edit_open_nonwritable() since if not, the openat() will fail
+	with ENOTDIR anyway.
+	[b41c5b289f35]
+
+2016-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, include/sudo_compat.h, src/sudo_edit.c:
+	Rewritten sudoedit_checkdir support that checks all the dirs in the
+	path and refuses to follow symlinks in writable directories. This is
+	a better fix for CVE-2015-5602. Adapted from a diff by Ben
+	Hutchings. Bug #707
+	[c2e36a80a279]
+
+2016-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po, po/ca.mo,
+	po/ca.po, po/fi.mo, po/fi.po, po/hu.mo, po/hu.po, po/sr.mo,
+	po/sr.po:
+	sync with translationproject.org
+	[94ffd6b18431]
+
+	* configure, configure.ac, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, include/sudo_plugin.h,
+	plugins/sudoers/match.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, src/exec.c, src/exec_common.c,
+	src/selinux.c, src/sesh.c, src/sudo.c, src/sudo.h, src/sudo_exec.h:
+	Add support for using fexecve() if supported on commands that are
+	checksummed.
+	[397722cdd7ec]
+
+2015-12-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Call openat() with the basename not the full path. From Ben
+	Hutchings.
+	[33272418bb10]
+
+2015-12-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/group_plugin.c, plugins/sudoers/policy.c:
+	Fix compilation with --disable-shared
+	[84c084618676]
+
+2015-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_common.c:
+	Check for existing dso in LD_PRELOAD and only add it if it is not
+	already present.
+	[15042e8999f7]
+
+2015-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Clarify when SIGINT and SIGQUIT are relayed by sudo to the command.
+	[8efed5784393]
+
+	* plugins/sudoers/group_plugin.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, src/load_plugins.c:
+	Actually use the plugin_dir Path setting in sudo.conf.
+	[bccc548127a2]
+
+	* lib/util/sudo_conf.c:
+	The Path setting for the plugin directory is "plugin_dir" not
+	"plugin".
+	[07c2677bbce5]
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	lib/util/sudo_conf.c, src/exec_common.c:
+	Allow sudo.conf Path settings to disable path names (by setting the
+	value of NULL).
+	[81a44e011a40]
+
+2015-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/selinux.c, src/sudo.h:
+	Change noexec flag in selinux_execve() from int to bool.
+	[7cb872aac155]
+
+	* src/exec_common.c, src/sudo_exec.h:
+	Refactor code to set LD_PRELOAD (or the equivalent) in the
+	environment into a preload_dso() function. Also avoid allocating a
+	new copy of the environment array if the size of the array does not
+	change.
+	[72194b0b51f7]
+
+	* configure, configure.ac:
+	Add missing square brackets in configure option descriptions.
+	[6e25685c6349]
+
+2015-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document the names of the I/O log files and mention buffering.
+	Document that I/O logs are in gzip format by default.
+	[474838e7b365]
+
+2015-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c:
+	Add BASHOPTS to initial_badenv_table[]; from Stephane Chazelas
+	[f206a9089a69]
+
+2015-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	When parsing sudoOptions that include an operator (!, +, +=, -=)
+	strip out any whitespace on either side of the operator.
+	[62041b5888e5]
+
+2015-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers2ldif:
+	Strip whitespace around '!', '=', '+=' and '-=' in Defaults entries.
+	[dcc9d15b0f3c]
+
+2015-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document the race condition between the digest check and command
+	execution.
+	[24a3d9215c64]
+
+2015-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	When checking the query results, don't set user_matches in the
+	netgroup pass unless sudo_ldap_check_non_unix_group() returns true.
+	This was preventing the mail_no_user sudoOption from being
+	effective.
+	[31004144421b]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	In list mode, we always want to clear FLAG_NO_USER and FLAG_NO_HOST
+	regardless of whether or not there was an actual match. Otherwise,
+	warning mail may be sent which is not what we want in list mode.
+	This is consistent with what the sudoers file backend does.
+	[2809338a7b21]
+
+2015-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.h, plugins/sudoers/toke_util.c:
+	Use size_t for length parameters in the fill functions used by the
+	lexer.
+	[0428c9067182]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Use yy_size_t for digest_len since newer flex uses yy_size_t for
+	yyleng. Old flex uses int for yyleng so we need to use a cast to
+	avoid a sign compare warning.
+	[4a3dc6fb8f99]
+
+2015-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, README, configure, configure.ac,
+	plugins/sudoers/regress/sudoers/test1.in, sudo.pp:
+	Use https in sudo.ws urls
+	[04e5177022d3]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in:
+	Use https in urls.
+	[855b05943b2d]
+
+	* configure, configure.ac:
+	sudo 1.8.16
+	[b745f7031aeb]
+
+	* plugins/sudoers/env.c:
+	When preserving variables from the invoking user's environment, if
+	there are duplicates only keep the first instance.
+	[d4dfb05db5d7]
+
+2015-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_debug.h, lib/util/parseln.c, lib/util/sudo_debug.c,
+	plugins/sudoers/timestamp.c:
+	Add debug_return_ssize_t
+	[d491ed281726]
+
+	* plugins/sudoers/timestamp.c:
+	Avoid compilation error on Solaris 10 with Stun Studio 12. Bug #727
+	[facd8ff1ee6c]
+
+2015-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po, po/da.mo,
+	po/da.po:
+	sync with translationproject.org
+	[6711d740d3d0]
+
+	* NEWS:
+	Mention ssp configure fix.
+	[92d64fd724cc]
+
+2015-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/fr.mo, po/fr.po, po/it.mo,
+	po/it.po, po/ja.mo, po/ja.po, po/nb.mo, po/nb.po, po/pl.mo,
+	po/pl.po, po/pt_BR.mo, po/pt_BR.po, po/uk.mo, po/uk.po, po/vi.mo,
+	po/vi.po, po/zh_CN.mo, po/zh_CN.po:
+	sync with translationproject.org
+	[9c8eb0062d8c]
+
+	* configure, configure.ac:
+	Don't use CPPFLAGS for the -fstack-protector check. Otherwise on
+	systems with _FORTIFY_SOURCE support we'll get an error due to the
+	lack of optimization flags. Bug #725
+	[1a9f8571a82d]
+
+	* configure, configure.ac:
+	When checking for stack protector support we need to actually link
+	the test program.
+	[ab4f94aac7de]
+
+2015-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Preserve LDFLAGS when checking for stack protector as they may
+	include rpath settings to allow the stack protector lib to be found.
+	Avoid using existing CFLAGS since we don't want the compiler to
+	optimize away the stack variable.
+	[e6bc59225c06]
+
+	* configure, configure.ac:
+	Better configure test for -fstack-protector. Some gcc installations
+	may be missing the ssp library even though the compiler supports it.
+	[4ade5d1249f4]
+
+2015-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Set errno to EISDIR instead of ENOTDIR if directory is writable
+	since ENOTDIR can be a legitimate errno. This avoids a bogus
+	"directory is writable" error in that case.
+	[97ee37d905ce]
+
+	* mkpkg:
+	Fix the check for whether to include 32-bit arch in Mac OS X
+	packages.
+	[a76654512f6b]
+
+2015-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[58277a8f418b]
+
+	* NEWS, src/sudo_edit.c:
+	When creating a new file, sudoedit will now check that the file's
+	parent directory exists before running the editor.
+	[65bc45510fb2]
+
+	* NEWS, doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/match.c:
+	Add always_query_group_plugin
+	[7e9060d4c13a]
+
+2015-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ABOUT-NLS, MANIFEST:
+	Add ABOUT-NLS from GNU gettext.
+	[971c168c065a]
+
+	* NEWS, config.h.in, configure, configure.ac, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers_version.h,
+	src/sudo.c, src/sudo.h, src/sudo_edit.c:
+	Add directory writability checks for sudoedit.
+	[f5349d059a98]
+
+2015-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Latest.
+	[9aae49302c60]
+
+	* src/conversation.c:
+	Ignore the SUDO_CONV_PROMPT_ECHO_OK flag when echo is enabled. This
+	was preventing a match of SUDO_CONV_PROMPT_ECHO_ON which resulted in
+	a masked password instead of an echoed one.
+	[53f6a78d79e3]
+
+	* plugins/sudoers/auth/bsdauth.c:
+	Repair challenge/response prompting for BSD authentication which got
+	broken while it was converted to use the conversation function.
+	[2d0b0cec5e4f]
+
+	* plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h:
+	Use the auth_getpass (and the plugin conversation fuction) for Tru64
+	SIA. This prevents sudo from sleeping while holding the tty ticket
+	lock.
+	[9221eec812cf]
+
+	* NEWS, doc/UPGRADE, plugins/sudoers/env.c:
+	For env_reset, SHELL should be set based on the target user, not the
+	invoking user unless preserved via env_keep.
+	[b77adbc08c91]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
+	sync with translationproject.org
+	[adb927ad5e86]
+
+2015-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Hungarian and Slovak translations
+	[d3b6acece125]
+
+	* MANIFEST, doc/CONTRIBUTORS, plugins/sudoers/po/hu.mo,
+	plugins/sudoers/po/hu.po, plugins/sudoers/po/sk.mo,
+	plugins/sudoers/po/sk.po, po/sk.mo, po/sk.po:
+	Add new Slovak and Hungarian translations from
+	translationproject.org
+	[132ec9b7a927]
+
+2015-10-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Remove S_ISREG check from sudo_edit_open(), it is already done in
+	the caller.
+	[9fff8c0bb1f7]
+
+	* src/sudo_edit.c:
+	Open sudoedit files with O_NONBLOCK and fail if they are not regular
+	files.
+	[56b01164869c]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/visudo.c, src/tgetpass.c:
+	It is possible for WIFSTOPPED to be true even if waitpid() is not
+	given WUNTRACED if the child is ptraced. Don't exit the waitpid()
+	loop if WIFSTOPPED is true, just in case.
+	[a2cab04a03da]
+
+2015-09-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/de.mo,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/it.mo,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/nb.mo,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pt_BR.mo,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/vi.mo,
+	plugins/sudoers/po/zh_CN.mo, po/cs.mo, po/de.mo, po/fi.mo, po/fr.mo,
+	po/gl.mo, po/it.mo, po/ja.mo, po/nb.mo, po/pl.mo, po/pt_BR.mo,
+	po/uk.mo, po/vi.mo, po/zh_CN.mo:
+	rebuild .mo files
+	[676362ed6061]
+
+	* plugins/sudoers/po/pt_BR.po, po/pt_BR.po:
+	sync with translationproject.org
+	[be932694e600]
+
+2015-09-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, src/sudo_noexec.c:
+	There's no point in trying to interpose protected versions of the
+	exec family of functions. Many modern C libraries use hidden symbols
+	for the functions and syscalls defined in libc such that they cannot
+	be overridden inside libc itself. We have to just wrap all the exec
+	variants plus system and popen.
+	[30aa4bd6c15b]
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	List all the functions wrapped by sudo_noexec.so.
+	[57a9db56f4e0]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	The section is now called "EXEC and NOEXEC" and it is above, not
+	below.
+	[9b0a2537f65d]
+
+	* src/sudo_noexec.c:
+	Also wrap popen(3).
+	[a826cd7787e9]
+
+	* src/sudo_noexec.c:
+	Also interpose system(3). On glibc systems you cannot interpose the
+	syscalls used internally by libc.
+	[58a5c06b5257]
+
+	* src/conversation.c:
+	Set active debug instance to sudo_debug_instance() during the
+	conversation function.
+	[22fb750d92a9]
+
+2015-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	LOGNAME and USERNAME are set the same way as USER
+	[54f170cf2536]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Document behavior when the command dies from a signal in EXIT
+	STATUS.
+	[3c93d682e5e6]
+
+2015-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Bug #722
+	[5cca49bb0e02]
+
+	* src/sudo.c:
+	When the command sudo is running is killed by a signal, sudo will
+	now send itself the same signal with the default signal handler
+	instead of exiting. The bash shell appears to ignore some signals,
+	e.g. SIGINT, unless the command is killed by that signal. This makes
+	the behavior of commands run under sudo the same as without sudo
+	when bash is the shell. Bug #722
+	[153f016db8f1]
+
+2015-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Adjust set_logname description to new behavior when any of LOGNAME,
+	USER or USERNAME are preserved.
+	[89009c2dcf38]
+
+	* NEWS, plugins/sudoers/env.c:
+	If some, but not all, of the LOGNAME, USER or USERNAME environment
+	variables have been preserved from the invoking user's environment,
+	sudo will now use the preserved value to set the remaining variables
+	instead of using the runas user. This ensures that if, for example,
+	only LOGNAME is present in the env_keep list, that sudo will not set
+	USER and USERNAME to the runas user.
+	[54a60fe72b9a]
+
+2015-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Fix passing of the callback pointer to the conversation function.
+	This was preventing the on_suspend and on_resume functions from
+	being called on PAM systems.
+	[611246ded4ff]
+
+	* include/sudo_plugin.h:
+	Explicitly mark large hex constants unsigned.
+	[5b67b0090814]
+
+	* plugins/sudoers/timestamp.c:
+	Cast sizeof(entry) to off_t before making it a negative offset for
+	lseek(). Fixes "sudo -k" on Solaris and probably others.
+	[ed5d312f6baa]
+
+2015-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Add explicit mention of sudo's netgroup semantics since they differ
+	from most other netgroup consumers.
+	[0e9030f8cf56]
+
+	* plugins/sudoers/po/fi.po, po/fi.po:
+	sync with translationproject.org
+	[f9236f25a616]
+
+	* plugins/sudoers/check.c:
+	Fix potential double free of the cookie when sudo is suspended at
+	the password prompt.
+	[cbecb3136155]
+
+2015-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/cs.po, plugins/sudoers/po/zh_CN.po, po/cs.po,
+	po/zh_CN.po:
+	sync with translationproject.org
+	[21138f16a3a6]
+
+2015-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/de.po, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.po, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.po, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.po, po/de.po, po/fr.po, po/gl.po, po/it.po,
+	po/ja.po, po/nb.po, po/pl.po, po/uk.po, po/vi.po:
+	sync with translationproject.org
+	[2d9f3e4c3ccf]
+
+	* NEWS:
+	Bug #719
+	[cfa393164a0f]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	SIGHUP is now relayed to the command. Bug #719
+	[8db7c492c52a]
+
+	* src/exec.c:
+	When a terminal device is closed, SIGHUP is sent to the controlling
+	process associated with that terminal. It is not sent to the entire
+	process group so sudo needs to relay SIGHUP to the command when it
+	is not being run in a new pty. Bug #719
+	[b408a792f31a]
+
+	* NEWS:
+	Mention visudo bug in 1.8.14
+	[0fec829807fd]
+
+	* plugins/sudoers/visudo.c:
+	We reserved two slots at the end of the editor argv for the line
+	number and the file name. However, resolve_editor() adds "--" before
+	the file names so the +line_number is interpreted as a file name,
+	not a line number so we need to overwrite the "--" as well.
+	[ff107430ee4b]
+
+2015-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, lib/util/sig2str.c,
+	lib/util/strsignal.c:
+	Remove checks for __sys_siglist and __sys_signame. They are internal
+	to libc and there are no known systems that export those symbols
+	that do not already export the single underbar or no- underbar
+	versions.
+	[2b3efe0a91f2]
+
+	* plugins/sudoers/po/ru.mo, plugins/sudoers/po/ru.po, po/es.mo,
+	po/es.po:
+	Sync with translationproject.org
+	[feb5eb934a9e]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[947e8320c557]
+
+2015-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/tgetpass.c:
+	Restore old signal handlers before tty settings. That way SIGTTOU is
+	at its original value if sudo_term_restore() should fail.
+	[69d2cc6c0702]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Document what happens when the on_suspend/on_resume callbacks return
+	an error.
+	[d8c9dcf7a926]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h,
+	plugins/group_file/group_file.c, plugins/group_file/plugin_test.c,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/policy.c,
+	plugins/system_group/system_group.c, src/hooks.c:
+	No need to have version macros for hooks, callbacks and the sudoers
+	group plugin. We can just use the main sudo API macros. The sudoers
+	group plugin macros are preserved for source compatibility but are
+	not documented.
+	[8c52bb83f991]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Properly escape the backslash before a comma in an example so the
+	example rule is parsable by visudo.
+	[6745d38e9876]
+
+	* src/tgetpass.c:
+	Ignore callbacks if major version doesn't match.
+	[f852e6ebff01]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/compat/timespec.h, lib/util/Makefile.in, lib/util/gettime.c,
+	lib/util/utimens.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/Makefile.in, src/sudo_edit.c:
+	Remove include/compat/timespec.h. Systems old enough to lack struct
+	timespec are too old to build a modern sudo.
+	[37812e10a449]
+
+	* NEWS:
+	Bug #713
+	[8a7245d76799]
+
+	* src/exec.c:
+	Fill in cstat if exec_setup() fails. Previously it was only filled
+	in for an execve() failure. Fixes an unkillable sudo process when
+	exec_setup() fails and I/O logging is enabled.
+	[ff1d39d9e505]
+
+	* src/sudo.c:
+	Fix running commands as non-root when neither setresuid() not
+	setreuid() are available. At this point we are already root so
+	setuid() must succeed. Bug #713
+	[34754ad586c7]
+
+	* src/sudo.c:
+	Cast uid_t to unsigned int when printing as %u
+	[669e2d5244a6]
+
+	* doc/UPGRADE:
+	Mention time stamp file locking changes, fix some spelling.
+	[c4563ea85e3a]
+
+	* NEWS:
+	Update with latest changes.
+	[2cbd50e7c158]
+
+2015-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_fatal.h,
+	include/sudo_plugin.h, lib/util/fatal.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/check.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.h,
+	src/conversation.c, src/sudo.c, src/sudo.h, src/sudo_plugin_int.h,
+	src/tgetpass.c:
+	Add a struct sudo_conv_callback that contains on_suspend and
+	on_resume function pointer args plus a closure pointer and at it to
+	the conversation function.
+	[5608cb4c18f2]
+
+	* config.h.in, configure, configure.ac, include/sudo_util.h,
+	lib/util/locking.c, lib/util/util.exp.in, plugins/sudoers/check.c,
+	plugins/sudoers/check.h, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/timestamp.c:
+	Lock individual records in the timestamp file instead of the entire
+	file. This will make it possible for multiple sudo processes using
+	the same tty to serialize their timestamp lookups.
+	[f4ad82e36d90]
+
+	* lib/util/term.c, plugins/sudoers/check.c,
+	plugins/sudoers/sudoreplay.c, src/tgetpass.c:
+	Implement suspend/resume callbacks for the conversation function. If
+	suspended, close the timestamp file (dropping all locks). On resume,
+	lock the record before reading the password.
+
+	For this to work properly we need to be able to run th callback when
+	tsetattr() suspends us, not just when the user does. To accomplish
+	this the term_* functions now return EINTR if SIGTTOU would be
+	generated. The caller now has to restart the term_* function (and
+	send itself SIGTTOU) instead of it being done automatically.
+	[572374035897]
+
+	* plugins/sudoers/timestamp.c:
+	Allow the time stamp lock to be interrupted by signals.
+	[aa5017f86210]
+
+	* plugins/sudoers/timestamp.c:
+	Adjust new locking to work when tty_tickets is disabled. We need to
+	use per-tty/ppid locking to gain exclusive access to the tty for the
+	password prompt but use a separate (short term) lock that is shared
+	among all sudo processes for the user.
+	[d6d7a0bb6bd0]
+
+	* lib/util/locking.c:
+	Set errno to EINVAL if sudo_lock_* is called with a bad type.
+	[cfba014f1c1a]
+
+	* src/exec_pty.c:
+	sudo_term_* already restart themselve for all but SIGTTOU so we
+	don't need to use our own restart loops.
+	[113924cd05c0]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/iolog.c,
+	plugins/sudoers/timestamp.c:
+	Use pread(2) and pwrite(2) where possible.
+	[86cd3f6bab9e]
+
+	* plugins/sudoers/timestamp.c:
+	Bring back the check for time stamp files that predate the boot
+	time. Instead of truncating we now unlink the file since another
+	process may be sleeping on the lock.
+	[9cdf7468d0f2]
+
+	* plugins/sudoers/check.c:
+	Avoid touching the time stamp directory for "sudo -k command"
+	[391d20c17775]
+
+2015-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h:
+	Make hook_version and hook_type unsigned.
+	[77cb84793f07]
+
+2015-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/base64.c, plugins/sudoers/match.c,
+	plugins/sudoers/regress/parser/check_base64.c:
+	When decoding base64, avoid using '=' in the decoded temporary array
+	as a sentinel as it can legitimately be present. Instead, just use
+	the count of bytes stored in the temp array to determine which bytes
+	to fold into the destination.
+	[6abef15d3954]
+
+2015-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c:
+	When parsing def_editor, break out of the loop when we find the
+	first valid editor. Bug #714
+	[c7508ed075c2]
+
+2015-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	The condition for adding a missing newline at the end of sudoers was
+	never reached. Keep track of the last character and write a newline
+	character if when copying to the temp file. Found by Radovan Sroka.
+	[86c20e7fc6bd]
+
+	* plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c:
+	Remove extraneous while() from botched do {} while() loop conversion
+	to use sudo_strsplit. Noticed by Radovan Sroka.
+	[cd2d25510129]
+
+2015-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c:
+	In sudo_pam_begin_session() and sudo_pam_end_session() return
+	AUTH_FATAL on error, not AUTH_FAILURE. In sudo_auth_begin_session()
+	treat anything other than AUTH_SUCCESS as a fatal error.
+	[3ad7296390f2]
+
+	* doc/CONTRIBUTORS, src/exec.c, src/exec_pty.c:
+	Linux sets si_pid in struct siginfo to 0 when the process that sent
+	the signal is in a different container since the PID namespaces in
+	different conatiners are separate. Avoid looking up the process
+	group by id when si_pid is 0 since getpgid(0) returns the process
+	group of the current process. Since sudo ignores signals sent by
+	processes in its own process group, this had the effect of ignoring
+	signals sent from other containers. From Maarten de Vries
+	[6d3f43b95a1f]
+
+	* plugins/sudoers/auth/pam.c:
+	Sprinkle some debugging.
+	[f5a94a3a1192]
+
+2015-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.man.in, doc/sudo.mdoc.in:
+	Document that sudo uses the real uid to map from uid to passwd file
+	user name.
+	[04f6709675cc]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in:
+	disable_coredump can be set to no on modern OSes without security
+	consequences.
+	[ebe6d5bb2274]
+
+2015-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Emphasis on the never.
+	[39ca000281c7]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Explicitly tell people not to grant sudoedit to directories the user
+	can write to. While sudoedit will no longer open symbolic links,
+	hard links are still an issue.
+	[26e0afae9bae]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Add warning about writable directories and sudo/sudoedit.
+	[701ff725af42]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Emphasize that wildcards are not regexps. Bug #692
+	[1e071810c4cb]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Emphasize that wildcards in command line arguments are dangerous.
+	Document the failings of the passwd example on GNU systems. Bug #691
+	[54d793aea6b2]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Escape the colons in [[:alpha:]] as required by sudoers.
+	[ad875dd5ca64]
+
+	* po/sudo.pot, src/sudo_edit.c:
+	Change warning when user tries to sudoedit a symbolic link.
+	[b8f44e834c2f]
+
+2015-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	add .json regress files to MANIFEST
+	[03ddb3a9671b]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[5abaa0eeab86]
+
+	* doc/sudo.conf.cat, doc/sudoers.ldap.cat, doc/sudoreplay.cat,
+	doc/visudo.cat:
+	regen
+	[43e6b445734c]
+
+	* doc/UPGRADE, doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, include/sudo_compat.h, include/sudo_plugin.h,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/sudoers/test1.in,
+	plugins/sudoers/regress/sudoers/test1.json.ok,
+	plugins/sudoers/regress/sudoers/test1.out.ok,
+	plugins/sudoers/regress/sudoers/test1.toke.ok,
+	plugins/sudoers/sudoers_version.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/visudo_json.c, src/sesh.c, src/sudo.c, src/sudo.h,
+	src/sudo_edit.c:
+	Do not follow symbolic links in sudoedit by default. This behavior
+	can be controlled by the sudoedit_follow Defaults flag as well as
+	the FOLLOW/NOFOLLOW tags.
+	[9636fd256325]
+
+	* NEWS, aclocal.m4, configure, configure.ac:
+	Sudo 1.8.15
+	[bf18da363b06]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/sudoers/test1.json.ok,
+	plugins/sudoers/regress/sudoers/test10.json.ok,
+	plugins/sudoers/regress/sudoers/test11.json.ok,
+	plugins/sudoers/regress/sudoers/test12.json.ok,
+	plugins/sudoers/regress/sudoers/test13.json.ok,
+	plugins/sudoers/regress/sudoers/test14.json.ok,
+	plugins/sudoers/regress/sudoers/test15.json.ok,
+	plugins/sudoers/regress/sudoers/test16.json.ok,
+	plugins/sudoers/regress/sudoers/test2.json.ok,
+	plugins/sudoers/regress/sudoers/test3.json.ok,
+	plugins/sudoers/regress/sudoers/test4.json.ok,
+	plugins/sudoers/regress/sudoers/test5.json.ok,
+	plugins/sudoers/regress/sudoers/test6.json.ok,
+	plugins/sudoers/regress/sudoers/test7.json.ok,
+	plugins/sudoers/regress/sudoers/test8.json.ok,
+	plugins/sudoers/regress/sudoers/test9.json.ok:
+	Check JSON output of sudoers test files too.
+	[3d8517812b80]
+
+2015-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Move comment to match moved code.
+	[7a30f06462a8]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	maxseq is an int not a string
+	[bffd97d22064]
+
+2015-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/preserve_fds.c:
+	Include sys/types.h for id_t. Bug #711
+	[fda95d9ca1e9]
+
+2015-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/fnmatch.c:
+	Avoid a potential out of bounds read found by enh while fuzzing with
+	address sanitizer enabled.
+	[52d6b9916593]
+
+2015-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Set sssd lib location to /usr/lib64 on 64-bit RHEL/Centos. Bug #710
+	[428421925a20]
+
+2015-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, src/Makefile.in:
+	The init.d files are generated from a .in file so we need to install
+	from top_builddir not top_srcdir. From Ross Burton. Bug #708
+	[df1e7a0d3182]
+
+2015-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/term.c:
+	Replace two "return 0" with debug_return_bool(false).
+	[49f8fb3dcd36]
+
+	* src/ttyname.c:
+	fix typo in previous commit
+	[094488696f2c]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.14p3
+	[0079c43d8247]
+
+2015-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Fix errno value from get_process_ttyname() when no tty is present.
+	[ff7b12bb0638]
+
+	* src/ttyname.c:
+	On AIX, only convert the tty device number from dev64_t to dev32_t
+	if dev_t is 32-bits.
+	[0e728a1eb07a]
+
+2015-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.14p2
+	[55fe56b28c7b]
+
+	* plugins/sudoers/timestamp.c:
+	Fix creation of the timestamp file; bug #704
+	[1ff77fd5cc8f]
+
+2015-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/regress/ttyname/check_ttyname.c, src/sudo.c, src/sudo.h,
+	src/ttyname.c:
+	Avoid needless memory allocation when resolving the tty name.
+	[c58cce92d5e0]
+
+2015-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.14p1
+	[973705806759]
+
+	* plugins/sudoers/sssd.c:
+	Fix typo in sudo_sss_attrcpy() that caused a memory allocation
+	error.
+	[0fa324a7bb56]
+
+2015-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/zh_CN.mo:
+	rebuild
+	[e4c7cda46475]
+
+2015-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/lbuf.c, plugins/sudoers/env.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
+	plugins/sudoers/match.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/redblack.c, src/hooks.c, src/net_ifs.c, src/sudo.c:
+	Add some debugging printfs when malloc fails and we don't have an
+	explicit call to sudo_warnx().
+	[07aebb5839c3]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c:
+	Add missing warnings for memory allocation failure. Add function
+	name to memory allocation warnings.
+	[4f6027786a28]
+
+	* lib/util/parseln.c:
+	Return -1 if realloc() fails.
+	[707632291eac]
+
+	* lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c:
+	Add line number to debug log for memory allocation errors.
+	[f4f3debdfcc5]
+
+	* plugins/sudoers/auth/pam.c:
+	Add warning if calloc() fails. Add debugging for other unexpected
+	errors.
+	[a1e0945237d8]
+
+	* plugins/sudoers/ldap.c:
+	Add missing check for calloc(3) return value.
+	[37fe3ca78e8e]
+
+2015-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that the values printed by "sudo -V" are affected by
+	Defaults settings in sudoers.
+	[80ec2572861b]
+
+2015-07-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/group_plugin.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/sssd.c, src/load_plugins.c:
+	Avoid calling dlerror() multiple times since it clear the error
+	status after printing the error. Problem caused by
+	sudo_warn/sudo_fatal being macros...
+	[c0fd3b0fb9c3]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Attempt to clarify the conditions under which MAIL and HOME are set
+	to the target user.
+	[ebd269bebe64]
+
+2015-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Better checks for the libaudit package for Debian and error out if
+	we can't figure it out.
+	[225c1bfcb629]
+
+	* mkpkg:
+	Fix linux_audit setting on non-multiarch Debian.
+	[0a38e9d158f4]
+
+	* sudo.pp:
+	Fix typo that broke the linux_audit dependency on Debian.
+	[0917bd45acf1]
+
+	* NEWS:
+	Mention /proc/stat btime fix.
+	[754050a340e2]
+
+	* config.h.in, configure, configure.ac, lib/util/getaddrinfo.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/match_addr.c,
+	src/net_ifs.c:
+	Solaris 2.6 has the prototypes for inet_pton() and inet_ntop() in
+	resolv.h.
+	[dc0f62743845]
+
+	* plugins/sudoers/boottime.c:
+	Sprinkle debugging for boottime.
+	[dfb45c763179]
+
+	* mkpkg:
+	The old Solaris /bin/sh doesn't support POSIX $( .. ) syntax, use
+	backquotes instead.
+	[c9e33ffef2b1]
+
+2015-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg, sudo.pp:
+	Only use --with-sssd-lib on Debian/Ubuntu w/ multipackage. Use dpkg-
+	query to determine the name of the audit package for proper
+	dependencies.
+	[e9669389aa2f]
+
+	* mkpkg, plugins/sudoers/sudoers.in, sudo.pp:
+	Update Debian/Ubuntu packages to be more like the vendor ones. One
+	notable exception is that sudo.ws packages use /var/run, not
+	/var/lib for timestamp files.
+	[0f4c49a3768e]
+
+	* doc/CONTRIBUTORS:
+	Add Jakub Wilk
+	[78bfdf2e441b]
+
+	* plugins/sudoers/boottime.c:
+	Strip newline from /proc/stat btime line to avoid a strtonum()
+	failure. From Jakub Wilk.
+	[8a04f85a070f]
+
+	* src/exec_pty.c:
+	In io_callback() service writes before reads. That way, if both
+	SUDO_EV_READ and SUDO_EV_WRITE are set and read() returns 0 (EOF) we
+	don't close the fd before the write() is performed.
+
+	If the write() returns EPIPE, ENXIO, EIO or EBADF, clear
+	SUDO_EV_READ before we close the fd to avoid calling read() on a
+	closed fd.
+	[167548fd8af2]
+
+2015-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/regress/sudo_conf/conf_test.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/sesh.c, src/sudo.c:
+	Check sudo_conf_read() return value and exit on fatal error (a
+	warning was already printed by sudo_conf_read()).
+	[d05797f4f197]
+
+	* NEWS:
+	Mention double-quoted sudoOption value support.
+	[55684a73f097]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Add support for parsing quoted strings in a sudoOption just like
+	sudoers Defaults settings.
+	[fe8291414179]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po, po/da.mo,
+	po/da.po:
+	Sync with translationproject.org
+	[1c15d1a3dbdd]
+
+2015-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update year.
+	[6ca660e4a957]
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po, po/de.mo,
+	po/de.po, po/nb.mo, po/nb.po:
+	Sync with translationproject.org
+	[d7ede74dcb19]
+
+	* src/sudo.c:
+	Fix utmp setup broken by commit be0ca60facf8
+	[cd8a06f57f2b]
+
+2015-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/ja.po, plugins/sudoers/po/pl.mo,
+	plugins/sudoers/po/pl.po, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.po, plugins/sudoers/po/zh_CN.po, po/cs.mo,
+	po/cs.po, po/fr.mo, po/fr.po, po/it.mo, po/it.po, po/pl.mo,
+	po/pl.po:
+	Sync with translationproject.org
+	[aa473519e66d]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[8f8aa321f043]
+
+	* plugins/sudoers/logging.c:
+	Fix typo in error message.
+	[220832711826]
+
+2015-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Bug #702 is the AIX timespec issue.
+	[c597a312e816]
+
+	* config.h.in, configure, configure.ac, lib/util/closefrom.c,
+	lib/util/getcwd.c, lib/util/glob.c, plugins/sudoers/match.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, src/ttyname.c:
+	We require POSIX so no need to conditionally include dirent.h. Add a
+	check for d_namlen and use the result in the NAMLEN macro.
+	[2728194cb6cf]
+
+	* lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c,
+	lib/util/getcwd.c, lib/util/gettime.c, lib/util/glob.c,
+	lib/util/lbuf.c, lib/util/locking.c, lib/util/mktemp.c,
+	lib/util/parseln.c, lib/util/secure_path.c, lib/util/setgroups.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/ttysize.c,
+	plugins/group_file/group_file.c, plugins/sample/sample_plugin.c,
+	plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/editor.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c, plugins/system_group/system_group.c,
+	src/conversation.c, src/exec.c, src/exec_common.c, src/exec_pty.c,
+	src/get_pty.c, src/hooks.c, src/load_plugins.c, src/net_ifs.c,
+	src/openbsd.c, src/parse_args.c, src/preserve_fds.c, src/signal.c,
+	src/solaris.c, src/sudo.c, src/sudo_edit.c, src/sudo_noexec.c,
+	src/tgetpass.c, src/ttyname.c, src/utmp.c:
+	There's no need to conditionalize the #include <unistd.h>, we
+	require a POSIX system.
+	[79389c527c08]
+
+	* include/sudo_compat.h:
+	Remove some compatibilty defines that should no longer be needed.
+	[e9136646d1c6]
+
+2015-06-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Final changes in 1.8.14
+	[3a5cd4f2875a]
+
+	* include/sudo_compat.h:
+	Need to include stddef.h to get rsize_t on Mac OS X for
+	sudo_memset_s() prototype.
+	[9615efed4a9a]
+
+	* lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/strsplit/strsplit_test.c:
+	Add missing exit value.
+	[484202b53893]
+
+	* lib/util/regress/mktemp/mktemp_test.c:
+	Add missing fcntl.h include.
+	[020fe6252d96]
+
+	* configure, configure.ac:
+	Do check for inet_pton before inet_ntop since we may need to record
+	dependent libraries for inet_pton when linking our getaddrinfo
+	replacement.
+	[fde03eefd88d]
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c:
+	Fix build on compilers w/o __func__ or __FUNCTION__
+	[196d75416cd5]
+
+	* lib/util/util.exp.in:
+	Remove sudo_evasprintf_v1, missed during alloc.c removal.
+	[7d0ac7e5909d]
+
+	* lib/util/snprintf.c:
+	Add missing fcntl.h include.
+	[23b886deb879]
+
+	* config.h.in, configure, configure.ac:
+	Add check for inline support.
+	[061dab0e411c]
+
+2015-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/LICENSE:
+	Add reallocarray.c license.
+	[b4b4d46309f3]
+
+2015-06-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Fix entry for Joel Pelaez Jorge.
+	[386434049903]
+
+2015-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_lbuf.h, lib/util/lbuf.c, lib/util/util.exp.in,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_nss.c:
+	Add an error flag to the lbuf struct to simplify error checking.
+	Callers of the lbuf functions now check the error flag to tell if a
+	memory allocation error ocurred.
+	[bc44b0fbc03b]
+
+	* plugins/sudoers/parse.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers.h:
+	display_privs() and display_cmnd() may need to return -1 on error.
+	[b6d8826900bb]
+
+2015-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/check.h,
+	plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/timestamp.c:
+	Check restore_perms() return value in all cases, pushing the return
+	value back up the call stack.
+	[c9beeed2b614]
+
+	* plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Return -1, not 0 from sudoers when there is an error (as opposed to
+	a policy denial).
+	[5d197fe29e0e]
+
+	* doc/CONTRIBUTORS:
+	Add Joel Pelaez Jorge
+	[55387b44d6e9]
+
+	* plugins/sudoers/auth/pam.c:
+	When checking whether the PAM prompt matches "Password:", also check
+	for the untranslated version. The PAM module might not be using the
+	localized string even though it exists. From Joel Pelaez Jorge.
+	Fixes Bug #701
+	[d87f6f2ccb42]
+
+2015-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Silence clang analyzer warning on glibc systems where the first
+	argument to qsort() is marked as non-NULL. Also change some counters
+	from into to unsigned int and two flags from int to bool.
+	[09e400445ca2]
+
+2015-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Silence clang analyzer warning on glibc systems where the first
+	argument to qsort() is marked as non-NULL.
+	[34fa7256f1e2]
+
+	* include/sudo_compat.h, include/sudo_debug.h, include/sudo_util.h,
+	src/preserve_fds.c:
+	Use our own bitmap macros instead of borrowing the ones from select.
+	[51ef403511d9]
+
+	* lib/util/sudo_debug.c:
+	Must call round_nfds() with fd+1 since it takes a count not the fd
+	number. In other words, the lowest value is 1, not 0.
+	[cc175cba5371]
+
+	* src/ttyname.c:
+	Quiet clang analyzer false positive.
+	[9ebecd6b6b29]
+
+	* src/sesh.c:
+	Fix uninitialized variables warnings in error case when src file
+	cannot be opened. At least one of these is a false positive.
+	[98b417c1307a]
+
+2015-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/getline.c, plugins/sudoers/toke_util.c:
+	It's safe to rely on C89 semantics for realloc(NULL, size).
+	[b633582413ac]
+
+	* plugins/sudoers/env.c:
+	malloc() sets errno to ENOMEM on failure so we don't need to set it
+	explicitly.
+	[09cb5ceaaec3]
+
+	* include/sudo_compat.h:
+	No longer need __malloc_like
+	[a41b69f256f6]
+
+	* lib/util/util.exp.in:
+	Remove symbols from the now-removed alloc.c.
+	[da0753d85d20]
+
+	* include/sudo_compat.h, lib/util/aix.c, lib/util/closefrom.c,
+	lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c,
+	lib/util/getaddrinfo.c, lib/util/getcwd.c, lib/util/getgrouplist.c,
+	lib/util/gethostname.c, lib/util/getline.c, lib/util/getopt_long.c,
+	lib/util/gettime.c, lib/util/gidlist.c, lib/util/glob.c,
+	lib/util/key_val.c, lib/util/lbuf.c, lib/util/locking.c,
+	lib/util/mksiglist.c, lib/util/mksigname.c, lib/util/parseln.c,
+	lib/util/progname.c, lib/util/pw_dup.c, lib/util/reallocarray.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c, lib/util/setgroups.c,
+	lib/util/sha2.c, lib/util/sig2str.c, lib/util/snprintf.c,
+	lib/util/strndup.c, lib/util/strsplit.c, lib/util/strtobool.c,
+	lib/util/strtoid.c, lib/util/strtomode.c, lib/util/strtonum.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/sudo_dso.c,
+	lib/util/term.c, lib/util/ttysize.c, plugins/group_file/getgrent.c,
+	plugins/group_file/group_file.c, plugins/group_file/plugin_test.c,
+	plugins/sample/sample_plugin.c, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/base64.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/editor.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/redblack.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_printf.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/timestr.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsgetgrpw.c,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c,
+	plugins/system_group/system_group.c, src/conversation.c,
+	src/env_hooks.c, src/exec.c, src/exec_common.c, src/exec_pty.c,
+	src/get_pty.c, src/hooks.c, src/load_plugins.c, src/net_ifs.c,
+	src/openbsd.c, src/parse_args.c, src/preserve_fds.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/signal.c,
+	src/solaris.c, src/sudo.c, src/sudo_edit.c, src/tgetpass.c,
+	src/ttyname.c, src/utmp.c:
+	Only include stddef.h where it is needed.
+	[ce597fb7ffb9]
+
+2015-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[cad83b927f4e]
+
+	* lib/util/sudo_conf.c, plugins/sudoers/locale.c:
+	Better handling of setlocale() returning NULL.
+	[7cd4fcdb528c]
+
+	* lib/util/aix.c, lib/util/gidlist.c, lib/util/sudo_conf.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/editor.c,
+	plugins/sudoers/env.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/conversation.c, src/exec.c,
+	src/exec_common.c, src/exec_pty.c, src/load_plugins.c,
+	src/parse_args.c, src/preserve_fds.c, src/selinux.c, src/sesh.c,
+	src/sudo.c, src/sudo_edit.c:
+	Add function name to "unable to allocate memory" warnings.
+	[98c07e26a13e]
+
+	* configure, configure.ac, include/sudo_compat.h, lib/util/aix.c,
+	lib/util/closefrom.c, lib/util/event.c, lib/util/event_poll.c,
+	lib/util/event_select.c, lib/util/getaddrinfo.c, lib/util/getcwd.c,
+	lib/util/getgrouplist.c, lib/util/gethostname.c, lib/util/getline.c,
+	lib/util/getopt_long.c, lib/util/gettime.c, lib/util/gidlist.c,
+	lib/util/glob.c, lib/util/key_val.c, lib/util/lbuf.c,
+	lib/util/locking.c, lib/util/mksiglist.c, lib/util/mksigname.c,
+	lib/util/parseln.c, lib/util/progname.c, lib/util/pw_dup.c,
+	lib/util/reallocarray.c, lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c, lib/util/setgroups.c,
+	lib/util/sha2.c, lib/util/sig2str.c, lib/util/snprintf.c,
+	lib/util/strndup.c, lib/util/strsplit.c, lib/util/strtobool.c,
+	lib/util/strtoid.c, lib/util/strtomode.c, lib/util/strtonum.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/sudo_dso.c,
+	lib/util/term.c, lib/util/ttysize.c, plugins/group_file/getgrent.c,
+	plugins/group_file/group_file.c, plugins/sample/sample_plugin.c,
+	plugins/sudoers/alias.c, plugins/sudoers/audit.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/base64.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/editor.c,
+	plugins/sudoers/env.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_printf.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/timestr.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsgetgrpw.c,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c,
+	plugins/system_group/system_group.c, src/conversation.c,
+	src/env_hooks.c, src/exec.c, src/exec_common.c, src/exec_pty.c,
+	src/get_pty.c, src/hooks.c, src/load_plugins.c, src/net_ifs.c,
+	src/openbsd.c, src/parse_args.c, src/preserve_fds.c,
+	src/regress/ttyname/check_ttyname.c, src/signal.c, src/solaris.c,
+	src/sudo.c, src/sudo_edit.c, src/tgetpass.c, src/ttyname.c,
+	src/utmp.c:
+	We require ANSI C so stop using the obsolete STDC_HEADERS.
+	[35a5a680e5fe]
+
+	* lib/util/getgrouplist.c, lib/util/regress/glob/globtest.c,
+	lib/util/sudo_debug.c, plugins/group_file/getgrent.c,
+	plugins/group_file/plugin_test.c, plugins/sample/sample_plugin.c,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/tsgetgrpw.c:
+	Use strtok_r() instead of strtok()
+	[6b8e3c253dcf]
+
+	* config.h.in, configure, configure.ac:
+	Add back _REENTRANT define on HP-UX to expose strtok_r on some
+	versions. We may need to define it on other systems too.
+	[12c36f12eed2]
+
+	* configure, configure.ac:
+	Fix check for strnlen() when cross-compiling.
+	[e501c508891a]
+
+	* plugins/sudoers/interfaces.c:
+	Use sudo_strsplit() in dump_interfaces.
+	[b76ee2f47f37]
+
+2015-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/inet_pton.c, lib/util/key_val.c, lib/util/lbuf.c,
+	lib/util/locking.c, lib/util/parseln.c,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/progname/progname_test.c,
+	lib/util/regress/strsplit/strsplit_test.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c, lib/util/sha2.c,
+	lib/util/snprintf.c, lib/util/strtobool.c, lib/util/term.c,
+	plugins/group_file/getgrent.c, plugins/group_file/group_file.c,
+	plugins/sample/sample_plugin.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/editor.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/getdate.y, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_hexchar.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/system_group/system_group.c,
+	src/conversation.c, src/exec_pty.c, src/net_ifs.c, src/openbsd.c,
+	src/preserve_fds.c, src/regress/ttyname/check_ttyname.c,
+	src/solaris.c, src/sudo.c, src/tgetpass.c, src/ttyname.c,
+	src/utmp.c:
+	Remove obsolete memory.h include.
+	[0c1351d614a9]
+
+	* config.h.in, configure, configure.ac, lib/util/getcwd.c,
+	lib/util/gethostname.c, lib/util/glob.c, lib/util/locking.c,
+	lib/util/parseln.c, lib/util/pw_dup.c, lib/util/reallocarray.c,
+	lib/util/snprintf.c, lib/util/strndup.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	src/env_hooks.c:
+	Remove support for the obsolete malloc.h header.
+	[2a118de27d4e]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/defaults.c,
+	plugins/sudoers/logging.c:
+	Remove BROKEN_SYSLOG define which was for obsolete versions of HP-
+	UX. Remove last remnants of 4.2BSD syslog support.
+	[e234515f515d]
+
+	* lib/util/sudo_conf.c:
+	Use sudo_strsplit() instead of doing the equivalent manually.
+	[220f2e4a0e68]
+
+	* lib/util/regress/strsplit/strsplit_test.c:
+	Test strsplit behavior with an empty string.
+	[62ae80dcee4a]
+
+	* lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Allow "make LIBTOOL=/path/to/libtool" to work properly.
+	[f9e5f7109107]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/editor.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/visudo.c:
+	Use a common function for resolviong the user's editor in sudoedit
+	and visudo. The find_path() function now returns a dynamically
+	allocated path instead of using a static string.
+	[97fe58966144]
+
+	* config.h.in, configure, configure.ac, lib/util/Makefile.in,
+	lib/zlib/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Replace use of OSDEFS with config.h defines. Rename DEFS in
+	Makefile.in to CPPDEFS and include in CPPFLAGS. Bring back
+	_BSD_SOURCE as a config.h define. Remove obsolescent _REENTRANT
+	define.
+	[0d76a12adca8]
+
+2015-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, include/sudo_alloc.h, lib/util/Makefile.in,
+	lib/util/alloc.c:
+	Remove now-unused sudo_alloc.h and alloc.c
+	[0fe70085c75c]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in, src/conversation.c,
+	src/env_hooks.c, src/exec.c, src/exec_common.c, src/exec_pty.c,
+	src/hooks.c, src/load_plugins.c, src/net_ifs.c, src/parse_args.c,
+	src/preserve_fds.c, src/regress/ttyname/check_ttyname.c,
+	src/selinux.c, src/sesh.c, src/sudo.c, src/sudo.h, src/sudo_edit.c,
+	src/ttyname.c:
+	Avoid using exiting allocators in the front end.
+	[be0ca60facf8]
+
+	* include/sudo_conf.h, include/sudo_lbuf.h, lib/util/Makefile.in,
+	lib/util/aix.c, lib/util/gidlist.c, lib/util/lbuf.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c:
+	Use non-exiting allocators in libsudo_util.
+	[d9b7cf17b9b4]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/logging.c:
+	Remove asprintf() return value warnings.
+	[fe25ce11f96a]
+
+	* config.h.in, configure, configure.ac:
+	Use AC_FUNC_STRNLEN to check for broken strnlen() on AIX. This
+	requires that we use AC_USE_SYSTEM_EXTENSIONS so remove things from
+	OSDEFS that are enabled by AC_USE_SYSTEM_EXTENSIONS.
+	[1f64269cab6e]
+
+	* plugins/sudoers/ldap.c:
+	Remove extraneous semicolons in CHECK_* macros.
+	[ef99aa3c9d70]
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Remove remaining SUDO_MAIN remnants.
+	[1c077699f444]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/interfaces.h, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.h,
+	plugins/sudoers/match.c, plugins/sudoers/parse.c,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Use non-exiting allocatings in the sudoers plugin.
+	[a5668cb9c516]
+
+2015-06-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sssd.c:
+	Use non-exiting allocators in the sudoers SSSD backend.
+	[dba29b55ac0b]
+
+	* plugins/sudoers/ldap.c:
+	Use non-exiting allocators in the sudoers LDAP backend.
+	[37bfa441345a]
+
+	* lib/util/Makefile.in:
+	regen dependencies
+	[5be6eb005946]
+
+2015-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, lib/util/Makefile.in, mkdep.pl:
+	Add missing dependency info for reallocarray.lo in
+	lib/util/Makefile.in and regen configure to match last configure.ac
+	change.
+	[da1fc49b53dc]
+
+	* plugins/sudoers/ldap.c:
+	Use \28 and \29 instead of \( and \) in the ldap query as per RFC
+	2254. Fixes netgroup queries on AIX. From Steven Soulen.
+	[33267d6243aa]
+
+2015-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/glob.c:
+	Move pattern length check until after we have initialized the glob_t
+	so we can call globfree() even on error. From Frank Denis.
+	[a246f9054395]
+
+2015-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, src/sudo.c:
+	We need to unlimit RLIMIT_NPROC in sudoers as well as the sudo front
+	end since set_perms() and restore_perms change the read uid and may
+	fail with EAGAIN on Linux kernels prior to 3.1.
+	[e6a03c31f4e5]
+
+2015-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Fix underlining of "root" in -u option descriptions. Bug #699
+	[b3afe47d9798]
+
+	* doc/UPGRADE, src/load_plugins.c:
+	Remove support for converting plugin.so -> plugin.sl on HP-UX when
+	plugin.so can not be found. This was a temporary hack for using an
+	older (pre 1.8.7) sudoers plugin with a newer sudo front-end.
+	[561e2ce444ed]
+
+2015-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/event.c, lib/util/event_select.c:
+	Add debugging output on memory alloc failure. Add missing checks in
+	event_select.c for reallocarray() failure.
+	[0853c7bcbeaa]
+
+	* lib/util/event_poll.c:
+	Use non-exiting allocators.
+	[5ed0e276b551]
+
+2015-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Bring back VALIDATE_ERROR which will be used in the case of memory
+	allocation errors.
+	[784c885db95c]
+
+2015-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/snprintf.c:
+	If asprintf() or vasprintf() fail, set the dest pointer to NULL like
+	BSD and Solaris do. This appears to be the direction glibc is going
+	as well.
+	[92fb2283dc9a]
+
+2015-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c:
+	Use a stack buffer for the validate_env_vars() error message.
+	[69df3a0cbc2b]
+
+2015-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/fatal.c:
+	Fix typo/thinko in static buffer conversion; use vsnprintf() not
+	snprintf()
+	[9d42fb3a94f6]
+
+	* plugins/sudoers/ldap.c:
+	Fix old gcc2 variadic macro support.
+	[fd951ed8865e]
+
+	* plugins/sudoers/visudo.c:
+	Restore old behavior where visudo prevents you from making the main
+	sudoers file zero length.
+	[b03ef908120f]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/sudoers.c:
+	Non-exiting allocators for log functions. If log_allowed() fails the
+	user may not run the command. We don't try to return early for
+	log_failure(), log_auth_failure() or log_denial() as we would not
+	run the command in that case.
+	[40c3d0dd75bc]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c:
+	Use non-exiting allocators in the parser (much of it already did).
+	[f14222e5ad1b]
+
+	* lib/util/aix.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c:
+	Use non-existing allocators in the passwd/group cache functions.
+	[86bbe840f348]
+
+	* MANIFEST, configure.ac, lib/util/alloc.c, lib/util/reallocarray.c:
+	Add standalone reallocarray.c from OpenBSD instead of rolling our
+	own.
+	[36ec5840729e]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/iolog.c,
+	plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Use non-exiting allocators in the redblack tree and fix the fallout.
+	Also switch to non-exiting allocators in affected code blocks.
+	[bca56cf769cb]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.h:
+	The error string returned by alias_add should be const.
+	[b378188a0a8f]
+
+	* plugins/sudoers/policy.c:
+	Fix typo, efree vs. free.
+	[9146ba7473ca]
+
+	* plugins/sudoers/policy.c, src/exec_common.c, src/sudo.c:
+	Add a few missing sudo_new_key_val() return value checks. Also use
+	non-exiting allocators for consistency.
+	[2ae76a679052]
+
+2015-05-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, lib/util/Makefile.in,
+	lib/util/regress/parse_gids/parse_gids_test.c,
+	lib/util/regress/strsplit/strsplit_test.c:
+	Add unit tests for strsplit and parse_gid_list.
+	[e08c5ff7b5f0]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/strsplit.c, lib/util/util.exp.in,
+	plugins/sudoers/sudoers.c:
+	Add sudo_strsplit(), similar to strtok_r() but non-destructive and
+	operates on non-C strings (requires a length parameter).
+	[45fb50775249]
+
+	* lib/util/fatal.c:
+	Use a static buffer for sudo_warn/sudo_fatal messages where
+	possible.
+	[6e1d6ecc022d]
+
+	* include/sudo_compat.h:
+	Fix sudo_strnlen() prototype.
+	[1367bd9227b3]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/Makefile.in, lib/util/strndup.c,
+	mkdep.pl:
+	Add strndup() for those without it. As strndup.c uses strnlen(), use
+	our own if it is missing.
+	[cf904a9c68f7]
+
+	* lib/util/strnlen.c:
+	Add missing sudo_ prefix and include sudo_compat.h.
+	[d5e5dfc3fd20]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, lib/util/strnlen.c:
+	Add strnlen() replacement needed for glob.c. Only used if no glob()
+	and no strnlen().
+	[bb6b7c4549b1]
+
+2015-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.h, plugins/sudoers/sudoers.h:
+	Get rid of SUDO_MAIN. Modern compilers don't warn about mixing
+	extern and auto declarations unless they conflict.
+	[a273b73bca6d]
+
+	* config.h.in, configure.ac, include/compat/endian.h,
+	include/compat/fnmatch.h, include/compat/getaddrinfo.h,
+	include/compat/getopt.h, include/compat/glob.h,
+	include/compat/nss_dbdefs.h, include/compat/sha2.h,
+	include/compat/stdbool.h, include/compat/timespec.h,
+	include/sudo_alloc.h, include/sudo_compat.h, include/sudo_conf.h,
+	include/sudo_debug.h, include/sudo_dso.h, include/sudo_event.h,
+	include/sudo_fatal.h, include/sudo_gettext.h, include/sudo_lbuf.h,
+	include/sudo_plugin.h, include/sudo_queue.h, include/sudo_util.h,
+	lib/util/fatal.c, plugins/sudoers/bsm_audit.h,
+	plugins/sudoers/check.h, plugins/sudoers/defaults.h,
+	plugins/sudoers/ins_2001.h, plugins/sudoers/ins_classic.h,
+	plugins/sudoers/ins_csops.h, plugins/sudoers/ins_goons.h,
+	plugins/sudoers/insults.h, plugins/sudoers/interfaces.h,
+	plugins/sudoers/iolog.h, plugins/sudoers/linux_audit.h,
+	plugins/sudoers/logging.h, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/pwutil.h,
+	plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/solaris_audit.h, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.h, plugins/sudoers/sudo_printf.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoers_debug.h, plugins/sudoers/sudoers_version.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.h, plugins/sudoers/toke.l,
+	plugins/sudoers/visudo.c, src/net_ifs.c, src/sudo.h,
+	src/sudo_exec.h, src/sudo_plugin_int.h, src/sudo_usage.h.in:
+	Avoid using a leading underbar in defines as they are reserved in
+	ISO C.
+	[a442d88c6490]
+
+	* Makefile.in, doc/Makefile.in, examples/Makefile.in,
+	include/Makefile.in, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/solaris_audit.c, plugins/sudoers/sssd.c,
+	plugins/system_group/Makefile.in, src/Makefile.in, src/selinux.c:
+	Add target for "make splint". A few files need extra guards to avoid
+	errors on systems where they would not otherwise be compiled. No
+	warnings from splint.
+	[64fc04debc58]
+
+2015-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sia.c:
+	Use reallocarray() instead of sudo_emallocarray() and return an
+	error on allocation failure.
+	[fee12ac1e0c8]
+
+	* plugins/sudoers/auth/kerb5.c:
+	In our krb5_get_init_creds_opt_alloc() replacement use malloc()
+	instead of sudo_emalloc() and return KRB5_CC_NOMEM on allocation
+	failure. Only old versions of Kerberos V will need this.
+	[95ac6c5b7b60]
+
+	* lib/util/event.c, lib/util/event_select.c:
+	Use non-exiting allocators.
+	[91bbc657901d]
+
+2015-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, src/sudo.c:
+	There should be no need to check for tzset() as it is POSIX.
+	[50825eb75c97]
+
+	* configure, configure.ac:
+	Add sudo_reallocarrary to util.exp.in if reallocarray is not found.
+	[32588e00bb33]
+
+2015-05-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	NLS now works on Mac OS X properly.
+	[1485c9e51b04]
+
+	* configure, configure.ac, src/Makefile.in:
+	Force flat namespace on darwin to make the getenv() hooking work as
+	it does on ELF.
+	[0837cc3559ce]
+
+2015-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/alloc.c, lib/util/snprintf.c,
+	plugins/sample/sample_plugin.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke_util.c:
+	No need to cast malloc() return value.
+	[09c7236d3e1a]
+
+	* lib/util/getcwd.c, lib/util/getline.c, lib/util/glob.c,
+	plugins/sudoers/env.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Use reallocarray where possible.
+	[2b5957a38baa]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/alloc.c:
+	Add reallocarray() for those without it.
+	[3ac5a4abe077]
+
+2015-05-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	The getenv() hook still doesn't work on Mac OS X.
+	[d9297b9ff54c]
+
+2015-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_fatal.h, lib/util/fatal.c:
+	In sudo_warn_gettext_v1() call dgettext() not gettext() to make sure
+	the domain is set correctly. The sudoers plugin uses its own text
+	domain.
+	[f7ce0100ff5c]
+
+2015-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/Makefile.in:
+	man pages should explicitly depend on config.status since it is used
+	to substitute in variables/settings.
+	[bebe8e19d767]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo_plugin.cat,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.man.in,
+	doc/sudoreplay.cat, doc/visudo.cat:
+	regen
+	[2e613d7bb477]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.14
+	[66e33bc0d18e]
+
+	* INSTALL, MANIFEST, aclocal.m4, config.h.in, configure, configure.ac,
+	include/sudo_fatal.h, lib/util/Makefile.in, lib/util/fatal.c,
+	lib/util/locale_weak.c, lib/util/util.exp.in,
+	m4/ax_sys_weak_alias.m4, mkdep.pl, plugins/sudoers/Makefile.in,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.h,
+	plugins/sudoers/sudoers.c, src/Makefile.in, src/locale_stub.c:
+	Instead of trying to make weak functions work on all platforms, just
+	use a registration function for a plugin-specific setlocale
+	function. The sudoers version just wraps sudoers_setlocale().
+	[0eef64f41cdf]
+
+	* src/parse_args.c:
+	Fix indentation of -a flag help line.
+	[a2ed556b6454]
+
+	* include/sudo_compat.h:
+	Fix compilation when HAVE_DECL_SIG2STR_MAX is not defined.
+	[31aa465affaa]
+
+	* doc/Makefile.in:
+	Add lint target to run "mandoc -Tlint" over the manuals.
+	[63ed14d91adc]
+
+2015-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_compat.h:
+	HAVE_DECL_SIG2STR_MAX is always defined so use a
+	!HAVE_DECL_SIG2STR_MAX check instead of #ifndef.
+	[65cc03302d39]
+
+2015-05-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/tgetpass.c:
+	Sync tty_present() with sudoers version.
+	[040c05e68627]
+
+	* src/load_plugins.c:
+	sudo_check_plugin() returns bool.
+	[15b2851bfb90]
+
+	* plugins/sudoers/match.c:
+	In usergr_matches() matched should be bool but we have to take care
+	to handle group_plugin_query() returning a value other than 0/1.
+	[c120901f71c7]
+
+	* plugins/sudoers/ldap.c:
+	sudo_ldap_check_non_unix_group() returns bool, not int.
+	[d12e9242454f]
+
+	* plugins/sudoers/logging.c:
+	Convert two debug_return_int to debug_return_bool.
+	[594d0fc8efda]
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/check.c,
+	plugins/sudoers/env.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, src/sudo.c:
+	Previously, debug_return_bool was the same as debug_return_int
+	except that it logged true/false for 1/0. However, this appears to
+	trigger a bug in some compilers. To avoid this, debug_return_bool
+	now uses bool, not int. Callers that were passing it an int have
+	been converted to use debug_return_int instead.
+	[ca142b5a9433]
+
+	* src/get_pty.c, src/sudo.h:
+	get_pty() should return bool
+	[2c72c8d3603b]
+
+	* src/sudo.h, src/tgetpass.c:
+	Make tty_present static to tgetpass.c
+	[bb73a2cc8754]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Add configure check for SIG2STR_MAX, which may be missing on
+	UnixWare.
+	[e9dcac23c639]
+
+	* m4/ax_sys_weak_alias.m4:
+	Need to quote $GCC as it may include arguments. From Tim Rice.
+	[9ed8a3be94bf]
+
+	* MANIFEST:
+	Add missing m4/ax_sys_weak_alias.m4
+	[269a8d5bfb49]
+
+2015-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	There's no point in building i386 binaries for Mac OS X 10.7 and
+	higher.
+	[e8876ea36d14]
+
+2015-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/fr.mo, plugins/sudoers/po/fr.po, po/ja.mo,
+	po/ja.po:
+	Sync with translationproject.org
+	[414c51286530]
+
+2015-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/bsm_audit.c:
+	Only fall back on AUE_DARWIN_sudo if au_preselect() fails.
+	[aea2f3a60b46]
+
+2015-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/bsm_audit.c:
+	Work around a problem on Mac OS X 10.10 which defines AUE_sudo but
+	where au_preselect() only accepts AUE_DARWIN_sudo (the old value).
+	[b5d32d6453d1]
+
+2015-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/env_hooks.c:
+	Don't use dlsym() to find the libc getenv() since this may allocate
+	memory on some systems (glibc) which leads to a hang if malloc()
+	calls getenv() (jemalloc).
+	[441846664820]
+
+	* include/sudo_debug.h, src/sudo.c:
+	Split variable declaration out of debug_decl into debug_decl_vars()
+	so we can use it in main() when we know sudo_debug_enter() cannot
+	succeed.
+	[6931948a57f8]
+
+	* src/sudo.c:
+	Defer conversation initialization until right before plugins are
+	initialized.
+	[83db53d4945c]
+
+2015-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c:
+	When creating a passwd struct from a uid that is not in the passwd
+	database, set pw_gid to the user's gid instead of whatever the user
+	specified via the -g flag (or 0 if no -g).
+	[4154970432df]
+
+2015-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Add some ldap_err2string() debugging when the LDAP search fails.
+	Adapted from a diff from Steven Soulen.
+	[e08d38481041]
+
+2015-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po, po/sr.mo,
+	po/sr.po:
+	Sync with translationproject.org
+	[cbf24072ad07]
+
+2015-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Add David Michael and Andrey Klyachkin.
+	[e153a9b46e1f]
+
+	* sudo.pp:
+	Sync tmpfiles.d/sudo.conf with init.d/sudo.conf.in
+	[9e3945c1fe6e]
+
+	* include/sudo_util.h:
+	Avoid struct assignment when stashing mtime since AIX at least uses
+	a struct st_timespec that differs from struct timespec. From Andrey
+	Klyachkin.
+	[e267ea5b019e]
+
+2015-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Work around a bug in pp that caused a warning when exampledir is a
+	subdir of docdir.
+	[d81db98f215f]
+
+	* plugins/sudoers/solaris_audit.c:
+	Add sys/types.h
+	[e0794f05e95c]
+
+	* lib/util/getopt_long.c, lib/util/mksiglist.c, lib/util/mksigname.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/glob/globtest.c, lib/util/sha2.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_hexchar.c:
+	Include sys/types.h instead of unistd.h to get uid_t and gid_t. Add
+	missing include of sys/types.h to a few places.
+	[86eb67f3c41a]
+
+2015-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Remove unintended commit
+	[2eeeb74b9174]
+
+	* init.d/sudo.conf.in:
+	Add tmpfiles.d/sudo.conf template.
+	[ead9bb7b5328]
+
+2015-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* .hgignore, INSTALL, MANIFEST, Makefile.in, configure, configure.ac,
+	mkpkg, src/Makefile.in, sudo.pp:
+	Create template tmpfiles.d/sudo.conf for installation instead of
+	creating one via echo commands in the Makefile.
+
+	Add --enable-tmpfiles.d configure option to enable/disable use of
+	tmpfiles.d and override the default directory.
+
+	Use --disable-tmpfiles.d in mkpkg so we no longer need to ignore
+	tmpfiles.d/sudo.conf in sudo.pp.
+	[930983f88927]
+
+	* sudo.pp:
+	Fix setting of pp_rpm_version when there is no patchlevel present.
+	Also tighten up the regexp for pp_rpm_release.
+	[d6a89aafd99d]
+
+2015-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, Makefile.in, configure, configure.ac, doc/sudoers.mdoc.in,
+	examples/Makefile.in, mkpkg, sudo.pp:
+	Make exampledir configurable and default to
+	DATAROOTDIR/examples/sudo on BSD systems.
+	[4c1271298712]
+
+	* src/Makefile.in, sudo.pp:
+	Install /usr/lib/tmpfiles.d/sudo.conf on systems with systemd but do
+	not package it. For packages we create /usr/lib/tmpfiles.d/sudo.conf
+	as needed in the postinstall script.
+	[522666bc079f]
+
+2015-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in:
+	Fix "mandoc -Tlint" warnings. Sync AUTHORS section in man pages.
+	Regenerate all man pages.
+	[34e4149bb225]
+
+	* lib/util/Makefile.in, plugins/sudoers/Makefile.in, src/Makefile.in:
+	Make libsudo_util depend on libintl instead of requiring users of
+	libsudo_util to link with libintl directly. Bug #690
+	[f2508d1a21ee]
+
+2015-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Use saved errno in vlog_warning() before calling
+	sudo_vwarn_nodebug(). Fixes the error message printed if set_perms()
+	fails.
+	[68bd7297137e]
+
+2015-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for 1.8.13 final.
+	[4c03db3a740f]
+
+2015-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	For sudoedit, run the editor with the user's original environment as
+	per the documentation (and as in sudo 1.7.x). Bug #688
+	[a5081c8f6950]
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po, po/fr.mo,
+	po/fr.po:
+	Sync with translationproject.org
+	[0b820c5ecb0c]
+
+2015-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/term.c:
+	Update function names in debug_decl.
+	[b83f153b2f43]
+
+	* lib/util/term.c:
+	Use TCSAFLUSH instead of TCSANOW in sudo_term_copy(). Be consistent
+	with where we put TCSASOFT in the action flags.
+	[6ffeec3aa184]
+
+2015-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/da.mo,
+	po/da.po, po/fi.mo, po/fi.po, po/zh_CN.mo, po/zh_CN.po:
+	Sync with translationproject.org
+	[0d20f88c0a83]
+
+2015-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/sha2.c:
+	Include unistd.h since sudo_compat.h uses gid_t.
+	[da491d83e5dc]
+
+2015-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.ac:
+	Add --disable-weak-symbols option to disable use of weak symbols in
+	libsudo_util.
+	[3edf2bccb4d8]
+
+	* configure:
+	regen
+	[ff1abfcd2b61]
+
+	* m4/ax_sys_weak_alias.m4:
+	When checking for weak aliases, check the gcc attribute format last
+	since some C compilers just ignore unsupported attributes.
+	[e172cbbfa615]
+
+	* sudo.pp:
+	Update copyright year.
+	[67bcd24c6477]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/it.mo,
+	po/it.po, po/nb.mo, po/nb.po, po/pl.mo, po/pl.po, po/pt_BR.mo,
+	po/pt_BR.po, po/uk.mo, po/uk.po, po/vi.mo, po/vi.po:
+	Sync with translationproject.org
+	[ceb62f98364c]
+
+	* configure, configure.ac, include/compat/sha2.h:
+	Fix symbol name collision with systems that have their own sha2
+	implementation. This can result in PAM using the wrong sha2
+	implementation on Solaris systems configured to use SHA512 for
+	passwords.
+	[3a25c4896804]
+
+	* src/Makefile.in:
+	Use SSP_LDFLAGS when linking sudo_noexec.la
+	[6187b17fad90]
+
+2015-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/compat/utime.h, lib/util/Makefile.in, lib/util/utimens.c:
+	Remove compat/utime.h, it was only useful for ancient systems that
+	are no longer capable of compiling sudo.
+	[94e4f02868db]
+
+2015-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, lib/util/Makefile.in:
+	Link libsudo_util with -lrt on systems where clock_gettime is in
+	-lrt.
+	[44a9a0d0af69]
+
+	* NEWS:
+	Update.
+	[811c8d7090c0]
+
+	* lib/util/strlcat.c, lib/util/strlcpy.c:
+	Update OpenBSD CVS Ids
+	[933788497ee4]
+
+	* lib/util/strlcat.c:
+	Make comment match code.
+	[b1b68810929d]
+
+	* lib/util/utimens.c:
+	Fix compilation error on systems without futimes().
+	[4d55a58ea12e]
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/gettime.c, lib/util/util.exp.in, lib/util/utimens.c,
+	lib/util/utimes.c, mkdep.pl, plugins/sudoers/Makefile.in,
+	plugins/sudoers/boottime.c, plugins/sudoers/gettime.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/Makefile.in, src/sesh.c,
+	src/sudo_edit.c:
+	Use futimens() and utimensat() instead of futimes() and utimes().
+	[8400f91466d8]
+
+	* plugins/sudoers/visudo.c:
+	Fix compiler warning on systems where mode_t is not unsigned int,
+	such as 32-bit Solaris.
+	[1eeeea1c203d]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Fix logic for verifypw/listpw all in sudoers LDAP and sssd.
+	[5bc60a34a477]
+
+	* src/tgetpass.c:
+	Fix cut & pasto that prevented the SIGPIPE handler from being
+	restored before returning from tgetpass(). From mancha
+	[230b0a86876e]
+
+2015-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sesh.c, src/sudo_edit.c:
+	Our utimes() emulation support futime() too.
+	[439851535285]
+
+2015-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[40aa9164563f]
+
+	* plugins/sudoers/testsudoers.c:
+	Define YYDEBUG to 0 if not already defined so we can protect use of
+	sudoersdebug with "#if YYDEBUG" like the generated parser does. From
+	David Michael.
+	[394e1c237aac]
+
+2015-02-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that Aliases may not be redefined and that "sudo -f
+	/etc/sudo.d/foo" will not catch the redefinition.
+	[3bff3b5f7eb1]
+
+	* sudo.pp:
+	Only create /usr/lib/tmpfiles.d/sudo.conf if
+	/usr/lib/tmpfiles.d/systemd.conf also exists. Some other package may
+	have created /usr/lib/tmpfiles.d even though it is not used.
+	[cf013d95b7d7]
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[4dde632c35cd]
+
+	* sudo.pp:
+	Clear the ts dir instead of just making sure it exists.
+	[c49b6e3e2360]
+
+	* configure, configure.ac:
+	Only substiture init.d scripts that we are going to use.
+	[301f16bd04c5]
+
+2015-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, sudo.pp:
+	Create /usr/lib/tmpfiles.d/sudo.conf when systemd is used.
+	[532dc61e7bb7]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/visudo.c, src/sudo_edit.c,
+	src/utmp.c:
+	Check the return value of gettimeofday(), even though it should
+	never fail.
+	[747715d8a11c]
+
+2015-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, configure, configure.ac, include/sudo_compat.h,
+	lib/util/Makefile.in, lib/util/clock_gettime.c, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/gettime.c,
+	plugins/sudoers/po/sudoers.pot, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c:
+	We cannot (easily) use clock_gettime(CLOCK_MONOTONIC) directly as it
+	may be present but not implemented. Add sudo_gettime_real() and
+	sudo_gettime_mono() functions to get the real and monotonic times
+	respectively. Now sudo_gettime_mono() checks the value of
+	sysconf(_SC_MONOTONIC_CLOCK) before calling
+	clock_gettime(CLOCK_MONOTONIC) and falls back on sudo_gettime_real()
+	as needed. The Mach version of sudo_gettime_mono() uses
+	mach_absolute_time().
+
+	This should fix problems with timestamp files on systems where the
+	CLOCK_MONOTONIC is defined but not actually implemented.
+	[cd04a21af4c5]
+
+	* include/sudo_compat.h, plugins/sudoers/timestamp.c:
+	Check clock_gettime() return value and warn if it fails. Currently,
+	the timestamp will be ignored if clock_gettime() fails.
+	[3658154638da]
+
+2015-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/sudo_debug.c:
+	Plug memory leak when debug file cannot be opened. Use %zu printf
+	format now that our snprintf support it.
+	[a168a002cd19]
+
+	* plugins/sudoers/auth/pam.c:
+	Pam conversation function changes: o use PAM_BUF_ERR as the return
+	value when calloc() fails. o sanity check the value of num_msg o
+	remove the workaround for old Apple PAM o PAM_AUTH_ERR is not a
+	valid PAM conversation function return value
+
+	If getpass_error is set after a call to pam_verify (usually because
+	the user pressed ^C), return AUTH_INTR immediately instead of
+	checking the pam_verify return value.
+	[8d378f40fe1f]
+
+	* INSTALL, NEWS, configure, configure.ac,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h:
+	On AIX use the value of auth_type in /etc/security/login.cfg to
+	determine whether to use LAM or PAM unless the user specified the
+	--with-pam or --with-aixauth configure flags.
+	[cb314c1ed5f8]
+
+	* lib/util/parseln.c:
+	Fix cast.
+	[4f56047e2bc4]
+
+2015-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, lib/util/snprintf.c:
+	Update snprintf.c from OpenBSD. The floating point and wide
+	character code has been retained but is not compiled by default.
+	[6801a77398fc]
+
+2015-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/sudoers/test1.in,
+	plugins/sudoers/regress/sudoers/test1.out.ok,
+	plugins/sudoers/regress/sudoers/test1.toke.ok:
+	Update the regression test that check that all tags are parsed.
+	[d0f9af2f9d45]
+
+	* MANIFEST, configure, configure.ac, lib/util/Makefile.in,
+	lib/util/mktemp.c, lib/util/regress/mktemp/mktemp_test.c, mkdep.pl:
+	Add regress for mkdtemp and mkstemps from OpenBSD
+	[18714ae9bffd]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[b77490dd9b33]
+
+	* plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po, po/tr.mo,
+	po/tr.po:
+	Sync with translationproject.org
+	[b2946065653d]
+
+	* config.h.in, configure.ac:
+	Correct SECURE_PATH comment.
+	[3fd6132d5dba]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.13
+	[32c1183b0666]
+
+2015-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	include/sudo_compat.h, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/gethostname.c, lib/util/util.exp.in,
+	plugins/sudoers/match.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/sudo.c:
+	Avoid using HOST_NAME_MAX directly and use
+	sysconf(_SC_HOST_NAME_MAX) instead.
+	[97036b819d58]
+
+	* plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c:
+	Historically, crypt() returned the empty string on error, which
+	ensured that crypt("", "") would return "", which supported matcing
+	empty encrypted passwords with no additional code. Some modern
+	versions of crypt() (such as glibc) return NULL on error so we need
+	an explicit test to match an empty plaintext password and an empty
+	encrypted password.
+	[b88eb9da5e57]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Sort tags lexically in the sudoers manual
+	[66716c0b7a13]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/sudoers/test1.out.ok,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers_version.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/visudo_json.c:
+	Add support for MAIL and NOMAIL command tags to toggle mail sending
+	behavior on a per-command (or Cmnd_Alias) basis.
+	[04f30a064c25]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h,
+	lib/util/closefrom.c, lib/util/setgroups.c,
+	plugins/sudoers/pwutil_impl.c, src/sudo.c:
+	Almost no systems actually define OPEN_MAX since it is dynamic on
+	modern OSes. If sysconf(_SC_OPEN_MAX) ever fails, fall back on
+	_POSIX_OPEN_MAX instead. We can assume modern systems have
+	sysconf(). Also remove checks for strrchr() and strtoll() for which
+	the HAVE_* defines are no longer used.
+	[c3058a6cca86]
+
+	* lib/util/getline.c, plugins/group_file/getgrent.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/tsgetgrpw.c:
+	All modern systems should have LINE_MAX.
+	[117322b6d86c]
+
+	* Makefile.in, sudo.pp:
+	Don't need to pass exampledir to polypkg now that it is just under
+	docdir.
+	[9f24f0184a78]
+
+2015-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Fix packaging of the example dir.
+	[4c7cbc3fc190]
+
+	* lib/util/mktemp.c:
+	Fix mkstemps() extension handling. Sudoedit will now preserve the
+	extension properly when the system libc lacks mkstemps().
+	[b86f54331972]
+
+2015-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, aclocal.m4, config.h.in, configure, configure.ac,
+	lib/util/Makefile.in, lib/util/locale_weak.c,
+	m4/ax_sys_weak_alias.m4, mkdep.pl, src/Makefile.in,
+	src/locale_stub.c:
+	Use weak symbols for sudo_warn_gettext() and sudo_warn_strerror() so
+	distros using "-Wl,--no-undefined" in LDFLAGS don't run into
+	problems.
+	[708418615aae]
+
+	* lib/util/mksiglist.c, lib/util/mksigname.c:
+	Include unistd.h in siglist.c and signame.c to get gid_t which is
+	used by sudo_compat.h. Bug #686
+	[0ab6450a96ec]
+
+2015-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/logging.c:
+	Add mail_all_cmnds to always mail when a user runs a command (or
+	tries to) including sudoedit. The mail_always flag goes back to its
+	old semantic of always mailing when sudo is run.
+	[edc904502061]
+
+2015-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Minor change in description of TZ path handling.
+	[579b02f0dbe0]
+
+	* Makefile.in, examples/Makefile.in:
+	Move example dir under the doc dir to conform to Debian guidelines.
+	Bug #682.
+	[494d9a0484b6]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that a leading ':' is skipped when checking TZ for a fully-
+	qualified path name.
+	[91859f613b88]
+
+2015-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Typo.
+	[b9257ea66116]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix typos.
+	[ac1467f71ac0]
+
+	* plugins/sample/sample_plugin.c:
+	Fix compilation on systems w/o __dso_public
+	[b773ef9127fa]
+
+2015-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, plugins/sudoers/po/ru.mo, plugins/sudoers/po/ru.po:
+	Russian translation for sudoers from translationproject.org.
+	[8a7fc2e00072]
+
+2015-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, doc/CONTRIBUTORS, plugins/sudoers/po/ru.mo,
+	plugins/sudoers/po/ru.po:
+	Russian translation for sudoers from translationproject.org.
+	[1d5869e4d4af]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Add check for getresuid() declaration, which may be missing on HP-
+	UX. When checking for getdomainname() prototype, look in netdb.h
+	too.
+	[0ba583590b17]
+
+	* INSTALL, NEWS, configure, configure.ac, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, m4/sudo.m4, pathnames.h.in,
+	plugins/sudoers/env.c:
+	Sanity check the TZ environment variable by special casing it in
+	env_check. The --with-tzdir configure option can be used to specify
+	the zoneinfo directory if configure doesn't find it.
+	[650ac6938b59]
+
+	* NEWS:
+	Mention crash fixes.
+	[f759c993e172]
+
+	* src/parse_args.c:
+	Bail with usage() early if argc <= 0.
+	[aaba56c9a797]
+
+2015-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c:
+	Remove extraneous casts of node->data (which is void *).
+	[950749570a00]
+
+	* doc/CONTRIBUTORS:
+	Add Stephane Chazelas
+	[a6c7becabee7]
+
+	* plugins/sudoers/pwutil.c:
+	Fix a potential crash when getpwnam() of the running user fails and
+	we don't replace the negative cached entry with a faked up one. From
+	Stephane Chazelas
+	[9088f041bbad]
+
+	* src/parse_args.c, src/sudo.c:
+	Don't assume argv[0] is set without first checking argc.
+	[aabdc9d0ba26]
+
+	* lib/util/progname.c:
+	Call setprogname("sudo") if getprogname() returns NULL or the empty
+	string.
+	[45438f7227b1]
+
+	* plugins/sudoers/set_perms.c:
+	Handle sudo_get_grlist() returning NULL which can happen if
+	getgrouplist() fails even after allocating the appropriate amount of
+	memory. From Stephane Chazelas
+	[25747a0ead7c]
+
+	* config.h.in, configure, configure.ac:
+	Remove configure checks for strrchr() and strtoll() for which the
+	HAVE_* defines are no longer used.
+	[f04216435aba]
+
+	* config.h.in, configure, configure.ac, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	Require POSIX regular expression support for sudoreplay.
+	[1486747cd470]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Check whether getdomainname(), innetgr(), setresuid() and
+	setresgid() are declared and add prototypes in sudo_compat.h as
+	needed.
+	[03aa144afce4]
+
+	* plugins/sudoers/policy.c:
+	The plugin no longer needs to call initprogname() now that it links
+	with the same libsudo_util as sudo.
+	[78b65a352ac5]
+
+2015-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Add /usr/local/share/examples/ directory to parentdirs so it is
+	explicitly added to the package.
+	[ef1aa52b0aad]
+
+	* plugins/sudoers/po/da.mo, po/da.mo:
+	Sync with translationproject.org
+	[943986acd31c]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/nl.mo,
+	po/nl.po:
+	Sync with translationproject.org
+	[4977ac967bdd]
+
+2015-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/gram.c:
+	Regen with yacc skeleton that the clang analyzer doesn't complain
+	about.
+	[e15991fd4ab1]
+
+	* configure, configure.ac, lib/util/alloc.c, lib/util/glob.c,
+	plugins/sudoers/env.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/getdate.y, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y:
+	Use stdint.h to get SIZE_MAX as inttypes.h on some pre-C99 HP-UX
+	systems doesn't include stdint.h itself.
+	[9fbd35811743]
+
+	* configure, configure.ac:
+	SIZE_MAX may be in limits.h on pre-C99 compilers.
+	[d3b554f7e0e5]
+
+	* config.h.in, configure, configure.ac, lib/util/aix.c:
+	Add missing prototypes for usrinfo() and setauthdb() for AIX.
+	[aa4b205296cf]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/match.c:
+	Solaris uses sysinfo(SI_SRPC_DOMAIN) instead of getdomainname() to
+	get the host's NIS domain.
+	[9234c62a1469]
+
+2015-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Remove AC_PROG_GCC_TRADITIONAL and add AC_PROG_CC_STDC since we need
+	C99.
+	[005775f5662b]
+
+	* plugins/sudoers/match.c:
+	Actually use the check for prior initialization in
+	sudo_getdomainname().
+	[06368385ad0d]
+
+	* configure, configure.ac:
+	We need to add OSDEFS to CFLAGS to expose LLONG_MAX et al on glibc
+	when not explicitly asking for c99.
+	[ae9435631600]
+
+	* NEWS, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/logging.c:
+	Don't send mail about pseudo-command failure unless it is an
+	authentication failure.
+	[deddcfc1f2ab]
+
+	* configure, configure.ac:
+	Fix check for SIZE_MAX, which should be in stdint.h not limits.h.
+	[47bf0ab7dfca]
+
+	* lib/util/glob.c:
+	Need to include inttypes.h for SIZE_MAX
+	[a11f42f40294]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[d35b24f95ef8]
+
+2015-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_debug.h, lib/util/aix.c, lib/util/event.c,
+	lib/util/event_poll.c, lib/util/event_select.c, lib/util/gidlist.c,
+	lib/util/key_val.c, lib/util/lbuf.c, lib/util/locking.c,
+	lib/util/parseln.c, lib/util/secure_path.c, lib/util/setgroups.c,
+	lib/util/strtobool.c, lib/util/strtoid.c, lib/util/strtomode.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/term.c,
+	lib/util/ttysize.c, lib/util/util.exp.in, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/base64.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/hexchar.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c, src/exec.c,
+	src/exec_common.c, src/exec_pty.c, src/get_pty.c, src/hooks.c,
+	src/load_plugins.c, src/net_ifs.c, src/parse_args.c,
+	src/preserve_fds.c, src/selinux.c, src/sesh.c, src/signal.c,
+	src/solaris.c, src/sudo.c, src/sudo_edit.c, src/tgetpass.c,
+	src/ttyname.c, src/utmp.c:
+	Go back to a 2 args debug_decl and just use the "default" instance,
+	now renamed "active".
+	[7130b7478355]
+
+2015-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/LICENSE:
+	Update copyright year.
+	[e1dad7b195e4]
+
+2015-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.h:
+	When querying LDAP netgroups, use the NIS domain if it is sent but
+	also match nisNetgroupTriple entries that have no domain.
+	[5a0fa3ac26f7]
+
+	* plugins/sudoers/sudoreplay.c:
+	Avoid setting the tty to non-blocking mode so "sudoreplay | cat"
+	(for example) works as expected. We only read a single byte from the
+	keyboard and only when interactive anyway so this should be fine.
+	[9615a932545b]
+
+	* lib/zlib/Makefile.in, plugins/sudoers/Makefile.in:
+	regen
+	[f19c6e000850]
+
+	* plugins/sudoers/sudoreplay.c:
+	Avoid a cppcheck warning about undefined behavior (using the address
+	of a stack buffer - 1) and fix a memory leak of the iov when doing
+	nl->crnl conversion.
+	[e26f9008c2e4]
+
+	* doc/CONTRIBUTORS:
+	Add Steven Soulen
+	[17a47303d5fe]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix handling of partial writes from writev() which can occur with
+	large output buffers.
+	[1065dbeaa13d]
+
+2015-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap.c:
+	Add support for querying netgroups directly via LDAP since there is
+	no other way to look up all the netgroups for a user (unlike regular
+	groups). This introduces netgroup_base and netgroup_search_filter
+	options to ldap.conf. Based on a diff from Steven Soulen.
+	[7e3d55983e71]
+
+2015-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Sort ldap.conf options.
+	[264608124698]
+
+2015-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Add macros to ease the checking of strlcpy, strlcat and
+	sudo_ldap_value_cat return values.
+	[e9122413d4fa]
+
+2015-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Rename VALIDATE_OK -> VALIDATE_SUCCESS Rename VALIDATE_NOT_OK ->
+	VALIDATE_FAILURE
+	[4379cac9f75d]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/sudoers.h:
+	Remove now-unused VALIDATE_ERROR define.
+	[569d4936b761]
+
+	* plugins/sudoers/logging.c:
+	should_mail() now returns bool.
+	[0316d1fb08c3]
+
+	* lib/util/sudo_debug.c:
+	If sudo_debug_register() fails return
+	SUDO_DEBUG_INSTANCE_INITIALIZER, not -1. Otherwise we could end up
+	setting the instance to -1 which is invalid.
+	[032bb1db6db5]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix typo.
+	[014be972780c]
+
+	* doc/Makefile.in:
+	Use "mandoc -Tascii" to generate .cat pages to avoid locale-specific
+	characters.
+	[0ec42d8924fc]
+
+2015-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, m4/sudo.m4:
+	Use AC_PATH_PROG to find programs instead of checking the path
+	manually.
+	[2b5d9893a7a7]
+
+2015-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/strlcat.c, lib/util/strlcpy.c:
+	Sync with OpenBSD version
+	[22c073c42a9e]
+
+2015-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Use AC_CHECK_HEADERS_ONCE and AC_CHECK_FUNCS_ONCE where possible and
+	quote the first args in AC_CHECK_FUNCS calls.
+	[84aa40ab410a]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Avoid inadvertantly defining things like PATH_MAX simply because the
+	source file doesn't include limits.h.
+	[d2e7c4093f55]
+
+2015-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, ltmain.sh, m4/libtool.m4, m4/ltoptions.m4,
+	m4/ltversion.m4:
+	Update to libtool 2.4.4 + HP-UX patches
+	[859b7378bc37]
+
+	* src/ttyname.c:
+	Document why we need sys/param.h.
+	[f21a4d7122f0]
+
+	* configure, m4/sudo.m4:
+	Don't need sys/param.h.
+	[6aa24ecfc9d4]
+
+	* lib/util/closefrom.c:
+	Don't appear to need sys/param.h for pstat_getproc() on HP-UX even
+	though the man page lists it.
+	[47d75f3db288]
+
+	* lib/util/inet_ntop.c, lib/util/inet_pton.c:
+	Should not need sys/param.h here.
+	[5c83cebcd75f]
+
+2014-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match_addr.c:
+	Use standard CIDR -> netmask conversion and disallow 0-bit CIDRs.
+	[d30313d726eb]
+
+2014-12-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	Update link to gq LDAP editor, now on sourceforge.
+	[706dadea1abb]
+
+2014-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/compat/glob.h, lib/util/glob.c:
+	Add support for GLOB_LIMIT from OpenBSD (not currently used) and
+	also a limit on the max recursion depth for glob().
+	[6f9e26b88612]
+
+	* lib/util/glob.c:
+	Quiet compiler sign compare warning.
+	[c4f35c02122c]
+
+2014-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	fnmatch fix
+	[07542b07ac67]
+
+	* lib/util/fnmatch.c:
+	Remove artificial limit on length of pattern and string. It is
+	possible to use fnmatch() on things other than paths (such as
+	arguments) so a limit of PATH_MAX does not make sense. Fixes a bug
+	where rules would fail to match if the length of the arguments were
+	larger than PATH_MAX (usually 1024).
+	[942770c20422]
+
+2014-12-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in:
+	Remove the extra /sudo in sudo.ws urls
+	[0b804e3a1008]
+
+2014-11-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in:
+	Reference bugzilla.sudo.ws
+	[7dc11bbe6f13]
+
+2014-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	sync
+	[da17d5a611ce]
+
+2014-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Require that a digest be specified with a real command, not an alias
+	or pseudo-command. Found via a crash by afl.
+	[55f6166cab63]
+
+	* NEWS:
+	sync
+	[4b31247735c4]
+
+	* MANIFEST, doc/CONTRIBUTORS, plugins/sudoers/po/fr.mo,
+	plugins/sudoers/po/fr.po:
+	French translation for sudoers from translationproject.org.
+	[5c592350c4b0]
+
+2014-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c, src/tgetpass.c:
+	Defer registration of the SIGCHLD handler until just before we exec
+	the command. Fixes a problem where pam_gnome_keyring installs its
+	own SIGCHLD handler and may not restore the original one. As a
+	result, we now have to explicitly wait for the askpass helper to
+	finish. Bug #657
+	[f499500fef71]
+
+2014-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Mention sssd support in the sudoers.ldap manual and cross-reference
+	sssd-sudo(5).
+	[32f84fbf210c]
+
+2014-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Reorder an entry.
+	[5d15735294f1]
+
+2014-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, lib/util/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Prevent cppcheck from getting confused by our compat definition of
+	the va_copy macro for pre-C99.
+	[61d94525be2e]
+
+2014-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog_path.c:
+	Fix potential NULL pointer deref found by cppcheck.
+	[668967e031e0]
+
+	* plugins/sudoers/alias.c:
+	Quiet a cppcheck false positive.
+	[35a16ae4660c]
+
+	* lib/util/sudo_debug.c:
+	If there are multiple outputs, ap will be re-used so make a copy and
+	operate on it instead.
+	[f4f19df43c93]
+
+	* src/hooks.c:
+	Fix typo in hook return value check.
+	[b12839dc6e78]
+
+	* NEWS:
+	Mention visudo use of sudoers plugin args to set default sudoers
+	file name and owner/mode.
+	[7f2733b53431]
+
+	* NEWS:
+	Mention fix for bug #678
+	[7f7a6d8b985b]
+
+2014-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	In set_fqdn() we neeed to set user_runhost/user_srunhost at the same
+	time we set user_host/user_shost since that is what
+	hostlist_matches() uses. Bug #678
+	[4f75b01d4884]
+
+2014-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/hooks.c:
+	Do not call sudo_warnx() on invalid value from the env hook
+	functions as the printf() family may call getenv() for locale
+	reasons.
+	[547fc25acb7c]
+
+	* doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in:
+	No need to keep specifying ".Nm foo" since the Nm macro remembers
+	the argument it was first called with and uses it if none is
+	specified. Also fix a few minor formatting errors and regen bulleted
+	lists in the .man.in files.
+	[d2669e94add4]
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Add sudo.conf to SEE ALSO and rename section on sudo.conf
+	[d4cc8ad2c2b4]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	Mention sudo.conf use for debugging
+	[9393fb061bcd]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo_plugin.cat,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.man.in,
+	doc/sudoreplay.cat:
+	regen
+	[1d34d21b2136]
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Document sudo.conf usage now that visudo will parse the sudoers
+	arguments.
+	[78a413c019a9]
+
+2014-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Use sudoers.so args from sudo.conf to set sudoers_file, sudoers_uid,
+	sudoers_gid, and sudoers_mode in visudo.
+	[1c7408b5ff7e]
+
+	* plugins/sudoers/visudo.c:
+	Use sudoers_file, sudoers_uid, sudoers_gid, and sudoers_mode symbols
+	from toke.l instead of the upper case defines.
+	[21ba15518c7d]
+
+	* lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in:
+	Use SSP_LDFLAGS when creating shared objects.
+	[2428de97d2c2]
+
+	* lib/util/Makefile.in:
+	We only build .lo (not .o) files for libsudo_util
+	[2c1e0475cddc]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/cs.mo,
+	po/cs.po, po/da.mo, po/da.po, po/de.mo, po/de.po, po/eo.mo,
+	po/eo.po, po/fi.mo, po/fi.po, po/it.mo, po/it.po, po/nb.mo,
+	po/nb.po, po/pl.mo, po/pl.po, po/pt_BR.mo, po/pt_BR.po, po/ru.mo,
+	po/ru.po, po/uk.mo, po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo,
+	po/zh_CN.po:
+	Sync with translationproject.org
+	[e51055fdffe1]
+
+2014-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	sync
+	[aab14a9942e0]
+
+2014-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c:
+	Make sure that SIGCHLD is not treated as a user-generated signal in
+	which case it could be ignored. Bug #676
+	[a4caaaaa47a8]
+
+2014-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, lib/util/mktemp.c:
+	Use arc4random() for mkstemp/mkdtemp if available. If not, try to
+	seed from /dev/urandom before falling back to the gettimeofday seed.
+	[7a7096ab82c9]
+
+	* lib/util/sudo_debug.c:
+	Use a static buffer for sudo_debug_execve2() if possible.
+	[abf1fd5891ab]
+
+2014-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, ltmain.sh, m4/libtool.m4, m4/ltoptions.m4, m4/ltsugar.m4,
+	m4/ltversion.m4, m4/lt~obsolete.m4:
+	Update to libtool 2.4.3 + HP-UX patches
+	[9ddfd96f3bea]
+
+2014-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, include/sudo_compat.h, lib/util/mktemp.c:
+	If a system lacks mkdtemp() or mkstemps(), use our own mkdtemp() and
+	mkstemps(). Previously we only exposed the missing one but since the
+	guts are the same we might as well use them.
+	[12d4ac64462f]
+
+	* src/env_hooks.c:
+	Mark the putenv(), setenv() and unsetenv() symbols as global, not
+	hidden. Fixes a mismatch where a plugin (or its loaded dso) would
+	call setenv() to set a variables but be unable to find it later with
+	getenv().
+	[96127ac4bbb3]
+
+2014-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Fix install-nls target from builddir.
+	[da63bc37f6c5]
+
+	* Makefile.in:
+	Fix dependency on sudo.pp, it needs to relative to srcdir.
+	[c76088da98e8]
+
+	* src/sesh.c:
+	Adapt to new debug subsystem registration.
+	[8e13b349b44b]
+
+2014-10-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/zlib/Makefile.in, lib/zlib/zlib.exp:
+	Add missing zlib.exp file and common LT_LDFLAGS Makefile.in.
+	[0bc0092d3e03]
+
+	* lib/util/sudo_conf.c:
+	Fix path settings broken in rev 9731.
+	[2b33916eb287]
+
+	* MANIFEST, lib/util/regress/sudo_conf/test4.err.ok:
+	Adjust regress test now that boolean settings display an error for
+	invalid input.
+	[73a7365f492e]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Add sudoers_debug_deregister() and use it instead of calling
+	sudo_debug_deregister() directly.
+	[819b0e08196e]
+
+	* configure, configure.ac, lib/util/Makefile.in, lib/zlib/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in:
+	Use AC_PROG_AWK
+	[945cf6deb18d]
+
+	* NEWS:
+	Mention shared zlib.
+	[094bdada1106]
+
+	* MANIFEST:
+	Add lib/zlib/zlib.exp
+	[7b5011e3eea9]
+
+	* INSTALL, configure, configure.ac, lib/zlib/Makefile.in,
+	lib/zlib/zconf.h.in:
+	Add support for installing a shared zlib
+	[6875ab6ca44f]
+
+	* lib/util/Makefile.in:
+	fix comment typo
+	[35c3dda27eec]
+
+	* configure, configure.ac, lib/zlib/Makefile.in:
+	Newer zlib uses HAVE_HIDDEN to turn on symbol hiding so we don't
+	need to disable it with NO_VIS.
+	[b3eee86f015f]
+
+	* po/sudo.pot:
+	regen
+	[687bc1ea88ac]
+
+	* configure.ac, include/sudo_debug.h, lib/util/sudo_debug.c,
+	lib/util/util.exp.in:
+	Version the symbols for sudo_debug.c now that the API is stable.
+	[873850a062a8]
+
+2014-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/sudo_conf.c:
+	Go back to parsing sudo.conf in place for settings and paths and
+	improve debugging info for unsupported entries and parse errors.
+	[264e1f7d6551]
+
+	* include/sudo_conf.h, lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/sudo_conf.c, lib/util/util.exp.in,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/load_plugins.c, src/sudo.c, src/sudo_plugin_int.h:
+	Add a flag argument to sudo_conf_read() so we can decide which bits
+	get parsed. This lets us parse Debug statements first and init the
+	debug subsystem early.
+	[56dbf1e671de]
+
+2014-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/zlib/gzguts.h:
+	Include stdio.h after zlib.h, not before. We need the large file
+	defines to come first.
+	[b42b53d10252]
+
+	* doc/LICENSE, lib/zlib/compress.c, lib/zlib/crc32.c,
+	lib/zlib/crc32.h, lib/zlib/deflate.c, lib/zlib/deflate.h,
+	lib/zlib/gzguts.h, lib/zlib/gzlib.c, lib/zlib/gzread.c,
+	lib/zlib/gzwrite.c, lib/zlib/infback.c, lib/zlib/inffast.c,
+	lib/zlib/inflate.c, lib/zlib/inftrees.c, lib/zlib/trees.c,
+	lib/zlib/uncompr.c, lib/zlib/zconf.h.in, lib/zlib/zlib.h,
+	lib/zlib/zutil.c, lib/zlib/zutil.h:
+	Update zlib to version 1.2.8
+	[f95280e0448d]
+
+	* configure, configure.ac:
+	Don't add -Wold-style-definition to CFLAGS as it causes problems
+	with 3rd party libraries such as zlib.
+	[1d7613d1c177]
+
+	* src/load_plugins.c:
+	Free up plugin info structs after converting to plugin containers.
+	[1168e873d778]
+
+	* INSTALL, MANIFEST, Makefile.in, configure, configure.ac,
+	doc/Makefile.in, doc/TROUBLESHOOTING, doc/UPGRADE, doc/sample.pam,
+	doc/sample.sudo.conf, doc/sample.sudoers, doc/sample.syslog.conf,
+	examples/Makefile.in, examples/pam.conf, examples/sudo.conf,
+	examples/sudoers, examples/syslog.conf, sudo.pp:
+	Move sample.* files to a sudo examples dir
+	[b53e3df56c66]
+
+	* sudo.pp:
+	Fix a packaging problem with the sudoedit man page link on Debian.
+	[8ad77a37048e]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/policy.c:
+	Initialize the debug subsystem in sudoers early. Currently this
+	means iterating over the settings list twice.
+	[93b12ea08405]
+
+	* lib/util/sudo_debug.c:
+	No need to convert sudoedit -> sudo in sudo_debug_get_instance() as
+	we store the actual program name and only do the sudoedit -> sudo
+	conversion when reading the sudo.conf file. Fixes debugging when
+	invoked as sudoedit.
+	[535c01d83b14]
+
+	* lib/util/sudo_conf.c, lib/util/sudo_debug.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c, src/exec_pty.c,
+	src/load_plugins.c, src/sudo.c, src/sudo_plugin_int.h:
+	In the plugin registers with the debug framework at open time, the
+	sudo front-end will now set the default debug instance appropriately
+	before calling into the plugin. This means the plugin no longer
+	needs to do the sudo_debug_set_default_instance() dance.
+	[10dd45a7884f]
+
+	* Makefile.in:
+	Remove duplicate -U__NBBY in CPPCHECK_OPTS
+	[ad518cb36279]
+
+2014-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Older shells don't support unset.
+	[8762e40871ab]
+
+	* configure, configure.ac, include/sudo_compat.h,
+	lib/util/inet_ntop.c, src/net_ifs.c:
+	Fix inet_ntop() replacement on older systems without it. We only
+	expose the prototype for net_ifs.c due to the use of socklen_t.
+	[18b95ca378ab]
+
+	* lib/util/sudo_debug.c:
+	Dynamically allocate debug_fds bitmap and realloc as needed.
+	[e858199414f6]
+
+	* Makefile.in, include/sudo_debug.h, lib/util/Makefile.in,
+	lib/util/sudo_debug.c, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoers_debug.h,
+	plugins/system_group/Makefile.in, src/Makefile.in, src/exec.c:
+	Use generic bitmap macros instead of select-style fd_set.
+	[c382edc413be]
+
+	* lib/util/sudo_debug.c:
+	Replace sudo_debug_num_instances with sudo_debug_max_instance
+	[12625fd174a4]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/policy.c:
+	Don't call into the debug subsystem after we've deregistered the
+	plugin's instance.
+	[fca7279d2f40]
+
+	* lib/util/sudo_debug.c:
+	Only fill in subsystem_ids[] for the instance if the caller passed
+	in an array for it. If the caller only wants the default subsystems
+	we don't actually need ids[].
+	[07939da6d3a5]
+
+	* lib/util/Makefile.in:
+	Link with -ldl if needed when built with --disable-shared-libutil/
+	[542eeffaf57d]
+
+	* src/regress/ttyname/check_ttyname.c:
+	Fix includes order.
+	[ddd58edba5af]
+
+	* lib/util/util.exp.in:
+	Remove extra newline mistakenly introduced in rev 9682.
+	[36a40e308bbc]
+
+	* plugins/sudoers/Makefile.in:
+	Fix typo in unset.
+	[2c5fbe4c9a54]
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/sesh.c:
+	Set debug instance for standalone programs.
+	[306225438408]
+
+	* plugins/sudoers/bsm_audit.c, plugins/sudoers/linux_audit.c,
+	src/net_ifs.c:
+	Fix compilation issues, fallout from the debug changes.
+	[aff5bb3d0322]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	regen
+	[bbb69f299d1f]
+
+	* configure, configure.ac:
+	Sudo 1.8.12
+	[8d9b15c1de44]
+
+	* NEWS:
+	Update with debug system changes and revent bug fixes.
+	[44133de1dee2]
+
+	* include/sudo_debug.h, lib/util/sudo_conf.c, lib/util/sudo_debug.c,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoers_debug.h:
+	When registering with the debug subsystem, the caller now passes in
+	an arrary of ints that gets filled in with the subsytem IDs to be
+	used in debug_decl.
+	[80e80ba194f7]
+
+	* plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	sudoers_debug_instance is now included in libparsesudoers so we
+	don't need to declare it here.
+	[a56f79e6fcf8]
+
+2014-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, include/sudo_debug.h, lib/util/sudo_debug.c,
+	lib/util/ttysize.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/alias.c, plugins/sudoers/audit.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/base64.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/hexchar.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logwrap.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoers_debug.c, plugins/sudoers/sudoers_debug.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c:
+	The sudoers plugin now defines its own list of debugging subsystem
+	names and defines.
+	[e85d0375e059]
+
+	* MANIFEST, include/sudo_debug.h, lib/util/aix.c, lib/util/event.c,
+	lib/util/event_poll.c, lib/util/event_select.c, lib/util/gidlist.c,
+	lib/util/key_val.c, lib/util/lbuf.c, lib/util/locking.c,
+	lib/util/parseln.c, lib/util/secure_path.c, lib/util/setgroups.c,
+	lib/util/strtobool.c, lib/util/strtoid.c, lib/util/strtomode.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/term.c,
+	lib/util/ttysize.c, lib/util/util.exp.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/base64.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/hexchar.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logwrap.c,
+	plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers_debug.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c,
+	src/Makefile.in, src/exec.c, src/exec_common.c, src/exec_pty.c,
+	src/get_pty.c, src/hooks.c, src/load_plugins.c, src/net_ifs.c,
+	src/parse_args.c, src/preserve_fds.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/sesh.c,
+	src/signal.c, src/solaris.c, src/sudo.c, src/sudo.h,
+	src/sudo_edit.c, src/tgetpass.c, src/ttyname.c, src/utmp.c:
+	Add support for multiple Debug lines per program. Callers may
+	register arbitrary debug facilities or use built-in defaults. We now
+	use separate Debug statements for plugins and programs.
+	[5e553cbbfbb1]
+
+	* MANIFEST, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_conf.h, include/sudo_debug.h,
+	lib/util/Makefile.in, lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_conf/test7.in,
+	lib/util/regress/sudo_conf/test7.out.ok, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, lib/util/util.exp.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/solaris_audit.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.h, src/hooks.c,
+	src/load_plugins.c, src/parse_args.c, src/sudo.c,
+	src/sudo_plugin_int.h:
+	Change how sudo.conf is parsed. We now do a quick parse and then set
+	the values after the entire file has been parsed. This lets us init
+	the debug system earlier. Plugin-specific debug flags are now stored
+	in struct plugin_info and struct plugin_container and passed to the
+	plugin via one or more debug_flags settings.
+	[62fb1102e1e2]
+
+	* src/parse_args.c, src/sudo.c, src/sudo.h:
+	Return settings from parse_args as struct sudo_settings and format
+	for the plugin at plugin open time. This will allow for additional,
+	plugin-specific settings to be added to the array.
+	[167929871b94]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h, src/load_plugins.c,
+	src/sudo.c, src/sudo_plugin_int.h:
+	Pass plugin path in the settings array.
+	[45bc2d087115]
+
+	* plugins/sudoers/parse.c:
+	Remove an unneeded NULL check to quiet a cppcheck warning.
+	[64cb92122658]
+
+2014-10-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Set locale to C for visudo and testsudoers regression tests. Bug
+	#672
+	[adf7997a0a65]
+
+2014-10-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/linux_audit.c:
+	Fix logic bug. We only want to return -1 from linux_audit_open()
+	when audit_open() fails and errno is not one of EINVAL,
+	EPROTONOSUPPORT, or EAFNOSUPPORT. For those errno values, we return
+	AUDIT_NOT_CONFIGURED which is not a fatal error. Bug #671
+	[6f0d8f1c7648]
+
+2014-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Add back fix for Bug #663
+	[a3dfc76ee776]
+
+2014-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	The older style bash function exporting is not used by post-
+	shellshock versions of bash.
+	[223efe328e86]
+
+	* plugins/sudoers/env.c:
+	Apple uses a different variant of the BASH_FUNC prefix for bash
+	functions.
+	[ea13c8c2a716]
+
+2014-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Remove change that is part of 1.8.12 not 1.8.11p1
+	[8fdad4c4f314]
+
+	* NEWS, configure, configure.ac:
+	Update for sudo 1.8.11p1
+	[80e9898f7c04]
+
+	* src/regress/ttyname/check_ttyname.c:
+	Only check stdin for the tty and avoid the check entirely if we
+	don't have a way to get the tty from the kernel. Bug #643
+	[deb799e16416]
+
+	* lib/util/sudo_debug.c:
+	Make a copy of ap in sudo_debug_vprintf2() in case the static buffer
+	is not big enough and we need to call vasprintf().
+	[a5d32b9d63be]
+
+	* src/sudo.c:
+	Avoid comparing new cwd with old one if getcwd() failed. Bug #670
+	[e99093578ca7]
+
+	* plugins/sudoers/env.c:
+	Fix debugging printout output for env_should_keep()
+	[a9e7ea4b6751]
+
+2014-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, include/Makefile.in:
+	Use INSTALL_OWNER instead of -O/-G flags so we can work with the
+	autotools install-sh too. Bug #669
+	[a5f87f6a52b7]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
+	Move sudo_printf to policy.c to match sudo_conv.
+	[f2d6065c3daf]
+
+2014-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, include/sudo_fatal.h, lib/util/Makefile.in,
+	lib/util/fatal.c, lib/util/sudo_printf.c, lib/util/util.exp.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/sudo_printf.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	src/conversation.c, src/sudo.c, src/sudo_plugin_int.h:
+	Add sudo_warn_set_conversation() to specify a conversation function
+	to use for warn/fatal. If no conversation function is specified, the
+	standard error will be used. We now only need sudo_printf() for
+	things that use the parser.
+	[d6049e53e3e3]
+
+2014-10-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Use correct names when referring to subsections in the sudoers
+	manual.
+	[7a016916f0ab]
+
+2014-10-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, config.h.in, configure, configure.ac,
+	lib/util/inet_ntop.c, src/net_ifs.c:
+	Use inet_ntop() instead of inet_ntoa() and include a version for
+	systems that are missing it.
+	[1a1a70dba9c0]
+
+2014-10-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Fix detection of functions in network libs like -lsocket, -lnsl and
+	-linet when we have already added those libs to NET_LIBS. Fixes a
+	problem where inet_pton() was not detected on Solaris.
+	[27e10183649e]
+
+	* NEWS:
+	Mention --disable-shared-libutil fix.
+	[7efe70688237]
+
+	* src/Makefile.in:
+	Always use --tag=disable-static to avoid installing a static
+	sudo_noexec.
+	[5d7d58879f99]
+
+	* configure, configure.ac, lib/util/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Instead of building libutil statically for --disable-shared-libutil,
+	just treat it as a convenience library. Do the same with sudoers for
+	--enable-static-sudoers. Fixes link errors on Solaris among others
+	when --disable-shared-libutil is used.
+	[c5357fe78ab7]
+
+	* configure, configure.ac, lib/util/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in:
+	Remove LT_LDMAP and LT_LDOPT and just use LT_LDEXPORTS for the
+	compiler-specific option to restrict symbol exporting.
+	[09e8dab6f528]
+
+	* src/preload.c:
+	Include sys/types.h to get gid_t, etc used in sudo_compat.h. Fixes a
+	build issue on Solaris.
+	[b8917967df41]
+
+2014-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/regress/ttyname/check_ttyname.c:
+	Fix cust & pasto in error message when there is a mismatch between
+	the sudo and libc ttys. From Diego Elio Petteno'. Bug #643
+	[87d5f1a49535]
+
+2014-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c:
+	Add BASH_FUNC_* to environment blacklist for newer-style bash
+	functions.
+	[b6e66c4a782e]
+
+	* Makefile.in:
+	Pull additional password prompts out of mkpkg instead of hard-coding
+	them.
+	[d2a6da883b34]
+
+	* NEWS:
+	Add post-1.8.11 changes
+	[11169ace8fa4]
+
+	* Makefile.in, configure.ac, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/po/sudoers.pot:
+	Add a space after "Password:" in default password prompt so it is
+	easier to read when pwfeedback is enabled.
+	[a7750d845b5b]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Simplify how we count the password tries
+	[71b9f2021561]
+
+	* plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c:
+	Block SIGINT and SIGQUIT while verifying passwords so that
+	authentication modules that use sleep() are not interrupted. If the
+	user interrupted authentication, exit the loop.
+	[1cfafd7fcb13]
+
+	* configure, configure.ac:
+	Remove Convex support; it is not modern enough to run sudo 1.8.
+	[c3bdfbb2ee11]
+
+	* configure, configure.ac:
+	Only check for -lshadow if we haven't already found getspnam() in
+	libc. Rather than treat this specially, just add -lshadow as another
+	place to search in addition to -lgen.
+	[fdf06757f25d]
+
+2014-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	If all authentication methods fail init/setup, fail with an error.
+	[4cd0481bf05e]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Move pass_warn() so that it is defined before it is called().
+	[6ea697e89fef]
+
+2014-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Remove duplicate Requires: line in generated rpm spec file.
+	[335703b110c7]
+
+	* pp:
+	In pp_files_expand() set _target to be empty. Fixes a problem with
+	Solaris sh where simply using typeset doesn't causes the variable to
+	be treated as local so we can inadvertantly inherit a value from a
+	previous call.
+	[f3cecca3c7b0]
+
+2014-09-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Fix version for release.
+	[39f6a2e9a098]
+
+2014-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, pathnames.h.in:
+	Only redefine _PATH_BSHELL on AIX if we included paths.h.
+	[2dd4e808f69f]
+
+	* NEWS:
+	Bug 661
+	[7f2b278086b2]
+
+	* pathnames.h.in, src/exec_common.c, src/sudo.c:
+	On AIX, _PATH_BSHELL is /usr/bin/bsh but we want to use /usr/bin/sh
+	(which is usually ksh). This makes sudo's behavior when executing a
+	shell without the #! magic number match execvp() on AIX.
+	[2b438ff99991]
+
+	* pathnames.h.in:
+	Whitespace changes.
+	[107f66ecfa54]
+
+	* configure, m4/sudo.m4:
+	Prefer /usr/bin/sh to /bin/sh to match modern systems.
+	[9e2ccb5b239f]
+
+	* NEWS, lib/util/Makefile.in:
+	Don't use SSP_CFLAGS or PIE_CFLAGS when building mksiglist/mksigname
+	as they are built with the host compiler which may be different when
+	cross-compiling. From Gustavo Zacarias. Bug 662.
+	[f1a6d58c0baa]
+
+2014-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fi.mo,
+	po/fi.po, po/nb.mo, po/nb.po, po/pl.mo, po/pl.po, po/pt_BR.mo,
+	po/pt_BR.po, po/ru.mo, po/ru.po, po/sr.mo, po/sr.po, po/uk.mo,
+	po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo, po/zh_CN.po:
+	Sync with translationproject.org
+	[588c41d2eab5]
+
+2014-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudo_nss.c:
+	Make sure we can't insert an nss entry in the list that has already
+	been used before.
+	[b5fab945991b]
+
+	* plugins/sudoers/visudo_json.c:
+	Use correct gettext macro with sudo_warnx()
+	[0a532986b016]
+
+	* NEWS:
+	Make nsswitch.conf bug fix description more accurrate. It affects
+	the "files" nsswitch source too.
+	[a29cce3a3ee9]
+
+	* NEWS:
+	Mention nsswitch.conf duplicate entry fix.
+	[f8a45b59a577]
+
+2014-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c, plugins/sudoers/sudoers.h:
+	Make sudoers file nsswitch functions static to parse.c since they
+	are self-contained.
+	[cf22385d0659]
+
+	* plugins/sudoers/sudo_nss.c:
+	Fix infinite loop when mulitple sudoers entries are present in
+	nsswitch.conf. From Daniel Kopecek.
+	[e773e0eee736]
+
+2014-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Fix for bug #660
+	[e25192ad79cc]
+
+	* src/get_pty.c:
+	Fix compilation on systems without openpty(), _getpty() or
+	grantpt(). From Vasilyy Balyasnyy
+	[897280412e3e]
+
+2014-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/conversation.c:
+	Remove remaining use of SUDO_CONV_DEBUG_MSG.
+	[4ee756b687ea]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h:
+	SUDO_CONV_DEBUG_MSG is no longer supported.
+	[7bf46cf06578]
+
+	* doc/sudo.conf.cat, doc/sudoers.cat:
+	regen
+	[5bff0d4d3956]
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c, lib/util/sudo_printf.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c:
+	There is no longer a reason for the plugin to init the debug
+	subsystem itself. It will always be initialized by the front-end if
+	needed.
+	[970dd80a9e3c]
+
+	* include/sudo_alloc.h, include/sudo_compat.h, include/sudo_fatal.h:
+	Add function arg names to prototypes where missing.
+	[e78dc4c48521]
+
+	* lib/util/alloc.c:
+	Remove obsolete definition of SIZE_T which is now handled by
+	sudo_compat.h and rename the format arg to fmt in
+	sudo_evasprintf_v1() for consistency with sudo_easprintf_v1().
+	[72c0fc5e5114]
+
+	* src/parse_args.c:
+	If we were invoked with any name ending in "edit", treat as
+	sudoedit.
+	[d307572f08bc]
+
+2014-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* po/sudo.pot:
+	regen
+	[31c115ffbba8]
+
+	* src/exec.c, src/exec_pty.c, src/signal.c:
+	Check return value of sigaction(), even though it should never fail.
+	[75c578e6a07c]
+
+2014-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/Makefile.in, src/Makefile.in:
+	regen
+	[2fcb390e8e89]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/parser/check_hexchar.c:
+	Add hexchar unit test
+	[de65e0ded4a2]
+
+	* plugins/sudoers/regress/parser/check_addr.c:
+	Avoid division by zero if there was no test data.
+	[de3324077ba0]
+
+2014-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/event.c:
+	Remove confusing comment.
+	[ee1765a06b94]
+
+	* lib/util/sudo_debug.c:
+	Use a stack buffer for the debug message when possible, most are
+	small.
+	[945fb94a7aaf]
+
+2014-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po, po/ca.mo,
+	po/ca.po:
+	Sync with translationproject.org
+	[661d536a7599]
+
+2014-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	Convert a debug printf to a user-visible warning.
+	[c3866eaea3ec]
+
+	* include/sudo_fatal.h, include/sudo_util.h, lib/util/fatal.c:
+	Move sudo_printf extern to sudo_util.h
+	[50275ef999e9]
+
+	* include/sudo_fatal.h, include/sudo_lbuf.h, lib/util/fatal.c,
+	lib/util/lbuf.c:
+	Some versions of the HP C Compiler don't export functions that take
+	function pointers as arguments unless a typedef is used.
+	[97cc0525dbd7]
+
+	* include/sudo_lbuf.h:
+	Work around a bug in the HP C compiler.
+	[5c902aefeba6]
+
+	* lib/util/lbuf.c:
+	Don't need sudo_fatal.h
+	[bccfe4df4794]
+
+2014-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* po/da.mo, po/da.po:
+	Sync with translationproject.org
+	[7910e3fc0f3e]
+
+	* src/exec.c:
+	Remove signal_event from evbase before calling sudo_ev_loopexit()
+	when the command has exited or been killed. It is possible that we
+	could receive another signal on the pipe if they are delivered out
+	of order.
+	[b8ed1c9482b4]
+
+2014-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Treat EOF on signal pipe (which should never happen) as ECONNRESET.
+	[eb57e9047a2c]
+
+	* include/sudo_event.h, lib/util/event.c, src/exec_pty.c:
+	Don't allow sudo_ev_loopcont() to override sudo_ev_loopexit()
+	[b6b53eacbc61]
+
+	* include/sudo_event.h, lib/util/event.c, lib/util/event_poll.c,
+	lib/util/event_select.c:
+	Add some internal convenience functions.
+	[b01063d82347]
+
+2014-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Fix osrelease sed expression. It wasn't matching distros with a
+	single digit version such as sles9.
+	[44f3e9b7e6c0]
+
+	* plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po, po/cs.mo,
+	po/cs.po, po/de.mo, po/de.po, po/eo.mo, po/eo.po, po/fi.mo,
+	po/fi.po, po/it.mo, po/it.po, po/nb.mo, po/nb.po, po/pl.mo,
+	po/pl.po, po/pt_BR.mo, po/pt_BR.po, po/ru.mo, po/ru.po, po/uk.mo,
+	po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo, po/zh_CN.po:
+	Sync with translationproject.org
+	[5b2c6063db75]
+
+	* plugins/sudoers/iolog.c:
+	Return -1 from logging functions if we get a write error.
+	[a3ae43d54101]
+
+	* NEWS:
+	Mention I/O plugin changes.
+	[0bd2e99fe87a]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/sudo_plugin.h, src/exec_pty.c:
+	Change behavior when plugin I/O logging function returns 0 or -1.
+	For -1 (error) return, we now kill the command and disable the I/O
+	logging function that returned the error. For a 0 (reject) return,
+	we no longer display the rejected output to the user's terminal. The
+	plugin API revision is now 1.6.
+	[27bb504860f3]
+
+	* doc/sudoers.cat:
+	regen to fix version.
+	[641ea29b7dd3]
+
+	* plugins/sample/sample_plugin.c:
+	Add trivial dirty word check to the sample output logging function.
+	[a14494b87b4d]
+
+2014-08-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for 1.8.11b2
+	[72ac1f26ba78]
+
+	* src/sudo_edit.c:
+	Fix restoration of effective uid/gid in command_details. This masked
+	the effects an unset (really zero) egid. Bug 656
+	[b75eed459386]
+
+	* src/sudo.c:
+	Set runas egid to the same value as runas gid if egid not specified
+	by the plugin. Only affects new files created by sudoedit. Bug #656
+	[f2daabba4912]
+
+	* src/sudo_edit.c:
+	Don't leak temp fd in sudo_edit_copy_tfiles(). Fix fd leak in error
+	path in sudo_edit_copy_tfiles().
+	[465d6a79b5cf]
+
+2014-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	fix typo
+	[a4659abcbc1d]
+
+	* src/signal.c:
+	We write an unsigned char, not an int, to the signal pipe.
+	[fae4217be608]
+
+2014-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Sprinkle some debugging around uid/gid setting in sudoedit.
+	[15e4a337f0b0]
+
+	* src/sesh.c, src/sudo.c, src/sudo.h, src/sudo_edit.c,
+	src/sudo_exec.h:
+	Make sudoedit work with SELinux RBAC. Adapted from RedHat patches
+	(Daniel Kopecek) but made to behave a bit more like the non-SELinux
+	bits.
+	[8f3f7969220f]
+
+	* src/sudo_edit.c:
+	Refactor code that copies temp files into separate functions.
+	[b1057f4bee87]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Fix typo, .em should be .Em
+	[ec28aa3bdd6a]
+
+2014-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sesh.c:
+	Add missing call to initprogname().
+	[71040679765f]
+
+	* lib/util/sudo_debug.c, lib/util/sudo_printf.c:
+	Don't recurse infinitely until we blow the stack when the debug file
+	can't be opened in the front-end. The conversation-type debug mode
+	will be removed in the future.
+	[38cd1a6343c2]
+
+2014-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Only use the first two digits of the version number. Fixes a problem
+	on RHEL 7 which has version numbers like 7.0.1406
+	[272727fd57fb]
+
+	* plugins/sudoers/linux_audit.c:
+	Fix return value when kernel has no audit support.
+	[7ca1c9857058]
+
+	* lib/util/progname.c:
+	remove unused label
+	[4179ea1ffa3a]
+
+2014-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, autogen.sh:
+	Update to automake 1.14 (no code changes).
+	[5e04db4f7c5d]
+
+2014-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document the interaction between sudoers environment handling and
+	the pam_env module.
+	[bd56868f078c]
+
+	* plugins/sudoers/env.c:
+	Don't allow pam_env to overwrite existing variables when env_reset
+	is disabled unless the variables match the black list and would
+	normally be removed. It may just be better to never overwrite when
+	env_reset is disabled.
+	[e0ae88fce535]
+
+2014-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Update year range to include 2014
+	[6b3b5f3fa791]
+
+2014-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/Makefile.in:
+	Remove regress .err files in distclean target.
+	[d66a4f1db130]
+
+	* lib/util/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in:
+	Remove generated files for linker as part of distclean.
+	[5d1bf6c32c6b]
+
+	* .hgignore:
+	Ignore .out and .err files in lib/util regress
+	[9f4d91e77c0f]
+
+	* NEWS:
+	Add additional 1.8.11 changes and fix typos.
+	[7980e2abb6ea]
+
+	* configure, configure.ac, plugins/sudoers/Makefile.in:
+	Avoid building/running the check_symbols test program unless we are
+	building a shared sudoers plugin.
+	[a6bde1a12111]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Remove two instances of -no-fast-install that were missed before.
+	[8a2c89cdf252]
+
+	* INSTALL, NEWS, configure, configure.ac, lib/util/Makefile.in:
+	Add --disable-shared-libutil configure option. It may only be used
+	in conjunction with the --enable-static-sudoers option.
+	[e19c71464399]
+
+2014-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/Makefile.in:
+	Remove noop man.sed files Use full path instead of $@.in when
+	calling config.status with --file=-
+	[53c69928427e]
+
+	* src/preserve_fds.c:
+	Fix "sudo -C" when we have internal fds to preserve from
+	closefrom().
+	[942db66345ea]
+
+2014-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/env.c:
+	Add explicit support for matching the full environment string
+	(name=value). Bash functions may now be preserved for full matches,
+	but not for name-only matches.
+	[f4d816e11f66]
+
+2014-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* .hgignore:
+	Ignore lib/util/util.exp
+	[e08306ca6a6d]
+
+2014-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Fix exporting of asprintf/vasprintf symbols.
+	[5ff59bdeb501]
+
+	* configure, configure.ac:
+	Don't export getaddrinfo symbols if we found the function in a
+	library.
+	[3bf4a5d3cfdb]
+
+	* src/sudo_edit.c:
+	It is now sudo_efree() not efree(). Don't try to free a pointer to
+	garbage on error.
+	[51a1ddaa220d]
+
+	* plugins/sudoers/po/sudoers.pot, po/sudo.pot:
+	Regen .pot files
+	[8c46fe51d32e]
+
+2014-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Plug memory leak, even though we are headed for exit.
+	[e2b28ddffabe]
+
+	* configure, configure.ac, lib/util/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	If getaddrinfo() is missing libsudoutil may need to pull in
+	networking libraries.
+	[4d6724d54927]
+
+	* MANIFEST, configure, configure.ac, include/sudo_compat.h,
+	lib/util/Makefile.in, lib/util/util.exp, lib/util/util.exp.in,
+	m4/sudo.m4:
+	Only include functions in util.exp that are actually in the library.
+	Fixes a problem on Solaris where undefined functions that are listed
+	as exported in the map file result in a link error. Also make sure
+	we use our glob.c if the system is missing glob().
+	[3121ad215f1e]
+
+	* configure, configure.ac:
+	Make sure shadow libs don't end up in LIBS, only SUDOERS_LIBS (and
+	SUDO_LIBS if set_auth_parameters() or initprivs() are present.
+	[fb084b157c76]
+
+	* configure.ac:
+	No need to AC_SUBST HAVE_BSM_AUDIT and HAVE_SOLARIS_AUDIT
+	[5d73ccf3a7b9]
+
+2014-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c, src/sudo_exec.h:
+	Attempt to handle systems with SA_SIGINFO but that lack SI_USER.
+	[0c8b09861ad5]
+
+	* config.h.in, configure, configure.ac, include/sudo_compat.h:
+	Replace use of HAVE_GETCWD with PREFER_PORTABLE_GETCWD. It is safe
+	to assume getcwd() exists, we just need to handle broken ones.
+	[e897223a8f38]
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/Makefile.in:
+	Add check for inet_ntoa() since it may live in libnsl. Make getcwd()
+	replacement private to the SunOS 4 section.
+	[8e2cd0fdd6cd]
+
+	* plugins/sudoers/match.c:
+	Avoid mixing declarations and code for non-C99 compilers.
+	[1fa5cf2356fd]
+
+	* include/sudo_debug.h:
+	For C89, use "const char __func__[]" instead of "const char
+	*__func__".
+	[c4e9f9d6691b]
+
+	* plugins/sudoers/match.c:
+	Fix compilation on systems w/o netgroups.
+	[57deb66ef8ff]
+
+2014-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/preserve_fds.c:
+	Back out old workaround for sudoedit hang when debugging was
+	enabled.
+	[f547bf80c436]
+
+	* src/sudo_edit.c:
+	Don't memcpy() the preserved_fds TAILQ as the pointers into the head
+	will be wrong. All we need to do is save the old command details and
+	restore them after calling run_command(). Fixes a hang with sudoedit
+	when debugging is enabled.
+	[84ff8e1f490a]
+
+2014-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	The default policy close function should only print an error message
+	if the error_code is non-zero.
+	[2032c9e33e3f]
+
+	* src/preserve_fds.c:
+	If there the preserved fds list is empty, add a new element with
+	TAILQ_INSERT_HEAD instead of TAILQ_INSERT_TAIL to avoid an infinite
+	loop on AIX, Solaris and possibly others when debug mode is active.
+	[63cefe22c515]
+
+	* lib/util/progname.c:
+	Remove support for getting program name via /proc as pr_fname is
+	usually filled in after symbolic links have been processed, even on
+	Solaris.
+	[0460c613753c]
+
+	* lib/util/Makefile.in:
+	Use shlib_enable instead of soext when determining whether to
+	install the library.
+	[d46640a7733c]
+
+	* lib/util/regress/atofoo/atofoo_test.c:
+	Avoid potential division by zero
+	[6411d276a138]
+
+	* lib/util/Makefile.in:
+	Don't link progname test with libsudo_util, just link in progname.lo
+	directly since that is all we need. Avoid a linker issue on darwin.
+	[ee6210ee5cc0]
+
+	* lib/util/progname.c:
+	Remove pstat_getproc() path as pst_ucomm on HP-UX will return the
+	target of a symbolic link and not the name of the link itself. Avoid
+	using pr_fname on AIX for the same reason. Bug 654
+	[36aced8e3714]
+
+	* MANIFEST, lib/util/Makefile.in,
+	lib/util/regress/progname/progname_test.c:
+	Add test for getprogname() and symbolic links; bug 654
+	[fbbe9faeda46]
+
+2014-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Document tracing
+	[cfd7f14d596d]
+
+2014-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lib/util/util.exp:
+	sudo_term_{erase,kill} are regular symbols not functions.
+	[3454a9c1328b]
+
+2014-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Fix NULL deref if base64_decode returns -1.
+	[d03e207b1bb8]
+
+	* MANIFEST, include/missing.h, include/sudo_compat.h,
+	lib/util/Makefile.in, lib/util/aix.c, lib/util/alloc.c,
+	lib/util/clock_gettime.c, lib/util/closefrom.c, lib/util/event.c,
+	lib/util/event_poll.c, lib/util/event_select.c, lib/util/fatal.c,
+	lib/util/fnmatch.c, lib/util/getaddrinfo.c, lib/util/getcwd.c,
+	lib/util/getgrouplist.c, lib/util/getline.c, lib/util/getopt_long.c,
+	lib/util/gidlist.c, lib/util/glob.c, lib/util/inet_pton.c,
+	lib/util/isblank.c, lib/util/key_val.c, lib/util/lbuf.c,
+	lib/util/locking.c, lib/util/memrchr.c, lib/util/memset_s.c,
+	lib/util/mksiglist.c, lib/util/mksigname.c, lib/util/mktemp.c,
+	lib/util/parseln.c, lib/util/progname.c, lib/util/pw_dup.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/glob/globtest.c,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/tailq/hltq_test.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/sha2.c, lib/util/sig2str.c,
+	lib/util/snprintf.c, lib/util/strlcat.c, lib/util/strlcpy.c,
+	lib/util/strsignal.c, lib/util/strtobool.c, lib/util/strtoid.c,
+	lib/util/strtomode.c, lib/util/strtonum.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, lib/util/sudo_dso.c, lib/util/sudo_printf.c,
+	lib/util/term.c, lib/util/ttysize.c, lib/util/utimes.c,
+	plugins/group_file/Makefile.in, plugins/group_file/getgrent.c,
+	plugins/group_file/group_file.c, plugins/sample/Makefile.in,
+	plugins/sample/sample_plugin.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/audit.c, plugins/sudoers/base64.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/hexchar.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/locale.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/timestr.c, plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.c, src/Makefile.in,
+	src/locale_stub.c, src/net_ifs.c, src/preload.c,
+	src/regress/ttyname/check_ttyname.c, src/sesh.c, src/sudo.h,
+	src/sudo_noexec.c:
+	Rename missing.h -> sudo_compat.h
+	[ddcc945a0f87]
+
+	* MANIFEST, include/secure_path.h, include/sudo_util.h,
+	lib/util/Makefile.in, lib/util/secure_path.c, lib/util/sudo_conf.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Merge secure_path.h -> sudo_util.h
+	[0385dfbf2e2d]
+
+	* include/secure_path.h, include/sudo_alloc.h, include/sudo_conf.h,
+	include/sudo_dso.h, include/sudo_event.h, include/sudo_fatal.h,
+	include/sudo_lbuf.h, include/sudo_util.h, lib/util/aix.c,
+	lib/util/alloc.c, lib/util/event.c, lib/util/fatal.c,
+	lib/util/gidlist.c, lib/util/key_val.c, lib/util/lbuf.c,
+	lib/util/locking.c, lib/util/parseln.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/strtobool.c, lib/util/strtoid.c,
+	lib/util/strtomode.c, lib/util/sudo_conf.c, lib/util/sudo_dso.c,
+	lib/util/term.c, lib/util/ttysize.c, lib/util/util.exp,
+	plugins/sudoers/locale.c, src/locale_stub.c:
+	Version the functions in libsudo_util
+	[c6d6eba95bb4]
+
+2014-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/gettext.h, include/sudo_gettext.h, lib/util/Makefile.in,
+	lib/util/aix.c, lib/util/alloc.c, lib/util/fatal.c,
+	lib/util/gidlist.c, lib/util/strsignal.c, lib/util/strtoid.c,
+	lib/util/strtomode.c, lib/util/strtonum.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/audit.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	src/Makefile.in, src/locale_stub.c, src/net_ifs.c, src/sesh.c,
+	src/sudo.h:
+	Rename gettext.h -> sudo_gettext.h
+	[7f6b44473b8f]
+
+	* include/fatal.h, include/sudo_fatal.h, lib/util/Makefile.in,
+	lib/util/aix.c, lib/util/alloc.c, lib/util/event.c,
+	lib/util/event_poll.c, lib/util/event_select.c, lib/util/fatal.c,
+	lib/util/getopt_long.c, lib/util/gidlist.c, lib/util/lbuf.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/tailq/hltq_test.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/locale.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	src/Makefile.in, src/locale_stub.c, src/net_ifs.c,
+	src/regress/ttyname/check_ttyname.c, src/sesh.c, src/sudo.h:
+	Rename fatal.h -> sudo_fatal.h
+	[bef3401dbb24]
+
+	* include/queue.h, include/sudo_conf.h, include/sudo_event.h,
+	include/sudo_queue.h, lib/util/Makefile.in, lib/util/fatal.c,
+	lib/util/regress/tailq/hltq_test.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	src/Makefile.in, src/hooks.c:
+	Rename queue.h -> sudo_queue.h to avoid collisions with the system
+	version.
+	[473614fdde5a]
+
+	* include/sudo_debug.h, lib/util/sudo_debug.c:
+	Conver sudo_debug_write() to a macro
+	[0f110f27a23c]
+
+2014-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/fixman.sh, doc/fixmdoc.sh:
+	Fix man page post-processing; it was deleting more than intended.
+	[716af03dcfb7]
+
+2014-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/Makefile.in:
+	Remove double $(srcdir) when running sed scripts.
+	[16add67ae550]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	"an EXEC tag" not "a EXEC tag"
+	[9ac1b8e322f9]
+
+	* doc/sudoers.cat:
+	Document that I/O logging is not enabled by default.
+	[08fca95dd5a4]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that exec_background is off by default.
+	[87fe5defff58]
+
+2014-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sesh.c:
+	Error out if sesh is run as a login shell but the shell it needs to
+	run has no slash. This shouldn't happen in practice.
+	[10ff502888ee]
+
+	* MANIFEST, include/compat/mksiglist.h, include/compat/mksigname.h,
+	lib/util/Makefile.in, lib/util/mksiglist.c, lib/util/mksiglist.h,
+	lib/util/mksigname.c, lib/util/mksigname.h:
+	Move mksiglist.h and mksigname.h to lib/util where they belong.
+	[d01046c69060]
+
+	* config.h.in, configure, configure.ac, include/missing.h,
+	lib/util/progname.c, lib/util/util.exp, plugins/sudoers/Makefile.in:
+	Avoid passing -no-fast-install to libtool as this results in the
+	build dir being left in the library path of the installed
+	executable. Instead, we remove the "lt-" prefix from the program
+	name in initprogname() so that the regress test output is unaffected
+	by libtool's binary wrapper.
+	[75d1563e95b4]
+
+	* sudo.pp:
+	Fix syntax error with some shells.
+	[91e8da7702c5]
+
+2014-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Force libtool to use runtime linking on AIX so that it installs the
+	plugins as .so files and not .a files.
+	[ae66488bd9ca]
+
+	* plugins/sudoers/ldap.c:
+	Be sure to NUL-terminate the decoded secret when converting from
+	base64.
+	[b3dc463c8882]
+
+	* plugins/sudoers/ldap.c:
+	Fix a pointer signednes warning calling base64_decode().
+	[74f7354867a3]
+
+	* lib/util/getgrouplist.c:
+	Use sudo_strtoid() now that it is located in the same library.
+	[4868532e2d65]
+
+	* lib/util/strtoid.c:
+	Skip leading space (ala strtol) so that we can pick up the sign even
+	if it is not the first character of the string.
+	[148ee633c6a4]
+
+2014-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	For sudoedit, audit the actual editor being run, not just the
+	sudoedit command.
+	[59a5b0ad36af]
+
+	* src/selinux.c:
+	Audit failed user role changes. RedHat bz #665131
+	[cf9777687124]
+
+	* plugins/sudoers/Makefile.in:
+	Avoid running check_symbols for static sudoers
+	[71b13bada1ce]
+
+	* plugins/sudoers/regress/visudo/test3.err.ok,
+	plugins/sudoers/regress/visudo/test3.sh:
+	Adapt to unused alias changes.
+	[4b58e36c3d8f]
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/visudo.c:
+	An unused alias is not really an error, even in strict mode. RedHat
+	bz #604297
+	[f10b3b7ec5a6]
+
+	* src/sesh.c:
+	When running a login shell via sesh, make new argv[0] -shell, not
+	/path/to-shell. RedHat bz #1065418
+	[414cb512f102]
+
+2014-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	The RHEL sudo package allows users in group wheel to run sudo.
+	[9f22020a57cf]
+
+	* Makefile.in, sudo.pp:
+	Avoid packaging parent directories when they are system directories.
+	Currently we just skip this when prefix is /usr
+	[93ccede545cd]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix typo: sudo.d -> sudoers.d. From RedHat bz #726634
+	[1c99a4fd9c7d]
+
+	* mkpkg:
+	RHEL 6 and above use /etc/sudo-ldap.conf not /etc/ldap.conf
+	[ce3216e4390a]
+
+	* pp:
+	For rpm, do not specify a mode in %attr for symbolic links. Avoids
+	the warning "Explicit %attr() mode not applicaple to symlink"
+	[3f5a80ed5081]
+
+2014-07-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_alloc.h, lib/util/aix.c, lib/util/event.c,
+	lib/util/event_poll.c, lib/util/event_select.c, lib/util/fatal.c,
+	lib/util/lbuf.c, lib/util/sudo_conf.c, plugins/sudoers/alias.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.c,
+	plugins/sudoers/match.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c, src/exec.c,
+	src/exec_common.c, src/exec_pty.c, src/hooks.c, src/load_plugins.c,
+	src/net_ifs.c, src/preserve_fds.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/sudo.c,
+	src/ttyname.c:
+	efree -> sudo_efree for consistency
+	[7dfd16fbb6cf]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo_plugin.cat,
+	doc/sudoers.cat, doc/sudoreplay.cat, doc/visudo.cat:
+	regen
+	[a1d38600d34c]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap.c:
+	Add support for base64 secrets in ldap.conf and ldap.secret. Based
+	on an idea from anthony AT rlost DOT com
+	[4999b78f8b6d]
+
+2014-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Don't use the HP compiler in preference to gcc. Some versions have
+	trouble compiling lbuf.c.
+	[322daf03ab6f]
+
+2014-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Remove @SOEXT@ and @SHLIB_EXT@ now that we use libtool to install
+	shared objects. Instead, use the new @SHLIB_ENABLE@ that is set to
+	the value of $enable_dlopen. For sudo_noexec.so there is nothing
+	special to do since the install-noexec target is only called when
+	noexec is enabled by configure.
+	[4447190f212b]
+
+	* configure, configure.ac:
+	Make dynamic shared objects non-writable on HP-UX. Using writable
+	DSOs can substantially increase the load time.
+	[8715aff11063]
+
+	* include/fatal.h, lib/util/fatal.c, lib/util/util.exp,
+	plugins/sudoers/locale.c, src/locale_stub.c:
+	Add sudo_warn_strerror() that wraps strerror() with calls to
+	setlocale() in sudoers so we always get the error string in the
+	user's locale. Also change _warning() to take the error number as a
+	parameter instead of examining errno.
+	[cc38a8389a7b]
+
+2014-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, lib/util/Makefile.in, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Avoid a cppcheck warning when NSIG is not defined.
+	[f8e5e92bab60]
+
+	* include/missing.h:
+	Fix typos in utimes/futimes macros.
+	[10f022d933c2]
+
+2014-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[e351d905c0c9]
+
+	* configure.ac:
+	Fix sudo when --disable-shared configure option was specified.
+	[07899f6b43f0]
+
+	* configure, m4/libtool.m4:
+	Do not set an internal name for HP-UX modules, only archives. This
+	works around a problem with some versions of HP-UX ld where setting
+	an internal name that doesn't end in .sl causes link errors.
+	[9a049adb22aa]
+
+	* plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/system_group/Makefile.in:
+	Never build build static versions of other plugins.
+	[52123c4c17bc]
+
+	* lib/util/Makefile.in:
+	Don't build a static libsudo_util.a unless we are linking sudoers
+	statically.
+	[9c3327977dff]
+
+2014-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, lib/util/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Use libtool to install/uninstall the plugins and sudo_noexec.
+	[18ae09c53f2e]
+
+	* configure, ltmain.sh, m4/libtool.m4:
+	Fix my typos in the HP-UX libtool patch
+	[6e70066d86bb]
+
+2014-06-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention Solaris audit.
+	[d90efa19ca16]
+
+	* INSTALL, MANIFEST, config.h.in, configure, configure.ac, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/solaris_audit.c, plugins/sudoers/solaris_audit.h:
+	Add Solaris audit support; from Gary Winiger at Oracle.
+	[6f68a27e53f5]
+
+	* MANIFEST:
+	Sync MANIFEST with file name changes.
+	[d9958df5f9da]
+
+	* plugins/sudoers/toke.c:
+	regen
+	[ad82b20093c3]
+
+	* include/sudo_util.h, lib/util/Makefile.in, lib/util/atobool.c,
+	lib/util/atoid.c, lib/util/atomode.c, lib/util/getgrouplist.c,
+	lib/util/gidlist.c, lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/strtobool.c, lib/util/strtoid.c, lib/util/strtomode.c,
+	lib/util/sudo_conf.c, lib/util/util.exp,
+	plugins/group_file/getgrent.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/policy.c,
+	plugins/sudoers/pwutil.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo_json.c,
+	plugins/system_group/system_group.c, src/sudo.c:
+	atobool -> sudo_strtobool atoid-> sudo_strtoid atomode ->
+	sudo_strtomode
+	[aefe6f09f4a4]
+
+	* lib/util/alloc.c, lib/util/event_select.c:
+	Fix regexp damage when renaming erecalloc() -> sudo_erecalloc()
+	[d772a34032cc]
+
+	* src/sudo_edit.c:
+	Handle systems like AIX that lack a way to set the modification time
+	on open fds.
+	[b93c0a55c21b]
+
+	* MANIFEST:
+	update MANIFEST for alloc.h -> sudo_alloc.h change
+	[ce240c682554]
+
+	* include/alloc.h, include/sudo_alloc.h, lib/util/Makefile.in,
+	lib/util/aix.c, lib/util/alloc.c, lib/util/event.c,
+	lib/util/event_poll.c, lib/util/event_select.c, lib/util/fatal.c,
+	lib/util/gidlist.c, lib/util/lbuf.c, lib/util/sudo_conf.c,
+	lib/util/sudo_debug.c, lib/util/util.exp,
+	plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/Makefile.in, src/conversation.c, src/env_hooks.c, src/exec.c,
+	src/exec_common.c, src/exec_pty.c, src/hooks.c, src/load_plugins.c,
+	src/net_ifs.c, src/parse_args.c, src/preserve_fds.c,
+	src/regress/ttyname/check_ttyname.c, src/selinux.c, src/sesh.c,
+	src/sudo.c, src/sudo.h, src/sudo_edit.c, src/ttyname.c:
+	Add sudo_ prefix to alloc.c functions and rename alloc.h ->
+	sudo_alloc.h
+	[3a19f5391442]
+
+	* lib/util/fatal.c:
+	Remove extra sudo_ prefix from vfatalxnodebug and vfatalx_nodebug.
+	[819ad8075005]
+
+	* MANIFEST, include/fileops.h, include/sudo_util.h,
+	lib/util/Makefile.in, lib/util/fileops.c, lib/util/locking.c,
+	lib/util/parseln.c, lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/sudo_conf.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/sudoers.h, src/Makefile.in, src/sudo.h:
+	Split fileops.c into parseln.c and locking.c
+	[361ea81e88d9]
+
+	* include/fatal.h, include/gettext.h, lib/util/aix.c,
+	lib/util/alloc.c, lib/util/fatal.c, lib/util/getopt_long.c,
+	lib/util/gidlist.c, lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/tailq/hltq_test.c, lib/util/sudo_conf.c,
+	lib/util/util.exp, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c, src/exec.c, src/exec_common.c,
+	src/exec_pty.c, src/hooks.c, src/load_plugins.c, src/locale_stub.c,
+	src/net_ifs.c, src/parse_args.c, src/selinux.c, src/sesh.c,
+	src/signal.c, src/solaris.c, src/sudo.c, src/sudo_edit.c,
+	src/tgetpass.c, src/ttyname.c, src/utmp.c:
+	Rename warning/fatal -> sudo_warn/sudo_fatal to avoid namespace
+	pollution in libsudo_util.so.
+	[4eb69f501113]
+
+2014-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_util.h, lib/util/term.c, lib/util/ttysize.c,
+	lib/util/util.exp, plugins/sudoers/sudoreplay.c, src/exec_pty.c,
+	src/sudo.c, src/tgetpass.c:
+	Reduce name space pollution in libsudo_util.so
+	[215e4413529a]
+
+	* src/solaris.c:
+	Use sudo_dso_load() from libsudo_util.so instead of dlopen() since
+	we no longer link sudo directly with libdl.so.
+	[fe6942873c2d]
+
+	* MANIFEST, Makefile.in, doc/Makefile.in, include/alloc.h,
+	include/compat/fnmatch.h, include/compat/getaddrinfo.h,
+	include/compat/getopt.h, include/compat/glob.h,
+	include/compat/sha2.h, include/fatal.h, include/fileops.h,
+	include/lbuf.h, include/missing.h, include/secure_path.h,
+	include/sudo_conf.h, include/sudo_debug.h, include/sudo_dso.h,
+	include/sudo_event.h, include/sudo_util.h, install-sh,
+	lib/util/Makefile.in, lib/util/fatal.c, lib/util/getaddrinfo.c,
+	lib/util/pw_dup.c, lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/sudo_dso.c, lib/util/sudo_printf.c, lib/util/term.c,
+	lib/util/util.exp, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/match.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/visudo.c,
+	plugins/system_group/Makefile.in, src/Makefile.in, src/parse_args.c,
+	src/preload.c:
+	Add exported libsudo_util functions to util.exp and mark in headers
+	using __dso_public.
+	[18faff6ab915]
+
+	* include/fatal.h, lib/util/fatal.c, lib/util/util.exp,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c:
+	Remove use of setjmp/longjmp in the sudoers plugin. We no longer
+	call fatal() except in the malloc wrappers and due to libsudo_util
+	there is now a single copy of fatal/fatalx.
+	[109407210f9c]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.11
+	[5fb775825aab]
+
+	* include/fileops.h, lib/util/fileops.c, lib/util/util.exp,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/sudo_edit.c:
+	Remove touch() from fileops.c and just call utimes/futimes directly.
+	Rename lock_file -> sudo_lock_file to avoid namespace pollution
+	[ec08128b6900]
+
+	* MANIFEST, include/sudo_util.h, lib/util/Makefile.in,
+	lib/util/fmt_string.c, lib/util/key_val.c, lib/util/util.exp,
+	plugins/sample/sample_plugin.c, plugins/sudoers/policy.c,
+	src/Makefile.in, src/exec_common.c, src/parse_args.c, src/sudo.c:
+	Rename fmt_string -> sudo_new_key_val to better describe its
+	function.
+	[f9061e319cc3]
+
+	* include/sudo_util.h, lib/util/gidlist.c, lib/util/util.exp,
+	plugins/sudoers/policy.c, src/sudo.c:
+	Rename parse_gid_list -> sudo_parse_gids to avoid namespace
+	pollution.
+	[d88f3cab97e1]
+
+	* MANIFEST, Makefile.in, include/lbuf.h, include/sudo_lbuf.h,
+	lib/util/Makefile.in, lib/util/lbuf.c, lib/util/util.exp,
+	plugins/sudoers/Makefile.in, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudoers.h, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, src/Makefile.in, src/parse_args.c:
+	Don't pollute the namespace with lbuf struct and functions
+	[7859e3c22fb9]
+
+	* config.h.in, configure, configure.ac, include/compat/fnmatch.h,
+	include/compat/getaddrinfo.h, include/compat/getopt.h,
+	include/compat/glob.h, include/missing.h, lib/util/clock_gettime.c,
+	lib/util/closefrom.c, lib/util/fnmatch.c, lib/util/getaddrinfo.c,
+	lib/util/getcwd.c, lib/util/getgrouplist.c, lib/util/getline.c,
+	lib/util/getopt_long.c, lib/util/glob.c, lib/util/inet_pton.c,
+	lib/util/memrchr.c, lib/util/memset_s.c, lib/util/mktemp.c,
+	lib/util/pw_dup.c, lib/util/sig2str.c, lib/util/snprintf.c,
+	lib/util/strlcat.c, lib/util/strlcpy.c, lib/util/strsignal.c,
+	lib/util/strtonum.c, lib/util/utimes.c:
+	Prefix all libc replacements with sudo_ and #define the real name to
+	the sudo_ version. That way we don't pollute the libc namespace.
+	[5cf7101479b8]
+
+	* .hgignore, MANIFEST, Makefile.in, common/Makefile.in, common/aix.c,
+	common/alloc.c, common/atobool.c, common/atoid.c, common/atomode.c,
+	common/event.c, common/event_poll.c, common/event_select.c,
+	common/fatal.c, common/fileops.c, common/fmt_string.c,
+	common/gidlist.c, common/lbuf.c, common/progname.c,
+	common/regress/atofoo/atofoo_test.c,
+	common/regress/sudo_conf/conf_test.c,
+	common/regress/sudo_conf/test1.in,
+	common/regress/sudo_conf/test1.out.ok,
+	common/regress/sudo_conf/test2.in,
+	common/regress/sudo_conf/test2.out.ok,
+	common/regress/sudo_conf/test3.in,
+	common/regress/sudo_conf/test3.out.ok,
+	common/regress/sudo_conf/test4.in,
+	common/regress/sudo_conf/test4.out.ok,
+	common/regress/sudo_conf/test5.err.ok,
+	common/regress/sudo_conf/test5.in,
+	common/regress/sudo_conf/test5.out.ok,
+	common/regress/sudo_conf/test6.in,
+	common/regress/sudo_conf/test6.out.ok,
+	common/regress/sudo_parseln/parseln_test.c,
+	common/regress/sudo_parseln/test1.in,
+	common/regress/sudo_parseln/test1.out.ok,
+	common/regress/sudo_parseln/test2.in,
+	common/regress/sudo_parseln/test2.out.ok,
+	common/regress/sudo_parseln/test3.in,
+	common/regress/sudo_parseln/test3.out.ok,
+	common/regress/sudo_parseln/test4.in,
+	common/regress/sudo_parseln/test4.out.ok,
+	common/regress/sudo_parseln/test5.in,
+	common/regress/sudo_parseln/test5.out.ok,
+	common/regress/sudo_parseln/test6.in,
+	common/regress/sudo_parseln/test6.out.ok,
+	common/regress/tailq/hltq_test.c, common/secure_path.c,
+	common/setgroups.c, common/sudo_conf.c, common/sudo_debug.c,
+	common/sudo_dso.c, common/sudo_printf.c, common/term.c,
+	common/ttysize.c, compat/Makefile.in, compat/charclass.h,
+	compat/clock_gettime.c, compat/closefrom.c, compat/endian.h,
+	compat/fnmatch.c, compat/fnmatch.h, compat/getaddrinfo.c,
+	compat/getaddrinfo.h, compat/getcwd.c, compat/getgrouplist.c,
+	compat/getline.c, compat/getopt.h, compat/getopt_long.c,
+	compat/glob.c, compat/glob.h, compat/inet_pton.c, compat/isblank.c,
+	compat/memrchr.c, compat/memset_s.c, compat/mksiglist.c,
+	compat/mksiglist.h, compat/mksigname.c, compat/mksigname.h,
+	compat/mktemp.c, compat/nss_dbdefs.h, compat/pw_dup.c,
+	compat/regress/fnmatch/fnm_test.c,
+	compat/regress/fnmatch/fnm_test.in, compat/regress/glob/files,
+	compat/regress/glob/globtest.c, compat/regress/glob/globtest.in,
+	compat/sha2.c, compat/sha2.h, compat/sig2str.c, compat/siglist.in,
+	compat/snprintf.c, compat/stdbool.h, compat/strlcat.c,
+	compat/strlcpy.c, compat/strsignal.c, compat/strtonum.c,
+	compat/timespec.h, compat/utime.h, compat/utimes.c, configure,
+	configure.ac, include/compat/charclass.h, include/compat/endian.h,
+	include/compat/fnmatch.h, include/compat/getaddrinfo.h,
+	include/compat/getopt.h, include/compat/glob.h,
+	include/compat/mksiglist.h, include/compat/mksigname.h,
+	include/compat/nss_dbdefs.h, include/compat/sha2.h,
+	include/compat/stdbool.h, include/compat/timespec.h,
+	include/compat/utime.h, lib/util/Makefile.in, lib/util/aix.c,
+	lib/util/alloc.c, lib/util/atobool.c, lib/util/atoid.c,
+	lib/util/atomode.c, lib/util/clock_gettime.c, lib/util/closefrom.c,
+	lib/util/event.c, lib/util/event_poll.c, lib/util/event_select.c,
+	lib/util/fatal.c, lib/util/fileops.c, lib/util/fmt_string.c,
+	lib/util/fnmatch.c, lib/util/getaddrinfo.c, lib/util/getcwd.c,
+	lib/util/getgrouplist.c, lib/util/getline.c, lib/util/getopt_long.c,
+	lib/util/gidlist.c, lib/util/glob.c, lib/util/inet_pton.c,
+	lib/util/isblank.c, lib/util/lbuf.c, lib/util/memrchr.c,
+	lib/util/memset_s.c, lib/util/mksiglist.c, lib/util/mksigname.c,
+	lib/util/mktemp.c, lib/util/progname.c, lib/util/pw_dup.c,
+	lib/util/regress/atofoo/atofoo_test.c,
+	lib/util/regress/fnmatch/fnm_test.c,
+	lib/util/regress/fnmatch/fnm_test.in, lib/util/regress/glob/files,
+	lib/util/regress/glob/globtest.c, lib/util/regress/glob/globtest.in,
+	lib/util/regress/sudo_conf/conf_test.c,
+	lib/util/regress/sudo_conf/test1.in,
+	lib/util/regress/sudo_conf/test1.out.ok,
+	lib/util/regress/sudo_conf/test2.in,
+	lib/util/regress/sudo_conf/test2.out.ok,
+	lib/util/regress/sudo_conf/test3.in,
+	lib/util/regress/sudo_conf/test3.out.ok,
+	lib/util/regress/sudo_conf/test4.in,
+	lib/util/regress/sudo_conf/test4.out.ok,
+	lib/util/regress/sudo_conf/test5.err.ok,
+	lib/util/regress/sudo_conf/test5.in,
+	lib/util/regress/sudo_conf/test5.out.ok,
+	lib/util/regress/sudo_conf/test6.in,
+	lib/util/regress/sudo_conf/test6.out.ok,
+	lib/util/regress/sudo_parseln/parseln_test.c,
+	lib/util/regress/sudo_parseln/test1.in,
+	lib/util/regress/sudo_parseln/test1.out.ok,
+	lib/util/regress/sudo_parseln/test2.in,
+	lib/util/regress/sudo_parseln/test2.out.ok,
+	lib/util/regress/sudo_parseln/test3.in,
+	lib/util/regress/sudo_parseln/test3.out.ok,
+	lib/util/regress/sudo_parseln/test4.in,
+	lib/util/regress/sudo_parseln/test4.out.ok,
+	lib/util/regress/sudo_parseln/test5.in,
+	lib/util/regress/sudo_parseln/test5.out.ok,
+	lib/util/regress/sudo_parseln/test6.in,
+	lib/util/regress/sudo_parseln/test6.out.ok,
+	lib/util/regress/tailq/hltq_test.c, lib/util/secure_path.c,
+	lib/util/setgroups.c, lib/util/sha2.c, lib/util/sig2str.c,
+	lib/util/siglist.in, lib/util/snprintf.c, lib/util/strlcat.c,
+	lib/util/strlcpy.c, lib/util/strsignal.c, lib/util/strtonum.c,
+	lib/util/sudo_conf.c, lib/util/sudo_debug.c, lib/util/sudo_dso.c,
+	lib/util/sudo_printf.c, lib/util/term.c, lib/util/ttysize.c,
+	lib/util/utimes.c, lib/zlib/Makefile.in, lib/zlib/adler32.c,
+	lib/zlib/compress.c, lib/zlib/crc32.c, lib/zlib/crc32.h,
+	lib/zlib/deflate.c, lib/zlib/deflate.h, lib/zlib/gzclose.c,
+	lib/zlib/gzguts.h, lib/zlib/gzlib.c, lib/zlib/gzread.c,
+	lib/zlib/gzwrite.c, lib/zlib/infback.c, lib/zlib/inffast.c,
+	lib/zlib/inffast.h, lib/zlib/inffixed.h, lib/zlib/inflate.c,
+	lib/zlib/inflate.h, lib/zlib/inftrees.c, lib/zlib/inftrees.h,
+	lib/zlib/trees.c, lib/zlib/trees.h, lib/zlib/uncompr.c,
+	lib/zlib/zconf.h.in, lib/zlib/zlib.h, lib/zlib/zutil.c,
+	lib/zlib/zutil.h, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, po/README, po/ca.mo, po/ca.po,
+	po/cs.mo, po/cs.po, po/da.mo, po/da.po, po/de.mo, po/de.po,
+	po/eo.mo, po/eo.po, po/es.mo, po/es.po, po/eu.mo, po/eu.po,
+	po/fi.mo, po/fi.po, po/fr.mo, po/fr.po, po/gl.mo, po/gl.po,
+	po/hr.mo, po/hr.po, po/it.mo, po/it.po, po/ja.mo, po/ja.po,
+	po/nb.mo, po/nb.po, po/nl.mo, po/nl.po, po/pl.mo, po/pl.po,
+	po/pt_BR.mo, po/pt_BR.po, po/ru.mo, po/ru.po, po/sl.mo, po/sl.po,
+	po/sr.mo, po/sr.po, po/sudo.pot, po/sv.mo, po/sv.po, po/tr.mo,
+	po/tr.po, po/uk.mo, po/uk.po, po/vi.mo, po/vi.po, po/zh_CN.mo,
+	po/zh_CN.po, src/Makefile.in, src/po/README, src/po/ca.mo,
+	src/po/ca.po, src/po/cs.mo, src/po/cs.po, src/po/da.mo,
+	src/po/da.po, src/po/de.mo, src/po/de.po, src/po/eo.mo,
+	src/po/eo.po, src/po/es.mo, src/po/es.po, src/po/eu.mo,
+	src/po/eu.po, src/po/fi.mo, src/po/fi.po, src/po/fr.mo,
+	src/po/fr.po, src/po/gl.mo, src/po/gl.po, src/po/hr.mo,
+	src/po/hr.po, src/po/it.mo, src/po/it.po, src/po/ja.mo,
+	src/po/ja.po, src/po/nb.mo, src/po/nb.po, src/po/nl.mo,
+	src/po/nl.po, src/po/pl.mo, src/po/pl.po, src/po/pt_BR.mo,
+	src/po/pt_BR.po, src/po/ru.mo, src/po/ru.po, src/po/sl.mo,
+	src/po/sl.po, src/po/sr.mo, src/po/sr.po, src/po/sudo.pot,
+	src/po/sv.mo, src/po/sv.po, src/po/tr.mo, src/po/tr.po,
+	src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po, zlib/Makefile.in, zlib/adler32.c,
+	zlib/compress.c, zlib/crc32.c, zlib/crc32.h, zlib/deflate.c,
+	zlib/deflate.h, zlib/gzclose.c, zlib/gzguts.h, zlib/gzlib.c,
+	zlib/gzread.c, zlib/gzwrite.c, zlib/infback.c, zlib/inffast.c,
+	zlib/inffast.h, zlib/inffixed.h, zlib/inflate.c, zlib/inflate.h,
+	zlib/inftrees.c, zlib/inftrees.h, zlib/trees.c, zlib/trees.h,
+	zlib/uncompr.c, zlib/zconf.h.in, zlib/zlib.h, zlib/zutil.c,
+	zlib/zutil.h:
+	Top level directory reorg Move src/po -> po Combine common and
+	compat -> lib/util Move zlib -> lib/zlib
+	[d699ccb60e7e]
+
+	* configure, ltmain.sh, m4/libtool.m4:
+	libtool patches for HP-UX to support DESTDIR
+	[9df98a9582bd]
+
+	* pp:
+	Update polypkg from trunk.
+	[4dc362248196]
+
+	* plugins/sudoers/sssd.c, plugins/sudoers/sudo_nss.c:
+	Fix sssd compiler warnings and fix the sha2 digest support.
+	[2975b030b298]
+
+2014-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Don't call gss_krb5_ccache_name() with a NULL pointer when restoring
+	the old credential cache file name. This can happen if there was no
+	old name returned by gss_krb5_ccache_name(). Fixes a crash on
+	kerberized LDAP on some platforms.
+	[4090029e463e]
+
+2014-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, doc/CONTRIBUTORS, plugins/sudoers/po/el.mo,
+	plugins/sudoers/po/el.po:
+	Add Greek PO file for sudoers from translationproject.org
+	[6c0cc2def911]
+
+2014-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c:
+	Ignore signals sent by the command's process group, not just the
+	command itself. If we cannot determine the process group ID of the
+	sender (as it may no longer exist), just check the process ID.
+	[7ffa2eefd3c0]
+
+2014-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	In handler_user_only() only forward the signal if it was not
+	generated by the command. This should fix a problem with programs
+	that catch SIGTSTP, perform cleanup, and then re-send the signal to
+	their process group (of which sudo is the leader).
+	[d590c899e194]
+
+	* src/exec.c, src/exec_pty.c, src/signal.c:
+	Handle EINTR from write(2) when writing to pipes and socket pairs.
+	[d26a40d21d7a]
+
+2014-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/nb.mo, plugins/sudoers/po/nb.po:
+	Norwegian Bokmaal translation for sudoers from
+	translationproject.com
+	[92e4aea46c1e]
+
+2014-05-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, doc/CONTRIBUTORS, src/po/nb.mo, src/po/nb.po:
+	Norwegian Bokmaal translation for sudo from translationproject.com
+	[3497f74028fe]
+
+2014-05-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/visudo.c:
+	Try to be clearer about which are the input and output files in
+	export mode.
+	[66167511a410]
+
+	* plugins/sudoers/visudo_json.c:
+	In -x mode, require that the input and output files be different.
+	This won't currently catch collisions between the output file and an
+	include file.
+	[0c19b82a75e7]
+
+	* plugins/sudoers/bsm_audit.h, plugins/sudoers/linux_audit.h:
+	BSM and Linux audit do not yet use the argc function argument.
+	[3291695d1dfb]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/bsm_audit.h, plugins/sudoers/linux_audit.h,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/sudoers.c:
+	Pass argc to audit functions too. Will be needed for Solaris audit
+	support.
+	[d2114897a44e]
+
+2014-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/fatal.c, include/fatal.h, plugins/sudoers/policy.c:
+	Do not allow the same callback function to be registered more that
+	once in fatal_callback_register(). Add fatal_callback_deregister()
+	to deregister a callback.
+	[eff74fb9d274]
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test15.in,
+	plugins/sudoers/regress/sudoers/test15.out.ok,
+	plugins/sudoers/regress/sudoers/test15.toke.ok,
+	plugins/sudoers/regress/sudoers/test16.in,
+	plugins/sudoers/regress/sudoers/test16.out.ok,
+	plugins/sudoers/regress/sudoers/test16.toke.ok:
+	Add trivial sudoedit parsing tests.
+	[291ba6f4d6fd]
+
+	* MANIFEST, plugins/sudoers/po/ca.mo, plugins/sudoers/po/ca.po:
+	Catalan translation for sudoers from translationproject.org.
+	[b102f8cfeed1]
+
+2014-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/ca.mo, src/po/ca.po, src/po/gl.mo, src/po/gl.po:
+	Sync with translationproject.org
+	[62e5b4842834]
+
+2014-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	lockf() is broken on the Hurd -- use flock instead Bug #647
+	[7b8935a0c8b9]
+
+	* plugins/sudoers/visudo.c:
+	Don't try to install the temporary sudoers file if we didn't edit
+	it. By default, visudo does not edit files in a #includedir. Fixes a
+	NULL pointer defef on GNU hurd; Bug #647
+	[3a677c4773e5]
+
+2014-05-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/regress/ttyname/check_ttyname.c:
+	When comparing tty names, resolve the tty for fds 0-3 and compare
+	each one instead of just using the first that resolves.
+	[c37946b280a5]
+
+	* compat/getgrouplist.c, configure, configure.ac:
+	Solaris 8 doesn't export _nss_initf_group() so we need to provide
+	out own for getgrouplist().
+	[d494b39e9376]
+
+2014-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/getgrouplist.c, plugins/group_file/group_file.c,
+	plugins/system_group/system_group.c:
+	deal with NULL gr_mem here too
+	[0db43ed71001]
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.10p3
+	[3f415a180023]
+
+2014-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
+	plugins/sudoers/env.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/parse.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/timestamp.c:
+	Rename log_warning flags and only send mail if SLOG_SEND_MAIL is set
+	instead of mailing by default like we used to.
+	[5b3882833aa1]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
+	plugins/sudoers/env.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/parse.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/timestamp.c:
+	Add log_warningx
+	[feef646cb8b1]
+
+	* src/exec_pty.c:
+	Add debugging info for when we delete I/O events that still have
+	buffered data in them.
+	[7f17992cdf22]
+
+	* common/event.c:
+	Fix non-blocking mode. We only want to exit the event loop when
+	poll() or select() returns 0 and there are no active events. This
+	fixes a problem on some systems where the last buffer was not being
+	written when the command exited.
+	[deb6b1a7b241]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Change return value of switch_dir() to an int so we can distinguish
+	between an error and an empty dir in push_includedir().
+	[d0462b84782e]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Move code to fill in the list of dirs out of switch_dir and into its
+	own function. Quiets a false positive from cppcheck which got
+	confused due to variable reuse.
+	[6d6296f46255]
+
+	* plugins/sudoers/audit.c:
+	Avoid unused variable warning if auditing is not supported.
+	[5e6fd2ffe039]
+
+2014-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Fix library order when linking binaries.
+	[3fec51f98ae1]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Include limits.h and inttypes.h for SIZE_MAX define.
+	[41f8be660384]
+
+	* include/missing.h, plugins/sudoers/env.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y:
+	Move SIZE_MAX compat define into missing.h where it belongs.
+	[1bb108cf9df3]
+
+2014-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c:
+	Remove now-unused log_fatal()
+	[53478df3bb1e]
+
+	* plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/env.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Eliminate calls to fatal()/fatalx()/log_fatal() in env.c and just
+	pass back a return value.
+	[d7f2be8f2740]
+
+2014-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/boottime.c, plugins/sudoers/sudoers.h:
+	Make get_boottime() return bool.
+	[9ff15a995d01]
+
+	* doc/CONTRIBUTORS, plugins/sudoers/boottime.c:
+	Fix fd leak on Linux when determing boot time. This is usually
+	masked by the closefrom() call in sudo. From Jamie Anderson. Bug
+	#645
+	[0b4c430e8b88]
+
+2014-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/audit.c:
+	Handle the (currently impossible) case where both BSM and Linux
+	auditing are supported. Pacifies cppcheck.
+	[899cd6b5e487]
+
+	* plugins/sudoers/iolog.c:
+	Don't call ferror() on a closed stream, just check the return value
+	of fclose() instead. Found by cppcheck.
+	[e843f3c8f5d8]
+
+2014-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, plugins/sudoers/auth/pam.c:
+	Use calloc() instead of malloc(n * s) followed by memset(). From
+	Jean-Philippe Ouellet.
+	[f416cebd3d8e]
+
+	* plugins/sudoers/sudoers.c:
+	Format string safety in error path.
+	[956fd6dbba80]
+
+	* common/alloc.c, common/event_poll.c, common/gidlist.c,
+	common/sudo_conf.c, include/alloc.h, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/env.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
+	src/env_hooks.c, src/exec_common.c, src/parse_args.c, src/selinux.c,
+	src/sudo.c, src/sudo_edit.c, src/ttyname.c:
+	Rename emalloc2() -> emallocarray() and erealloc3() ->
+	ereallocarray().
+	[db3941093c68]
+
+	* compat/Makefile.in, mkdep.pl, plugins/sudoers/Makefile.in:
+	Add missing rule for building sha2.lo when not supported by libc or
+	libmd.
+	[70a16e10ddcd]
+
+2014-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.in:
+	Disable I/O logging for halt and poweroff in addition to reboot in
+	commented out example.
+	[40a7f11686ce]
+
+	* doc/CONTRIBUTORS, plugins/sudoers/auth/pam.c:
+	Use PAM_REINITIALIZE_CRED instead of PAM_ESTABLISH_CRED when
+	changing the user. This is the correct flag to use with a program
+	that changes the uid like su or sudo and fixes a role problem on
+	Solaris. From Gary Winiger; Bug #642
+	[ec23c3bf41bb]
+
+	* plugins/sudoers/defaults.c:
+	pam_setcred should default to true; from Gary Winiger Bug #642
+	[23e6628ec546]
+
+2014-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/parse.c, plugins/sudoers/policy.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c:
+	Make set_perms() and restore_perms() return an error instead of
+	calling exit() on failure.
+	[b1a1a36abdb4]
+
+	* plugins/sudoers/sudoers.c:
+	Eliminate calls to fatal() in sudoers.c and just pass back a return
+	value.
+	[e4d87a036f6d]
+
+	* plugins/sudoers/logging.c:
+	Elimate calls to fatal() in the logging code.
+	[9847acdf7066]
+
+2014-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/regress/atofoo/atofoo_test.c:
+	Quiet a compiler warning on Solaris.
+	[3b9827834800]
+
+	* MANIFEST, common/Makefile.in, compat/Makefile.in, compat/sha2.c,
+	compat/sha2.h, config.h.in, configure, configure.ac, m4/sudo.m4,
+	plugins/sudoers/Makefile.in, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/match.c,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/sudoers/test14.toke.ok,
+	plugins/sudoers/sha2.c, plugins/sudoers/sha2.h,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Move the sha2 code into libreplace and add configure checks for
+	SHA224Update in libc and libmd. Solaris uses "void *" where we use
+	"unsigned char *" so we need a check for that too. Solaris sha2.h
+	defines SHA224, SHA256, SHA384, and SHA512 so rename those tokens.
+	Adapted from changes from Vladimir Marek in bug #641.
+	[cd02732f0704]
+
+	* MANIFEST, plugins/sudoers/match.c,
+	plugins/sudoers/regress/testsudoers/test6.out.ok,
+	plugins/sudoers/regress/testsudoers/test6.sh,
+	plugins/sudoers/regress/testsudoers/test7.out.ok,
+	plugins/sudoers/regress/testsudoers/test7.sh:
+	Fix matching of uids and gids broken in sudo 1.8.9.
+	[315eff4add59]
+
+	* plugins/sudoers/testsudoers.c:
+	Fix -P option in usage()
+	[50753b6222b7]
+
+2014-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/set_perms.c:
+	Remove a few more unnecessary uses of fatal().
+	[8cfb205831dc]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Use log_warning() not log_fatal() for the "Invalid authentication
+	methods compiled into sudo" message. We return -1 on error anyway.
+	[c8da5cf74348]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Return MODE_ERROR from sudoers_policy_deserialize_info() instead of
+	calling fatalx().
+	[6faefdd188f2]
+
+	* common/gidlist.c, src/sudo.c:
+	parse_gid_list() now returns -1 on error instead of calling
+	fatalx().
+	[ccf19c4a0d5b]
+
+2014-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	Forward SIGINFO to running command if supported. If the command is
+	being run in the background (or exec_background is set in sudoers),
+	it is the sudo process, not the actual command, that receives the
+	^T.
+	[d2b020bdf0d5]
+
+	* plugins/sudoers/defaults.h, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c:
+	Remove calls to log_fatal() in I/O log functions and just pass an
+	error back to the caller.
+	[e89593d9dc35]
+
+2014-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/alloc.c, plugins/sudoers/env.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/policy.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c:
+	Make "internal error, %s overflow" arguments consistent, using
+	__func__ where possible (when debugging is allowed).
+	[84e2c40d101b]
+
+2014-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke_util.c, src/net_ifs.c:
+	Use common printf format when warning of buffer overflow prevention.
+	[8b0d732b0eae]
+
+	* Makefile.in:
+	Remove init.d/*.sh in distclean
+	[99cd1eaf4684]
+
+	* .hgignore:
+	Correctly ignore init.d/*.sh
+	[04aabe1893e5]
+
+	* plugins/sudoers/ldap.c:
+	Remove remaining calls to fatalx(); just pass the error to the
+	caller.
+	[a8bcf903d84b]
+
+2014-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.h:
+	Make a password/group cache collision a warning rather than fatal.
+	This should not be possible in practice and we can safely return the
+	new (potentially duplicate) item as it will be freed by the caller.
+	Make sudo_set_grlist() return an error on failure instead of calling
+	fatalx().
+	[5e8d3006862d]
+
+	* plugins/sudoers/timestamp.c:
+	Use log_warning() instead of log_fatal() if the ticket or lecture
+	path is too long and just return an error. This can only happen from
+	a misconfiguration so just ignoring the ticket/lecture file is safe.
+	[864c5de8345b]
+
+	* plugins/sudoers/find_path.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	In find_path(), return NOT_FOUND_ERROR instead of calling fatal() if
+	the path is too long. Remove an extraneous check against PATH_MAX in
+	set_cmnd() since find_path() already contains such a check.
+	[183106753690]
+
+	* plugins/sudoers/sudoers.h:
+	Remove unused MODE_LISTDEFS define and correct a comment.
+	[fb47e59ce5fe]
+
+	* plugins/sudoers/hexchar.c, plugins/sudoers/match.c,
+	plugins/sudoers/toke_util.c:
+	Make hexchar() return -1 on invalid input instead of calling
+	fatalx(). Callers used to check that the string was hex before
+	calling hexchar(). Now callers must check for a -1 return value
+	instead.
+	[1be217c71ce7]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/bsm_audit.h, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sudoers.c:
+	Propagate errors in audit code to caller instead of using fatal().
+	If we fail to audit an otherwise successful command, return an error
+	from the policy. For Linux audit, sudo may be compiled with audit
+	support but auditing may not be setup, so we don't consider that an
+	error.
+	[9a5753bfcb95]
+
+	* plugins/sudoers/boottime.c:
+	Remove unused variable on Linux.
+	[f63d7b86797d]
+
+	* plugins/sudoers/timestamp.c:
+	Fix warning on systems where mode_t is not unsigned int (Solaris).
+	[acd1457c23ec]
+
+2014-03-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.c:
+	Audit path too long errror. Add comments about non-audit events and
+	placeholders for future audit hooks.
+	[434ee47c83dc]
+
+	* src/net_ifs.c:
+	Fix aliasing warning in old-style interface probe code.
+	[1d6ce6f46da1]
+
+	* plugins/sudoers/set_perms.c:
+	Fix some sign comparision warnings.
+	[20c6068db104]
+
+	* common/aix.c, common/gidlist.c, compat/getgrouplist.c,
+	include/sudo_util.h, src/sudo.c:
+	Don't call fatal/fatalx in common/*.c
+	[ebf5e55a1ec1]
+
+2014-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/sudoers.h:
+	Fix expansion of %p in the prompt for "sudo -l" when rootpw, runaspw
+	or targetpw is set. Bug #639
+	[dff0208d1194]
+
+2014-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.10p2
+	[774ebec63b41]
+
+	* plugins/sudoers/timestamp.c:
+	Don't write an empty timestamp record when timestamp_timeout is
+	zero. If we find an empty record in the timestamp file, overwrite it
+	with a good one, truncating the file as needed.
+	[9c226d81b660]
+
+2014-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Fix typos in description of the -x option. Bug #637
+	[6ff2bfaaf99d]
+
+2014-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	Sudo 1.8.10p1
+	[33828a3385ad]
+
+	* plugins/sudoers/timestamp.c:
+	Fix typo/thinko that prevented "Defaults !tty_tickets" from working.
+	[f65cc29dbcc7]
+
+	* plugins/sudoers/parse.c:
+	Fix "sudo -l command" output when the matching command is negated.
+	Bug #636
+	[b4a92803f733]
+
+2014-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/regress/atofoo/atofoo_test.c,
+	common/regress/sudo_conf/test5.err.ok,
+	common/regress/tailq/hltq_test.c:
+	The atofoo_test and hltq_test tests now display their own test error
+	rate. Display pass/fail count separately for sudo_conf and
+	sudo_parseln tests. Check stderr output for the sudo_conf test.
+	[5c814709ac70]
+
+	* src/Makefile.in:
+	Don't run the check_ttyname test if cross compiling.
+	[874ecc1c3db0]
+
+	* plugins/sudoers/Makefile.in:
+	CWD no longer used.
+	[13b2f3c4269b]
+
+	* plugins/sudoers/Makefile.in:
+	Fix diff of toke and err output files in "make check"
+	[485cdf3c75e7]
+
+2014-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/po/de.mo, src/po/de.po:
+	sync with translationproject.org
+	[d246c72a2350]
+
+2014-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Check whether ber.h is needed before ldap.h even if we are not using
+	any ber functions. Needed for older versions of nss ldap.
+	[c2310324dc34]
+
+	* plugins/sudoers/sssd.c:
+	Fix compiler warning in debug code.
+	[8ee4cb6cafad]
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/ca.mo, src/po/ca.po:
+	Catalan translation for sudo from translationproject.org.
+	[d6af7d06ee36]
+
+2014-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Document negation fix in JSON output.
+	[37a85423ae49]
+
+2014-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	Fix handling of '!' operator when converting sudoers. We now add a
+	"negated" boolean flag to objects that have the '!' operator.
+	[071926c10280]
+
+2014-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, NEWS, plugins/sudoers/po/cs.mo, plugins/sudoers/po/cs.po:
+	Czech translation for sudoers from translationproject.org
+	[c0aae297f7c1]
+
+2014-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Try -libmldap before -lldap in case there is no link from
+	libibmldap.so to libldap.so. Since IBM ldap is installed under /opt
+	we should only be able to reach it if --with-ldap was given an
+	explicit path.
+
+	Only check for ber_set_option() if LBER_OPT_DEBUG_LEVEL is defined.
+	[89d50c29d737]
+
+2014-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Fix typo in setreuid() PERM_ROOT error message.
+	[533415f53165]
+
+	* plugins/sudoers/auth/API, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h:
+	Remove unused FLAG_USER auth flag. We have no auth methods that
+	require that authentication be run as the invoking user.
+	[4a9a9f557cb1]
+
+	* mkpkg:
+	No longer need to disable setresuid() on debian.
+	[96ba687c35f0]
+
+2014-02-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/timestamp.c:
+	Fix conversion of timestamp_timeout from double to struct timeval.
+	Also quiet a printf format warning on 32-bit systems.
+	[59d1f3094dda]
+
+2014-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, NEWS, plugins/sudoers/po/sr.mo, plugins/sudoers/po/sr.po:
+	Serbian translation for sudoers from translationproject.org.
+	[7134b386d658]
+
+2014-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Add Ingo Schwarze
+	[114cdf286987]
+
+	* NEWS, plugins/sudoers/visudo_json.c:
+	When exporting sudoers in JSON format, use the same type of Options
+	object for both Defaults and Cmnd_Specs.
+	[caa57043e197]
+
+2014-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/inet_pton.c:
+	Silence cppcheck false positive.
+	[b2781c42a80f]
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po:
+	sync with translationproject.org
+	[baba43a6d682]
+
+	* NEWS, doc/UPGRADE:
+	Mention init.d scripts on AIX and HP-UX Mention sudoers group
+	mismatch fix
+	[0259cb1f7cae]
+
+	* INSTALL:
+	Talk about clearing files at boot time, not reboot time since it
+	happens when the system comes up, not down.
+	[e8e480bc34fd]
+
+	* plugins/sudoers/sudoers.c:
+	We also need to open the sudoers file as root if there is a GID
+	mismatch.
+	[2fb2ba6fc4e6]
+
+	* sudo.pp:
+	Install /etc/rc.d/init.d/sudo and /etc/rc.d/rc2.d/S90sudo for AIX
+	rpm packages.
+	[4aca1d318599]
+
+2014-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/Makefile.in:
+	Remove init.d file and link in uninstall target.
+	[249a9f105cdd]
+
+	* configure, configure.ac, sudo.pp:
+	Fix INIT_DIR for real this time.
+	[5444eb1afbc5]
+
+	* configure, configure.ac, sudo.pp:
+	Use correct init.d dir on HP-UX. Fix pp warnings from rc.d and
+	init.d dirs.
+	[809b54ef95f8]
+
+	* .hgignore, MANIFEST, configure, configure.ac, init.d/aix.sh.in,
+	init.d/hpux.sh.in, src/Makefile.in, sudo.pp:
+	First cut add installing an init.d file for HP-UX and AIX to remove
+	old sudo timestamp files at boot time.
+	[ec6d35c62d88]
+
+2014-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Use .Ar macro instead of "file ..." Use ".Cm -" instead of ".Li -"
+	for the default login class. From Ingo Schwarze.
+	[f13ea603760e]
+
+	* doc/sudo.conf.mdoc.in, doc/sudo.mdoc.in, doc/sudo_plugin.mdoc.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.mdoc.in,
+	doc/sudoreplay.mdoc.in, doc/visudo.mdoc.in:
+	Remove some extraneous markup; from Ingo Schwarze
+	 * No need to explicitly end a macro with No before | because | counts
+	as middle punctuation and falls out of the macro, anyway.
+	 * No need to explicitly re-open in-line macros after | because |
+	counts as middle punctuation and the macros resume afterwards,
+	anyway.
+	 * Simplify the mnemonic remarks regarding the option letters, no need
+	for manual font and spacing control with No and Ns.
+	 * Trim Ns No to just Ns, it already implies No.
+	[cc63d66c6655]
+
+	* doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Move zerowidth space in :alpha: after the colon for consistency.
+	[799f6656c6e8]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.man.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudoers.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
+	doc/visudo.man.in:
+	regen
+	[14d682732b6f]
+
+	* doc/sudo.mdoc.in, doc/sudoreplay.mdoc.in, doc/visudo.mdoc.in:
+	Remove extraneous keeps in SYNOPSIS now that mandoc does implied
+	keeps when converting from mdoc to man.
+	[0f48fc289f29]
+
+	* doc/sudoers.mdoc.in:
+	Properly escape the : in :alpha:
+	[e41d4533a55f]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Replace some uses of .Sy with .Ar, .Ev and .Pa as appropriate. From
+	Jan Stary.
+	[90ec488905de]
+
+2014-02-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	Fix indentation of Defaults entries. The initial indent should be
+	outside the loop iterating over the entries.
+	[dc493c888fb2]
+
+2014-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po:
+	sync with translationproject.org
+	[fc517bc0908e]
+
+	* common/aix.c, common/alloc.c, common/atoid.c, common/atomode.c,
+	common/fatal.c, common/gidlist.c, common/sudo_conf.c,
+	common/sudo_debug.c, compat/strsignal.c, compat/strtonum.c,
+	plugins/sudoers/audit.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c,
+	src/locale_stub.c, src/net_ifs.c, src/sesh.c, src/sudo.h:
+	We must include gettext.h before missing.h as it includes system
+	headers. Also add missing DEFAULT_TEXT_DOMAIN defines in sudoers
+	audit code that does not include sudoers.h.
+	[3ac4aa43ce40]
+
+	* common/sudo_dso.c:
+	When emulating DSO_NEXT with shl_get() we need to skip the program's
+	handle. This used to be documented as being index -2 but now it
+	seems to be index 0. As this is not guaranteed we need to look up
+	the real handle value for PROG_HANDLE and skip it when interating
+	through all the DSOs. Fixes infinite recursion on HP-UX in the
+	getenv() replacement.
+	[ade1b3045232]
+
+	* src/env_hooks.c:
+	Export getenv() so it is visible to shared objects we link with.
+	[1ac08446a3a7]
+
+2014-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/regress/atofoo/atofoo_test.c,
+	common/regress/sudo_conf/conf_test.c,
+	common/regress/sudo_parseln/parseln_test.c,
+	common/regress/tailq/hltq_test.c,
+	plugins/sudoers/regress/parser/check_fill.c:
+	Add some initprogname() calls to the test programs.
+	[e4320585a88b]
+
+2014-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[038d066a866d]
+
+	* doc/UPGRADE:
+	Mention that there is now a default LDAP search filter.
+	[6351da3f8377]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Minor word choice change.
+	[7e59ab3eb453]
+
+	* NEWS, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/match.c:
+	Add use_netgroups sudoers option. For LDAP-based sudoers, netgroup
+	support requires an expensive substring match on the server. If
+	netgroups are not needed, this option can be disabled to reduce the
+	load on the LDAP server.
+	[e6bd6c103390]
+
+2014-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Update copyright year.
+	[1299eed430a5]
+
+	* NEWS:
+	Mention LDAP changes.
+	[512b1e363587]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, plugins/sudoers/ldap.c:
+	Use a default LDAP search filter of (objectClass=sudoRole). When
+	constructing the netgroup query, add (sudoUser=*) to the query so we
+	don't fall below the 3 character OpenLDAP substring threshold.
+	Otherwise the index for sudoUser will never be used for that query.
+	Pointed out by Michael Stroeder.
+	[54856973af41]
+
+	* plugins/sudoers/timestamp.c:
+	Don't warn about an insecure lecture dir twice. Display warnings in
+	the user's locale.
+	[2c56b8b6d6f9]
+
+2014-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention the fix for ^Z at the password prompt when sudo was started
+	in the background.
+	[352d52ad1f7d]
+
+	* common/term.c, src/exec_pty.c:
+	In term_restore(), only restores the terminal if we are in the
+	foregroup process group. Instead of calling tcgetpgrp(), which is
+	racy, we set a temporary handler for SIGTTOU and check whether it
+	was received after a failed call to tcsetattr().
+	[94979d51daa2]
+
+	* MANIFEST, compat/getaddrinfo.c, compat/inet_pton.c, config.h.in,
+	configure, configure.ac, doc/LICENSE, include/missing.h, mkdep.pl,
+	plugins/sudoers/interfaces.c, plugins/sudoers/match_addr.c:
+	Use inet_pton() instead of inet_aton() and include a version from
+	BIND for those without it.
+	[fe61a27c76d3]
+
+	* common/regress/atofoo/atofoo_test.c:
+	Quiet a gcc warning.
+	[f197821892ea]
+
+	* compat/getaddrinfo.c:
+	Need to include limits.h for USHRT_MAX.
+	[d1d8bd9a0e01]
+
+2014-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/term.c, include/sudo_util.h:
+	Use bool for function return values instead of 1 or 0.
+	[99e357c0800b]
+
+	* configure, configure.ac:
+	Warn the user if the rundir needs to be cleared in the rc files.
+	Neither AIX not HP-UX clear /var/run (if it even exists).
+	[6cdbf57a2f9e]
+
+	* NEWS:
+	Update for sudo 1.8.9p5
+	[efb737c32615]
+
+	* src/preserve_fds.c:
+	When the closefrom limit is greater than any of the preserved fds,
+	the pfds list will be non-empty but lastfd will be -1 triggering an
+	ecalloc(0) assertion. Instead, test for lastfd being -1 and make
+	sure we always update it, even if dup() fails. Also restore initial
+	value of lowfd after we are done relocating. Fixes bug #633
+	[a11206a31f28]
+
+	* common/term.c:
+	Document function return values.
+	[267bc85f6fbb]
+
+2014-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	term_restore() now restarts itself so we don't need to do it
+	ourselves.
+	[a17e885d0b0a]
+
+	* common/term.c:
+	syscall restarting is broken on Mac OS X when interrupted by a tty
+	signal so restart tcsetattr() by hand. For details, see.
+	http://openradar.appspot.com/radar?id=6402578615107584
+	[3997b2a0577e]
+
+	* MANIFEST, common/Makefile.in, common/regress/atofoo/atofoo_test.c:
+	Add regress for atobool(), atoid() and atomode()
+	[e1cbdf86d6e2]
+
+	* plugins/sudoers/Makefile.in:
+	Add back boottime.lo
+	[0b7ddc31e13e]
+
+	* INSTALL:
+	Mention that rundir and vardir may be the same and what to do if
+	they are.
+	[301df9a31d43]
+
+	* MANIFEST, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/boottime.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c:
+	Bring back boot time checking code and zero out time stamp files
+	that predate the boot time. This should help systems w/o /var/run
+	where the admin has setup rc.d to clear the timestamp directory.
+	[e09389a8b1ca]
+
+	* configure, configure.ac:
+	Check libraries for inet_pton() if not in libc.
+	[9f9bd83895e8]
+
+2014-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Fix clock_gettime() detection when it lives in librt. Some systems
+	have inet_aton() in libresolv (older Solaris).
+	[e5f7c8bc9a81]
+
+	* sudo.pp:
+	Avoid duplicate directories if vardir and rundir are the same.
+	[c5df5ebc191b]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[740b2cc42fea]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Elaborate on time stamp error message causes.
+	[2838fea2e21a]
+
+2014-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Remove the time stamp dir and its contents when uninstalling. We
+	currently leave the lecture status files installed until there is a
+	better way to detect upgrades.
+	[61532b7113ff]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Update time stamp error messages and regen.
+	[edf570c98cd5]
+
+	* plugins/sudoers/timestamp.c:
+	Restore warning when sudoers is unable to update the time stamp
+	file.
+	[86648a771250]
+
+	* INSTALL, Makefile.in, configure, configure.ac, doc/sudoers.mdoc.in,
+	m4/sudo.m4, plugins/sudoers/Makefile.in, sudo.pp:
+	Replace --with-timedir and --with-lecture_dir with --with-rundir and
+	--with-vardir which are the parent directories of the time stamp and
+	lecture dirs. These directories need to be searchable by non-root so
+	that the timestampowner setting can function.
+	[5c38d77a2d0c]
+
+	* plugins/sudoers/timestamp.c:
+	Fix use of timestampowner in the new time stamp world order. Parent
+	directories for timestampdir and lecture_dir are now created with
+	the execute bit set so that we can traverse them as non-root.
+	[9ff6f07c0a5d]
+
+2014-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Regen Makefiles.
+	[59542bcdb222]
+
+	* common/sudo_debug.c, config.h.in, include/sudo_util.h,
+	plugins/sample/sample_plugin.c:
+	Move ctim_get and mtim_get to sudo_util.h
+	[d565391f5491]
+
+	* plugins/sudoers/timestamp.c:
+	sprinkle some debug printfs and add function header comments
+	[1842d9b8170d]
+
+	* plugins/sudoers/timestamp.c:
+	Properly handle the case where /var/run/sudo/ts doesn't exist.
+	[895f3ad6ad60]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	fix typo
+	[50041ebb6ce6]
+
+	* NEWS:
+	Mention "sudo -K" change.
+	[e99bd7657aae]
+
+	* doc/UPGRADE:
+	Upgrade info for 1.8.10
+	[0867718b9af5]
+
+2014-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/timestamp.c:
+	Warn on ftruncate failure().
+	[d2081876da25]
+
+	* plugins/sudoers/timestamp.c:
+	Fix checking of lecture status.
+	[e12d78234d17]
+
+	* mkpkg:
+	Do not override timedir on Debian.
+	[283fa2e69a0a]
+
+	* common/event.c, common/event_select.c, include/missing.h,
+	plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c, src/sudo_edit.c:
+	Use sudo_timeval macros and remove compat macros from missing.h
+	[1de76d8b811e]
+
+	* INSTALL, MANIFEST, NEWS, compat/Makefile.in, compat/clock_gettime.c,
+	config.h.in, configure, configure.ac, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, include/missing.h,
+	include/sudo_util.h, m4/sudo.m4, mkdep.pl, pathnames.h.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/boottime.c,
+	plugins/sudoers/check.h, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c, src/Makefile.in:
+	Switch to new time stamp file format. Each user now has a single
+	file which may contain multiple records when per-tty time stamps are
+	in use (the default). The time stamps use a monotonic timer where
+	available and are once again stored in /var/run/sudo. The lecture
+	status is now stored separately from the time stamps in a different
+	directory.
+	[7e16eb37bacc]
+
+	* common/atomode.c:
+	Zero out errstr when there is no error; fixes bug #632
+	[74950ef1a0dc]
+
+2014-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/check.c:
+	When listing a user's privileges, always prompt the user for their
+	own password, regardless of the value of target_pw, root_pw or
+	runas_pw.
+	[73a13ccc7933]
+
+2014-01-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, plugins/sudoers/interfaces.c,
+	plugins/sudoers/match_addr.c:
+	Use inet_aton() instead of inet_addr() as it allows us to
+	distinguish between the address (or mask 255.255.255.255) and an
+	error. In the future we may consider switching to inet_pton() for
+	IPv4 too.
+	[b6b4e4c77e9a]
+
+2014-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	Fix typo, ULONG_MAX vs. ULLONG_MAX
+	[5d274daa9fb1]
+
+	* plugins/sudoers/sudo_nss.c:
+	Fix typo in the AIX case.
+	[ee531c950fce]
+
+	* plugins/sudoers/sudo_nss.c:
+	Size pointer for sudo_parseln() should be size_t not ssize_t. This
+	was already correct for the nsswitch.conf case.
+	[cfaf895c1db4]
+
+2014-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, common/sudo_conf.c, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, include/sudo_conf.h, src/net_ifs.c:
+	It is now possible to disable network interface probing in sudo.conf
+	by changing the value of the probe_interfaces setting.
+	[e9dc28c7db60]
+
+2014-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match_addr.c:
+	If inet_addr() returns INADDR_NONE, return false instead of
+	iterating through the interfaces looking for a match that will never
+	happen.
+	[1559c301caec]
+
+	* configure, configure.ac, src/Makefile.in:
+	Add explicit dependency on sudoers.la to sudo target when sudoers is
+	compiled statically into the sudo binary.
+	[d08cc66e18bd]
+
+2014-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/logging.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestr.c:
+	Do not assume localtime(), gmtime() and ctime() always return non-
+	NULL.
+	[a1b5b67436de]
+
+2014-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in, zlib/Makefile.in:
+	Update copyright years
+	[37d2aaa92544]
+
+	* plugins/sudoers/visudo_json.c:
+	Eliminate dead store found by clang checker.
+	[86874d5340f1]
+
+	* NEWS, configure, configure.ac:
+	Update for sudo 1.8.9p4
+	[f79ab7c6c1c5]
+
+	* common/sudo_debug.c, include/sudo_debug.h, src/preserve_fds.c:
+	When relocating fds, update the debug fd if it is set so we are
+	guaranteed to get debugging output.
+	[b1deaa472aa6]
+
+2014-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	If the event loop exits due to an error and we are not logging I/O,
+	kill the command if still running. Fixes a bug where sudo could exit
+	while the command was still running.
+	[844018ff8a8c]
+
+	* src/preserve_fds.c:
+	When relocating preserved fds, start with the highest ones first to
+	avoid moving fds around more than we have to. Now uses a bitmap to
+	keep track of which fds are being preserved. Fixes a bug where the
+	debugging fd could be relocated to the same fd as the error
+	backchannel temporarily, resulting in debugging output being printed
+	to the backchannel if util@debug was enabled.
+	[55e006dbeaf3]
+
+	* src/preserve_fds.c:
+	When restoring fds traverse list from high -> low, not low -> high
+	to avoid implicitly closing an fd we want to relocate.
+	[6351225f47d7]
+
+	* src/exec.c:
+	If not logging I/O we may get EOF when the command is executed and
+	the other end of the backchannel is closed. Just remove the
+	backchannel event in this case or we will continue to receive the
+	event. Bug #631
+	[a204b69d91f7]
+
+	* src/po/sr.mo, src/po/sr.po:
+	sync with translationproject.org
+	[987087ce4658]
+
+2014-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Fix strtonum() usage when parsing /proc/self/stat on Linux. Bug #630
+	[3448dffe9701]
+
+	* NEWS, configure, configure.ac:
+	Update for sudo 1.8.9p3
+	[22e5a6f69999]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Do not leak old istack if realloc fails; found by cppcheck. Also
+	modify yyless() to avoid a harmless cppcheck warning every time it
+	is used.
+	[021077017a23]
+
+	* common/term.c:
+	Add suppression line to quiet a bogus (inconclusive) cppcheck
+	warning.
+	[065207271e5d]
+
+	* plugins/group_file/plugin_test.c:
+	Make this compile again
+	[f0ff8df475e8]
+
+	* plugins/sudoers/logwrap.c:
+	Remove dead store; found by cppcheck
+	[a59833af3401]
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in, zlib/Makefile.in:
+	Add cppcheck target to run cppcheck on all source files.
+	[d207c2ef49a2]
+
+2014-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.ac:
+	Update for sudo 1.8.9p2
+	[2e7fe6e371a4]
+
+	* config.h.in, configure, ltmain.sh, m4/libtool.m4, m4/ltoptions.m4,
+	m4/ltsugar.m4, m4/ltversion.m4, m4/lt~obsolete.m4:
+	Update to libtool-2.4.2.418
+	[d1dbed89d733]
+
+	* config.guess, config.sub:
+	Update from http://git.savannah.gnu.org/gitweb/?p=config.git
+	[2b5e32d23be5]
+
+2014-01-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sesh.c:
+	Quiet a cppcheck warning about a negative subscript.
+	[ab98b72f5bdf]
+
+	* src/exec_common.c, src/selinux.c, src/sesh.c, src/sudo_exec.h:
+	Make noexec parameter to sudo_execve() bool.
+	[daa75e4c248a]
+
+	* plugins/sudoers/sudoreplay.c:
+	Quiet a few innocuous cppcheck warnings.
+	[90ffa16d27b1]
+
+	* plugins/sudoers/sssd.c:
+	Handle in_res being NULL for sudo_debug_printf() in
+	sudo_sss_filter_result().
+	[8595cc05d2a8]
+
+	* plugins/sudoers/iolog.c:
+	When writing length to timing file, use %u not %d as it is unsigned.
+	[a7f2fcb6919e]
+
+	* plugins/sudoers/visudo_json.c:
+	Close export_fp in the error path too, but do not close stdout.
+	[5c918718ab45]
+
+	* plugins/sudoers/auth/secureware.c:
+	Move right brace outside #ifdef HAVE_DISPCRYPT; found by cppcheck.
+	[f2619d2eb7a8]
+
+	* NEWS:
+	Sudo 1.8.9 also fixes bug #617
+	[cc5c18228719]
+
+2014-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	The fix for the hang was already in the 1.8.9 tarballs.
+	[f038ebcc1071]
+
+	* NEWS, configure, configure.ac:
+	Update for sudo 1.8.9p1
+	[732fca0003cf]
+
+	* common/atobool.c, common/event.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/parse.h, src/exec.c, src/preserve_fds.c:
+	Update copyright year.
+	[fdeb5956810e]
+
+	* plugins/sudoers/parse.h:
+	Go back to making the bit fields in struct cmndtag explicitly
+	signed. This fixes a problem on gcc 4.8 (at least) which appears to
+	be treating the value as unsigned by default.
+	[46b9a7bb10ac]
+
+	* common/atobool.c:
+	Use debug_return_int() instead of bare return for debugging support.
+	[c273f822de5f]
+
+2014-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/event.c:
+	Fix infinite loop that could be triggered by sudo_ev_loopbreak() and
+	sudo_ev_loopcontinue().
+	[1723561c46b0]
+
+	* NEWS:
+	Update for 1.8.9 final.
+	[d49c14d21410]
+
+2014-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Handle a sequence file with no trailing newline.
+	[aa29306e4f6d]
+
+2014-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Truncate io log and timing files on open when recycling them. Only
+	an issue when the sequence number wraps around.
+	[01b2dfe15ff0]
+
+	* plugins/sudoers/iolog.c:
+	Repair reading of the iolog sequence number that got broken when
+	adding stricter strtoul() checks.
+	[e0f4a11c3437]
+
+	* src/exec.c:
+	If invoked as sudoedit we can't just exec the command directly since
+	the temporary files need to be updated before sudo exits.
+	[508503be1c4f]
+
+	* src/preserve_fds.c:
+	Fix restoration of the close-on-exec flag when moving a relocated fd
+	back into its original position.
+	[5572f1f8b48a]
+
+2014-01-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Add "see below" to reference "Secure editing" section in "Preventing
+	shell escapes".
+	[b2db990a36b3]
+
+2014-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Add initial "Secure editing" section.
+	[0d7a192e0e25]
+
+	* doc/LICENSE:
+	Update copyright year.
+	[4a639d9207a9]
+
+2013-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po, src/po/eo.mo,
+	src/po/eo.po, src/po/fi.mo, src/po/fi.po:
+	sync with translationproject.org
+	[5c15a411b10d]
+
+	* plugins/sudoers/policy.c:
+	Make user_cwd and user_tty dynamically allocated even for the
+	"unknown" case.
+	[015454bf97f8]
+
+2013-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Use -fstack-protector-strong in preference to -fstack-protector-all
+	or -fstack-protector.
+	[bdd1066eefc4]
+
+	* doc/HISTORY:
+	Dell acquired Quest
+	[3d5b7d27a313]
+
+2013-12-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, src/po/ru.mo,
+	src/po/ru.po, src/po/vi.mo, src/po/vi.po:
+	sync with translationproject.org
+	[f964671d08ce]
+
+2013-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/cs.mo, src/po/cs.po, src/po/da.mo, src/po/da.po,
+	src/po/it.mo, src/po/it.po, src/po/pl.mo, src/po/pl.po,
+	src/po/pt_BR.mo, src/po/pt_BR.po, src/po/uk.mo, src/po/uk.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po:
+	sync with translationproject.org
+	[5f5becf5fb7a]
+
+	* doc/sudoers.ldap.cat:
+	regen
+	[77745e6bc0d5]
+
+	* NEWS:
+	Update for recent changes.
+	[365b9084268a]
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Fix typo; we want setlocale(LC_ALL, "") since we are setting the
+	locale for the first time.
+	[e2b9660e9d48]
+
+2013-12-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Use sudoers_initlocale() in main() startup, not sudoers_setlocal()
+	as the latter assumes we are already in the user's locale which may
+	not be the case. For sudoreplay, we can just use setlocale()
+	directly as there is no sudoers locale.
+	[12235e50dea0]
+
+2013-12-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/preserve_fds.c, src/sudo.c, src/sudo.h:
+	Redo preserve_fds support to remap high fds so we can get the most
+	out of closefrom(). The fds are then restored after closefrom().
+	[7d712ec49db7]
+
+	* plugins/sudoers/Makefile.in:
+	Fix install-plugin when sudoers is compiled statically.
+	[36a8bf3b588d]
+
+2013-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/sudo_debug.c, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	include/sudo_debug.h, include/sudo_plugin.h, src/Makefile.in,
+	src/exec.c, src/exec_pty.c, src/preserve_fds.c, src/sudo.c,
+	src/sudo.h, src/sudo_exec.h:
+	Add support for preventing fds from getting clobbered by
+	closefrom().
+	[269f45964ff0]
+
+2013-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[b8f458379b5b]
+
+2013-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/alloc.c:
+	Need to include limits.h here too.
+	[b53c6edef597]
+
+2013-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.ac, plugins/sudoers/parse.h:
+	No need to use __signed.
+	[05f9648d1953]
+
+	* plugins/sudoers/regress/logging/check_wrap.c:
+	Need limits.h here too.
+	[54aac3bbf66a]
+
+	* compat/closefrom.c:
+	Still need limits.h here.
+	[0abc6b2be208]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[386b47ced07f]
+
+	* compat/closefrom.c:
+	Go back to using /proc/self/fd instead of /proc/$$/fd as only AIX
+	lacks /proc/self and it has F_CLOSEM.
+	[b5735fbcfdce]
+
+2013-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	Use a switch to map digest type to name instead of an array of
+	strings.
+	[ab17ceb4dd60]
+
+	* compat/closefrom.c:
+	Use /dev/fd in closefrom() on FreeBSD < 8.0 and Mac OS X.
+	[e70df3b3144b]
+
+	* compat/snprintf.c:
+	Remove _MAX and _MIN compat; we rely on missing.h for that. We
+	already require the compiler handle long long so there's no need to
+	use HAVE_LONG_LONG_INT everywhere.
+	[2bda15071439]
+
+	* common/ttysize.c, include/missing.h:
+	Remove _MAX and _MIN defines that any system from the last 20 years
+	should have. Add ULLONG_MAX in case it is missing.
+	[2db0cee4aaa8]
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c:
+	Change visudo -x to take a file name argument, which may be '-' to
+	write the exported sudoers file to stdout.
+	[84cb72c3c391]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/parse.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c, src/regress/ttyname/check_ttyname.c:
+	Move symbol extern defs into sudoers.h
+	[b631a0b57fae]
+
+	* plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/logging/check_wrap.c:
+	Add missing sudo_util.h
+	[ed0edc2e2d0c]
+
+2013-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Warn if the time stamp in the I/O log file does not fit in time_t.
+	Warn if the info line is not well-formed instead of silently
+	ignoring it.
+	[37a050de5be5]
+
+2013-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/Makefile.in, plugins/sudoers/Makefile.in, src/Makefile.in:
+	Rename libcommon libsudo_util
+	[df3ffd4229e5]
+
+2013-12-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/aix.c, common/atobool.c,
+	common/atoid.c, common/atomode.c, common/fmt_string.c,
+	common/gidlist.c, common/progname.c, common/setgroups.c,
+	common/sudo_conf.c, common/term.c, common/ttysize.c,
+	include/missing.h, include/sudo_util.h,
+	plugins/group_file/Makefile.in, plugins/group_file/getgrent.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoreplay.c, plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.c, src/Makefile.in, src/sudo.h:
+	Move prototypes for functions provided by libcommon that don't have
+	their own header files into sudo_util.h.
+	[43f423a24416]
+
+2013-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/mkdefaults:
+	Now that we have proper number parsing functions we should store
+	T_UINT defaults values as unsigned int, not int.
+	[67d8c2244f1d]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
+	Don't use int where we really mean enum def_tuple. When this code
+	was written it was assumed that we may have multiple tuple types.
+	However, that hasn't happened and probably never will.
+	[8491f970f343]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	Regen after string parsing changes.
+	[fd6bf79c3286]
+
+	* common/atoid.c, common/atomode.c, compat/strtonum.c, configure,
+	configure.ac, include/missing.h, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/sudoreplay.c, src/parse_args.c, src/ttyname.c:
+	The OpenBSD strtonum() uses very short error strings that can't be
+	translated usefully. Convert them to longer strings on error. Also
+	use the longer strings for atomode() and atoid().
+	[dace028594da]
+
+2013-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/atoid.c, common/atomode.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, src/sudo.c, src/sudo.h:
+	Add atomode() function for parsing a file mode.
+	[44e29629aa5e]
+
+	* common/sudo_conf.c, common/ttysize.c, compat/Makefile.in,
+	compat/closefrom.c, compat/getaddrinfo.c, compat/strtonum.c,
+	configure, configure.ac, include/missing.h,
+	plugins/sudoers/boottime.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/sudoreplay.c, plugins/system_group/system_group.c,
+	src/parse_args.c, src/sudo.c, src/ttyname.c:
+	Use strtonum() instead of atoi(), strtol() or strtoul() where
+	possible.
+	[e4a1fc84b893]
+
+	* MANIFEST, compat/Makefile.in, compat/strtonum.c, config.h.in,
+	configure, configure.ac, include/missing.h, mkdep.pl:
+	Add strtonum.c to compat for simpler number parsing.
+	[a4c69b003da0]
+
+2013-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_common.c:
+	Fix a warning on Solaris, we need to use debug_return_const_ptr.
+	[932aa94c0cac]
+
+	* plugins/sudoers/Makefile.in:
+	check_symbols needs to link with SUDO_LIBS in order to get -lpthread
+	on HP-UX for libldap (which uses threads). It would be better to
+	have a separate variable for the pthread library but this is no
+	worse than it used to be.
+	[94591b765371]
+
+2013-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	add missing comma
+	[7dcbd1c6dd25]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Make -c option description more accurate.
+	[3f305ae6037e]
+
+2013-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, plugins/sudoers/sudoers.c:
+	When checking whether a user may change the login class, just check
+	pw_uid of the runas user, which was passed in to set_loginclass().
+	[aaf736440441]
+
+2013-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	Use atoid() when parsing user/group IDs and print them as unsigned
+	int.
+	[40c77459a36a]
+
+2013-12-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Correctly parse 64-bit times in I/O log files.
+	[d053ee75adc3]
+
+	* compat/getgrouplist.c, plugins/group_file/getgrent.c,
+	plugins/sudoers/pwutil.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c:
+	Use atoid() not atoi() when parsing uids/gids.
+	[491146596626]
+
+	* plugins/sudoers/match.c, plugins/sudoers/match_addr.c,
+	plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil.h, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/sudoers.h:
+	Better match debugging. Sprinkle const in match functions.
+	[4cd8d793f165]
+
+2013-12-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Document that plugins can be compiled statically into the sudo
+	binary.
+	[434061cf909f]
+
+2013-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sssd.c:
+	sudo_sss_filter_user_netgroup(): fix comment typos, break out of
+	loop early if we match ALL or netgroup.
+	[0691731f4b12]
+
+	* plugins/sudoers/sssd.c:
+	When filtering netgroups, use the passwd struct stashed in the
+	handle, not user_name since we may be listing another users
+	privileges.
+	[f2669cf7b70c]
+
+	* mkpkg:
+	RHEL 6 and above builds sudo with SSSD support
+	[afc3d894851e]
+
+	* plugins/sudoers/sssd.c:
+	Avoid passing NULL domainname to sudo_debug_printf().
+	[b08abe5e6d23]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document sssd debug subsystem.
+	[250c3ab1bcf0]
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Document "event" debug subsystem.
+	[85d220b48edc]
+
+	* plugins/sudoers/match.c:
+	Use atoid() instead of atoi() when parsing uids/gids so we get
+	proper range checking.
+	[5c3e2f3f6cb9]
+
+	* plugins/sudoers/sssd.c:
+	Add user netgroup filtering for SSSD. Previously, rules for a
+	netgroup were applied to all even when they did not belong to the
+	specified netgroup. RedHat Bugzilla 880150.
+	[784848b5462c]
+
+	* plugins/sudoers/sssd.c:
+	Fix several issues found by the clang static analyzer; Daniel
+	Kopecek
+	[520261dd7461]
+
+2013-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	Mention how to dump sudoers info from LDAP.
+	[a53c93790a30]
+
+	* src/exec_common.c:
+	On Solaris, disabling the proc_exec privilege appears to interfere
+	with DAC file permissions. Adding DAC override permissions to the
+	inheritable set works around this for commands run as root without
+	giving extra permissions to other users. Bug #626
+	[391ad44026c3]
+
+2013-12-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/progname.c, compat/Makefile.in,
+	compat/getprogname.c, configure, configure.ac, include/missing.h,
+	mkdep.pl, plugins/sample/sample_plugin.c, plugins/sudoers/policy.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/parse_args.c,
+	src/regress/ttyname/check_ttyname.c, src/sudo.c:
+	Instead of setprogname(), add initprogname() which gets the program
+	name for getprogname() using /proc or pstat() if possible.
+	[e2d48d81456f]
+
+2013-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Ignore EOVERFLOW from pstat_getproc(). The HP-UX kernel appears to
+	return this in certain situations but it appears to be harmless at
+	least insofar as retrieving the tty goes.
+	[105bea4e1c20]
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/cs.mo, src/po/cs.po, src/po/eo.mo, src/po/eo.po,
+	src/po/fi.mo, src/po/fi.po, src/po/it.mo, src/po/it.po,
+	src/po/pl.mo, src/po/pl.po, src/po/pt_BR.mo, src/po/pt_BR.po,
+	src/po/ru.mo, src/po/ru.po, src/po/uk.mo, src/po/uk.po,
+	src/po/vi.mo, src/po/vi.po, src/po/zh_CN.mo, src/po/zh_CN.po:
+	Sync with translationproject.org
+	[3694d7ad4c9d]
+
+2013-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Add missing newline in help message after export option.
+	[1c0bff0c181e]
+
+2013-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Do not add LIBDL to SUDO_LIBS or SUDOERS_LIBS in configure, do it in
+	Makefile.in so we can make it last. Fixes a linking problem on
+	Ubuntu precise.
+	[f8d3bddbe742]
+
+2013-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, m4/ax_func_getaddrinfo.m4:
+	Do not rely on NULL being defined for getaddrinfo() test. Fixes the
+	check on HP-UX 11.23.
+	[a5dcf0283693]
+
+2013-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	Regen for sudo 1.8.9b1
+	[945f27a7aa1c]
+
+	* src/po/de.mo, src/po/de.po, src/po/sr.mo, src/po/sr.po:
+	Sync with translationproject.org
+	[52abae16ccfa]
+
+2013-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, MANIFEST, NEWS, common/Makefile.in, common/sudo_dso.c,
+	compat/Makefile.in, compat/dlfcn.h, compat/dlopen.c, config.h.in,
+	configure, configure.ac, include/sudo_dso.h, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/ldap.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/sssd.c, plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.c, src/Makefile.in,
+	src/env_hooks.c, src/load_plugins.c, src/preload.c, src/sudo.c,
+	src/sudo.h:
+	Add wrapper functions for dlopen() et al so that we can support
+	statically compiling in the sudoers plugin but still allow other
+	plugins to be loaded. The new --enable-static-sudoers configure
+	option will cause the sudoers plugin to be compiled statically into
+	the sudo binary. This does not prevent other plugins from being
+	loaded as per sudo.conf.
+	[9425770e9d2b]
+
+2013-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	Handle non-unix groups correctly. Get rid of runasuser and
+	runasgroup types and use username and usergroup instead. The fact
+	that the user or group is inside a Runas_List doesn't affect its
+	underlying type.
+	[ea1789258c11]
+
+2013-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	Simplify Defaults list option object. The name and value strings are
+	superfluous.
+	[5852b0184669]
+
+	* compat/dlopen.c:
+	Back out unintended change.
+	[85156e49e96e]
+
+	* MANIFEST, aclocal.m4, configure, configure.ac,
+	m4/ax_func_getaddrinfo.m4:
+	Add dedicated test for getaddrinfo(). Tru64 UNIX contains two
+	versions of getaddrinfo and we must include netdb.h to get the
+	proper definition.
+	[9882e3e1e8e3]
+
+	* compat/dlopen.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c:
+	Define RTLD_GLOBAL for older systems without it. Bug #621
+	[ed38ac84f1da]
+
+2013-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/snprintf.c, include/missing.h:
+	Rename snprintf replacement rpl_snprintf since we may now replace
+	the libc version and #define rpl_snprintf snprintf in missing.h so
+	we get our version when needed. This is consistent with how we
+	replace glob and fnmatch.
+	[309aa17d0dfe]
+
+	* common/Makefile.in, common/regress/sudo_conf/conf_test.c,
+	common/regress/sudo_parseln/parseln_test.c,
+	common/regress/tailq/hltq_test.c, src/Makefile.in:
+	libcommon tests need locale_stub.lo to link.
+	[baae40f36de5]
+
+	* MANIFEST, aclocal.m4, compat/snprintf.c, config.h.in, configure,
+	configure.ac, m4/ax_func_snprintf.m4:
+	Add check for C99 compliant (v)snprintf function.
+	[79e02551543c]
+
+	* compat/sig2str.c, configure, configure.ac:
+	Include unistd.h in sig2str.c for Tru64 as it defines SIGRTMIN and
+	SIGRTMAX in terms of sysconf(), which is prototyped in unistd.h. Bug
+	#621; from Daniel Richard G.
+	[2a59ccb8c966]
+
+	* include/gettext.h, plugins/sudoers/locale.c, src/locale_stub.c:
+	Add definition of U_ for --disable-nsl Don't define warning_gettext
+	if --disable-nsl Bug #621; from Daniel Richard G.
+	[c0054eb89c2b]
+
+2013-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo_json.c:
+	When merging Defaults entries we need to check the type of the next
+	entry and not just assume it is the same as the previous one.
+	[e97d9b9cf0d5]
+
+	* plugins/sudoers/visudo_json.c:
+	runasgroups not runasgroup in the Cmnd_Spec.
+	[92ea5dc20e4d]
+
+	* plugins/sudoers/visudo_json.c:
+	Fix some syntax errors and change how lists are handled.
+	[027b8dea44b2]
+
+	* common/sudo_debug.c, config.h.in, configure, configure.ac,
+	include/fatal.h, include/sudo_debug.h:
+	Allow sudo to compile without variadic macro support in cpp.
+	Debugging support will be limited (no file info from warnings.) From
+	Daniel Richard G.; Bug #621
+	[51b8b868cd4b]
+
+	* Makefile.in, common/aix.c, common/fatal.c, common/gidlist.c,
+	common/sudo_conf.c, include/fatal.h, include/gettext.h,
+	include/missing.h, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/visudo.c, plugins/sudoers/visudo_json.c, src/exec.c,
+	src/exec_common.c, src/exec_pty.c, src/load_plugins.c,
+	src/locale_stub.c, src/net_ifs.c, src/parse_args.c, src/selinux.c,
+	src/sesh.c, src/signal.c, src/solaris.c, src/sudo.c,
+	src/sudo_edit.c, src/tgetpass.c, src/utmp.c:
+	Add warning_gettext() wrapper function that changes to the user
+	locale, then calls gettext(). Add U_ macro that calls
+	warning_gettext() instead of gettext(). Rename warning2()/error2()
+	back to warning_nodebug()/error_nodebug().
+	[f3bb207db201]
+
+2013-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/fileops.c, compat/getaddrinfo.c, compat/mktemp.c,
+	compat/utimes.c, configure.ac, plugins/sudoers/boottime.c,
+	plugins/sudoers/check.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/getdate.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/exec.c, src/exec_pty.c, src/preload.c,
+	src/sudo.c, src/sudo_edit.c, src/ttyname.c, src/utmp.c:
+	Fix some #if vs. #ifdef and remove an extraneous semicolon. Bug
+	#624; from Daniel Richard G.
+	[b212e4694018]
+
+	* include/sudo_debug.h, plugins/sudoers/defaults.c,
+	plugins/sudoers/ldap.c, src/exec_common.c:
+	Add debug_return_const_str and debug_return_const_ptr for returning
+	a const string or pointer. Using const for the normal versions
+	produces warnings with the Tru64 compiler.
+	[45018a149cb4]
+
+	* common/event_poll.c, compat/getaddrinfo.c, config.h.in, configure,
+	configure.ac, m4/sudo.m4:
+	Fixes for building under Tru64; from Daniel Richard G. Bug #624
+	[fc4a6cbae1ba]
+
+2013-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	log_{fatal,warning} now logs to the debug file itself.
+	log_{fatal,warning} now calls warningx2() after setting the locale
+	itself instead of using the wrapper macros. This removes the only
+	use of warningx(ngettext(...)).
+	[930129361e0a]
+
+2013-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.ac:
+	Add -Wpointer-arith to --enable-warnings
+	[2043ae306d1b]
+
+	* configure, configure.ac:
+	Fix more instances of #include directives where the '#' was not in
+	column 1. From Daniel Richard G. (bug #622)
+	[75f36f39dcab]
+
+	* MANIFEST, doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/visudo.c,
+	plugins/sudoers/visudo_json.c:
+	Add support to visudo to export sudoers in JSON format.
+	[1697b2b4bfd2]
+
+2013-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.h:
+	Remove unused digest field from struct cmndspec, the digest really
+	lives in struct sudo_command.
+	[e9a1e2e112d6]
+
+	* config.h.in, configure:
+	Regen with autoconf 2.69
+	[275f69f98f9e]
+
+	* MANIFEST, Makefile.in, config.h.in, configure.ac, configure.in,
+	doc/Makefile.in:
+	Rename configure.in -> configure.ac
+	[0aeafe425373]
+
+	* MANIFEST, aclocal.m4, autogen.sh, config.h.in, configure,
+	configure.in, ltmain.sh, m4/sudo.m4:
+	From Daniel Richard G. (bug #622) Add an autogen.sh script that
+	rebuilds the autoconf world. Move old aclocal.m4 contents to
+	m4/sudo.m4. New (generayed) aclocal.m4 contains the m4_include
+	directives. Some tests had #include directives where the '#' was not
+	in column 1. Updated obsolete macro usage via autoupdate.
+	[5fe8de5a56df]
+
+2013-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_exec.h:
+	Very old systems (pre XPG 4.2) may not support MSG_WAITALL. The
+	likelihood of receiving a partial message is quite low so this is
+	not a big deal.
+	[900a304f9548]
+
+	* configure, configure.in:
+	HP-UX may require _XOPEN_SOURCE_EXTENDED to be defined for
+	MSG_WAITALL to be visible.
+	[f08b1a00a30a]
+
+	* MANIFEST, plugins/sudoers/regress/visudo/test5.out.ok,
+	plugins/sudoers/regress/visudo/test5.sh:
+	Add regress test for bug #623
+	[8e83cfccaf14]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Cope with a comment on the last line of the file with no newline.
+	Bug #623
+	[f826243bc4e6]
+
+	* compat/getaddrinfo.c:
+	Include arpa/inet.h for HP-UX; from Daniel Richard G.
+	[d4d7a4303bae]
+
+	* doc/Makefile.in:
+	Add missing $(mansrcdir) to visudo.mdoc and visudo.man. From Daniel
+	Richard G.
+	[f664c8d2f961]
+
+2013-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/fatal.h:
+	In v{warning,fatal}x?() make a new copy of ap for the debug
+	functions. It is not legal to use ap twice without reinitializing
+	it. Noticed by Daniel Richard G.
+	[6ca8bc48ecb3]
+
+	* include/fatal.h:
+	Remove errant warning_restore_locale() call.
+	[4ef7aecefcbb]
+
+	* include/missing.h, plugins/sudoers/logging.c:
+	Move va_copy compat macro to missing.h
+	[c873e4cc4c8a]
+
+	* common/Makefile.in, compat/Makefile.in, mkdep.pl,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in, zlib/Makefile.in:
+	Uniquify header dependencies so we don't end up with duplicates when
+	a header file includes other headers. The header dependencies are
+	sorted so the generated order is stable.
+	[95747db2f07a]
+
+	* compat/Makefile.in, configure, configure.in, doc/CONTRIBUTORS,
+	mkdep.pl:
+	Add getaddrinfo.lo to LTLIBOBJS for systems that need it. From
+	Daniel Richard G.
+	[e94ee99a52a9]
+
+	* plugins/sudoers/testsudoers.c:
+	Fix pasto
+	[5262735e78e0]
+
+2013-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.mdoc.in:
+	Fix typo.
+	[6b11a4eec6b6]
+
+2013-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/gram.c:
+	regen
+	[995ca9f21862]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/toke.c:
+	Fix warnings from -Wold-style-definition
+	[a748c5c7b423]
+
+	* configure, configure.in:
+	Add -Wold-style-definition to --enable-warnings
+	[0484de0deb59]
+
+	* common/event_poll.c:
+	Extra debugging for ready fds.
+	[91fb85cdecbb]
+
+	* common/event_select.c:
+	When deleting an event, check ev->events to determine whether to
+	remove from readfds or writefds instead of blinding removing from
+	both. Also fix highfd adjustment.
+	[7384db65ca9c]
+
+2013-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/event_select.c:
+	Only check an fd that is >= 0. Timeout-only events may have a
+	negative fd.
+	[fa0e5cbc3cc2]
+
+2013-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/event.c:
+	Don't call sudo_ev_{add,del}_impl() for timeout-only events. This
+	makes it possible to pass sudo_ev_alloc() an fd of -1 for events
+	only use SUDO_EV_TIMEOUT.
+	[6838657a1a2f]
+
+2013-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/alloc.c, common/event_select.c, include/sudo_event.h:
+	Make a copy of readfds/writefds before calling select() instead of
+	calculating it each time. Keep track of high fd in the base.
+	[6048b78f2e94]
+
+2013-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Add Stephen Gelman
+	[0028c7a91a4f]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/gram.c:
+	Fix sign comparison warning.
+	[914cb36b9ed2]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix potential NULL dereference in non-interactive mode.
+	[9233428d3f32]
+
+2013-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c:
+	Use MSG_WAITALL when receiving struct command_status over the Unix
+	domain socket since we no longer use datagrams. This should avoid
+	the need to handle incomplete reads, though in theory it is still
+	possible.
+	[28a92888a908]
+
+	* plugins/sudoers/sudoreplay.c:
+	SIGKILL is not catchable
+	[79f82e4cb11d]
+
+	* common/event.c, include/sudo_event.h, plugins/sudoers/sudoreplay.c:
+	Add sudo_ev_get_timeleft() to get the amount of time left before an
+	event times out and use it in sudoreplay.
+	[d5b17ee30fa4]
+
+2013-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in,
+	plugins/sudoers/sudoreplay.c:
+	If the user presses <return> or <enter> in sudoreplay, skip to the
+	next event. Useful for skipping past long pauses in the data.
+	[43343f45c94d]
+
+	* common/event.c, common/event_poll.c, common/event_select.c:
+	Fix sudo_ev_scan_impl() return value in event_poll.c. Make sure we
+	clear active flag from unprocessed events if sudo_ev_loopbreak() or
+	sudo_ev_loopcontinue() are used. Remove bogus optimization when the
+	timeout is zero or negative; it could prevent an I/O event from
+	being triggered.
+	[a13603fb3134]
+
+	* plugins/sudoers/sudoreplay.c:
+	Move session replay into its own function.
+	[e323f7729595]
+
+	* common/event.c, common/event_poll.c, common/event_select.c,
+	include/sudo_event.h:
+	Get rid of cur and pending pointers in struct sudo_event_base. We
+	now pop the first event off the active queue instead of using a
+	foreach loop with deferred removal of the event. Add
+	SUDO_EVQ_INSERTED and SUDO_EVQ_TIMEOUTS flags to indicate that the
+	event on the event queue and timeouts queue respectively. No longer
+	need to compare the timeout to {0,0} or compare the event's base
+	pointer to NULL to determine queue membership.
+	[f2b2251fd523]
+
+	* common/event_poll.c:
+	rename sudo_ev_loop_impl() -> sudo_ev_scan_impl()
+	[614faaff04e3]
+
+	* MANIFEST, common/event.c, common/event_poll.c,
+	common/event_select.c, compat/Makefile.in, compat/nanosleep.c,
+	config.h.in, configure, configure.in, include/missing.h,
+	include/sudo_event.h, mkdep.pl, plugins/sudoers/Makefile.in,
+	plugins/sudoers/sudoreplay.c, src/exec.c, src/exec_pty.c:
+	Add support for libevent-style timed events. Adding a timed event is
+	currently O(n). The only consumer of timed events is sudoreplay
+	which only used a singled one so O(n) == O(1) for now. This also
+	allows us to remove the nanosleep compat function as we now use a
+	timeout event instead.
+	[db41c08e92dc]
+
+2013-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c:
+	Now that sudo_ev_base_free() removes all events before freeing we
+	don't need to do this by hand.
+	[b59d43658c5f]
+
+	* common/event.c, common/event_poll.c, common/event_select.c,
+	include/sudo_event.h:
+	Add a list of active events in the base that the back end sets when
+	it calls poll or select. This allows the front end to iterate over
+	the events instead of having that code in both back ends. It will
+	also simplify support for timeout events. Also make sure we can't
+	touch freed memory if a callback frees its own event.
+	[933b99b3f2bc]
+
+	* common/event.c:
+	Remove any existing events before freeing the event base.
+	[2543c6620cf1]
+
+2013-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	mon_handler() should be static
+	[b1a62ef65c96]
+
+2013-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	If user specified start_tls and ldaps, display a warning and ignore
+	start_tls. There's no reason to make this a fatal error.
+	[bf446dd1e740]
+
+	* src/exec_pty.c:
+	Add missing else when the connection from the monitor to the parent
+	sudo process is broken (due to the parent dying). Prevents a
+	spurious "unexpected reply type on backchannel" warning.
+	[5c44053cef08]
+
+	* src/exec_pty.c:
+	When flushing output we don't care whether we are the foreground
+	process or not, we still need to flush to /dev/tty. If we are in the
+	background, it is OK to get SIGTTOU.
+	[9716892d1fb5]
+
+	* plugins/sudoers/ldap.c:
+	Should not attempt start_tls on an ldaps connection.
+	[9d01d461c52c]
+
+2013-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/parser/check_fill.c:
+	Fix sign compare warning.
+	[6130fa8df758]
+
+	* doc/Makefile.in:
+	Eliminate warning about circular dependency from GNU make.
+	[7ed5df762089]
+
+	* plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	src/ttyname.c:
+	More sign compare fixes. On Solaris id_t is signed so use uid_t in
+	the set_perms.c ID macro instead.
+	[8166dcc50d0b]
+
+	* common/fileops.c, common/lbuf.c, common/secure_path.c,
+	common/sudo_debug.c, include/secure_path.h,
+	plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/interfaces.h,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/parse.h,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, src/load_plugins.c, src/sudo.c,
+	src/ttyname.c:
+	Quiet sign comparision warnings.
+	[e34f45dad10c]
+
+	* configure, configure.in:
+	Add -Wsign-compare to --enable-warnings
+	[d560e274a6ae]
+
+	* plugins/sudoers/ldap.c:
+	Ignore SIGPIPE when connecting to the LDAP server so we can get a
+	proper error message with the IBM LDAP libs. Also return
+	LDAP_SUCCESS instead of 0 from most sudo_ldap_* functions that
+	return an int.
+	[611a4ed9b8ee]
+
+	* plugins/sudoers/regress/parser/check_base64.c,
+	plugins/sudoers/regress/parser/check_digest.c:
+	Quiet compiler warnings.
+	[7d82dcca7126]
+
+2013-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	sudo_ldap_parse_uri() should join multiple URIs in the string list
+	together but it was clearing the host entry each time through the
+	loop. Fixes a bug with multiple URI entries in ldap.conf where only
+	the last one was being honored.
+	[83cee19b136d]
+
+	* src/exec_pty.c:
+	Avoid a double free introduced when plugging a memory leak in
+	safe_close(). A new ev_free_by_fd() function is used to remove and
+	free any events sharing the specified fd. This can be used after
+	safe_close() to make sure we don't try to select() on a closed fd.
+	[54f48a281147]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y, src/exec.c:
+	Quiet some llvm check false positives. The common idiom of using
+	TAILQ_FIRST, TAILQ_REMOVE and free in a loop to free each entry in a
+	TAILQ confuses llvm. Use TAILQ_FOREACH_SAFE instead (which is
+	probably faster anyway).
+	[bd1b8c11f416]
+
+	* plugins/sudoers/auth/pam.c:
+	If pam_open_session() fails don't call pam_getenvlist() with a NULL
+	pam handle.
+	[352e0329acba]
+
+	* plugins/sudoers/defaults.c:
+	Fix newly introduced use after frees found by llvm checker.
+	[a81080230f1f]
+
+	* common/event_select.c:
+	Remove an errant list_next() call that should have been removed in
+	the TAILQ conversion.
+	[3bbf8d117ce4]
+
+	* MANIFEST, common/Makefile.in, common/list.c,
+	common/regress/tailq/hltq_test.c, include/list.h, include/queue.h,
+	plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Add "headless" tail queues and use them in place of the semi-
+	circular lists in sudoers. Once the headless tail queue is built up
+	it is converted to a normal TAILQ. This removes the last consumer of
+	list.c and list.h so those can now be removed.
+	[5986ba762a24]
+
+	* common/Makefile.in, common/fatal.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/env.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/interfaces.h, plugins/sudoers/ldap.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/visudo.c, src/Makefile.in, src/exec_pty.c,
+	src/hooks.c:
+	Use SLIST and STAILQ macros instead of doing headless singly linked
+	lists manually. As a bonus we now use a tail queue for ldap.c and
+	sudoreplay.c.
+	[c31bc2d99082]
+
+	* MANIFEST, common/Makefile.in, common/event.c, common/event_poll.c,
+	common/event_select.c, common/list.c,
+	common/regress/sudo_conf/conf_test.c, common/sudo_conf.c,
+	doc/LICENSE, include/list.h, include/missing.h, include/queue.h,
+	include/sudo_conf.h, include/sudo_event.h,
+	plugins/sudoers/Makefile.in, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c,
+	src/Makefile.in, src/exec.c, src/exec_pty.c, src/load_plugins.c,
+	src/sudo.c, src/sudo.h, src/sudo_plugin_int.h:
+	Convert sudo to use BSD TAILQ macros instead of home ground tail
+	queue functions. This includes a private queue.h header derived from
+	FreeBSD. It is simpler to just use our own header rather than try to
+	deal with macros that may or may not be present in various queue.h
+	incarnations.
+	[450bce095d7c]
+
+2013-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix AND operator broken by changes to fix OR.
+	[a4d3485ee943]
+
+2013-10-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix OR operator.
+	[f5c1c90ee284]
+
+2013-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Fix memory leak of I/O buffer events in safe_close().
+	[08cd790cfbba]
+
+2013-10-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_debug.c:
+	Don't allow the debug subsystem to be initialized twice. Otherwise
+	we can exhuast our stack when built in static mode.
+	[fadacb6a4617]
+
+	* common/event_poll.c:
+	Make sure we do not try to usie index -1 in base->pfds[].
+	[beeb922aba3f]
+
+2013-10-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.in:
+	Bump version to 1.8.9
+	[758dbb464796]
+
+2013-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Convert the monitor process to the event subsystem.
+	[c4fe8e2ba53c]
+
+	* src/exec.c, src/exec_pty.c, src/sudo_exec.h:
+	Convert the main sudo event loop to use the event subsystem. Read
+	events for I/O buffers are added before the loop starts. Write
+	events are added on demand as the buffers are filled.
+	[72a603e997e0]
+
+	* INSTALL, MANIFEST, common/Makefile.in, common/event.c,
+	common/event_poll.c, common/event_select.c, common/list.c,
+	common/sudo_debug.c, config.h.in, configure, configure.in,
+	include/list.h, include/sudo_debug.h, include/sudo_event.h,
+	mkdep.pl, plugins/sudoers/Makefile.in, src/Makefile.in,
+	src/exec_pty.c:
+	Simple event subsystem that uses poll() or select(). Basically a
+	simplied subset of libevent2. Currently only fd events are supported
+	(since that's all we need). The poll() backend is used by default,
+	except on Mac OS X where poll() is broken for devices (including
+	/dev/tty and ptys).
+	[8773142b4117]
+
+	* src/exec.c, src/exec_pty.c:
+	Use SOCK_STREAM for socketpair, not SOCK_DGRAM so we get consistent
+	semantics when the other end closes. This should make the conversion
+	to poll() less problematic.
+	[b6a321722a91]
+
+2013-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_debug.c:
+	Fix removal of trailing newlines in a debug message.
+	[6f5ce5ac64e0]
+
+2013-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	When checking for unused Runas_Aliases, count those used as part of
+	a Runas Group too. Fixes a false positive warning.
+	[f13271a4a377]
+
+2013-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	Include stddef.h for rsize_t and errno_t on systems that support it
+	natively.
+	[bc547d47e9c6]
+
+	* MANIFEST:
+	Fix braino.
+	[67b79747312f]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/de.mo,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/fi.mo,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/pl.mo,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/zh_CN.mo:
+	Rebuild message catalog files.
+	[0a9befb0674e]
+
+	* src/po/da.mo, src/po/eo.mo, src/po/fi.mo, src/po/it.mo,
+	src/po/pl.mo, src/po/pt_BR.mo, src/po/ru.mo, src/po/uk.mo,
+	src/po/vi.mo, src/po/zh_CN.mo:
+	Rebuild message catalog files.
+	[25191089ddf2]
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/cs.mo, src/po/cs.po:
+	Czech translation for sudo from translationproject.org.
+	[8bc0ed069ddb]
+
+2013-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.po, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/eo.po, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/it.po, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.po, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.po, plugins/sudoers/po/zh_CN.po, src/po/da.po,
+	src/po/eo.po, src/po/fi.po, src/po/it.po, src/po/pl.po,
+	src/po/pt_BR.po, src/po/ru.po, src/po/uk.po, src/po/vi.po,
+	src/po/zh_CN.po:
+	Sync with translationproject.org
+	[c16f9bb4579e]
+
+	* NEWS, plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Change "next" back to 2. In the context of "next Friday" we really
+	do want the friday of the upcoming (not current) week.
+	Unfortunately, this means that things like "next week" and "next
+	year" will match one more than we really want. Fixing this will
+	require some fairly major changes to the grammar.
+	[7f863c930121]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	Mention that relative times don't always do what you might expect.
+	[710a9b0dd36f]
+
+2013-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Add diacritical for Zdenek Behan.
+	[78d333f88e6c]
+
+2013-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/regress/ttyname/check_ttyname.c:
+	Do not fail if ttyname() cannot determine the tty but sudo can.
+	Should fix problems with running "make check" under pbuilder.
+	[e6fc06a6c5cf]
+
+	* plugins/sudoers/Makefile.in:
+	Remove extraneous $$CWD; from Bdale Garbee
+	[4d040ddd7446]
+
+2013-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Make "this" and "next" qualifiers work a bit better. There is still
+	room for improvement as "this week" will use the current time
+	instead of the beginning of the week. That's a separate issue
+	though.
+	[e844c02f754a]
+
+2013-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/regress/sudo_conf/conf_test.c,
+	common/regress/sudo_parseln/parseln_test.c:
+	Mark main() public to silence a warning on HP-UX.
+	[ac0b869b9842]
+
+2013-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, plugins/sudoers/timestamp.c:
+	Be specific that we are talking about the Unix epoch; bug #615
+	[25887775371b]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/po/sudoers.pot,
+	src/po/sudo.pot, src/selinux.c:
+	Do not use "setup" as a verb; bug #614
+	[17c4750aac5f]
+
+	* plugins/sudoers/iolog.c:
+	Fix logic goof when checking open() status.
+	[76ece1445d71]
+
+	* plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po, src/po/nl.mo,
+	src/po/nl.po, src/po/ru.mo, src/po/ru.po:
+	Sync with translationproject.org
+	[21351498000f]
+
+	* NEWS, plugins/sudoers/sudoreplay.c:
+	Work around a bug in sudo 1.8.7 timing files where the indexes are
+	off by two.
+	[4aa0cd58af58]
+
+	* MANIFEST, plugins/sudoers/iolog.c, plugins/sudoers/iolog.h,
+	plugins/sudoers/sudoreplay.c:
+	Repair writing of the I/O log file indices broken in sudo 1.8.7.
+	[6a5f867884f5]
+
+2013-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Try to improve the PAGERS noexec example a bit.
+	[226f11118daa]
+
+2013-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Document comment character in ldap.conf Clarify what is and is not
+	supported in TLS_KEYPW Mention that gsk8capicmd can be used to
+	create a stash file
+	[fb8f06ab4458]
+
+2013-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	New bugs fixed for 1.8.8.
+	[c158df7cd9d2]
+
+	* plugins/sudoers/visudo.c:
+	Fix setting of quiet flag when -q / --quiet is specified. Do not
+	print "sudoers: parsed OK" in quiet mode.
+	[df55acd57ce6]
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po, src/po/fi.mo,
+	src/po/fi.po, src/po/it.mo, src/po/it.po:
+	Updated translations from translationproject.org
+	[e9e8abd23a28]
+
+	* plugins/sudoers/check.c:
+	Don't allow root to change its SELinux role without a password. Bug
+	#611
+	[f8b599acb29d]
+
+2013-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention new Mac OS X symbol interposition.
+	[98293b7c4e0f]
+
+	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po, src/po/eo.mo,
+	src/po/eo.po, src/po/fr.mo, src/po/fr.po:
+	Updated translations from translationproject.org
+	[865be7454354]
+
+	* config.h.in, configure, configure.in, src/sudo_noexec.c:
+	Add configure checks for the exec functions we will dummy out. This
+	is only really needed on Mac OS X when symbol interposition is being
+	performed but won't hurt elsewhere.
+	[49c20cf6bab0]
+
+2013-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, src/Makefile.in,
+	src/sudo_noexec.c:
+	Fix installation of sudo_noexec on Mac OS X. Use library symbol
+	interposition on Mac OS X 10.4 and higher so we don't need to set
+	DYLD_FORCE_FLAT_NAMESPACE=1.
+	[a82999dff8e6]
+
+2013-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Fix typo in tls_key example for Tivoli
+	[36599f424ac4]
+
+	* src/parse_args.c:
+	Don't escape '$' when running "sudo -i command". Bug #564
+	[17542d52f714]
+
+	* plugins/sudoers/iolog_path.c:
+	Fix typo in comment.
+	[d0510ed5eaba]
+
+	* plugins/sudoers/auth/pam.c:
+	Fix comment.
+	[4e89e0bfd6af]
+
+	* plugins/sudoers/timestr.c, plugins/sudoers/visudo.c:
+	Quiet some gcc -Wformat=2 false positives
+	[28a2014b9822]
+
+2013-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Remove now-obsolete arg to env_merge()
+	[ba015cf5d935]
+
+	* plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/pl.mo, src/po/pl.po, src/po/pt_BR.mo, src/po/pt_BR.po,
+	src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po:
+	Updated translations from translationproject.org
+	[72b6aeaba505]
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/fr.mo, src/po/fr.po:
+	French translation for sudo from translationproject.org.
+	[a72321771860]
+
+	* plugins/sudoers/logging.h:
+	Add __printflike to audit_failure.
+	[1686b3699d41]
+
+	* include/missing.h:
+	Use __nonnull__ attribute in __printflike.
+	[d123613a1fb6]
+
+2013-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
+	When merging the PAM environment, allow environment variables set in
+	PAM to override ones set by sudo as long as they do not match the
+	env_keep or env_check lists.
+	[f3c64967fed7]
+
+	* plugins/sudoers/auth/pam.c:
+	Call pam_getenvlist() after we've opened the session to get the
+	session-specific environment variables.
+	[b413fb9e1c77]
+
+	* plugins/sudoers/ldap.c:
+	Fix error display from ldap_ssl_client_init(). There are two error
+	codes. The return value can be decoded via ldap_err2string() but the
+	ssl reason code cannot (you have to look it up in a table online).
+	[0267125ce9f0]
+
+2013-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	option not flag
+	[08c31af7b818]
+
+	* compat/getopt_long.c, config.h.in, configure, configure.in:
+	Don't redefine opterr, optind, optopt, optarg in getopt_long.c. Add
+	a check for optreset which is a BSD extension and provide a
+	definition in getopt_long.c if it is not present.
+	[3393e8d83400]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[f38f65830118]
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c:
+	Use lower case for the long option arguments to match the manual.
+	This is inconsistent with GNU but it is better to match the sudo
+	documentation.
+	[8fac2d64f5d2]
+
+	* NEWS:
+	Sudo 1.8.8
+	[105c73752474]
+
+	* src/parse_args.c:
+	Use lower card for the long option arguments to match the manual.
+	This is inconsistent with GNU but it is better to match the sudo
+	documentation.
+	[af243dd39850]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Describe how remote command execution can be implemented.
+	[3eba7f93b7f6]
+
+	* doc/sudoers.ldap.cat:
+	Bump version.
+	[0ee7f02f3627]
+
+2013-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	Make it a fatal error if the plugin returns invalid or out of range
+	command info.
+	[8a7e56c7584a]
+
+	* plugins/sudoers/policy.c:
+	Use strtol() instead of atoi() and perform error checking of
+	parameters passed from the sudo front-end.
+	[05e05be3c6c4]
+
+	* plugins/sudoers/auth/pam.c:
+	It is not possible for auth to be NULL here.
+	[771500e776e9]
+
+	* plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Initialize user_runhost and user_srunhost to user_host and
+	user_shost in visudo and testsudoers.
+	[c47cca74e1fc]
+
+	* MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
+	common/error.c, common/fatal.c, common/gidlist.c, common/lbuf.c,
+	common/list.c, common/sudo_conf.c, common/sudo_debug.c,
+	compat/Makefile.in, compat/getopt_long.c, include/error.h,
+	include/fatal.h, plugins/sudoers/Makefile.in,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/hexchar.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	src/Makefile.in, src/locale_stub.c, src/net_ifs.c,
+	src/regress/ttyname/check_ttyname.c, src/sesh.c, src/sudo.h:
+	Rename error.h -> fatal.h now that there is no error() function.
+	[3a3827f10f04]
+
+	* common/sudo_debug.c, include/sudo_debug.h:
+	Add support to the debug subsystem for zero-length strings. This can
+	happen for things like warning(NULL) or fatal(NULL) where we just
+	want to log the errno string.
+	[3ed739c5cc91]
+
+	* include/error.h:
+	Add __printflike for vfatal, vfatalx, vwarning and vwarningx.
+	[57e65ed595d2]
+
+	* plugins/sudoers/audit.c:
+	Need to include gettext.h for BSM audit.
+	[a87fda2d0123]
+
+	* common/alloc.c, plugins/sudoers/env.c, src/exec_common.c,
+	src/parse_args.c, src/sudo.c:
+	Change some fatalx(NULL) that should be fatal(NULL).
+	[8b1efda9f578]
+
+	* include/error.h, include/missing.h:
+	Use __printf0like for warning() and fatal() since the fmt string may
+	be NULL.
+	[858a890f00ad]
+
+	* compat/pw_dup.c:
+	Quiet a gcc "used uninitialized in this function" false positive.
+	[98f47f89ce60]
+
+	* mkpkg:
+	Enable bsm audit on Mac OS X and Solaris >= 11.
+	[8607488f986c]
+
+	* plugins/sudoers/bsm_audit.c:
+	Fix compilation on Solaris 11.
+	[01aa46298ed7]
+
+	* plugins/sudoers/bsm_audit.c:
+	Add missing missing.h
+	[080de69a55a1]
+
+	* plugins/sudoers/sudoers.c:
+	Move the -C (user_closefrom) check until after set_cmnd() so that
+	closefrom_override can be used in a command-specific Defaults line.
+	Fixes bug #610 from Mengtao Sun.
+	[413565c6ff6b]
+
+2013-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	If not using a pty and the child process gets SIGTTOU or SIGTTIN and
+	sudo is the foreground process, make the child the foreground
+	process and continue it.
+	[5ff433443bc4]
+
+	* src/sudo.c:
+	If sudo is not setuid and was not invoked with a full path, look in
+	the user's PATH for the sudo binary to give a better error message.
+	[a740129a38f0]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.h:
+	Add limited support for "sudo -l -h other_host". Since group lookups
+	are done on the local host, rules that use group membership may be
+	incorrect if the group database is not synchronized between hosts.
+	[2c8b222a5f7f]
+
+	* src/parse_args.c:
+	Fix parsing of "-h host" when used in conjunction with the -l flag.
+	[62f3d726d52b]
+
+	* configure, configure.in, doc/fixman.sh, doc/fixmdoc.sh,
+	doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c, src/parse_args.c, src/sudo.c,
+	src/sudo_usage.h.in:
+	Simplify usage messages a bit and make --help output more closely
+	resemble GNU usage wrt long options. Sync usage and man page
+	SYNOPSYS sections and improve long options in the manual pages. Now
+	that we have long options we don't need to give the mnemonic for the
+	single-character options in the description.
+	[17b7e386955a]
+
+2013-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Fix setting of mailer argv[0] to basename of mailerpath. No need to
+	strdup() mailerpath as it is not modified.
+	[8843cdd958ee]
+
+	* plugins/sudoers/logging.c:
+	Make sure the mailer exists and is a regular file before trying to
+	exec it.
+	[b73d6214014f]
+
+	* plugins/sudoers/timestamp.c:
+	If tty_tickets are enabled but there is no tty, use a ticket file
+	based on the parent pid.
+	[75408bd61ced]
+
+	* common/sudo_conf.c, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, include/sudo_conf.h, src/parse_args.c:
+	Allow default plugin dir to be configured in sudo.conf.
+	[478883594cc5]
+
+	* doc/CONTRIBUTORS:
+	UTF8 for Ruusamae, Elan; from Tae Wong
+	[02e0c95b4fa6]
+
+2013-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/regress/sudo_conf/test5.in,
+	common/regress/sudo_conf/test5.out.ok,
+	common/regress/sudo_conf/test6.in,
+	common/regress/sudo_conf/test6.out.ok, common/sudo_conf.c,
+	doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	plugins/sudoers/policy.c, plugins/sudoers/pwutil_impl.c, src/sudo.c:
+	Don't allow max_groups to be set to zero, it just complicates things
+	needlessly. Fixes an assertion in visudo when there is a group-
+	based Defaults entry.
+	[d62a8ea32db9]
+
+2013-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/gidlist.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.h, src/sudo.c,
+	src/sudo.h:
+	Refactor code to parse list of gids into its own function that is
+	shared by the sudo front-end and the sudoers module. Make uid/gid
+	parse error be fatal, not just a warning.
+	[da3b2b06605c]
+
+	* common/atoid.c:
+	Add function comment block.
+	[09a324de716f]
+
+	* common/atoid.c:
+	Default text domain is now sudo, not sudoers.
+	[1acb1da6f304]
+
+	* common/Makefile.in:
+	Update dependency for atoid.lo
+	[5e367cd44288]
+
+	* common/atoid.c, plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/tsgetgrpw.c, src/sudo.c,
+	src/sudo.h:
+	Add endpointer and separator args to atoid()
+	[2077e4ed8578]
+
+2013-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/getgrouplist.c:
+	Use private version of atoid() to avoid a dependency on libcommon.a
+	(since that already depends on libreplace.a).
+	[7c12d63b0560]
+
+	* doc/CONTRIBUTORS:
+	More UTF8 in names; from Tae Wong
+	[512b263f51c8]
+
+	* compat/getgrouplist.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/tsgetgrpw.c, src/sudo.c, src/sudo.h:
+	Use atoid() in more places.
+	[06f4ae57c707]
+
+	* MANIFEST, common/Makefile.in, common/atoid.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/atoid.c:
+	Move atoid() to common so it can be used in src and compat too.
+	[095d730701e4]
+
+	* compat/closefrom.c:
+	Avoid a crash on Mac OS X 10.8 (at least) when we close
+	libdispatch's fds out from under it before executing the command.
+	Switch to just setting the close on exec flag instead.
+	[349ebf4987df]
+
+	* doc/CONTRIBUTORS:
+	Convert to last, first for easier sorting and use UTF8 (including a
+	BOM).
+	[8c30d221bd75]
+
+	* plugins/sudoers/atoid.c:
+	Add atoid() function to convert a string to an id_t (uid, gid or
+	pid). We have to be careful to choose() either strtol() or strtoul()
+	depending on whether the string appears to be signed or unsigned.
+	Always using strtoul() is unsafe on 64-bit platforms since the uid
+	might be represented as a negative number and (unsigned long)-1 on a
+	64-bit system is 0xffffffffffffffff not 0xffffffff. Fixes a problem
+	with uids larger than 0x7fffffff on 32-bit platforms.
+	[5d818e399157]
+
+	* MANIFEST, config.h.in, configure, configure.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h:
+	Add atoid() function to convert a string to an id_t (uid, gid or
+	pid). We have to be careful to choose() either strtol() or strtoul()
+	depending on whether the string appears to be signed or unsigned.
+	Always using strtoul() is unsafe on 64-bit platforms since the uid
+	might be represented as a negative number and (unsigned long)-1 on a
+	64-bit system is 0xffffffffffffffff not 0xffffffff. Fixes a problem
+	with uids larger than 0x7fffffff on 32-bit platforms.
+	[cd92246a710f]
+
+	* plugins/sudoers/sudoers.c:
+	Avoid "perm stack underflow" error when logging the unknown uid
+	error.
+	[871514c713b7]
+
+	* plugins/sudoers/set_perms.c:
+	In rewind_perms() there is nothing to do if perm_stack_depth == 0.
+	[98de335f47f0]
+
+2013-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in:
+	Add pam_setcred sudoers option to allow the user to control whether
+	pam_setcred() is called on the user's behalf.
+	[4260a8e43073]
+
+	* configure, configure.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c:
+	Add pam_service and pam_login_service sudoers settings to control
+	the service name passed to pam_start.
+	[5ea0e3588f3a]
+
+	* mkpkg:
+	Newer Xcode places the SDKs under Xcode.app
+	[4b54379d5c45]
+
+2013-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/zero_bytes.c,
+	compat/Makefile.in, compat/memset_s.c, config.h.in, configure,
+	configure.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, include/missing.h, include/sudo_plugin.h,
+	mkdep.pl, plugins/sudoers/Makefile.in,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/logging.c, plugins/sudoers/sha2.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	src/Makefile.in, src/conversation.c, src/sudo.h, src/sudo_edit.c,
+	src/tgetpass.c:
+	Implement memset_s() and use it instead of zero_bytes(). A new
+	constant, SUDO_CONV_REPL_MAX, is defined by the plugin API as the
+	max conversation reply length. This constant can be used as a max
+	value for memset_s() when clearing passwords filled in by the
+	conversation function.
+	[264ec146028e]
+
+2013-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/system_group/Makefile.in:
+	Do not try to install plugins when shared modules are disabled
+	(sudoers already had the check).
+	[3d582c042042]
+
+	* plugins/sudoers/Makefile.in:
+	Update dependencies to take into account compat/getopt.h and
+	compat/dlfcn.h.
+	[301fb31cd121]
+
+	* src/Makefile.in:
+	Update dependencies now that sudo_usage.h is always included from
+	the build dir.
+	[c1ff70ec9515]
+
+2013-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Add some warnings and debugging to sasl ccname handling.
+	[467f415861f0]
+
+	* plugins/sudoers/ldap.c:
+	Fix write loop invariant in sudo_krb5_copy_cc_file()
+	[6948cf6e9b9f]
+
+2013-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Strip off leading FILE: or WRFILE: prefix before trying to copy the
+	user's credential cache.
+	[56c16feab62f]
+
+2013-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	Instead of setting RLIMIT_NPROC to unlimited when sudo initializes,
+	just save RLIMIT_NPROC in exec_setup() before the final setuid() and
+	restore it immediately after. We don't need to modify RLIMIT_NPROC
+	for simple euid changes, just for changing the real (and saved) uids
+	before we exec. This also means we no longer need to worry about
+	_SC_CHILD_MAX returning -1. Bug #565
+	[1372f1909039]
+
+2013-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c, src/preload.c:
+	Now that the ldap code runs with the real and effective uid set to
+	0, it is not possible for the gssapi libs to find the user's krb5
+	credential cache file. To work around this, we make a temporary copy
+	of the user's credential cache specified by KRB5CCNAME (opened with
+	the user's effective uid) and point gssapi to it. To set the
+	credential cache file name, we dynamically look up
+	gss_krb5_ccache_name() and use it if available, otherwise fall back
+	to setting KRB5CCNAME.
+	[8b86c134541a]
+
+2013-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.man.in, doc/sudoreplay.cat, doc/sudoreplay.man.in,
+	doc/sudoreplay.mdoc.in, doc/visudo.cat, doc/visudo.man.in,
+	doc/visudo.mdoc.in, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c:
+	Long option support for visudo and sudoreplay.
+	[91427968be71]
+
+2013-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, src/Makefile.in,
+	src/parse_args.c, src/sudo.c, src/sudo_usage.h.in:
+	Add support for long options and fix inclusion of sudo_usage.h with
+	modern gcc broken in 8597:1fcb7ba13018.
+	[d13134819944]
+
+	* src/Makefile.in:
+	Add rule to rebuild sudo_usage.h when the .in file changes.
+	[59a32899e251]
+
+	* compat/Makefile.in, mkdep.pl, src/Makefile.in:
+	Add make rules for building getopt_long.c
+	[5f57593b3a8b]
+
+	* src/parse_args.c:
+	Make "-h hostname" work. Optional args in GNU getopt() only work
+	when there is no space between the option flag and the argument.
+	[b8258659cabb]
+
+2013-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, compat/getopt.h, compat/getopt_long.c, config.h.in,
+	configure, configure.in, doc/LICENSE, src/parse_args.c:
+	Use getopt_long() so we can make the -h flag take an optional
+	argument. Includes a version for those without it.
+	[d1dd66c8a86b]
+
+2013-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Document that the -h option can be used specify a host name for
+	future plugins.
+	[8470c74cf326]
+
+	* include/sudo_plugin.h, src/parse_args.c, src/sudo_usage.h.in:
+	Overload -h option to specify an optional hostname for remote
+	access. This is future-proofing; no policy plugins currently support
+	this.
+	[0e01d8c3c623]
+
+	* configure, configure.in:
+	Bump version to 1.8.8
+	[a1155bfaa28f]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Document the remote_host setting (-h host)
+	[c737db906f5d]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	fix "the the"
+	[0025464a3942]
+
+	* src/parse_args.c, src/sudo.c, src/sudo.h:
+	Do not error out if arg to -U option cannot be resolved, that is for
+	the plugin to decide. There is no need for runas_user and
+	runas_group to be global, make them local to parse_args() instead.
+	[fb02a62a72ba]
+
+	* MANIFEST, doc/CONTRIBUTORS, plugins/sudoers/po/pt_BR.mo,
+	plugins/sudoers/po/pt_BR.po, src/po/es.mo, src/po/es.po,
+	src/po/pt_BR.mo, src/po/pt_BR.po:
+	Sync with translationproject.org
+	[e8f4772d918a]
+
+2013-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Remove old bits about sudo setuid problems that should have been
+	cleaned up in changeset 7917:fa4894896d8a. Also update the mode of
+	sudo to 04755 to match current packaging.
+	[1e3904cdc2de]
+
+	* plugins/sudoers/auth/pam.c:
+	Go back to ignoring the return value of pam_setcred() since with
+	stacked PAM auth modules a failure from one module may override
+	PAM_SUCCESS from another. If the first module in the stack fails,
+	the others may be run (and succeed) but an error will be returned.
+	This can cause a spurious warning on systems with non-local users
+	(e.g. pam_ldap or pam_sss) where pam_unix is consulted first.
+	[b6022e26135a]
+
+	* src/net_ifs.c:
+	Remove unused variable.
+	[93dde7d82fde]
+
+	* NEWS:
+	Fix typo
+	[5ef79671c2c7]
+
+2013-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sssd.c:
+	Fix pasto; sudo_sss_extract_digest() not sudo_ldap_extract_digest().
+	From Dan Harnett.
+	[4a0af6f12765]
+
+2013-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Fix formatting typo; from Eric S. Raymond
+	[058b533ba460]
+
+2013-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Use -gxcoff on aix so dbx can be used to debug sudo.
+	[4950e019ed2d]
+
+2013-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Fix typo; bug 605
+	[41f7b46a6e51]
+
+2013-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/po/da.mo, src/po/eo.mo, src/po/es.mo, src/po/it.mo,
+	src/po/tr.mo:
+	Regen .mo files that were out of date.
+	[9e25a254f9db]
+
+2013-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.in:
+	On Solaris 11 and higher, tag binaries for ASLR if supported by the
+	linker.
+	[a2a6cafa3e60]
+
+	* mkpkg:
+	No longer need to disable PIE on Solaris.
+	[cf90019ae67e]
+
+2013-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, NEWS, configure, configure.in, doc/TROUBLESHOOTING:
+	Restrict default creation of PIE binaries (-fPIE and -pie) to Linux.
+	OpenBSD also supports PIE but enables it by default so we don't need
+	to do anything. This fixes problems on systems with a version of GNU
+	ld that accepts -pie but where the run-time linker doesn't actually
+	support PIE. Also verify that a trivial PIE binary works unless PIE
+	is explicitly enabled.
+	[3c5f125efeb1]
+
+2013-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure, configure.in:
+	Attempt to detect PIE failure on Solaris 10 with GNU as and GNU ld
+	where we can end up crashing due to malloc() failures. Sems OK when
+	Using Sun as and ld.
+	[b8ba412102ab]
+
+	* NEWS:
+	Update with final changes.
+	[78ff6d2ed47a]
+
+2013-05-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add -fPIE to PIE_LDFLAGS as per gcc manual.
+	[fe900cbb0780]
+
+2013-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/Makefile.in, compat/Makefile.in:
+	Add missing $(PIE_LDFLAGS) $(SSP_LDFLAGS) for test programs
+	[f84bc7482b78]
+
+	* MANIFEST, plugins/sudoers/alias.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/visudo/test4.out.ok,
+	plugins/sudoers/regress/visudo/test4.sh, plugins/sudoers/visudo.c:
+	Replace sequence number-based cycle detection in visudo with a
+	"used" flag in struct alias. The caller is required to call
+	alias_put() when it is done with the alias. Inspired by a patch from
+	Daniel Kopecek.
+	[0bdbac1b3b39]
+
+2013-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Eliminate a few relocations related to sudoers_io.
+	[18e9e2cc3367]
+
+	* plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po:
+	Sync with translationproject.org
+	[f38cc128a2ad]
+
+2013-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Clarify a comment.
+	[7a045ee06e95]
+
+2013-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Handle d_type == DT_UNKNOWN when resolving the device to a name and
+	sprinkle some more debugging.
+	[8774133747d9]
+
+2013-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Add message about disabling PIE if sudo gets SIGSEGV.
+	[c786af2a6751]
+
+	* plugins/sudoers/check.h, plugins/sudoers/timestamp.c:
+	No longer store the ctime of a devpts tty. The handling of ctime on
+	devpts in Linux has been changed to conform to POSIX. As a result we
+	can no longer assume that the ctime will stay unchanged throughout
+	the life of the session. We store the session ID in the time stamp
+	file so there is a much smaller chance of the time stamp file being
+	reused by a new login. While here, store the uid/gid in the
+	timestamp file too for good measure.
+	[7028b21f7a9b]
+
+	* configure, configure.in:
+	PIE is broken on FreeBSD/arm
+	[f232c60d6229]
+
+	* mkpkg:
+	Add explicit sendmail path for Linux since we may not have sendmail
+	installed in the build chroot.
+	[1ba2f84f4ff0]
+
+2013-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_debug.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/set_perms.c, src/sudo.c, src/tgetpass.c:
+	Quiet a few -Wunused-result compiler warnings.
+	[ef12afb61423]
+
+2013-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Mention what SHA-2 formats are supported.
+	[bf298d0fdf8a]
+
+	* doc/CONTRIBUTORS:
+	List code and translations separately.
+	[826547bc1295]
+
+2013-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
+	plugins/sudoers/po/tr.mo, plugins/sudoers/po/tr.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po:
+	Sync with translationproject.org
+	[9499a6f438b8]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[cce449e284a6]
+
+	* Makefile.in:
+	Fix c-format for fatal/fatalx
+	[4ad81d3faaeb]
+
+2013-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c, src/exec_pty.c, src/sudo.h:
+	Change some error/errorx -> fatal/fatalx in comments and xgettext
+	flags.
+	[9d9b64fa2ec9]
+
+	* NEWS:
+	There is now a Turkish translation of sudoers.
+	[701c5af6aa76]
+
+	* MANIFEST, plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/tr.mo, plugins/sudoers/po/tr.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po:
+	Updated translations from translationproject.org including new
+	Turkish translation.
+	[9cedbb50d90f]
+
+2013-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document that sudoers will re-use existing I/O log paths unless they
+	are mktemp-style with trailing X's.
+	[4f43bd13d9e7]
+
+	* NEWS, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/ldap.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.h:
+	Allow ldap_conf and ldap_secret to be specified as plugin arguments
+	in sudo.conf
+	[37c6c425b565]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	sudoers_debug is now deprecated in favor of the sudo debugging
+	framework.
+	[1195be1ec254]
+
+	* plugins/sudoers/ldap.c:
+	Replace DPRINTF with DPRINTF1 and DPRINTF2 macros that use
+	SUDO_DEBUG_DIAG and SUDO_DEBUG_INFO respectively for logging to the
+	debug file with the ldap subsystem. The sudoers_debug setting in
+	ldap.conf is still honored for now but will be removed in a future
+	release.
+	[cfa42b4b913e]
+
+2013-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers2ldif:
+	Add support for converting sudoers files with SHA-2 command digests.
+	[dc0d03485946]
+
+	* doc/fixman.sh, doc/fixmdoc.sh, mkdep.pl, mkpkg,
+	plugins/sudoers/sudoers2ldif:
+	Add copyright notice to scripts
+	[5e8bd4e6083f]
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test14.in,
+	plugins/sudoers/regress/sudoers/test14.out.ok,
+	plugins/sudoers/regress/sudoers/test14.toke.ok:
+	Add regress for SHA-2 digests.
+	[0b258c2a2a95]
+
+	* compat/getgrouplist.c:
+	Solaris maps negative gids to GID_NOBODY.
+	[57050e5c750f]
+
+	* plugins/sudoers/visudo.c:
+	Clear up an llvm checker warning which appears to be a false
+	positive and fix an old XXX while I'm at it.
+	[9ee13133e596]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	Correct last change date
+	[3bc1fa5b0f76]
+
+	* plugins/sudoers/po/sudoers.pot, plugins/sudoers/sudoreplay.c:
+	No need to translate this error message.
+	[4d9941970a26]
+
+	* doc/UPGRADE:
+	Mention .sl vs. .so extension handling on HP-UX Mention group
+	membership changes Fix typos
+	[40ac0efbdb2b]
+
+	* aclocal.m4, common/aix.c, common/alloc.c, common/atobool.c,
+	common/error.c, common/fmt_string.c, common/lbuf.c, common/list.c,
+	common/setgroups.c, common/term.c, common/ttysize.c,
+	compat/Makefile.in, compat/dlopen.c, compat/endian.h,
+	compat/getline.c, compat/getprogname.c, compat/isblank.c,
+	compat/memrchr.c, compat/mksiglist.c, compat/mktemp.c,
+	compat/nanosleep.c, compat/pw_dup.c, compat/sig2str.c,
+	compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c,
+	compat/strsignal.c, compat/utimes.c, doc/Makefile.in,
+	include/Makefile.in, include/alloc.h, include/fileops.h,
+	include/gettext.h, include/lbuf.h, include/missing.h,
+	include/sudo_plugin.h, pathnames.h.in,
+	plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample/sample_plugin.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/alias.c, plugins/sudoers/audit.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/interfaces.h,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/linux_audit.h, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.h, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.h, plugins/sudoers/redblack.c,
+	plugins/sudoers/redblack.h,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers_version.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.h, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/tsgetgrpw.c,
+	plugins/sudoers/visudo.c, plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.c, src/Makefile.in,
+	src/conversation.c, src/exec.c, src/exec_common.c, src/get_pty.c,
+	src/net_ifs.c, src/parse_args.c, src/preload.c, src/selinux.c,
+	src/sesh.c, src/signal.c, src/sudo_edit.c, src/sudo_exec.h,
+	src/sudo_noexec.c, src/sudo_plugin_int.h, src/tgetpass.c,
+	src/utmp.c:
+	Update copyright years.
+	[5c6d72661bad]
+
+	* plugins/sudoers/mon_systrace.h:
+	Systrace support was removed long ago.
+	[10a038a2da77]
+
+2013-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/regress/sudoers/test10.toke.out.ok,
+	plugins/sudoers/regress/sudoers/test9.toke.out.ok:
+	Remove some files that were mistakenly added.
+	[833502da26de]
+
+	* common/sudo_debug.c, config.h.in, configure, configure.in,
+	plugins/sudoers/boottime.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c:
+	Use time(&now) instead of now = time(NULL) when storing the current
+	time in a time_t (better compiler error checking). Better parsing
+	and printing of 64-bit time_t on 32-bit platforms.
+	[c227dc72c04e]
+
+2013-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Don't check the tty of the parent process. Now that we get the
+	controlling tty device number from the kernel there is no need. If
+	the process has really disassociated from the tty then reporting
+	"unknown" is appropriate.
+	[62fb66e565db]
+
+2013-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/error.c:
+	Use EXIT_FAILURE instead of 1 as the fatal() exit value.
+	[ed94c2c5e88a]
+
+	* src/sesh.c:
+	Change remaining errorx -> fatalx
+	[3f6d70e19303]
+
+2013-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Replace sudo_fakepwnamid() with sudo_mkpwent() and don't return an
+	error if the entry already exists in the cache.
+	[94d45970400a]
+
+	* plugins/sudoers/bsm_audit.c, plugins/sudoers/po/sudoers.pot:
+	Change "foo: failed" to just "foo" since we print the string form of
+	errno. Gets rids of some useless translations.
+	[476f37349dbc]
+
+2013-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Fix pasto in debug_decl
+	[08650186a239]
+
+	* plugins/sudoers/Makefile.in:
+	regen
+	[acf4c34fba2c]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/parse.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/timestamp.c:
+	Rename log_error() -> log_warning() for consistency with
+	warning()/fatal()
+	[474ed5a0e335]
+
+	* plugins/sudoers/auth/API:
+	The NO_EXIT flag was removed a while ago.
+	[e0a4be270226]
+
+	* common/aix.c, common/alloc.c, common/error.c, include/error.h,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/hexchar.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/visudo.c, src/exec.c, src/exec_common.c,
+	src/exec_pty.c, src/net_ifs.c, src/parse_args.c, src/selinux.c,
+	src/signal.c, src/sudo.c, src/sudo_edit.c, src/tgetpass.c,
+	src/utmp.c:
+	Rename error/errorx -> fatal/fatalx and remove the exit value as it
+	was always 1.
+	[ea66f58c4da5]
+
+	* NEWS:
+	digests are supported in sudoers ldap too
+	[77d6c25f7653]
+
+	* plugins/sudoers/regress/check_symbols/check_symbols.c:
+	Print test failures to stdout like the final count so the outputis
+	not displayed out of order.
+	[f541b78ecb93]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/eo.po, plugins/sudoers/po/hr.mo,
+	plugins/sudoers/po/hr.po, plugins/sudoers/po/it.po, src/po/da.mo,
+	src/po/da.po, src/po/eo.po, src/po/hr.mo, src/po/hr.po,
+	src/po/it.po, src/po/tr.po:
+	Sync with translationproject.org
+	[cbd70678b99f]
+
+	* Makefile.in:
+	Check for any uncommitted changes in dist target and add force-dist
+	target that omit check-dist.
+	[78dc3f41e37e]
+
+2013-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/regress/ttyname/check_ttyname.c:
+	Fix logic bug when checking tty via ttyname().
+	[279aee076194]
+
+	* compat/endian.h:
+	Fix check for _BIG_ENDIAN and _LITTLE_ENDIAN (Solaris) and
+	__BIG_ENDIAN__ and __LITTLE_ENDIAN__ (HP-UX)
+	[fe35e0b04502]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[0ddebccd3045]
+
+	* NEWS, doc/sample.sudoers, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document digest support.
+	[d794c7b9a7bc]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/parser/check_base64.c:
+	Simple bas64 decode unit test.
+	[344b0df0fe50]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/base64.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.h:
+	Move base64_decode into its own source file.
+	[30497e7f88bc]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Only check year against 2038 if time_t is 32-bit.
+	[9c1f2e3fc3ba]
+
+2013-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sssd.c:
+	Add digest support for sudoers in ldap and sss.
+	[314937b5e59e]
+
+	* INSTALL, configure, configure.in:
+	Error out in configure if the compiler doesn't support "long long".
+	[d3645c1d50d1]
+
+	* plugins/sudoers/match.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Include stdint.h or inttypes.h before sha2.h
+	[20ad1c20313d]
+
+	* common/lbuf.c:
+	Simplify lbuf append functions by moving the realloc code into
+	lbuf_expand(). We now expand as needed each time bytes need to be
+	written to the lbuf. Also handle a NULL pointer being passed in for
+	paranoia's sake.
+	[6283ee562ef4]
+
+	* plugins/sudoers/iolog.c:
+	Zero out struct iolog_details early to avoid a potential (though
+	unlikely) dereference of stack garbage if we hit a fatal error
+	before iolog_deserialize_info() is called.
+	[2eeca8be05fb]
+
+2013-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Update copyright year.
+	[b843c6a43238]
+
+	* plugins/sudoers/sudoers_version.h:
+	Bump SUDOERS_GRAMMAR_VERSION for new digest support.
+	[188556fb8156]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/match.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Sanity check digest in parser so visudo can catch errors. Add base64
+	support
+	[b8586d5cc7ed]
+
+	* MANIFEST, compat/endian.h, config.h.in, configure, configure.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/sha2.c:
+	For big endian architectures just use memcpy() instead of BE macros
+	in a loop.
+	[c71a0f4a8a8e]
+
+2013-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, config.h.in, configure, configure.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/hexchar.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.h,
+	plugins/sudoers/regress/parser/check_digest.c,
+	plugins/sudoers/regress/parser/check_digest.out.ok,
+	plugins/sudoers/sha2.h, plugins/sudoers/sssd.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c:
+	Initial implementation of checksum support in sudoers. Currently
+	supports SHA-224, SHA-256, SHA-384, SHA-512. TODO: checksum format
+	validation in parser and base64 support. checksum support for ldap
+	sudoers
+	[b8f196346eca]
+
+2013-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, plugins/sudoers/sha2.c, plugins/sudoers/sha2.h:
+	SHA-224, SHA-256, SHA-384 and SHA-512. Derived from the public
+	domain SHA-1 and SHA-2 implementations by Steve Reid and Wei Dai
+	respectively.
+	[7511d07c0a83]
+
+2013-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Add sudo 1.8.6p8
+	[0666fd0321ae]
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/po/sudoers.pot:
+	Add missing "not" in error message when mixing standalone and non-
+	standalone authentication methods.
+	[7eba4439db73]
+
+	* plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c:
+	Check for crypt() returning NULL. Traditionally, crypt() never
+	returned NULL but newer versions of eglibc have a crypt() that does.
+	Bug #598
+	[887b9df243df]
+
+	* plugins/sudoers/auth/pam.c:
+	Better PAM error messages
+	[fd7eda53cdd7]
+
+	* plugins/sudoers/auth/kerb5.c:
+	Better error messages
+	[98142874a2f4]
+
+	* plugins/sudoers/bsm_audit.c:
+	Use same error message for getauid() failure.
+	[07f0d88cb1df]
+
+	* plugins/sudoers/sssd.c:
+	Start warning with a lower case letter for consistency and to match
+	existing translated strings.
+	[b719ac52c9e3]
+
+2013-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Disable PIE on Solaris where it is not really supported.
+	[c36c84cdcc7a]
+
+	* src/ttyname.c:
+	AIX may have a 64-bit pr_ttydev that we need to convert to 32-bit
+	before we try to match it against st_rdev.
+	[5dab449fb962]
+
+	* src/ttyname.c:
+	Break out of the loop if sudo_ttyname_scan() returns non-NULL. Fixes
+	a problem finding the tty name when it is not in /dev/pts.
+	[6c205d087fa0]
+
+	* compat/snprintf.c:
+	Support %lld and %llu
+	[feabfa06c954]
+
+	* .hgignore, MANIFEST, src/Makefile.in,
+	src/regress/ttyname/check_ttyname.c:
+	Add ttyname test.
+	[e987038f8c07]
+
+2013-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/sl.mo, plugins/sudoers/po/sl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/de.mo, src/po/de.po, src/po/fi.mo, src/po/fi.po,
+	src/po/pl.mo, src/po/pl.po, src/po/ru.mo, src/po/ru.po,
+	src/po/sl.mo, src/po/sl.po, src/po/uk.mo, src/po/uk.po,
+	src/po/vi.mo, src/po/vi.po, src/po/zh_CN.mo, src/po/zh_CN.po:
+	Sync with translationproject.org
+	[4d7b73b22079]
+
+	* plugins/sudoers/timestamp.c:
+	Log timestampfile to debug file.
+	[e997281146c0]
+
+	* plugins/sudoers/auth/pam.c, plugins/sudoers/po/sudoers.pot:
+	Don't add the "Password: " string we look up in the PAM text domain
+	to the sudoers.pot file.
+	[771b52244abf]
+
+2013-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot:
+	Synce with regcomp() error message change.
+	[fc6d3dfb8eb8]
+
+	* plugins/sudoers/sudoreplay.c:
+	Be consistent with error message when regcomp() fails.
+	[de6c69ba04e4]
+
+2013-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/testsudoers/test5.out.ok,
+	plugins/sudoers/regress/testsudoers/test5.sh:
+	Use group -1 instead of 1 as the invalid group since the running
+	user might have group 1 as their default group.
+	[71404a9fa75d]
+
+	* plugins/sudoers/Makefile.in:
+	PWD may be a shell builtin, use CWD instead.
+	[c443105c5091]
+
+2013-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Split up check_user().
+	[ce7cc0767589]
+
+2013-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure.in:
+	Cosmetic fixes in the comments.
+	[640abee43c14]
+
+2013-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Use AC_LINK_IFELSE instead of AC_TRY_LINK Fix printing of status
+	message for visibility checks when the test fails.
+	[99665477ee55]
+
+	* config.h.in:
+	regen
+	[00c22606719a]
+
+	* configure, configure.in:
+	We no longer use mbr_check_membership() and setrlimit64() is AIX-
+	specific.
+	[43caf685a1f1]
+
+	* Makefile.in:
+	The first (all) target must be by itself or some makes will choose
+	the run the entire target list.
+	[16cf3def49f5]
+
+	* configure, configure.in:
+	Do exec_prefix expansion when enable_shared even if noexec is not
+	enabled.
+	[7ed28cb32d8d]
+
+	* compat/getgrouplist.c:
+	Use free() not efree() since we don't include alloc.h here
+	[1a008737be24]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[b939f941346f]
+
+	* plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.sh,
+	plugins/sudoers/regress/testsudoers/test5.sh:
+	Pass in expected gid to testsudoers in addition to the uid that
+	matches the test sudoers files.
+	[6a1710e8cac1]
+
+2013-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	Tru64 5.x does declare innetgr() and getdomainname().
+	[c75598e69c7e]
+
+	* plugins/sudoers/match.c:
+	Fix compilation when getdomainame() is not present.
+	[e831b017a962]
+
+	* config.h.in, configure.in, include/missing.h:
+	Move SET/CLR/ISSET from config.h.in to missing.h
+	[3a3dd29fd7f0]
+
+	* configure, configure.in:
+	Fix getgrouplist() check.
+	[12a2adf60e98]
+
+	* MANIFEST:
+	No more timestamp.h
+	[5677e26afc0f]
+
+	* plugins/sudoers/check.c:
+	Neded sys/time.h for struct timeval in struct sudo_tty_info.
+	[aceaadd8c400]
+
+	* plugins/sudoers/Makefile.in:
+	regen depends
+	[21675a8b67e5]
+
+	* NEWS:
+	Mention libibmldap on HP-UX
+	[75b4e4b22950]
+
+	* NEWS, plugins/sudoers/match.c:
+	Instead of checking the domain name explicitly for "(none)", just
+	check for illegal characters.
+	[ce35dda811db]
+
+	* plugins/sudoers/visudo.c:
+	Only warn once when we are unable to open the sudoers file.
+	[9e27e3aa5b10]
+
+	* plugins/sudoers/sudoers.c:
+	Fall back to opening /dev/tty to determine whether there is a tty if
+	the system doesn't have kernel support for determing the tty.
+	[2775bcf9a9b5]
+
+	* compat/getprogname.c:
+	Update guard to take __progname into account
+	[60eae3f20232]
+
+	* compat/snprintf.c:
+	Some older systems have inttypes.h but not stdint.h
+	[ed1ef160015f]
+
+	* compat/closefrom.c, compat/dlopen.c, compat/fnmatch.c,
+	compat/getaddrinfo.c, compat/getcwd.c, compat/getgrouplist.c,
+	compat/getline.c, compat/getprogname.c, compat/glob.c,
+	compat/isblank.c, compat/memrchr.c, compat/mktemp.c,
+	compat/nanosleep.c, compat/pw_dup.c, compat/sig2str.c,
+	compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c,
+	compat/strsignal.c, compat/utimes.c:
+	Add guards in compat source files. Not really needed since we only
+	include them in the Makefile if they are needed but should not hurt
+	either.
+	[8cbd3b4595b9]
+
+2013-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Don't include gram.h in gram.y, its contents are already included.
+	Move sudoerserror to the end of gram.y so COMMENT is declared when
+	we need to use it.
+	[7d72ebdd7222]
+
+2013-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure.in:
+	Remove some pre-ANSI cruft.
+	[6a95704b2116]
+
+	* plugins/sudoers/match.c:
+	Rename NAME_MATCH -> SUDOERS_NAME_MATCH and avoid pulling in glob.h
+	when it is set.
+	[da40c550ffed]
+
+	* NEWS, plugins/sudoers/iolog_path.c:
+	We still want to recognize %{seq} for the SUDOERS_NO_SEQ case but
+	just leave it as-is.
+	[9a22de140d28]
+
+2013-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Add missing semicolon in rule.
+	[817d3f1b2a21]
+
+	* plugins/sudoers/sudoers.c:
+	Now that we can determine the terminal even when file descriptors
+	are redirected we can check user_ttypath rather than opening
+	/dev/tty when enforcing requiretty.
+	[56a28bc09041]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Stash umask in struct sudo_user so we don't need to look it up
+	later.
+	[9f85749199dc]
+
+	* plugins/sudoers/sudoers.c:
+	Minor cosmetic change
+	[c373e106ed49]
+
+	* plugins/sudoers/regress/parser/check_addr.c:
+	No longer need to declare interfaces
+	[d7ff7e579557]
+
+	* plugins/sudoers/logging.c:
+	Fix compilation in SUDOERS_NO_SEQ case
+	[9a6db9247534]
+
+	* plugins/sudoers/regress/parser/check_addr.c:
+	No longer need to define sudo_printf
+	[578ad13c3546]
+
+	* plugins/sudoers/check.c, plugins/sudoers/check.h,
+	plugins/sudoers/timestamp.c:
+	Pass auth_pw to the timestamp functions.
+	[f603649177d6]
+
+	* plugins/sudoers/iolog_path.c:
+	Fix SUDOERS_NO_SEQ
+	[17881f9bcd68]
+
+	* plugins/sudoers/locale.c:
+	Don't need all of sudoers.h in here
+	[c518150c6483]
+
+	* plugins/sudoers/sudoers.c:
+	Don't need to include sudoers_version.h here.
+	[8abb31102119]
+
+2013-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	DEFAULT_LECTURE is no longer used.
+	[f565c00a68c1]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
+	Move sudo_conv into policy.c
+	[f699aee7136b]
+
+	* plugins/sudoers/pwutil.c:
+	cosmetic fixes
+	[930e60389ca8]
+
+	* plugins/sudoers/match.c:
+	RHEL (and perhaps other Linux distros) use the string "(none)"
+	instead of an empty string when there is no actual NIS-style domain
+	name. Bug #596
+	[11aec11489ac]
+
+	* plugins/sudoers/match.c:
+	Fix return values when NAME_MATCH is defined.
+	[ce030be9ccef]
+
+2013-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/pwutil.h:
+	Update copyright year.
+	[7e4b8d49addd]
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/pwutil.h,
+	plugins/sudoers/pwutil_impl.c, plugins/sudoers/sudoers.h:
+	Add sudo_set_grlist(), currently unused by the back end.
+	[b37ac1d0e8fc]
+
+	* plugins/sudoers/pwutil.c:
+	Remove unused macros, fix a debug_decl
+	[6136fb4a0d3b]
+
+	* include/missing.h:
+	Tru64 Unix doesn't prototype innetgr() or getdomainname().
+	[585ac1874dfe]
+
+	* include/missing.h:
+	Whitespace fixes
+	[0bb28cd91d97]
+
+	* common/error.c:
+	Don't need to include setjmp.h here, error.h already includes it.
+	[fd05ab00e186]
+
+2013-03-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/Makefile.in, plugins/sudoers/Makefile.in:
+	regen depends
+	[57991f5e16b4]
+
+	* plugins/sudoers/check.h:
+	Rename guard define.
+	[ccf4dba241d6]
+
+	* plugins/sudoers/check.c, plugins/sudoers/check.h,
+	plugins/sudoers/timestamp.c, plugins/sudoers/timestamp.h:
+	Move contents of timestamp.h into check.h.
+	[c139757a9283]
+
+	* plugins/sudoers/sudoers.h:
+	expand_prompt() is now in prompt.c sudo_printf extern is now in
+	error.h
+	[219bd74ca62b]
+
+	* plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.h,
+	plugins/sudoers/ins_2001.h, plugins/sudoers/ins_classic.h,
+	plugins/sudoers/ins_csops.h, plugins/sudoers/ins_goons.h,
+	plugins/sudoers/insults.h, plugins/sudoers/interfaces.h,
+	plugins/sudoers/linux_audit.h, plugins/sudoers/logging.h,
+	plugins/sudoers/parse.h, plugins/sudoers/pwutil.h,
+	plugins/sudoers/redblack.h, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudoers.h, plugins/sudoers/timestamp.h,
+	plugins/sudoers/toke.h:
+	Change multiple inclusion guards to be _SUDOERS_FOO_H
+	[faace6d55e78]
+
+2013-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po,
+	src/po/nl.mo, src/po/nl.po, src/po/tr.mo, src/po/tr.po:
+	New Dutch translation for sudo and sudoers New Turkish translation
+	for sudo From translationproject.org
+	[bc918b7b23a4]
+
+2013-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in:
+	Fix a typo in a comment and make sure we don't mistakenly include
+	_PATH_SUDO_ASKPASS and _PATH_SUDO_SESH in config.h.in
+	[694d12ac70ec]
+
+2013-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Don't build check_symbols if we are linking sudoers in statically.
+	[f6602723bab7]
+
+	* configure, configure.in:
+	Use $host_os not $host when we only care about the os name and
+	version.
+	[05e4f4fcba06]
+
+	* aclocal.m4, configure, configure.in:
+	Suppress duplicate -L and -I flags.
+	[228f2f581aed]
+
+	* common/Makefile.in, compat/regress/fnmatch/fnm_test.c:
+	Fix regress tests on non-OpenBSD platforms.
+	[9d91bc859c50]
+
+	* configure, configure.in:
+	If we find sasl/sasl.h there's no need to check for sasl.h too
+	[889efaa86012]
+
+	* aclocal.m4, configure, configure.in:
+	Add -R flags at the very end after configure link tests are done
+	since we can only count on libtool to accept -R, the compiler front
+	end may not. Also unify the libldap and libibmldap tests using
+	AC_SEARCH_LIBS and check for -lCsup on HP-UX which is needed by
+	libibmldap (but is not an explicit dependency).
+	[ab1451894351]
+
+2013-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Back out changes that broke detection of skey, opie and ldap
+	libraries.
+	[ffa82b8f8641]
+
+	* plugins/sudoers/regress/testsudoers/test1.sh,
+	plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.sh,
+	plugins/sudoers/regress/testsudoers/test4.sh,
+	plugins/sudoers/regress/testsudoers/test5.sh,
+	plugins/sudoers/regress/visudo/test1.sh,
+	plugins/sudoers/regress/visudo/test2.sh,
+	plugins/sudoers/regress/visudo/test3.sh:
+	Add explicit "exit 0" to prevent the check target from ending
+	prematurely.
+	[cca411b492bd]
+
+	* plugins/sudoers/Makefile.in:
+	Fix exit values in check target so we don't have to ignore errors.
+	[cbc429c409e9]
+
+	* plugins/sudoers/Makefile.in:
+	Fail a test if there is unexpected stderr output.
+	[4fc24d536bec]
+
+	* MANIFEST:
+	Fix path to sudo.conf manuals; remove non-existant test2.err.ok
+	[6b8bcd60dd85]
+
+	* src/load_plugins.c:
+	Fix compilation in dynamic mode.
+	[679856fa0774]
+
+	* configure, configure.in:
+	On HP-UX, libibmldap has a hidden dependency on libCsup
+	[22994709d77c]
+
+	* compat/dlopen.c:
+	Pass BIND_VERBOSE to shl_load()
+	[0060b9cfa9ab]
+
+	* configure, configure.in:
+	Only create static helper libs when --disable-shared is specified.
+	[1fcdb1a437e0]
+
+	* src/load_plugins.c:
+	Ubreak static build.
+	[4ac9f96be285]
+
+	* INSTALL, aclocal.m4, configure, configure.in:
+	Replace --with-rpath and --with-blibpath with --disable-rpath. Now
+	that we use libtool for linking we can just use the -R flag and have
+	libtool translate it to the proper linker flag.
+	[09798fad6888]
+
+2013-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Bump I/O buffer size 32K
+	[4ef793225309]
+
+2013-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in:
+	Document sesh Path setting.
+	[34b0b903b4f8]
+
+	* src/exec.c, src/exec_common.c:
+	Move exec_cmnd to exec.c to fix a compilation issue with sesh.c
+	[06aa1956f38d]
+
+	* common/sudo_conf.c, configure, configure.in, include/sudo_conf.h,
+	src/selinux.c:
+	Make sesh path configurable in sudo.conf
+	[91d331f273b7]
+
+	* configure, configure.in:
+	Use -fno-pie and -nopie if supported when --disable-pie is
+	specified.
+	[777138c04dcc]
+
+2013-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Document direct execution of the command if the policy plugin has no
+	close function.
+	[6a14145c6e80]
+
+2013-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Only delete creds if we actually established them. Print an error if
+	pam_setcred() fails and we actually authenticated.
+	[1e015314903b]
+
+	* common/Makefile.in, plugins/group_file/Makefile.in:
+	regen
+	[dd8cee2a5e1b]
+
+	* common/alloc.c, include/alloc.h:
+	Convert efree() to a macro that just casts to void * and does
+	free(). If the system free() can't handle free(NULL) this may crash
+	but C89 was a long time ago.
+	[efd0ff9270fb]
+
+	* configure, configure.in:
+	Define _REENTRANT for HP-UX when we add -lpthread to SUDO_LIBS.
+	Fixes a problem with errno sometimes not being set on error on HP-
+	UX.
+	[54b419d58320]
+
+	* common/sudo_debug.c:
+	Fix debug logging from the plugin when there is no error number.
+	This was broken in the big debugging reorg for 1.8.7.
+	[2ea7e145e928]
+
+2013-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, plugins/group_file/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/load_plugins.c:
+	Always install plugins with a .so extension regardless of what
+	extension the system uses for shared libraries. That way the
+	group_plugin sudoers setting can be shared between heterogenous
+	systems.
+	[a7e6ecff6fdf]
+
+	* plugins/sudoers/match.c:
+	Mac OS X has netgroup functions in netdb.h.
+	[243881a974aa]
+
+	* plugins/sudoers/parse.h:
+	Tags in struct cmndtag can be set to IMPLIED as well.
+	[cb6926988cc8]
+
+	* plugins/sudoers/parse.c:
+	Quiet a compiler warning.
+	[14e608c2001d]
+
+	* plugins/sudoers/testsudoers.c:
+	Quiet an llvm checker warning.
+	[2eeb9f3d08f3]
+
+	* plugins/sudoers/parse.c:
+	Quiet gcc -Wuninitialized false positive
+	[643ad987503d]
+
+2013-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in:
+	Document group_file and system_group plugins.
+	[b56511e79230]
+
+	* NEWS:
+	Sudo 1.8.7
+	[e95183b8fa27]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Try to clarify that sudoedit in sudoers should not include a leading
+	pathname.
+	[7b2beac92a9c]
+
+	* plugins/sudoers/pwutil_impl.c:
+	Make sure groupname_len is at least 32 just to be on the safe side.
+	It is better to allocate a little extra and not need it than to have
+	to reallocate and start over.
+	[6d3e1ba47de9]
+
+	* include/alloc.h, include/missing.h:
+	Add __malloc_like macro to apply __malloc__ attribute to emalloc,
+	ecalloc and estrdup. It cannot be applied to realloc since that may
+	return the same pointer.
+	[8d70cb81d1f1]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix potential double free in an error path.
+	[657573feb6a4]
+
+	* src/exec_pty.c:
+	When running the command in a pty, defer the call to exec_setup()
+	until just before we exec the command. This is consistent with the
+	non-pty path. As a side effect, the monitor process runs as root and
+	not the runas user.
+	[e2a7f8c7ee4c]
+
+2013-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/closefrom.c:
+	Update copyright year.
+	[9b652af4dfc0]
+
+2013-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/closefrom.c:
+	Use pst_highestfd from pstat_getproc() on HP-UX.
+	[09f3fea46a3d]
+
+2013-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, common/Makefile.in, doc/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Clean up generated test files and other minor housekeeping.
+	[f5f4fdd908e1]
+
+	* plugins/sudoers/iolog.c:
+	Add back gettimeofday() call inadvertantly removed in e1abb9810a83
+	[675cce8401ae]
+
+	* config.h.in, configure, configure.in, src/ttyname.c:
+	Use pstat() on HP-UX to determine the tty device.
+	[2884af22a9df]
+
+	* plugins/sudoers/auth/pam.c:
+	Fix PAM compilation: def_pam_session, not just pam_session.
+	[5417d7acc6ea]
+
+	* doc/fixmdoc.sh:
+	Don't remove the -S option description when trimming out selinux.
+	Bug #592
+	[8a94f2cfa0a0]
+
+2013-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for Sudo 1.8.6p7
+	[0858a73e9c40]
+
+2013-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Document when sudo may exec the command directly instead of forking.
+	[da41951edc28]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Document that close and version be NULL for plugin API >= 1.3 and
+	that sudo may execute the command directly if there is no close, or
+	pty or timeout needed.
+	[e5f929ddeaf8]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Fix debug_decl for sudo_auth_begin_session and
+	sudo_auth_end_session.
+	[58243392c0df]
+
+	* configure, configure.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c:
+	Add pam_session sudoers option.
+	[d994465db9f1]
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.h:
+	Dummy out close function if there is no end_session for the auth
+	method and the front-end can handle a NULL close function. Avoids
+	the extra sudo process when we don't actually need it.
+	[74886d5b0fb6]
+
+2013-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, aclocal.m4:
+	Add m4/ to paths m4_include parameters so we don't need to use
+	autoconf's -I flag.
+	[4fd86e7a84f3]
+
+	* src/exec.c, src/exec_common.c, src/exec_pty.c, src/sudo_exec.h,
+	src/sudo_plugin_int.h:
+	If the policy plugin does not provide a close function, there is no
+	command timeout and no pty is required, skip the event loop and just
+	exec the command directly.
+	[ad532f107170]
+
+	* src/sudo.c:
+	Do not crash if the plugin close and version functions are not
+	defined. If there is no policy close function, simply print a
+	warning that the command was not found.
+	[c789a9dd54e8]
+
+2013-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c:
+	Fix typos in selinux/solaris privs specific code.
+	[9af3999361b4]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, src/parse_args.c:
+	Pass the default plugin directory to the plugin via the settings
+	list. Could be used by a stacking plugin.
+	[688e771fc145]
+
+	* plugins/sudoers/timestamp.c:
+	Completely ignore time stamp file if it is set to the epoch,
+	regardless of what gettimeofday() returns.
+	[df58842af660]
+
+	* doc/CONTRIBUTORS:
+	Add Nikolai Kondrashov
+	[df59791438f9]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
+	Use userpw_matches() for username matching so #uid works for
+	sudoRunAsUser.
+	[a124062334df]
+
+	* plugins/sudoers/sssd.c:
+	Avoid calling realloc3() with a zero size parameter when all
+	retrieved sssd rules fail. Otherwise we'll get a run-time error due
+	to malloc(0) checking.
+	[84dfcb73ebd7]
+
+	* plugins/sudoers/sssd.c:
+	Do not send error mail if a user is not found in SSSD. Local users
+	can run sudo too. From Nikolai Kondrashov
+	[3d2ae99ee468]
+
+2013-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/regress/sudo_conf/test4.in,
+	common/regress/sudo_conf/test4.out.ok:
+	Test setting disable_coredump to illegal value.
+	[3c71c6c49027]
+
+	* common/sudo_conf.c:
+	Fix atobool() usage.
+	[d40c9f4d06b0]
+
+	* common/regress/sudo_conf/conf_test.c:
+	Remove unused variable.
+	[328b524b365b]
+
+	* plugins/sudoers/sudoers.c:
+	Make "sudo -l non_existent_command" warn that non_existent_command
+	doesn't exist, not the "list" pseudo-command.
+	[9dc0388fc4f3]
+
+	* plugins/sudoers/parse.c:
+	Make sudoers file long list output better match the format used by
+	ldap sudoers. Tags are now converted to options and there is a
+	single command per line.
+	[6e6dc3f20d84]
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Use the correct the sudoers policy symbol names and undo an editor
+	goof committed when adding max_groups to sudo.conf.
+	[2a6f7ddf5cc3]
+
+	* plugins/sudoers/parse.c, plugins/sudoers/sudo_nss.c:
+	For "sudo -l" start a new line if the runas list changes to make the
+	output easier to read.
+	[7dc3d724c924]
+
+2013-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c, plugins/sudoers/sudo_nss.c:
+	For "sudo -l" and "sudo -ll" only print the runas info for
+	subsequent commands in a list if the runas info has changed. If we
+	have new runas info, print out the tags again so as to be less
+	confusing to the user. For "sudo -ll" set the line continuation
+	indent to 8.
+	[b5ec02fe7fc1]
+
+2013-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, Makefile.in, configure, configure.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/group_file/Makefile.in, plugins/group_file/getgrent.c,
+	plugins/group_file/group_file.c, plugins/group_file/group_file.exp,
+	plugins/group_file/plugin_test.c, plugins/sample_group/Makefile.in,
+	plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c,
+	plugins/sample_group/sample_group.c,
+	plugins/sample_group/sample_group.exp:
+	Rename sample_group plugin to group_file. Install group_file and
+	system_group plugins by default.
+	[951b3e446fae]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add maxseq sudoers option to limit the max number of I/O log files.
+	[e1abb9810a83]
+
+2013-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Log lines and columns in the iolog file.
+	[03adb6230e05]
+
+2013-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/regress/sudo_conf/conf_test.c,
+	common/regress/sudo_conf/test1.in,
+	common/regress/sudo_conf/test1.out.ok,
+	common/regress/sudo_conf/test2.in,
+	common/regress/sudo_conf/test2.out.ok,
+	common/regress/sudo_conf/test3.in,
+	common/regress/sudo_conf/test3.out.ok, common/sudo_conf.c,
+	include/sudo_conf.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c, src/sesh.c,
+	src/sudo.c:
+	Add simple regress tests for sudo.conf parsing.
+	[3c36b61bf61c]
+
+	* src/sudo.c:
+	Always display the I/O plugin version as long as its open functions
+	doesn't return an error. Previously it was only displayed if the
+	plugin open returned 1.
+	[4b0277db3f8c]
+
+	* plugins/sudoers/pwutil_impl.c:
+	Use sysconf(_SC_LOGIN_NAME_MAX) to find max username length instead
+	of poking around in struct utmpx.
+	[2c0cc5c42958]
+
+	* plugins/sudoers/pwutil_impl.c, src/parse_args.c, src/sudo.c:
+	#include "sudo_usage.h" not <sudo_usage.h> so we get the one in the
+	build directory and not the src dir when using a separate build
+	directory.
+	[1fcb7ba13018]
+
+2013-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/fileops.c:
+	If a line was longer that 0x80000000 the bit hack to round to the
+	next power of two would roll over to zero.
+	[f4f729cf6f0f]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/sudoers.h, src/sudo.c:
+	Use max_groups in front-end and plugin.
+	[bf1e74166831]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, src/parse_args.c:
+	Pass max_groups to plugin in settings list.
+	[d7d76e8651f4]
+
+	* common/sudo_conf.c, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, include/sudo_conf.h:
+	Add max_groups setting to sudo.conf (currently unused) and remove
+	unused return value from setters.
+	[f6494f71e1f0]
+
+2013-02-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Reorganize configure options
+	[23475de8039f]
+
+2013-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Add Sudo 1.8.6p7
+	[5192fc511cbe]
+
+2013-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL.configure:
+	Sync with autoconf 2.68
+	[985e5c8efa4e]
+
+	* INSTALL, README:
+	Remove obsolete OS notes and move build requirements to INSTALL.
+	[bf0dd53ca164]
+
+2013-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Sort elements of the settings, user_info and command_info lists.
+	[663062ada5b7]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Remove trailing white space
+	[027916a6c8e7]
+
+	* plugins/sudoers/policy.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c, plugins/sudoers/timestamp.h:
+	Store the session ID in the tty ticket file too. A tty may only be
+	in one session at a time so if the session ID doesn't match we
+	ignore the ticket.
+	[4eb2cb8df48b]
+
+2013-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, src/sudo.c:
+	Move tzset() call from sudoers plugin to sudo front end.
+	[3c058dad8772]
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Mention line continuation
+	[399873f8c805]
+
+	* MANIFEST, common/Makefile.in, common/fileops.c,
+	common/regress/sudo_parseln/parseln_test.c,
+	common/regress/sudo_parseln/test1.in,
+	common/regress/sudo_parseln/test1.out.ok,
+	common/regress/sudo_parseln/test2.in,
+	common/regress/sudo_parseln/test2.out.ok,
+	common/regress/sudo_parseln/test3.in,
+	common/regress/sudo_parseln/test3.out.ok,
+	common/regress/sudo_parseln/test4.in,
+	common/regress/sudo_parseln/test4.out.ok,
+	common/regress/sudo_parseln/test5.in,
+	common/regress/sudo_parseln/test5.out.ok,
+	common/regress/sudo_parseln/test6.in,
+	common/regress/sudo_parseln/test6.out.ok, common/sudo_conf.c,
+	include/fileops.h, plugins/sudoers/env.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/sudo_nss.c:
+	Add line continuation support to sudo_parseln() and make it use
+	getline() instead of fgets() internally.
+	[d02bf3973fc5]
+
+2013-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sample/sample_plugin.c:
+	Fix memory leak in error path; found by llvm checker
+	[d090c26a5b00]
+
+	* plugins/sudoers/sudoreplay.c:
+	Remove useless store detected by llvm checker.
+	[12a4db91651a]
+
+	* configure, configure.in, doc/UPGRADE, mkpkg, src/Makefile.in,
+	src/load_plugins.c, sudo.pp:
+	Sudo now stores its libexec files in a "sudo" subdirectory instead
+	of in libexec itself. For backwards compatibility, if the plugin is
+	not found in the default plugin directory, sudo will check the
+	parent directory default directory ends in "/sudo".
+	[5de67de76489]
+
+	* plugins/sample/sample_plugin.c, plugins/sample_group/sample_group.c,
+	plugins/system_group/system_group.c:
+	Add missing __dso_public to plugin structs so they are exported.
+	[dde703577621]
+
+	* doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
+	Mention that sudoers has its own plugins too.
+	[0a6c6203b512]
+
+2013-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
+	Correct last change date.
+	[45894291d792]
+
+	* doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in:
+	Remove duplicated sudo.conf info in the sudo, sudoers and
+	sudo_plugin manuals and cross-reference the new sudo.conf manual.
+	[b808ba29cf3a]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
+	Fix typos
+	[0e70964150c6]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in:
+	Fix some typos.
+	[94ae045cfbc6]
+
+	* MANIFEST, doc/Makefile.in, doc/sudo.conf.cat, doc/sudo.conf.man.in,
+	doc/sudo.conf.mdoc.in:
+	Add standalone sudo.conf manual page.
+	[d64d949b700c]
+
+	* doc/sample.sudo.conf:
+	add group_source example
+	[118c1ba1c014]
+
+	* configure, configure.in, doc/sample.sudo.conf, doc/sudo.man.in,
+	doc/sudo.mdoc.in, doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Use PLUGINDIR in the manuals and fix a typo in the sample sudo.conf.
+	[f5bd6006dc1c]
+
+	* plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po, src/po/it.mo,
+	src/po/it.po:
+	Sync with translationproject.org
+	[a6f2b9aac371]
+
+2013-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, src/po/fi.mo,
+	src/po/fi.po, src/po/gl.mo, src/po/gl.po, src/po/vi.mo,
+	src/po/vi.po:
+	Sync with translationproject.org
+	[ba546666969d]
+
+2013-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.po, plugins/sudoers/po/eo.mo,
+	plugins/sudoers/po/eo.po, src/po/da.po, src/po/eo.mo, src/po/eo.po,
+	src/po/es.po, src/po/gl.po:
+	Sync with translationproject.org
+	[cdc454e34c03]
+
+2013-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Clarify ttyname changes.
+	[cbf2f80fe582]
+
+	* NEWS:
+	Add 1.8.6p6
+	[3aa591e98b3b]
+
+	* src/ttyname.c:
+	Remove ttyname() fall back code on systems where we can query the
+	kernel for the tty device via /proc or sysctl(). If there is no
+	controlling tty, it is better to just treat the tty as unknown
+	rather than to blindly use what is hooked up to std{in,out,err}.
+	[b2bd3005d2e4]
+
+2013-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_conf.c, include/sudo_conf.h, src/sudo.c:
+	Add group_source setting in sudo.conf to allow the admin to specify
+	how a user's groups are looked up. Legal values are static (just the
+	kernel list from getgroups), dynamic (whatever the group database
+	includes) and adaptive (only use group db if kernel group list is
+	full).
+	[87a5b02e22ad]
+
+	* plugins/sudoers/policy.c:
+	Pass back exec_background to front end if it is enabled in sudoers.
+	[8230e1cd0bbd]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Mention that exec_background is for 1.8.7 and higher only.
+	[fdf0d5a3e182]
+
+2013-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	Add missing test files.
+	[1165389aa5e6]
+
+	* plugins/sudoers/regress/visudo/test3.err.ok,
+	plugins/sudoers/regress/visudo/test3.out.ok,
+	plugins/sudoers/regress/visudo/test3.sh:
+	Add regress test for bug 361
+	[54c7fb61b82d]
+
+	* plugins/sudoers/iolog.c:
+	Add __dso_public to extern declaration of declaration to match
+	actual definition.
+	[4695ded501e6]
+
+	* NEWS:
+	Add 1.8.6p5
+	[b07b28c5c4d7]
+
+2013-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/regress/visudo/test2.err.ok,
+	plugins/sudoers/regress/visudo/test2.out.ok,
+	plugins/sudoers/regress/visudo/test2.sh:
+	Add test for visudo cycle check core dump; test case from Daniel
+	Kopecek
+	[41074541147a]
+
+	* plugins/sudoers/visudo.c:
+	Fix potential stack overflow due to infinite recursion in alias
+	cycle detection. From Daniel Kopecek.
+	[d7e018a87434]
+
+	* common/sudo_conf.c, include/sudo_conf.h, src/load_plugins.c:
+	Ignore duplicate entries in sudo.conf and report the line number
+	when there is an error. Warn, don't abort if there is more than one
+	policy plugin.
+	[dfcb5a698f0a]
+
+	* plugins/sudoers/tsgetgrpw.c:
+	Use strtoul() not atoi().
+	[58a52cf9b6b8]
+
+2013-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/Makefile.in:
+	regen depends for to add compat/nss_dbdefs.h for getgrouplist.lo
+	[9b44e9d26d16]
+
+	* compat/nss_dbdefs.h:
+	Fix typo that breaks the build on HP-UX.
+	[b9ab6ba23485]
+
+	* MANIFEST, compat/getgrouplist.c, compat/nss_dbdefs.h, config.h.in,
+	configure, configure.in:
+	Use nss_search() to implement getgrouplist() where available. Tested
+	on Solaris and HP-UX. We need to include a compatibility header for
+	HP-UX which uses the Solaris nsswitch implementation but doesn't
+	ship nss_dbdefs.h.
+	[d29dbc4dc06d]
+
+2013-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c, src/signal.c, src/sudo.h:
+	Remove extra flag to sudo_sigaction(). We want to trap the signal
+	regardless of whether or not it is ignored by the underlying command
+	since there's no way to know what signal handlers the command will
+	install. Now we just use sudo_sigaction() to set a flag in
+	saved_signals[] to indicate whether a signal needs to be restored
+	before exec.
+	[c042d52c7192]
+
+2013-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/getgrouplist.c, config.h.in, configure, configure.in:
+	Use _getgroupsbymember() on Solaris to get the groups list. Fixes
+	performance problems with the getgroupslist() compat on Solaris
+	systems with network-based group databases.
+	[287d3ae2ce8d]
+
+2013-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Document signal handler behavior in plugin API 1.3
+	[20dc9d1c105f]
+
+	* MANIFEST, include/sudo_plugin.h, src/Makefile.in, src/exec.c,
+	src/exec_pty.c, src/signal.c, src/sudo.c, src/sudo.h:
+	Move signal code into its own source file and add sudo_sigaction()
+	wrapper that has an extra flag to check the saved_signals list to
+	only install the handler if the signal is not already ignored. Bump
+	plugin API version for the new front-end signal behavior.
+	[5d2f27a1b404]
+
+	* plugins/sudoers/sudoers.c, src/exec.c, src/sudo.c, src/sudo.h,
+	src/sudo_exec.h:
+	Catch SIGINT, SIGQUIT and SIGTSTP in the front end before we execute
+	the command. If we get SIGINT or SIGQUIT, call the plugin close()
+	functions as if the command was interrupted. If we get SIGTSTP,
+	uninstall the handler and deliver SIGTSTP to ourselves.
+	[332baf3a81b7]
+
+	* src/exec.c, src/exec_pty.c:
+	Rename handle_signals() to dispatch_signals(). Block other signals
+	in handler() so we don't have to worry about the write() being
+	interrupted.
+	[666e95c9a0f1]
+
+2013-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/tgetpass.c:
+	Rename signal handler to avoid name clash with one in exec.c
+	[8913101a29b6]
+
+2013-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	Add missing call to save_signals().
+	[47d075d7326b]
+
+2013-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	Fill in the comment block at the top of the .pot files and preserve
+	it when regenerating them.
+	[6449497b76db]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/sudoers.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
+	Add exec_background option in plugin command info and a sudoers
+	option to match. When set, commands are started in the background
+	and automatically foregrounded as needed. There are issues with some
+	ill-mannered programs (like Linux su) so this is not the default.
+	[c0b32b0938f2]
+
+	* common/Makefile.in:
+	regen
+	[2b2b220e7aea]
+
+	* src/Makefile.in:
+	Add SESH_OBJS variable for sesh object files.
+	[d3e04ae8fd1f]
+
+	* configure.in, doc/LICENSE, plugins/sudoers/redblack.c:
+	Update copyright year.
+	[61a0f0cedb13]
+
+	* src/exec_pty.c:
+	Always resume the command in the foreground if sudo itself is the
+	foreground process. This helps work around poorly behaved programs
+	that catch SIGTTOU/SIGTTIN but suspend themselves with SIGSTOP. At
+	worst, sudo will go into the background but upon resume the command
+	will be runnable. Otherwise, we can get into a situation where the
+	command will immediately suspend itself.
+	[c368ac3eb2e4]
+
+	* configure, configure.in:
+	Use -fstack-protector-all in preference to -fstack-protector where
+	supported.
+	[f930c95ceb51]
+
+2013-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Only test for -fstack-protector and -fvisibility=hidden on GNU
+	compatible compilers.
+	[796f4696d863]
+
+2013-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Add Sudo 1.8.6p4
+	[8a928de8e717]
+
+	* common/Makefile.in, compat/Makefile.in, configure, configure.in,
+	plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
+	src/Makefile.in:
+	Break out stack smashing protector options into SSP_CFLAGS and
+	SSP_LDFLAGS so we can use it everywhere (unlike LT_LDFLAGS).
+	[01be114fc9fb]
+
+2013-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, plugins/sudoers/redblack.c:
+	In rbrepair(), make sure we never try to change the color of the
+	sentinel node, which is the first entry, not the root. From Michael
+	King
+	[3fc4dc4004ec]
+
+2012-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	No need to restore default signal handler for SIGSTOP as it is not
+	catchable. Attempting to do so is harmless but sigaction() will fail
+	and set errno to EINVAL which makes it looks like there is an error.
+	[be7c0b759e9a]
+
+	* src/exec.c:
+	Print SIGCONT_FG and SIGCONT_BG properly in debug output.
+	[93e59e301c8f]
+
+2012-12-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Disable PIE on FreeBSD/ia64, otherwise sudo will segfault.
+	[9ed48f696595]
+
+2012-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	Add howmany() macro since some systems have this in sys/param.h
+	which we no longer include.
+	[2c5efaa16c45]
+
+2012-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/sudoers/test11.toke.out.ok:
+	Remove errant file.
+	[a91699beffc6]
+
+2012-12-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_fill.c:
+	Remove obsolete sudoers_cleanup() stubs.
+	[89153025a2ae]
+
+	* common/alloc.c, common/atobool.c, common/fileops.c,
+	common/fmt_string.c, common/lbuf.c, common/secure_path.c,
+	common/sudo_conf.c, common/sudo_debug.c, common/term.c,
+	compat/closefrom.c, compat/getcwd.c, compat/glob.c,
+	compat/snprintf.c, include/missing.h,
+	plugins/sample/sample_plugin.c, plugins/sample_group/getgrent.c,
+	plugins/sample_group/plugin_test.c,
+	plugins/sample_group/sample_group.c, plugins/sudoers/alias.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
+	plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
+	plugins/sudoers/redblack.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestamp.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	plugins/system_group/system_group.c, src/conversation.c, src/exec.c,
+	src/exec_common.c, src/exec_pty.c, src/get_pty.c,
+	src/load_plugins.c, src/net_ifs.c, src/parse_args.c, src/sudo.c,
+	src/sudo_edit.c, src/tgetpass.c, src/ttyname.c, src/utmp.c:
+	Don't include <sys/param.h>. We only needed it for MAXPATHLEN,
+	MAXHOSTNAMELEN and the MIN/MAX macros. We now use PATH_MAX and
+	HOST_NAME_MAX throughout without falling back on MAXPATHLEN or
+	MAXHOSTNAMELEN and define our own MIN/MAX macros as needed.
+	[f4807d46f504]
+
+	* include/missing.h, plugins/sudoers/match.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c, src/sudo.c:
+	Use MAX_HOST_NAME+1 (limits.h) instead of MAXHOSTNAMELEN
+	(sys/param.h or netdb.h).
+	[2544f5e306dd]
+
+2012-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Move debug_decl() in log_failure() to be after the variable
+	declarations for C89.
+	[f48d2035ab44]
+
+2012-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/error.c, include/error.h, plugins/sudoers/iolog.c,
+	plugins/sudoers/logging.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Cannot wrap sigsetjmp() or we end up returning to the wrong place.
+	Use a macro instead.
+	[749ee6acdad8]
+
+2012-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/policy.c:
+	Fix return in sudoers_policy_open that should be debug_return.
+	[a78b795b6846]
+
+2012-11-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Define sudo_ttyname_dev() for the HAVE_STRUCT_PSINFO_PR_TTYDEV case
+	too.
+	[acfa891c229e]
+
+	* src/solaris.c:
+	Quiet a gcc warning and add comment about needing to keep the handle
+	open.
+	[f954f228960f]
+
+2012-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	mention --disable-shared
+	[6954d39e2d0f]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Add missing command_info argument in I/O plugin open() prototype.
+	Bug #579
+	[72beb07aba0e]
+
+2012-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c:
+	Regen for proper line numbers.
+	[6cf6e132e764]
+
+	* configure, configure.in:
+	Add locale_stub.o to SUDO_OBJS, not locale_stub.lo.
+	[d604dc8ca38a]
+
+	* common/sudo_printf.c:
+	Include missing.h for __printflike.
+	[a33640600faf]
+
+	* plugins/sudoers/iolog.c:
+	Saner loop invariant in io_mkdirs (cosmetic only).
+	[dc30274afe38]
+
+	* MANIFEST, common/Makefile.in, common/error.c, common/sudo_printf.c,
+	configure, configure.in, include/error.h, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/Makefile.in, src/error.c, src/exec_pty.c, src/locale_stub.c,
+	src/sesh.c:
+	Move warn/error into common and make static builds work.
+	[4d3f374f4e4c]
+
+	* MANIFEST, common/Makefile.in, common/sudo_debug.c,
+	common/sudo_printf.c, include/error.h, plugins/sudoers/Makefile.in,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/iolog.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/policy.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/Makefile.in, src/conversation.c, src/sesh.c:
+	Move _sudo_printf from src/conversation.c to common/sudo_printf.c.
+	Add sudo_printf function pointer that is initialized to
+	_sudo_printf() instead of requiring a sudo_conv function pointer
+	everywhere. The plugin will reset sudo_printf to point to the
+	version passed in via the plugin open function. Now plugin_error.c
+	can just call sudo_printf in all cases. The sudoers binaries no
+	longer need their own version of sudo_printf.
+	[9b09d3f63790]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
+	plugins/sudoers/plugin_error.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Add plugin_setjmp() wrapper for siglongjmp(error_jmp, 1) so we don't
+	need error_jmp to be extern. Also add plugin_clearjmp() that clears
+	a flag so error()/errorx() knows when to call exit() vs. longjmp().
+	[5a4617148e70]
+
+	* plugins/sudoers/set_perms.c:
+	Let warning() call gettext() for us.
+	[ab8d502ba4ac]
+
+	* include/error.h, plugins/sudoers/plugin_error.c, src/error.c:
+	Do locale swapping in the warning()/error() macros themselves
+	instead of in the underlying functions.
+	[4cd205540e17]
+
+	* common/alloc.c, common/list.c, include/error.h,
+	plugins/sudoers/env.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, src/error.c,
+	src/hooks.c:
+	Rename warning2()/error2() -> warning_nodebug()/error_nodebug().
+	[48346393634d]
+
+	* common/sudo_conf.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c, src/error.c,
+	src/exec.c, src/exec_common.c, src/exec_pty.c, src/load_plugins.c,
+	src/net_ifs.c, src/parse_args.c, src/selinux.c, src/sesh.c,
+	src/solaris.c, src/sudo.c, src/sudo_edit.c, src/tgetpass.c:
+	Call gettext() on parameters for warning()/warningx() instead of
+	having warning() do it for us.
+	[c71088bc9d3e]
+
+	* Makefile.in, plugins/sudoers/alias.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c:
+	Call gettext() in sudoerserror() in the user's locale and pass the
+	untranslated string to it.
+	[cdbfc231b848]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/locale.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Allow sudoers programs (visudo, sudoreplay, visudo) to use
+	plugin_error.c instead of the error.c from the front-end. This means
+	sudoers_setlocale() needs to be independent of the sudo_user struct
+	and the defaults table. The sudoers locale is now updated via a
+	callback.
+	[e356f5f8cd6a]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
+	plugins/sudoers/plugin_error.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Include setjmp.h in sudoers.h Move error_jmp into plugin_error.c
+	Rename sudoers_plugin_cleanup sudoers_cleanup Make sudoers
+	warning/error functions work when sudo_conv is NULL
+	[7365ee24a779]
+
+	* src/error.c:
+	No need to change locale in front-end warning()/error().
+	[23dc1df7f93b]
+
+	* plugins/sudoers/tsgetgrpw.c:
+	Ignore bad lines in passwd/group file instead if stopping processing
+	when we hit one.
+	[79b790559075]
+
+	* plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.sh,
+	plugins/sudoers/regress/testsudoers/test5.sh:
+	Bash doesn't let you set UID to use MYUID instead.
+	[5be56335f059]
+
+	* plugins/sudoers/visudo.c:
+	Avoid NULL deref for unknown Defaults in strict mode.
+	[545c21c1e7d6]
+
+	* common/sudo_conf.c, common/sudo_debug.c:
+	See DEFAULT_TEXT_DOMAIN
+	[3d723e1d27db]
+
+2012-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* .hgignore:
+	Add signame.c and mksigname.
+	[d59bbf423f00]
+
+	* plugins/sudoers/Makefile.in:
+	Fold preinstall into install-plugin and pass the path to the plugin
+	binary to the preinstall command.
+	[2c2205af8bb7]
+
+	* pp:
+	sync with upstream
+	[a4b7336b3256]
+
+	* src/sudo.h:
+	repair spacing
+	[f5c1255ce514]
+
+2012-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_debug.c:
+	Set group on sudo_debug when creating it to gid 0 so systems without
+	BSD group semantics don't get the invoking user's group.
+	[7dda01196554]
+
+	* plugins/sudoers/iolog.c:
+	Rename mkdir_parents() io_mkdirs() and add a flag to specify whether
+	path is a temporary, in which case the final component is created
+	via mkdtemp() instead of mkdir().
+	[79c0c4e7ed58]
+
+	* plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.h:
+	For PERM_ROOT set egid to 0 so log files are not created with the
+	gid of the user.
+	[5b964ea43474]
+
+	* plugins/sudoers/logging.c:
+	Add calls to set_perms(PERM_ROOT) becore logging to a file. We
+	should already be root but since we cache the current permission
+	status it is basically free. That way, if more of sudoers runs as
+	non-root in the future logging will still work correctly.
+	[c591d4973f41]
+
+	* common/sudo_conf.c, config.h.in, configure, configure.in,
+	include/gettext.h, plugins/sudoers/locale.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/error.c, src/exec.c, src/sesh.c, src/sudo.c:
+	#unifdef HAVE_SETLOCALE, it is C89 so no need to check for it.
+	[41f6bb4926f4]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in:
+	Mention that sudo.conf is parsed in the C locale.
+	[f711c416e30c]
+
+	* common/sudo_conf.c:
+	Parse sudo.conf in the "C" locale.
+	[776658f651ea]
+
+	* plugins/sudoers/locale.c, plugins/sudoers/logging.h,
+	plugins/sudoers/sudoers.h:
+	Fix compilation on systems w/o setlocale()
+	[6940d1c1c1ce]
+
+	* doc/TROUBLESHOOTING:
+	Sudo now includes a workaround for the Solaris 11 locale issue.
+	[ab93787a552c]
+
+2012-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/gettext.h, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/locale.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/error.c, src/exec.c, src/sesh.c, src/sudo.c, src/sudo.h:
+	Always include locale.h from gettext.h so we no longer need to
+	include locale.h from the .c files.
+	[93d39182ccfa]
+
+	* MANIFEST, config.h.in, configure, configure.in, mkdep.pl,
+	plugins/sudoers/Makefile.in, src/Makefile.in, src/openbsd.c,
+	src/solaris.c, src/sudo.c, src/sudo.h:
+	Add os-specific initialization functions for solaris (workaround
+	setuid locale problem in Solaris 11) and openbsd (set malloc_options
+	if SUDO_DEVEL). Also move set_project() to solaris.c.
+	[1d6581afbaf4]
+
+2012-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/find_path.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/timestamp.c:
+	Avoid strerror() when possible and just rely on warning/error to
+	handle errno in the proper locale.
+	[bf612caae97c]
+
+	* plugins/sudoers/logging.c:
+	Set sudoers locale in log_allowed()
+	[2dd0ac704cae]
+
+	* plugins/sudoers/check.c:
+	Make the sudo lecture translatable.
+	[3cdfc183d72d]
+
+	* Makefile.in:
+	Add the values of badpass_message, passprompt and mailsub to
+	sudoers.pot so they can be translated.
+	[51cbe8adcb94]
+
+	* plugins/sudoers/logging.c:
+	Expand the FMT_FIRST anf FMT_CONTD macros inline so they get picked
+	up by xgettext.
+	[c5b74115caf0]
+
+2012-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/prompt.c,
+	plugins/sudoers/sudoers.h:
+	Make expand_prompt() args const and free the prompt when we are done
+	with it.
+	[995ef8519fe6]
+
+	* plugins/sudoers/policy.c:
+	Fix cut and pasto
+	[e002921c1d15]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/logging.c:
+	Expand def_mailsub in the sudoers locale, not the user's.
+	[a4775f2fb385]
+
+	* common/sudo_conf.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/visudo.c, src/error.c, src/exec.c,
+	src/exec_common.c, src/exec_pty.c, src/load_plugins.c,
+	src/net_ifs.c, src/parse_args.c, src/selinux.c, src/sesh.c,
+	src/sudo.c, src/sudo_edit.c, src/tgetpass.c:
+	Display warning/error messages in the user's locale.
+	[00a04165c0cf]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
+	plugins/sudoers/env.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/parse.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/timestamp.c:
+	Call gettext inside log_error et al instead of having the caller do
+	it. This way we can display any messages to the user in their own
+	locale but log in the sudoers local.
+	[286e0444f785]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
+	plugins/sudoers/locale.c, plugins/sudoers/logging.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Add simple locale switching to make it easy to switch from the
+	user's locale to the sudoers locale without making excessive
+	setlocale() calls when we don't need to.
+	[5c61582fdeee]
+
+	* plugins/sudoers/iolog_path.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoers.c:
+	Convert setlocale() to sudoers_setlocale() in the sudoers module.
+	This only converts existing uses, there are more places where we
+	need to sprinkle sudoers_setlocale() calls.
+	[8ee0cbf0d0a9]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/logging.c, plugins/sudoers/sudoers.c:
+	audit_failure() now calls gettext itself using the sudoers locale.
+	[d77f1d78799a]
+
+	* common/sudo_debug.c, include/error.h, include/sudo_debug.h,
+	plugins/sudoers/plugin_error.c, src/error.c:
+	Add variants of warn/error and sudo_debug_printf that take a va_list
+	instead of a variable number of args.
+	[00392bdc063c]
+
+	* INSTALL, doc/TROUBLESHOOTING:
+	Document Solaris 11 locale issues and workarounds.
+	[05f7d34af3ae]
+
+	* Makefile.in, configure, configure.in:
+	Solaris gettext() looks in lang.UTF-8, not just lang for UTF-8
+	locales. Make links from localdir/lang -> localdir/lang.UTF-8
+	[5ca9326480e2]
+
+2012-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/sudoers.c:
+	Do not inform the user that the command was not permitted by the
+	policy if they do not successfully authenticate. This is a
+	regression introduced in sudo 1.8.6.
+	[c1279df08bfb]
+
+	* plugins/sudoers/Makefile.in:
+	Add preinstall target that runs SUDO_PREINSTALL_CMD. Used to fixup
+	the rpath in HP-UX SOM shared libraries for the LDAP libs.
+	[b07185657b42]
+
+	* src/parse_args.c:
+	The -a option should be #ifdef HAVE_BSD_AUTH_H, not -A.
+	[22c73cbe3ff9]
+
+2012-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.in:
+	Allow the user to specify and alternate libtool
+	[c9d6fc9521fd]
+
+2012-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, plugins/sudoers/sudo_nss.c:
+	Allow sudo to be build with sss support without also including ldap
+	support. From Stephane Graber.
+	[b992a80ebea1]
+
+2012-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Refactor policy plugin interface code from sudoers.c into policy.c
+	[393e62910b8a]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
+	Refactor command_info setting into its own function.
+	[a952b948324c]
+
+	* plugins/sudoers/interfaces.c, plugins/sudoers/interfaces.h,
+	plugins/sudoers/match_addr.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Make interfaces pointer private to interfaces.c and add
+	get_interfaces() accessor.
+	[b69b9334ed3c]
+
+2012-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog_path.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoers.h:
+	Make user_cwd const since it is either a string literal or passed in
+	from the front-end.
+	[90751b81e8bc]
+
+	* configure, configure.in:
+	sudo 1.8.7
+	[bf727adb8af0]
+
+	* plugins/sudoers/sudoers.c:
+	Avoid nested strtok() calls.
+	[9d9f22ab52a9]
+
+2012-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/check.c,
+	plugins/sudoers/prompt.c, plugins/sudoers/sudoers.h:
+	Move expand_prompt() into its own source file for easier unit
+	testing.
+	[b419b48a436f]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/check.c,
+	plugins/sudoers/check.h, plugins/sudoers/sudoers.h,
+	plugins/sudoers/timestamp.c, plugins/sudoers/timestamp.h:
+	Make check.c independent of the underlying timestamp implementation.
+	[895071bd6065]
+
+	* plugins/sudoers/iolog_path.c:
+	Add SUDOERS_NO_SEQ define to allow ${seq} to be disabled.
+	[8ac38f02dd6d]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Use a list for the possible values of Tag_Spec with a minimal indent
+	to improve readability. In the pod version, these were =head3. Also
+	use .St -p1003.1 instead of just POSIX when talking about glob() and
+	fnmatch().
+	[361a6f7a5c44]
+
+2012-10-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	sudo_ttyname_dev() is unused if there is no /proc or sysctl().
+	[6598dbf81e16]
+
+	* compat/mksiglist.c, compat/mksigname.c,
+	compat/regress/fnmatch/fnm_test.c, compat/regress/glob/globtest.c,
+	plugins/sample_group/plugin_test.c,
+	plugins/sudoers/regress/check_symbols/check_symbols.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/sesh.c, src/sudo.c:
+	Explicitly mark main() as public in executables to avoid an HP-UX ld
+	warning.
+	[72a40ce218be]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
+	Remove grep from SEE ALSO section.
+	[c7cafee1621f]
+
+	* common/alloc.c:
+	If vasprintf() fails, just use the errno it sets instead of assuming
+	ENOMEM.
+	[1be5bfdc0cab]
+
+2012-09-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Mention HP-UX pam.conf settings.
+	[8b8e745b49fd]
+
+2012-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/timestamp.c,
+	plugins/sudoers/timestamp.h:
+	Split off timestamp functions into their own source file.
+	[d5833332511d]
+
+2012-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Mention how !foo is not the same as ALL,!foo
+	[51f8e470757d]
+
+2012-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Start commands in the background when I/O logging is enabled. We
+	can't do this on Mac OS X due to a kernel bug in tc[gs]etattr(2)
+	which returns EINTR on signal instead of restarting automatically.
+	[83b1d59146f7]
+
+	* src/exec_pty.c:
+	Handle SIGCONT_FG and SIGCONT_BG when converting signal number to
+	string in deliver_signal().
+	[2cefea7a976e]
+
+2012-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Fix running commands that need the terminal in the background when
+	I/O logging is enabled. E.g. "sudo vi &". When the command is
+	foregrounded, it will now resume properly.
+	[0bc13a253429]
+
+	* plugins/sudoers/match.c:
+	Add rudimentary support for name-based matching as a compile-time
+	option. This unsafe when used in conjunction with the '!' operator.
+	[f93bc8e6db15]
+
+2012-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/pwutil.c,
+	plugins/sudoers/pwutil.h, plugins/sudoers/pwutil_impl.c:
+	Split out implementation-specific back end code out of pwutil.c into
+	pwutil_impl.c. This will allow the main pwutil code to be used for
+	lookup methods other than getpw* and getgr*.
+	[999c2dde60e4]
+
+2012-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.in:
+	sudo 1.8.6p3
+	[97fef3d9ed65]
+
+2012-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/fixman.sh:
+	Don't use embedded newline when matching, use \n. This got expanded
+	at some point. Bug #573
+	[6652f834b8f5]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Rename yyerror() to sudoerserror() to match yacc prefix changes. Not
+	really needed due to the #defines that yacc makes but it is less
+	confusing this way as the lexer calls sudoerserror().
+	[a0577be6527d]
+
+	* common/alloc.c, plugins/sample_group/plugin_test.c,
+	plugins/sudoers/env.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	src/exec_common.c, src/parse_args.c, src/sudo.c:
+	No need to translate "unable to allocate memory" when we can just
+	use the system translation via strerror().
+	[377499e5827c]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fall back on lstat(2) if d_type in struct dirent is DT_UNKNOWN. Not
+	all file systems support d_type. Bug #572
+	[8b861c62945f]
+
+	* plugins/sudoers/sudoreplay.c:
+	Avoid calling fclose(NULL) in the error path when we cannot open an
+	I/O log file.
+	[9401d5c4bb05]
+
+2012-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.in:
+	Sudo 1.8.6p2
+	[6e32496280f2]
+
+	* src/exec.c:
+	When setting the signal handler for SIGTSTP to the default value in
+	non-I/O log mode, store the old handler value for when we restore it
+	after resume.
+	[242628694e42]
+
+	* plugins/sudoers/env.c:
+	Replace the guts of sudo_setenv_nodebug() with our old setenv.c
+	which supports non-standard BSD and glibc semantics. sudo_setenv()
+	now simply calls sudo_setenv2().
+	[57ffb6c9efaa]
+
+2012-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document non-Unix group support in LDAP sudoers.
+	[33c89f3aeee6]
+
+	* plugins/sudoers/ldap.c:
+	Enable non-Unix group support for LDAP sudoers. We now check for
+	non-Unix groups and netgroups with the same query in the second
+	pass. Bug #571
+	[eb98fdff54d9]
+
+2012-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/parse.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/visudo.c:
+	Set yacc prefix to "sudoers" to avoid conflicts other yacc parsers.
+	[cb6c0d93215e]
+
+2012-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention support for SUCCESS=return in /etc/nsswitch.conf
+	[ef1f35aa0863]
+
+	* NEWS, configure, configure.in:
+	sudo 1.8.6p1
+	[73a5e1f004b3]
+
+2012-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c:
+	Avoid setting LOGNAME, USER and USERNAME variables twice when
+	set_logname is enabled.
+	[0de4f5fbd1d4]
+
+	* plugins/sudoers/env.c:
+	Fix duplicate detection in sudo_putenv(), do not prune out the
+	variable we just set when overwriting an existing instance. Fixes
+	bug #570
+	[854ee714c831]
+
+	* plugins/sudoers/env.c:
+	Add some debuggging
+	[a25cd3305823]
+
+2012-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudo_nss.c:
+	Disable word wrap in list mode when stdout is a pipe to make "sudo
+	-l | grep ..." more useful. Adapted from a diff by Daniel Kopecek.
+	[65ade04511fd]
+
+	* common/lbuf.c:
+	Print a trailing newline in lbuf_print() when there is not enough
+	space to do word wrapping and the lbuf does not end with a newline.
+	[c0200e19cd09]
+
+	* plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c:
+	Add support for [SUCCESS=return] in nsswitch.conf; from Daniel
+	Kopecek
+	[5c480316e3ce]
+
+	* MANIFEST:
+	Add sssd.c
+	[9cadd014ef97]
+
+2012-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/fi.mo,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/sl.mo,
+	plugins/sudoers/po/uk.mo, src/po/fi.mo, src/po/hr.mo, src/po/it.mo,
+	src/po/ru.mo, src/po/sl.mo, src/po/uk.mo, src/po/vi.mo:
+	regen .po files
+	[62423d4d143d]
+
+	* MANIFEST, plugins/sudoers/po/vi.mo:
+	Add Vietnamese sudoers translation from translationproject.org
+	[33666a605525]
+
+	* NEWS:
+	mention PIE
+	[05032e5304c6]
+
+	* MANIFEST, plugins/sudoers/po/vi.po:
+	Add Vietnamese sudoers translation from translationproject.org
+	[015c2204bae2]
+
+2012-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, compat/Makefile.in, mkdep.pl:
+	Add missing signame dependency
+	[e493bfb01929]
+
+	* src/exec.c, src/ttyname.c:
+	Silence compiler warnings.
+	[1c5374b66d9b]
+
+	* MANIFEST, compat/Makefile.in, compat/sig2str.c, compat/strsigname.c,
+	config.h.in, configure, configure.in, include/missing.h, mkdep.pl,
+	src/exec.c, src/exec_pty.c:
+	Replace strsigname() with sig2str(), emulating it as needed.
+	[1e348cca1fa6]
+
+	* config.h.in, configure, configure.in, src/utmp.c:
+	Use fseeko() for legacy utmp handling if available.
+	[b4bbd8d2c0e9]
+
+2012-08-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/strsigname.c, config.h.in, configure, configure.in:
+	Detect sys_sigabbrev[] and use it in place of sys_signame[] if
+	present. For some reason glibc does not declare sys_sigabbrev so we
+	must add an extern definition of our own.
+	[b38f3fbd7078]
+
+	* compat/strsignal.c, compat/strsigname.c:
+	Handle NULL entries in sys_siglist and sys_signame.
+	[a388959d9654]
+
+	* compat/mksiglist.c, compat/mksiglist.h, compat/mksigname.c,
+	compat/mksigname.h, compat/strsignal.c, compat/strsigname.c:
+	Convert my_sys_sig{list,name} -> sudo_sys_sig{list,name}
+	[711e41aba59a]
+
+2012-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	sync
+	[5a2522488754]
+
+	* src/exec.c:
+	Pass on SIGTSTP to the command if it was sent by a user process (not
+	the kernel or the terminal) when we are not I/O logging and set the
+	default SIGTSTP handler when we re-send the signal to ourself,
+	restoring our handler after we resume.
+	[4259c47e31c0]
+
+	* src/exec.c:
+	Shells typically change their process group when they start up so
+	that they can implement job control. Most well-behaved shells change
+	the pgrp back to its original value before suspending so we must not
+	try to restore in that case, lest we race with the child upon
+	resume, potentially stopping sudo with SIGTTOU while the command
+	continues to run. Some shells, such as pdksh, just suspend the shell
+	by sending SIGSTOP to themselves without restoring the pgrp. In this
+	case we need to change the pgrp back for them. Should fix bug #568
+	[6ac6751ffd17]
+
+2012-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, compat/Makefile.in, compat/mksigname.c,
+	compat/mksigname.h, compat/strsignal.c, compat/strsigname.c,
+	config.h.in, configure, configure.in, include/missing.h, mkdep.pl,
+	src/exec.c, src/exec_pty.c:
+	Use strsigname() to print signal names in the debug output. If the
+	system has no strsigname(), use our own.
+	[0735f18906b9]
+
+2012-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/testsudoers/test5.inc,
+	plugins/sudoers/regress/testsudoers/test5.sh:
+	Remove generated file and change path for temporary include file.
+	[4e9fa830c6b5]
+
+	* plugins/sudoers/Makefile.in:
+	When running regress tests, list pass/fail rate for each dir
+	(testsudoers and visudo) instead of the total. Also prevent the
+	result files from clobbering each other by keeping them in the
+	relevant directories.
+	[6aac53baff7d]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Don't print an error message in yyerror() if open_sudoers() fails,
+	we've already printed an error message. Also restore the check for
+	sudoers_warnings in yyerror().
+	[aa6036df5fb2]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l:
+	Avoid printing the >>> parse error <<< message for testsudoers when
+	the -t flag is specified.
+	[76f3433c8992]
+
+2012-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c:
+	Fix NULL deref when an entry has no Runas_Entry
+	[4b14983ff6e7]
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/ja.mo, src/po/ja.po, src/po/pl.mo, src/po/pl.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po:
+	sync with translationproject.org
+	[440e9c9b37de]
+
+	* NEWS:
+	sync
+	[3142ba2dce60]
+
+	* plugins/sudoers/check.c:
+	Correct the check_user() comment header.
+	[73da30308fff]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Change a log_fatal() into log_error() when no auth methods are
+	configured. The caller already checks the return value.
+	[05f5c39793a7]
+
+	* plugins/sudoers/logging.c:
+	Add missing debug_return
+	[3a76bb7c2fe7]
+
+2012-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Make the capitalization consistent for .Ss and .Sx
+	[5c5735ee4b2f]
+
+	* doc/Makefile.in, doc/fixman.sh, doc/fixmdoc.sh, doc/sudo.cat,
+	doc/sudo.man.in, doc/sudo.mdoc.in:
+	Add COMMAND EXECUTION section that describes how sudo runs the
+	command, the extra sudo processes and signal handling.
+	[dff2d88e984e]
+
+2012-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Happy Easter
+	[4b9d697c6b83]
+
+2012-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/Makefile.in:
+	Don't echo the awk command when building siglist.in
+	[21daa72921e6]
+
+	* doc/fixman.sh, doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Cosmetic changes.
+	[19259528e9ad]
+
+	* doc/Makefile.in:
+	The HISTORY, LICENSE and CONTRIBUTORS files are not longer
+	generated.
+	[ea6ac9e981e6]
+
+	* MANIFEST, plugins/sudoers/po/da.po, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/hr.po, plugins/sudoers/po/it.mo,
+	plugins/sudoers/po/it.po, plugins/sudoers/po/sl.po,
+	plugins/sudoers/po/uk.po, src/po/de.mo, src/po/de.po, src/po/fi.po,
+	src/po/hr.po, src/po/it.po, src/po/ru.po, src/po/sl.po,
+	src/po/uk.po, src/po/vi.po:
+	Sync with translationproject.org and add Italian sudoers
+	translation.
+	[9276740aea59]
+
+2012-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Expand description of fqdn to talk about systems where the hosts
+	file is searched before DNS.
+	[4ee812ca6116]
+
+2012-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/Makefile.in:
+	For cat pages there is nothing to make unless DEVEL is set.
+	[fab4a5b68708]
+
+	* configure, configure.in, doc/Makefile.in:
+	Always use mandoc to format cat pages and remove now-extraneous
+	nroff configure tests.
+	[5747f4ed5762]
+
+	* pp:
+	sync polypkg from git
+	[89ddf6ea3e3f]
+
+	* plugins/sudoers/sudoers.c:
+	Use AI_FQDN instead of AI_CANONNAME if available since "canonical"
+	is not always the same as "fully qualified".
+	[7c1d9c098386]
+
+2012-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.mdoc.in:
+	Fix some typos. Describe error messages not related to policy
+	permissions.
+	[f5ebf9030d85]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/visudo.c:
+	Add new check_defaults() function to check (but not update) the
+	Defaults entries. Visudo can now use this instead of update_defaults
+	to check all the defaults regardless instead of just the global
+	Defaults entries.
+	[3fa879ce1b65]
+
+2012-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Document sudoers log format.
+	[08998a7061ab]
+
+	* NEWS:
+	Update for sudo 1.8.5p3
+	[6e102a5d4e8d]
+
+	* src/load_plugins.c:
+	Add missing check for I/O plugin API version when checking for the
+	presence of I/O plugin hooks.
+	[ef05c7eeaf81]
+
+	* src/hooks.c:
+	Can't call debug code in the process_hooks_xxx functions() since
+	ctime() may look up the timezone via the TZ environment variable.
+	[2179fb26bd8e]
+
+2012-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_common.c, src/sesh.c, src/utmp.c:
+	Include signal.h before sudo_exec.h since it uses sigset_t * in the
+	fork_pty prototype.
+	[94fc0d859600]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in:
+	Remove OPTIONS section; options now go inside DESCRIPTION
+	[a619fc58a746]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[44719d80bc06]
+
+	* MANIFEST, NEWS, plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/sl.mo, plugins/sudoers/po/sl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/da.mo, src/po/da.po, src/po/hr.mo, src/po/hr.po,
+	src/po/sl.mo, src/po/sl.po, src/po/vi.mo, src/po/vi.po:
+	Sync with translationproject.org and add new Slovenian translation.
+	[34b4b966bbac]
+
+	* common/alloc.c, plugins/sudoers/check.c, plugins/sudoers/env.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c:
+	Reduce the number of "internal error, foo overflow" messages that
+	need to be translated.
+	[93ffa2b3d53f]
+
+	* NEWS:
+	Mention HP-UX reboot fix.
+	[1e39b5aa32ac]
+
+	* INSTALL, NEWS, common/sudo_debug.c, configure, configure.in,
+	doc/CONTRIBUTORS, include/sudo_debug.h, mkdep.pl, pathnames.h.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/sssd.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c:
+	Support for using SSSD (http://fedorahosted.org/sssd/) as a sudoers
+	data source. From Daniel Kopecek and Pavel Brezina.
+	[3f85e95d6928]
+
+2012-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_conf.c, src/load_plugins.c:
+	If sudo.conf contains an I/O plugin but no policy plugin, use
+	sudoers for the policy plugin. If a policy plugin is specified
+	without an I/O plugin, only the policy plugin will be loaded.
+	[ea192df2439d]
+
+	* doc/Makefile.in, doc/sudoers.man.in:
+	Do not modify the .Os section when building the .man.in file from
+	.mdoc.in.
+	[a9f9628e147f]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Add a note about wildcards matching multiple words and include an
+	example. Also mention that for sudoedit, a wildcard in command line
+	args does not match a slash.
+	[fcb9fbac14e0]
+
+2012-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c, src/sudo_exec.h:
+	Fix a comment, update a variable name in a prototype; all cosmetic.
+	[e89f10cbd6e1]
+
+	* plugins/sudoers/iolog.c:
+	Cast 2nd argument of lseek() to off_t if it is a constant for
+	systems with 64-bit off_t but without a proper lseek() prototype.
+	[d8779da135d0]
+
+	* compat/getline.c, plugins/sudoers/check.c, plugins/sudoers/env.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/visudo.c:
+	Fix some warnings from clang checker-267
+	[1e44ef7860b5]
+
+	* plugins/sample/sample_plugin.c:
+	Fix memory leak found by clang checker-267
+	[f8a43617fdfb]
+
+2012-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c, src/sudo.h, src/sudo_exec.h:
+	If we receive a signal from the command we executed, do not forward
+	it back to the command. This fixes a problem with BSD-derived
+	versions of the reboot command which send SIGTERM to all other
+	processes, including the sudo process. Sudo would then deliver
+	SIGTERM to reboot which would die before calling the reboot() system
+	call, effectively leaving the system in single user mode.
+	[4ffab9ab9e98]
+
+2012-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/fixman.sh, doc/fixmdoc.sh:
+	Remove section about Solaris 10 on other systems. Add missing
+	sudoers.man.in bit to fixman.sh.
+	[176559199ba7]
+
+2012-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
+	Expand section on Solaris privileges.
+	[3a1bfa2f1743]
+
+	* NEWS:
+	Expand a bit on the Solaris priv set changes.
+	[bffb78b4a520]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	The second argument to init_parser() is now bool.
+	[fb727a4fb651]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Fix printing of parse error message to stderr.
+	[dea6b420b84f]
+
+	* plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c:
+	If a command matches using an empty Runas_List (i.e. Runas_List is
+	present but empty) and the -u option was not specified, set runas_pw
+	to user_pw instead of using runas_default. This is intended to be
+	used in conjunction with the Solaris Privilege Set support for rules
+	that grant privileges without changing the user.
+	[e84a081f3c11]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/sudoers_version.h:
+	Add support for parsing an empty Runas_List, which only allows the
+	command to be run as the invoking user. This can be used in
+	conjunction with the Solaris Privilege Set support to grant
+	privileges without changing the user.
+	[dc34373792fc]
+
+2012-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/fixman.sh:
+	Fix HP-UX, just use ".TH name section" like the vendor manuals.
+	[559738237c92]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix compilation on Solaris
+	[2d310302207c]
+
+	* .hgignore, MANIFEST, doc/Makefile.in, doc/fixman.sh, doc/fixmdoc.sh,
+	doc/sudo.man.sh, doc/sudo.mdoc.sh, doc/sudoers.man.sh,
+	doc/sudoers.mdoc.sh:
+	Generate a sed script file when munging *.mdoc or *.man instead of
+	passing sed expressions on the command line. Older seds do not
+	support \n in a replacement so generate and run a sed script
+	instead.
+	[0bcce3f1ca18]
+
+	* doc/Makefile.in, doc/sudo.man.in, doc/sudo_plugin.man.in,
+	doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.man.in,
+	doc/visudo.man.in:
+	Use "Sudo VERSION" as the 4th arg to .TH instead of just "VERSION"
+	[fe0f10b63776]
+
+2012-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	When checking whether a signal is user-generated, compare si_code
+	against SI_USER instead of <= 0 since on HP-UX, terminal-related
+	signals get a code of 0.
+	[4e9021243343]
+
+	* src/sudo.c:
+	SuSE Enterprise Linux uses RLIMIT_NPROC and _SC_CHILD_MAX
+	interchangably. This causes problems when setting RLIMIT_NPROC to
+	RLIM_INFINITY due to a bug in bash where bash tries to honor the
+	value of _SC_CHILD_MAX but treats a value of -1 as an error, and
+	uses a default value of 32 instead.
+
+	Previously, we just checked RLIMIT_NPROC and, if it was unlimited,
+	restored the previous value of RLIMIT_NPROC. However, that makes it
+	impossible to set nproc to unlimited. We now only restore the nproc
+	resource limit if sysconf(_SC_CHILD_MAX) is negative. In most cases,
+	pam_limits will set RLIMIT_NPROC for us.
+	[cb71cc8d0b08]
+
+2012-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Active Directory apparently requires that tenths of a second be
+	present in a date so append .0 to the "now" value in the time
+	filter. Also remove space for the global AND from TIMEFILTER_LENGTH
+	since it was not being used consistently. Buffers of
+	TIMEFILTER_LENGTH now need to account for the terminating NUL byte.
+	[d28619ff6e45]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix SELinux build
+	[cc0d1f4e851b]
+
+2012-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	Remove pod versinons of HISTORY, CONTRIBUTORS and LICENSE as they
+	were not being kept in sync.
+	[fc3ad1847cb1]
+
+	* doc/HISTORY, doc/Makefile.in, doc/contributors.pod, doc/history.pod,
+	doc/license.pod:
+	Remove pod versinons of HISTORY, CONTRIBUTORS and LICENSE as they
+	were not being kept in sync.
+	[950363dffe3a]
+
+2012-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Fix printing of the permission denied message to standard error when
+	a user is not allowed to run a command. This got broken by the
+	recent logging changes.
+	[b7af63da3ca1]
+
+	* plugins/sudoers/sudoers_version.h:
+	Bump grammar version for Solaris privs.
+	[2a2baf024477]
+
+	* doc/schema.ActiveDirectory:
+	Fix errors introduced when sudoNotBefore, sudoNotAfter and sudoOrder
+	were added. From David Hicks.
+	[3fc432a8edb4]
+
+2012-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Remove lex.yy.c when building toke.c
+	[72bb9e62b289]
+
+	* doc/Makefile.in:
+	Fix building docs in a build dir.
+	[7a6f435af022]
+
+	* doc/sudo.man.pl, doc/sudo.pod, doc/sudo_plugin.pod,
+	doc/sudoers.ldap.pod, doc/sudoers.man.pl, doc/sudoers.pod,
+	doc/sudoreplay.pod, doc/visudo.pod:
+	Remove pod versions of the manual; we now use mdoc.
+	[5c967d2dd5db]
+
+	* MANIFEST, doc/Makefile.in, doc/sudo.man.sh, doc/sudo.mdoc.sh,
+	doc/sudoers.man.sh, doc/sudoers.mdoc.sh:
+	Add post-processing scripts to strip out login class, BSD auth,
+	SELinux and privilege set bits when they are not supported.
+	[d0d51f72f597]
+
+	* NEWS, configure.in, doc/CONTRIBUTORS, doc/Makefile.in,
+	doc/contributors.pod, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.man.pl, doc/sudoers.mdoc.in, doc/sudoers.pod,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, src/sudo.c, src/sudo.h:
+	Merge in Solaris privilege support by Darren Moffat and John
+	Zolnowsky
+	[3aa0a64f2f5c]
+
+2012-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/contributors.pod:
+	Sync with CONTRIBUTORS file
+	[9a0852306ad9]
+
+	* doc/sudo.man.in, doc/sudo_plugin.man.in, doc/sudoers.ldap.man.in,
+	doc/sudoers.man.in, doc/sudoreplay.man.in:
+	Regen .man.in files with my private mandoc.
+	[dc3c9fc449eb]
+
+	* doc/Makefile.in:
+	add MANDOC variable
+	[35527e66afc5]
+
+2012-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.man.in, doc/sudo_plugin.man.in, doc/sudoers.ldap.man.in,
+	doc/sudoers.man.in, doc/sudoreplay.man.in, doc/visudo.man.in:
+	Regen .man.in files with hacked mandoc to avoid issues with historic
+	nroff.
+	[d45cfa7d665f]
+
+2012-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.mdoc.in, doc/sudoers.mdoc.in:
+	Fix groff warnings.
+	[111d522ca807]
+
+	* doc/Makefile.in:
+	Fix dependencies for .man.in files.
+	[aefeffe1af2b]
+
+	* .hgignore:
+	Add doc/*.mdoc to ignore file
+	[1e4de6ef2ad8]
+
+	* INSTALL, MANIFEST, NEWS, configure, configure.in, doc/Makefile.in,
+	doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.mdoc.in:
+	Build .man.in and .cat files from .mdoc.in files. Add new --with-man
+	and --with-mdoc configure options.
+	[c963fd7e8f80]
+
+2012-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.mdoc.in, doc/sudo_plugin.mdoc.in, doc/sudoers.ldap.mdoc.in,
+	doc/sudoers.mdoc.in, doc/sudoreplay.mdoc.in, doc/visudo.mdoc.in:
+	Sudo manuals formatted in mdoc, to replace the pod versions.
+	[e6dca4030451]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.pod, doc/sudoers.man.in, doc/sudoers.pod,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
+	doc/visudo.cat, doc/visudo.man.in, doc/visudo.pod:
+	More minor costmetic fixes.
+	[a7287a68385a]
+
+2012-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
+	Minor cosmetic fixes.
+	[9c48bdaf3946]
+
+2012-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c, plugins/sudoers/po/sudoers.pot:
+	Use "a password is required" instead of "password required" when the
+	-n flag is used and we need to read a password.
+	[a3c30fc41648]
+
+2012-07-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention logging changes.
+	[8238fd6e02e8]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[e2cf634ba63b]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Document that other mail_* flags have precedence over mail_badpass.
+	[9f4cc9188f40]
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Move log_denial() calls and logic to log_failure(). Move
+	authentication failure logging to log_auth_failure(). Both of these
+	call audit_failure() for us.
+
+	This subtly changes logging for commands that are denied by sudoers
+	but where the user failed to enter the correct password. Previously,
+	these would be logged as "N incorrect password attempts" but now are
+	logged as "command not allowed". Fixes bug #563
+	[cad35f0b3ad7]
+
+2012-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/aix.c:
+	Do not set a resource limit to zero when we are unable to fetch a
+	value from /etc/security/limits.
+	[62bfb0a7895e]
+
+2012-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Add "Provides: sudo" to debian sudo-ldap package
+	[beb8afa0beb2]
+
+2012-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, zlib/Makefile.in:
+	Define NO_VIZ for zlib when gcc doesn't support symbol visibility
+	attributes.
+	[9fdcbf526386]
+
+	* configure, configure.in:
+	Use the autoconf cache when checking for symbol export control
+	support.
+	[03c2cce8711f]
+
+	* INSTALL, common/Makefile.in, compat/Makefile.in, configure,
+	configure.in, mkpkg, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in:
+	Add configure check for building PIE executables instead of doing it
+	in mkpkg.
+	[02b5b78ef258]
+
+	* sudo.pp:
+	MacOS pp backend doesn't like modes longer than 4 characters.
+	[01b49022bf01]
+
+2012-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add -Wc,-fstack-protector to LT_LDFLAGS instead of adding
+	-fstack-protector to LDFLAGS so it doesn't get stripped out. Libtool
+	will strip -fstack-protector from the linker flags and we always
+	link with libtool.
+	[0a0a0250ac2b]
+
+2012-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
+	Regen for sudo 1.8.6
+	[1657ee28b496]
+
+	* NEWS, doc/sudoers.ldap.pod:
+	Document improved Tivoli Directory Server support.
+	[fb411edf4687]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/ldap.c:
+	Add support for ldaps using Tivoli LDAP libraries. Add ldap.conf
+	option to specify Tivoli key db password. Allow TLS ciphers to be
+	configured for Tivoli.
+	[737e17c91e60]
+
+2012-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Tivoli Directory Server 6.3 libs always return a (bogus) error when
+	setting LDAP_OPT_CONNECT_TIMEOUT.
+	[504406637c38]
+
+	* NEWS:
+	Update
+	[687a755604e8]
+
+	* plugins/sudoers/ldap.c:
+	Treat LDAP_OPT_CONNECT_TIMEOUT (Tivoli Directory Server 6.3) the
+	same as LDAP_OPT_CONNECT_TIMEOUT (OpenSSH). Don't make failure to a
+	set an ldap option fatal.
+	[17cf93ae3304]
+
+2012-06-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Zero pointers in sudo_user struct after freeing, just in case.
+	[8eff1f80b943]
+
+	* plugins/sudoers/sudoers.c:
+	Free user_gids in close function if it has not already been freed.
+	[cbce28877f37]
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Defer group ID to name resolution until we actually need it.
+	[463e75b81e89]
+
+	* src/sudo.c:
+	It is safe to read in sudo.conf before calling user_info().
+	[3290b6434e3c]
+
+	* plugins/sudoers/env.c, plugins/sudoers/ldap.c:
+	Use MAX_UID_T_LEN + 1 for uid/gid buffers, not MAX_UID_T_LEN to
+	prevent potential truncation. Bug #562.
+	[29d9fc4e0c4e]
+
+2012-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	If installing with installp, error out if there is already an
+	instance of the rpm package installed.
+	[ec24c6faba22]
+
+	* mkpkg:
+	Add --disable-nls for AIX
+	[192ac2f7d65e]
+
+2012-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Debian sudo-ldap packages should now depend on libldap-2.4-2, not
+	libldap2.
+	[cbcec71e6b58]
+
+2012-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Add Homepage and Bugs to debian control file.
+	[0f19d7d14e66]
+
+2012-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	fix typo when setting aix_freeware
+	[2fd6feb50195]
+
+	* common/Makefile.in, compat/Makefile.in, configure, configure.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in, zlib/Makefile.in:
+	Don't run regress tests or sudoers sanity check (using the newly-
+	built visudo) when cross compiling. Bug #560
+	[0c4e3f68b2f5]
+
+	* MANIFEST, configure, configure.in, plugins/sample/Makefile.in,
+	plugins/sample/sample_plugin.exp, plugins/sample/sample_plugin.map,
+	plugins/sample/sample_plugin.sym, plugins/sample_group/Makefile.in,
+	plugins/sample_group/sample_group.exp,
+	plugins/sample_group/sample_group.map,
+	plugins/sample_group/sample_group.sym, plugins/sudoers/Makefile.in,
+	plugins/sudoers/sudoers.exp, plugins/sudoers/sudoers.map,
+	plugins/sudoers/sudoers.sym, plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.exp,
+	plugins/system_group/system_group.map,
+	plugins/system_group/system_group.sym:
+	Rename foo.sym -> foo.exp Remove foo.map from the repo and generate
+	it on demand Use a loader option file for HP-UX ld to explicitly
+	export symbols
+	[2402ff5302ab]
+
+	* src/Makefile.in:
+	Remove extraneous backslash
+	[8ca054de138c]
+
+	* plugins/sudoers/regress/check_symbols/check_symbols.c:
+	Don't check for errorx as an exported symbols as it is now a macro.
+	Check for user_in_group() instead.
+	[7b02c8ecd3ea]
+
+2012-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Adjust ld map file support to use an anonymous scope to match the
+	updated .map files.
+	[49be44282d9e]
+
+2012-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, include/gettext.h:
+	Older versions of Solaris lack ngettext()
+	[028af10dfa5f]
+
+	* configure, configure.in:
+	Move the check for -static-libgcc until after AC_LANG_WERROR has
+	been called and use AX_CHECK_COMPILE_FLAG().
+	[a7b09120e7ff]
+
+	* include/gettext.h:
+	Sudo defines HAVE_SETLOCALE not HAVE_LOCALE_H
+	[3aa2780d4a4e]
+
+	* include/error.h, include/sudo_debug.h:
+	Fix gcc 2.x variant macro support.
+	[8e71c2370997]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/sudoreplay.c:
+	Fix compilation on gcc 2.95 and other compilers that only allow
+	variable declarations at the beginning of a block.
+	[9d80c802bb46]
+
+	* configure, configure.in, plugins/sudoers/Makefile.in:
+	Link check_symbols with SUDO_LIBS to make sure we link with the
+	requisite libraries to successfully dlopen sudoers.so. This is
+	needed on HP-UX where a program dlopen()ing a shared object that
+	uses pthreads must also be linked with pthreads (and HP-UX LDAP uses
+	pthreads).
+	[b8961cd82337]
+
+	* plugins/sudoers/regress/check_symbols/check_symbols.c:
+	Add check for exported local symbols. This will cause a "make check"
+	failure on systems where we don't support symbol hiding.
+	[8aa549389bb1]
+
+	* configure, configure.in:
+	Additional ${foo} -> $(foo) Makefile tweaks.
+	[046bbde18f52]
+
+	* plugins/sample/sample_plugin.map,
+	plugins/sample_group/sample_group.map, plugins/sudoers/sudoers.map,
+	plugins/system_group/system_group.map:
+	No need to provide a name for the scope in the map file since we
+	don't use the it for versioning.
+	[5ed4b997560d]
+
+2012-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/check_symbols/check_symbols.c:
+	Add regress test for symbol visibility.
+	[9adddd4e0518]
+
+2012-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.in:
+	sudo 1.8.6
+	[57008a7afb77]
+
+	* configure, configure.in, include/missing.h:
+	Add support for controlling symbol visibility using the HP and
+	Solaris C compilers.
+	[46d5b468979e]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/sudoers.h:
+	Use the expanded io log dir when updating the sequence number.
+	Includes a workaround for older versions of sudo where the sequence
+	number was stored in the unexpanded io log dir.
+	[210797dab9a8]
+
+2012-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/parse_args.c:
+	Simplify "sudo -s" argv rewriting.
+	[7be143dae7c5]
+
+	* MANIFEST, configure, configure.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in,
+	src/sudo_noexec.map:
+	Don't use a map file for sudo_noexec.so since Solaris ld doesn't
+	allow '*' in the global section. The libtool export flag is now
+	added to LT_LDFLAGS instead of commenting/uncommenting lines.
+	[38fc37a66b04]
+
+2012-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, include/missing.h:
+	The visibility attribute was actually added in gcc 3.3.x, not 4.0.
+	Just assume that if -fvisibility=hidden works that the attribute is
+	usable.
+	[d3904d6faf14]
+
+	* plugins/sudoers/check.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoers.map,
+	plugins/sudoers/sudoers.sym, plugins/sudoers/testsudoers.c,
+	plugins/system_group/system_group.c:
+	Export group cache from sudoers.so for system_group.so to use.
+	[16695d207fc5]
+
+	* MANIFEST, configure, configure.in, include/missing.h,
+	plugins/sample/Makefile.in, plugins/sample/sample_plugin.map,
+	plugins/sample_group/Makefile.in,
+	plugins/sample_group/sample_group.map, plugins/sudoers/Makefile.in,
+	plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.map, plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.map, src/sudo_noexec.c,
+	src/sudo_noexec.map:
+	Use gcc's visibility attribute to specify when symbols are visible
+	or hidden, if available. If not available, use an ELF version script
+	if it is supported. If all else fails, fall back to using libtool's
+	-export-symbols.
+	[64e889921727]
+
+2012-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Add mode for installed locale files but leave the directories with
+	default mode and owner.
+	[142237dbb31f]
+
+2012-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg, sudo.pp:
+	Install AIX packages under /opt/freeware with links in /usr/bin and
+	/usr/sbin. This matches the layout of the sudo package from AIX
+	freeware.
+	[0b79d47bbe01]
+
+	* Makefile.in, configure, configure.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in, src/Makefile.in, sudo.pp:
+	Install shared objects with mode 0644 except on HP-UX which needs
+	the executable bit set.
+	[ae416af0ba6c]
+
+	* Makefile.in, doc/Makefile.in, include/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Make installed file modes consistent with the file modes in the sudo
+	package.
+	[307386373289]
+
+2012-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod:
+	Add "%:" prefix when talking about QAS non-Unix group support.
+	[7cb25f6861f8]
+
+	* pp, sudo.pp:
+	Fix packaging of symbolic links on HP-UX when the link source
+	already exists in the filesystem.
+	[c9bb48031596]
+
+	* mkpkg:
+	Only specify prefix if we are overriding the default value. Fixes
+	the man dir (/usr/local/man vs. /usr/local/share/man).
+	[65351b6c1697]
+
+	* sudo.pp:
+	Fix setting of sudoedit_man variable.
+	[9beed9ae5bba]
+
+	* doc/Makefile.in:
+	Echo the command when linking the sudoedit manual.
+	[6c83b5657b55]
+
+2012-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg, sudo.pp:
+	Build .deb packages with selinux support.
+	[3fd9cb1b4526]
+
+2012-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Don't list paths for unstripped binaries in the lintial overrides.
+	[4c8e16f1773b]
+
+	* pp:
+	Add support for Installed-Size header in control file, required by
+	newer debian versions.
+	[e97d76234bee]
+
+	* pp:
+	Fix extended description in .deb files.
+	[d35e27ace146]
+
+	* sudo.pp:
+	Add Depends, Replaces and Conflicts headers for .deb packages.
+	[76eb6c4b3278]
+
+2012-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudo_nss.c:
+	If there are no privs to print, write the message to the lbuf
+	instead of printing it directly.
+	[ecd56226abb7]
+
+2012-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Set -e in %pos and %preun for debian to quiet a lintian warning.
+	[8bb908514df9]
+
+	* doc/Makefile.in, src/Makefile.in, sudo.pp:
+	Install sudoedit and the sudoedit manual as symbolic links, not hard
+	links and package them as such.
+	[f317ff3cf3e7]
+
+	* sudo.pp:
+	Make sudo binary permissions 755 instead of 111 Add lintian
+	overrides file for .deb files.
+	[991cd7d7f0e1]
+
+	* configure, configure.in, doc/Makefile.in, mkpkg:
+	Replace out of date MAN_POSTINSTALL with MANCOMPRESS and
+	MANCOMPRESSEXT which can be used to compress the installed manual
+	pages. Compress the man pages for .deb files to appease lintian.
+	[4e34083b41d2]
+
+	* sudo.pp:
+	Debian fixes:
+	 * fix modes to be more in line with what Debian expects
+	 * add section
+	 * install LICENSE as copyright and ChangeLog as changelog
+	 * create stub changelog.debian
+	[7f6c5647f588]
+
+	* pp:
+	Fix find command to properly skip files in the DEBIAN dir when
+	building md5sums.
+	[8918bde941fa]
+
+	* pp, sudo.pp:
+	Use a debian-compliant package maintainer field.
+	[fc51a94170eb]
+
+2012-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	No need to loop over atomic_writev(), it guarantees to write all
+	data or return an error.
+
+	Fix handling of stdout/stderr that contains "\r\n" and handle a
+	"\r\n" pair that spans a buffer.
+	[8aaf02d90c45]
+
+2012-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for sudo 1.8.5p2
+	[d369d4d40a19]
+
+	* plugins/sudoers/sudoreplay.c:
+	Instead of doing extra write()s when replaying stdout, build up a
+	vector for writev() instead. This results in far fewer system calls.
+	[303d866c025c]
+
+2012-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/env_hooks.c, src/sudo.h, src/tgetpass.c:
+	Provide unhooked version of getenv() and use it when looking up
+	DISPLAY and SUDO_ASKPASS in the environment.
+	[04dbdccf4a14]
+
+2012-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	When replaying a log of stdout or stderr, do newline to carriage
+	return + linefeed conversion. We cannot have termios do this for us
+	since we've disabled output postprocessing (POST) when setting raw
+	mode.
+	[61352a7d996f]
+
+2012-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	When checking for -fstack-protector, treat warnings as fatal errors.
+	[4124cd12d511]
+
+2012-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix test for -z relro
+	[548bdb6f5c4a]
+
+	* MANIFEST:
+	Add m4/ax_check_compile_flag.m4 and m4/ax_check_link_flag.m4
+	[ed063264a2a1]
+
+	* INSTALL, aclocal.m4, configure, configure.in,
+	m4/ax_check_compile_flag.m4, m4/ax_check_link_flag.m4:
+	Build with -fstack-protector and link with -zrelo where supported.
+	Added --disable-hardening option to disable hardening options.
+	[0b6c1a1ceb03]
+
+2012-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/testsudoers/test1.sh,
+	plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.sh,
+	plugins/sudoers/regress/testsudoers/test4.out.ok,
+	plugins/sudoers/regress/testsudoers/test4.sh,
+	plugins/sudoers/regress/testsudoers/test5.inc,
+	plugins/sudoers/regress/testsudoers/test5.out.ok,
+	plugins/sudoers/regress/testsudoers/test5.sh,
+	plugins/sudoers/testsudoers.c:
+	Add tests for sudoers mode, owner and group checks.
+	[a7607443aba0]
+
+	* plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
+	If sudoers_mode is group-readable but the actual sudoers file is
+	not, open the file as uid 0, not uid 1. This fixes a problem when
+	sudoers has a more restrictive mode than what sudo expects to find.
+	In older versions, sudo would silently chmod the file to add the
+	group-readable bit.
+	[c056b6003e6f]
+
+	* INSTALL, common/secure_path.c, config.h.in, configure, configure.in:
+	No longer throw an error if sudoers is a symbolic link. Deprecated
+	the --with-stow option as that is now (effectively) the default.
+	[8ce783e54886]
+
+2012-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/testsudoers/test2.inc,
+	plugins/sudoers/regress/testsudoers/test2.out.ok,
+	plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.d/root,
+	plugins/sudoers/regress/testsudoers/test3.out.ok,
+	plugins/sudoers/regress/testsudoers/test3.sh:
+	Add basic tests for #include and #includedir
+	[b303e4218951]
+
+	* plugins/sudoers/testsudoers.c:
+	Add -U sudoers_uid option to testsudoers.
+	[3f8ed13501ba]
+
+2012-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, configure, configure.in:
+	Update for 1.8.5p1
+	[c33c49bf5b4b]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix #includedir; from Mike Frysinger
+	[d4833d4e39a0]
+
+	* plugins/sudoers/check.c:
+	Don't prompt for a password if the user is in the exempt group, is
+	root, or is running the command as themselves even if the -k option
+	was specified. This makes "sudo -k command" consistent with the
+	behavior one would get if the user ran "sudo -k" immediately before
+	running the command.
+	[632b3961df00]
+
+2012-05-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Fix capitalization
+	[7258aa977caf]
+
+	* mkpkg:
+	Build PIE executable on Mac OS X 10.5 and above.
+	[2a5c7ef92182]
+
+2012-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for sudo 1.8.4p5
+	[21164f508b68]
+
+	* plugins/sudoers/match_addr.c:
+	Add missing break between AF_INET and AF_INET6 in
+	addr_matches_if_netmask()
+	[672a4793931a]
+
+	* plugins/sudoers/mon_systrace.c:
+	Move systrace monitor code to the attic
+	[d6faf4754e9c]
+
+2012-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	The pointer to the siginfo_t struct in a signal handler may be NULL.
+	[41a4ee934b53]
+
+2012-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c:
+	Fix an alignment problem on NetBSD systems with a 64-bit time_t and
+	strict alignment. Based on a patch from Martin Husemann.
+	[1e5ba3c18f17]
+
+	* include/missing.h:
+	Add offsetof macro for those without it.
+	[e44cb51d2587]
+
+	* MANIFEST:
+	add system_group plugin
+	[6169793b510c]
+
+2012-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/dlopen.c:
+	Implement RTLD_NEXT and fix RTLD_DEFAULT for HP-UX.
+	[85bd03bc5d94]
+
+2012-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention system_group plugin
+	[05393dd4bdb8]
+
+	* Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/system_group/Makefile.in:
+	update depends
+	[6feb0b824fc4]
+
+	* plugins/system_group/system_group.c:
+	Only call gr_delref() when use sudo's password caching functions.
+	[1103442e21fa]
+
+	* plugins/sample_group/Makefile.in, plugins/system_group/Makefile.in:
+	Add missing dependency on libreplace.la
+	[05bfd9d4657f]
+
+	* compat/dlopen.c:
+	Emulate RTLD_DEFAULT and RTLD_SELF w/ shl_findsym() using NULL and
+	PROG_HANDLE.
+	[2382d0693acc]
+
+	* Makefile.in, configure, configure.in,
+	plugins/system_group/Makefile.in,
+	plugins/system_group/system_group.c,
+	plugins/system_group/system_group.sym:
+	Add group plugin that does lookups by name using the system group
+	database.
+	[2ddbb604112f]
+
+	* plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po, src/po/pl.mo,
+	src/po/pl.po:
+	sync with translationproject.org
+	[4ef05df4226d]
+
+2012-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/de.mo, src/po/de.po, src/po/eo.mo, src/po/eo.po,
+	src/po/fi.mo, src/po/fi.po, src/po/ja.mo, src/po/ja.po,
+	src/po/ru.mo, src/po/ru.po, src/po/sr.mo, src/po/sr.po,
+	src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po:
+	sync with translationproject.org
+	[115c3f828fc5]
+
+2012-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Add mode for docdir and use '-' (default) for localedir mode. Fixes
+	a problem on Linux when building in a directory with the setgid bit
+	set.
+	[582279c8bcb1]
+
+2012-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Match CentOS 6.0
+	[1e99ef210f98]
+
+2012-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update with recent changes
+	[c5fc220ba696]
+
+	* pp:
+	Fix version check on AIX
+	[d272e39112f4]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[72b23509465a]
+
+	* plugins/sudoers/ldap.c:
+	Need to call ldapssl_clientauth_init() for start_tls on Mozilla LDAP
+	SDK.
+	[87b685e70b9a]
+
+	* plugins/sudoers/ldap.c:
+	Fix printing of invalid uri
+	[645aa53acdde]
+
+	* plugins/sudoers/auth/pam.c:
+	Pass PAM_SILENT when deleting creds to remove an annoying warning
+	message on Solaris.
+	[1dd0301ef293]
+
+2012-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/utmp.c:
+	Fix the setutxent and endutxent compatibility defines (this time
+	correctly) when only setutent and endutent are available.
+	[d136d2867db9]
+
+	* plugins/sudoers/ldap.c:
+	sudo_ldap_set_options_global() should not take an LDAP handle as an
+	argument since the options affect the global settings.
+	[1dc39b9d20f2]
+
+	* mkpkg:
+	Debian sudo has not been built with --with-exempt=sudo since 1.6.8.
+	[c7716291a856]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	plugins/sudoers/auth/pam.c, src/exec.c, src/exec_pty.c, src/sudo.c,
+	src/sudo.h:
+	Call the policy's init_session() function before we fork the child.
+	That way, the session is created and destroyed in the same process,
+	which is needed by some modules, such as pam_mount.
+	[ece552ba002e]
+
+	* doc/TROUBLESHOOTING:
+	Add entry for SSL LDAP errors on Mozilla SDKs when the cert dir is
+	not specified.
+	[bd293e100b28]
+
+	* plugins/sudoers/auth/pam.c:
+	Delete creds after closing the PAM session.
+	[5158d726d6a5]
+
+	* plugins/sudoers/ldap.c:
+	Provide a more useful error message if using a Mozilla-style LDAP
+	SDK and you forgot to specify TLS_CERT in ldap.conf.
+	[7cb78feb899c]
+
+	* src/exec_pty.c:
+	Add missing initialization of a sigaction structure when I/O
+	logging. Fixes a potential problem when suspending the command.
+	[f4480f2ba816]
+
+	* plugins/sudoers/ldap.c:
+	Split global and per-connection LDAP options into separate arrays.
+	Set global LDAP options before calling ldap_initialize() or
+	ldap_init(). After we have an LDAP handle, set the per-connection
+	options. Fixes a problem with OpenLDAP using the nss crypto backend;
+	bug #342
+	[265c9d2dc12b]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/de.mo, src/po/de.po, src/po/hr.mo, src/po/hr.po,
+	src/po/vi.mo, src/po/vi.po, src/po/zh_CN.mo, src/po/zh_CN.po:
+	sync with translationproject.org
+	[6d7fe44be21e]
+
+2012-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c, src/sudo.h:
+	Move struct passwd pointer into struct command details.
+	[d6fb1eff2065]
+
+2012-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Sync with upstream for Mac OS X (and other) fixes.
+	[c2f4998d01b0]
+
+	* mkpkg:
+	Only built Mac intel universal binary on an intel machine.
+	[0009e0b7e5a8]
+
+	* src/Makefile.in:
+	Do not pass libtool the -static-libtool-libs option when building
+	sudo and sesh. Otherwise, libtool may prefer a static version of an
+	installed library over a dynamic one when linking.
+	[6fbac9adc885]
+
+2012-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, plugins/sudoers/po/hr.mo,
+	plugins/sudoers/po/hr.po, src/po/de.mo, src/po/de.po:
+	Add German translation for sudo Add Croatian translation for sudoers
+	[fa4da1a6530c]
+
+	* plugins/sudoers/iolog.c:
+	typo fix in comment
+	[abd721d1288e]
+
+2012-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update with recent changes
+	[6fa11e8448b9]
+
+	* Makefile.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	Sort xgettext output by file name.
+	[f650841810f0]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod:
+	Clarify what "sudoreplay -l" displays and mention that it is sorted.
+	[84031c117bd6]
+
+	* config.h.in, configure, configure.in, src/ttyname.c:
+	Use AC_HEADER_MAJOR to determine where major/minor are defined.
+	[3c949650a223]
+
+	* config.h.in, configure, configure.in, src/ttyname.c:
+	Include sys/mkdev.h if present instead of sys/sysmacros.h for
+	minor(). This is needed on Solaris (at least) where the makedev
+	macros in sysmacros.h are obsolete and library functions should be
+	used instead.
+	[343928acf81e]
+
+	* mkpkg:
+	When building on Mac OS X, only set SDK_FLAGS if specified osversion
+	doesn't match host.
+	[d84c6efac872]
+
+2012-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Add back buf and tty variables for _ttyname() case that were
+	inadvertantly removed.
+	[a4a820b22a44]
+
+2012-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[5446b12c1250]
+
+	* configure, configure.in:
+	Remove b8 from version number.
+	[5adc4dcec061]
+
+	* src/ttyname.c:
+	remove some XXX
+	[187579a5f593]
+
+	* src/ttyname.c:
+	When looking for a device match, do a breadth-first search instead
+	of depth-first. We already special case /dev/pts/ so chances are
+	good that if it is not a pseudo-tty it is in the base of /dev/. Also
+	avoid a stat(2) when possible if struct dirent has d_type.
+	[0183f8a1b278]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	src/sudo.c, src/sudo.h:
+	Pass pid, ppid, sid, pgid and tcpgid to plugin in user_info list.
+	[f0574d878491]
+
+	* src/po/eo.mo, src/po/es.mo, src/po/es.po, src/po/fi.mo,
+	src/po/ja.mo, src/po/pl.mo, src/po/ru.mo, src/po/uk.mo,
+	src/po/vi.mo:
+	sync with translationproject.org
+	[4527ea78fbd5]
+
+	* MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/gl.mo, src/po/gl.po,
+	src/po/hr.mo, src/po/hr.po:
+	New Croatian and Galician translations from translationproject.org
+	[ad4bd924b4de]
+
+	* src/ttyname.c:
+	Add depth-first traversal of /dev/ for the /proc case when not
+	/dev/pts/N
+	[499bd3456774]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/sudoreplay.c:
+	If struct dirent has d_type, use it to avoid an extra stat().
+	[741dabbe4bcd]
+
+	* plugins/sudoers/sudoreplay.c:
+	Sort output of "sudoreplay -l"
+	[c0615795bd4b]
+
+2012-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix duplicate free introduced in last rev
+	[efdaabe69d75]
+
+2012-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Instead of treating ^C from tgetpass() specially, always return
+	AUTH_INTR if tgetpass() returned NULL. Treat PAM_AUTHINFO_UNAVAIL
+	like PAM_AUTH_ERR which Mac OS X returns this when there is no tty.
+	[a3b17298d4d0]
+
+	* config.h.in, configure, configure.in, src/ttyname.c:
+	Rototill code to determine the tty. For Linux, we now look up the
+	tty device in /proc/pid/stat instead of trying to open
+	/proc/pid/fd/[0-2]. The sudo_ttyname_dev() function maps the given
+	device number to a string. On BSD, we can use devname(). On Solaris,
+	_ttyname_dev() does what we want. TODO: write /dev/ traversal code
+	for the generic sudo_ttyname_dev().
+	[6b22be4d09f0]
+
+2012-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/ttyname.c:
+	Define PRNODEV for those w/o it.
+	[f17290e64559]
+
+	* config.h.in, configure, configure.in, src/ttyname.c:
+	Check for SVR4-style struct psinfo.pr_ttydev and use that to
+	determine the tty if std{in,out,err} are not ttys.
+	[76ad33a91f4b]
+
+	* src/ttyname.c:
+	Better support for SVR4-style /proc entries where we can't use
+	ttyname() on the /proc/pid/fd/[0-2] entries. We can, however,
+	attempt to map the device number back to the correct pseudo-tty
+	slave device.
+	[4f9f48cc79eb]
+
+	* src/ttyname.c:
+	When trying to determine the tty name, check parent's stderr in
+	addition to its stdin and stdout.
+	[604644056c7d]
+
+	* src/exec_pty.c:
+	Treat a tty read failure like EOF as it usually means the pty has
+	gone away. Handle write() on the tty returning EIO.
+	[16957f4a706f]
+
+	* src/exec.c, src/exec_pty.c:
+	Linux select() may return ENOMEM if there is a kernel resource
+	shortage. Older Solaris select() may return EIO instead of EBADF
+	when the tty goes away. If we get an unhandled select() failure,
+	kill the child and exit cleanly.
+	[d93940a311ab]
+
+	* src/ttyname.c:
+	Open /proc/pid/fd/[0-2] in non-blocking mode just in case we might
+	block in open.
+	[a9f809d09d52]
+
+2012-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Fix restoration of AIX permissions.
+	[30c717115988]
+
+	* src/parse_args.c:
+	Allow the -k flag to be used along with the -i and -s flags.
+	[0653b17c97f1]
+
+	* plugins/sudoers/sudoreplay.c:
+	Plug memory leak in parse_logfile() in the error path.
+	[9cce86fa833b]
+
+	* plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/da.mo, src/po/da.po, src/po/eo.po, src/po/es.po,
+	src/po/fi.po, src/po/it.mo, src/po/it.po, src/po/ja.po,
+	src/po/pl.po, src/po/ru.po, src/po/uk.po, src/po/vi.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po:
+	sync with translationproject.org
+	[14af43d0b170]
+
+2012-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/regress/glob/globtest.c, config.h.in, configure,
+	configure.in, plugins/sudoers/match.c:
+	Do not use GLOB_BRACE or GLOB_TILDE flags to glob()--we want the
+	glob() and fnmatch() results to be consistent.
+	[4226750d73c2]
+
+2012-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/ttysize.c, src/Makefile.in,
+	src/ttysize.c:
+	Move ttysize.c to common so sudoreplay can use it.
+	[b4a0aa514cd4]
+
+	* plugins/sudoers/sudoreplay.c:
+	If I/O log file includes rows + cols, warn if the user's tty is not
+	big enough.
+	[b980ef89efff]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix printing of TSID in "sudoreplay -l"
+	[4221e3e108b4]
+
+	* common/sudo_debug.c, include/sudo_debug.h,
+	plugins/sudoers/logging.c, plugins/sudoers/visudo.c, src/exec.c,
+	src/exec_pty.c:
+	Log the process id in the debug file output. Since we don't want to
+	keep calling getpid(), stash the value at init time and when we
+	fork().
+	[2782d30c024d]
+
+	* src/exec_pty.c:
+	Ignore SIGTTIN and SIGTTOU in main sudo process when I/O logging. It
+	is better to receive EIO from read()/write() than to be suspended
+	when we don't expect it. Fixes a problem when our terminal is
+	revoked which can happen when, e.g. our sshd is killed
+	unceremoniously. Also, only change the value of "alive" from true to
+	false, never from false to true. It is possible for us to receive
+	notification of the child having stopped after it is already dead.
+	This does not mean it has risen from the grave.
+	[26c9fe8ce0f9]
+
+	* src/exec_pty.c:
+	Distinguish between signals we received from the parent vs. those
+	delivered explicitly to the monitor process in debugging info.
+	[40716cb180e5]
+
+2012-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	In Solaris 11, /dev/pts under the "dev" filesystem, not "devices".
+	Update tty_is_devpts() to match so we can determine when the tty has
+	been reused.
+	[2689665df027]
+
+	* common/sudo_debug.c, include/error.h, include/sudo_debug.h:
+	Always pass __func__, __FILE__ and __LINE__ in sudo_debug_printf()
+	and use a new flag, SUDO_DEBUG_FILENO to specify when to use it.
+	This allows consumers of sudo_debug_printf() to log that data
+	without having to specify it manually.
+	[7c94c4879208]
+
+	* src/exec_pty.c:
+	Make this compile after last change.
+	[ee09034f3266]
+
+	* src/exec_pty.c:
+	Don't try to restore the terminal if we are not the foreground
+	process. Otherwise, we may be stopped by SIGTTOU when we try to
+	update the terminal settings when cleaning up.
+	[c48b24335456]
+
+	* src/exec.c:
+	If select() return EBADF in the main event loop, one of the ttys
+	must have gone away so perform any I/O we can and close the bad fds.
+	[3bc8678c03ce]
+
+	* common/sudo_debug.c, include/error.h, include/sudo_debug.h,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l:
+	Log warning() at SUDO_DEBUG_WARN not SUDO_DEBUG_ERROR. Log the
+	function, file and line number in the debug log for warning() and
+	error().
+	[894cd131f11d]
+
+2012-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_debug.c, include/error.h, include/sudo_debug.h,
+	src/conversation.c:
+	Add SUDO_DEBUG_ERRNO flag to debug functions so we can log errno.
+	Use this flag when wrapping error() and warning() so the debug
+	output includes the error string.
+	[1e2c67adaf1f]
+
+2012-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for sudo 1.8.5
+	[7d2b62b823fe]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen
+	[718ad9de92cd]
+
+	* doc/CONTRIBUTORS:
+	sync
+	[f48013aea641]
+
+	* plugins/sudoers/pwutil.c:
+	Use ecalloc()
+	[fabd23c1f271]
+
+	* src/exec_pty.c:
+	Don't need zero_bytes() after ecalloc()
+	[1a9d95cd10ef]
+
+	* config.h.in, configure, configure.in, src/sudo_noexec.c:
+	Add execvpe(), exect(), posix_spawn() and posix_spawnp() wrappers to
+	sudo_noexec.c.
+	[cbaa1d4b0f8a]
+
+	* src/utmp.c:
+	Fix compat setutxent and endutxent macros for systems with
+	setutent() but not setutxent(). From Gustavo Zacarias
+	[d7ce622fc5f2]
+
+2012-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	Add ignore_result definition to AH_BOTTOM
+	[8d4096838a98]
+
+	* common/sudo_debug.c, config.h.in, plugins/sample/sample_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/visudo.c, src/env_hooks.c,
+	src/exec.c, src/exec_pty.c, src/tgetpass.c:
+	Fix compiler warnings on some platforms and provide a better method
+	of defeating gcc's warn_unused_result attribute.
+	[9a8f804fcc75]
+
+	* configure, configure.in:
+	Fix building the builtin zlib from a build dir. When a zlib dir was
+	specified, prepend its include path instead of appending so we get
+	the right zlib headers.
+	[5f61d591b186]
+
+	* doc/LICENSE, zlib/adler32.c, zlib/crc32.c, zlib/crc32.h,
+	zlib/deflate.c, zlib/deflate.h, zlib/gzguts.h, zlib/gzlib.c,
+	zlib/gzread.c, zlib/gzwrite.c, zlib/infback.c, zlib/inffixed.h,
+	zlib/inflate.c, zlib/inftrees.c, zlib/trees.c, zlib/zconf.h.in,
+	zlib/zlib.h, zlib/zutil.c, zlib/zutil.h:
+	Update zlib to version 1.2.6
+	[173c4bc4d4fc]
+
+2012-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	g/c __unused which is no longer used
+	[7ef3f23edcd6]
+
+	* src/env_hooks.c:
+	Fix compilation if RTLD_NEXT is not defined.
+	[d5605f468b71]
+
+	* src/po/sr.mo, src/po/sr.po:
+	sync with translationproject.org
+	[27d559f7985d]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
+	doc/sudoers.man.in:
+	regen
+	[f9f63ce478b6]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[59035d82d15a]
+
+	* Makefile.in:
+	Ignore Project-Id-Version when comparing pot files.
+	[22feb9ede46b]
+
+	* plugins/sudoers/bsm_audit.c:
+	Use error() instead of log_fatal()
+	[54130bda4b50]
+
+	* plugins/sudoers/env.c:
+	Fix signedness of didvar in env_update_didvar()
+	[77048a80b3e4]
+
+	* plugins/sudoers/iolog.c:
+	Quiet a compiler warning on some platforms.
+	[8fdcaece0400]
+
+	* compat/fnmatch.c:
+	cast ctype(3) function/macro arguments from char to unsigned char to
+	avoid potential negative subscripting.
+	[bdcf7eef21ef]
+
+	* common/setgroups.c:
+	Quiet a warning on systems where the gids array in setgroups() is
+	not prototyped as being const, even though it really is.
+	[fdd758c6302d]
+
+	* src/env_hooks.c:
+	Quiet a compiler warning on systems where the argument to putenv(3)
+	is const.
+	[51bae2193b53]
+
+	* plugins/sudoers/sudoreplay.c:
+	Undo an incorrect int -> bool conversion.
+	[b9a4ce320f14]
+
+	* MANIFEST, NEWS, plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
+	src/po/sv.mo, src/po/sv.po:
+	Add Swedish sudo and sudoers translations from
+	translationproject.org
+	[f7ce1de9073f]
+
+	* plugins/sudoers/env.c:
+	No need to preserve ODMDIR on AIX now that we always read
+	/etc/environment.
+	[4aa04b2f0125]
+
+2012-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod, plugins/sudoers/env.c:
+	When initializing the environment for env_reset, start out with the
+	contents of /etc/environment on AIX and login.conf on BSD.
+	[5717bdc321e2]
+
+	* doc/TROUBLESHOOTING, src/sudo.c:
+	If we are not running with an effective uid of 0, try to give the
+	user enough information to debug the problem.
+	[fa4894896d8a]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/gram.c:
+	Quiet a clang-analyzer false positive.
+	[c4c0c1b9c8b0]
+
+	* src/tgetpass.c:
+	If there is nothing to read from the askpass program, set errno to
+	EINTR. This makes the cancel button behave like the user entered ^C
+	at the password prompt when PAM is used.
+	[594302cb9caf]
+
+	* src/sudo.h, src/tgetpass.c:
+	Fetch the value of "askpass" from the sudo conf struct.
+	[4593ee8f1bd3]
+
+	* common/sudo_conf.c:
+	Fix matching of "Path askpass" and "Path noexec"
+	[4df28d62afb9]
+
+2012-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Quiet a clang-analyzer dead store warning.
+	[dd90bf385a3f]
+
+	* plugins/sudoers/sudoers.c:
+	If the "timestampowner" user cannot be resolved, use ROOT_UID
+	instead of exiting with a fatal error.
+	[8d62aae99715]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/check.c, plugins/sudoers/env.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/parse.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
+	Remove the NO_EXIT flag to log_error() and add a log_fatal()
+	function that exits and is marked no_return. Fixes false positives
+	from static analyzers and is easier for humans to read too.
+	[a0fe785c2a3d]
+
+2012-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po, src/po/eo.mo,
+	src/po/eo.po:
+	sync with translationproject.org
+	[df5e8777de13]
+
+2012-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/po/da.mo, src/po/da.po:
+	sync with translationproject.org
+	[629d99548b78]
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
+	sync with translationproject.org
+	[9d122a2860d6]
+
+2012-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/po/it.mo, src/po/it.po:
+	sync with translationproject.org
+	[6397593b15cf]
+
+	* common/sudo_conf.c, plugins/sudoers/alias.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/env.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/interfaces.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c, src/exec.c, src/exec_pty.c, src/hooks.c,
+	src/load_plugins.c:
+	Use ecalloc() when allocating structs.
+	[8b5888868db2]
+
+	* common/alloc.c, include/alloc.h:
+	Add ecalloc() and commented out recalloc(). Use inline strnlen()
+	instead of strlen() in estrndup().
+	[7fb9aa46c1e0]
+
+2012-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/fi.mo, src/po/fi.po, src/po/ja.mo, src/po/ja.po,
+	src/po/pl.mo, src/po/pl.po, src/po/ru.mo, src/po/ru.po,
+	src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po:
+	sync with translationproject.org
+	[45a032c37334]
+
+2012-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Remove unused label
+	[2660bb0c1313]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document what changed in each plugin API revision
+	[59b30a6fc4d1]
+
+	* plugins/sudoers/set_perms.c:
+	Remove bogus optimization that could lead to a double free of the
+	group list.
+	[b0bfbd2a83a8]
+
+2012-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Expand AIX /etc/security/privcmds entry.
+	[9f3f072e034e]
+
+	* NEWS:
+	Update for sudo 1.8.5
+	[086049011f25]
+
+	* common/sudo_conf.c, doc/sample.sudo.conf, doc/sudo.cat,
+	doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.pod, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.pod, include/sudo_conf.h,
+	include/sudo_plugin.h, src/load_plugins.c, src/sudo.c,
+	src/sudo_plugin_int.h:
+	Rename plugin "args" to "options"
+	[f25624951bd2]
+
+	* doc/CONTRIBUTORS:
+	Add Lithuanian and Vietnamese translators
+	[2b4c075b69e3]
+
+	* Makefile.in:
+	Ignore comments when comparing new and old pot files.
+	[f872999347b3]
+
+	* src/Makefile.in:
+	regen
+	[c8193b1b11c7]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in:
+	regen
+	[15e3c17e8a3a]
+
+	* doc/sudo_plugin.pod, include/sudo_plugin.h,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/env.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/hooks.c,
+	src/sudo.c, src/sudo.h:
+	Pass a pointer to user_env in to the init_session policy plugin
+	function so session setup can modify the user environment as needed.
+	For PAM authentication, merge the PAM environment with the user
+	environment at init_session time. We no longer need to swap in the
+	user_env for environ during session init, nor do we need to disable
+	the env hooks at init_session time.
+	[3f5277b359d8]
+
+	* plugins/sample/sample_plugin.c:
+	Add explicit NULL entries for init_session, register_hooks and
+	deregister_hooks with appropriate comments.
+	[727a57978b40]
+
+	* compat/pw_dup.c:
+	Quiet a gcc "used uninitialized in this function" false positive.
+	[f14b68379ce9]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	We should always call warning() with a format string or a string
+	literal. In this case, the argument (path) is not user-controlled.
+	[e9ef51224024]
+
+2012-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/selinux.c:
+	Include sudo_exec.h for the sudo_execve() prototype.
+	[769e58065edc]
+
+	* config.h.in, configure, configure.in:
+	Add check for pam_getenvlist()
+	[36bde3f26c60]
+
+	* common/sudo_conf.c:
+	Set args to NULL in default plugin info struct when there is no
+	Plugin line in sudo.conf.
+	[93ec67708f01]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[a9287677795c]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
+	regen
+	[a242769d7962]
+
+	* configure, configure.in:
+	Bump version to 1.8.5
+	[e8618f0c2505]
+
+	* doc/sudo_plugin.pod:
+	Document hooks API
+	[e6ad07d27958]
+
+2012-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Make sudoersdir relative to PKG_INSTALL_ROOT for Solaris.
+	[fd72340042d3]
+
+	* include/sudo_plugin.h:
+	Use sudo_hook_fn_t in struct sudo_hook.
+	[938f93112d6e]
+
+	* doc/TROUBLESHOOTING:
+	If cross compiling, --host must include the OS in the tuple. E.g.
+	--host powerpc-unknown-linux
+	[b8c010070c1e]
+
+2012-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c:
+	Fix bogus int -> bool conversion; tags can have a value of -1.
+	[e63d6434a303]
+
+	* plugins/sudoers/env.c:
+	Add env_should_keep() and env_should_delete() wrapper functions to
+	simplify things a bit and hide the fact that matches_env_check() is
+	not bool.
+	[7a03d7a12b50]
+
+	* sudo.pp:
+	Fix application of debian-specific sudoers mods when building
+	packages as non-root.
+	[34bf4c52c425]
+
+	* plugins/sudoers/env.c:
+	matches_env_check() returns int, not boolean
+	[0ad915b8d5cb]
+
+	* src/sudo_edit.c:
+	Fix compilation when seteuid() is not available.
+	[8a722f998000]
+
+	* src/ttyname.c:
+	Simply move the free of ki_proc outside the realloc() loop.
+	[217b786da760]
+
+	* src/ttyname.c:
+	Bring back the erealloc() for the ENOMEM loop and just zero the
+	pointer after we free it.
+	[29a016e45127]
+
+	* src/ttyname.c:
+	Don't try to erealloc() a potentially freed pointer; Mateusz Guzik
+	[266e08844065]
+
+2012-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Use normal error path if unable to set sudoers gid.
+	[01c816918c99]
+
+	* plugins/sudoers/set_perms.c:
+	Make this work again on systems w/o seteuid().
+	[2e67f7421e97]
+
+2012-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Fix compilation if no seteuid/setreuid/setresuid available.
+	[d0b3c1f88eb4]
+
+	* plugins/sudoers/set_perms.c:
+	Better error messages, and added debugging throughout. Fixed
+	seteuid() version of set_perms()/restore_perms(). Fixed logic bug in
+	AIX version of restore_perms(). Added checks to avoid changing
+	uid/gid when we don't have to. Never set gid/uid state to -1, use
+	the old value instead.
+	[29188d469b5c]
+
+	* src/exec_pty.c, src/ttyname.c:
+	Fix format string warning on Solaris with gcc 3.4.3.
+	[d1eeb6e1dd0f]
+
+	* src/sudo.c:
+	Always declare environ now that we swap it around unilaterally.
+	[aaa3e92e7d0d]
+
+	* src/Makefile.in:
+	Honor LDFLAGS when linking sesh; from Vita Cizek
+	[498b41438f6e]
+
+	* src/sesh.c:
+	Include alloc.h for estrdup() prototype; from Vita Cizek
+	[93203655a320]
+
+2012-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Don't read /etc/environment on Linux when using PAM, PAM should set
+	the environment variables as needed via pam_env.
+	[b1ef62cb2d40]
+
+	* INSTALL:
+	Fix editor goof.
+	[0c3dd3bb8b57]
+
+	* src/hooks.c, src/sudo.c, src/sudo.h:
+	Disable environment hooks after we get user_env back to make sure a
+	plugin can't to modify user_env after we "own" it. This is kind of a
+	hack but we don't want the init_session plugin function to modify
+	user_env.
+	[8e6d119452a5]
+
+	* src/hooks.c, src/sudo.c:
+	Add support for deregistering hooks. If an I/O log plugin fails to
+	initialize, deregister its hooks (if any).
+	[ac00c93900c5]
+
+2012-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, src/sudo.c:
+	Move LOGIN_PATH and LOGIN_SETENV handling to plugin now that we hook
+	setenv.
+	[e75469dd9908]
+
+	* MANIFEST, aclocal.m4, common/sudo_debug.c, compat/Makefile.in,
+	compat/setenv.c, compat/unsetenv.c, config.h.in, configure,
+	configure.in, include/sudo_debug.h, include/sudo_plugin.h, mkdep.pl,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/env.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/Makefile.in, src/env_hooks.c,
+	src/hooks.c, src/load_plugins.c, src/sudo.c, src/sudo.h,
+	src/sudo_plugin_int.h:
+	Initial cut at a hooks implementation. The plugin can register hooks
+	for getenv, putenv, setenv and unsetenv. This makes it possible for
+	the plugin to trap changes to the environment made by authentication
+	methods such as PAM or BSD auth so that such changes are reflected
+	in the environment passed back to sudo for execve().
+	[61cffa06f863]
+
+2012-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, src/po/vi.mo, src/po/vi.po:
+	Add Vietnamese sudo translation from translationproject.org
+	[96df426790d5]
+
+2012-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sample.sudo.conf, doc/sudo.pod, doc/sudo_plugin.pod,
+	doc/sudoers.pod:
+	List sudo_noexec.so not noexec.so in the sample sudo.conf
+	[53844e190ec5]
+
+	* common/sudo_conf.c, doc/sample.sudo.conf, doc/sudo.pod,
+	doc/sudo_plugin.pod, doc/sudoers.pod, include/sudo_conf.h,
+	include/sudo_plugin.h, plugins/sample/sample_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/toke.l, src/load_plugins.c, src/sudo.c,
+	src/sudo_plugin_int.h:
+	Add support for plugin args at the end of a Plugin line in
+	sudo.conf. Bump the minor number accordingly and update the
+	documentation. A plugin must check the sudo front end's version
+	before using the plugin_args parameter since it is only supported
+	for API version 1.2 and higher.
+	[587f1f819536]
+
+2012-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	update depends
+	[6d2da44e11e5]
+
+	* MANIFEST:
+	secure_path.c is in common, not compat
+	[619c4a663dde]
+
+	* configure, configure.in:
+	Add check for variadic macro support in cpp.
+	[756854caf675]
+
+2012-02-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/secure_path.c, common/sudo_conf.c, include/secure_path.h,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add type param to sudo_secure_path() and add sudo_secure_file() and
+	sudo_secure_dir() wrappers which get by #includedir in sudoers.
+	[2ec2d3d8df04]
+
+2012-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.pod, plugins/sudoers/visudo.c:
+	Check the owner and mode in -c (check) mode unless the -f option is
+	specified. Previously, the owner and mode were checked on the main
+	sudoers file when the -s (strict) option was given, but this was not
+	documented.
+	[b2d6ee1e547a]
+
+	* config.h.in, configure, configure.in, src/ttyname.c:
+	Prefer KERN_PROC2 over KERN_PROC. Fixes compilation on some versions
+	of OpenBSD versions that have KERN_PROC2 but not KERN_PROC.
+	[159f6a50456a]
+
+2012-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS:
+	Add Eric Lakin for patch in bug #538
+	[490c29c234c6]
+
+	* src/exec_pty.c:
+	Fix typo in safe_close() made while converting to debug framework
+	that prevented it from actually closing anything.
+	[a66422a62afd]
+
+	* src/exec_pty.c:
+	Add some more debugging.
+	[b5667947dda9]
+
+	* common/Makefile.in, compat/Makefile.in, doc/Makefile.in,
+	include/Makefile.in:
+	We need sysconfdir in compat/Makfile to get the proper sudo.conf
+	path. Add standard prefix and foodir expansion in all Makefiles to
+	avoid this problem in the future.
+	[62b6ce4ecae9]
+
+2012-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/lt.mo, plugins/sudoers/po/lt.po:
+	New Lithuanian sudoers translation from translationproject.org
+	[10436b649035]
+
+	* plugins/sudoers/po/ja.po:
+	Update from translationproject.org
+	[acb8db5f8ef1]
+
+2012-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	When adding gids to the LDAP filter, only add the primary gid once.
+	This is consistent with the space computation/allocation. From Eric
+	Lakin
+	[35d9d99c92c6]
+
+	* doc/TROUBLESHOOTING:
+	Add entry for AIX enhanced RBAC config.
+	[5e10b6f8def7]
+
+	* mkpkg:
+	Target Mac OS X 10.5 when building packages.
+	[06fce9bbebee]
+
+2012-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/secure_path.c,
+	common/sudo_conf.c, include/secure_path.h,
+	plugins/sudoers/Makefile.in, plugins/sudoers/sudoers.c:
+	Relax the user/group/mode checks on sudoers files. As long as the
+	file is owned by the right user, not world-writable and not writable
+	by a group other than the one specified at configure time (gid 0 by
+	default), the file is considered OK. Note that visudo will still set
+	the mode to the value specified at configure time.
+	[241174babfcc]
+
+2012-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Add AIX-specific version of permission setting code to make sure
+	that the saved uid gets restored properly.
+	[9a6f5d22c301]
+
+	* config.h.in, configure, configure.in, src/exec_common.c:
+	Check for LD_PRELOAD variants in configure instead of checkign cpp
+	symbols. In disable_execute(), compute the length of the new envp
+	and allocate it once instead of reallocating on demand. Also append
+	old value of LD_PRELOAD (if any) to the new value.
+	[680266346917]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
+	Fix the description of noexec.
+	[6a6d142f3c80]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
+	The "op" parameter to set_default() must be int, not bool since it
+	is set to '+' or '-' for list add and subtract.
+	[8da5b137bea2]
+
+	* sudo.pp:
+	Make sure sudoers is writable before calling ed script.
+	[95352ab6336b]
+
+2012-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, doc/contributors.pod:
+	Update contributors. Now includes translators and authors of compat
+	code.
+	[4fb5b616b50a]
+
+2012-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/po/sudo.pot:
+	regen
+	[2c86e2c328fe]
+
+	* pp, sudo.pp:
+	Build flat packages, not package bundles, on Mac OS X.
+	[57bda3cd5520]
+
+2012-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Move macos section to be with the other OS-specific sections.
+	[51423bb2973a]
+
+	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po:
+	Sync with translationproject.org
+	[8ce41cbb8da0]
+
+	* configure, configure.in:
+	Don't permanently add -D_FORTIFY_SOURCE=2 to CPPFLAGS
+	[fa979aa6fe7d]
+
+	* sudo.pp:
+	Add Mac OS X support, printing the latest chunk of the NEWS file and
+	the license text in the installer.
+	[ffeab72387c0]
+
+	* sudo.pp:
+	Add explicit file modes that match those used by "make install"
+	[7eb37242c920]
+
+	* pp:
+	Sync with upstream for Mac OS X fixes.
+	[97cba179041e]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Got back to using "install-sh -M" for files installed as non-
+	readable by owner. This fixes "make install" as non-root for package
+	building.
+	[967804ee77d6]
+
+2012-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
+	plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po:
+	Sync with translationproject.org
+	[0e53db12039a]
+
+	* Makefile.in, doc/Makefile.in, include/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Use -m not -M for install-sh for everything except setuid. Install
+	locale .mo files mode 0444, not 0644. If timedir parent doesn't
+	exist, use default dir mode, not 0700.
+	[8b6f64c92090]
+
+2012-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Re-sync with upstream; no longer need a local patch.
+	[97a2c7be5e59]
+
+	* mkpkg:
+	Add support for building Mac OS X packages.
+	[94d49ac223a4]
+
+	* pp:
+	Sync with upstream
+	[1c97654fc841]
+
+	* src/Makefile.in:
+	No longer need to define _PATH_SUDO_CONF here.
+	[2560905b7482]
+
+	* src/exec_common.c:
+	Fix noexec for Mac OS X.
+	[b7a744bca2c0]
+
+2012-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/Makefile.in:
+	Move _PATH_SUDO_CONF override to common to match sudo_debug.c
+	[f0788972a63a]
+
+	* plugins/sudoers/set_perms.c:
+	More complete fix for LDR_PRELOAD on AIX. The addition of
+	set_perm(PERM_ROOT) before calling the nss open functions (needed to
+	avoid a GNU TLS bug) also broke LDR_PRELOAD. Setting the effective
+	and then real uid to 0 for PERM_ROOT works around the issue.
+	[5888eda051af]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[997fe403e219]
+
+	* src/sudo.c:
+	Set real uid to root before calling sudo_edit() or run_command() so
+	that the monitor process is owned by root and not by the user.
+	Otherwise, on AIX at least, the monitor process shows up in ps as
+	belonging to the user (and can be killed by the user).
+	[d4772d7d2fc5]
+
+	* plugins/sudoers/set_perms.c:
+	For PERM_ROOT when using setreuid(), only set the euid to 0 prior to
+	the call to setuid(0) if the current euid is non-zero. This
+	effectively restores the state of things prior to rev 7bfeb629fccb.
+	Fixes a problem on AIX where LDR_PRELOAD was not being honored for
+	the command being executed.
+	[b9b40325b4dc]
+
+	* MANIFEST, compat/pw_dup.c, config.h.in, configure, configure.in,
+	include/missing.h, src/sudo.c:
+	Make a copy of the struct passwd in exec_setup() to make sure
+	nothing in the policy init modifies it.
+	[b721261c921f]
+
+2012-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod:
+	update copyright
+	[f9d229d1f65e]
+
+	* common/sudo_debug.c, include/sudo_debug.h:
+	g/c now-unused debug subsystems
+	[8f21726e698f]
+
+	* doc/sudo.pod, doc/sudoers.pod:
+	Enumerate the debug subsystems used by sudo and sudoers.
+	[ac4f84293d14]
+
+2012-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, common/sudo_conf.c, doc/sample.sudo.conf, doc/sudo.pod,
+	include/sudo_conf.h, src/sudo.c:
+	Normally, sudo disables core dumps while it is running. This
+	behavior can now be modified at run time with a line in sudo.conf
+	like "Set disable_coredumps false"
+	[ad14e0508b0d]
+
+	* NEWS:
+	Mention Spanish translation
+	[600f3205bd6e]
+
+	* common/sudo_debug.c:
+	Make sure we don't try to fall back to using the conversation
+	function for debugging in the main sudo process if we are unable to
+	open the debug file.
+	[ffa329aa908c]
+
+	* MANIFEST, src/po/es.mo, src/po/es.po:
+	Add sudo Spanish translation from translationproject.org
+	[c1906654e740]
+
+2012-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Better debug subsystem usage
+	[1a31f115743c]
+
+	* src/sudo.c:
+	Remove duplicate function prototypes
+	[ae04b00532eb]
+
+2012-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Error out if user specified --with-pam but we can't find the headers
+	or library. Also throw an error if the headers are present but the
+	library is not and vice versa.
+	[d6bf3e3d0aae]
+
+2012-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Fix the sudoers permission check when the expected sudoers mode is
+	owner-writable.
+	[8b0b7e770a22]
+
+2012-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Verify that we can link executables built with -D_FORTIFY_SOURCE
+	before using it.
+	[7578215d1a95]
+
+	* src/exec_common.c:
+	Fix potential off-by-one when making a copy of the environment for
+	LD_PRELOAD insertion. Fixes bug #534
+	[cc699cd551b6]
+
+	* configure, configure.in:
+	Add rudimentary check for _FORTIFY_SOURCE support by checking for
+	__sprintf_chk, one of the functions used by gcc to support it.
+	[a992673d2ef8]
+
+	* compat/stdbool.h, config.h.in, configure, configure.in:
+	Use AC_HEADER_STDBOOL instead of checking for stdbool.h ourselves.
+	[8ba1370884b3]
+
+2012-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen
+	[1e0b38397705]
+
+2012-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/sudo.c:
+	The change in 818e82ecbbfc that caused to exit when the monitor dies
+	created a race condition between the monitor exiting and the status
+	being read. All we really want to do is make sure that select()
+	notifies us that there is a status change when the monitor dies
+	unexpectedly so shutdown the socketpair connected to the monitor for
+	writing when it dies. That way we can still read the status that is
+	pending on the socket and select() on Linux will tell us that the fd
+	is ready.
+	[7fb5b30ea48d]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_common.c,
+	src/exec_pty.c, src/selinux.c, src/sesh.c, src/sudo.c, src/sudo.h,
+	src/sudo_exec.h:
+	Refactor disable_execute() and my_execve() into exec_common.c for
+	use by sesh.c. This fixes NOEXEC when SELinux is used. Instead of
+	disabling exec in exec_setup(), disable it immediately before
+	executing the command. Adapted from a diff by Arno Schuring.
+	[ec4d8b53db6b]
+
+2012-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure, configure.in:
+	Add custom version of AC_CHECK_LIB that uses the extra libs in the
+	cache value name. With this we no longer need to rely on a modified
+	version of autoconf.
+	[1c3b1d482d6c]
+
+2012-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Better handling of network functions that need -lsocket -lnsl
+	[cc386342ec2b]
+
+	* src/sudo.c:
+	When setting up the execution environment, set groups before
+	gid/egid like sudo 1.7 did.
+	[928e1c5fa6c1]
+
+	* configure, configure.in:
+	Remove "WARNING: unable to find foo() trying -lsocket -lnsl"
+	[84b23cdf138f]
+
+	* plugins/sudoers/sudoers.c:
+	For "sudo -g" prepend the specified group ID to the beginning of the
+	groups list. This matches BSD convention where the effective gid is
+	the first entry in the group list. This is required on newer FreeBSD
+	where the effective gid is not tracked separately and thus
+	setgroups() changes the egid if this convention is not followed.
+	Fixes bug #532
+	[782d6909108b]
+
+2012-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix sh warning; use "test" instead of "["
+	[c6ee3407f65e]
+
+	* src/exec.c:
+	When not logging I/O, use a signal handler that only forwards
+	SIGINT, SIGQUIT and SIGHUP when they are user-generated signals.
+	Fixes a race in the non-I/O logging path where the command may
+	receive two keyboard-generated signals; one from the kernel and one
+	from the sudo process.
+	[9638684e786a]
+
+	* src/exec.c:
+	Back out change that put the command in its own pgrp when not
+	logging I/O. It causes problems with pipelines.
+	[4fc9c6e1e770]
+
+2012-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/Makefile.in, configure, configure.in:
+	Only run compat regress tests on compat objects we actually build.
+	Fixes "make check" in the compat dir for systems that don't
+	implement character classes in fnmatch() or glob(). Bug #531
+	[a7addc305e83]
+
+2012-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
+	Update po files from translationproject.org
+	[5ea066af1356]
+
+2012-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Include parent directories in case they don't already exist. This
+	fixes a directory permissions problem with the AIX package when the
+	/usr/local directories don't already exist.
+	[a14f783dc827]
+
+	* pp:
+	sync with git version
+	[2f79d0543661]
+
+	* common/Makefile.in, plugins/sudoers/Makefile.in, src/Makefile.in:
+	regen dependencies
+	[24c92ca6c64d]
+
+	* MANIFEST, src/Makefile.in, src/sudo.c, src/sudo.h, src/ttyname.c:
+	Move tty name lookup code to its own file.
+	[58faf072cbf4]
+
+2012-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update with latest sudo 1.8.4 changes.
+	[a4ffe4f42528]
+
+	* config.h.in, configure, configure.in:
+	Remove obsolete template for HAVE_TIMESPEC
+	[75709007c906]
+
+	* src/sudo.c:
+	Add a check for devname() returning a fully-qualified pathname. None
+	of the devname() implementations do this today but you never know
+	when this might change.
+	[16813ace38f9]
+
+2012-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	For "visudo -c" also list include files that were checked when
+	everything is OK.
+	[ad6f85b35c9c]
+
+	* src/sudo.c:
+	The device name returned by devname() does not include the /dev/
+	prefix so we need to add it ourselves.
+	[b55285abb7ed]
+
+	* src/sudo.c:
+	Add debug warning if KERN_PROC sysctl fails or devname() can't
+	resolve the tty device to a name.
+	[b5a23916ba3a]
+
+	* common/sudo_debug.c:
+	The result of writev() is never checked so just cast to NULL.
+	[4be4e9b58d5b]
+
+	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po:
+	Update Esperanto, Finnish, Polish and Ukrainian translations from
+	translationproject.org.
+	[bb91bc6ad7e9]
+
+2012-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, src/sudo.c:
+	Add support for determining tty via sysctl on other BSD variants.
+	[fd15f63f719a]
+
+	* configure, configure.in:
+	Only check for struct kinfo_proc.ki_tdev on systems that support
+	sysctl.
+	[109b3f07a39d]
+
+	* src/sudo.c:
+	For FreeBSD, try the KERN_PROC_PID sysctl() first, falling back on
+	ttyname() of std{in,out,err}.
+	[95969b70bd68]
+
+2012-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, src/sudo.c:
+	On newer FreeBSD we can get the parent's tty name via sysctl().
+	[3207290501ee]
+
+	* plugins/sudoers/testsudoers.c:
+	Include locale.h
+	[a602cd0b8c2d]
+
+	* src/sudo.c:
+	Silence a gcc warning.
+	[8c6d0e3cd534]
+
+	* plugins/sudoers/bsm_audit.c:
+	Need to include gettext.h and sudo_debug.h; from John Hein
+	[447912aa7300]
+
+	* plugins/sudoers/iolog.c:
+	Initialize the debug framework from the I/O plugin too.
+	[ce1bf44d96d2]
+
+2012-01-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/testsudoers.c:
+	Enable debugging via sudo.conf.
+	[d85669c749d0]
+
+2012-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Use SUDO_DEBUG_ALIAS for alias checking functions.
+	[fb84af30dc76]
+
+	* configure, configure.in:
+	More complete test for getaddrinfo() that doesn't rely on the
+	network libraries already being added to LIBS.
+	[cbaf2369f4f0]
+
+2012-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/aix.c:
+	Add debug support.
+	[def1bdf24485]
+
+	* configure, configure.in:
+	Need -lsocket -lnsl for getaddrinfo(3) on Solaris at least.
+	[a2ea1c2eac61]
+
+	* compat/getaddrinfo.c:
+	Include errno.h and missing.h
+	[7d15e17cc2f2]
+
+	* .hgignore:
+	ignore doc/varsub
+	[417f9fc3231b]
+
+	* configure.in, doc/visudo.pod, plugins/sudoers/Makefile.in,
+	plugins/sudoers/gram.y, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/testsudoers.c, src/exec.c,
+	src/parse_args.c, src/sudo.c, src/sudo.h:
+	Update copyright year.
+	[5d0ffc7dd567]
+
+	* NEWS:
+	Update for sudo 1.8.4
+	[841e3eff9844]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen pot files
+	[c509cb45b66a]
+
+	* plugins/sudoers/sudoreplay.c:
+	Enable debugging via sudo.conf.
+	[5087aaee8484]
+
+	* plugins/sudoers/visudo.c:
+	Enable debugging via sudo.conf.
+	[04b067c16ed3]
+
+	* plugins/sudoers/visudo.c:
+	Allow "visudo -c" to work when we only have read-only access to the
+	sudoers include files.
+	[d8c6713fe5c1]
+
+	* doc/sudo.pod, doc/visudo.pod:
+	Mention the CONTRIBUTORS file, not HISTORY in AUTHOR section. Add
+	HISTORY section in sudo that points to HISTORY file.
+	[d1f1bcb051c5]
+
+	* doc/sudo.pod, doc/sudo_plugin.pod:
+	Document Debug setting in sudo.conf and debug_flags in plugin.
+	[acfc505aa4a9]
+
+2012-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Do not include GLOB_MARK in the flags we pass to glob(3). Fixes a
+	bug where a pattern like "/usr/*" include /usr/bin/ in the results,
+	which would be incorrectly be interpreted as if the sudoers file had
+	specified a directory. From Vitezslav Cizek.
+	[0cdb6252188c]
+
+	* INSTALL, config.h.in, configure, configure.in,
+	plugins/sudoers/auth/kerb5.c:
+	Add --enable-kerb5-instance configure option to allow people using
+	Kerberos V authentication to use a custom instance. Adapted from a
+	diff by Michael E Burr.
+	[e83af8bb7aa7]
+
+	* doc/sudo.pod, src/parse_args.c, src/sudo.c, src/sudo.h:
+	Remove -D debug_level option.
+	[cbcd05094347]
+
+	* doc/LICENSE:
+	Update copyright year.
+	[9f43dd7aa852]
+
+2012-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	parse_error is now bool, not int
+	[5ea7fb6fda38]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c:
+	Print a more sensible error if yyparse() returns non-zero but
+	yyerror() was not called.
+	[d44ec88f1183]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/getdate.c,
+	plugins/sudoers/gram.c:
+	Replace y.tab.c with the correct filename in #line directives.
+	[3c84fcb7e959]
+
+2012-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	When trying to determine the tty, fall back on /proc/ppid/fd/{0,1,2}
+	if the main process's fds 0-2 are not hooked up to a tty. Adapted
+	from a diff by Zdenek Behan.
+	[b9dfce12af85]
+
+	* src/exec.c:
+	When not logging I/O, put command in its own pgrp and make that the
+	controlling pgrp if the command is in the foreground. Fixes a race
+	in the non-I/O logging path where the command may receive two
+	keyboard-generated signals; one from the kernel and one from the
+	sudo process.
+	[d0e263ce496c]
+
+2011-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Quiet a bogus gcc warning.
+	[2009669e0608]
+
+	* src/parse_args.c, src/sudo.h:
+	Fix warnings related to sudo.conf accessors.
+	[08ddc29ba50b]
+
+	* common/sudo_conf.c, include/sudo_conf.h:
+	Separate sudo.conf parsing from plugin loading and move the parse
+	functions into the common lib so that visudo, etc. can use them.
+	[f1fc659a8079]
+
+	* MANIFEST, common/Makefile.in, src/Makefile.in, src/load_plugins.c,
+	src/parse_args.c, src/sudo.c, src/sudo_plugin_int.h:
+	Separate sudo.conf parsing from plugin loading and move the parse
+	functions into the common lib so that visudo, etc. can use them.
+	[e1f2cf6bd57a]
+
+	* doc/sudoers.pod, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/sudoers.c, src/sudo.c:
+	Remove support for noexec_file in sudoers and the plugin API
+	[3e2fd58879b5]
+
+	* plugins/sudoers/sudoers.c:
+	Don't dump interfaces if there are none.
+	[9081bb4d3e9e]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
+	Add missing %s printf escape to the group_plugin, iolog_dir and
+	iolog_file descriptions.
+	[7db03f2b737e]
+
+2011-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/def_data.in, src/exec.c:
+	Fix typo in visiblepw description; from Joel Pickett
+	[2fb4b26d5c2c]
+
+2011-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, configure, configure.in, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
+	plugins/sudoers/login_class.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/sudo.c:
+	When running a login shell with a login_class specified, use
+	LOGIN_SETENV instead of rolling our own login.conf setenv support
+	since FreeBSD's login.conf has more than just setenv capabilities.
+	This requires us to swap the plugin-provided envp for the global
+	environ before calling setusercontext() and then stash the resulting
+	environ pointer back into the command details, which is kind of a
+	hack.
+	[ad4f1190143b]
+
+	* plugins/sudoers/Makefile.in:
+	If srcdir is "." just use the basename of the yacc/lex file when
+	generating the C version. This matches the generated files currently
+	in the repo.
+	[0b11c3df87a8]
+
+	* doc/Makefile.in, plugins/sudoers/Makefile.in:
+	Clean up the DEVEL noise
+	[9de2afe457fd]
+
+	* src/exec.c:
+	Handle different Unix domain socket (actually socketpair) semantics
+	in BSD vs. Linux. In BSD if one end of the socketpair goes away
+	select() returns the fd as readable and the read will fail with
+	ECONNRESET. This doesn't appear to happen on Linux so if we notice
+	that the monitor process has died when I/O logging is enabled,
+	behave like the command has exited. This means we log the wait
+	status of the monitor, not the command, but there is nothing else we
+	can do at that point. This should only be an issue if SIGKILL is
+	sent to the monitor process.
+	[818e82ecbbfc]
+
+	* src/exec_pty.c:
+	Catch common signals in the monitor process so they get passed to
+	the command. Fixes a problem when the entire login session is killed
+	when ssh is disconnected or the terminal window is closed.
+	Previously, the monitor would exit and plugin's close method would
+	not be called.
+	[0e4658263138]
+
+	* INSTALL, configure, configure.in:
+	Mention how to configure pam_hpsec on HP-UX to play nicely with
+	sudo.
+	[a7294cd8ce98]
+
+2011-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Escape values in the search expression as per RFC 4515.
+	[c2adbc5db92b]
+
+	* doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	No need for install target to depend explicitly on install-dirs, the
+	install-foo targets all depend on it.
+	[62a36ed98279]
+
+2011-12-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* .hgignore:
+	ignore src/sesh
+	[463d492f6782]
+
+	* MANIFEST, common/Makefile.in, configure, configure.in, mkdep.pl,
+	plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
+	plugins/sudoers/login_class.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/Makefile.in:
+	Add support for setenv entries in login.conf. We can't use
+	LOGIN_SETENV since the plugin sets up the envp the command is
+	executed with. Also regen the Makefile.in files while here. Fixes
+	bug #527
+	[088d507926e2]
+
+2011-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, aclocal.m4, compat/getaddrinfo.c, compat/getaddrinfo.h,
+	config.h.in, configure, configure.in, plugins/sudoers/sudoers.c,
+	src/net_ifs.c:
+	Add getaddrinfo() for those without it, written by Russ Allbery
+	[4cf9ac831222]
+
+	* doc/Makefile.in:
+	Restore PACKAGE_TARNAME, it is used in docdir
+	[9d65e893edb1]
+
+	* MANIFEST, compat/stdbool.h:
+	SunPro C Compiler also has a _Bool builtin. Also add stdbool.h to
+	the MANIFEST
+	[e67700dc5621]
+
+	* common/atobool.c, common/term.c, src/exec.c:
+	Remove duplicate return statements.
+	[48a20d5215fd]
+
+	* plugins/sudoers/auth/bsdauth.c:
+	Remove inaccurate comment
+	[e7f0265cf657]
+
+	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/sudoers.c:
+	Fetch the login class for the user we authenticate specifically when
+	using BSD authentication. That user may have a different login class
+	than what we will use to run the command. When setting the login
+	class for the command, use the target user's struct passwd, not the
+	invoking user's. Fixes bug 526
+	[21bf0af892f7]
+
+	* compat/Makefile.in, configure, configure.in, doc/Makefile.in,
+	plugins/sudoers/Makefile.in:
+	Replace @DEV@ prefix with DEVEL variable so we can do "make DEVEL=1"
+	[8ee6e0891f27]
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_fill.c:
+	Fix "make check" fallout from the sudo_conv changes in sudo_debug.
+	[b0aaa63c9081]
+
+	* common/fileops.c, common/sudo_debug.c, configure, configure.in,
+	include/fileops.h, plugins/sample/Makefile.in,
+	plugins/sample/sample_plugin.c, plugins/sample_group/Makefile.in,
+	plugins/sample_group/sample_group.c, plugins/sudoers/alias.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
+	plugins/sudoers/env.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/visudo.c, src/exec.c, src/exec_pty.c,
+	src/load_plugins.c, src/sudo.c, src/sudo.h, src/sudo_exec.h,
+	src/sudo_plugin_int.h, src/utmp.c:
+	Use stdbool.h instead of rolling our own TRUE/FALSE macros.
+	[dcb0bbc42fc9]
+
+2011-12-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/stdbool.h, config.h.in, configure, configure.in:
+	Add stdbool.h for systems without it.
+	[18bd9dda1dcd]
+
+	* aclocal.m4, config.h.in, configure, configure.in:
+	No longer need SUDO_CHECK_TYPE and SUDO_TYPE_* now that the default
+	includes have unistd.h in them. Add check for socklen_t for upcoming
+	getaddrinfo compat.
+	[d705465bef69]
+
+	* common/fileops.c, compat/nanosleep.c, config.h.in, configure,
+	configure.in, plugins/sudoers/interfaces.c,
+	plugins/sudoers/interfaces.h, plugins/sudoers/match_addr.c,
+	plugins/sudoers/sudoreplay.c, src/net_ifs.c:
+	Use HAVE_STRUCT_TIMESPEC and HAVE_STRUCT_IN6_ADDR instead of
+	HAVE_TIMESPEC and HAVE_IN6_ADDR respectively.
+	[fa187c9bd2be]
+
+	* src/sudo_noexec.c:
+	No longer need to include time.h here as missing.h does not use
+	time_t.
+	[fa3a089bf5b1]
+
+2011-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Fix mode on sudoers as needed when the -f option is not specified.
+	[7a1c40b0dc03]
+
+	* MANIFEST, src/po/sr.mo, src/po/sr.po:
+	Add Serbian translation for sudo from translationproject.org
+	[9a0c25e25cba]
+
+	* common/sudo_debug.c, plugins/sudoers/sudoers.c, src/load_plugins.c,
+	src/parse_args.c:
+	No longer pass debug_file to plugin, plugins must now use
+	CONV_DEBUG_MSG
+	[810cda1abb0b]
+
+	* mkpkg:
+	Build PIE executables for newer Debian and Ubuntu
+	[1c5f25f8904a]
+
+	* common/sudo_debug.c:
+	Include time.h for ctime() prototype.
+	[10090cf3bca1]
+
+2011-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_debug.c, include/sudo_debug.h, src/exec.c,
+	src/exec_pty.c:
+	Do not close error pipe or debug fd via closefrom() as we need them
+	to report an exec error should one occur.
+	[732f6587fafa]
+
+	* doc/sudoers.ldap.pod:
+	Document that a sudoUser may now be a group ID.
+	[2fef46b9d3d3]
+
+	* plugins/sudoers/ldap.c:
+	Add support for permitting access by group ID in addition to group
+	name.
+	[b9450fdf1f69]
+
+	* plugins/sudoers/ldap.c:
+	Older Netscape LDAP SDKs don't prototype ldapssl_set_strength()
+	[d62a1e7cff4f]
+
+	* compat/fnmatch.c, compat/fnmatch.h, doc/LICENSE:
+	Replace UCB fnmatch.c with a non-recursive version written by
+	William A. Rowe Jr.
+	[354d3384adb8]
+
+	* plugins/sudoers/auth/pam.c:
+	Fix typo, return_debug vs. debug_return
+	[1b522efcbb0d]
+
+2011-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po:
+	Update Japanese sudoers translation from translationproject.org
+	[ec0f2beaad36]
+
+	* doc/sudoers.pod:
+	Make the env_reset descriptions consistent.
+	[41c056f02688]
+
+2011-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Do multiple expansion when expanding paths to the noexec file, sesh
+	and the plugin directory. Adapted from a diff by Mike Frysinger
+	[d7e16c876c66]
+
+	* common/Makefile.in:
+	regen
+	[9d729e09c186]
+
+2011-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* .hgignore:
+	Add ignore file; from Mike Frysinger
+	[1fa8d52425f8]
+
+	* mkdep.pl:
+	no longer save old Makefile.in to .old
+	[378dd2395545]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	regen
+	[769faf517720]
+
+	* config.guess, config.sub, configure, ltmain.sh, m4/libtool.m4,
+	m4/ltoptions.m4, m4/ltversion.m4:
+	Update to libtool 2.4.2
+	[9dac78d84b4f]
+
+2011-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers_version.h:
+	Bump grammar version for #include and #includedir relative path
+	support.
+	[82a4f7cd8f71]
+
+2011-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod, plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add support for relative paths in #include and #includedir
+	[4d6e3bd0c24f]
+
+	* plugins/sudoers/Makefile.in:
+	Fix install-plugin when shared objects are unsupported or disabled.
+	[cbdd770a7a1b]
+
+	* plugins/sudoers/goodpath.c:
+	Don't write to sbp if it is NULL
+	[fc438f8e8570]
+
+2011-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Remove all sudo/sudoers .mo files on uninstall If LINGUAS is set,
+	only install matching .mo files
+	[c1dc30ab4ebc]
+
+2011-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/group_plugin.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.c, src/conversation.c:
+	Fix non-dynamic (no dlopen) sudo build.
+	[b0bd3fa925a3]
+
+	* configure, configure.in:
+	Don't error out if the user specified --disable-shared
+	[cf035dd1e5cc]
+
+	* common/sudo_debug.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/conversation.c:
+	Use SUDO_CONV_DEBUG_MSG in the plugin instead of writing directly to
+	the debug file.
+	[640c62f83251]
+
+	* plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/sudoers.h:
+	Make sudo_goodpath() return value bolean
+	[fea2d59a6e55]
+
+	* INSTALL, MANIFEST, configure, configure.in, mkdep.pl,
+	plugins/sudoers/Makefile.in, plugins/sudoers/auth/securid.c:
+	Remove obsolete securid auth method.
+	[4e54f860214b]
+
+	* plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h:
+	Prefix authentication functions with a "sudo_" prefix to avoid
+	namespace problems.
+	[581d74063ea1]
+
+	* INSTALL, MANIFEST, config.h.in, configure, configure.in,
+	doc/TROUBLESHOOTING, mkdep.pl, plugins/sudoers/Makefile.in,
+	plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/env.c:
+	Remove the old Kerberos IV support
+	[2e4b4a44209d]
+
+2011-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Don't print garbage at the end of the custom lecture.
+	[44bb788fafaa]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add lexer tracing as debug@parser
+	[d850f3f9d414]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/gram.c,
+	plugins/sudoers/match.c, plugins/sudoers/parse.c,
+	plugins/sudoers/regress/parser/check_fill.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/visudo.c:
+	Revert 003bdb078a15. We need to #include <gram.h> not "gram.h" and
+	<def_data.h> and not "def_data.h" when generating the parser in a
+	build dir.
+	[7da701def753]
+
+2011-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkdep.pl, plugins/sudoers/Makefile.in:
+	Better devdir support in mkdep.pl
+	[7dcec57bd155]
+
+	* plugins/sudoers/Makefile.in:
+	Add devdir before srcdir in include path and fix up dependecies
+	accordingly.
+	[6e9958eca485]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c:
+	#include "gram.h" not <gram.h> and "def_data.h" and not
+	<def_data.h>.
+	[003bdb078a15]
+
+	* sudo.pp:
+	Mark libexec files as optional. If we build without shared object
+	support, libexec is not used.
+	[4bffcf482219]
+
+	* src/load_plugins.c:
+	Change Debug sudo.conf setting to take a program name as the first
+	argument. In the future, this will allow visudo and sudoreplay to
+	use their own Debug entries.
+	[cfb8f7e4867c]
+
+	* src/sudo.c:
+	fix sudo_debug_printf priority
+	[dcb67e965609]
+
+	* plugins/sudoers/sudoers.c:
+	add missing debug_return_int
+	[d88ec450c592]
+
+2011-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/sudo_debug.c, include/error.h, include/sudo_debug.h,
+	plugins/sudoers/logging.c, src/exec.c, src/exec_pty.c:
+	Fold SUDO_DEBUG_PROGERR and SUDO_DEBUG_SYSERR into SUDO_DEBUG_ERROR
+	[dcee8efc294f]
+
+	* doc/UPGRADE:
+	Add missing word in HOME security note.
+	[fd844fdcc1ac]
+
+	* plugins/sudoers/testsudoers.c:
+	Prevent "testsudoers -d username" from trying to malloc(0).
+	[839126e56e8c]
+
+2011-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/sudoers/test10.in,
+	plugins/sudoers/regress/sudoers/test10.out.ok,
+	plugins/sudoers/regress/sudoers/test10.toke.ok,
+	plugins/sudoers/regress/sudoers/test10.toke.out.ok,
+	plugins/sudoers/regress/sudoers/test11.in,
+	plugins/sudoers/regress/sudoers/test11.out.ok,
+	plugins/sudoers/regress/sudoers/test11.toke.ok,
+	plugins/sudoers/regress/sudoers/test11.toke.out.ok,
+	plugins/sudoers/regress/sudoers/test12.in,
+	plugins/sudoers/regress/sudoers/test12.out.ok,
+	plugins/sudoers/regress/sudoers/test12.toke.ok,
+	plugins/sudoers/regress/sudoers/test13.in,
+	plugins/sudoers/regress/sudoers/test13.out.ok,
+	plugins/sudoers/regress/sudoers/test13.toke.ok,
+	plugins/sudoers/regress/sudoers/test9.in,
+	plugins/sudoers/regress/sudoers/test9.out.ok,
+	plugins/sudoers/regress/sudoers/test9.toke.ok,
+	plugins/sudoers/regress/sudoers/test9.toke.out.ok:
+	Tests for empty sudoers (should parse OK) and syntax errors within a
+	line (should report correct line number) both with and without the
+	trailing newline.
+	[d57c879c4718]
+
+	* plugins/sudoers/regress/sudoers/test4.out.ok,
+	plugins/sudoers/regress/sudoers/test5.out.ok,
+	plugins/sudoers/regress/sudoers/test7.out.ok,
+	plugins/sudoers/regress/sudoers/test8.out.ok,
+	plugins/sudoers/testsudoers.c:
+	Print line number when there is a parser error.
+	[5444ef6ac6dc]
+
+2011-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Keep track of the last token returned. On error, if the last token
+	was COMMENT, decrement sudolineno since the error most likely
+	occurred on the preceding line. Previously we always uses
+	sudolineno-1 which will give the wrong line number for errors within
+	a line.
+	[d661a03a64da]
+
+2011-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	update with sudo 1.8.3p1 info
+	[0f79ff31f602]
+
+	* plugins/sudoers/sudoers.c:
+	Fix crash when "sudo -g group -i" is run. Fixes bug 521
+	[a3087ae337c4]
+
+2011-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Make alias_remove_recursive() return TRUE/FALSE as its callers
+	expect and remove two unused arguments. Fixes bug 519.
+	[2ee3b2882844]
+
+	* plugins/sudoers/regress/visudo/test1.out.ok,
+	plugins/sudoers/regress/visudo/test1.sh:
+	Add regress test for bugzilla 519
+	[48000ebedf97]
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_fill.c:
+	Disable warning/error wrapping in regress tests.
+	[373c589ba561]
+
+2011-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Do compile-po as part of sync-po so that the .mo files get rebuild
+	automatically when we sync with translationproject.org
+	[83f3cbfc2f33]
+
+	* plugins/sudoers/Makefile.in:
+	check_addr needs to link with the network libraries on Solaris
+	[322bd70e316e]
+
+	* plugins/sudoers/match.c:
+	When matching a RunasAlias for a runas group, pass the alias in as
+	the group_list, not the user_list. From Daniel Kopecek.
+	[766545edf141]
+
+	* plugins/sudoers/check.c, plugins/sudoers/sudoers.c:
+	We need to init the auth system regardless of whether we need a
+	password since we will be closing the PAM session in the monitor
+	process. Fixes a crash in the monitor on Solaris; bugzilla #518
+	[e82809f86fb3]
+
+2011-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	Get rid of done: label. If the child exits we still need to close
+	the pty, update utmp and restore the SELinux tty context.
+	[cc127bf48405]
+
+2011-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/Makefile.in, common/atobool.c, common/fileops.c,
+	common/fmt_string.c, common/lbuf.c, common/list.c,
+	common/setgroups.c, common/term.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/alias.c, plugins/sudoers/audit.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/logwrap.c, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	src/Makefile.in, src/conversation.c, src/exec.c, src/exec_pty.c,
+	src/get_pty.c, src/load_plugins.c, src/net_ifs.c, src/parse_args.c,
+	src/selinux.c, src/sudo.c, src/sudo.h, src/sudo_edit.c,
+	src/tgetpass.c, src/ttysize.c, src/utmp.c:
+	Add debug_decl/debug_return (almost) everywhere. Remove old
+	sudo_debug() and convert users to sudo_debug_printf().
+	[8f3bbf907b67]
+
+	* common/alloc.c, include/error.h, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/error.c:
+	Wrap error/errorx and warning/warningx functions with debug
+	statements. Disable wrapping for standalone sudoers programs as well
+	as memory allocation functions (to avoid infinite recursion).
+	[562ed7b5ae8d]
+
+	* README, config.h.in, configure, configure.in:
+	Add checks for __func__ and __FUNCTION__ and mention that we now
+	require a cpp that supports variadic macros.
+	[314cfe4c5d23]
+
+	* MANIFEST, common/Makefile.in, common/sudo_debug.c,
+	include/sudo_debug.h, include/sudo_plugin.h, src/conversation.c,
+	src/load_plugins.c, src/parse_args.c, src/sudo.c,
+	src/sudo_plugin_int.h:
+	New debug framework for sudo and plugins using /etc/sudo.conf that
+	also supports function call tracing.
+	[cded741e9f10]
+
+2011-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po:
+	Update Japanese sudoers translation from translationproject.org
+	[c24725775e32]
+
+2011-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Override and ignore the --disable-static option. Sudo already runs
+	libtool with -tag=disable-static where applicable and we need non-
+	PIC objects to build the executables.
+	[aff1227b853a]
+
+2011-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Add sudoedit fix
+	[74655c7ccad1]
+
+	* plugins/sudoers/po/sudoers.pot:
+	regen pot files
+	[28d89a831ed3]
+
+	* plugins/sudoers/env.c:
+	Ignore set_logname (which is now the default) for sudoedit since we
+	want the LOGNAME, USER and USERNAME environment variables to refer
+	to the calling user since that is who the editor runs as. This
+	allows the editor to find the user's startup files. Fixes bugzilla
+	#515
+	[6c5dddf5ff05]
+
+	* plugins/sudoers/pwutil.c:
+	Instead of trying to grow the buffer in make_grlist_item(), simply
+	increase the total length, free the old buffer and allocate a new
+	one. This is less error prone and saves us from having to adjust all
+	the pointers in the buffer. This code path is only taken when there
+	are groups longer than the length of the user field in struct utmp
+	or utmpx, which should be quite rare.
+	[5587dc8cffaf]
+
+	* src/po/it.mo:
+	Add Italian translation for sudo from translationproject.org
+	[1b3dd886e7e3]
+
+	* MANIFEST, NEWS, plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
+	src/po/ja.mo, src/po/ja.po:
+	Japanese translation for sudo and sudoers from
+	translationproject.org
+	[c06dd866be6e]
+
+2011-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	sudoreplay depends on timestr.lo too; from Mike Frysinger
+	[b9e73214b2f1]
+
+2011-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot:
+	Regen sudoers pot file.
+	[019588bafdb3]
+
+	* NEWS:
+	Update with latest sudo 1.8.3 news
+	[6868042a88e9]
+
+	* plugins/sudoers/sudoers.c:
+	It appears that LDAP or NSS may modify the euid so we need to be
+	root for the open(). We restore the old perms at the end of
+	sudoers_policy_open().
+	[2da67a5497ef]
+
+	* plugins/sudoers/set_perms.c:
+	Better warning message on setuid() failure for the setreuid()
+	version of set_perms().
+	[07abcfe7bd9a]
+
+2011-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Delref auth_pw at the end of check_user() instead of getting a ref
+	twice.
+	[cb665f55e6a5]
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c:
+	Make sudo_auth_{init,cleanup} return TRUE on success and check for
+	sudo_auth_init() return value in check_user().
+	[92631c919356]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Do not return without restoring permissions.
+	[59ef40b6696a]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	regen pot files
+	[9f320a340b7c]
+
+	* plugins/sudoers/auth/API, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/check.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Modify the authentication API such that the init and cleanup
+	functions are always called, regardless of whether or not we are
+	going to verify a password. This is needed for proper PAM session
+	support.
+	[19a53f3fb596]
+
+	* compat/Makefile.in, mkdep.pl, plugins/sudoers/Makefile.in:
+	Add missing dependency for getspwuid.lo and regen other depends.
+	[f7f70eae819a]
+
+	* plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/sudoers.c:
+	Fix a PAM_USER mismatch in session open/close. We update PAM_USER to
+	the target user immediately before setting resource limits, which is
+	after the monitor process has forked (so it has the old value).
+	Also, if the user did not authenticate, there is no pamh in the
+	monitor so we need to init pam here too. This means we end up
+	calling pam_start() twice, which should be fixed, but at least the
+	session is always properly closed now.
+	[fbc063a2a872]
+
+	* src/utmp.c:
+	Add check for old being NULL in utmp_setid(); from Steven McDonald
+	[e87126442f2e]
+
+2011-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	If the invoking user cannot be resolved by uid fake the struct
+	passwd and store it in the cache so we can delref it on exit.
+	[a27e2f8b9f5e]
+
+2011-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Don't error out if the group plugin cannot be loaded, just warn.
+	[0fbfcd381e33]
+
+2011-09-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Quiet a false positive found by several static analysis tools. These
+	tools don't know that log_error() does not return (it longjmps to
+	error_jmp which returns to the sudo front-end).
+	[33d0469df21b]
+
+2011-09-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/da.mo, plugins/sudoers/po/eo.mo,
+	plugins/sudoers/po/fi.mo, plugins/sudoers/po/pl.mo,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/zh_CN.mo, src/po/it.po:
+	Add Italian translation for sudo from translationproject.org Regen
+	.mo files
+	[c3c888a82be6]
+
+2011-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Update to current reality and add bit about ssh auth
+	[184a1e7c2eeb]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Make "verbose" static; fixes a namespace clash with
+	pam_ssh_agent_auth (and it doesn't need to be extern these days).
+	[cc38d2eb2f4c]
+
+	* config.h.in, configure, configure.in, src/get_pty.c:
+	FreeBSD has libutil.h not util.h
+	[dab4c94b6d4f]
+
+	* configure, configure.in:
+	Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
+	[41c362f0a92a]
+
+2011-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/da.po, plugins/sudoers/po/eo.po,
+	plugins/sudoers/po/fi.po, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.po, plugins/sudoers/po/zh_CN.po:
+	Update po files from translationproject.org
+	[1e99e147c7fa]
+
+2011-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Add support for DEREF in ldap.conf.
+	[3c1937a98547]
+
+	* Makefile.in:
+	install target should depend on ChangeLog too, not just install-doc
+	[1a7c83941175]
+
+	* doc/sudoers.pod:
+	Only iolog_file (not iolog_dir) supports mktemp-style suffixes.
+	[0eca47d60a2c]
+
+	* NEWS:
+	Sync with 1.8 branch for sudo 1.8.2 and 1.8.3 changes.
+	[0501415cc5ff]
+
+	* doc/UPGRADE:
+	Document group lookup change and possible side effects.
+	[585743e1ebf7]
+
+	* configure, configure.in:
+	Fix some square brackets in case statements that needed to be
+	doubled up. While here, use $OSMAJOR when it makes sense.
+	[8973343f4696]
+
+	* plugins/sudoers/pwutil.c:
+	Fix a crash in make_grlist_item() on 64-bit machines with strict
+	alignment.
+	[c89508c73c46]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
+	Remove list_options() function that is no longer used now that "sudo
+	-L" is gone.
+	[fcc6a776c135]
+
+	* configure, configure.in:
+	Error message if user tries --with-CC
+	[ec5b478f813a]
+
+	* configure, configure.in:
+	Check for -libmldap too when looking for ldap libs, which is the
+	Tivoli Directory Server client library.
+	[bb3007a97206]
+
+2011-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/parse.c:
+	Honor NOPASSWD tag for denied commands too.
+	[8dd92656db92]
+
+2011-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.in:
+	Remove --with-CC option; it doesn't work correctly now that we use
+	libtool. Users can get the same effect by setting the CC environment
+	variable when running configure.
+	[ec22bd1a55e0]
+
+2011-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, plugins/sudoers/visudo.c,
+	src/sudo_edit.c:
+	Assume all modern systems support fstat(2).
+	[6a5a8985f6a0]
+
+2011-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/regress/glob/globtest.c, config.h.in, configure,
+	configure.in, include/missing.h, plugins/sudoers/sudoers.h,
+	src/sudo.h, src/sudo_noexec.c:
+	Add configure test for missing errno declaration and only declare it
+	ourselves if it is missing.
+	[456e76c809a2]
+
+	* plugins/sudoers/alias.c:
+	Include errno.h before sudo.h to avoid conflicting with the system
+	definition of errno.
+	[d0b97e392512]
+
+2011-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/parser/check_addr.c:
+	Only print individual check status when there is a failure.
+	[2ac704c91441]
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/parser/check_addr.c:
+	Add calls to setprogname() for test programs.
+	[a8d9b420e826]
+
+	* configure, configure.in:
+	Add -Wall and -Werror after all tests so they don't cause failures.
+	[2661188ff3fa]
+
+	* plugins/sudoers/Makefile.in:
+	Actually run check_addr in the check target
+	[0b2778bc86bf]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/match.c,
+	plugins/sudoers/match_addr.c,
+	plugins/sudoers/regress/parser/check_addr.c,
+	plugins/sudoers/regress/parser/check_addr.in:
+	Split out address matching into its own file and add regression
+	tests for it.
+	[12b9a2bf8dba]
+
+2011-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	When matching an address with a netmask in sudoers, AND the mask and
+	addr before checking against the local addresses.
+	[9747bb6d7b1c]
+
+2011-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	Fix netmask matching.
+	[a3c8f8cc1464]
+
+	* plugins/sudoers/visudo.c:
+	Don't assume all editors support the +linenumber command line
+	argument, use a whitelist of known good editors.
+	[21d43a91fd10]
+
+2011-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c, plugins/sudoers/visudo.c, src/exec.c,
+	src/exec_pty.c, src/sudo.c:
+	Silence compiler warnings on Solaris with gcc 3.4.3
+	[da620bae6fdb]
+
+	* mkpkg:
+	Fix building on RHEL 3
+	[f3227fb2a252]
+
+	* INSTALL, configure, configure.in:
+	Add --enable-werror configure option.
+	[fec2cdb95543]
+
+	* common/setgroups.c:
+	setgroups() proto lives in grp.h on RHEL4, perhaps others.
+	[de91c0de5a98]
+
+	* configure, configure.in:
+	Use PAM by default on AIX 6 and higher.
+	[e16493208e5f]
+
+2011-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
+	src/po/eo.mo, src/po/eo.po:
+	Add new Esperanto translation from translationproject.org
+	[0d9a59e04c64]
+
+2011-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog_path.c:
+	Quiet an innocuous valgrind warning.
+	[0582b6027161]
+
+2011-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog_path.c,
+	plugins/sudoers/regress/iolog_path/data:
+	Fix expansion of strftime() escapes in log_dir and add a regress
+	test that exhibited the problem.
+	[a5c7c1c4c589]
+
+	* plugins/sudoers/Makefile.in:
+	Fix "make check" return value.
+	[33b58e175230]
+
+2011-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	Regen pot files
+	[063841aac19b]
+
+	* Makefile.in:
+	Fix logic inversion in pot file up to date check.
+	[f6a8ca8654df]
+
+2011-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add caching for gettext() checks.
+	[01b7200f6105]
+
+	* configure, configure.in:
+	Better handling of libintl header and library mismatch.
+	[9a49b1d4db69]
+
+2011-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Also check sudoers gid if sudoers is group writable.
+	[23ef96ca0d33]
+
+2011-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	If dlopen is present but libtool doesn't find it, error out since it
+	probably means that libtool doesn't support the system.
+	[a9da0a5f7941]
+
+	* mkpkg:
+	configure args on the command line should override builtin defaults.
+	Disable NLS for non-Linux/Solaris unless explicitly enabled.
+	[b2fb05614504]
+
+	* plugins/sudoers/auth/aix_auth.c:
+	Fix loop that calls authenticate(). If there was an error message
+	from authenticate(), display it.
+	[063a0c4f0b9a]
+
+2011-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* m4/libtool.m4, m4/ltversion.m4:
+	Update to autoconf 2.68 and libtool 2.4
+	[5a912a6eb67b]
+
+	* config.guess, config.sub, configure, configure.in, ltmain.sh:
+	Update to autoconf 2.68 and libtool 2.4
+	[931ab56aecf6]
+
+	* doc/sudoers.pod:
+	Fix typo; OPT should be OTP
+	[e97bd2e46544]
+
+	* plugins/sudoers/Makefile.in:
+	Rename libsudoers convenience library to libparsesudoers to avoid
+	libtool confusion.
+	[2a89a613f537]
+
+2011-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
+	Add Danish sudoers translation from translationproject.org
+	[27b96e85eb13]
+
+	* plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c:
+	Add dedicated callback function for runas_default sudoers setting
+	that only sets runas_pw if no runas user or group was specified by
+	the user.
+	[b8382d8eea34]
+
+2011-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
+	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po, src/po/ru.mo,
+	src/po/ru.po:
+	Update Finish, Polish, Russian and Ukrainian translations from
+	translationproject.org.
+	[f9339aff664e]
+
+	* plugins/sudoers/defaults.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c:
+	Go back to using a callback for runas_default to keep runas_pw in
+	sync. This is needed to make per-entry runas_default settings work
+	with LDAP-based sudoers. Instead of declaring it a callback in
+	def_data.in, sudo and testsudoers poke sudo_defs_table[] which is a
+	bit naughty, but avoids requiring stub functions in visudo and the
+	tests.
+	[9aaefb908415]
+
+2011-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Add check for out of date message catalogs when doing "make dist".
+	[e45a29b612f4]
+
+2011-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[d6f9ad26774a]
+
+	* configure.in:
+	Make sure compiler supports static-libgcc before using it.
+	[b01bd9566e50]
+
+2011-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/Makefile.in:
+	Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc
+	[c99c7ab3edef]
+
+2011-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/fi.mo, plugins/sudoers/po/pl.mo,
+	plugins/sudoers/po/pl.po, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/zh_CN.mo, src/po/ru.mo, src/po/ru.po,
+	src/po/zh_CN.mo:
+	Add new Russian sudo translation from translationproject.org and
+	rebuild the other translation files.
+	[e20015459056]
+
+2011-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/fi.po, plugins/sudoers/po/pl.po:
+	Update Finish and Polish translations from translationproject.org
+	[4e3dbba4a1de]
+
+	* plugins/sudoers/sudoers.c, src/parse_args.c, src/sudo.c:
+	Go back to escaping the command args for "sudo -i" and "sudo -s"
+	before calling the plugin. Otherwise, spaces in the command args are
+	not treated properly. The sudoers plugin will unescape non- spaces
+	to make matching easier.
+	[dfa2c4636f33]
+
+2011-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Fix some potential problems found by the clang static analyzer, none
+	serious.
+	[ff64aa74aae6]
+
+	* plugins/sudoers/po/uk.po, plugins/sudoers/po/zh_CN.po,
+	src/po/zh_CN.po:
+	Updated Ukranian and Chinese (simplified) po files from
+	translationproject.org
+	[ec792becb48e]
+
+2011-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/pl.po:
+	Updated Polish translation from translationproject.org
+	[a3af53cb649c]
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	Rebuild pot files
+	[c650524c0f0a]
+
+	* plugins/sudoers/audit.c, plugins/sudoers/sudoers.c:
+	Don't try to audit failure if the runas user does not exist. We
+	don't have the user's command at this point so there is nothing to
+	audit. Add a NULL check in audit_success() and audit_failure() just
+	to be on the safe side.
+	[2a0007c2022f]
+
+	* mkpkg:
+	Add -g to CFLAG for PIE builds.
+	[32a0a9693c9c]
+
+2011-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/sudo.c:
+	Remove fallback to per-group lookup when matching groups in sudoers.
+	The sudo front-end will now use getgrouplist() to get the user's
+	list of groups if getgroups() fails or returns zero groups so we
+	always have a list of the user's groups. For systems with
+	mbr_check_membership() which support more that NGROUPS_MAX groups
+	(Mac OS X), skip the call to getgroups() and use getgrouplist() so
+	we get all the groups.
+	[51b3ed8c600b]
+
+2011-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/setgroups.c:
+	Fix setgroups() fallback code on EINVAL.
+	[2b6faecd56a4]
+
+	* plugins/sudoers/set_perms.c:
+	Fix two PERM_INITIAL cases that were still using user_gids.
+	[9680bab0acc6]
+
+	* MANIFEST:
+	Add Polish sudo message catalog
+	[8bb40c3ba576]
+
+	* plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	user_group is no longer used, remove it
+	[9acede0fe6c5]
+
+2011-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po:
+	Add Polish translation from translationproject.org
+	[afac5c638573]
+
+	* MANIFEST, common/Makefile.in, common/setgroups.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.h, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c:
+	Add a wrapper for setgroups() that trims off extra groups and
+	retries if setgroups() fails. Also add some missing addrefs for
+	PERM_USER and PERM_FULL_USER.
+	[224dfd8aae5c]
+
+	* MANIFEST, compat/Makefile.in, compat/getgrouplist.c, config.h.in,
+	configure, configure.in, include/missing.h, mkdep.pl,
+	plugins/sudoers/ldap.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/sudo.c:
+	Instead of keeping separate groups and gids arrays, create struct
+	group_info and use it to store both, along with a count for each.
+	Cache group info on a per-user basis using getgrouplist() to get the
+	groups. We no longer need special to special case the user or list
+	user for user_in_group() and thus no longer need to reset the groups
+	list when listing another user.
+	[0ad849a8b2d5]
+
+	* src/preload.c:
+	Don't rely on NULL since we don't include a header for it.
+	[b40937f1890c]
+
+2011-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod:
+	Fix typo
+	[c1035360e169]
+
+2011-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Do not shadow global sudo_mode with a local variable in set_cmnd()
+	[0c72969503ad]
+
+2011-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	bash 2.x doesd not support the -l flag and exits with an error if it
+	is specified so use --login instead. This causes an error with bash
+	1.x (which uses -login instead) but this version is hopefully less
+	used than 2.x.
+	[5c4c296e30e6]
+
+	* src/po/pl.mo, src/po/pl.po:
+	Add Polish translation from translationproject.org
+	[48592dd6edcf]
+
+2011-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Make error strings translatable.
+	[414c5c484768]
+
+	* mkpkg:
+	Only run configure with --with-pam-login for RHEL 5 and above.
+	[6c16e4de4026]
+
+	* sudo.pp:
+	Fix typo in summary
+	[9ac618c9a749]
+
+2011-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logwrap.c:
+	Add missing logwrap.c
+	[c12a413ecc1d]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h,
+	plugins/sudoers/regress/logging/check_wrap.c,
+	plugins/sudoers/regress/logging/check_wrap.in,
+	plugins/sudoers/regress/logging/check_wrap.out.ok:
+	Split out log file word wrap code into its own file and add unit
+	tests. Fixes an off-by one in the word wrap when the log line length
+	matches loglinelen.
+	[52ed277f6690]
+
+2011-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	For SuSE, only use /usr/lib64 as libexec if generating 64-bit
+	binaries.
+	[645ab903cf77]
+
+	* src/load_plugins.c, src/sudo.c:
+	Fix build error when --without-noexec configure option is used.
+	[b994f7b0d8b4]
+
+	* configure, configure.in:
+	Disable noexec for AIX < 5. LDR_PRELOAD is only available in AIX 5.3
+	and above.
+	[c2a6f9b472f3]
+
+2011-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Resolve the list of gids passed in from the sudo frontend (the
+	result of getgroups()) to names and store both the group names and
+	ids in the sudo_user struct. When matching groups in the sudoers
+	file, match based on the names in the groups list first and only do
+	a gid-based match when we absolutely have to. By matching on the
+	group name (as it is listed in sudoers) instead of id (which we
+	would have to resolve) we save a lot of group lookups for sudoers
+	files with a lot of groups in them.
+	[8dc19353f148]
+
+2011-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Workaround for "sudo -i command" and newer versions of bash which
+	don't go into login mode when -c is specified unless -l is too.
+	[9393762b80f3]
+
+2011-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Rewrite logfile word wrapping code to be more straight-forward and
+	actually wrap at the correct place.
+	[f712a0c90f55]
+
+2011-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/CONTRIBUTORS, doc/contributors.pod, plugins/sudoers/sudoers.c:
+	Set use_pty=true in command details when use_pty is set in sudoers.
+	From Ludwig Nussel
+	[8d95a163dfc1]
+
+2011-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
+	src/po/zh_CN.mo, src/po/zh_CN.po:
+	Sync Chinese (simplified) PO files from translationproject.org
+	[acce8eb7be18]
+
+2011-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, plugins/sudoers/po/eu.mo, plugins/sudoers/po/fi.mo,
+	plugins/sudoers/po/uk.mo, src/po/da.mo, src/po/da.po, src/po/eu.mo:
+	Add Danish translation from translationproject.org and add missing
+	Basque mo files.
+	[0c22bb21b9c4]
+
+	* Makefile.in, configure, configure.in:
+	No longer need to specify LINGUAS in configure, "make install-nls"
+	now just installs all the .mo files it finds.
+	[fcd45cf04885]
+
+2011-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, doc/CONTRIBUTORS, doc/Makefile.in, doc/contributors.pod:
+	Build CONTRIBUTORS from newly-added contributors.pod
+	[8b192f2720f4]
+
+	* doc/CONTRIBUTORS:
+	Rework the wording in the leading paragraph
+	[312044145cdd]
+
+2011-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, doc/CONTRIBUTORS:
+	Add a CONTRIBUTORS file with the names of folks who have contributed
+	code or patches to sudo since I started maintaining it (plus the
+	original authors).
+	[b8bdd8b59528]
+
+2011-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c:
+	Preserve SHELL variable for "sudo -s". Otherwise we can end up with
+	a situation where the SHELL variable and the actual shell being run
+	do not match.
+	[b8b3974aee3e]
+
+2011-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Only enable Solaris project support when setproject() is present in
+	libproject.
+	[49ad7857ab89]
+
+	* sudo.pp:
+	Explicitly set mode and owner of /etc/sudoers instead of relying on
+	"cp -p" to work in the postinstall script. On AIX 6.1 at least the
+	postinstall script runs before the final file permissions are set.
+	[e41ffc0212b2]
+
+2011-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.pod, doc/sudoers.pod:
+	Refer the user to the "Command Environment" section in description
+	of sudo's -i option.
+	[263cc3be7eef]
+
+	* doc/sudo.pod:
+	Fix typo
+	[35dfac450f4d]
+
+2011-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkdep.pl:
+	If there is no old dependency for an object file, use the MANIFEST
+	to find its source.
+	[d15e3b9899f9]
+
+	* compat/Makefile.in:
+	Remove dependency for getgrouplist.lo as we don't ship that source
+	file.
+	[312a6d5fe6b0]
+
+2011-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Do not declare yyparse() static as the actual function generated by
+	yacc is extern.
+	[9017b79dcf55]
+
+2011-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Remove locale files in "make uninstall"
+	[201ff261ecbe]
+
+	* configure.in, plugins/sudoers/po/eu.po, plugins/sudoers/po/fi.po,
+	plugins/sudoers/po/uk.po, src/po/eu.po:
+	Add Basque translation and sync Finish and Ukranian translations.
+	[66d2c78c8a13]
+
+	* configure, configure.in:
+	FreeBSD no longer needs the main sudo binary to link with -lpam now
+	that plug-ins are loaded with RTLD_GLOBAL.
+	[96c710df2457]
+
+	* plugins/sudoers/group_plugin.c, src/load_plugins.c:
+	Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes
+	problems with pam modules not having access to symbols provided by
+	libpam on some platforms. Affects FreeBSD and SLES 10 at least.
+	[0d016983ec84]
+
+	* Makefile.in:
+	Move xgettext invocation out of update-po target into update-pot
+	[19a73c6d017c]
+
+2011-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+	Regenerate .pot files for 1.8.2rc2
+	[c3037f591dd8]
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in, zlib/Makefile.in:
+	Move nls targets to the top level Makefile so the paths in the pot
+	file are saner
+	[65b9285cd8d9]
+
+	* src/po/fi.mo:
+	Add compiled version of sudo Finish translation
+	[8f2405384ea3]
+
+	* MANIFEST, plugins/sudoers/po/fi.mo, plugins/sudoers/po/uk.mo:
+	Update MANIFEST with .po and .mo files Rebuild sudoers fi and uk .mo
+	files
+	[a165e70fa9ec]
+
+	* configure, configure.in, plugins/sudoers/po/fi.po:
+	Add Finish translation from translationproject.org
+	[4466f8a96ceb]
+
+2011-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod:
+	The group named by exempt_group should not have a % prefix.
+	[df084d6b32c8]
+
+2011-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod:
+	Fix typo; "Defaults group_plugin" not "Defaults sudo_plugin"
+	[5113699a3f8b]
+
+2011-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c, src/exec_pty.c:
+	Fix compressed io log corruption in background mode by using _exit()
+	instead of exit() to avoid flushing buffers twice.
+
+	Improved background mode support. When not allocating a pty, the
+	command is run in its own process group. This prevents write access
+	to the tty. When running in a pty, stdin is not hooked up and we
+	never read from /dev/tty, which results in similar behavior.
+	[87c15149894c]
+
+	* compat/Makefile.in, mkdep.pl, plugins/sudoers/Makefile.in:
+	Clean up regress files Generate proper dependencies for regress objs
+	in compat
+	[88bfc728c1e7]
+
+	* plugins/sudoers/Makefile.in:
+	Add missing dependency for check_fill.o.
+	[0bd6362e3e17]
+
+2011-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.in:
+	Add support for --enable-nls[=location]
+	[b90db44a050f]
+
+2011-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/linux_audit.c:
+	Include gettext.h
+	[7f909a6e48cb]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c:
+	Quiet gcc warnings.
+	[b41a6cdca583]
+
+	* configure, configure.in:
+	Don't install .mo files if gettext was not found.
+	[1397b34cc165]
+
+2011-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	Always allocate a pty when running a command in the background but
+	call setsid() after forking to make sure we don't end up with a
+	controlling tty.
+	[b6454ba172e8]
+
+	* plugins/sudoers/iolog.c:
+	Add missing space between command name and the first command line
+	argument.
+	[fe217f0a36d4]
+
+	* plugins/sudoers/sudoreplay.c:
+	Quiet a compiler warning on some platforms.
+	[de9f2849f236]
+
+	* plugins/sudoers/po/README, src/po/README:
+	README file that directs people to translationproject.org
+	[30c0fc323281]
+
+	* plugins/sudoers/po/uk.po, src/po/fi.po:
+	Sync translations with TP
+	[1d7d64559cba]
+
+	* Makefile.in:
+	Add 'sync-po' target to top-level Makefile to rsync the po files
+	from translationproject.org.
+	[20508211aaa3]
+
+	* plugins/sudoers/Makefile.in:
+	install nls files from install target
+	[5fc07b6cab38]
+
+	* Makefile.in, plugins/sudoers/Makefile.in, src/Makefile.in, sudo.pp:
+	Include .mo files in sudo binary packags.
+	[278d4821a916]
+
+	* configure, configure.in, plugins/sudoers/po/zh_CN.mo,
+	plugins/sudoers/po/zh_CN.po, src/po/zh_CN.mo, src/po/zh_CN.po:
+	Add simplified chinese translation
+	[2b33ffc755b9]
+
+2011-05-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, plugins/sudoers/po/uk.mo,
+	plugins/sudoers/po/uk.po, src/po/uk.mo, src/po/uk.po:
+	Add ukranian translation
+	[2d8102688e93]
+
+	* compat/Makefile.in:
+	refer to siglist.c, not ./siglist.c since not all makes will treat
+	foo and ./foo the same.
+	[6639d293ffba]
+
+	* plugins/sudoers/sudoers.c:
+	Set def_preserve_groups before searching for the command when the -P
+	flag is specified.
+	[0edc7942f875]
+
+	* Makefile.in, compat/Makefile.in, mkdep.pl,
+	plugins/sudoers/Makefile.in:
+	Add dependency for siglist.lo in compat. This is a generated file so
+	"make depend" needs to depend on it.
+	[28d0932f8b50]
+
+	* compat/Makefile.in:
+	More dependency fixes.
+	[aad0d05cd020]
+
+	* compat/Makefile.in:
+	Fix a few dependencies.
+	[eb21aa35a032]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Place compiled mo files in the src dir, not the build dir. When
+	installing compiled mo files, display a status message.
+	[e15634c29cd3]
+
+2011-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Tivoli Directory Server requires that seconds be present in a
+	timestamp, even though RFC 4517 states that they are optional.
+	[55fe23dd4ef9]
+
+	* plugins/sudoers/sudo_nss.h:
+	Add missing bit of copyright
+	[d2eba3c364ca]
+
+	* doc/visudo.pod:
+	Mention cycle detection warnings
+	[a76bef15ab67]
+
+	* plugins/sudoers/visudo.c:
+	When checking aliases, also check the contents of the alias in case
+	there are problems with an alias that is referenced inside another.
+	Replace the self reference check with real alias cycle detection.
+	[a66c904cf53b]
+
+	* plugins/sudoers/alias.c:
+	Set errno to ELOOP in alias_find() if there is a cycle. Set errno to
+	ENOENT in alias_find() and alias_remove() if the entry could not be
+	found.
+	[b4f0b89e433c]
+
+	* plugins/sudoers/visudo.c:
+	Increment alias_seqno before calls to alias_remove_recursive() to
+	avoid false positives with the alias loop detection. Fixes spurious
+	warnings about unused aliases when they are nested.
+	[a344483b8193]
+
+	* MANIFEST:
+	add mkdep.pl
+	[86b7ed33eab2]
+
+	* plugins/sudoers/Makefile.in:
+	Add dependency on convenience libs to binaries
+	[cd3078b3c997]
+
+	* Makefile.in:
+	mkdep.pl only works when run from the src dir
+	[f35a5e47c944]
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in, mkdep.pl,
+	plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in, zlib/Makefile.in:
+	Auto-generate Makefile dependencies with a perl script.
+	[a3e4afcd7975]
+
+2011-05-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	If the user specifies a runas group via sudo's -g option that
+	matches the runas user's group in the passwd database and that group
+	is not denied in the Runas_Spec, allow it. Thus, if user root's gid
+	in /etc/passwd is 0, then "sudo -u root -g root id" is allow even if
+	no groups are present in the Runas_Spec.
+	[e3f9732dc564]
+
+2011-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Add dependencies on gettext.h
+	[a3a9dc51f78b]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Fix install-nls target with HP-UX sh when gettext is not present.
+	[0c6b9655cd41]
+
+2011-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/po/sudoers.pot,
+	src/Makefile.in, src/po/sudo.pot:
+	regenerate .pot files for lbuf changes
+	[918ded125a0b]
+
+	* configure, configure.in:
+	Add missing "checking" message for gettext when using the cache.
+	[9c21187ad1d2]
+
+	* common/lbuf.c, include/lbuf.h, plugins/sudoers/ldap.c,
+	plugins/sudoers/parse.c, plugins/sudoers/sudo_nss.c,
+	src/parse_args.c:
+	Add primitive format string support to the lbuf code to make
+	translations simpler.
+	[ee71c7ef5299]
+
+	* MANIFEST, plugins/sudoers/Makefile.in,
+	plugins/sudoers/po/sudoers.pot, src/Makefile.in, src/po/sudo.pot:
+	Add message catalog template files for sudo and the sudoers module.
+	[f3f8acb1f014]
+
+	* MANIFEST, common/aix.c, common/alloc.c, compat/strsignal.c,
+	config.h.in, configure.in, doc/Makefile.in, include/gettext.h,
+	plugins/sudoers/iolog.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, src/error.c,
+	src/net_ifs.c, src/sesh.c, src/sudo.c, src/sudo.h:
+	Add gettext.h convenience header. This is similar to but distinct
+	from the one included with the gettext package.
+	[930a0591f73c]
+
+2011-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add checks for nroff -c and -Tascii flags
+	[19ca990b3149]
+
+	* configure, configure.in:
+	Add check for HP bundled C Compiler (which cannot create shared
+	libs)
+	[517716a7072d]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix C format warnings.
+	[6514326013fa]
+
+	* include/error.h:
+	Add __printflike
+	[e1749a30a406]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c, src/parse_args.c:
+	Translate help / usage strings.
+	[ee1cc9b1a8bd]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Set --msgid-bugs-address to the bugzilla url
+	[5a0aa250ca21]
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in, configure,
+	configure.in, doc/Makefile.in, include/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in, zlib/Makefile.in:
+	Add scaffolding to update .po files and install .mo files.
+	[f05f4eed1fe1]
+
+	* doc/license.pod:
+	update copyright year
+	[fa0c62523875]
+
+	* INSTALL, README:
+	No need to include version number at the top of these files.
+	[9f2981325351]
+
+2011-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/visudo.c:
+	Minor warning/error cleanup
+	[9236dc85aeab]
+
+	* config.h.in, configure.in:
+	Emulate ngettext for the non-nls case
+	[13571d63fa36]
+
+	* plugins/sudoers/ldap.c:
+	Do not mark untranslatable strings for translation
+	[735f5d4413fe]
+
+	* plugins/sudoers/check.c:
+	Use ROOT_UID not 0.
+	[09a268db8da4]
+
+	* plugins/sudoers/check.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/logging.c, src/exec.c, src/exec_pty.c,
+	src/load_plugins.c, src/sudo.c, src/sudo_edit.c:
+	Minor warning/error message cleanup
+	[3c7b1a7939b5]
+
+	* plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/mon_systrace.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, src/exec.c,
+	src/exec_pty.c, src/net_ifs.c, src/selinux.c:
+	cannot -> "unable to" in warning/error messages
+	[31c3897649e9]
+
+	* plugins/sudoers/check.c, plugins/sudoers/mon_systrace.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c, src/exec_pty.c,
+	src/sudo.c, src/utmp.c:
+	can't -> "unable to" in warning/error messages
+	[127b75f15291]
+
+	* configure, configure.in:
+	FreeBSD needs the main sudo executable to link with -lpam when
+	loading dynaic pam modules for some reason.
+	[944522cc9bef]
+
+2011-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c, src/exec.c, src/exec_pty.c, src/sudo.c:
+	We don't want to translate debugging messages.
+	[56a1a365815a]
+
+	* configure, configure.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/iolog.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
+	src/Makefile.in, src/sesh.c, src/sudo.c:
+	Add calls to bindtextdomain() and textdomain() Currently there are
+	two domains, one for the sudo front-end and one for the sudoers
+	plugin and its associated utilities.
+	[0426138f789e]
+
+	* configure, configure.in:
+	Fix caching of libc gettext check.
+	[942142d2c43a]
+
+	* plugins/sudoers/def_data.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/mkdefaults:
+	Mark defaults descriptions for translation
+	[5b27f018e6cf]
+
+	* NEWS:
+	Update for sudo 1.8.1p2
+	[747c4dee2ca7]
+
+2011-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Quiet compiler warning when SELinux is enabled.
+	[1fbf77dda240]
+
+	* plugins/sudoers/plugin_error.c, plugins/sudoers/sudoreplay.c,
+	src/error.c, src/net_ifs.c, src/sesh.c:
+	Add missing includes of libintl.h.
+	[bc1d66316082]
+
+	* plugins/sudoers/auth/pam.c:
+	Fix gettext marker.
+	[a5cf4ed66c66]
+
+	* common/aix.c, common/alloc.c, compat/strsignal.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/sudoers.h, src/sudo.h:
+	Include libint.h where needed.
+	[2b0e5a663c7b]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
+	plugins/sudoers/parse.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c:
+	Prepare sudoers module messages for translation.
+	[7212ae1909c5]
+
+	* plugins/sudoers/sudoers.c:
+	Only check gid of sudoers file if it is group-readable.
+	[50e3bc0cb242]
+
+	* plugins/sudoers/auth/aix_auth.c:
+	For AIX, keep calling authenticate() until reenter reaches 0.
+	[e240815b74b1]
+
+2011-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Cache the status of the initial gettext() check.
+	[32751ebe1704]
+
+	* INSTALL, configure, configure.in:
+	Add --disable-nls flag and improve checks for gettext.
+	[c7e6b17052de]
+
+	* configure, configure.in:
+	When building with gcc on HP-UX, use -march=1.1 to produce portable
+	binaries on a pa-risc2 host. Previously, the +Dportable option was
+	used for the HP-UX C compiler but gcc always produced native
+	binaries.
+	[8f4c749324d7]
+
+2011-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/aix.c, common/alloc.c, compat/strsignal.c, src/error.c,
+	src/exec.c, src/exec_pty.c, src/load_plugins.c, src/net_ifs.c,
+	src/parse_args.c, src/selinux.c, src/sesh.c, src/sudo.c,
+	src/sudo_edit.c, src/tgetpass.c, src/utmp.c:
+	Prepare sudo front end messages for translation.
+	[2fc2fabceccb]
+
+2011-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, plugins/sudoers/auth/pam.c:
+	Add initial scaffolding to support localization via gettext()
+	[7d47b59fcf95]
+
+	* compat/fnmatch.h, compat/glob.h:
+	Don't let the fnmatch/glob macros expand the function prototype.
+	[a9014aa0288e]
+
+2011-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/fnmatch.c, compat/fnmatch.h, compat/glob.c, compat/glob.h:
+	Resolve namespace collisions on HP-UX ia64 and possibly others by
+	adding a rpl_ prefix to our fnmatch and glob replacements and
+	#defining rpl_foo to foo in the header files.
+	[caa9b690a15d]
+
+2011-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Split ALL, ROLE and TYPE into their own actions. Since you can only
+	have #ifdefs inside of braces, ROLE and TYPE use a naughty goto in
+	the non-SELinux case. This is safe because the actions are in one
+	big switch() statement.
+	[7473fc2cfa2c]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix regexp for matching a CIDR-style IPv4 netmask. From Marc Espie.
+	[9be3480c2865]
+
+2011-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/UPGRADE, doc/sudoers.pod:
+	askpass moved from sudoers to sudo.conf in sudo 1.8.0
+	[b2c2956cec4e]
+
+	* doc/sudoers.pod:
+	Remove obsolete warning about runas_default and ordering. Move
+	syslog facility and priority lists into the section where the
+	relevant options are described.
+	[e57b8dc3f779]
+
+2011-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sia.c:
+	Fix SIA support; we no longer have access to the real argc and argv
+	so allocate space for a fake one and use the argv passed to the
+	plugin with "sudo" for argv[0].
+	[1c0552772ad2]
+
+2011-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/net_ifs.c:
+	Remove useless realloc when trying to get the buffer size right.
+	[792225380a62]
+
+	* plugins/sudoers/set_perms.c:
+	Be explicit when setting euid to 0 before call to setreuid(0, 0)
+	[7bfeb629fccb]
+
+2011-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Need to do checks for krb5_verify_user, krb5_init_secure_context and
+	krb5_get_init_creds_opt_alloc regardless of whether or not
+	krb5-config is present.
+	[9d1b98ece1d3]
+
+2011-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	Work around weird AIX saved uid semantics on setuid() and
+	setreuid(). On AIX, setuid() will only set the saved uid if the euid
+	is already 0.
+	[069fc08150ca]
+
+2011-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	update copyright year
+	[1c42d579ba6e]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Treat a missing includedir like an empty one and do not return an
+	error.
+	[92f71d8cbfd4]
+
+2011-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Fix ARCH setting in cross-compile Solaris packages.
+	[b0de281cc889]
+
+	* sudo.pp:
+	Fix aix version setting.
+	[98437dbfb085]
+
+	* plugins/sudoers/ldap.c:
+	Remove extraneous parens in LDAP filter when sudoers_search_filter
+	is enabled that causes a search error. From Matthew Thomas.
+	[1d75bf1fc8d9]
+
+2011-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c:
+	Correct sizeof() to fix test failure.
+	[fd2f7c0c0572]
+
+	* plugins/sudoers/Makefile.in:
+	"install" target should depend on "install-dirs". Fixes "make -j"
+	problem and closes bz #487. From Chris Coleman.
+	[083902d38edb]
+
+2011-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	Add HAVE_RFC1938_SKEYCHALLENGE
+	[a94cb33758a8]
+
+2011-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention plugin loading and libgcc changes
+	[e11b30b5026a]
+
+	* src/load_plugins.c, src/sudo.c, src/sudo_plugin_int.h:
+	Load plugins after parsing arguments and potentially printing the
+	version. That way, an error loading or initializing a plugin doesn't
+	break "sudo -h" or "sudo -V".
+	[1b76f2b096a2]
+
+	* Makefile.in:
+	When using a sub-shell to invoke the sub-make, exec make instead of
+	running it inside the shell to avoid an extra process.
+	[fd2c04a71fbf]
+
+	* compat/regress/fnmatch/fnm_test.in, compat/regress/glob/globtest.c:
+	Stop testing unspecified behavior in fnmatch Make glob test more
+	portable
+	[229803093725]
+
+	* compat/Makefile.in:
+	No need to add current dir to include path and having it breaks the
+	test programs that expect to get the system glob.h and fnmatch.h
+	[68085f624be4]
+
+	* INSTALL, configure, configure.in:
+	Fix and document --with-plugindir; partially from Diego Elio Petteno
+	[07edc52ea89e]
+
+	* compat/Makefile.in, compat/regress/fnmatch/fnm_test.c,
+	compat/regress/fnmatch/fnm_test.in, compat/regress/glob/globtest.c,
+	compat/regress/glob/globtest.in:
+	Fix fnmatch and glob tests to not use hard-coded flag values in the
+	input file. Link test programs with libreplace so we get our
+	replacement verions as needed.
+	[c2cca448f660]
+
+	* Makefile.in:
+	If make in a subdir fails, fail the target in the upper level
+	Makefile too. Adapted from a patch from Diego Elio Petteno
+	[76fc9a0d96fd]
+
+	* configure, configure.in, plugins/sudoers/auth/rfc1938.c:
+	Add check for NetBSD-style 4-argument skeychallenge() as Gentoo also
+	has this. Adapted from a patch from Diego Elio Petteno
+	[a97279a59b93]
+
+	* plugins/sudoers/Makefile.in:
+	Make SUDOERS_LDFLAGS reference $(LDFLAGS) instead of using @LDFLAGS@
+	directly.
+	[47b884029b3b]
+
+	* configure, configure.in:
+	Fix warnings when -without-skey, --without-opie, --without-kerb4,
+	--without-kerb5 or --without-SecurID were specified.
+	[71ad150f4d24]
+
+	* MANIFEST:
+	Add plugins/sudoers/sudoers_version.h
+	[7423966de440]
+
+	* configure, configure.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in:
+	Back out the --with-libpath addition to SUDOERS_LDFLAGS since that
+	now include LDFLAGS in the sudoers Makefile.in. Add missing settng
+	of @LDFLAGS@ in plugin Makefile.in files.
+	[b835826f889c]
+
+2011-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention %#gid support in User_List and Runas_List
+	[5a983dff017a]
+
+	* plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_version.h,
+	plugins/sudoers/visudo.c:
+	Keep track of sudoers grammar version and report it in the -V
+	output.
+	[52901a3c0296]
+
+	* plugins/sudoers/sudo_nss.h:
+	Add multiple inclusion guard
+	[50853aed046e]
+
+	* configure, configure.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in:
+	The --with-libpath option now adds to SUDOERS_LDFLAGS as well as
+	LDFLAGS. Remove old -static hack for HP-UX < 9. Add LTLDFLAGS and
+	set it to -Wc,-static-libgcc if not using GNU ld so we don't have a
+	dependency on the shared libgcc in sudoers.so.
+	[66ad8bc5e32d]
+
+	* doc/sudoers.pod:
+	Fix typo; from Petr Uzel
+	[f9a7afd80892]
+
+2011-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/testsudoers.c:
+	In dump-only mode, use "root" as the default username instead of
+	"nobody" as the latter may not be available on all systems.
+	[0c48e6414337]
+
+2011-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/testsudoers.c:
+	Remove NewArgv/NewArgc, they are no longer needed.
+	[16e18f734c7e]
+
+	* plugins/sudoers/testsudoers.c:
+	Fix setting of user_args
+	[aa29e0d0a54a]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add '!' token to lex tracing
+	[5227ad266235]
+
+	* plugins/sudoers/regress/testsudoers/test1.sh:
+	Use group bin in test, not wheel as most systems have the bin group
+	but the same is no longer true of wheel.
+	[718802b3b45e]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Avoid using pre or post increment in a parameter to a ctype(3)
+	function as it might be a macro that causes the increment to happen
+	more than once.
+	[78e281152c3a]
+
+2011-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Strip off the beta or release candidate version when building AIX
+	packages.
+	[28fe31668559]
+
+	* configure, configure.in:
+	We need to include OSDEFS in CFLAGS when doing the utmp/utmpx
+	structure checks for glibc which only has __e_termination visible
+	when _GNU_SOURCE is *not* defined.
+	[59ae1698911f]
+
+	* common/aix.c:
+	getuserattr(user, ...) will fall back to the "default" entry
+	automatically, there's no need to check "default" manually.
+	[3c7a47a61fdb]
+
+2011-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/UPGRADE:
+	Document parser changes.
+	[ec415503308d]
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in, zlib/Makefile.in:
+	If there is an existing sudoers file, only install if it passes a
+	syntax check.
+	[37427c73e8cb]
+
+	* plugins/sudoers/regress/sudoers/test6.out.ok,
+	plugins/sudoers/testsudoers.c:
+	Add runasgroup support to testsudoers
+	[047ea5571f33]
+
+	* plugins/sudoers/Makefile.in:
+	For "make check", keep going even if a test fails.
+	[ce6a0a73c372]
+
+	* plugins/sudoers/testsudoers.c:
+	More useful exit codes:
+	 * 0 - parsed OK and command matched.
+	 * 1 - parse error
+	 * 2 - command not matched
+	 * 3 - command denied
+	[1d2ce1361903]
+
+	* doc/sudoers.pod:
+	Document %#gid, and %:#nonunix_gid syntax.
+	[492d4f9696c4]
+
+	* plugins/sudoers/pwutil.c:
+	Add support to user_in_group() for treating group names that begin
+	with a '#' as gids.
+	[20240c94a134]
+
+	* config.h.in, configure, configure.in, src/utmp.c:
+	Add explicit check for struct utmpx.ut_exit.e_termination and struct
+	utmpx.ut_exit.__e_termination. HP-UX uses the latter. Only update
+	ut_exit if we detect one or the other.
+	[b4e8cab777e6]
+
+2011-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c:
+	Add back missing #include of config.h
+	[9ab3897a1b2e]
+
+	* plugins/sudoers/iolog_path.c,
+	plugins/sudoers/regress/iolog_path/data:
+	Avoid a NULL deref on unrecognized escapes. Collapse %% -> % like
+	strftime() does.
+	[93395762cdcd]
+
+	* aclocal.m4:
+	Quote first argument to AC_DEFUN(); from Elan Ruusamae
+	[97f53ad31d77]
+
+2011-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	add new sudoers tests
+	[476af91b3da3]
+
+	* plugins/sudoers/regress/sudoers/test8.in,
+	plugins/sudoers/regress/sudoers/test8.out.ok,
+	plugins/sudoers/regress/sudoers/test8.toke.ok:
+	Add test for a newline in the middle of a string when no line
+	continuation character is used.
+	[de2394bc86ab]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Use bitwise AND instead of modulus to check for length being odd. A
+	newline in the middle of a string is an error unless a line
+	continuation character is used.
+	[bdb1d762a1d5]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Move lexer globals initialization into init_lexer.
+	[1ce62211aadb]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix a potential crash when a non-regular file is present in an
+	includedir. Fixes bz #452
+	[1586760c3525]
+
+	* pp:
+	On some Linux systems, "uname -p" contains detailed processor info
+	so check "uname -m" first and then "uname -p" if needed. Recognize
+	PLD Linux.
+	[b8535cb9012e]
+
+2011-03-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/redblack.c:
+	Don't need all sudoers.h here.
+	[8c0929f42dab]
+
+	* src/sudo.c:
+	Print sudo version early, in case policy plugin init fails.
+	[47cddc4358bc]
+
+2011-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/sudoers/test4.toke.ok:
+	Update to match change in input.
+	[4a3af8e68790]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Make an empty group or netgroup a syntax error.
+	[66f51ddc2ff6]
+
+	* plugins/sudoers/regress/sudoers/test7.in,
+	plugins/sudoers/regress/sudoers/test7.out.ok,
+	plugins/sudoers/regress/sudoers/test7.toke.ok:
+	An empty group or netgroup should be a syntax error.
+	[bd5bf1e2edce]
+
+	* plugins/sudoers/regress/sudoers/test6.in,
+	plugins/sudoers/regress/sudoers/test6.out.ok,
+	plugins/sudoers/regress/sudoers/test6.toke.ok:
+	Check that uids work in per-user and per-runas Defaults Check that
+	uids and gids work in a Command_Spec
+	[c5e848e6082b]
+
+	* plugins/sudoers/regress/sudoers/test5.in,
+	plugins/sudoers/regress/sudoers/test5.out.ok,
+	plugins/sudoers/regress/sudoers/test5.toke.ok:
+	Test empty string in User_Alias and Command_Spec
+	[3a084d777e03]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Allow a group ID in the User_Spec.
+	[bc2859eb71dc]
+
+2011-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Return an error for the empty string when a word is expected. Allow
+	an ID for per-user or per-runas Defaults.
+	[915c259b00ff]
+
+	* plugins/sudoers/testsudoers.c:
+	Fix printing "User_Alias FOO = ALL"
+	[ba58c3d548b3]
+
+2011-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/parse_args.c:
+	Better error message about invalid -C argument
+	[c9a8d15bbf5d]
+
+	* NEWS:
+	fix typo
+	[cdcfbafed013]
+
+	* doc/sudoers.pod:
+	Fix placement of equal size ('=') in user specification summary.
+	[5ad7178b230d]
+
+2011-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	update to match sudoers regress
+	[e04db0648717]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Restore ability to define TRACELEXER and have trace output go to
+	stderr.
+	[d9531e4d1b20]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Restore old behavior of setting sawspace = TRUE for command line
+	args when a line continuation character is hit to avoid causing
+	problems for existing sudoers files.
+	[fd930ad25550]
+
+	* plugins/sudoers/regress/sudoers/test4.in,
+	plugins/sudoers/regress/sudoers/test4.out.ok,
+	plugins/sudoers/regress/sudoers/test4.toke.ok:
+	Add test for line continuation and aliases
+	[29ab538ca6bb]
+
+	* plugins/sudoers/Makefile.in:
+	Make test output line up nicely for parse vs. toke
+	[257ef82c1434]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/sudoers/test1.in,
+	plugins/sudoers/regress/sudoers/test1.out.ok,
+	plugins/sudoers/regress/sudoers/test1.toke.ok,
+	plugins/sudoers/regress/sudoers/test2.in,
+	plugins/sudoers/regress/sudoers/test2.out.ok,
+	plugins/sudoers/regress/sudoers/test2.toke.ok,
+	plugins/sudoers/regress/sudoers/test3.in,
+	plugins/sudoers/regress/sudoers/test3.out.ok,
+	plugins/sudoers/regress/sudoers/test3.toke.ok,
+	plugins/sudoers/regress/testsudoers/test1.ok,
+	plugins/sudoers/regress/testsudoers/test1.out.ok,
+	plugins/sudoers/regress/testsudoers/test1.sh,
+	plugins/sudoers/regress/testsudoers/test2.out,
+	plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/testsudoers/test3.ok,
+	plugins/sudoers/regress/testsudoers/test3.sh,
+	plugins/sudoers/regress/visudo/test1.ok,
+	plugins/sudoers/regress/visudo/test1.sh:
+	Move parser tests to sudoers directory and test the tokenizer output
+	too.
+	[44f529b3cdb6]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	If we match a rule anchored to the beginning of a line after parsing
+	a line continuation character, return an ERROR token. It would be
+	nicer to use REJECT instead but that substantially slows down the
+	lexer.
+	[355478293f8c]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l:
+	Move LEXTRACE macro to toke.h so we can use it in yyerror().
+	[72ee7a06d3ca]
+
+2011-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l:
+	Make lex tracing settable at run-time in testsudoers via the -t
+	flag. Trace output goes to stderr. Will be used by regress tests to
+	check lexer.
+	[93bd53c413c8]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Allow whitespace after the modifier in a Defaults entry. E.g.
+	"Defaults: username set_home"
+	[9dfcf8dd8a3a]
+
+2011-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Don't set CC when cross-compiling.
+	[4b95b0c04e1c]
+
+	* NEWS:
+	Credit Matthew Thomas for the sudoers_search_filter changes.
+	[a65998ab09f7]
+
+	* MANIFEST:
+	Add the .sym files to the MANIFEST
+	[f599225cc861]
+
+	* NEWS:
+	Update for sudo 1.8.1 beta
+	[71021e854c49]
+
+	* doc/sudo_plugin.pod, plugins/sudoers/sudoers.c, src/parse_args.c:
+	user_shell -> run_shell to avoid confusion with the user's SHELL
+	variable.
+	[dc0ac6dafc21]
+
+	* src/exec_pty.c:
+	Save the controlling tty process group before suspending in pty
+	mode. Previously, we assumed that the child pgrp == child pid (which
+	is usually, but not always, the case).
+	[10b2883b7875]
+
+	* doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Add support for sudoers_search_filter setting in ldap.conf. This can
+	be used to restrict the set of records returned by the LDAP query.
+	[b0f1b721d102]
+
+2011-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Remove the hack to disable -g in CFLAGS unless --with-devel
+	[89822cf84ef4]
+
+	* doc/sudoers.pod:
+	The '@' character does not normally need to be quoted.
+	[7823f5ed829a]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	We normaly transition from GOTDEFS to STARTDEFS on whitespace, but
+	if that whitespace is followed by a comma, we want to treat it as
+	part of a list and not transition.
+	[1ca6943e1824]
+
+	* plugins/sudoers/regress/testsudoers/test3.ok,
+	plugins/sudoers/regress/testsudoers/test3.sh:
+	Add check for whitespace when a User_List is used for a per-user
+	Defaults entry.
+	[91f75e6dd19a]
+
+	* plugins/sudoers/regress/testsudoers/test2.out,
+	plugins/sudoers/regress/testsudoers/test2.sh:
+	Expand quoted name checks to cover recent fixes.
+	[ce4f76bca146]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Fix parsing of double-quoted names in Defaultd and Aliases which was
+	broken in 601d97ea8792.
+	[424b0d6c1dc4]
+
+	* plugins/sudoers/Makefile.in:
+	toke_util.c lives in $(srcdir) not $(devdir)
+	[94866bebee83]
+
+2011-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Change trunk version to 1.8.x to distinguish from real 1.8.0.
+	[a9781e61d064]
+
+	* NEWS, doc/UPGRADE:
+	Document major changes in 1.8.1 and add upgrade notes.
+	[f2cf51b0d9ce]
+
+	* plugins/sudoers/match.c:
+	Be careful not to deref user_stat if it is NULL. This cannot
+	currently happen in sudo but might in other programs using the
+	parser.
+	[06a2334dd674]
+
+	* mkpkg:
+	configure will not add -O2 to CFLAGS if it is already defined to add
+	-O2 to the CFLAGS we pass in when PIE is being used.
+	[1ce6481ece59]
+
+	* doc/sudoers.pod:
+	Warn about the dangers of log_input and mention iolog_file and
+	iolog_dir in the log_input and log_output descriptions.
+	[ae854ffb0768]
+
+	* pp:
+	sync with git version
+	[a993e39ce3cb]
+
+	* doc/sudoers.pod:
+	It seems that h comes after i
+	[0f621109220d]
+
+	* doc/sudoers.pod:
+	Move log_input and log_output to their proper, sorted, location.
+	Document set_utmp and utmp_runas.
+	[273b234b9c34]
+
+	* src/exec.c:
+	Save the controlling tty process group before suspending so we can
+	restore it when we resume. Fixes job control problems on Linux
+	caused by the previous attemp to fix resuming a shell when I/O
+	logging not enabled.
+	[f03a660315ee]
+
+	* common/lbuf.c:
+	Fix printing of the remainder after a newline. Fixes "sudo -l"
+	output corruption that could occur in some cases.
+	[25d83fb501fc]
+
+2011-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, src/exec_pty.c,
+	src/sudo_exec.h, src/utmp.c:
+	Add support for ut_exit
+	[b574c13f1bba]
+
+	* doc/sudo_plugin.pod, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c, src/exec.c,
+	src/exec_pty.c, src/sudo.c, src/sudo.h, src/sudo_exec.h, src/utmp.c:
+	Add support for controlling whether utmp is updated and which user
+	is listed in the entry.
+	[44a81632133f]
+
+	* plugins/sudoers/def_data.h, plugins/sudoers/defaults.h,
+	plugins/sudoers/ldap.c, plugins/sudoers/mkdefaults,
+	plugins/sudoers/parse.c:
+	Fix typo; tupple vs. tuple
+	[697744acb710]
+
+	* src/utmp.c:
+	For legacy utmp, strip the /dev/ prefix before trying to determine
+	slot since the ttys file does not include the /dev/ prefix.
+	[7ad5b81ff90c]
+
+	* aclocal.m4, configure, configure.in, pathnames.h.in:
+	Add check for _PATH_UTMP
+	[21e638029bfd]
+
+2011-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c:
+	Adapt check_iolog_path to sessid changes
+	[728b5fe2be6f]
+
+	* config.h.in, configure, configure.in, src/Makefile.in,
+	src/exec_pty.c, src/sudo_exec.h, src/utmp.c:
+	Redo utmp handling. If no getutent()/getutxent() is available,
+	assume a ttyslot-based utmp. If getttyent() is available, use that
+	directly instead of ttyslot() so we don't have to do the stdin dup2
+	dance.
+	[18aa455cd140]
+
+2011-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, src/Makefile.in, src/exec_pty.c, src/sudo_exec.h,
+	src/utmp.c:
+	Move utmp handling into utmp.c
+	[f6eae6c8e012]
+
+	* common/aix.c, common/alloc.c, common/fileops.c, common/fmt_string.c,
+	common/lbuf.c, common/list.c, compat/isblank.c, compat/memrchr.c,
+	compat/mksiglist.c, compat/nanosleep.c, compat/snprintf.c,
+	compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
+	compat/utimes.c, doc/sudo.pod, doc/visudo.pod,
+	include/sudo_plugin.h, plugins/sample/sample_plugin.c,
+	plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c,
+	plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/logging.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/redblack.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/timestr.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c, src/exec.c,
+	src/exec_pty.c, src/get_pty.c, src/parse_args.c, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c, src/sudo_exec.h, src/sudo_noexec.c,
+	src/sudo_plugin_int.h, src/tgetpass.c:
+	Update copyright years.
+	[16aa39f9060a]
+
+	* doc/sudo_plugin.pod, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/parse_args.c:
+	Add "user_shell" boolean as a way to indicate to the plugin that the
+	-s flag was given.
+	[fb1ef0897b32]
+
+	* plugins/sudoers/iolog_path.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoers.h:
+	Move sessid out of sudo_user.
+	[ba298ddb57f4]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/logging.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Log the TSID even if it is not a simple session ID.
+	[d7cc1b9c513c]
+
+	* doc/sample.sudo.conf, doc/sudo.pod, doc/sudoers.pod:
+	Document noexec in sample.sudo.conf and add back noexec_file section
+	in sudoers with a note that it is deprecated.
+	[4a6e961e494d]
+
+	* plugins/sudoers/set_perms.c:
+	Fix running commands as non-root on systems where setreuid() changes
+	the saved uid based on the effective uid we are changing to.
+	[df0769b71b34]
+
+2011-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/defaults.c, src/load_plugins.c, src/sudo.c,
+	src/sudo.h:
+	Move noexec path into sudo.conf now that sudo itself handles noexec.
+	Currently can be configured in sudoers too but is now undocumented
+	and will be removed in a future release.
+	[6fa8befdc110]
+
+	* doc/sudo.pod, doc/sudoers.pod:
+	Document "Path noexec ..." in sudo.conf. No longer document
+	noexec_file in sudoers, it will be removed in a future release.
+	[24eee3a0b3e5]
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/sudo.c, src/sudo.h:
+	Move noexec handling to sudo front-end where it is documented as
+	being.
+	[3ed4f10d7052]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/sudoers.c,
+	src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h, src/sudo_edit.c,
+	src/sudo_exec.h:
+	Add support for disabling exec via solaris privileges. Includes
+	preparation for moving noexec support out of sudoers and into front
+	end as documented.
+	[dec843ed553e]
+
+	* plugins/sample/Makefile.in, plugins/sample/sample_plugin.sym,
+	plugins/sample_group/Makefile.in,
+	plugins/sample_group/sample_group.sym, plugins/sudoers/Makefile.in,
+	plugins/sudoers/sudoers.sym:
+	Only export the symbols corresponding to the plugin structs.
+	[8d8d03b0ca54]
+
+	* configure, configure.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in:
+	Install plugins manually instead of using libtool. This works around
+	a problem on AIX where libtool will install a .a file containing the
+	.so file instead of the .so file itself.
+	[796971cfbddb]
+
+	* Makefile.in:
+	Move check into its own rule since some versions of make will run
+	both targets as the default rule.
+	[34d759979176]
+
+	* configure, ltmain.sh, m4/libtool.m4, m4/ltoptions.m4,
+	m4/ltversion.m4, m4/lt~obsolete.m4:
+	Update to libtool 2.2.10
+	[34c130de6af7]
+
+2011-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	In handle_signals(), restart the read() on EINTR to make sure we
+	keep up with the signal pipe. Don't return -1 on EAGAIN, it just
+	means we have emptied the pipe.
+	[d5b9c8eb9000]
+
+	* compat/mktemp.c:
+	Reorder functions to quiet a compiler warning.
+	[c9e9a23729f0]
+
+	* mkpkg:
+	Use the Sun Studio C compiler on Solaris if possible
+	[11a86e27891e]
+
+2011-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Fix default setting of osversion variable.
+	[52e49ca1cedd]
+
+	* doc/sudo_plugin.pod:
+	Make two login_class entris consistent.
+	[18ff1fa94a91]
+
+	* config.h.in, configure, configure.in, src/exec.c, src/exec_pty.c,
+	src/sudo_exec.h:
+	Add support for adding a utmp entry when allocating a new pty.
+	Requires the BSD login(3) or SYSV/POSIX getutent()/getutxent().
+	Currently only creates a new entry if the existing tty has a utmp
+	entry.
+	[32db72b81d80]
+
+	* plugins/sudoers/boottime.c:
+	Avoid pulling in headers we don't need on Linux For getutx?id(),
+	call setutx?ent() first and always call endutx?ent().
+	[5dad21e1ee1b]
+
+	* configure, configure.in:
+	Add some more libs to SUDOERS_LIBS instead of relying on them to be
+	pulled in by SUDO_LIBS.
+	[18a7c21c09a7]
+
+	* plugins/sudoers/sudoers.c:
+	Fix return value of "sudo -l command" when command is not allowed,
+	broken in [c7097ea22111]. The default return value is now TRUE and a
+	bad: label is used when permission is denied. Also fixed missing
+	permissions restoration on certain errors. On error()/errorx(), the
+	password and group files are now closed before returning.
+	[4f2d0e869ae5]
+
+2011-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
+	Fix passing of login class back to sudo front end.
+	[6f70a784ce48]
+
+	* mkpkg:
+	Add --osversion flag to specify OS instead of running "pp
+	--probeonly"
+	[a8efdccb7bc1]
+
+	* sudo.pp:
+	Fix expr usage w/ GNU expr
+	[48895599ee63]
+
+2011-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Fix exit value for validate and list mode.
+	[c7097ea22111]
+
+	* plugins/sudoers/sudoers.c:
+	Fix non-interactive mode with sudoers plugin.
+	[172f29597bd2]
+
+2011-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoreplay.pod:
+	sudoreplay can now find IDs other than %{seq} and display the
+	session.
+	[fc3dd3be67e9]
+
+2011-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Add support for replaying sessions when iolog_file is set to
+	something other than %{seq}.
+	[ca3131243874]
+
+	* plugins/sudoers/visudo.c:
+	If we are killed by a signal, display the name of the signal that
+	got us.
+	[994bb76a990e]
+
+	* configure, configure.in:
+	Move libs used for authentication from SUDO_LIBS to SUDOERS_LIBS
+	where they belong.
+	[40f94b936fa4]
+
+	* configure.in:
+	Fix bug in skey/opie check that could cause a shell warning.
+	[83c043072be5]
+
+	* plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	No longer need sudo_getepw() stubs.
+	[bbee15c36912]
+
+2011-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudo_nss.c:
+	Fix exit value of "sudo -l command" in sudoers module.
+	[a6541867521b]
+
+2011-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/regress/glob/globtest.c:
+	Use fgets() not fgetln() for portability.
+	[df1bb67fb168]
+
+	* sudo.pp:
+	Don't use the beta or release candidate version as the rpm release.
+	[d661ef78021a]
+
+2011-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	version 1.8.0
+	[f6530d56f6ae] [SUDO_1_8_0]
+
+	* NEWS:
+	update sudo 1.8 section
+	[f2ee2cf95d18]
+
+2011-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/testsudoers/test2.sh:
+	fix test description
+	[cd5730fa9f09]
+
+	* plugins/sudoers/regress/testsudoers/test2.out,
+	plugins/sudoers/regress/testsudoers/test2.sh,
+	plugins/sudoers/regress/visudo/test2.out,
+	plugins/sudoers/regress/visudo/test2.sh:
+	convert test2 to use testsudoers
+	[b5ec3f0b69f1]
+
+	* include/sudo_plugin.h, src/sudo_plugin_int.h:
+	Move struct generic_plugin to sudo_plugin_int.h
+	[6f7bc629329c]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/parse.c, plugins/sudoers/parse.h,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Allow sudoers file name, mode, uid and gid to be specified in the
+	settings list. The sudo front end does not currently set these but
+	may in the future.
+	[22f38a0fda2a]
+
+2011-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
+	doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
+	doc/visudo.man.in:
+	1.8.0rc1
+	[5d4588b9c057]
+
+	* doc/sudo.pod, doc/sudoreplay.pod, doc/visudo.pod,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
+	src/parse_args.c, src/sudo.h:
+	add help text to sudo, visudo and sudoreplay for the -h option
+	[52e7378d8476]
+
+2011-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/snprintf.c:
+	avoid using "howmany" for a parameter name since it is a select-
+	related macro
+	[a14d565401a1]
+
+	* doc/sudoers.pod:
+	mention group_plugin when describing nonunix_group
+	[e0d1d0034b17]
+
+	* doc/sudo_plugin.pod:
+	Add missing period at end of sentence
+	[6744d7e9056d]
+
+	* Makefile.in, doc/Makefile.in, include/Makefile.in,
+	plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	add localstatedir; closes bug 471
+	[7aefcab85088]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/sudoreplay.c,
+	src/exec.c, src/exec_pty.c:
+	The howmany macro lives in sys/sysmacros.h on SVR5 systems Closes
+	Bug 470
+	[927ed6740f32]
+
+	* configure.in:
+	add missing AH_TEMPLATE for ENV_RESET
+	[16300010c986]
+
+	* src/exec.c:
+	SVR5 systems return non-zero for success on socketpair(), check for
+	-1 instead. Closes Bug 469
+	[4d276494bf8e]
+
+2011-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	1.8.0b5
+	[d611cd5d73d3]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
+	regen
+	[85e96eeaed82]
+
+	* doc/sudo.pod:
+	Document that a sudo.conf file with no Pligin lines uses the default
+	sudoers plugins.
+	[88bd52da977f]
+
+	* src/load_plugins.c:
+	If sudo.conf contains no Plugin lines, use the default sudoers
+	policy and I/O plugins.
+	[fd8f4cb811ab]
+
+2011-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudo_nss.c:
+	Avoid printing empty "Runas and Command-specific defaults for user"
+	line.
+	[2dd330fe4f8b]
+
+	* common/lbuf.c:
+	Truncate the buffer at buf.len before printing in the non-wordwrap
+	case.
+	[901e9833f80d]
+
+	* common/lbuf.c:
+	Remove extra newline when the tty width is very small or unavailable
+	[245c05506c0e]
+
+2011-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/alias.c:
+	Remove unneeded variable.
+	[2c086d30b796]
+
+2011-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Prefer getutxid over getutid
+	[3f3322e9c93e]
+
+	* plugins/sudoers/boottime.c:
+	Include utmp.h / utmpx.h before missing.h as apparently including it
+	afterwards causes a compilation problem on GNU Hurd.
+	[a528029ae962]
+
+2011-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/toke_util.c:
+	#include "foo.h", not <foo.h> for local includes.
+	[f65ec693998e]
+
+	* src/parse_args.c:
+	remove bogus XXX
+	[9136c17d53ce]
+
+	* compat/mksiglist.c:
+	Fix typo
+	[1a3bb7b455c9]
+
+	* compat/glob.c, plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/match.c:
+	return foo not return(foo)
+	[5c9e0647359a]
+
+2011-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	Remove duplicate FD_SET of signal_pipe[0]
+	[3096527d2215]
+
+2011-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/mksiglist.c:
+	Use "missing.h" not <missing.h> in generated code.
+	[d8e09cffbe09]
+
+2011-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure:
+	fix --with-iologdir=no
+	[a89699cb5f5f]
+
+	* aclocal.m4, configure:
+	fix typo that broke --with-iologdir
+	[91b54eb22403]
+
+2011-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
+	doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
+	doc/visudo.man.in:
+	Bump version to 1.8.0b4
+	[e2b7f2cdc02e]
+
+	* NEWS:
+	sync
+	[decf5a0a8a33]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Attempt to clarify how users and groups interact in Runas_Specs
+	[e6fb3a2dbd77]
+
+	* plugins/sudoers/regress/visudo/test2.out,
+	plugins/sudoers/regress/visudo/test2.sh:
+	Add test for quoted group that contains escaped double quotes
+	[44596c48c629]
+
+	* src/exec.c, src/exec_pty.c:
+	Pass SIGUSR1/SIGUSR2 through to the child.
+	[c3108a827b01]
+
+	* src/exec_pty.c, src/sudo_exec.h:
+	Use special values SIGCONT_FG and SIGCONT_BG instead of SIGUSR1 and
+	SIGUSR2 to indicate whether the child should be continued in the
+	foreground or background.
+	[35ca47cc6785]
+
+	* src/exec.c:
+	Use pid_t not int and check the return value of kill()
+	[36ae7d37d7f9]
+
+2011-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c:
+	Remove obsolete comment
+	[baebef4919f6]
+
+	* src/exec.c:
+	In non-pty mode before continuing the child, make it the foreground
+	pgrp if possible. Fixes resuming a shell.
+	[fef5b1d02ddb]
+
+	* src/exec_pty.c:
+	If we get a signal other than SIGCHLD in the monitor, pass it
+	directly to the child.
+	[b3ecb28163a0]
+
+	* src/exec.c, src/exec_pty.c, src/sudo.h:
+	Save signal state before changing handlers and restore before we
+	execute the command.
+	[faf7475dc4bf]
+
+2011-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Use a char array to map a number to a base36 digit.
+	[257576c51f8b]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod:
+	Be clear about what versions of sudo support new LDAP attributes.
+	Fix up some formatting of attribute names. Minor other tweaks.
+	[39f65df71f65]
+
+2011-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	match quoted strings the same way whether in a Defaults line or as a
+	user/group/netgroup name. Fixes escaped double quotes in quoted
+	user/group/netgroup names.
+	[601d97ea8792]
+
+	* plugins/sudoers/Makefile.in:
+	'make check' depends on visudo and testsudoers
+	[127c5a24df8f]
+
+	* plugins/sudoers/sudoers2ldif:
+	Add sudoOrder attribute to each entry Parse LOG_{INPUT,OUTPUT} tags
+	[9029163a58c3]
+
+2011-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/UPGRADE:
+	Mention LDAP attribute compatibility status.
+	[2c3595aaec63]
+
+2011-01-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	Mention phpQLAdmin
+	[9304c9064fbe]
+
+	* INSTALL, NEWS, config.h.in, configure, configure.in,
+	doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c:
+	Add --disable-env-reset configure option.
+	[8a753aa13a46]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Document that sudoers_locale also affects logging and email.
+	[998d6ac11277]
+
+	* NEWS, config.h.in, configure, configure.in,
+	plugins/sudoers/logging.c:
+	Do logging and email sending in the locale specified by the
+	"sudoers_locale" setting ("C" by default). Email send by sudo
+	includes MIME headers when the sudoers locale is not "C".
+	[cb7e55408400]
+
+2011-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Fix indentation
+	[65ae7e92b9e4]
+
+2011-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, src/parse_args.c, src/sudo.c:
+	Perform command escaping for "sudo -s" and "sudo -i" after
+	validating sudoers so the sudoers entries don't need to have all the
+	backslashes.
+	[4e168c103f4b]
+
+2011-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/logging.c:
+	Prepend "list " to the command logged when "sudo -l command" is used
+	to make it clear that the command was listed, not run.
+	[f392a6056cd6]
+
+	* plugins/sudoers/parse.c:
+	cosmetic change
+	[7c0951dbc2dd]
+
+	* common/aix.c, common/alloc.c, common/fileops.c, common/fmt_string.c,
+	common/list.c, common/term.c, compat/fnmatch.c, compat/getcwd.c,
+	compat/glob.c, compat/isblank.c, compat/memrchr.c, compat/mktemp.c,
+	compat/nanosleep.c, compat/regress/glob/globtest.c,
+	compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c,
+	compat/strsignal.c, compat/utimes.c, plugins/sample/sample_plugin.c,
+	plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c,
+	plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c,
+	plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c,
+	src/sudo_noexec.c, src/tgetpass.c:
+	standardize on "return foo;" rather than "return(foo);" or "return
+	(foo);"
+	[32d76c5aaf8c]
+
+	* plugins/sudoers/sudoers.c:
+	Do not reject sudoers file just because it is root-writable.
+	[0febc579185b]
+
+2011-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	sync
+	[1ab03f8278ff]
+
+	* plugins/sudoers/sudo_nss.c:
+	For "sudo -U user -l" if user is not authorized on the host, say so.
+	[289afe6dd15c]
+
+	* plugins/sudoers/ldap.c:
+	In sudo_ldap_lookup(), always do the initial sudoers check as the
+	invoking user. If we are listing another user's privs we will do a
+	separate lookup using list_pw later.
+	[e52bc15de76d]
+
+2011-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	add parser fill tests
+	[4f65140d3515]
+
+	* compat/regress/glob/globtest.c, compat/regress/glob/globtest.in:
+	Don't test features not supported by the bundled glob()
+	[8ec7ace11949]
+
+	* Makefile.in, aclocal.m4, common/Makefile.in, common/term.c,
+	compat/Makefile.in, configure.in, doc/LICENSE, doc/Makefile.in,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod, doc/sudoers.man.in,
+	doc/sudoers.pod, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/match.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c, src/Makefile.in, zlib/Makefile.in:
+	Update copyright year to 2011
+	[ac1b45cb1809]
+
+	* plugins/sudoers/sudo_nss.c:
+	When listing, use separate lbufs for the defaults and the privileges
+	and only print something if the number of privileges is non-zero.
+	Fixes extraneous Defaults output for "sudo -U unauthorized_user -l".
+	[d0854d39f8ef]
+
+	* plugins/sudoers/ldap.c:
+	Stash pointer to user group vector in LDAP handle and only reuse the
+	query if it has not changed. We always allocate a new buffer when we
+	reset the group vector so a simple pointer check is sufficient.
+	[88861d4eba69]
+
+	* plugins/sudoers/sudo_nss.c:
+	Check initgroups() return value.
+	[3bdaf58408a7]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/parser/check_fill.c:
+	Add tests for the fill functions in toke_util.c
+	[bca587ab4956]
+
+2011-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/regress/iolog_path/check_iolog_path.c:
+	fix copyright year
+	[e2038cdaf055]
+
+	* NEWS:
+	sync
+	[56ca5d5eaebe]
+
+2011-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/term.c:
+	Clear, don't set, OPOST in c_oflag as was intended in 506ad5ae9b4e.
+	[b91f266624ec]
+
+2011-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg, sudo.pp:
+	Add Requires line for audit-libs >= 1.4 for RHEL5+
+	[6c02f976171b]
+
+	* pp:
+	sync with git version
+	[d301c32d5865]
+
+2011-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	fix typo
+	[39353f92976f]
+
+2011-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Update for sudo 1.7.4p5
+	[b444da76901f]
+
+	* doc/schema.OpenLDAP, doc/schema.iPlanet:
+	Add sudoNotBefore and sudoNotAfter attributes as optional attributes
+	to the sudoRole object class. From Andreas Mueller
+	[dacfad7e7a95]
+
+2011-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS:
+	Mention "sudo -g group" password check fix.
+	[1eb8fb14e53b]
+
+	* plugins/sudoers/sudoers.c:
+	Fix "sudo -g" support in the sudoers module.
+	[07d1b0ce530e]
+
+	* plugins/sudoers/check.c:
+	If the user is running sudo as himself but as a different group we
+	need to prompt for a password.
+	[caf1fcc9a117]
+
+2011-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* NEWS, config.h.in, configure, configure.in, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
+	plugins/sudoers/ldap.c:
+	Add support for TIMEOUT in ldap.conf, mapping to the OpenLDAP
+	LDAP_OPT_TIMEOUT. There is no corresponding option for mozilla-
+	derived LDAP SDKs but we can pass the timeout parameter to
+	ldap_search_ext_s() or ldap_search_st() when possible.
+	[5537049991f7]
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
+	regen
+	[5b361c3c4324]
+
+	* NEWS, doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Add NETWORK_TIMEOUT as an alias for BIND_TIMELIMIT for compatibility
+	with OpenLDAP ldap.conf files.
+	[e97843bd16fb]
+
+	* plugins/sudoers/pwutil.c:
+	If user has no supplementary groups, fall back on checking the group
+	file expliticly.
+	[5223ad4eb690]
+
+2011-01-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.h, plugins/sudoers/toke_util.c:
+	constify
+	[6e132a4cca61]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.h,
+	plugins/sudoers/toke.l:
+	Move fill macro to toke.h
+	[623d430798cf]
+
+	* MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.h, plugins/sudoers/toke.l,
+	plugins/sudoers/toke_util.c:
+	Split tokenizer utility functions out into toke_util.c
+	[89a97bd51618]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	ANSIfy
+	[ca0eba1dfaa9]
+
+2011-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	sync
+	[a43f94064bb3]
+
+	* plugins/sudoers/Makefile.in:
+	Add visudo tests to check target
+	[8c82fb4ed40f]
+
+	* compat/Makefile.in, compat/regress/fnmatch/fnm_test.c,
+	compat/regress/fnmatch/fnm_test.in, compat/regress/glob/files,
+	compat/regress/glob/globtest.c, compat/regress/glob/globtest.in:
+	Add my regress tests for fnmatch() and glob() from OpenBSD.
+	[6e8c1f211723]
+
+	* plugins/sudoers/regress/testsudoers/test1.sh,
+	plugins/sudoers/regress/visudo/test1.ok,
+	plugins/sudoers/regress/visudo/test1.sh:
+	Add regress test for command tags using visudo -c
+	[18b0ef207c0f]
+
+	* plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/testsudoers/test1.ok,
+	plugins/sudoers/regress/testsudoers/test1.sh:
+	Add support for regress tests using testsudoers
+	[1fa94bd2671b]
+
+	* plugins/sudoers/testsudoers.c:
+	Need to set user_name explicitly due to internal changes made when
+	converting sudoers to a plugin.
+	[1fa54e86a364]
+
+2011-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/regress/iolog_path/check_iolog_path.c,
+	plugins/sudoers/regress/iolog_path/data, src/Makefile.in,
+	zlib/Makefile.in:
+	Add regression tests for iolog_path()
+	[afa4b416e559]
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in, zlib/Makefile.in:
+	Add support for "make Makefile" to regenerate Makefile from
+	Makefile.in
+	[98bd2dda3294]
+
+	* plugins/sudoers/iolog_path.c:
+	Quiest a bogus compiler warning.
+	[5ff932a7ad67]
+
+2011-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog_path.c:
+	Protect call to setlocale() with HAVE_SETLOCALE
+	[2c29ee3ccc81]
+
+2011-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST:
+	mkstemps.c was renamed mktemp.c
+	[ae299c3b1827]
+
+	* NEWS:
+	Update from 1.7 branch
+	[20817d79717b]
+
+	* Makefile.in:
+	Use "mv -f" when regenerating ChangeLog
+	[c163635206c6]
+
+	* plugins/sudoers/match.c:
+	Fix NULL dereference with "sudo -g group" when the sudoers rule has
+	no runas user or group listed. Fixes RedHat bug Bug 667103.
+	[41a6a1243d9e]
+
+2011-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Correct the default sudo.conf example
+	[4e791698cad1]
+
+2010-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog_path.c:
+	Reset slashp if we allocate a new buffer for strftime()
+	[e491daa4203b]
+
+	* plugins/sudoers/iolog_path.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add extra out parameter to expand_iolog_path() to allow the caller
+	to split the path into dir and file components if needed.
+	[88346bc5ae39]
+
+2010-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	mkdir_iopath() returns size_t now that it uses strlcpy() and not
+	snprintf()
+	[3c4c64d265eb]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c:
+	Trim leading slashes from iolog_file and trailing slashes from
+	iolog_dir
+	[a803b51f8948]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Pass a single I/O log file name in command_details instead of
+	separate dir + file parameters.
+	[d672a3e46e80]
+
+	* plugins/sudoers/sudoreplay.c:
+	change an error() to errorx()
+	[8013dcfdd69d]
+
+	* plugins/sudoers/iolog.c:
+	Add missing cwd line to I/O log info file that got dropped when
+	iolog_deserialize_info() was added
+	[7cf84f208423]
+
+2010-12-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Avoid relying on globals filled in by the sudoers policy module for
+	the sudoers I/O log module. The I/O log open function now pulls the
+	bits it needs out of user_info and command_info.
+	[c02f6951b0cc]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	If no iolog file is specified by the policy plugin, use io_nextid()
+	to determine the next file in the sequence.
+	[faa1130b1020]
+
+2010-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document iolog_compress in command_info
+	[58895c7d12f5]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
+	Add support for the iolog_compress variable in command_info.
+	[36f13a2fd1c1]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
+	Add sigsetjmp() calls to all plugin entry points just to be safe.
+	[3fa482355bc4]
+
+	* src/sudo.c, src/sudo.h:
+	Don't need iolog variables in struct command_details, they are for
+	the I/O log plugins to handle.
+	[5111579ffd9d]
+
+2010-12-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Document use of mkdtemp() for iolog path teplates
+	[5db6101408a9]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
+	regen
+	[1ee11fd6d4eb]
+
+	* doc/sudo_plugin.pod, doc/sudoers.pod:
+	Document iolog_file and supported escape sequences for sudoers.
+	Clarify that iolog_file can contain directories.
+	[da611dedcbdb]
+
+	* compat/Makefile.in, configure, configure.in:
+	Fix building of mkstemps/mkdtemp replacements.
+	[793a5e303122]
+
+	* compat/mkstemps.c, compat/mktemp.c, config.h.in, configure,
+	configure.in, include/missing.h:
+	Provide mkdtemp() for systems without it.
+	[b0527dfa965c]
+
+	* plugins/sudoers/iolog_path.c:
+	Fix typo
+	[277f6c514cba]
+
+	* plugins/sudoers/iolog.c:
+	Only use mkdtemp() if the path ends in at least 6 Xs since otherwise
+	glibc mkdtemp() returns EINVAL.
+	[2e7323b05579]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/iolog_path.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Allow sudoers to specify the iolog file in addition to the iolog
+	dir. Add escape sequence support to iolog file and dir: sequence
+	number, user, group, runas_user, runas_group, hostname and command
+	in addition to any escape sequence recognized by strftime(3).
+	[75cd32ee0435]
+
+	* plugins/sudoers/iolog.c:
+	Add missing sigsetjmp() call in I/O plugin open function. Fixes a
+	crash when the I/O plugin calls error(), errorx() or log_error().
+	[1a6718bd817d]
+
+2010-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.pod, plugins/sudoers/iolog.c,
+	plugins/sudoers/sudoers.c:
+	Give the policy module fine-grained control over what the I/O plugin
+	logs.
+	[d29784fd2a66]
+
+	* common/term.c:
+	Clear OPOST from c_oflag like we used to. Fixes screen-based editors
+	such as vi.
+	[506ad5ae9b4e]
+
+	* doc/sudoers.pod:
+	Clarify umask option description. From Reuben Thomas.
+	[1294ac84222b]
+
+2010-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Pick last match in LDAP sudoers too
+	[fbfd8e85703b]
+
+	* doc/sudo_plugin.pod:
+	Document iolog_file, iolog_dir and use_pty
+	[26120a59c20e]
+
+	* plugins/sample/sample_plugin.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/sudoers.c:
+	Adapt plugins to version I/O logging ABI 1.1
+	[880dd64bc1e8]
+
+	* src/exec.c, src/sudo.h:
+	Add use_pty command_info flag for policies to indicate that a pty
+	should be allocated even if no I/O logging is performed.
+	[e7b167f8a6e5]
+
+	* src/sudo.c:
+	Add remaining plugin convenience functions
+	[ffeaf96da031]
+
+	* include/sudo_plugin.h, src/sudo.c, src/sudo.h,
+	src/sudo_plugin_int.h:
+	Change I/O log API to pass in command info to the I/O log open
+	function. Add iolog_file and iolog_dir parameters to command info.
+	This allows the policy plugin to specify the I/O log pathname. Add
+	convenience functions for calling plugin functions that handle ABI
+	backwards compatibility.
+	[9b81dce76ce5]
+
+	* compat/dlopen.c:
+	Remove useless cast
+	[7cecce969739]
+
+2010-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Bump version to 1.8.0b3
+	[1dc9f040aae0]
+
+2010-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	Remove extraneous newline
+	[71c94551eea5]
+
+2010-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/iolog.c:
+	Make I/O log dir configurable.
+	[99b576667a38]
+
+	* aclocal.m4, configure, configure.in, doc/sudoers.pod:
+	Rename io_logdir to iolog_dir
+	[0731662acc8d]
+
+2010-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Add missing '*' that prevented the generic ELF case from matching.
+	[be77ca26bfb2]
+
+	* pp:
+	If file(1) can't identify the ELF binary type, try readelf(1).
+	[38a18d32a9e3]
+
+2010-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/kerb4.c, plugins/sudoers/check.c,
+	plugins/sudoers/env.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/sudoers.c, src/sudo.c:
+	Use %u to print uid/gid, not %lu and adjust casts to match.
+	[03c43b8749cf]
+
+	* doc/sudoers.ldap.pod:
+	Clarify ordering of entries and attributes.
+	[924e2a6bb603]
+
+	* doc/sudoers.ldap.pod:
+	Fix typo and editing goof.
+	[79dc7ccd85a8]
+
+	* doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet,
+	doc/sudoers.ldap.pod:
+	Merge in ordered LDAP entry support from Andreas Mueller.
+	[ea5885989bad]
+
+	* plugins/sudoers/ldap.c:
+	Make sure we don't dereference a NULL handle.
+	[1a9f9ee15371]
+
+2010-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Add support for RHEL 6 file modes that include a trailing dot on
+	files with an SELinux security context
+	[dc09be959547]
+
+2010-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	exec_setup() does not need to setuid(0), the Ubuntu issue was in the
+	sudoers module.
+	[d6dd99fc6062]
+
+	* plugins/sudoers/sudoers.c:
+	create_admin_success_flag() should use restore_perms() rather than
+	set_perms() to restore the uid.
+	[eba7a91c1f57]
+
+	* src/sudo.c:
+	In exec_setup() call setuid(0) to make certain the subsequent uid
+	and gid changes will succeed. Fixes a problem on Ubuntu.
+	[c5d32abf0645]
+
+	* src/sudo_edit.c:
+	Error out if we cannot change to root's uid so we catch the failure
+	early.
+	[7a2e7f8f2c80]
+
+2010-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.pod:
+	fix typo; from Michael T Hunter
+	[a574a9d0db5b]
+
+	* plugins/sudoers/match.c:
+	In sudoedit mode, assume command line arguments are paths and pass
+	FNM_PATHNAME to fnmatch().
+	[ce0abff8ce9f]
+
+2010-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add workaround for an error in sys/types.h on HP-UX 11.23 when large
+	file support is enabled. Defining _XOPEN_SOURCE_EXTENDED avoids the
+	broken bits of the header file.
+	[e337217f097a]
+
+	* aclocal.m4:
+	Fix SUDO_MAILDIR usage of AC_LANG_PROGRAM
+	[fbbcee28961f]
+
+	* sudo.pp:
+	For Tru64, strip off beta version.
+	[eeccd762df5e]
+
+	* MANIFEST, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h:
+	Avoid conflicts with system definitions in grp.h and pwd.h
+	[b219ffe1da09]
+
+	* zlib/gzguts.h:
+	Include stdio.h after zlib.h, not before. We need the large file
+	defines to come first.
+	[21d6df39790f]
+
+2010-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
+	regen
+	[3ff8750d0aac]
+
+	* Makefile.in:
+	Don't clean ChangeLog
+	[ab0d30d289d4]
+
+	* plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Add prototype for cleanup()
+	[75626fd3769a]
+
+2010-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/group_plugin.c:
+	Avoid deferencing group_plugin if it is NULL in
+	group_plugin_query(). This should not happen.
+	[4f2933c8da7e]
+
+	* plugins/sudoers/group_plugin.c:
+	group plugin init function return TRUE when successful
+	[198024477030]
+
+2010-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Enlarge the array of entry wrappers int blocks of 100 entries to
+	save on allocation time. From Andreas Mueller
+	[375c916bb03b]
+
+	* plugins/sudoers/ldap.c:
+	Add back call to sudo_ldap_timefilter() in sudo_ldap_build_pass2()
+	that was mistakenly dropped.
+	[1555f5bc132d]
+
+2010-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/TROUBLESHOOTING:
+	Mention that sudo needs "ar" to build.
+	[65582ace2d09]
+
+	* configure, configure.in:
+	Fail with a more useful error if "ar" is not found.
+	[d1cb83719c17]
+
+2010-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Merge in ordered LDAP entry support from Andreas Mueller and add
+	local changes from the 1.7 branch.
+	[bca29e461618]
+
+2010-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet,
+	doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Add timed entry support from Andreas Mueller.
+	[e18d1df46a8d]
+
+	* plugins/sudoers/group_plugin.c:
+	Don't try to unload if group_plugin is NULL. Don't call dlclose() if
+	group_handle is NULL
+	[de2273da37d5]
+
+	* plugins/sudoers/sudoers.h:
+	It is now plugin_cleanup(), not cleanup()
+	[da62a4e1a78c]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/sudoers.c:
+	Call plugin_cleanup(), not cleanup()
+	[e800ad8b33ad]
+
+2010-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Use efree() not free() and remove malloc.h include since we never
+	directly call malloc() or free().
+	[107fffd134bb]
+
+2010-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	set PSTAMP for Solaris and move the backend-specific bits to their
+	own %if [xxx] %endif blocks in %set.
+	[a94ebe8920c1]
+
+	* pp:
+	sync with git repo
+	[75ff509696b4]
+
+	* configure, configure.in:
+	Only substitute file zlib files when using the builtin zlib
+	[6c8145b2deb4]
+
+	* common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in, zlib/Makefile.in:
+	Give up on using VPATH to find sources as it is implemented
+	inconsistenly in different versions of make.
+	[60517c69aaee]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/getdate.c,
+	plugins/sudoers/gram.c, plugins/sudoers/toke.c:
+	Include config.h before any other includes to make sure we get the
+	right value for _FILE_OFFSET_BITS.
+	[8fb007ca832e]
+
+	* MANIFEST:
+	Add zlib
+	[04a3e23dfaa9]
+
+	* zlib/Makefile.in:
+	Add missing targets
+	[40e45a177168]
+
+	* src/Makefile.in:
+	g/c unused $(GENERATED)
+	[c8758068c1bc]
+
+2010-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/group_plugin.c:
+	Zero out group_plugin on unload just to be safe.
+	[0b10f4d101ca]
+
+	* plugins/sudoers/group_plugin.c:
+	Unload group plugin if its init function fails.
+	[6552cdac4b7c]
+
+	* src/sudo.c:
+	Only chdir to cwd if it is different from the current cwd or there
+	is a new root (chroot).
+	[b8203e875e84]
+
+	* configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
+	doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.ldap.cat,
+	doc/sudoers.ldap.man.in, doc/visudo.cat, doc/visudo.man.in:
+	Bump version to 1.8.0b2
+	[6dadeb75a878]
+
+2010-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Better --enable-zlib description
+	[e0da54fa59a6]
+
+	* mkpkg:
+	Use system zlib on Linux Let configure decide on Solaris For all
+	others, use builtin zlib
+	[3d52eddb523c]
+
+	* zlib/zconf.h.in:
+	Add large file support.
+	[bec01215270d]
+
+	* config.h.in:
+	Add large file support.
+	[244e95b034ec]
+
+	* Makefile.in, configure, configure.in, doc/LICENSE, doc/license.pod,
+	zlib/Makefile.in, zlib/adler32.c, zlib/compress.c, zlib/crc32.c,
+	zlib/crc32.h, zlib/deflate.c, zlib/deflate.h, zlib/gzclose.c,
+	zlib/gzguts.h, zlib/gzlib.c, zlib/gzread.c, zlib/gzwrite.c,
+	zlib/infback.c, zlib/inffast.c, zlib/inffast.h, zlib/inffixed.h,
+	zlib/inflate.c, zlib/inflate.h, zlib/inftrees.c, zlib/inftrees.h,
+	zlib/trees.c, zlib/trees.h, zlib/uncompr.c, zlib/zconf.h.in,
+	zlib/zlib.h, zlib/zutil.c, zlib/zutil.h:
+	Add local copy of zlib for systems that lack it.
+	[7542ca465c5a]
+
+2010-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	If perform_io() fails, kill the child before exiting so it doesn't
+	complain about connection reset. We can get an I/O error if, for
+	example, and we get EIO reading from stdin.
+	[e59a05fa729f]
+
+2010-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, src/sudo.c:
+	Fix complilation on systems with set_auth_parameters() Sprinkle
+	volatile to quiet warnings from gcc 2.8.0
+	[a34c2b924ba7]
+
+	* compat/dlfcn.h, compat/dlopen.c:
+	Avoid potential namespace issues with dlopen() emulation.
+	[aedfababd6ca]
+
+	* MANIFEST:
+	sync
+	[6afb97e6d308]
+
+	* plugins/sudoers/interfaces.c:
+	Use INADDR_NONE instead of casting -1 to in_addr_t (which may not
+	exist).
+	[ddfca5af1a36]
+
+	* Makefile.in:
+	Mark ChangeLog as PHONY Don't overwrite ChangeLog if we can't run hg
+	[e9d04bfa4505]
+
+	* configure, configure.in:
+	HP-UX 10.20 libc has an incompatible getline
+	[2e7bc202e78d]
+
+	* plugins/sudoers/visudo.c:
+	Quiet an HP-UX compiler warning.
+	[55b9d587ac8c]
+
+	* configure, configure.in:
+	Check for vi even with --with-editor specified; the sample plugin
+	needs it.
+	[94dfc3643f76]
+
+2010-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/dlopen.c:
+	Fix remaining syntax errors.
+	[9d729b5b577e]
+
+	* src/Makefile.in:
+	sudo binary depends on the libtool-generated libs
+	[9e6148406adb]
+
+	* plugins/sudoers/group_plugin.c, src/load_plugins.c:
+	Use HAVE_DLOPEN instead of HAVE_DLFCN_H when determining whether to
+	include the local or system dlfcn.h
+	[68cfe4c1089b]
+
+	* pp:
+	Don't use run_as_superuser=false on HP-UX
+	[532242370b09]
+
+	* src/net_ifs.c:
+	Use memset() instead of zero_bytes() since we don't include
+	sudoers.h
+	[a187c18c2472]
+
+	* plugins/sudoers/interfaces.c:
+	Fix pasto; AF_INET not AF_INET6
+	[2d2e9d7dc6f9]
+
+	* compat/dlopen.c:
+	Actually call shl_load()
+	[ed8153b8a3cd]
+
+	* pp:
+	Update from git repo. Debian: version numbers now compliant with
+	policy section 5.6.12 HP-UX: minimal changes needed to work on HP-UX
+	10.20
+	[ecf2692bceeb]
+
+	* configure, configure.in:
+	Fix dlopen() detection for systems where dlopen() is in a separate
+	library.
+	[fa6b175582b6]
+
+	* plugins/sudoers/auth/pam.c:
+	If pam_acct_mgmt() returns PAM_AUTH_ERR print a (hopefully) more
+	useful message and return AUTH_FATAL so sudo does not keep trying to
+	validate the user.
+	[1be8857e5291]
+
+	* src/preload.c:
+	sudo_preload_table is an array
+	[b7704e72a9da]
+
+	* compat/dlopen.c:
+	Quiet a compiler warning and fix sudo_preload_table external
+	definition.
+	[8234987664cc]
+
+	* compat/dlfcn.h:
+	Fix multiple inclusion guard in dlfcn.h and fix dlerror() prototype.
+	[8bab6a4053cc]
+
+	* plugins/sudoers/group_plugin.c:
+	Make this compile correctly when no dlopen is available.
+	[57643879bd2b]
+
+2010-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Having a timestamp file defined is no longer indicative of tty
+	tickets being enabled. Check def_tty_tickets directly.
+	[efcc11ad157f]
+
+	* src/exec_pty.c, src/sudo.h, src/ttysize.c:
+	Fix TCGETWINSZ compat.
+	[da3a8b17cf7a]
+
+2010-10-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec_pty.c, src/ttysize.c:
+	Prefer newer TIOCGWINSZ ioctl to old TIOCGSIZE
+	[926492dd10a6]
+
+2010-10-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, src/sudo.c:
+	Move set_project() from sudoers module into sudo proper.
+	[beabafac03b4]
+
+	* configure, configure.in:
+	Fix typo and regenerate
+	[4a3caf4234f3]
+
+	* plugins/sudoers/ldap.c:
+	When iterating over returned LDAP entries, keep looking at remaining
+	matches even if we have a positive match. This catches negative
+	matches that may exist in other entries and more closely match the
+	sudoers file behavior.
+	[f47db6e609b0]
+
+	* pp:
+	Add support for multiple package instances on Solaris.
+	[7f2a8b942545]
+
+	* src/exec.c:
+	Add missing signal_pipe[0] to fdsr for the non-pty case.
+	[79d01e11b19c]
+
+	* mkpkg:
+	Add --with-project for Solaris
+	[ffa4c2bb93f7]
+
+	* README:
+	Need ar and ranlib too
+	[5c2f679172ef]
+
+2010-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c:
+	Preserve ODMDIR environment variable by default on AIX.
+	[bd47cb1e804f]
+
+2010-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, compat/Makefile.in, compat/dlfcn.h, compat/dlopen.c,
+	config.h.in, configure, configure.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/group_plugin.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.c, src/Makefile.in, src/load_plugins.c,
+	src/preload.c:
+	Add dlopen() emulation for systems without it. For HP-UX 10, emulate
+	using shl_load(). For others, link sudoers plugin statically and use
+	a lookup table to emulate dlsym().
+	[e92edfb3c642]
+
+2010-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/fnmatch.c, compat/glob.c, compat/mksiglist.c,
+	compat/nanosleep.c, compat/utimes.c:
+	When including compat headers, use the compat dir as part of the
+	path so we are sure to get the correct header.
+	[6c2a45da6af5]
+
+2010-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/linux_audit.c:
+	Ignore ECONNREFUSED from audit_log_user_command() which will occur
+	if auditd is not running.
+	[d314fe4c8d03]
+
+2010-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Sync with git version
+	[1c0357744222]
+
+2010-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/fileops.c, plugins/sudoers/defaults.c:
+	Cast isblank argument to unsigned char.
+	[c822dbb3ca54]
+
+2010-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, config.h.in, configure, configure.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c:
+	Implement --with-umask-override configure flag.
+	[863e3047df22]
+
+	* plugins/sudoers/env.c:
+	Take MODE_LOGIN_SHELL into account when initially setting reset_home
+	instead of special-casing it later.
+	[5d6b16480fd6]
+
+	* plugins/sudoers/sudoers.c:
+	In login mode, make a copy of the runas user's pw_shell for
+	NewArgv[0] because 1) we modify it and 2) it will runas_pw gets
+	freed before exec.
+	[1d1ccb568dfa]
+
+	* plugins/sudoers/env.c:
+	Reset HOME for "sudo -i" even if HOME was listed in env_keep.
+	[c1c1c65a2d63]
+
+	* src/sudo.c:
+	Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK.
+	[7443454e5f88]
+
+	* src/sudo.c:
+	Reset signal mask at sudo startup time; we need to be able to rely
+	on normal signal delivery to control the child process.
+	[95800163ff94]
+
+2010-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	Use sed instead of expr to split a flag from its argument. Fixes a
+	problem with expr interpreting its arguments as a flag when they
+	start with a dash.
+	[736065e14301]
+
+	* common/lbuf.c:
+	Do not need sys/time.h after all
+	[91f6f668ccda]
+
+	* common/lbuf.c:
+	Include sys/time.h for utimes() and struct timeval. No longer need
+	ioctl.h or termios.h
+	[2d75273d3213]
+
+	* compat/snprintf.c:
+	Quiet bogus compiler warnings.
+	[fe252e1968f5]
+
+	* include/missing.h:
+	Declare innetgr() for HP-UX which is missing a declaration. Declare
+	domainname() for HP-UX and Solaris which are missing a declaration.
+	[b37c50751138]
+
+	* plugins/sudoers/bsm_audit.c:
+	Use __sun for consistency with the rest of the sources.
+	[6b086b61ccb6]
+
+	* plugins/sudoers/group_plugin.c:
+	Quiet a bogus compiler warning.
+	[ebc069842c4a]
+
+	* plugins/sudoers/pwutil.c:
+	Don't try to delref a NULL group.
+	[f6ff0838be21]
+
+	* common/alloc.c, common/lbuf.c:
+	Include memory.h on systems that need it.
+	[4e676da81c6f]
+
+2010-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	Quiet gcc warnings on glibc systems that use warn_unused_result for
+	write(2).
+	[0532da0b7cf7]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	sudo_plugin is in section 8; from Ted Percival
+	[b4506a0de87e]
+
+	* plugins/sudoers/Makefile.in:
+	testsudoers depends on libsudoers.la, not sudoreplay
+	[cdb1cc3bf06a]
+
+2010-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	Read as many signals on the signal pipe as we can before returning.
+	[b181671da047]
+
+	* src/exec.c, src/exec_pty.c, src/sudo_exec.h:
+	Instead of using a array to store received signals, open a pipe and
+	have the signal handler write the signal number to one end and
+	select() on the other end. This makes it possible to handle signals
+	similar to I/O without race conditions.
+	[ee84d65c16b6]
+
+2010-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/visudo.pod, plugins/sudoers/visudo.c:
+	Make "visudo -c -f -" check the standard input.
+	[195a3d2a9a26]
+
+	* doc/sudoers.pod:
+	set_home and always_set_home have an effect if HOME is present in
+	the env_keep list.
+	[159d0b9dc5c8]
+
+	* plugins/sudoers/env.c:
+	Make -H flag work when HOME is listed in env_keep. Also makes
+	"set_home" and "always_set_home" override override HOME in env_keep.
+	[a3e5b966193f]
+
+2010-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/interfaces.c,
+	plugins/sudoers/interfaces.h, plugins/sudoers/match.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c, src/net_ifs.c:
+	Convert sudoers plugin to use interface list passed in settings.
+	[87d9b5f4f586]
+
+	* doc/sudo_plugin.pod, src/Makefile.in, src/net_ifs.c,
+	src/parse_args.c, src/sudo.h:
+	Query local network interfaces in the main sudo driver and pass to
+	the plugin as "network_addrs" in the settings list.
+	[7f35bcfe77a7]
+
+	* plugins/sudoers/bsm_audit.c:
+	Solaris BSM audit return EINVAL when auditing is not enabled,
+	whereas OpenBSM returns ENOSYS.
+	[411b980ec58b]
+
+2010-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/fnmatch.c:
+	missing.h should come before most local includes
+	[53921a7b8b5b]
+
+	* plugins/sudoers/sudoreplay.c:
+	missing.h should come before most local includes
+	[e9abb0db1aac]
+
+	* plugins/sudoers/sudoers.h:
+	Make local includes consistent; use double quotes for local includes
+	except for generated ones where we use angle brackets.
+	[09de4faa9547]
+
+	* plugins/sudoers/sudoers.c:
+	Always fill in NewArgv for audit code.
+	[7c3aca60519f]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add missing LOG_INPUT/LOG_OUTPUT support in the lexer.
+	[007cf6560f92]
+
+	* common/alloc.c, common/atobool.c, common/fileops.c,
+	common/fmt_string.c, common/lbuf.c, common/list.c, common/term.c,
+	common/zero_bytes.c, compat/closefrom.c, compat/fnmatch.c,
+	compat/getcwd.c, compat/getgrouplist.c, compat/getline.c,
+	compat/getprogname.c, compat/glob.c, compat/isblank.c,
+	compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c,
+	compat/nanosleep.c, compat/setenv.c, compat/snprintf.c,
+	compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
+	compat/unsetenv.c, compat/utimes.c, include/compat.h,
+	plugins/sample/sample_plugin.c, plugins/sample_group/getgrent.c,
+	plugins/sample_group/plugin_test.c,
+	plugins/sample_group/sample_group.c, plugins/sudoers/audit.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/match.c,
+	plugins/sudoers/plugin_error.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/timestr.c, src/error.c, src/sesh.c, src/sudo.h,
+	src/sudo_noexec.c, src/ttysize.c:
+	Make local includes consistent; use double quotes for local includes
+	except for generated ones where we use angle brackets. Also g/c
+	unused compat.h.
+	[e57070dc8f04]
+
+2010-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/match.c:
+	When matching the runas user and runas group (-u and -g command line
+	options), keep track of runas group and runas user matches
+	separately. Only return a positive match if we have a match for both
+	runas user and runas group (if specified).
+	[815219e04cc8]
+
+2010-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Add support for multiple URI lines by joining the contents and
+	passing the result to ldap_initialize.
+	[a47cae3b72e8]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c:
+	Do not return -1 on error from the display functions; the caller
+	expects a return value >= 0.
+	[101456a7dd00]
+
+	* plugins/sudoers/sudoers.c:
+	Do not set both MODE_EDIT and MODE_RUN
+	[8faa36694d54]
+
+2010-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	Move includes to the top of the file.
+	[a51436798e8c]
+
+2010-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Add missing definition of timedir
+	[458a749c2c5e]
+
+	* compat/fnmatch.c, compat/getprogname.c, compat/isblank.c,
+	compat/mksiglist.c, compat/strsignal.c,
+	plugins/sudoers/plugin_error.c, src/error.c, src/sudo_noexec.c:
+	Add #include of sys/types.h for .c files that include missing.h to
+	be sure that size_t and ssize_t are defined.
+	[08e3132dbf4f]
+
+	* plugins/sudoers/Makefile.in:
+	Install sudoers file from the build dir not hte src dir.
+	[ca89e962dbf4]
+
+2010-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/set_perms.c:
+	If runas_pw changes, reset the stashed runas aux group vector.
+	Otherwise, if runas_default is set in a per-command Defaults
+	statement, the command runs with root's aux group vector (i.e. the
+	one that was used when locating the command).
+	[24f9107cedd2]
+
+	* plugins/sudoers/Makefile.in:
+	Add target to generate sudoers file Remove generated sudoers file as
+	part of distclean
+	[fb7422e90f03]
+
+2010-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/exec.c:
+	When not logging I/O install a handler for SIGCONT and deliver it to
+	the command upon resume. Fixes bugzilla #431
+	[495dce52a5aa]
+
+2010-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.h:
+	g/c unused auth_pw extern definition
+	[40eb7477ba17]
+
+	* plugins/sudoers/check.c, plugins/sudoers/sudoers.c:
+	Move get_auth() into check.c where it is actually used.
+	[e31db0ce3a61]
+
+2010-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* common/lbuf.c:
+	Convert a remaining puts() and putchar() to use the output function.
+	[d69e363a506b]
+
+	* plugins/sudoers/plugin_error.c:
+	Plug memory leak
+	[68895469ea8d]
+
+2010-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c:
+	Set dupcheck to TRUE when setting new HOME value if !env_reset but
+	always_set_home is true. Prevents a duplicate HOME in the
+	environment (old value plus the new one) introduced in f421f8827340.
+	[9ca19183794f]
+
+	* configure, configure.in, plugins/sudoers/sudoers,
+	plugins/sudoers/sudoers.in:
+	Substitute sysconfdir in the installed sudoers file to get the
+	correct path for sudoers.d.
+	[86072b6cd55d]
+
+2010-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/get_pty.c:
+	Fix typo that prevented compilation on Irix; Friedrich Haubensak
+	[b48be51b65fc]
+
+2010-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
+	common/atobool.c, common/fileops.c, common/fmt_string.c,
+	common/lbuf.c, common/list.c, common/term.c, common/zero_bytes.c,
+	compat/Makefile.in, compat/closefrom.c, compat/fnmatch.c,
+	compat/getcwd.c, compat/getgrouplist.c, compat/getline.c,
+	compat/getprogname.c, compat/glob.c, compat/isblank.c,
+	compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c,
+	compat/nanosleep.c, compat/setenv.c, compat/snprintf.c,
+	compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
+	compat/unsetenv.c, compat/utimes.c, include/compat.h,
+	include/missing.h, plugins/sample/sample_plugin.c,
+	plugins/sample_group/getgrent.c,
+	plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/audit.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/linux_audit.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/timestr.c, src/Makefile.in, src/error.c, src/sesh.c,
+	src/sudo.h, src/sudo_noexec.c, src/ttysize.c:
+	Merge compat.h and missing.h into missing.h
+	[572909ae9716]
+
+2010-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	If the user hits ^C while a password is being read, error out before
+	reading any further passwords in the pam conversation function.
+	Otherwise, if multiple PAM auth methods are required, the user will
+	have to hit ^C for each one.
+	[23782631748c]
+
+2010-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Update comment
+	[a5296cb3a20a]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document sudo_conv_t function and sudo_printf_t return values.
+	[745c0017814c]
+
+	* src/conversation.c:
+	Make _sudo_printf return the number of characters printed on success
+	like printf(3).
+	[8eeefe8d7e77]
+
+2010-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	sudoers.h includes sudo_plugin.h for us
+	[cabe68e07807]
+
+	* common/Makefile.in, common/gettime.c, compat/mkstemps.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/sudo.h,
+	src/sudo_edit.c:
+	Use gettimeofday() directly instead of via the gettime() wrapper.
+	[7490426c99ae]
+
+	* common/gettime.c, compat/snprintf.c, compat/strcasecmp.c,
+	compat/strerror.c, config.h.in, configure, configure.in,
+	include/compat.h, include/missing.h, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c, src/sudo.c:
+	Remove some obsolete configure tests, ancient Unix systems are no
+	longer supported.
+	[2be6218c3a36]
+
+2010-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Set pp_kit_version and strip off patch level
+	[aacfda1b676d]
+
+	* sudo.pp:
+	Better handling of versions with a patchlevel. For rpm and deb, use
+	the patchlevel+1 as the release. For AIX, use the patchlevel as the
+	4th version number. For the rest, just leave the patchlevel in the
+	version string.
+	[638bd35f2346]
+
+2010-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	For non-standalone auth methods, stop reading the password if the
+	user enters ^C at the prompt.
+	[82c2911bb264]
+
+	* configure, configure.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/pwutil.c:
+	No need to look up shadow password unless we are doing password-
+	style authentication. This moves the shadow password lookup to the
+	auth functions that need it.
+	[ba9e3eba2b72]
+
+	* plugins/sudoers/sudoers.c:
+	Retain final passwd/group refs until the policy close() function.
+	Note that this doesn't get called in all cases so putting this in a
+	cleanup function is probably better.
+	[bbe214cb4119]
+
+	* plugins/sudoers/check.c:
+	Fix mismerge
+	[395115f89dd6]
+
+	* plugins/sudoers/check.c:
+	When removing/resetting the timestamp file ignore the tty ticket
+	contents.
+	[b709f5667a0b]
+
+	* plugins/sudoers/sudoers.c:
+	delref sudo_user.pw, runas_pw and runas_gr immediately before we
+	return.
+	[4d67d15dfd3b]
+
+2010-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/match.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Reference count cached passwd and group structs. The cache holds one
+	reference itself and another is added by sudo_getgr{gid,nam} and
+	sudo_getpw{uid,nam}. The final ref on the runas and user passwd and
+	group structs are persistent for now.
+	[e544685523c3]
+
+	* doc/UPGRADE:
+	fix typo
+	[e32f2d35e6c9]
+
+2010-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Do not produce a warning for "sudo -k" if the ticket file does not
+	exist.
+	[1598f6061b75]
+
+	* plugins/sudoers/pwutil.c:
+	Instead of caching struct passwd and struct group in the red-black
+	tree, store a struct cache_item which includes both the key and
+	datum. This allows us to user the actual name that was looked up as
+	the key instead of the contents of struct passwd or struct group.
+	This matters because the name in the database may not match what we
+	looked up, due either to case folding or truncation (historically at
+	8 characters). Also mark the disabled calls to sudo_freepwcache()
+	and sudo_freegrcache() as broken since we use cached data for things
+	like set_perms() and the logging functions. Fixing this would
+	require making a copy of the structs for user and runas or adding a
+	reference count (better).
+	[225d4a22f60e]
+
+	* plugins/sudoers/Makefile.in:
+	Fix path to mkinstalldirs
+	[b4968379b12d]
+
+	* plugins/sudoers/check.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
+	src/exec_pty.c, src/get_pty.c, src/tgetpass.c:
+	Quiet gcc warnings on glibc systems that use warn_unused_result for
+	write(2) and others.
+	[c99f138960e0]
+
+2010-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add %option noinput
+	[72b9cd49b4f1]
+
+	* aclocal.m4, configure, configure.in:
+	Add cross-compile defaults for remaining AC_TRY_RUN usage. Also add
+	back getgroups() check since AC_FUNC_GETGROUPS defaults to "no" when
+	cross-compiling.
+	[e385c176d0ee]
+
+2010-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, compat/snprintf.c, config.h.in, configure, configure.in:
+	Use AC_CHECK_MEMBER in SUDO_SOCK_SA_LEN Use AC_TYPE_LONG_LONG_INT
+	and AC_CHECK_SIZEOF([long int]) instead of rolling our own.
+	[cf3e60d9c440]
+
+2010-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Update to latest version
+	[32f93be33961]
+
+2010-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Let pp determine pp_aix_version itself.
+	[7cf0245d84ed]
+
+	* INSTALL, config.h.in, configure, configure.in, mkpkg,
+	plugins/sudoers/sudoers.c:
+	Add support for Ubuntu admin flag file and enable it when building
+	Ubuntu packages.
+	[00e27cff2dfb]
+
+	* plugins/sudoers/sudoers, sudo.pp:
+	Add commented out SuSE-like targetpw settings
+	[4605d47b7413]
+
+	* configure, configure.in:
+	Only try to use +DAportable for non-GCC on hppa
+	[75d0f284ccf7]
+
+	* configure, configure.in:
+	Prevent configure from adding the -g flag unless in devel mode
+	[b1fd3f8d45c0]
+
+2010-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pp:
+	Go back to sudo-flavor to match existing packages and only use an
+	underscore for those that need it.
+	[d737069d1e1c]
+
+	* sudo.pp:
+	Use sudo_$flavor instead of sudo-$flavor since that causes the least
+	amount of trouble for the various package managers.
+	[71f547af35fc]
+
+	* mkpkg:
+	Fix handling of the ldap flavor Remove destdir unless --debug was
+	specified Make distclean before running configure if there is a
+	Makefile present
+	[6316f08de7d3]
+
+	* sudo.pp:
+	Add back include file.
+	[195627bf68b8]
+
+	* mkpkg:
+	Pass extra args on to configure on HP-UX, if we don't have the HP C
+	compiler, disable zlib to prevent gcc from finding it in
+	/usr/local/lib.
+	[473efa0e2bac]
+
+	* mkpkg:
+	Use the HP ANSI C compiler on HP-UX if possible
+	[fb249b6b175d]
+
+	* plugins/sudoers/sudoreplay.c:
+	Some getline() implementations (FreeBSD 8.0) do not ignore the
+	length pointer when the line pointer is NULL as they should.
+	[2410a1a3543c]
+
+	* plugins/sudoers/sudoreplay.c:
+	Don't need to check for *cp being non-zero, isdigit() will do that.
+	[7df11ea8a487]
+
+	* plugins/sudoers/sudoreplay.c:
+	Add setlocale() so the command line arguments that use floating
+	point work in different locales. Since sudo now logs the timing data
+	in the C locale we must Parse the seconds in the timing file
+	manually instead of using strtod(). Furthermore, sudo 1.7.3 logged
+	the number of seconds with the user's locale so if the decimal point
+	is not '.' try using the locale-specific version.
+	[4d385765f23b]
+
+	* src/exec.c:
+	Do I/O logging in the C locale so the floating point numbers in the
+	timing file are not locale-dependent.
+	[5961cec044ec]
+
+	* plugins/sudoers/sudoreplay.c:
+	Use errorx() not error() for thingsthat don't set errno.
+	[0fe5e692af84]
+
+2010-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	Better support for 1.2.3 style versions in Tru64 kits
+	[997c549bb777]
+
+	* sudo.pp:
+	Add Tru64 kit support
+	[e273a954f981]
+
+	* pp:
+	Remove apparently unnecessary use of sudo
+	[be8840d85125]
+
+	* Makefile.in, plugins/sudoers/Makefile.in:
+	Create timedir as part of install-dirs target.
+	[c736bc2fb14f]
+
+	* src/exec_pty.c:
+	Handle ENXIO from read/write which can occur when reading/writing a
+	pty that has gone away.
+	[fa2e8059879f]
+
+	* plugins/sudoers/pwutil.c:
+	sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL
+	[3a045475d5ee]
+
+	* mkpkg:
+	platform is a pp flag not a variable
+	[12eba39a47c1]
+
+	* Makefile.in, mkpkg, sudo.pp:
+	Add simple arg parsing for mkpkg so we can set debug, flavor or
+	platform.
+	[ada839fe252d]
+
+	* pp:
+	Make rpm backend work on AIX 5.x
+	[549a76d11393]
+
+2010-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers:
+	Add commented out Defaults entry for log_output
+	[7e67d7588900]
+
+2010-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/Makefile.in:
+	Remove sudo docdir completely
+	[dce8e82878ef]
+
+	* doc/sample.sudo.conf:
+	Add sample sudo.conf
+	[aafdba3fc411]
+
+	* src/Makefile.in:
+	Pass install-sh -b~ here too.
+	[c3f5eb446c38]
+
+	* plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Install binary files with -b~ to make a backup. Fixes "text file
+	busy" error on HP-UX during install.
+	[81f306f54f8c]
+
+	* install-sh:
+	"mv -f" on HP-UX doesn't unlink the destination first so add an
+	explicit rm before moving the temporary into place.
+	[fb719a79582d]
+
+	* configure, configure.in:
+	Some more ${foo} -> $(foo) conversion for consistent Makefiles.
+	[0aa098770074]
+
+	* doc/Makefile.in, plugins/sudoers/Makefile.in:
+	Install sudoers2ldif in the doc dir
+	[33ac3b53d7f5]
+
+2010-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pathnames.h.in:
+	Add missing include of maillock.h for Solaris
+	[5a58883be23a]
+
+	* NEWS, configure, configure.in, doc/TROUBLESHOOTING, doc/UPGRADE,
+	doc/sample.syslog.conf, doc/sudoers.cat:
+	Change the default syslog facility from local2 to authpriv (or auth
+	if the operating system doesn't support authpriv).
+	[3b70ba514f49]
+
+	* Makefile.in, sudo.pp:
+	Install sudoers as /etc/sudoers on RPM and debian systems where the
+	package manager will not replace a user-modified configuration file.
+	This fixes upgrades from the vendor sudo packages.
+	[d886b6d60b5b]
+
+	* pp:
+	RPM: use %config(noreplace) instead of %config for volatile This
+	results in the new file being installed with a .rpmnew suffix
+	instead of the file being replaced and the old one renamed with a
+	.rpmsave suffix.
+	[58be2119f8e8]
+
+	* plugins/sudoers/Makefile.in:
+	Add PACKAGE_TARNAME for docdir
+	[930c92b8f8f0]
+
+2010-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/mkstemps.c, plugins/sudoers/boottime.c:
+	Include time.h for struct timeval
+	[ddf8b04f0276]
+
+	* src/exec_pty.c:
+	The return value of strsignal() may be const and should be treated
+	as const regardless.
+	[620074ae1e77]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Mention that 127.0.0.1 will not match, nor will localhost unless
+	that is the actual host name.
+	[8b574122eb8f]
+
+	* MANIFEST, NEWS, README, WHATSNEW, doc/Makefile.in, doc/UPGRADE:
+	Rename WHATSNEW -> NEWS
+	[d1a2c8c47d89]
+
+	* pp:
+	Updated pp with latest patches
+	[98e16b9b8f62]
+
+	* WHATSNEW:
+	Sync with 1.7.4
+	[65ac4dafeef7]
+
+	* doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
+	plugins/sudoers/sudoers:
+	Add commented out line to add HOME to env_keep and add a warning to
+	the note about the HOME change in UPGRADE.
+	[0d6a775bb6c8]
+
+2010-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c:
+	Add LINE_MAX define for those without it.
+	[446d9dbe7859]
+
+	* INSTALL, WHATSNEW, config.h.in, configure, configure.in,
+	doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
+	plugins/sudoers/defaults.c:
+	The tty_tickets option is now on by default.
+	[a01c48206d80]
+
+	* WHATSNEW:
+	Mention that AIX authdb support has been fixed.
+	[87bd7f4eba6a]
+
+	* common/aix.c:
+	setauthdb() only sets the "old" registry if it was set by a previous
+	call to setauthdb(). To restore the original value, passing NULL (or
+	an empty string) to setauthdb() is sufficient.
+	[470da190a254]
+
+2010-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW, doc/UPGRADE, doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod,
+	doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
+	plugins/sudoers/env.c:
+	Reset HOME when env_reset is enabled unless it is in env_keep
+	[f421f8827340]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	The default for set_logname has been "true" for some time now.
+	[f489da5674c3]
+
+	* plugins/sudoers/boottime.c:
+	Add missing include of time.h
+	[624d7014932f]
+
+	* plugins/sudoers/logging.c:
+	Fix check for dup2() return value.
+	[140ea2d50d20]
+
+	* plugins/sudoers/env.c:
+	Add PYTHONUSERBASE to initial_badenv_table
+	[3149aae5b12c]
+
+	* plugins/sudoers/visudo.c:
+	Treat an unknown defaults entry as a parse error.
+	[b3ebad73efb2]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
+	Check return value of setdefs() but don't stop setting defaults if
+	we hit an unknown one.
+	[945e752239ab]
+
+	* WHATSNEW, aclocal.m4, config.h.in, configure, configure.in,
+	doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.pod, pathnames.h.in,
+	plugins/sudoers/env.c:
+	If env_reset is enabled, set the MAIL environment variable based on
+	the target user unless MAIL is explicitly preserved in sudoers.
+	[a1b03e2e0e96]
+
+2010-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pp:
+	decode debian code names
+	[8741280d9960]
+
+	* WHATSNEW:
+	fix typo
+	[a8a19451110b]
+
+2010-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW:
+	Merge with 1.7.4
+	[9348fa7e15b8]
+
+	* src/sudo.c:
+	Restore RLIMIT_NPROC after the uid switch if it appears that
+	runas_setup() did not do it for us. Fixes a bash script problem on
+	SuSE with RLIMIT_NPROC set to RLIM_INFINITY.
+	[786fb272e5fd]
+
+	* INSTALL:
+	document --with-pam-login
+	[ea93e4c6873c]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	The tag is NOSETENV, not UNSETENV. From Petr Uzel.
+	[2ac90d8de36e]
+
+2010-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg, pp, sudo.pp:
+	Restore the dot removal in the os version reported by polypkg. Adapt
+	mkpkg and sudo.pp to the change.
+	[dcafdd53b88f]
+
+	* sudo.pp:
+	Include flavor in solaris package name
+	[e605f6364c9f]
+
+	* mkpkg:
+	Older shells don't support IFS= so set explictly to space, tab,
+	newline.
+	[7773960bc8a0]
+
+	* mkpkg:
+	Use '=' not '==' in test
+	[c99d42bc48e6]
+
+	* mkpkg:
+	Fix typo that prevented debian from matching
+	[84421078fcb7]
+
+	* mkpkg:
+	Add missing prefix setting for debian
+	[6466f23de4aa]
+
+	* sudo.pp:
+	Use tab indents to reduce the chance of problem with <<- Fix the
+	debian %set section, pp does not set pp_deb_distro Uncomment %sudo
+	line in sudoers for debian Uncomment some env_keep lines for RHEL,
+	SLES and debian to more closely match the vendor sudoers files. Add
+	/etc/pam.d to %files Remove the /etc/sudo-ldap.conf symlink on
+	debian for ldap flavor
+	[c5b49feb1a0c]
+
+	* plugins/sudoers/sudoers:
+	Add commented out env_keep entries, sample Aliases and a %sudo line
+	for debian.
+	[387719e52d0f]
+
+	* configure, configure.in:
+	Move zlib check later on in the script to avoid a strange shell
+	problem on SLES11.
+	[1a3153bb1291]
+
+	* configure.in:
+	Remove check for egrep; configure has its own
+	[a3b9d98cb5d2]
+
+2010-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg:
+	Enable zlib for linux distros
+	[8fa51a1405a4]
+
+	* mkpkg:
+	Add ldap flavor to default build
+	[97644f5a555f]
+
+	* mkpkg, sudo.pp:
+	Simplify rpm linux distro settings
+	[b9dcf10cdf20]
+
+	* aclocal.m4, configure, configure.in, doc/UPGRADE, doc/sudoers.cat:
+	Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo.
+	[2c549c1acde9]
+
+	* Makefile.in:
+	Fix ChangeLog creation from build dir
+	[3d0c7904f173]
+
+	* plugins/sudoers/sudoers.c:
+	Handle getcwd() failure.
+	[aef7bef87394]
+
+	* doc/Makefile.in, mkpkg, sudo.pp:
+	Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR
+	environment variable.
+	[be6ed611b7a8]
+
+	* sudo.pp:
+	Create sudo group on debian
+	[6ed6c032042e]
+
+	* mkpkg, sudo.pp:
+	Add debian 4/5/6 and use the dot when doing version matches
+	[6bcb664d1f4f]
+
+	* aclocal.m4, configure:
+	Use a loop when searching for mv, sendmail and sh
+	[d5e9369f8d13]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Remove spurious "and"; from debian
+	[a21e6f7c5b99]
+
+	* aclocal.m4, configure, configure.in, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.pod, doc/visudo.cat,
+	doc/visudo.man.in, doc/visudo.pod:
+	Substitute the value of EDITOR into the sudoers and visudo manuals.
+	[cd79e587dd7f]
+
+2010-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkpkg, pp, sudo.pp:
+	Initial support for debian 4.0
+	[ac6707915fa8]
+
+	* mkpkg:
+	Some platforms need -fPIE instead of -fpie
+	[fd6be19e5bc2]
+
+	* plugins/sudoers/auth/pam.c:
+	Only set PAM_RHOST for Solaris, where it is needed to avoid a bug.
+	On Linux it causes a DNS lookup via libaudit.
+	[1e10105ade5b]
+
+	* MANIFEST:
+	Update MANIFEST to match packaging changes
+	[ef86ee557b5b]
+
+	* sudo.psf:
+	We now use pp to generate HP-UX packages
+	[f7aa8da7844e]
+
+	* INSTALL.binary, plugins/sudoers/Makefile.binary.in:
+	Remove vestiges of old binary package bits.
+	[afffd005452f]
+
+	* INSTALL, Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	install-man -> install-doc
+	[99b5fa05567c]
+
+	* Makefile.in, doc/Makefile.in, include/Makefile.in, mkpkg,
+	plugins/sudoers/Makefile.in, pp, src/Makefile.in, sudo.pp:
+	Use http://rc.quest.com/topics/polypkg/ for packaging
+	[5ca8eb75b223]
+
+	* install-sh:
+	Just ignore the -c option, it is the default Add support for -d
+	option
+	[a8b6b0a131e8]
+
+2010-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pathnames.h.in, plugins/sudoers/env.c, plugins/sudoers/logging.c:
+	Use _PATH_STDPATH instead of _PATH_DEFPATH
+	[137fa911908e]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Do not strip binaries.
+	[20166e287176]
+
+	* INSTALL, configure, configure.in:
+	Add --insults=disabled configure option to allow people to build in
+	insult support but have the insults disabled unless explicitly
+	enabled in sudoers.
+	[523b8c552e90]
+
+	* compat/mkstemps.c:
+	Add prototype for gettime()
+	[275eee40473b]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add support for a sudo-i pam.d file to be used for "sudo -i".
+	Adapted from a RedHat patch.
+	[06d34f16520b]
+
+2010-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	Fix mkstemps() prototype
+	[2421841e815b]
+
+	* MANIFEST, compat/Makefile.in, compat/mkstemp.c, compat/mkstemps.c,
+	config.h.in, configure, configure.in, include/missing.h,
+	src/sudo_edit.c:
+	Use mkstemps() instead of mkstemp() in sudoedit. This allows
+	sudoedit to preserve the file extension (if any) which may be used
+	by the editor (like emacs) to choose the editing mode.
+	[d33172d2c086]
+
+2010-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
+	plugins/sudoers/ldap.c:
+	TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses
+	TLS_CACERT, not TLS_CACERTFILE in its ldap.conf. Other LDAP client
+	code, such as nss_ldap, uses TLS_CACERTFILE. Also document why you
+	should avoid disabling TLS_CHECKPEER is possible.
+	[196622436212]
+
+2010-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Make sudo_plugin format a bit more like a man page
+	[048d596e32da]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Add suport for negated user/host/command lists in a Defaults entry.
+	E.g. Defaults:!baduser noexec
+	[d41112cf0342]
+
+	* Makefile.in, common/Makefile.in, compat/Makefile.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Add uninstall target
+	[fea66ebf136a]
+
+	* common/Makefile.in, compat/Makefile.in:
+	Remove unused AR, SED and RANLIB variables
+	[2ff9928bfdb3]
+
+	* Makefile.in:
+	Do not install sample plugins
+	[5443b87bd1c3]
+
+2010-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, aclocal.m4, compat/setenv.c, compat/unsetenv.c, configure,
+	configure.in, plugins/sudoers/env.c:
+	Now that sudoers is a dynamically loaded module we cannot override
+	the libc environment functions because the symbols may already have
+	been resolved via libc. Remove getenv/putenv/setenv/unsetenv
+	replacements from sudoers and add replacements for setenv/unsetenv
+	for systems that lack them.
+	[3f2b43cb8851]
+
+	* configure, configure.in, plugins/sudoers/Makefile.in:
+	Link testsudoers with -ldl when needed
+	[f79606f9fcd7]
+
+	* plugins/sample_group/plugin_test.c:
+	Remove unused time.h and add limits.h for PATH_MAX
+	[3f5d0074d621]
+
+	* doc/sudoers.ldap.pod:
+	Fix typo.
+	[bc855fd57397]
+
+2010-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sample_group/plugin_test.c:
+	Do not depend on strlcpy/strlcat
+	[6e7e2b5af051]
+
+	* plugins/sample_group/plugin_test.c:
+	Standalone test driver for sudoers group plugin.
+	[eb1235fc3b8e]
+
+2010-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/group_plugin.c, src/load_plugins.c:
+	Use RTLD_LAZY instead of RTLD_NOW; was using RTLD_NOW as a debugging
+	aid.
+	[2a34e616229b]
+
+	* plugins/sample_group/sample_group.c:
+	Fix style nit in function declarations
+	[ab87c7c76bf9]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Document group_plugin syntax.
+	[ed1faf72ddcb]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document the sudoers group plugin.
+	[f19a62dc8cfc]
+
+	* INSTALL, MANIFEST, Makefile.in, config.h.in, configure,
+	configure.in, doc/LICENSE, doc/license.pod, include/sudo_plugin.h,
+	plugins/sample_group/Makefile.in, plugins/sample_group/getgrent.c,
+	plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/group_plugin.c,
+	plugins/sudoers/match.c, plugins/sudoers/nonunix.h,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c, src/sudo.c:
+	Replace built-in non-unix group support with a sudoers group plugin.
+	Include a sample plugin that can read Unix-format group files.
+	[8fc58ce0b1a8]
+
+	* configure, configure.in, src/load_plugins.c:
+	Add a trailing slash to _PATH_SUDO_PLUGIN_DIR to simplify usage.
+	[5c491dddb8ef]
+
+2010-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat,
+	doc/sudoers.man.in, doc/sudoers.pod:
+	Move sudoers-specific bits out of sudo(8) and into sudoers(5)
+	[e8a5a5830cfe]
+
+	* aclocal.m4, configure, configure.in:
+	Substitute @io_logdir@ for the sudoers I/O log directory.
+	[21a75ca7b0ab]
+
+2010-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
+	common/atobool.c, common/fileops.c, common/fmt_string.c,
+	common/lbuf.c, common/term.c, compat/fnmatch.c, compat/getcwd.c,
+	compat/getgrouplist.c, compat/getline.c, compat/glob.c,
+	compat/snprintf.c, config.h.in, configure, configure.in,
+	include/fileops.h, plugins/sample/sample_plugin.c,
+	plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
+	plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
+	plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
+	plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
+	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
+	plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
+	plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
+	src/Makefile.in, src/aix.c, src/conversation.c, src/exec.c,
+	src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c,
+	src/sudo.c, src/sudo.h, src/sudo_edit.c, src/tgetpass.c:
+	Set usrinfo for AIX Set adminstrative domain for the process when
+	looking up user's password or group info and when preparing for
+	execve(). Include strings.h even if string.h exists since they may
+	define different things. Fixes warnings on AIX and others.
+	[cf8b93e872c9]
+
+	* Makefile.in:
+	Add a separate all target for AIX make which was using the entire
+	LHS (not just the first entry) of the first target as the implicit
+	target.
+	[a45b980a01ef]
+
+	* plugins/sudoers/env.c:
+	Do not rely on env.env_len when unsetting a variable, just use the
+	NULL terminator.
+	[ca6eb239c829]
+
+	* plugins/sudoers/env.c:
+	In unsetenv() check for NULL or empty name as per POSIX 1003.1-2008
+	[7046ba7caa4e]
+
+2010-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/vasgroups.c:
+	Use warningx() instead of log_error() since the latter is not
+	available to visudo or testsudoers. This does mean that they don't
+	end up in syslog.
+	[152b7c50f426]
+
+	* plugins/sudoers/sudoers.c:
+	Defer call to sudo_nonunix_groupcheck_cleanup() until after we have
+	closed the sudoers sources. From Quest sudo.
+	[c1cd573bab94]
+
+	* plugins/sudoers/pwutil.c:
+	Ignore case when matching user/group names in the cache. From Quest
+	sudo.
+	[2aa4ecc7d7f5]
+
+2010-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, src/selinux.c:
+	Add check for setkeycreatecon() when --with-selinux is specified.
+	[affae247b4e0]
+
+	* configure, configure.in:
+	Error out if libaudit.h is missing or ununable when --with-linux-
+	audit was specified
+	[d82e743fac04]
+
+	* doc/HISTORY, doc/history.pod:
+	Add =head3 entries, mostly for the html version
+	[ee93112d0308]
+
+2010-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/HISTORY, doc/history.pod:
+	Mention when LDAP was incorporate.
+	[2923dc17f79c]
+
+2010-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it is
+	not covered by _ALL_SOURCE.
+	[c92fd69809d0]
+
+2010-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Add a cast to quiet a compiler warning.
+	[a200e07ee1bc]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Quiet a compiler warning.
+	[c9acfc927cea]
+
+	* plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
+	Call set_fqdn() after sudoers has parsed instead of inline as a
+	callback.
+	[5f4e5d075f2d]
+
+	* WHATSNEW, plugins/sudoers/sudoers.c:
+	Do not call set_fqdn() until sudoers parses (where is gets run as a
+	callback).
+	[09040fca6d40]
+
+	* WHATSNEW:
+	mention the change in tty ticket behavior when there is no tty
+	[575a1fd98f05]
+
+	* plugins/sudoers/check.c:
+	Do not update tty ticket if there is no tty.
+	[63f9c33ce6a7]
+
+	* doc/LICENSE, doc/license.pod:
+	Update copyright year
+	[0722ab5d404b]
+
+	* doc/Makefile.in:
+	Do not rely on BSD make's $>
+	[936a86398bd9]
+
+	* configure, configure.in:
+	Set timedir to /var/db/sudo for darwin to match Apple sudo's
+	location
+	[d5b9b03096f1]
+
+2010-06-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.h:
+	Add stub declarations for struct stat and struct timeval
+	[f6d90551a4fd]
+
+	* MANIFEST:
+	Remove compat/sigaction.c
+	[d0ed6d9a770e]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c:
+	Check for zlib.h in addition to libz.
+	[6e191b4a6065]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h,
+	src/sudo_exec.h:
+	Move functions and symbols shared between exec.c and exec_pty.c into
+	sudo_exec.h.
+	[14ae63403544]
+
+	* doc/Makefile.in:
+	Comment out rules to build .man.in and .cat files unless --with-
+	devel
+	[3cf7e5606a85]
+
+	* doc/Makefile.in:
+	Comment out rules to build .man.in and .cat files unless --with-
+	devel
+	[d30495b0e29e]
+
+	* src/parse_args.c:
+	Quote any non-alphanumeric characters other than '_' or '-' when
+	passing a command to be run via the shell for the -s and -i options.
+	[d633f74fe2d9]
+
+	* doc/Makefile.in:
+	Add back .man suffix
+	[6e63b60a2739]
+
+	* INSTALL, MANIFEST, WHATSNEW, config.h.in, configure, configure.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/linux_audit.c,
+	plugins/sudoers/linux_audit.h, plugins/sudoers/logging.h,
+	src/selinux.c:
+	Add Linux audit support.
+	[5a2f445e0bd4]
+
+2010-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Remove an XXX
+	[a170cbe651d1]
+
+	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
+	plugins/sudoers/sudoreplay.c:
+	Add -f (filter) option to sudoreplay to allow certain streams to be
+	replayed and others ignored.
+	[62e51b432ea1]
+
+	* src/load_plugins.c, src/parse_args.c, src/sudo.c, src/sudo.h,
+	src/tgetpass.c:
+	Fix -A flag when askpass is specified in sudo.conf or if sudo
+	doesn't need to read a password.
+	[2e401e4a00e3]
+
+	* src/exec.c, src/exec_pty.c, src/parse_args.c, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c, src/tgetpass.c:
+	Clean up some XXXs
+	[689f0b002d3d]
+
+	* WHATSNEW, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
+	Add support for multiple sudoers_base entries in ldap.conf. From
+	Joachim Henke
+	[e3e4a3c2bd5b]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/logging.c,
+	src/exec_pty.c:
+	remove setsid check, we require a POSIX system
+	[cc73cb9e22c0]
+
+	* plugins/sudoers/logging.c, src/exec_pty.c, src/selinux.c,
+	src/sudo.c, src/tgetpass.c:
+	Check for dup2() failure.
+	[5d46d66794f5]
+
+	* config.h.in, configure, configure.in:
+	Remove dup2() check, it is not optional.
+	[5f1d56de4384]
+
+2010-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW:
+	sync with sudo 1.7.3
+	[88e5c0bd6d59]
+
+	* INSTALL:
+	SunOS does not ship with an ANSI compiler
+	[f13c85c67069]
+
+	* INSTALL:
+	Update OS specific notes. Delete some really ancient ones and move
+	older ones to the end of the list.
+	[59ce592c4c52]
+
+	* README:
+	Sudo can be downloaded from the web site too Mention "OS dependent
+	notes" section in INSTALL
+	[191871538984]
+
+	* src/exec_pty.c, src/selinux.c:
+	Call selinux_restore_tty() as part of cleanup() so it gets called
+	from error()/errorx()
+	[bb017da6b6da]
+
+	* MANIFEST, doc/PORTING:
+	Remove obsolete porting guide
+	[321e35591344]
+
+	* plugins/sudoers/interfaces.h, plugins/sudoers/match.c:
+	Move union sudo_in_addr_un into interfaces.h
+	[b2c8b19ee094]
+
+	* doc/Makefile.in:
+	Remove useless circular dependencies
+	[5682181b59cf]
+
+	* plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c:
+	Convert to ANSI C function declarations
+	[a4f76927d034]
+
+	* common/alloc.c, common/fileops.c, common/gettime.c, common/list.c,
+	common/zero_bytes.c, compat/charclass.h, compat/closefrom.c,
+	compat/fnmatch.c, compat/glob.c, compat/isblank.c, compat/memrchr.c,
+	compat/mkstemp.c, compat/nanosleep.c, compat/snprintf.c,
+	compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
+	compat/strlcpy.c, compat/timespec.h, compat/utime.h,
+	compat/utimes.c, doc/HISTORY, doc/history.pod, doc/license.pod,
+	include/alloc.h, include/error.h, include/lbuf.h, include/list.h,
+	include/missing.h, pathnames.h.in, plugins/sudoers/alias.c,
+	plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
+	plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/find_path.c,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
+	plugins/sudoers/interfaces.h, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/match.c,
+	plugins/sudoers/parse.h, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/redblack.h, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c,
+	plugins/sudoers/toke.l, plugins/sudoers/visudo.c, src/aix.c,
+	src/conversation.c, src/error.c, src/load_plugins.c,
+	src/parse_args.c, src/sesh.c, src/sudo.h, src/sudo_noexec.c,
+	src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c:
+	Update copyright year
+	[26ac7991f7d8]
+
+	* doc/Makefile.in:
+	Fix commented DEVDOCS when not in devel mode.
+	[e0a97eaf3793]
+
+	* plugins/sudoers/match.c:
+	Quiet a compiler warning.
+	[b2a17ebd5d38]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
+	Quiet a compiler warning.
+	[687843bc593d]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/sudoers.h:
+	Make all functions in ldap.c static
+	[b2111e89eeba]
+
+	* doc/schema.ActiveDirectory:
+	Updates from Alain Roy to provide better examples for importing the
+	schema and to fix problems caused by Windows validating attributes
+	which have not yet been added before committing the changes.
+	[69f4c5ccaf89]
+
+2010-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, doc/Makefile.in, doc/sudo.cat,
+	doc/sudo.man.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.man.in, doc/sudoreplay.cat, doc/sudoreplay.man.in,
+	doc/visudo.cat, doc/visudo.man.in:
+	Leave rules to build .man.in and .cat files uncommented but only
+	make them part of the "all" rule in devel mode. Generate .cat files
+	directly from .man.in instead of .man using default values in
+	configure.in
+	[c3054a44f6a5]
+
+	* configure, configure.in:
+	Bump sudo version to 1.8.0b1
+	[8f79c85135e1]
+
+	* configure, configure.in, src/sudo.c, src/sudo_usage.h.in:
+	Print configure args with verbose version information.
+	[1ce690660ed2]
+
+	* TODO, plugins/sudoers/visudo.c:
+	Remove tfd from struct sudoersfile; it is not used. Add prev pointer
+	to struct sudoersfile. Declare list of sudoersfile using TQ_DECLARE.
+	Use tq_append to append sudoers entries to the tail queue.
+	[1743f9a286e4]
+
+2010-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW:
+	Describe tty timestamp improvements
+	[e214e863a313]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	A comment character may not be part of a command line argument
+	unless it is quoted with a backslash. Fixes parsing of: testuser
+	ALL=NOPASSWD: /usr/bin/wl #comment foo bar closes bz #441
+	[ea2e990f85ed]
+
+	* doc/sudoers.pod:
+	Make this read a little bit better when passwd_timeout is 0.
+	[39d362757f31]
+
+	* doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod:
+	Attempt to handle a default password prompt timeout of zero more
+	gracefully.
+	[ea47d43acf5b]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	Do not override value of keepopen global, instead restore it to the
+	value we pushed onto the stack when popping.
+	[fe282e5a3402]
+
+	* plugins/sudoers/Makefile.in:
+	Add dependency for utility programs on libreplace and libcommon
+	[2339aba64928]
+
+	* compat/sigaction.c, config.h.in, configure.in, include/compat.h,
+	plugins/sudoers/logging.c, plugins/sudoers/mon_systrace.c,
+	src/exec.c, src/exec_pty.c, src/tgetpass.c:
+	Remove sigaction emulation Use SA_INTERRUPT in sa_flags
+	[7dd61f1bd8d2]
+
+	* MANIFEST, config.h.in, configure, configure.in, include/missing.h:
+	We don't use getgrouplist() at the moment so there's no need to
+	provide a compat version.
+	[1597536fbada]
+
+	* TODO:
+	sync with reality
+	[9e1a874e7885]
+
+	* include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c,
+	src/conversation.c, src/sudo.h, src/tgetpass.c:
+	Fix visiblepw sudoers option; the plugin API portion still needs
+	documenting
+	[60b6933ef5e0]
+
+	* src/sudo.c:
+	Print sudo version as well.
+	[987ed459b459]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
+	Use sudo_printf for I/O log version Clarify policy plugin version
+	string
+	[5a58b7e8c80b]
+
+	* plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/ldap.c, plugins/sudoers/sudoreplay.c:
+	Silence some compiler warnings
+	[afb1eba90915]
+
+	* src/load_plugins.c, src/tgetpass.c:
+	Store askpass path in a global instead of uses setenv() which many
+	systems lack.
+	[b440bcc0e660]
+
+2010-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	plugins/sudoers/check.c, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/load_plugins.c, src/parse_args.c,
+	src/tgetpass.c:
+	Move askpass path specification from sudoers to sudo.conf.
+	[5507ab867c26]
+
+	* src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
+	Use a flag bit in struct command_details for selinux instead of a
+	separate field.
+	[c59ca4acded9]
+
+	* src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
+	Implement background mode. If I/O logging we use pipes instead of a
+	pty.
+	[c07a4b356cbd]
+
+	* compat/mksiglist.c, compat/strsignal.c, include/compat.h,
+	src/exec.c, src/exec_pty.c, src/tgetpass.c:
+	Move compat definition of NSIG to compat.h
+	[ab0385467f25]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Mention plugins in the sudo manual and add some missing path
+	substitution in the sudo_plugin manual.
+	[570f831f47a3]
+
+	* src/Makefile.in:
+	Set _PATH_SUDO_CONF based on $(sysconfdir)
+	[fde51869cf07]
+
+	* common/lbuf.c, common/term.c, config.h.in, configure, configure.in,
+	src/exec.c, src/exec_pty.c, src/ttysize.c:
+	Require POSIX termios to build sudo
+	[9ec6b41f3f95]
+
+	* src/tgetpass.c:
+	Ignore SIGPIPE for "sudo -S"
+	[7ad27fde0c06]
+
+	* src/tgetpass.c:
+	Fix uninitialized variable in TGP_ECHO case and print a newline if
+	the user interrupted password input.
+	[ce19204d8dd4]
+
+	* src/tgetpass.c:
+	Make TGP_ECHO override TGP_MASK and don't try to restore the
+	terminal if we didn't modify it.
+	[a7e11abfe7e4]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c,
+	src/conversation.c, src/sudo.h, src/tgetpass.c:
+	Add SUDO_CONV_PROMPT_MASK define which corresponds to the
+	"pwfeedback" sudoers option. Do not disable echo if TGP_ECHO is set.
+	[e0550590cabe]
+
+	* src/exec_pty.c:
+	Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl
+	[762448182fe3]
+
+	* src/exec_pty.c:
+	Remove commented out copy of old sudo_execve() function.
+	[9c5e21380472]
+
+2010-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/compat.h:
+	No longer need NGROUPS_MAX define
+	[cae4c49d7077]
+
+	* compat/nanosleep.c, config.h.in, configure, configure.in,
+	include/compat.h, plugins/sudoers/check.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/visudo.c, src/sudo_edit.c:
+	Replace timerfoo macros with timevalfoo since the timer macros are
+	known to be busted on some systems.
+	[4f97d79f2d41]
+
+	* src/exec.c, src/exec_pty.c, src/selinux.c, src/sudo.c, src/sudo.h:
+	Add selinux_enabled flag into struct command_details and set it in
+	command_info_to_details(). Return an error from selinux_setup()
+	instead of exiting. Call selinux_setup() from exec_setup().
+	[011bea23a5a0]
+
+	* plugins/sudoers/sudoers.c:
+	Fix setting selinux type on command line.
+	[814b20a0b3be]
+
+	* plugins/sudoers/iolog.c:
+	In sudoers_io_close(), skip NULL io_fds[] elements.
+	[4011ff7d4daf]
+
+	* plugins/sudoers/auth/pam.c:
+	If pam_open_session() fails, pass its status to pam_end.
+	[1d8de4cf8ff3]
+
+	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
+	If a file in a #includedir has improper permissions or owner just
+	skip it. This prevents packages that incorrectly install a file into
+	/etc/sudoers.d from breaking sudo so easily. Syntax errors in
+	#includedir files still result in a parse error (for now).
+	[ade99a4549a4]
+
+	* src/exec_pty.c:
+	Remove duplicate call to selinux_setup().
+	[82bd52764e21]
+
+	* WHATSNEW, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/iolog.c:
+	Add use_pty sudoers option to force use of a pty even when not
+	logging I/O.
+	[b280a8972a79]
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
+	Make env_init() void as it never fails.
+	[d3890e55daa7]
+
+	* plugins/sudoers/env.c:
+	No longer use _NSGetEnviron so don't need crt_externs.h
+	[9b4e0e139881]
+
+	* plugins/sudoers/env.c:
+	Remove unused VNULL define
+	[a42cacb263e3]
+
+2010-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Add #define for maximum session id
+	[9e18c17a28c2]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h:
+	Split exec.c into exec.c and exec_pty.c
+	[d52376327332]
+
+	* MANIFEST:
+	Sync with source file moves.
+	[4a62c6c9e846]
+
+	* src/Makefile.in, src/get_pty.c, src/pty.c:
+	Rename pty.c -> get_pty.c
+	[5696a12bd29b]
+
+2010-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Only use I/O input log file if def_log_input is set and output file
+	if def_log_output is set.
+	[d866992f1681]
+
+2010-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/strsignal.c:
+	Update copyright year
+	[a96f2593fd4e]
+
+	* src/pty.c:
+	uid -> ttyuid
+	[c3454d74ebcb]
+
+	* plugins/sudoers/sudoers.c:
+	For sudoedit, make a local copy of editor string si become part of
+	argv. If no editor environment variable, split def_editor on ':'
+	since it may be a colon-delimited path.
+	[2ee298506a6e]
+
+	* src/sudo_edit.c:
+	Remove unneeded endpwent()/endgrent()
+	[623f6743d101]
+
+	* doc/Makefile.in:
+	Use value of nroff from configure
+	[b2ce649125ab]
+
+	* src/exec.c:
+	Add missing const to I/O log action function
+	[d764a3955e04]
+
+	* plugins/sudoers/check.c:
+	Update copyright year and fix whitespace
+	[e648c35b16be]
+
+	* configure, configure.in:
+	Fix typo
+	[8e0bdfc47da4]
+
+	* plugins/sudoers/iolog.c:
+	Remove redundant tty signal blocking in log function.
+	[f17f575dabd4]
+
+2010-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Place static keyword where it belongs
+	[b01aec7c86b4]
+
+	* plugins/sudoers/logging.c:
+	Always use a printf format string for send_mail()
+	[13b1ada644c9]
+
+	* common/atobool.c, plugins/sudoers/ldap.c:
+	Extend atobool() so we can use it in the LDAP code.
+	[73f8e6807044]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
+	Sudo now stashes tty ctime for tty_tickets on Solaris too.
+	[e82df13ad3fd]
+
+	* plugins/sudoers/boottime.c:
+	Fix dummy version of get_boottime()
+	[01d69c06013b]
+
+2010-06-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Enable tty_is_devpts() support for Solaris with the "devices"
+	filesystem.
+	[237c6b25fa84]
+
+	* src/exec.c:
+	Unbreak the non-io logging case.
+	[4822b9f709fb]
+
+	* src/conversation.c, src/sudo.c, src/sudo_plugin_int.h:
+	Fix symbol name conflict with sudo_printf.
+	[0d44eab0a8f6]
+
+	* plugins/sudoers/auth/pam.c:
+	Fix OpenPAM detection for newer versions.
+	[1b2abed232d8]
+
+	* plugins/sudoers/vasgroups.c:
+	Sync with Quest sudo git repo
+	[f1d98b3cba02]
+
+	* aclocal.m4, configure, configure.in:
+	HP-UX ld uses +b instead or -R or -rpath Fix typo in libvas check
+	Add missing template for ENV_DEBUG Adapted from Quest sudo
+	[695dbd7b28f4]
+
+	* README.LDAP:
+	Fix typos; from Quest Sudo
+	[4eba9da33b8e]
+
+2010-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Add back -I$(top_srcdir); we need it for including compat/foo.h
+	since we cannot rely on "foo.h" being found relative to the source
+	file when the cwd is different.
+	[bbf24695f325]
+
+	* src/exec.c:
+	Fix a bug where we could treat EAGAIN as a permanent error. Also set
+	cstat if perform_io() returns an error.
+	[200475c4326f]
+
+	* common/alloc.c, plugins/sudoers/boottime.c,
+	plugins/sudoers/sudoers.c:
+	Add casts to quiet compiler warnings.
+	[85eb1c336697]
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Fix typo in ternary operator usage.
+	[6492ac1450e2]
+
+2010-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.in:
+	Add --enable-warnings and fix typo in SUDO_IO_LOGDIR
+	[92121d693b30]
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod:
+	Update docs to match sudoers I/O logging changes
+	[18d651989e49]
+
+	* INSTALL, WHATSNEW, aclocal.m4, configure, configure.in,
+	pathnames.h.in, plugins/sudoers/def_data.c,
+	plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
+	plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.h, plugins/sudoers/gram.y,
+	plugins/sudoers/iolog.c, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c:
+	Break sudoers transcript feature up into log_input and log_output.
+	[db3c1248d2ad]
+
+	* plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/visudo.c:
+	Use setprogname() as needed.
+	[6beee63a4553]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c:
+	Adapt sudoreplay to iolog changes.
+	[581f52c05f0f]
+
+2010-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/iolog.c:
+	Log all input and output into separate files and store a number on
+	each timing file line to indicate which file the data is in.
+	[fb460c5273dd]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Make sudoers_io functions static to iolog.c
+	[b2df3cc3eecb]
+
+2010-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, src/parse_args.c,
+	src/sudo_usage.h.in:
+	Completely remove the -L flag from the sudo front end.
+	[3d220030b720]
+
+	* plugins/sudoers/sudoreplay.c:
+	Fix EAGAIN handling when writing to stdout.
+	[4766d77cea49]
+
+	* plugins/sudoers/sudoers.c:
+	Eliminate unused variables
+	[83bd711e79c4]
+
+	* plugins/sudoers/sudoers.c, src/exec.c, src/sudo.c:
+	Re-enable cleanup functions in sudoers plugin and sudo driver for
+	error()/errorx().
+	[43093f937dd8]
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
+	plugins/sudoers/parse.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
+	Use sudo_printf to display verbose version information.
+	[435cc9f8d4a2]
+
+	* common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Minor Makefile cleanup: fix a typo, change the removal order in the
+	clean targets, and remove a superfluous include path for the sudoers
+	plugin.
+	[6e3b2d6b4437]
+
+	* plugins/sudoers/env.c:
+	Handle duplicate variables in the environment. For unsetenv(), keep
+	looking even after remove the first instance. For sudo_putenv(),
+	check for and remove dupes after we replace an existing value.
+	[c1bbb88d0435]
+
+2010-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Use explicit path to source file instead of $< for files that live
+	in devdir and top_srcdir.
+	[358ab7f6cc64]
+
+	* plugins/sudoers/Makefile.in:
+	Add explicit rules to compile gram.c and toke.c for HP-UX Pevent
+	ending LIBSUDOERS_OBJS with a backslash
+	[481a5c96d47e]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in:
+	Link libcommon before libreplace since libcommon may use functions
+	only present in libreplace.
+	[1847c496ff5b]
+
+	* common/Makefile.in:
+	Move code common to sudo and the sudoers plugin to a convenience
+	library, libcommon. Removes the need to make links in the sudoers
+	plugin dir and reduces re-compilation of duplicate object files.
+	[4c8986352937]
+
+	* Makefile.in, common/alloc.c, common/atobool.c, common/fileops.c,
+	common/fmt_string.c, common/gettime.c, common/lbuf.c, common/list.c,
+	common/term.c, common/zero_bytes.c, configure, configure.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in, src/alloc.c, src/atobool.c, src/fileops.c,
+	src/fmt_string.c, src/gettime.c, src/lbuf.c, src/list.c, src/term.c,
+	src/zero_bytes.c:
+	Move code common to sudo and the sudoers plugin to a convenience
+	library, libcommon. Removes the need to make links in the sudoers
+	plugin dir and reduces re-compilation of duplicate object files.
+	[1d1d98bd55b9]
+
+	* src/exec.c, src/sudo.c, src/sudo.h:
+	Rename script_execve to sudo_execve and rename script_foo in exec.c
+	[a35ec80de96a]
+
+	* MANIFEST, src/Makefile.in, src/exec.c, src/script.c:
+	rename script.c exec.c and fix up the MANIFEST file
+	[36bc3bff9578]
+
+	* src/script.c, src/sudo.c, src/sudo.h:
+	Rename script_setup() to pty_setup() and call from script_execve()
+	directly.
+	[899b0fb2a14d]
+
+	* configure, configure.in:
+	bump version to 1.8.0a2
+	[0b1c1ca9d4e5]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document init_session
+	[b5324785a406]
+
+	* plugins/sudoers/auth/API, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h:
+	Clean up the sudoers auth API a bit and update the docs.
+	[c40fd4cb6e68]
+
+	* include/sudo_plugin.h, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, src/script.c, src/sudo.c:
+	Add init_session function to struct policy_plugin that gets called
+	before the uid/gid/etc changes. A struct passwd pointer is passed
+	in,which may be NULL if the user does not exist in the passwd
+	database.The sudoers module uses init_session to open the pam
+	session as needed.
+	[d71723320ee8]
+
+2010-05-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Add open/close session to sudo auth, only used by PAM. This allows
+	us to open (and close) the PAM session from sudoers.
+	[2665e2920d0d]
+
+	* plugins/sudoers/Makefile.in:
+	Add explicit rule to build getdate.o for HP-UX make.
+	[7f049e989956]
+
+	* plugins/sudoers/Makefile.in:
+	Back out most of change 45e406ebdea2. Create dummy .l.c and .y.c
+	rules as an alternate way to prevent HP-UX make (and others) from
+	trying to rebuild the parser in non-dev mode.
+	[f84badad98c5]
+
+	* plugins/sudoers/sudoers.c:
+	Re-enable PATH_MAX check for command
+	[40d8a50da136]
+
+	* Makefile.in:
+	For distclean, clean the main directory last since the subdirs need
+	to be able to run libtool to clean things.
+	[8949a9861634]
+
+	* compat/Makefile.in:
+	Fix generation of mksiglist.h
+	[b7cdc9b36650]
+
+	* src/script.c:
+	Now that we defer sending cstat until the end of script_child() we
+	cannot reuse cstat when reading command status from parent.
+	[25c882643466]
+
+2010-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, doc/sudo.man.in, doc/sudo.man.pl,
+	doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
+	doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoreplay.cat,
+	doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
+	Use numeric registers to handle conditionals instead of trying to do
+	it all with text processing.
+	[478079c3fd4b]
+
+	* doc/sudoers.pod:
+	Document per-command SELinux settings
+	[13840d566805]
+
+	* plugins/sudoers/sudoers.c:
+	Repair "sudo -l -U username"
+	[10a0dcdf2ddf]
+
+	* plugins/sudoers/sudoers.c:
+	Set selinux role and type in command details.
+	[8ae6d35a126d]
+
+	* src/script.c, src/selinux.c, src/sudo.h:
+	Rework SELinux support.
+	[83279cc94bf2]
+
+2010-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c, src/selinux.c, src/sudo.h:
+	Make SELinux support compile again. Needs more work to be complete.
+	[3d3addebcf82]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	src/parse_args.c, src/script.c, src/selinux.c, src/sudo.c,
+	src/sudo.h:
+	Bring back closefrom settings.
+	[b1c6257d4bbb]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	If running a command or sudoedit in transcript mode, call
+	io_nextid() before log_allowed() so the session id is logged.
+	[c42f3ae40150]
+
+	* configure, configure.in:
+	Use mandoc(1) if nroff(1) is not present.
+	[daad4bbd04af]
+
+	* doc/Makefile.in:
+	Use the --file argument to config.status instead of setting
+	CONFIG_FILES in the environment.
+	[c89411a8bf70]
+
+	* plugins/sudoers/Makefile.in:
+	We cannot conditionally update gram.h or the dependency ordering
+	gets messed up in devel mode.
+	[c938953231d9]
+
+2010-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, compat/Makefile.in, configure, configure.in,
+	doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Substitute @SHELL@ into Makefiles
+	[36aa6a095335]
+
+	* config.sub:
+	Fix typo
+	[16d294d26b58]
+
+	* config.guess, config.sub, configure, configure.in:
+	Update to autoconf 2.65
+	[4fa6ea8caea3]
+
+	* Makefile.in:
+	Fix libtool target (space vs. tabs)
+	[755cf3892618]
+
+	* config.h.in, plugins/sudoers/logging.h, plugins/sudoers/visudo.c:
+	Remove use of RETSIGTYPE; all modern systems have signal handlers
+	that return void.
+	[42b4e3aee668]
+
+	* Makefile.in, aclocal.m4, acsite.m4, configure, configure.in,
+	ltmain.sh, m4/libtool.m4, m4/ltoptions.m4, m4/ltsugar.m4,
+	m4/ltversion.m4, m4/lt~obsolete.m4, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Update to libtool-2.2.6b. I haven't made any local modifications
+	this time, which should be OK since we install sudo_noexec.so by
+	hand now.
+	[6f79ced593bb]
+
+	* compat/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Use libtool to clean objects
+	[1581057d6472]
+
+	* include/Makefile.in:
+	Install sudo_plugin.h as part of "make install" and make other
+	install targets callable from the top-level Makefile
+	[aaaeb027d774]
+
+	* configure, configure.in:
+	regen with autoupdate to eliminate AC_TRY_LINK
+	[5d5541c230f5]
+
+	* Makefile.in, compat/Makefile.in, configure, configure.in,
+	doc/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Install sudo_plugin.h as part of "make install" and make other
+	install targets callable from the top-level Makefile
+	[b258b8401b1c]
+
+	* plugins/sample/sample_plugin.c:
+	The sample plugin doesn't support being run with no args so return a
+	usage error in this case.
+	[473b3cf965be]
+
+	* plugins/sudoers/iolog.c:
+	Set close on exec flag for descriptors used for I/O logging so they
+	are not present in the command being run.
+	[2c7e8708df76]
+
+	* plugins/sudoers/tsgetgrpw.c:
+	Set close on exec flag in private versions of setpwent() and
+	setgrent().
+	[64fef78cb833]
+
+	* src/script.c:
+	Close the I/O pipes aftering dup2()ing them to std{in,out,err}.
+	Fixes extra fds being present in the command when it is part of a
+	pipeline.
+	[060451617713]
+
+	* plugins/sudoers/sudoers.c:
+	Set user_tty to "unknown" if there is no tty, like sudo 1.7 does (it
+	is used when logging). Note that user_ttypath will still be NULL if
+	there is no tty.
+	[31b69a6ecda7]
+
+	* src/script.c, src/sudo.h:
+	Cosmetic changes: add comments, remove orphaned prototype and make a
+	global static.
+	[f7851af0143e]
+
+2010-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Move check for maxfd == -1 to flush_output where it belongs.
+	[b826a95b4491]
+
+	* src/script.c:
+	Break out of select loop if all the fds we want to select on are -1.
+	[f5b387024238]
+
+	* src/sudo.c:
+	Avoid possible malloc(0) if plugin returns an empty groups list.
+	[9765a8fe5ce7]
+
+	* src/sudo.c:
+	Add debugging info when calling plugin close function
+	[95a273c7ff66]
+
+	* src/script.c:
+	Avoid closing stdin/stdout/stderr when we are piping output.
+	[330e76423caf]
+
+	* src/script.c:
+	When execve() of the command fails, it is possible to receive
+	SIGCHLD before we've read the error status from the pipe. Re-order
+	things such that we send the final status at the very end and prefer
+	error status over wait status.
+	[b0dcf825244f]
+
+2010-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Fix compilation for non PAM/BSD auth/AIX auth
+	[e382b39d2e4f]
+
+2010-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Additional checks to make sure we don't close /dev/tty by mistake.
+	When flushing, sleep in select as long as we have buffers that need
+	to be written out.
+	[8139cbd3dd54]
+
+	* src/script.c:
+	Now that we can use pipes for stdin/stdout/stderr there is no longer
+	a need to error out when there is no tty. We just need to make sure
+	we don't try to use the tty fd if it is -1.
+	[666621635d26]
+
+2010-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	include/sudo_plugin.h, plugins/sample/sample_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/sudoers.h, src/sudo.c:
+	Add argc and argv to I/O logger open function.
+	[0d7faa007d27]
+
+	* doc/sudo_plugin.man.in, doc/sudo_plugin.pod, include/sudo_plugin.h,
+	plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c,
+	src/parse_args.c, src/sudo.c, src/sudo_edit.c:
+	Remove check_sudoedit function pointer in struct sudo_policy.
+	Instead, sudo will set sudoedit=true in the settings array. The
+	plugin should check for this and modify argv_out as appropriate in
+	check_policy.
+	[c0328e3276b8]
+
+2010-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sample/sample_plugin.c, src/sudo.c, src/sudo.h,
+	src/sudo_edit.c:
+	If plugin sets "sudoedit=true" in the command info, enable sudoedit
+	mode even if not invoked as sudoedit. This allows a plugin to enable
+	sudoedit when the user runs an editor.
+	[96d67b99e42e]
+
+2010-05-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	gram.h must not depend on gram.y if we want to avoid unnecessary
+	rebuilding of targets dependent on gram.h when gram.y changes.
+	[9db4b767fdca]
+
+	* plugins/sample/sample_plugin.c:
+	Refactor common bits of check_policy and check_edit
+	[ac4d366a04cf]
+
+	* plugins/sample/sample_plugin.c:
+	Add sudoedit support
+	[a1a6cc4c0cef]
+
+2010-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in:
+	Rely more on VPATH; fixes a dependency issue with the parser.
+	[45e406ebdea2]
+
+	* include/compat.h:
+	Fix typo introduced in last commit
+	[3ccb0f853d11]
+
+	* include/compat.h:
+	Emulate seteuid using setreuid() or setresuid() as needed. There are
+	still a few places that call seteuid() directly.
+	[36e8efa3a99d]
+
+	* src/parse_args.c, src/sudo_edit.c:
+	Attempt to fix building on systems that only have setuid.
+	[8e9ba4083318]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Clarify sudoedit a tad.
+	[d39dfaa14ade]
+
+2010-05-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo_edit.c:
+	Fix compilation on HP-UX
+	[f6e47843d139]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document sudoedit
+	[4cbf5196d993]
+
+	* plugins/sudoers/sudoers.c, src/sudo.c, src/sudo.h, src/sudo_edit.c:
+	Change how we handle the sudoedit argv. We now require that there be
+	a "--" in argv to separate the editor and any command line arguments
+	from the files to be edited.
+	[20623d549a3c]
+
+	* include/sudo_plugin.h, plugins/sample/sample_plugin.c,
+	plugins/sudoers/Makefile.in, plugins/sudoers/gettime.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	src/Makefile.in, src/gettime.c, src/parse_args.c, src/sudo.c,
+	src/sudo.h, src/sudo_edit.c:
+	Work in progress support for sudoedit. The actual interface used by
+	the plugin for sudoedit is likely to change.
+	[c31262a31997]
+
+	* plugins/sudoers/find_path.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c:
+	Make find_path() a little more generic by not checking def_foo
+	variables inside it. Instead, pass in ignore_dot as a function
+	argument.
+	[9c23101a094d]
+
+	* plugins/sudoers/env.c:
+	Add version of getenv(3) that uses our own environ pointer.
+	[0e3783e63534]
+
+2010-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Avoid a potential race condition if SIGCHLD is received immediately
+	before we call select().
+	[99adc5ea7f0a]
+
+	* plugins/sudoers/sudoers.c:
+	Call env_init() before we open the sudoers sources as those may call
+	our setenv() replacement.
+	[5f82601f5ab0]
+
+	* plugins/sudoers/env.c:
+	Initialize env_len in env_init()
+	[7ae02b3029b5]
+
+2010-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
+	Document time stamp shortcomings under SECURITY NOTES Use "time
+	stamp" instead of timestamp.
+	[2b86120815b2]
+
+	* doc/Makefile.in:
+	Make sed substitution of mansectsu and mansectform global.
+	[94588632dba0]
+
+	* plugins/sudoers/check.c:
+	If the tty lives on a devpts filesystem, stash the ctime in the tty
+	ticket file, as it is not updated when the tty is written to. This
+	helps us determine when a tty has been reused without the user
+	authenticating again with sudo.
+	[0e62a31bceb0]
+
+	* src/tgetpass.c:
+	Fix pasto in mulitple signal fix and use _NSIG not NSIG since that
+	is what our compat checks set.
+	[df50f0a040c9]
+
+	* configure, configure.in:
+	Add check for whether sudo need to link with -ldl to get dlopen().
+	This is a bit of a hack that will get reworked when libtool is
+	updated.
+	[63bdcf579533]
+
+	* plugins/sudoers/check.c:
+	Fix timestamp removal with -k/-K
+	[6b4639fef973]
+
+	* plugins/sudoers/Makefile.in:
+	audit.c is now private to the sudoers plugin
+	[1974f342ae0b]
+
+	* configure, configure.in:
+	Link with -lpthread on HP-UX since a plugin may be linked with
+	-lpthread and dlopen() will fail if the shared object has a
+	dependency on -lpthread but the main program is not linked with it.
+	[d42139391263]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/set_perms.c:
+	Add separate test for getresuid() since HP-UX has setresuid() but no
+	getresuid().
+	[910fe727a374]
+
+	* doc/Makefile.in:
+	Remove errant backslash
+	[dd5464257c69]
+
+	* src/script.c:
+	Fix SIGPIPE handling. Now that we use may use pipes for stdin/stdout
+	we need to pass any SIGPIPE we receive to the running command.
+	[3f6b1991f4fd]
+
+	* src/script.c:
+	Also start the command in the background if stdin is not a tty.
+	[d93bc33a3740]
+
+2010-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoreplay.c, src/script.c, src/sudo.h, src/term.c:
+	No need to use pseudo-cbreak mode now that we use pipes when stdout
+	is not a tty. Instead, check whether stdin is a tty and if not,
+	delay setting the tty to raw mode until the command tries to access
+	it itself (and receives SIGTTIN or SIGTTOU).
+	[e68315cf8c6b]
+
+	* src/tgetpass.c:
+	Use an array for signals received instead of a single variable so we
+	don't lose any when there are multiple different signals.
+	[2ac726dac864]
+
+	* src/tgetpass.c:
+	Do signal setup after turning off echo, not before. If we are using
+	a tty but are not the foreground pgrp this will generate SIGTTOU so
+	we want the default action to be taken (suspend process).
+	[bebb6209c795]
+
+2010-05-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Flush the iobufs on suspend or child exit using the same logic as
+	the main event loop.
+	[c627feee1035]
+
+	* src/script.c:
+	Free memory after we are done with it.
+	[8db9b611b45a]
+
+2010-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/HISTORY:
+	Quest now sponsors Sudo development
+	[6cc490083bc7]
+
+2010-05-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/Makefile.in:
+	Install sudo_plugin man page.
+	[c253729790b2]
+
+	* src/script.c:
+	Go back to reseting io_buffer offset and length (and now also the
+	EOF handling) in the loop we do the FD_SET, not after we drain the
+	buffer after write() since we don't know what order reads and writes
+	will occur in.
+	[5f38bfa8497f]
+
+	* MANIFEST:
+	audit files moved to sudoers plugin directory
+	[b1ead182428e]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document plugin_printf and new logging functions.
+	[fe9430b60ab5]
+
+	* src/script.c:
+	Add support for logging stdin when it is not a tty. There is still a
+	bug where "cat | sudo cat" has problems because both cat and sudo
+	are trying to read from the tty.
+	[04c9c59fcfba]
+
+	* include/sudo_plugin.h, plugins/sample/sample_plugin.c,
+	plugins/sudoers/sudoers.c, src/script.c:
+	Add separate I/O logging functions for tty in/out and
+	stdin/stdout/stderr. NOTE: stdin logging does not currently work and
+	is disabled for now.
+	[a36dfd4ca935]
+
+2010-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/sudo_plugin.h, plugins/sample/sample_plugin.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	src/conversation.c, src/sudo.c, src/sudo_plugin_int.h:
+	Add pointer to a printf like function to plugin open functon. This
+	can be used instead of the conversation function to display info and
+	error messages.
+	[98734eea8ef1]
+
+	* Makefile.in:
+	Stop if make in a subdir fails
+	[228bb3ad2dbc]
+
+	* src/script.c:
+	Only set user's tty to blocking mode when doing the final flush.
+	Flush pipes as well as pty master when the process is done.
+	[20ff67218666]
+
+2010-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/ldap.c:
+	Use print_error() when displaying ldap config info in debugging
+	mode.
+	[d142e0cacb22]
+
+	* compat/Makefile.in, compat/strdup.c, compat/strndup.c:
+	No longer need strdup() or strndup() replacements.
+	[df53697174ec]
+
+	* plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
+	plugins/sudoers/sudoers.h:
+	Add print_error() function that uses the conversation function to
+	print a variable number of error strings and use it in log_error().
+	[b1fa2861b575]
+
+	* src/script.c, src/sudo.h, src/term.c:
+	Do not need the opost flag to term_copy() now that we use pipes for
+	stdout/stderr when they are not a tty.
+	[f42811f70a19]
+
+	* src/script.c:
+	Use pipes to the sudo process if stdout or stderr is not a tty.
+	Still needs some polishing and a decision as to whether it is
+	desirable to add additonal entry points for logging
+	stdout/stderr/stdin when they are not ttys. That would allow a
+	replay program to keep things separate and to know whether the
+	terminal needs to be in raw mode at replay time.
+	[1a945e0ab2da]
+
+2010-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
+	plugins/sudoers/bsm_audit.c, plugins/sudoers/bsm_audit.h,
+	src/audit.c, src/bsm_audit.c, src/bsm_audit.h:
+	Move audit sources into the sudoers plugin dir; the driver does not
+	use them.
+	[50ec36422cd0]
+
+	* compat/getline.c, compat/mksiglist.c, compat/nanosleep.c,
+	compat/strdup.c, compat/strndup.c, plugins/sample/sample_plugin.c,
+	plugins/sudoers/boottime.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/vasgroups.c, src/alloc.c,
+	src/atobool.c, src/audit.c, src/lbuf.c, src/list.c, src/sesh.c,
+	src/term.c, src/ttysize.c:
+	Use angle brackets when including headers that can only be found
+	when an -I flag is specified. The files in the compat dir could get
+	away with double quotes here but I've converted all the source files
+	to use angle brackets for consistency.
+	[9e30a8fc6d4b]
+
+	* plugins/sudoers/Makefile.in:
+	Add missing -I$(top_srcdir) to CPPFLAGS so includes in the compat
+	dir can be found when building outside the source tree.
+	[1150934b79dd]
+
+	* plugins/sudoers/Makefile.in:
+	Clean up links in distclean
+	[78595028be8b]
+
+	* plugins/sudoers/Makefile.in:
+	Hack around VPATH semantic differences by symlinking files we need
+	from ../../src into the current directory and build those. A better
+	fix would be to either make a .a or .la file with those files in it
+	or simply use a single, flat, Makefile instead of per-subdirs
+	Makefiles.
+	[892c332d3f05]
+
+	* plugins/sudoers/Makefile.in, src/Makefile.in, src/fmt_string.c:
+	fmt_string is used by the sudoers plugin too so do not include
+	sudo.h (which is not really needed here anyway)
+	[231c35e3941f]
+
+	* compat/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Fix building with non-BSD versions of make such as GNU make.
+	Requires VPATH support, which should be in any non-neolithic make.
+	[dc174f135919]
+
+	* configure, configure.in, plugins/sudoers/Makefile.in,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c,
+	src/Makefile.in:
+	Re-enable bsm audit. Currently auditing is done within the sudoers
+	plugin itself. If possible, this should really be done in the main
+	driver but we don't presently have the needed data to do that. This
+	will be re-evaluated when Linux audit support is added.
+	[1d05a3236bfe]
+
+	* compat/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Remove extraneous $srcdir and use more .c.lo and .c.o rules instead
+	of explicit rules in the dependency.
+	[88f80efd25f0]
+
+	* plugins/sudoers/visudo.c:
+	Fix mismerge; alias_remove_recursive() now returns int
+	[6257a4849641]
+
+2010-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/visudo.c:
+	Fix a crash when checking a sudoers file that has aliases that
+	reference themselves. Based on a diff from David Wood.
+	[545d194484a7]
+
+	* src/script.c:
+	Print signal info after restoring the tty mode, not before.
+	[a68618e67435]
+
+	* src/script.c:
+	Defer call to alarm() until after we fork the child. Pass correct
+	pid to terminate_child() If the command exits due to signal, set
+	alive to false like we do when it exits normally. Add missing check
+	for errpipe[0] != -1 before using it in FD_ISSET
+	[22f0a1549391]
+
+2010-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/boottime.c:
+	Use 1/0 instead of TRUE/FALSE so we don't need sudoers.h
+	[0e627170c6e8]
+
+2010-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/Makefile.in:
+	Simplify dependencies by using .c.o and .c.lo rules.
+	[6abcaef5d1ac]
+
+	* configure, configure.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Substitute in @PROGS@ into src/Makefile to add sesh
+	[cc46d3b6208f]
+
+2010-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Add back calls to log_denial() if sudoers does not allow the
+	command.
+	[9783316207f0]
+
+	* plugins/sudoers/sudoers.c:
+	Pass in correct pwflag for list and validate.
+	[973dd56d4b81]
+
+	* plugins/sudoers/env.c:
+	Add missing check for NULL in validate_env_vars
+	[1d6eb6957824]
+
+	* src/Makefile.in:
+	Add sudo_noexec.la to "all" target, otherwise it only gets built at
+	install time.
+	[644a9694d2ef]
+
+	* plugins/sudoers/sudoers.c:
+	Only set sudo_user.env_vars if the env_add list is empty.
+	[fccdf6f0e0e2]
+
+	* plugins/sudoers/sudoers.c:
+	Set sudo_user.env_vars so that environment variables specified on
+	the command line get logged correctly.
+	[9b51012c491e]
+
+	* plugins/sudoers/env.c, plugins/sudoers/logging.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Re-enable environment files and setting environment variables on the
+	command line.
+	[5662d5645dbd]
+
+2010-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c:
+	Fix typo in last commit (ifndef vs ifdef) Make sure we pass ctime()
+	a pointer to time_t as tv_sec in struct timeval may be long.
+	[4de0c46e788e]
+
+	* plugins/sudoers/check.c:
+	Don't stash ctime in on-disk tty ticket info for now; on many
+	(most?) systems the ctime is updated when the tty is written to.
+	Once I have a better idea of what systems do not update ctime on
+	ttys (and have a way to test for this) the ctime stash will be
+	conditionally re-enabled.
+	[a90eeec0f648]
+
+2010-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* MANIFEST, Makefile.in:
+	Add back "dist" target, this time using a MANIFEST file
+	[29277c05499f]
+
+	* Makefile.in:
+	Remove Makefile in distclean target
+	[83d695f4f450]
+
+	* Makefile.in, src/Makefile.in:
+	Update clean and cleandir targets
+	[ad7b2afeb9c1]
+
+	* include/fileops.h, plugins/sudoers/sudoers.h, src/fileops.c,
+	src/sudo.h:
+	Move fileops.c defines and prototypes to filesops.h
+	[4545e9b6892d]
+
+	* plugins/sudoers/check.c:
+	Lock the tty timestamp when writing. We shouldn't have to lock when
+	reading since the file is updated via a single write system call.
+	[0c7276f02696]
+
+2010-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/alias.c, plugins/sudoers/check.c,
+	plugins/sudoers/defaults.c, plugins/sudoers/find_path.c,
+	plugins/sudoers/getspwuid.c, plugins/sudoers/gettime.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/interfaces.c,
+	plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/match.c,
+	plugins/sudoers/nonunix.h, plugins/sudoers/parse.c,
+	plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/tsgetgrpw.c,
+	plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c:
+	Convert to ANSI C function declarations
+	[9c45def57cf7]
+
+	* plugins/sudoers/sudoers.h:
+	Remove extraneous bits and classify by source file.
+	[e8ea9f109ebb]
+
+	* include/compat.h:
+	Add timercmp macro for systems without it
+	[d3bf87b1d08e]
+
+	* plugins/sudoers/boottime.c, plugins/sudoers/check.c,
+	plugins/sudoers/sudoers.h:
+	get_boottime() now fills in a timeval struct
+	[3573c3f44e11]
+
+	* plugins/sudoers/check.c:
+	Store info from stat(2)ing the tty in the tty ticket when tty
+	tickets are in use. On most systems, this closes the loophole
+	whereby a user can log out of a tty, log back in and still have the
+	timestamp be valid.
+	[53380f9f5242]
+
+	* config.h.in, configure.in:
+	Add timespec2timeval and use it when getting ctime/mtime
+	[4cb7f7caec2c]
+
+2010-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/testsudoers.c:
+	Convert perm setting to push/pop model; still needs some work Use
+	the stashed runas groups instead of using getgrouplist() Reset perms
+	to the initial value on error
+	[09c072ebde8b]
+
+	* config.h.in, configure.in:
+	fix ctim_get and mtim_get macros
+	[58773dc1e360]
+
+	* config.h.in, configure, configure.in, include/compat.h,
+	plugins/sudoers/check.c, plugins/sudoers/gettime.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/fileops.c:
+	Use timeval directly instead of converting to timespec when dealing
+	with file times and time of day.
+	[a0ce1ae00a67]
+
+	* plugins/sudoers/Makefile.in:
+	Don't like sudoreplay with libsudoers.la due to a yacc symbol
+	conflict.
+	[f1a59cc63a15]
+
+2010-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Darwin >= 9.x has real setreuid(2)
+	[7ec942a64275]
+
+2010-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
+	Ansify env.c
+	[f58551bad10a]
+
+	* plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Remove remaining references to the environ pointer.
+	[96faa530816a]
+
+2010-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, plugins/sudoers/env.c:
+	Don't change the environ directly in the sudoers plugin
+	[6db48ed3f7e0]
+
+2010-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Fix typo
+	[4aa452b07f8f]
+
+	* plugins/sudoers/alias.c:
+	Fix use after free in error message when a duplicate alias exists.
+	[ce1d2812ee34]
+
+2010-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	src/parse_args.c:
+	Add a "noninteractive" boolean to the settings passed in to the
+	plugin's open function that is set when the user specifies the -n
+	flag.
+	[68f8d9d6d4d0]
+
+	* config.h.in, configure, configure.in, plugins/sudoers/env.c:
+	Add workaround for the lack of the environ pointer on Mac OS X in
+	dlopen()ed modules. Use of environ in the sudoers plugin should
+	ultimately be removed but this will do for the moment.
+	[80c61647434f]
+
+	* plugins/sudoers/visudo.c:
+	Set errorfile to the sudoers path if we set parse_error manually.
+	This prevents a NULL dereference in printf() when checking a sudoers
+	file in strict mode when alias errors are present.
+	[45e249ca99f7]
+
+	* plugins/sudoers/sudoers.c:
+	Main sudo no longer print "unable to execute" on exec failure so do
+	it here.
+	[50aaf62b43b5]
+
+2010-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Use a pipe to pass back errno to the parent if execve() fails. If we
+	get an error in script_child(), kill the command and exit.
+	[dc3bf870f91b]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	src/parse_args.c, src/sudo.c:
+	Handle plugin's open function returning -2 (usage error).
+	[aadf900c1de8]
+
+	* src/script.c:
+	If execve() fails, leave it to the plugin to print an error string.
+	[e25748f2d5b9]
+
+	* src/script.c:
+	If execve fails in logging mode, pass the errno directly to the
+	grandparent on the backchannel and exit. The immediate parent will
+	get SIGCHLD and try to report that status but its parent will no
+	longer be listening. It would probably be cleaner to pass this over
+	a pipe in script_child().
+	[cb122acc81a8]
+
+	* plugins/sudoers/sudoers.c:
+	Don't override rval with results of check_user() unless it failed.
+	[46fb7e87ac7d]
+
+2010-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Fix typo
+	[ccd0b693f3da]
+
+	* src/parse_args.c:
+	NULL-terminate env_add
+	[2c534368a0c3]
+
+2010-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c:
+	Call the I/O log open function before the I/O version function.
+	[e88bf898990b]
+
+	* plugins/sudoers/iolog.c:
+	Remove io_conv and just use sudo_conv
+	[a280052468eb]
+
+	* plugins/sudoers/set_perms.c:
+	Fix set/restore perms for systems w/o setresuid
+	[4160517f6666]
+
+2010-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/check.c, plugins/sudoers/logging.c,
+	plugins/sudoers/parse.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
+	Primitive set/restore permissions. Will be replaced by a push/pop
+	model.
+	[aae102290866]
+
+	* src/script.c:
+	Only need to take action on SIGCHLD in parent if no I/O logger. If
+	there is an I/O logger we will receive ECONNRESET or EPIPE when we
+	try to read from the socketpair.
+	[e1e4560401f6]
+
+2010-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/memrchr.c, doc/sudoers.cat, doc/sudoers.man.in,
+	doc/sudoers.pod, plugins/sudoers/find_path.c:
+	Merge fb4d571495fa from the 1.7 branch to trunk.
+	[c8fb424ad4d2]
+
+	* find_path.c:
+	Qualify the command even if it is in the current working directory,
+	e.g. "./foo" instead of just returning "foo". This removes an
+	ambiguity between real commands and possible pseudo-commands in
+	command matching.
+	[fb4d571495fa] <1.7>
+
+2010-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Don't set SA_RESTART when registering SIGALRM handler. Do set
+	SA_RESTART when registering SIGWINCH handler.
+	[173472b76525]
+
+	* doc/Makefile.in:
+	Add dev targets for *.man.in and *.cat that don't specfify the
+	$(srcdir) prefix.
+	[b62f425da2e4]
+
+	* src/script.c:
+	If log_input or log_output returns false, terminate the command.
+	[074f4c0c34a0]
+
+	* src/script.c:
+	Better signal handling. Instead of using a single variable to store
+	the received signal, use an array so we can't lose a signal when
+	multiple are sent. Fix process termination by SIGALRM in non-I/O
+	logger mode. Fix relaying terminal signals to the child in non-I/O
+	logger mode.
+	[7a4723aca99d]
+
+	* src/script.c:
+	Fix a race between when we get the child pid in the parent and when
+	the child process exits. The problem exhibited as a hang after a
+	short-lived process, e.g. "sudo id" when no IO logger was enabled.
+	[80bcc0aca70b]
+
+2010-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
+	Add a note about the security implications of the fast_glob option.
+	[c37a92ab7c93]
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	Add a note about the security implications of the fast_glob option.
+	[84f8097553d9] <1.7>
+
+	* memrchr.c:
+	Remove duplicate includes
+	[3e8d90f4c30f] <1.7>
+
+2010-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in:
+	Fix up some AC_DEFINE descriptions and regen config.h.in
+	[f4655adc0db3]
+
+2010-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	No longer check for strdup or strndup for LIBOBJ replacement.
+	[fdc764ee8109]
+
+	* src/script.c:
+	Avoid installing signal handlers that are io-logger specific. Fixes
+	job control when no io logger is enabled.
+	[0853dd0906d4]
+
+	* doc/Makefile.in:
+	Only regen man pages from pod when configured with --with-devel
+	[ab1995f8103d]
+
+2010-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile, Makefile.in, configure, configure.in:
+	Top-level Makefile.in. Nothing is currently substituted but this is
+	needed for separate build dirs.
+	[e80873cbd201]
+
+	* compat/Makefile.in, doc/Makefile.in, plugins/sample/Makefile.in,
+	plugins/sudoers/Makefile.in, src/Makefile.in:
+	Fix out-of-tree builds
+	[59a35bef07b8]
+
+	* Merge
+	[386b848047e9]
+
+	* doc/Makefile.in:
+	We always install sudoreplay in 1.8
+	[ce52ba6617c9]
+
+	* plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
+	Free str after using it in the version method. Use sudo_conv, not
+	io_conv since we don't have the IO conversation function pointer in
+	the I/O version method anymore now that io_open is delayed.
+	[f2ed132adeb0]
+
+2010-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/siglist.in:
+	SIGPOLL is sometimes the same as SIGIO (like on HP-UX)
+	[6d69e1b05faf]
+
+2010-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	No need to provide strdup() or strndup(), sudo uses estrdup() and
+	estrndup()
+	[57ec23b72958]
+
+	* compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h,
+	compat/siglist.in:
+	Add license to mksiglist.c and note that the bits from pdksh are
+	public domain
+	[d8121a2467e8]
+
+	* compat/Makefile.in:
+	Fix LIBOBJDIR vs. srcdir wrt the siglist bits
+	[164160148421]
+
+	* plugins/sudoers/Makefile.in:
+	Add sudoreplay testsudoers and visudo to clean target
+	[138a17e51c0c]
+
+	* compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h,
+	compat/siglist.in, compat/strsignal.c, configure, configure.in,
+	include/missing.h, src/script.c:
+	Create our own sys_siglist for systems without it for use by
+	strsignal()
+	[2e5da011ebc3]
+
+	* compat/Makefile.in:
+	Remove duplicate $(LIBOBJDIR)
+	[adf9abc9432f]
+
+2010-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, src/sudo.c, src/sudo_edit.c:
+	Main sudo should not block signals; the plugin should do this in
+	check_policy.
+	[3f3736a7c5ed]
+
+2010-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Fix a sizeof(ptr) vs. sizeof(*ptr)
+	[aa1bcf5afcce]
+
+	* src/script.c:
+	Unlike most operating systems, HP-UX select() is not interrupted by
+	SIGCHLD when the signal is registered with SA_RESTART. If we clear
+	SA_RESTART when calling sigaction() for SIGCHLD we get the expected
+	behavior and the code in the select() loops already handles EINTR
+	correctly.
+	[9eba0115e35a]
+
+	* compat/getprogname.c:
+	progname should be const
+	[130228f062b7]
+
+	* plugins/sudoers/Makefile.in:
+	Move --tag=disable-static to when we link sudoers.la, not when we
+	install.
+	[ceb5e6c3b78b]
+
+	* src/load_plugins.c:
+	Load the sudoers I/O plugin by default too now that it is hooked up.
+	[ea38befd0742]
+
+2010-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/pty.c:
+	It looks like AIX doesn't need to push STREAMS modules for ptys.
+	[22da618ba0a1]
+
+2010-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/parse_args.c, src/sudo.c:
+	Delay calling the I/O plugin open function until the policy plugin
+	returns success.
+	[f3297c325b48]
+
+2010-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add back io logging (transcript) support. Currently, the open
+	function runs too early and it is not possible to use the io module
+	independently of the policy module.
+	[9bd932f66226]
+
+	* plugins/sudoers/set_perms.c:
+	Comment out dead code; will be removed when set_perms is rewritten.
+	[af7a995284f8]
+
+2010-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Fix off by one error when allocating user_groups.
+	[6281fcf9c3bb]
+
+2010-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, plugins/sudoers/Makefile.in:
+	Add REPLAY_LIBS for sudoreplay and add -lrt to it on Solaris.
+	[fbce3e9eda3a]
+
+	* plugins/sudoers/sudoers.c:
+	Fix typo in preserve groups case
+	[1fd72024fb5a]
+
+	* plugins/sudoers/sudoers.c:
+	In command_info it is "runas_groups" not "groups".
+	[5c64dce4f285]
+
+	* src/sudo.c:
+	Fix iteration over runas_groups list.
+	[b3c45a0cd643]
+
+	* configure, configure.in, plugins/sudoers/env.c,
+	plugins/sudoers/match.c, src/script.c:
+	Merge 5177a284b9ff 549f8f7c2463 88f3181692fe from 1.7 branch.
+	[a8108a0776c2]
+
+	* compat/getgrouplist.c:
+	getgrouplist(3) for those without it
+	[4ab4d21e3b16]
+
+	* configure, configure.in:
+	Fix installation of sudoers.ldap in "make install" when --with-ldap
+	was specified without a directory. From Prof. Dr. Andreas Mueller
+	[5177a284b9ff] <1.7>
+
+	* plugins/sudoers/sudoers.c:
+	Set preserve_groups or groups list in command_info
+	[1266119ad654]
+
+	* src/sudo.c:
+	Fix setting of groups list
+	[e75315e40bd4]
+
+	* config.h.in, configure, configure.in, include/compat.h,
+	include/missing.h:
+	Add checks for getgrset and getgrouplist and use replacement
+	getgrouplist if the system doesn't support it.
+	[a62b8ba50863]
+
+	* src/parse_args.c:
+	Pass in preserve_groups when the -P flag is specified as per the
+	design
+	[7420c5d15474]
+
+	* plugins/sudoers/sudoers.c:
+	Check preserve_groups and ignore_ticket args with atobool instead of
+	assuming they are true if present.
+	[71c905702697]
+
+2010-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/error.c,
+	plugins/sudoers/plugin_error.c:
+	Rename plugin-specific error.c to plugin_error.c Wire up visudo,
+	sudoreplay and testsudoers in the build
+	[9d581d5fa4d4]
+
+	* src/Makefile.in, src/term.c:
+	term.c does not needto include sudo.h
+	[f6683cdcd2dd]
+
+	* TODO, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.pod:
+	Document the -2 return in the check_policy section too
+	[e9cb4c34bbcf]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	src/parse_args.c, src/sudo.c, src/sudo.h:
+	Fix the -s and -i flags and add support for the "implied_shell"
+	option. If the user does not specify a command, sudo will now pass
+	in the path to the user's shell and set impied_shell=true. The
+	plugin can them either check the command normally or return -2 to
+	cause sudo to print a usage message and exit.
+	[bf889c38f229]
+
+2010-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, src/load_plugins.c:
+	Bring back SUDOERS_PLUGIN but add .dylib -> .so conversion for
+	Darwin where libraries end in .dylib but modules end in .so
+	[2c56aaa38e21]
+
+	* plugins/sudoers/parse.c:
+	Better prefix determination now that we can't rely on len==0 to tell
+	the beginning on an entry.
+	[622bf18179e9]
+
+	* plugins/sudoers/ldap.c:
+	display_bound_defaults() stub should return 0, not 1 since it is a
+	count, not a boolean.
+	[0327a6c3d55d]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document progname in settings
+	[42031d56a2e3]
+
+	* compat/getprogname.c, include/compat.h,
+	plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c,
+	src/parse_args.c, src/sudo.c:
+	Rewrite compat/getprogname.c and add setprogname(). The progname is
+	now passed to the plugin via the settings array.
+	[25d8663e6006]
+
+	* configure, configure.in, plugins/sudoers/Makefile.in:
+	Fix --with-ldap
+	[b64b633f426d]
+
+	* plugins/sudoers/sudo_nss.c:
+	Add missing whitespace for Runas and Command-specific defaults
+	[65f4ddf5545e]
+
+	* plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
+	plugins/sudoers/sudo_nss.c:
+	Use embedded newlines in lbuf instead of multiple calls to
+	lbuf_print.
+	[eed3af9cc3e1]
+
+	* src/lbuf.c:
+	Add support for embedded newlines.
+	[e11f79b18deb]
+
+2010-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/getprogname.c:
+	If system doesn't support getprogname or __programe and we are
+	building a shared object don't bother with Argc/Argv, just return
+	"sudo"
+	[aebde9062be7]
+
+	* config.h.in, configure, configure.in, src/load_plugins.c:
+	Hard-code sudoers.so instead of using SUDOERS_PLUGIN since libtool
+	appears to always install a shared object with the .so suffix.
+	[f9bbd0c0e9d3]
+
+	* compat/Makefile.in, configure, configure.in,
+	plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
+	src/Makefile.in:
+	Play more nicely with libtool and let it build libreplace (was
+	libmissing) for us.
+	[a4c6ebb2495c]
+
+	* include/missing.h:
+	Include stdarg.h for va_list rather than requiring all consumers of
+	missing.h to include stdarg.h themselves.
+	[37382df948de]
+
+	* include/lbuf.h, plugins/sudoers/auth/sudo_auth.c,
+	plugins/sudoers/check.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c,
+	src/parse_args.c:
+	Pass in output function to lbuf_init() instead of writing to stdout.
+	A side effect is that the usage info can now go to stderr as it
+	should.
+	[6d261261a072]
+
+2010-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/lbuf.h, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c,
+	src/parse_args.c, src/sudo.c:
+	Use number of tty columns that is passed in user_info instead of
+	getting it directly in the lbuf code.
+	[8a16635c2638]
+
+	* plugins/sudoers/alias.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/env.c,
+	plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
+	plugins/sudoers/interfaces.h, plugins/sudoers/logging.c,
+	plugins/sudoers/logging.h, plugins/sudoers/match.c,
+	plugins/sudoers/mon_systrace.h, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.h,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
+	plugins/sudoers/toke.l, plugins/sudoers/tsgetgrpw.c,
+	plugins/sudoers/visudo.c:
+	Kill __P in sudoers
+	[63601e6cb171]
+
+	* config.h.in, configure, configure.in, src/load_plugins.c:
+	Set the sudoers plugin name in configure so we get the extension
+	right.
+	[edad89924cd1]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document lines/cols in user_info
+	[a808872394f3]
+
+	* src/Makefile.in, src/sudo.c, src/sudo.h, src/ttysize.c:
+	Add tty size to user info
+	[23f3d27e77a7]
+
+	* src/script.c:
+	Use TIOCGSIZE/TIOCSSIZE instead of TIOCGWINSZ/TIOCSWINSZ
+	[a2208dd09051]
+
+2010-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c:
+	Kill dead code Add missing sigsetjmp in sudo_policy_invalidate Error
+	out if we fail to lookup the user's name that is passed in
+	[e4e3728ed482]
+
+	* plugins/sudoers/error.c:
+	Pass the error value back via siglongjmp.
+	[667b8ad575ce]
+
+	* plugins/sudoers/check.c:
+	Use conversation function for lecture.
+	[1ab4719f509b]
+
+	* plugins/sudoers/check.c:
+	Don't update ticket file if verify_user returns FALSE.
+	[2bbc46a39a2b]
+
+2010-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/sudoers.c, src/sudo.c:
+	Wire up invalidate and validate methods for sudoers
+	[c0630c7bca47]
+
+	* plugins/sudoers/check.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h:
+	Add support for -k flag with a command.
+	[edad239b098b]
+
+	* src/parse_args.c:
+	Allow -k to be specified with a command.
+	[43a45add9974]
+
+	* plugins/sudoers/sudoers.c:
+	Wire up policy_list
+	[27cc35699eca]
+
+	* plugins/sudoers/error.c:
+	Add newline at the end of message and space after the colon in
+	warning message
+	[5a591aa8e744]
+
+	* plugins/sudoers/auth/sudo_auth.c:
+	Add missing newline after pass password warning
+	[337dba3870a7]
+
+	* plugins/sudoers/sudoers.c:
+	Set user_groups and user_ngroups based on user_info
+	[61bee85128c8]
+
+	* plugins/sudoers/error.c:
+	Make this compile
+	[7041c441e1c8]
+
+	* Makefile:
+	Build sudoers plugin
+	[5cdf06e66978]
+
+	* plugins/sudoers/gram.c, plugins/sudoers/gram.y:
+	Use warningx in yyerror() so the conversation function gets used
+	when built as part of sudoers.
+	[85f964215eef]
+
+	* plugins/sudoers/error.c, plugins/sudoers/sudoers.c:
+	Make _warning in error.c use the conversation function and remove
+	commented out warning/warningx in sudoers.c.
+	[7c9b09024b63]
+
+	* plugins/sudoers/logging.c:
+	Use siglongjmp() in log_error for fatal errors
+	[b50e26f1c73f]
+
+	* plugins/sample/Makefile.in, plugins/sudoers/Makefile.in:
+	Quiet a libtool warning
+	[b2331fb006bc]
+
+2010-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sudoers/auth/pam.c:
+	Rename sudo_conv to conversation to avoid a namespace conflict.
+	[1ad359d36be9]
+
+	* plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/check.c, plugins/sudoers/defaults.c,
+	plugins/sudoers/env.c, plugins/sudoers/error.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
+	plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
+	plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
+	plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c,
+	plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c,
+	plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
+	plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
+	plugins/sudoers/toke.c, plugins/sudoers/tsgetgrpw.c,
+	plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c:
+	Initial bits of sudoers plugin; still needs work.
+	[af2a2c59a952]
+
+	* config.h.in:
+	Add HAVE_STRDUP and HAVE_STRNDUP
+	[50a3c0dd510f]
+
+	* compat/Makefile.in, configure, configure.in:
+	Build libmissing in two flavors (one PIC one non-PIC) and link with
+	the appropriate one.
+	[b62f411a4c18]
+
+	* Makefile, compat/fnmatch.c, compat/glob.c, compat/nanosleep.c,
+	compat/utimes.c, plugins/sample/Makefile.in, src/Makefile.in:
+	Build libmissing in two flavors (one PIC one non-PIC) and link with
+	the appropriate one.
+	[e1e04972b5fe]
+
+2010-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* include/missing.h:
+	Add strdup and strndup and fix strsignal
+	[c159babe2896]
+
+2010-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat/strdup.c, compat/strndup.c, configure, configure.in,
+	plugins/sample/Makefile.in, src/Makefile.in:
+	Add strdup and strndup to compat
+	[25c9fd399a4d]
+
+	* plugins/sample/sample_plugin.c:
+	Need to include compat.h before missing.h
+	[c94f7aad380f]
+
+	* compat/strsignal.c:
+	Must check HAVE_DECL_SYS_SIGLIST == 1 (not just if defined) since if
+	it doesn't exist configure will set it to 0.
+	[384580566389]
+
+	* compat/glob.c:
+	Fix botched ANSI C coversion of globexp2()
+	[4a344b8cbe49]
+
+	* configure, configure.in:
+	Remove redundant getgroups check
+	[0b16ec210c81]
+
+	* configure, configure.in, src/lbuf.c, src/script.c, src/term.c:
+	Require either termios or termio, no more sgtty.
+	[9b2fa2f17a1c]
+
+	* compat/strsignal.c, config.h.in, configure, configure.in:
+	Change the sys_siglist check to use AC_CHECK_DECLS and also check
+	for _sys_siglist and__sys_siglist
+	[2e078fed2408]
+
+2010-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, src/Makefile.in:
+	Change SUDO_LDFLAGS to SUDOERS_LDFLAGS and add SUDOERS_OBJS. We now
+	use SUDO_OBJS for the main driver as part of OBJS.
+	[9ae4a80a5ade]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Mention in the conversation function section that a newline is not
+	implicit.
+	[04a233b6c491]
+
+	* include/compat.h:
+	Add definition of WCOREDUMP for systems without it. This is known to
+	work on AIX and SunOS 4, but may be incorrect on other systems that
+	lack WCOREDUMP.
+	[c85b3ce6b77d]
+
+2010-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sample/sample_plugin.c, src/conversation.c:
+	conversation function no longer puts a newline at the end of info or
+	error messages.
+	[c534cae1ac4a]
+
+	* match.c:
+	When doing a glob match, short circuit if gl.gl_pathc is 0. From
+	Mark Kettenis.
+	[549f8f7c2463] <1.7>
+
+2010-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Use parent process group id instead of parent process id when
+	checking foreground status and suspending parent. Fixes an issue
+	when running commands under /usr/bin/time and others.
+	[eac86126e335] <1.7>
+
+	* env.c:
+	In setenv(), if the var is empty, return 1 and set errno to EINVAL
+	instead of returning EINVAL directly.
+	[d202091ec15e] <1.7>
+
+2010-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Use parent process group id instead of parent process id when
+	checking foreground status and suspending parent. Fixes an issue
+	when running commands under /usr/bin/time and others.
+	[564f528c3bb7]
+
+2010-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4:
+	transcript option is now --with not --enable
+	[0646fac4cf93]
+
+	* plugins/sample/sample_plugin.c:
+	Add support to -u and -g flags Check fmt_string retval Add timeout
+	for debugging purposes
+	[cfefa4fa60b5]
+
+	* src/script.c, src/sudo.c:
+	Wire up SIGALRM handler Set close on exec flag for child side of the
+	socketpair Fix signal handling when not doing I/O logging
+	[379581ec7272]
+
+	* src/sudo.c:
+	g/c unused SIGCHLD handler
+	[0afa03912dce]
+
+	* src/fmt_string.c, src/parse_args.c, src/sudo.c:
+	Don't use emalloc() in fmt_string(); we want to be able to use it
+	from a plugin.
+	[ade64d368147]
+
+	* include/list.h:
+	tq_remove not list_remove
+	[0e0e1fd5c31c]
+
+	* configure, configure.in:
+	AUTH_OBJS should contain .lo files not .o files.
+	[c64c82c9d5a2]
+
+2010-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/parse_args.c:
+	Simplify conversion of command line args to name=value pairs.
+	[75ab127c6a94]
+
+	* plugins/sample/sample_plugin.c:
+	Handle NULL reply from conversation function
+	[6ce09b6cb204]
+
+	* compat/getline.c:
+	Don't depend on emalloc/erealloc
+	[73df09e2109f]
+
+	* plugins/sample/Makefile.in:
+	Use $(OBJS) instead of sample_plugin.lo
+	[2d995db9aa99]
+
+	* plugins/sample/sample_plugin.c:
+	runas_user is in settings not user_info
+	[7ee12068bc57]
+
+	* src/parse_args.c:
+	Fix a mismatch between sudo_settings and settings_pairs that causes
+	some settings to get the wrong values.
+	[b1bc6d81a65f]
+
+2010-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/Makefile.in, src/aix.c, src/alloc.c, src/atobool.c, src/error.c,
+	src/fileops.c, src/lbuf.c, src/list.c, src/pty.c, src/sesh.c,
+	src/sudo.c, src/sudo_edit.c, src/term.c, src/zero_bytes.c:
+	Convert to ANSI C
+	[d03b6e4a3b75]
+
+	* src/load_plugins.c:
+	Fix strlcpy() return value check.
+	[7cd66999a374]
+
+	* INSTALL, configure, configure.in:
+	No longer need to substitute in script.o and pty.o; I/O logging
+	support is always built.
+	[45250024c5dc]
+
+2010-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Add fallback to /bin/sh when execve() fails with ENOEXEC.
+	[7684a15a1352]
+
+	* include/alloc.h, src/alloc.c:
+	Add estrndup()
+	[47621c83bed9]
+
+2010-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c, src/sudo.c:
+	Refactor script_execve() a bit so that it can be used in non-script
+	mode. Needs more cleanup.
+	[f09e022d547c]
+
+	* src/sudo.c:
+	Ignore empty entries in command_info list
+	[1eea9a8de21c]
+
+	* include/list.h, src/list.c:
+	Add tq_remove
+	[40908a617cb2]
+
+	* src/conversation.c:
+	Pass timeout to tgetpass()
+	[9e66c918b771]
+
+	* Makefile:
+	Add ChangeLog target
+	[da4a39150838]
+
+	* README, WHATSNEW:
+	Bump version and update things slightly for sudo 1.8.0
+	[4b73cc45e2d4]
+
+	* configure, configure.in:
+	Sudo now requires an ANSI/ISO C compiler
+	[1e51f72e6964]
+
+	* src/alloc.c, src/audit.c, src/error.c, src/lbuf.c,
+	src/sudo_noexec.c:
+	Convert to ANSI C
+	[5cbd315dbde8]
+
+	* include/alloc.h, include/compat.h, include/error.h, include/lbuf.h,
+	include/list.h, include/missing.h:
+	Convert to ANSI C
+	[3f5016ff64f4]
+
+	* compat/charclass.h, compat/closefrom.c, compat/fnmatch.c,
+	compat/fnmatch.h, compat/getcwd.c, compat/getline.c,
+	compat/getprogname.c, compat/glob.c, compat/glob.h,
+	compat/isblank.c, compat/memrchr.c, compat/mkstemp.c,
+	compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c,
+	compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
+	compat/strlcpy.c, compat/strsignal.c, compat/utime.h,
+	compat/utimes.c:
+	Convert to ANSI C
+	[0d635c85461c]
+
+2010-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/sudo.c, src/tgetpass.c:
+	Make user_details extern so tgetpass can get at the uid and gid. Set
+	uid/gid to user before executing askpass program. Check environment
+	for SUDO_ASKPASS and use that if set. TODO: a way for the policy to
+	set the askpass program itself
+	[d33606396176]
+
+	* src/sudo.c:
+	No longer need sudo_usage.h in sudo.c
+	[063e2946c382]
+
+	* doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.man.in,
+	doc/sudo_plugin.pod, src/Makefile.in, src/parse_args.c,
+	src/sudo_usage.h.in:
+	Document -D level command line flag which maps to the debug_level
+	setting.
+	[61f1e2ab3ac1]
+
+	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Document debug_level in plugin doc. Still need to document the -D
+	flag in sudo itself.
+	[8c62daea3e9b]
+
+2010-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Check for pseudo-command by looking at the first character of the
+	command in sudoers instead of checking the user-supplied command for
+	a slash.
+	[88f3181692fe] <1.7>
+
+2010-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* plugins/sample/sample_plugin.c:
+	include missing,h for vasprintf
+	[92503de49b39]
+
+	* doc/Makefile.in, doc/plugin.pod, doc/sudo_plugin.cat,
+	doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
+	Rename plugin.pod -> sudo_plugin.pod and wire into Makefile
+	[14cfb4775238]
+
+	* plugins/sample/sample_plugin.c:
+	Need to include limits.h
+	[bda7f74343d2]
+
+	* compat/glob.c:
+	No more sudo_getpw*
+	[232e52907634]
+
+	* plugins/sample/Makefile.in, src/Makefile.in:
+	Add missing compat bits
+	[4843dd000e08]
+
+	* compat/closefrom.c, compat/mkstemp.c, plugins/sample/Makefile.in:
+	compat files should not include sudo.h wire up compat in sample
+	plugin
+	[a175b8185e0f]
+
+	* Makefile, configure, configure.in, doc/Makefile.in, src/Makefile.in:
+	Fix up compat dependencies. Fix distclean target in doc/Makefile.in
+	[57e49bc20857]
+
+	* configure, configure.in:
+	Fix typo
+	[333655e3d5fe]
+
+	* plugins/sample/sample_plugin.c:
+	Log input and output to temp files for proof of concept.
+	[ae1dfc34f7d6]
+
+	* Makefile, configure, configure.in, doc/Makefile.in:
+	Add doc Makefile.in and wire it up
+	[6a310443c87d]
+
+	* src/script.c:
+	Handle SIGSTOP in addition to SIGTSTP. Fixes a problem with
+	suspending a shell with the "suspend" builtint.
+	[3d65f182819a]
+
+	* src/script.c:
+	In child, handle parent side of the pipe going away.
+	[a29c14d78cd9]
+
+	* src/script.c:
+	No longer need to check for explicit death of the child (process #2)
+	since if it dies we will get EPIPE from the socketpair. Fix a
+	sizeof() that was causing a spurious error. Convert SCRIPT_DEBUG to
+	sudo_debug.
+	[24c55dd4ff60]
+
+	* src/sudo.c:
+	Make sudo_debug do a single vfprintf() which will result in a single
+	write call on most systems. Avoids problems with interleaved debug
+	printf from different processes. Also remove an extraneous error
+	case since recv() can't return a short read and add some more XXX.
+	[b37a8533ef1e]
+
+2010-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* src/script.c:
+	Fix uninitialized variable.
+	[e012a0a30890]
+
+	* src/Makefile.in:
+	Fix sudo install target
+	[1417fa4b4ab9]
+
+	* src/parse_args.c, src/sudo.c, src/sudo.h:
+	Wire up debug_level
+	[144fab289c73]
+
+	* src/Makefile.in:
+	Fix dependencies
+	[5170940af2ce]
+
+	* configure, configure.in:
+	Fix setting of plugin dir
+	[144eda170a72]
+
+	* Makefile:
+	add clean targets
+	[d53f6f6f5c3a]
+
+	* src/atobool.c:
+	Add missing source for sudo front end
+	[42487de9c489]
+
+	* plugins/sample/Makefile.in, plugins/sample/sample_plugin.c:
+	Sample plugin demonstrating the sudo plugin API
+	[f1fd62d7644f]
+
+	* Makefile, configure, configure.in, install-sh, pathnames.h.in,
+	plugins/sudoers/install-sh, src/Makefile.in, src/conversation.c,
+	src/fileops.c, src/fmt_string.c, src/load_plugins.c,
+	src/parse_args.c, src/pty.c, src/script.c, src/sudo.c, src/sudo.h,
+	src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c,
+	sudo_usage.h.in:
+	Modular sudo front-end which loads policy and I/O plugins that do
+	most the actual work. Currently relies on dynamic loading using
+	dlopen(). See doc/plugin.pod for the plugin API.
+	[924f6eb2fbba]
+
+	* doc/plugin.pod, include/sudo_plugin.h:
+	Sudo plugin API
+	[374ccbbd24ae]
+
+	* compat/fnmatch.c, compat/glob.c, compat/nanosleep.c,
+	compat/utimes.c, plugins/sudoers/check.c, plugins/sudoers/gettime.c,
+	plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
+	src/fileops.c, src/sudo_edit.c:
+	Replace emul/include.h with compat/include.h to match new source
+	tree layout.
+	[7eccd10449a1]
+
+	* src/lbuf.c:
+	Include missing.h for memrchr() proto
+	[03abd63a8a33]
+
+	* HISTORY, LICENSE, Makefile.binary.in, Makefile.in, PORTING,
+	TROUBLESHOOTING, UPGRADE, aix.c, aixcrypt.exp, alias.c, alloc.c,
+	alloc.h, audit.c, auth/API, auth/afs.c, auth/aix_auth.c,
+	auth/bsdauth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c,
+	auth/pam.c, auth/passwd.c, auth/rfc1938.c, auth/secureware.c,
+	auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c,
+	auth/sudo_auth.h, boottime.c, bsm_audit.c, bsm_audit.h, check.c,
+	closefrom.c, compat.h, compat/charclass.h, compat/closefrom.c,
+	compat/fnmatch.c, compat/fnmatch.h, compat/getcwd.c,
+	compat/getline.c, compat/getprogname.c, compat/glob.c,
+	compat/glob.h, compat/isblank.c, compat/memrchr.c, compat/mkstemp.c,
+	compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c,
+	compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
+	compat/strlcpy.c, compat/strsignal.c, compat/timespec.h,
+	compat/utime.h, compat/utimes.c, def_data.c, def_data.h,
+	def_data.in, defaults.c, defaults.h, doc/HISTORY, doc/LICENSE,
+	doc/PORTING, doc/TROUBLESHOOTING, doc/UPGRADE, doc/history.pod,
+	doc/license.pod, doc/sample.pam, doc/sample.sudoers,
+	doc/sample.syslog.conf, doc/schema.ActiveDirectory,
+	doc/schema.OpenLDAP, doc/schema.iPlanet, doc/sudo.cat,
+	doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod, doc/sudoers.cat,
+	doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
+	doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoers.pod,
+	doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
+	doc/visudo.cat, doc/visudo.man.in, doc/visudo.pod, emul/charclass.h,
+	emul/fnmatch.h, emul/glob.h, emul/timespec.h, emul/utime.h, env.c,
+	error.c, error.h, fileops.c, find_path.c, fnmatch.c, getcwd.c,
+	getdate.c, getdate.y, getline.c, getprogname.c, getspwuid.c,
+	gettime.c, glob.c, goodpath.c, gram.c, gram.h, gram.y, history.pod,
+	include/alloc.h, include/compat.h, include/error.h, include/lbuf.h,
+	include/list.h, include/missing.h, ins_2001.h, ins_classic.h,
+	ins_csops.h, ins_goons.h, install-sh, insults.h, interfaces.c,
+	interfaces.h, isblank.c, lbuf.c, lbuf.h, ldap.c, license.pod,
+	list.c, list.h, logging.c, logging.h, match.c, memrchr.c, missing.h,
+	mkdefaults, mkstemp.c, mon_systrace.c, mon_systrace.h, nanosleep.c,
+	nonunix.h, parse.c, parse.h, plugins/sudoers/Makefile.binary.in,
+	plugins/sudoers/Makefile.in, plugins/sudoers/aixcrypt.exp,
+	plugins/sudoers/alias.c, plugins/sudoers/auth/API,
+	plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
+	plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
+	plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
+	plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
+	plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
+	plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
+	plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
+	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
+	plugins/sudoers/boottime.c, plugins/sudoers/check.c,
+	plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
+	plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
+	plugins/sudoers/defaults.h, plugins/sudoers/env.c,
+	plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
+	plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
+	plugins/sudoers/gettime.c, plugins/sudoers/goodpath.c,
+	plugins/sudoers/gram.c, plugins/sudoers/gram.h,
+	plugins/sudoers/gram.y, plugins/sudoers/ins_2001.h,
+	plugins/sudoers/ins_classic.h, plugins/sudoers/ins_csops.h,
+	plugins/sudoers/ins_goons.h, plugins/sudoers/install-sh,
+	plugins/sudoers/insults.h, plugins/sudoers/interfaces.c,
+	plugins/sudoers/interfaces.h, plugins/sudoers/ldap.c,
+	plugins/sudoers/logging.c, plugins/sudoers/logging.h,
+	plugins/sudoers/match.c, plugins/sudoers/mkdefaults,
+	plugins/sudoers/mon_systrace.c, plugins/sudoers/mon_systrace.h,
+	plugins/sudoers/nonunix.h, plugins/sudoers/parse.c,
+	plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
+	plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
+	plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
+	plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers,
+	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
+	plugins/sudoers/sudoers2ldif, plugins/sudoers/sudoreplay.c,
+	plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c,
+	plugins/sudoers/toke.c, plugins/sudoers/toke.l,
+	plugins/sudoers/tsgetgrpw.c, plugins/sudoers/vasgroups.c,
+	plugins/sudoers/visudo.c, pty.c, pwutil.c, redblack.c, redblack.h,
+	sample.pam, sample.sudoers, sample.syslog.conf,
+	schema.ActiveDirectory, schema.OpenLDAP, schema.iPlanet, script.c,
+	selinux.c, sesh.c, set_perms.c, sigaction.c, snprintf.c, src/aix.c,
+	src/alloc.c, src/audit.c, src/bsm_audit.c, src/bsm_audit.h,
+	src/error.c, src/fileops.c, src/lbuf.c, src/list.c, src/pty.c,
+	src/script.c, src/selinux.c, src/sesh.c, src/sudo_edit.c,
+	src/sudo_noexec.c, src/term.c, src/tgetpass.c, src/zero_bytes.c,
+	strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, strsignal.c, sudo.c,
+	sudo.cat, sudo.h, sudo.man.in, sudo.man.pl, sudo.pod, sudo_edit.c,
+	sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudoers, sudoers.cat,
+	sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod,
+	sudoers.man.in, sudoers.man.pl, sudoers.pod, sudoers2ldif,
+	sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod,
+	term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l,
+	tsgetgrpw.c, utimes.c, vasgroups.c, visudo.c, visudo.cat,
+	visudo.man.in, visudo.pod, zero_bytes.c:
+	Rework source layout in preparation for modular sudo.
+	[7fc1978c6ad5]
+
+2010-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Avoid a duplicate fclose() of the sudoers file.
+	[5dba851088c1]
+
+	* Fix size arg when realloc()ing include stack. From Daniel Kopecek
+	[0a2935061e33]
+
+	* Use setrlimit64(), if available, instead of setrlimit() when setting
+	AIX resource limits since rlim_t is 32bits.
+	[353db89bac61]
+
+	* Fix use after free when sending error messages. From Timo Juhani
+	Lindfors
+	[e50dbd902382]
+
+	* ChangeLog, Makefile.in:
+	Generate the ChangeLog as part of "make dist" instead of having it
+	in the repo.
+	[251b70964673]
+
+2010-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.l:
+	Avoid a duplicate fclose() of the sudoers file.
+	[164d39108dde] <1.7>
+
+	* toke.l:
+	Fix size arg when realloc()ing include stack. From Daniel Kopecek
+	[8900bccef219] <1.7>
+
+2010-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aix.c, config.h.in, configure, configure.in:
+	Use setrlimit64(), if available, instead of setrlimit() when setting
+	AIX resource limits since rlim_t is 32bits.
+	[2cbb14d98fc1] <1.7>
+
+	* logging.c:
+	Fix use after free when sending error messages. From Timo Juhani
+	Lindfors
+	[caf183fd9d94] <1.7>
+
+2010-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog, Makefile.in:
+	Generate the ChangeLog as part of "make dist" instead of having it
+	in the repo.
+	[836c31615859] <1.7>
+
+2010-01-18  convert-repo  <convert-repo>
+
+	* .hgtags:
+	update tags
+	[9b7aa44ae436]
+
+2010-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Generate correct ChangeLog for 1.7 branch.
+	[586dd90b8878] <1.7>
+
+	* Makefile.binary.in, Makefile.in, aix.c, alias.c, alloc.c, alloc.h,
+	auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
+	auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
+	auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c,
+	auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c,
+	closefrom.c, compat.h, configure.in, defaults.c, defaults.h,
+	emul/charclass.h, emul/timespec.h, env.c, error.c, error.h,
+	fileops.c, find_path.c, getcwd.c, getprogname.c, getspwuid.c,
+	gettime.c, goodpath.c, gram.c, gram.y, ins_2001.h, ins_classic.h,
+	ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
+	isblank.c, lbuf.c, lbuf.h, ldap.c, list.c, list.h, logging.c,
+	logging.h, match.c, memrchr.c, missing.h, mkinstalldirs, mkstemp.c,
+	mon_systrace.c, nanosleep.c, parse.c, parse.h, pathnames.h.in,
+	pty.c, pwutil.c, redblack.c, redblack.h, sample.pam, sample.sudoers,
+	sample.syslog.conf, script.c, selinux.c, sesh.c, set_perms.c,
+	sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c,
+	strlcpy.c, strsignal.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
+	sudo_edit.c, sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudo_usage.h.in,
+	sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod,
+	sudoers2ldif, sudoreplay.c, sudoreplay.man.in, sudoreplay.pod,
+	term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l,
+	utimes.c, visudo.c, visudo.man.in, visudo.pod, zero_bytes.c:
+	Remove CVS $Sudo$ tags.
+	[de683a8b31f5]
+
+2009-12-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_usage.h.in:
+	make this match sudoers SYNOPSIS
+	[c74ba66944c2]
+
+	* lbuf.c, parse.c:
+	Print a newline between Runas and Command-specific defaults in sudo
+	-l.
+	[b5bdfcc9ce4b]
+
+	* term.c:
+	Use SET and CLR macros in term_raw
+	[50ca42609d6c]
+
+	* sudoreplay.c:
+	Set stdin to non-blocking mode early instead of in check_input. Use
+	term_raw instead of term_cbreak since the data we get has already
+	been expanded via OPOST.
+	[51c47e803d62]
+
+2009-12-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c, term.c:
+	Enable/disable all postprocessing instead of just nl->crnl
+	processing since things like tab expansion matter too. However, if
+	stdout is a tty leave postprocessing on in the pty since we run into
+	problems doing it only on the real stdout with .e.g nvi.
+	[62666e309673]
+
+2009-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	If tty_tickets is enabled and there is no tty, prompt for a
+	password. Do not lecture user for "sudo -k command" if user has a
+	timestamp.
+	[5880200c5f6b]
+
+	* INSTALL:
+	Document missing options: --with-efence and --with-bsm-audit
+	[d83afcdf9ff3]
+
+	* sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.ldap.cat,
+	sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod,
+	sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod, visudo.cat,
+	visudo.man.in, visudo.pod:
+	username -> user name groupname -> group name hostname -> host name
+	[10c85646f45d]
+
+	* INSTALL, README.LDAP, sudoers.pod:
+	filename -> file name like the rest of the docs
+	[1ef8ab5a9018]
+
+2009-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Fix printing of entries with multiple host entries on a single line.
+	[226ceaf91d8d]
+
+2009-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Mention that targetpw affects the timestamp file name.
+	[a26e22e4f72e]
+
+	* def_data.c, def_data.h, def_data.in, defaults.c, script.c,
+	sudoers.pod:
+	Add compress_transcript option.
+	[6e94f8cb9dfb]
+
+2009-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	bump to 1.7.3b2
+	[906d7e347d15]
+
+	* pwutil.c, set_perms.c, sudo.c, sudo_nss.c:
+	Better split of membership vs. traditional group check in
+	user_in_group(). Allow user_ngroups to be < 0 if getgroups() fails.
+	[6ebc55d4716b]
+
+2009-12-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c:
+	Fix pasto and add default return value.
+	[7973b5e4599c]
+
+	* check.c, match.c, pwutil.c, sudo.h:
+	refactor group member checking into user_in_group()
+	[48ca8c2eddf8]
+
+	* check.c, config.h.in, configure, configure.in, match.c, sudo.c,
+	sudo.h:
+	Add support for mbr_check_membership() as present in darwin.
+	[5501aed02b9f]
+
+2009-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Rename label to be accurate
+	[3af17dd960f7]
+
+	* Makefile.in, boottime.c, check.c, config.h.in, configure,
+	configure.in, sudo.h:
+	Treat timestamp files from before we booted as old. Idea from and
+	Apple patch.
+	[5c96e484c05a]
+
+2009-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, sudo.pod, sudo_usage.h.in:
+	Allow the -u flag to be used in conjunction with the -v flag as per
+	older versions of sudo.
+	[591e9fc13c1a]
+
+	* logging.c:
+	fix typo in last commit
+	[4fd0c692dcf0]
+
+2009-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	Convert fmt_first and fmt_confd into macros.
+	[32e870158b29]
+
+	* sudoers.pod:
+	timeouts can be floats now
+	[89de639a9679]
+
+	* WHATSNEW, def_data.c, def_data.h, def_data.in, defaults.c,
+	defaults.h, mkdefaults:
+	Add support for floating point timeout values (e.g. 2.5 minutes).
+	[210ffa291733]
+
+2009-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	The -L flag will be removed in sudo 1.7.4
+	[ffd026084333]
+
+2009-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	Fix a bug due to order of operators.
+	[938d34464283]
+
+2009-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	cmnd_matches() already deals with negation so _cmndlist_matches()
+	does not need to do so itself. Fixes a bug with negated entries in a
+	Cmnd_List.
+	[71c845f6ce73]
+
+2009-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Don't exit() from open_sudoers, just return NULL for all errors.
+	[8cfa832f972a]
+
+	* script.c:
+	Can't rely on the shell sending us SIGCONT when transitioning from
+	backgroup to foreground process.
+	[3c6c5b6cb4b3]
+
+	* toke.c, toke.l:
+	Add missing extern def for parse_error
+	[45b7b59d03b7]
+
+2009-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Avoid a parse error when #includedir doesn't find any files. Closes
+	bug #375
+	[1ce1b850e9e6]
+
+	* Makefile.in:
+	Include sudo.man.pl and sudoers.man.pl in the distribution tarball.
+	[6a22e32da108]
+
+2009-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Start command out in foreground mode if stdout is a tty. Works
+	around issues with some curses-based programs that don't handle
+	tcsetattr getting interrupted by a signal. Still allows us to avoid
+	hogging the tty if the command is part of a pipeline.
+	[1c32f2b94769]
+
+	* script.c, sudo.c, sudo.h, sudoreplay.c, term.c, tgetpass.c:
+	Use a socketpair to pass signals from parent to child. Child will
+	now pass command status change info back via the socketpair. This
+	allows the parent to distinguish between signals it has been sent
+	directly and signals the command has received. It also means the
+	parent can once again print the signal notifications to the tty so
+	all writes to the pty master occur in the parent. The command is now
+	always started in background mode with tty signals handled by the
+	parent.
+	[c6790b82986d]
+
+2009-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix a few typos in the descriptions; from Jeff Makey Only do the
+	check for krb5_get_init_creds_opt_free() taking two arguments if we
+	find krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
+	positive when using our own krb5_get_init_creds_opt_free which takes
+	only a single argument.
+	[845a9ff6f93d]
+
+2009-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Remove a spurious comma in the kerb5 bits.
+	[3433eab083db]
+
+	* auth/kerb5.c:
+	Call krb5_get_init_creds_opt_init() in our emulated
+	krb5_get_init_creds_opt_alloc() for MIT kerberos.
+	[7ffb40bf43e9]
+
+2009-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	Add HAVE_ZLIB
+	[9297bde61ecc]
+
+	* script.c:
+	Need to ignore SIGTT{IN,OU} in child when running the command in the
+	background. Also some minor cleanup.
+	[dc208d982319]
+
+2009-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Instead of calling sigsuspend when waiting for SIGUSR[12] from
+	parent, install the signal handlers w/o SA_RESTART and let them
+	interrupt waitpid().
+	[759c7d18203b]
+
+	* script.c:
+	Pass along SIGHUP and SIGTERM from parent to child.
+	[035b0e254568]
+
+	* script.c:
+	Close unused bits of script_fds in processes that don't need them.
+	Restore default SIGCONT handler in child.
+	[e037378ab0c1]
+
+	* script.c:
+	Update foreground/background status in SIGCONT handler in parent
+	process.
+	[3f7f91333264]
+
+2009-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Defer setting terminal into raw mode until just before we fork() and
+	only do it if sudo is the foreground process. If we get SIGTT{IN,OU}
+	and sudo is already in the foreground be sure to set raw mode before
+	continuing the child.
+	[1102ef40832c]
+
+2009-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Fix handling of SIGTTOU/SIGTTIN in program being run. We now only
+	give the command the controlling tty if the main sudo process is the
+	foreground process.
+	[cf3a91cb5682]
+
+	* script.c:
+	Don't bother with sudo_waitpid() here for now.
+	[9086de480c2d]
+
+	* script.c:
+	fix non-zlib case
+	[a258bff0f9a6]
+
+2009-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Remove non-wroking code that crept into rev 1.55
+	[2802dd55cff5]
+
+2009-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.in, script.c, sudoreplay.c:
+	First pass at zlib support for transcript data files
+	[5d10260807da]
+
+	* Makefile.in:
+	remove vestiges of ZLDFLAGS
+	[1fa0caf1c0fb]
+
+	* script.c:
+	Add missing variable declaration for when TIOCSCTTY is not defined.
+	Need to include sys/termio.h for TIOCSCTTY on some systems.
+	[ee7f41ac2709]
+
+	* script.c:
+	when resuming command, send SIGCONT to its pgrp not just pid
+	[5cd63c1d565b]
+
+	* selinux.c:
+	remove unused variable
+	[df67df4be228]
+
+	* script.c:
+	include selinux.h for is_selinux_enabled() proto
+	[85ebaa880cc1]
+
+	* script.c:
+	Don't use log_error() in the child process.
+	[def65fe2a433]
+
+	* script.c:
+	Do I/O in parent instead of child since the parent can have both
+	/dev/tty as well as the pty fds open. The child just sets things up
+	and waits for its grandchild and writes the signal description to
+	the pty master if the command was killed by a signal.
+	[95e473208982]
+
+2009-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* missing.h, sudo.h:
+	Move two struct forward declarations from sudo.h to missing.h
+	[90ad28294a8c]
+
+	* script.c:
+	Make comment at the top of script_exec() match reality.
+	[c5042d27dbe0]
+
+	* sudo.c:
+	if neither stdin nor stdout is a tty, check stderr
+	[c532ff20c8d8]
+
+	* Makefile.in:
+	Add back dependecy of gram.h on gram.y
+	[c58382b7fcca]
+
+	* script.c:
+	Make transcript mode work as long as we can figure out our tty, even
+	if it is not stdin. We'd like to use /dev/tty but that won't be
+	valid after the setsid().
+	[7b8bba8d99e7]
+
+2009-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, pty.c:
+	Add support for IRIX-style dynamic ptys
+	[bedc9bac44c1]
+
+	* Makefile.in, alloc.h, getline.c, sudo.h, sudoreplay.c:
+	Move alloc.c protos into alloc.h
+	[b6a90649617d]
+
+	* missing.h:
+	Move prototypes for missing libc functions to missing.h
+	[dda9ae1ccaf8]
+
+	* Makefile.in, sudo.h, sudoreplay.c:
+	Move prototypes for missing libc functions to missing.h
+	[7483166b577b]
+
+2009-10-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in:
+	Disable transcript support if no tcsetpgrp until we support older
+	BSD-style job control.
+	[27ac1d8163df]
+
+	* configure, configure.in, pty.c, script.c:
+	Break out pty code into pty.c
+	[e85509b25d41]
+
+	* compat.h, config.h.in, configure, configure.in:
+	add killpg macro if no killpg function
+	[3a125f4a51f0]
+
+	* config.h.in, configure, configure.in, script.c:
+	Push ptem and ldterm for STERAMS-based systems when allocating a
+	pty.
+	[36bb39b30ff2]
+
+2009-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Sprinkle some more O_NOCTTY and call grantpt() before unlockpt()
+	[d94bd5c9bf4e]
+
+	* script.c:
+	Call tcgetpgrp() in the parent, not the child and have the child
+	spin until it is granted. Fixes a race on darwin.
+	[6e8d435339ce]
+
+	* script.c:
+	Only use TIOCNOTTY in the non-setsid case. If no TIOCSCTTY, just
+	reopen slave.
+	[0bdc63c019ca]
+
+2009-10-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	In script mode, if the command is killed by a signal, print the
+	signal description as well as a core dump notification like the
+	shell does.
+	[9df61738df07]
+
+	* Makefile.in, config.h.in, configure, configure.in, strsignal.c,
+	sudo.h:
+	Add check for strsignal() and a simple implementation if it is not
+	there but sys_siglist is
+	[61421a188ef4]
+
+	* script.c:
+	Add missing WUNTRACED and store the signal that stopped the
+	grandchild in suspended, not signo.
+	[df65042b200e]
+
+	* script.c:
+	g/c unused code
+	[40d8cb5c9203]
+
+	* script.c:
+	Associate the grandchild's pgrp with the tty instead of the child's
+	and just get suspend notifications via SIGCHLD instead of directly.
+	This fixes a hang with programs that try to set terminal attributes
+	and is more consistent with how the shell handles things.
+	[6865abff7e94]
+
+2009-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Move setpgid() of child into the parent side of the fork() where it
+	belongs.
+	[3defa782777c]
+
+2009-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	fix typo
+	[b6a612b3622c]
+
+	* script.c:
+	Run command in its own pgrp (like the shell does) for easier
+	signalling. No need to relay SIGINT or SIGQUIT to parent, just send
+	to grandchild. Don't want grandchild stopped events in the child
+	(only termination). Flush output after suspending grandchild before
+	signalling parent.
+	[db556bf2176f]
+
+	* script.c:
+	Back out revision 1.34; the problem lies elsewhere.
+	[85f590a03275]
+
+	* script.c:
+	Don't set stdout to blocking mode when flushing remaining output. It
+	can cause us to hang when trying to exit. Need to investigate why.
+	[6f803a3e33ca]
+
+	* script.c:
+	Handle SIGTTOU and remove some debugging.
+	[52d17279053e]
+
+	* term.c:
+	Back out revision 1.10 as the signal that interrupts us may be
+	SIGTTOU or SIGTTIN which the caller must handle.
+	[7e2fa9107975]
+
+	* script.c:
+	Apparently we need to send SIGSTOP to the command as well as ourself
+	when we get SIGTSTP, the kernel doesn't automatically stop the
+	process for us.
+	[1a936e9309c4]
+
+	* script.c:
+	Use an extra process to act as the glue bewteen the sessions
+	associated with the user's controlling tty (what the shell uses) and
+	the tty that sudo is using to do its logging. Basically, this means
+	that if we get, e.g. SIGTSTP from the process sudo is running, we
+	relay the signal to the parent so it's shell can do the job control.
+	[6dd296988060]
+
+	* term.c:
+	Handle getting/setting terminal attributes when the fd is in non-
+	blocking mode.
+	[ae5ae535ea7b]
+
+2009-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
+	Add support for pausing and changing the speed in interactive mode.
+	[72a2063780a7]
+
+	* script.c:
+	Already define O_NOCTTY in compat.h, don't need it here
+	[b5d80ed3e5ce]
+
+2009-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	Add missing protos
+	[c4cb4e7f4d8a]
+
+2009-09-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Always update the stashed mtime of the temp file instead of using
+	what we have for the original because the time resolution of the
+	filesystem the temporary is on may not match that of the filesystem
+	that holds the original. Should fix bz #371 found by Philippe Levan.
+	[c86ca4bec60c]
+
+	* sudoreplay.c:
+	Use cbreak mode instead of raw mode and add signal handlers to
+	restore the tty on interrupt.
+	[84dd283da41c]
+
+	* script.c, sudo.h, term.c:
+	Retain NL to NLCR conversion on the real tty and skip it on the pty
+	we allocate. That way, if stdout is not a pty there are no extra
+	carriage returns.
+	[32e4f570414e]
+
+	* script.c:
+	Fix log_output(); just pass in a string and a length.
+	[ca980cc0a3fb]
+
+2009-09-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	do not use errno when complaining out lack of a tty
+	[8f9b8c55ab8e]
+
+2009-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, sudoreplay.c, term.c:
+	Instead of messing with line endings, just set terminal to raw mode
+	in sudoreplay.
+	[90943fa87acb]
+
+	* term.c:
+	When copying the terminal attributes to the pty, be sure not to set
+	ONLCR. This prevents extra carriage returns from ending up in the
+	script output file.
+	[e6b5475ac2aa]
+
+	* script.c:
+	Convert a do {} while into a while
+	[e461310d2c77]
+
+	* Makefile.in:
+	Use if then instead of test && when installing binaries that may not
+	exist.
+	[ad4f9490d971]
+
+	* script.c:
+	Add O_NOCTTY when opening a tty device. Explicitly disconnect from
+	old tty before associatng with new one.
+	[0e0ca634b80c]
+
+	* script.c, selinux.c, sudo.c, sudo.h:
+	First cut at refactoring some of the selinux code so it can be used
+	in conjunction with sudo's transcript support.
+	[779b0d8f9d29]
+
+2009-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure, configure.in:
+	Fix default case of transcript_enabled being unset.
+	[f8aa96186e6b]
+
+	* script.c, sudoreplay.c:
+	Use _PATH_SUDO_TRANSCRIPT instead of _PATH_SUDO_SESSDIR
+	[2844a7a851fa]
+
+	* INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.c:
+	Hook up --disable-transcript and --enable-transcript=DIR
+	[b3fa7e6b2480]
+
+2009-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure, configure.in, pathnames.h.in:
+	_PATH_SUDO_SESSDIR -> _PATH_SUDO_TRANSCRIPT Add --enable-
+	transcript=DIR option to specify the directory
+	[b0bb76d43cda]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
+	regen
+	[c7a8a0a9027c]
+
+	* configure, configure.in, sudoers.man.pl, sudoers.pod:
+	Substitute in default value for secure_path
+	[c8f9ac6dbf93]
+
+	* sudo.pod:
+	Mention that the password must be followed by a newline with the -S
+	option.
+	[2fc589a3ee7e]
+
+2009-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Go back to dropping out of the select() loop when the process dies;
+	Linux ptys apparently don't behave the same as BSD in regards to
+	select(). No need to flush remaining output to the transcript, only
+	to stdout. Add back code to check the master pty for additional data
+	when we exit the main select loop.
+	[abed9a9cbc6b]
+
+2009-09-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Add getline.o to COMMON_OBJS
+	[04ef7643cbc2]
+
+	* Makefile.in:
+	sudoreplay depends on libsudo.a
+	[142bd0472631]
+
+	* Makefile.in:
+	More pwutil.o into COMMON_OBJS
+	[4a016b933629]
+
+	* pwutil.c, testsudoers.c, tsgetgrpw.c:
+	Remove my_* redirection in pwutil.c for testsudoers and just use the
+	normal libc get{pw,gr}* names.
+	[9b76d637d86b]
+
+	* sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
+	More time and date examples
+	[c6ee0175ec56]
+
+	* Makefile.in, configure, configure.in, nanosleep.c, sudoreplay.c:
+	Move nanosleep() emulation into its own file Check librt.a for
+	nanosleep if we don't find it in libc
+	[4da0cc26aad7]
+
+	* Makefile.in, configure, configure.in:
+	Build libsudo with the common bits and link things against that.
+	[2b53bc0b081a]
+
+	* script.c:
+	Fix final flush.
+	[6da287d833da]
+
+	* script.c:
+	Keep reading from the pty master -> log file until read returns <=
+	0. Do our best to write everything to stdout when flushing any
+	remaining bits.
+	[2a45d4ae280c]
+
+	* sudoreplay.c:
+	Use unbuffered I/O when writing to stdout and make sure we write the
+	entire buffer.
+	[f39ef9844a47]
+
+2009-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	Only use max_wait if it is non-zero
+	[f6c10604d2e8]
+
+	* getdate.c, getdate.y, getline.c:
+	Need compat.h here
+	[5d6722e225a0]
+
+	* sudoreplay.c:
+	Fix nanosleep emulation
+	[34e5e5d72a76]
+
+	* script.c:
+	Fix comment after #endif
+	[bd1347718b25]
+
+	* sudoreplay.c:
+	Add protos for missing libc bits
+	[644f496427a2]
+
+	* configure, configure.in:
+	add missing line continuation char
+	[db13c0d402cd]
+
+	* config.h.in, configure, configure.in, getline.c:
+	Implement getline() in terms of fgetln() if we have it.
+	[3ab786eaadc5]
+
+	* sudoreplay.c:
+	Print year when formatting log line
+	[90be669e3443]
+
+	* sudoreplay.pod:
+	Document cwd, attempt to document time/date formats.
+	[6290fb9b65c6]
+
+	* sudoreplay.c:
+	Fix getline return value check.
+	[d696d6657261]
+
+	* Makefile.in, config.h.in, configure, configure.in, getline.c,
+	sudoreplay.c:
+	Use getline() if the system has it, else use provide our own for
+	sudoreplay.
+	[afca1d6fbe5e]
+
+	* script.c:
+	Refactor code to update output and timing files.
+	[361491332b1a]
+
+2009-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	Make sudo_getln() behave more like glibc getline.
+	[40c9f2ea29e6]
+
+	* script.c:
+	When flushing remaining output, also update timing file.
+	[5a9a5a627549]
+
+	* sudoreplay.c:
+	Use get_timestr() and make the -l output look like the regular sudo
+	log.
+	[452ba9d436c9]
+
+	* logging.c, sudo.h, timestr.c:
+	Make get_timestr() take a time_t so we can use it properly in
+	sudoreplay.
+	[82e67cc53c9c]
+
+	* script.c:
+	Create session dir earlier now that we update the seq number early.
+	[797fe8d6dc61]
+
+2009-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	Use fromdate and todate as the keywords instead of from and to; the
+	short forms will still be accepted.
+	[d14d9b116df4]
+
+	* sudoreplay.c:
+	Fix reading long liensin sudo_getln()
+	[58dadd74118c]
+
+	* script.c, sudoreplay.c:
+	Log the cwd in the script log file. Add sudo_getln() to read
+	arbitrarily long lines.
+	[faceb802ab8f]
+
+	* Makefile.in, logging.c, sudo.h, timestr.c:
+	Move get_timestr() into its own source file so sudoreplay can use
+	it.
+	[99b054bfa20a]
+
+2009-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	Add to and from perdicates (date ranges); needs documentation
+	[1d629174dcf4]
+
+2009-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, getdate.c, getdate.y:
+	Fix warning and add generated getdate.c
+	[b877a86b5a03]
+
+	* Makefile.in, getdate.y:
+	Add getdate.y to be used for sudoreplay date parsing.
+	[b8e26fbb7a40]
+
+2009-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	Check more than just the first character of a predicate
+	[4fe53728adb1]
+
+	* sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
+	Add examples, sort predicates
+	[70f8075cbccc]
+
+	* Makefile.in, sudoreplay.c, sudoreplay.cat, sudoreplay.man.in,
+	sudoreplay.pod:
+	Implement search expressions in sudoreplay similar in concept to
+	what find or tcpdump uses. TODO: date ranges
+	[f7ce4fb4cf3a]
+
+2009-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Remove vhangup as it was hanging up the wrong tty. Should really
+	vhangup in the child after it as set its tty.
+	[2eed9df73010]
+
+	* sudoers.pod:
+	Fix cut at documenting transcript support.
+	[e6c533a5568a]
+
+	* logging.c:
+	ID= -> TSID= for transcript ID
+	[1bf755a35333]
+
+2009-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Move fast_glob description to where it belongs in sorted order
+	[5901cfb0d25f]
+
+	* def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
+	parse.c, parse.h, sudo.c:
+	Rename script -> transcript
+	[e06cf823122c]
+
+2009-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	Add timeradd and timersub for those without them
+	[929f8aa06c2b]
+
+	* script.c:
+	Sanity check sessid before using it.
+	[aa8ca5211d43]
+
+	* sudo.c:
+	Only set the session id if we are running a command or editing a
+	file.
+	[7205d717c098]
+
+	* script.c:
+	Actually. qsort is fine since most versions fal back to a cheaper
+	sort when the number of elements to sort is small (like in our
+	case).
+	[d11c7cd352fe]
+
+	* config.h.in, configure, configure.in, script.c:
+	Check for dup2 and use dup instead if we don't have it.
+	[98bd89830f8a]
+
+	* script.c, sudo.c, sudo.h:
+	Move the code to dup2 the script fds to low numbered descriptors
+	into script_duplow() and fix the fd sorting.
+	[9453fdc5fba6]
+
+	* script.c, sudo.c, sudo.h:
+	Move script_setup() back to immediately before we drop privs and
+	call the new script_nextid() in its place, which will set
+	sudo_user.sessid for the logging functions.
+	[8434d0c8ff08]
+
+2009-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Install sudoreplay
+	[6acf2cdb4d3f]
+
+	* sudoreplay.c:
+	remove unused variable
+	[2316360bb992]
+
+2009-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c, script.c, sudo.c, sudo.h:
+	Log the session ID, if there is one. Currently logs ID=XXXXXX,
+	perhaps should be SESSIONID or SESSID.
+	[53976905b0a6]
+
+	* Makefile.in, configure, configure.in, sudoreplay.cat,
+	sudoreplay.man.in, sudoreplay.pod:
+	Add sudoreplay docs
+	[da4f14f0e64c]
+
+	* sudoreplay.c:
+	add -V (version) flag
+	[b5e743639ee3]
+
+	* sudoreplay.c:
+	Hook up max_wait.
+	[2ec5697a92ba]
+
+	* script.c, sudoreplay.c:
+	Use base36 number for the ID and store script files with paths like
+	/var/log/sudo-session/00/00/00{,.tim,.scr}. This gives us 36^6
+	(2,176,782,336) unique IDs.
+	[6aab019d07aa]
+
+2009-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure.in:
+	Add check for regcomp
+	[44c3ebd7ff34]
+
+	* sudoreplay.c:
+	Add support for selecting by pattern and tty when listing.
+	[66189f840c52]
+
+2009-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoreplay.c:
+	The beginnings of a list mode.
+	[8d0150b4a52c]
+
+2009-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	fix pasto
+	[616b4640b8a8]
+
+	* Makefile.in, config.h.in, configure.in:
+	Add scaffolding for building sudoreplay
+	[a32958505dbe]
+
+	* sudoreplay.c:
+	include error.h first arg to nanotime is const
+	[fe5a7bb31bc5]
+
+	* sudoreplay.c:
+	Initial cut at sudoreplay; replay a sudo session.
+	[f149fba372bd]
+
+2009-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* script.c:
+	Fix wait() usage and use correct wait status.
+	[f4745ed7ad05]
+
+	* sudo.c, sudo.h, tgetpass.c:
+	Add protos for term_* to sudo.h
+	[14fe1abd7e7b]
+
+	* script.c:
+	Fix detection of the child process exiting. Since the child is in
+	its own session we should only ever get SIGCHLD for that process but
+	better safe than sorry.
+	[7edfdadd8505]
+
+	* config.h.in:
+	Add UNIX98 pty support.
+	[82f4b53a0e8f]
+
+	* configure, configure.in, script.c:
+	Add UNIX98 pty support.
+	[795b8bb0a3a1]
+
+2009-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* term.c:
+	For raw mode, don't bother clearing BRKINT or PARMRK and clear IUCLC
+	if it is defined.
+	[40f8b83baf69]
+
+	* auth/pam.c:
+	Set PAM_RUSER and PAM_RHOST early so they can be used during
+	authentication. Based on a patch from Jamie Beverly.
+	[3d567b453a6a]
+
+	* match.c:
+	Close dir before returning if strlcpy() reports overflow. From
+	Martynas Venckus.
+	[6a82f96473e5]
+
+	* config.h.in, configure, configure.in, script.c:
+	On Linux, the openpty proto libes in pty.h
+	[98643a018d1c]
+
+	* script.c:
+	Call vhangup on exit if the system has it Use setpgrp() if no
+	setsid()
+	[3a9e13149829]
+
+2009-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in:
+	Add checks for revoke and vhangup if we don't have openpty
+	[fcb04572e994]
+
+	* script.c:
+	Session logging guts that got forgotten in the previous commit.
+	[c2af08a63ea9]
+
+	* Makefile.in, aclocal.m4, compat.h, config.h.in, configure,
+	configure.in, def_data.c, def_data.h, def_data.in, gram.c, gram.h,
+	gram.y, parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, term.c,
+	tgetpass.c:
+	First cut at session logging for sudo. Still need to write get_pty()
+	for Unix 98 and old-style BSD ptys. Also needs documentation and
+	general cleanup.
+	[77e3f5e25738]
+
+2009-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, sudo_edit.c:
+	Fix a bug introduced with def_closefrom. The value of def_closefrom
+	already includes the +1.
+	[7291c136300d]
+
+2009-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Generate sudo distributions with pax in ustar mode. No longer need
+	to use a temp file or have the source dir name match the version.
+	[9778177a8272]
+
+2009-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Fix expansion of %h in #include names. Fixes bugzilla 363
+	[6e346879ba24]
+
+2009-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkdefaults:
+	If no arg assume def_data.in
+	[c1dd28c0e675]
+
+	* README, WHATSNEW:
+	Update for 1.7.2
+	[f5ad45f69f05] [SUDO_1_7_2]
+
+	* ChangeLog:
+	sync
+	[6283549396ff]
+
+2009-06-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	Add missing single quotes around a colon in Runas_Spec definition.
+	From Elias Benali.
+	[ccc6ee4fca83]
+
+2009-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.man.in, sudoers.man.in:
+	regen
+	[546e75304ebf]
+
+	* redblack.c:
+	In rbrepair, re-color the root or the first non-block node we find
+	to be black. Re-coloring the root is probably not needed but won't
+	hurt.
+	[34d01ebe241b]
+
+	* sudo.cat, sudoers.cat:
+	regen
+	[bebf5a39f54f]
+
+2009-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* redblack.c:
+	When repairing the tree, don't touch the root node.
+	[9841f0d5d789]
+
+2009-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Protect call to setegid in runas_setup with #ifdef HAVE_SETEUID.
+	Reported by Josef Schmid.
+	[ed044b1eb879]
+
+2009-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Document that we accept env_pam-style environment files
+	[e3b545456352]
+
+	* env.c:
+	Adapt to accept pam_env-style /etc/environment which allows shell-
+	style lines such as: export EDITOR="/usr/bin/vi"
+	[752eb75bf007]
+
+	* sudoers.pod:
+	Make it clear that env_delete only works when !env_reset. From Loïc
+	Minier
+	[3bd3f8e351ba]
+
+2009-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, sudoers.pod:
+	Add non-unix group bits, adapted from Quest
+	[8ce427de8dea]
+
+	* Makefile.in:
+	build the .cat page in the current working dir, not the src dir
+	[00e87a307674]
+
+	* env.c:
+	Return EINVAL in setenv() if var is NULL or the empty string to
+	match glibc behavior.
+	[23fd7c247142]
+
+2009-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Use AS_HELP_STRING for AC_ARG_WITH and AC_ARG_ENABLE
+	[fedd4a3e2a85]
+
+2009-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
+	sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
+	regen
+	[7b9f461a40b3]
+
+2009-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Document --with-libvas and --with-libvas-rpath
+	[a071e6d96c89]
+
+2009-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c, sudoers.ldap.pod:
+	For netscape-derived LDAP SDKs the cert and key paths may be a
+	directory or a file. However, version 5.0 of the SDK only seems to
+	support using a directory. If ldapssl_clientauth_init fails and the
+	cert or key paths look like they could be files, strip off the last
+	path element and try again.
+	[ac4e49d83043]
+
+	* Makefile.in:
+	Add non-Unix group .o to COMMON_OBJS and substitute in path to flex.
+	[4547cc1a335f]
+
+2009-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in, match.c, sudo.c, vasgroups.c:
+	Update non-Unix group support from Quest, as reworked by me.
+	[1abafce29dc6]
+
+	* toke.c:
+	regen
+	[01bfca9148b7]
+
+	* toke.l:
+	Add support for escaped hex chars in names, e.g. \x20 for space.
+	[3c7be8e58a39]
+
+2009-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE, Makefile.in, aclocal.m4, alias.c, auth/aix_auth.c,
+	auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c, env.c,
+	fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c, logging.c,
+	logging.h, match.c, parse.c, parse.h, pathnames.h.in, pwutil.c,
+	set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c, sudo_nss.h,
+	sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod, testsudoers.c,
+	tgetpass.c, toke.l, visudo.c:
+	Update copyright years.
+	[e615f676c764]
+
+2009-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c, lbuf.c:
+	Minor fixes for Minix-3
+	[898c510d23f9]
+
+2009-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Handle getgroups() returning 0. Also add missing check for
+	HAVE_GETGROUPS.
+	[d73b958f9ffd]
+
+2009-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, config.h.in, configure, configure.in, sudo.c,
+	version.h, visudo.c:
+	Replace version.h with PACKAGE_VERSION set via AC_INIT in configure.
+	[5050579a264d]
+
+2009-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Remove group setting code in setusercontext case, we will do it
+	ourselves later on in runas_setup. Set the gid after
+	initgroups/setgroups is called, since on Mac OS X it seems to change
+	the egid.
+	[09dc21d8b42d]
+
+2009-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
+	vasgroups.c:
+	Initial bits of non-unix group support using Quest Authentication
+	Services
+	[1eecab0ff27e]
+
+	* toke.c, toke.l:
+	Accept %:foo as a non-Unix group
+	[4c4b5dd899a6]
+
+	* toke.c, toke.l:
+	Allow user/group to be double quoted in the case of non-Unix groups
+	which contain spaces.
+	[47a3d568b7e8]
+
+2009-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Don't allow the user to specify the default runas user if their
+	sudoers entry only allows them to run as a group.
+	[4d726177227c]
+
+2009-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Must call audit_success before we change uids.
+	[04a9e6ce6e55]
+
+	* logging.c, set_perms.c, sudo.h, testsudoers.c:
+	Add option for set_perm to not exit on failure and use this in the
+	logging routines.
+	[833dce7b7f42]
+
+	* parse.c:
+	In -l mode, if the user is only allowed to run as a group, display
+	the user's name, not root's before the allowed group.
+	[ef92ff99d265]
+
+	* sudo.c:
+	Fix -g mode, broken by rev 1.503 which had the side effect of
+	setting the runas user to root unilaterally.
+	[50a2f7df4385]
+
+2009-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* fileops.c:
+	When unlocking a file with fcntl, use F_SETLK, not F_SETLKW.
+	[30fbe832dcf3]
+
+	* pwutil.c:
+	Only cache by the method we fetched for pwd and grp lookups.
+	Previously we cached both by namd and id but this can cause problems
+	for entries that share the same id. Also add more info in the error
+	message in case the insert fails (which should now be impossible).
+	[ef95a4f0bab5]
+
+2009-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Add a clarification from Nick Sieger
+	[1eadad329561]
+
+2009-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Inline the setting of the environment string.
+	[9515d11c6295]
+
+2009-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	setenv(3) in Linux treats a NUL value as the empty string setenv(3)
+	in BSD doesn't return an error if the name has '=' in it, it just
+	treats the '=' as end of string.
+	[941260bf94d2]
+
+2009-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Not all systems have d_namlen
+	[e377b18d8e2d]
+
+2009-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Fix up some pod2html issues.
+	[823a1f10ab60]
+
+2009-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	Check for NULL ifa_addr and ifa_netmask. Adapted from a diff from
+	Quest Software.
+	[73de36653131]
+
+	* sudoers.pod:
+	Ignore files ending in '~' in sudo.d (emacs backup files)
+	[7871fad702db]
+
+	* toke.c, toke.l:
+	Ignore files ending in '~' in sudo.d (emacs backup files)
+	[53fded2a469f]
+
+2009-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l:
+	For #includedir, ignore any file containing a dot
+	[a7daa1bce6c2]
+
+	* Makefile.in, version.h:
+	Bump version
+	[ef60f14ffc44]
+
+	* gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
+	sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
+	visudo.c:
+	Implement #includedir directive. Files in an includedir are not
+	edited by visudo unless they contain a syntax error.
+	[3923d85a6c79]
+
+	* ChangeLog:
+	sync
+	[8741ed61a78b] [SUDO_1_7_1]
+
+	* WHATSNEW:
+	Forgot umask_override
+	[7c86a21a5504]
+
+	* ChangeLog, TODO:
+	sync
+	[57339ca6bccf]
+
+2009-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Rewind stream if we fdopen sudoers since it may not be at the
+	beginning. Set the keepopen flag on already-open files too so the
+	lexer doesn't close them out from under us.
+	[61292d819aff]
+
+	* visudo.c:
+	Print the proper file name when there is a parse error in an include
+	file.
+	[b0e85d4aedde]
+
+2009-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW:
+	Sync
+	[997e5d485ea3]
+
+2009-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix a warning when --without-ldap is specified.
+	[d91fd9481b30]
+
+2009-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* alias.c, parse.h, visudo.c:
+	Store aliases that we remove during check_aliases in a freelist and
+	free them at the end so we don't leak memory.
+	[805e2272f6a3]
+
+2009-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Check aliases in -c mode too.
+	[9199e188d9f2]
+
+	* alias.c, parse.h, visudo.c:
+	Make alias_remove return the alias struct instead of freeing it
+	directly. Fixes a use after free in alias_remove_recursive, the only
+	consumer.
+	[a04b61804800]
+
+	* alias.c, match.c, parse.c, parse.h, visudo.c:
+	Rename find_alias -> alias_find for consistency.
+	[48b0a82924f3]
+
+2009-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	When checking for unused aliases, recurse if the alias points to
+	another alias.
+	[2d4d1a7f3a41]
+
+2009-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Back out rev 1.105 for now. Real ldapux_client.conf support will be
+	done later after some refactoring.
+	[8ad72e69b277]
+
+2009-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Treat ldap_hostport the same as "host" for ldapux.
+	[3281dcc66da8]
+
+	* configure, configure.in:
+	Only check for ldap_sasl_interactive_bind_s if we can find sasl.h.
+	Fixes compilation with ldapux.
+	[ca1ed585ef0e]
+
+2009-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* fileops.c:
+	fix char subscript
+	[41e51f080d00]
+
+2009-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	remove errant carriage returns
+	[e9e258a31c7b]
+
+	* audit.c, env.c:
+	fix K&R compilation
+	[d182e8920f13]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
+	sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
+	regen
+	[791a5cbf04e5]
+
+2009-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	Add missing HAVE_BSM_AUDIT
+	[49ad1bb96f04]
+
+	* WHATSNEW:
+	Add 1.7.1 features
+	[f107f1604c61]
+
+	* INSTALL:
+	Mention --with-netsvc
+	[d1e90d147795]
+
+	* sudoers.ldap.pod:
+	Document netsvc.conf support
+	[e78f8abce6af]
+
+	* configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
+	sudo_nss.h:
+	Add support for AIX netsvc.conf (like nsswitch.conf).
+	[1df56a84dee5]
+
+2009-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, env.c:
+	Add --enable-env-debug flag to enable environment sanity checks.
+	[128cdd8832e7]
+
+	* sudoers.ldap.pod, sudoers.pod:
+	Work around some pod2html issue.
+	[e733b9609bd2]
+
+2009-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Only sync environ for putenv, setenv, and unsetenv. We need to make
+	sure that sudo_putenv and sudo_setenv only modify env.envp, not
+	environ.
+	[be3ac732243c]
+
+2009-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Really fix UNSETENV_VOID
+	[08ab7e882507]
+
+	* env.c:
+	Fix unsetenv when UNSETENV_VOID
+	[d3038b3f2f15]
+
+	* aclocal.m4, configure:
+	Fix SUDO_FUNC_PUTENV_CONST
+	[de35569c572b]
+
+	* ldap.c:
+	tivoli-based ldap does not have ldapssl_err2string
+	[c63fd90d5e99]
+
+	* configure:
+	regen
+	[f38f1ee828ad]
+
+2009-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, ldap.c:
+	Add support for Tivoli-based LDAP start TLS as seen in AIX.
+	Untested.
+	[8f8771829f85]
+
+	* env.c:
+	Add sanity checks for setenv/unsetenv
+	[adbd1d95856b]
+
+	* Makefile.in:
+	Include bsm_audit.h in the tarball
+	[4a4aa02b2c32]
+
+	* Makefile.in, version.h:
+	bump version for sudo 1.7.1
+	[362c71d21595]
+
+	* aclocal.m4, auth/aix_auth.c, config.h.in, configure, configure.in,
+	env.c, ldap.c, sudo.h:
+	Replace sudo_setenv/sudo_unsetenv with calls to setenv/unsetenv and
+	provide our own setenv/unsetenv/putenv that operates on own env
+	pointer. Make sync_env() inline in setenv/unsetenv/putenv functions.
+	[276edcd23032]
+
+2009-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Make "sudoedit -h" work as expected
+	[2bcbbb45d389]
+
+	* auth/pam.c:
+	Make sure def_prompt is always defined. This is a workaround for pam
+	configs that prompt for a password in the session but don't have an
+	auth line. A better fix is to expand the sudo prompt earlier and set
+	def_prompt to that when initializing.
+	[ee073c04aec3]
+
+	* sudo.pod:
+	Mention that the helper for -A may be graphical.
+	[b64a940c4082]
+
+	* TROUBLESHOOTING:
+	Document what happens if there is no tty.
+	[313d58a856a5]
+
+	* sudo.c:
+	cosmetic changes
+	[894f5e3b0c3e]
+
+	* term.c:
+	Fix term_restore
+	[6c6315ff14bc]
+
+	* sudo.c:
+	Fix "sudo -k" with no other args
+	[59e94dc419c6]
+
+2009-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, sudo.c, sudo.pod, sudo_usage.h.in:
+	Allow the -k flag to be specified in conjunction with a command or
+	another option that may require authentication.
+	[5960ff20355d]
+
+2009-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Remove unneeded AC_CANONICAL_TARGET; from Diego E. 'Flameeyes'
+	[e86ab69c4a57]
+
+	* Makefile.in:
+	Parallel make fix. From Diego E. 'Flameeyes'
+	[1289d7ee27db]
+
+2009-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
+	Implement umask_override
+	[8b87a3f7c5aa]
+
+	* toke.c:
+	regen
+	[79d7ca9ac873]
+
+	* sudoers.pod, toke.l, visudo.c:
+	Implement %h escape in sudoers include filenames.
+	[a7f288dd64f0]
+
+	* audit.c:
+	Need to include compat.h
+	[c0dc07ce2f70]
+
+	* Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h, sudo.c:
+	Make audit_success and audit_failure generic functions in
+	preparation for integrating linux audit support.
+	[7df020a8fd6f]
+
+	* term.c:
+	remove duplicate include
+	[1dfcd01a7e46]
+
+2009-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* bsm_audit.c:
+	Add missing include
+	[fb56e08c37ee]
+
+	* sudo.c:
+	May need to update the runas user after parsing command-based
+	defaults.
+	[246f130d7802]
+
+2009-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* glob.c:
+	Add missing pair of braces introduced with character class support.
+	[0e2afa2e03e9]
+
+2009-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
+	Rename pwstars to pwfeedback
+	[a9f85a57ebac]
+
+2009-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* bsm_audit.c, bsm_audit.h:
+	Add const to make MacOS happy.
+	[4274432d6627]
+
+	* Makefile.in, auth/sudo_auth.c, bsm_audit.c, bsm_audit.h, configure,
+	configure.in, sudo.c:
+	Add bsm audit support from Christian S.J. Peron
+	[bef61cd8693d]
+
+	* term.c:
+	This is new code, no DARPA notice.
+	[ec6ad09b9c23]
+
+2009-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.h, def_data.in, match.c, sudoers.pod:
+	Rename simple_glob -> fast_glob
+	[68d9ed803cc1]
+
+	* match.c:
+	g/c unused var
+	[693fa0464eb6]
+
+	* def_data.c, def_data.h, def_data.in, match.c, sudoers.pod:
+	Add simple_glob option to use fnmatch() instead of glob(). This is
+	useful when you need to specify patterns that reference network file
+	systems.
+	[77ba634f6949]
+
+	* tgetpass.c:
+	add term_* proto
+	[520f5149d073]
+
+	* sudoers.pod:
+	mention glob()
+	[ddaab8e03c52]
+
+2009-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Delete any pwstars we wrote after the user hits return. That way
+	there is no record on screen as to the user's password length.
+	[fae25cda762b]
+
+2009-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* term.c:
+	Move terminal setting bits from tgetpass.c to term.c
+	[03d43325ee99]
+
+	* Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
+	tgetpass.c:
+	Add pwstars sudoers option that causes sudo to print a star every
+	time the user presses a key.
+	[7aab417e184d]
+
+2009-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in.
+	[64f70e879816]
+
+2009-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	For ldap_search_ext_s() the sizelimit param should be 0, not -1, to
+	indicate no limit. From Mark Janssen.
+	[e2c5732d54f5]
+
+2009-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Comments that begin with #- should not be parsed as uids.
+	[a72a50f12f41]
+
+2009-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Do not try to set the close on exec flag if we didn't actually open
+	sudoers.
+	[ece3ca256904]
+
+2008-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog:
+	regen
+	[e11f0e4c1bdd] [SUDO_1_7_0]
+
+2008-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	sync
+	[5b8954462bb3]
+
+2008-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user enters ^C at the
+	password prompt.
+	[8563601cb3de]
+
+	* configure, configure.in:
+	Don't try to build sudo_noexec.so on HP-UX with the bundled compiler
+	as it cannot generate shared objects.
+	[6d4262ef9669]
+
+	* emul/charclass.h, glob.c, lbuf.c, tgetpass.c:
+	K&R compilation fixes
+	[77921678d17c]
+
+	* parse.c:
+	Use tq_foreach_fwd when checking pseudo-commands to make it clear
+	that we are not short-circuiting on last match. When pwcheck is
+	'all', initialize nopass to TRUE and override it with the first non-
+	TRUE entry.
+	[96b209f4778f]
+
+2008-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Do not short circuit pseudo commands when we get a match since,
+	depending on the settings, we may need to examine all commands for
+	tags.
+	[fdbaf89d6f35]
+
+2008-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[1ecce7c1b841]
+
+	* sudoers.pod:
+	hostnames may also contain wildcards
+	[82b76695601c]
+
+	* Makefile.in:
+	remove stamp-* files and linux core files in clean target
+	[22003f091467]
+
+2008-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/sudo_auth.h, config.h.in, configure, configure.in:
+	Use HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
+	[6905bede8410]
+
+2008-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	correctly enable SIA on Digital UNIX
+	[a51881d13995]
+
+	* TODO:
+	checkpoint
+	[af0fe8d94d42]
+
+	* ChangeLog:
+	sync
+	[831f623cf99c]
+
+2008-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, sudo.h, tgetpass.c:
+	Even if neither stdin nor stdout are ttys we may still have /dev/tty
+	available to us.
+	[20f306ba883b]
+
+2008-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[76d97c4c318f]
+
+	* sudoers.pod:
+	fix typos; Markus Lude
+	[bff8bc1e2066]
+
+	* ChangeLog:
+	sync
+	[f108552531cd]
+
+	* toke.c:
+	regen
+	[de828413c67e]
+
+	* toke.l:
+	Fix matching of a line that only consists of a comment char
+	[09c953d8d5ca]
+
+2008-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	MacOS pam will retry conversation function if it fails so just treat
+	^C as an empty password.
+	[d056058930bc]
+
+	* visudo.c:
+	When checking for alias use, also check defaults bindings.
+	[2647f82c7dbd]
+
+	* redblack.c:
+	unused var
+	[b7ff71c17c18]
+
+	* redblack.c:
+	Replace my rbdelete with Emin's version (which actually works ;-)
+	[21b133dd0c72]
+
+2008-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* testsudoers.c:
+	malloc debugging
+	[0fb446fa3279]
+
+	* visudo.c:
+	malloc options in devel mode for visudo too
+	[98d06c6afeef]
+
+2008-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	fix compilation on non-C99; from Theo
+	[7c304e16c536]
+
+	* visudo.c:
+	fix check_aliases
+	[83f30a3b1765]
+
+	* alias.c:
+	when destroying an alias, free the correct data pointer
+	[6e1a8bd86c01]
+
+	* auth/sudo_auth.h:
+	add proto for aixauth_cleanup; from Dale King
+	[eba94ffc8f63]
+
+2008-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	regen
+	[409fa57fff83]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	standardize on the term 'option' for command line options (not flag)
+	[228caefc2e36]
+
+2008-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Add note on configuring HP-UX pam
+	[f7674a581baf]
+
+2008-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, sudo.c:
+	Move tty checks into check_user() so we only do them if we actually
+	need a password.
+	[7d997d7106d6]
+
+	* sudo.c:
+	Don't error out if no tty or askpass unless we actually need to
+	authenticate.
+	[9f23b83ed66c]
+
+2008-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog:
+	regen
+	[23f9aef32da6]
+
+	* pathnames.h.in, sudo.c:
+	s/overriden/overridden/; from Tobias Stoeckmann
+	[9f7459a8fac5]
+
+2008-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW, visudo.c:
+	check sudoers owner and mode in strict mode
+	[a3468c5ac1c4]
+
+	* gram.c, toke.c:
+	regen
+	[7d6b515a5443]
+
+	* sudo.man.in, sudoers.man.in, visudo.man.in:
+	Update copyright years.
+	[52d340cb8cba]
+
+	* LICENSE, alias.c, alloc.c, auth/afs.c, auth/aix_auth.c,
+	auth/bsdauth.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
+	auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
+	closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
+	gettime.c, gram.y, ins_csops.h, insults.h, interfaces.c,
+	interfaces.h, lbuf.c, license.pod, list.c, logging.c, logging.h,
+	parse.c, parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c,
+	sudo.c, sudo.pod, sudo_edit.c, sudo_nss.h, sudoers.pod,
+	testsudoers.c, toke.l, tsgetgrpw.c, utimes.c, version.h, visudo.c,
+	visudo.pod, zero_bytes.c:
+	Update copyright years.
+	[b4e6bf2beafa]
+
+	* emul/charclass.h, fnmatch.c, glob.c:
+	add my copyright
+	[28681385014a]
+
+2008-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	The loop in fill_cmnd() was going one byte too far past the end,
+	resulting in a NUL being written immediately after the buffer end.
+	[a5a49d603cd7]
+
+	* UPGRADE, WHATSNEW:
+	add sections on tgetpass changes
+	[2e6929b6a102]
+
+	* tgetpass.c:
+	Treat EOF w/o newline as an error.
+	[aa02b1db9240]
+
+2008-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Fix "sudo -v" when NOPASSWD is set.
+	[f4914711ea80]
+
+	* auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c,
+	auth/sudo_auth.h:
+	No longer treat an empty password at the prompt as special. To quit
+	out of sudo you now need to hit ^C at the password prompt.
+	[980f760ad419]
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[6ca21a2cd869]
+
+	* def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
+	Sudo will now refuse to run if no tty is present unless the new
+	visiblepw sudoers flag is set.
+	[0cc56943252e]
+
+2008-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aix.c:
+	just use RLIM_INFINITY for RLIM_SAVED_MAX if RLIM_SAVED_MAX not
+	defined
+	[24fc6f712d5c]
+
+	* aix.c:
+	fix fallback value for RLIM_SAVED_MAX
+	[e09e04e1af89]
+
+	* auth/aix_auth.c, auth/sudo_auth.h:
+	Move clearing of AUTHSTATE into aixauth_cleanup.
+	[e14ae7bd259c]
+
+	* auth/aix_auth.c, env.c:
+	Unset AUTHSTATE after calling authenticate() as it may not be
+	correct for the user we are running the command as.
+	[d14f68f1b0ab]
+
+	* isblank.c:
+	Add isblank() function for systems without it. Needed for POSIX
+	character class matching in fnmatch.c and glob.c.
+	[16cba30b283f]
+
+2008-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	expound on sudo and cd
+	[8e0fa9033637]
+
+2008-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog:
+	regen
+	[40cf320a10fc]
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[7cac761ae2c6]
+
+	* sudoers.pod:
+	mention defauts parse order
+	[4e2ce86d1394]
+
+2008-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, aclocal.m4, compat.h, configure:
+	Add isblank() function for systems without it. Needed for POSIX
+	character class matching in fnmatch.c and glob.c.
+	[a1ab55da8424]
+
+	* Makefile.in:
+	add emul/charclass.h to HDRS
+	[7e8a019dcaa4]
+
+2008-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	checkpoint
+	[afeb9bc1baed]
+
+	* defaults.c, parse.c, testsudoers.c, visudo.c:
+	Move update_defaults into defaults.c and call it properly from
+	visudo and testsudoers.
+	[f4dbb369461f]
+
+	* defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c, tgetpass.c,
+	tsgetgrpw.c:
+	use zero_bytes() instead of memset() for consistency
+	[4cee0465f4a8]
+
+	* logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c, tgetpass.c,
+	visudo.c:
+	Zero out sigaction_t before use in case it has non-standard entries.
+	[120092225459]
+
+	* match.c:
+	quiet gcc
+	[098a1df49b23]
+
+	* match.c:
+	Short circuit glob() checks if basename(pattern) !=
+	basename(command). Refactor code that checks for a command in a
+	directory and use it in the glob case if the resolved pattern ends
+	in a '/'.
+	[3c46fd317acb]
+
+2008-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c:
+	Defer setting runas defaults until after runaspw/gr is setup.
+	[12e75ee49c0c]
+
+2008-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c, sudo.c, testsudoers.c:
+	Use MAXHOSTNAMELEN+1 when allocating host/domain name since some
+	systems do not include space for the NUL in the size. Also manually
+	NUL-terminate buffer from gethostname() since POSIX is wishy-washy
+	on this.
+	[7266ab3296a3]
+
+2008-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, sudoers.pod:
+	When setting the umask, use the union of the user's umask and the
+	default value set in sudoers so that we never lower the user's umask
+	when running a command.
+	[4e804b004e38]
+
+	* sudo.c:
+	Don't try to read from a zero-length sudoers file. Remove the bogus
+	Solaris work-around for EAGAIN. Since we now use fgetc() it should
+	not be a problem.
+	[bb8e5f68d944]
+
+2008-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	In update_defaults() check the return value of user*_matches against
+	ALLOW so we don't inadvertantly match on UNSPEC.
+	[4e422fa1527e]
+
+2008-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
+	sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
+	regen man pages; no more hyphenation
+	[15de4fe2fe01]
+
+	* sudo.c:
+	Don't error out on a zero-length sudoers file. With the advent of
+	#include the user could create a situation where sudo is unusable.
+	[6eb461319fa5]
+
+2008-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c, config.h.in, configure, configure.in:
+	Newer heimdal has 2-argument krb5_get_init_creds_opt_free() like MIT
+	krb5. Really old heimdal has no krb5_get_init_creds_opt_alloc() at
+	all. Add configure tests to handle all the cases.
+	[4b554a98470d]
+
+2008-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	resort ENVIRONMENT
+	[f4f20f40653e]
+
+	* sudoers.pod:
+	document sudoers_locale
+	[0bffd2dbe806]
+
+	* sudo.pod, sudo_edit.c:
+	add SUDO_EDITOR variable that sudoedit uses in preference to VISUAL
+	or EDITOR
+	[0ef8cb248cee]
+
+	* toke.c, toke.l:
+	In fill_cmnd(), collapse any escaped sudo-specific characters.
+	Allows character classes to be used in pathnames.
+	[5685244c8e44]
+
+2008-10-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lbuf.c:
+	fix typo in non-C89 function declaration
+	[99a7113b3a05]
+
+	* sudoers.pod:
+	Mention POSIX characters classes now that out fnmatch() and glob()
+	support them.
+	[9c916f1230c3]
+
+	* sample.sudoers, sudoers.pod:
+	Replace [A-z] (which won't match in UTF8) with [A-Za-z] which is
+	locale agnostic.
+	[a60a62bec244]
+
+	* parse.h:
+	use __signed char if we are going to assign a negative value since
+	on Power, char is unsigned by default
+	[2877b319df17]
+
+	* config.h.in, configure, configure.in:
+	Add tests for __signed char and signed char.
+	[5eb874fdf1d4]
+
+	* aix.c:
+	Fix AIX limit setting. getuserattr() returns values in disk blocks
+	rather than bytes. The default hard stack size in newer AIX is
+	RLIM_SAVED_MAX. From Dale King.
+	[3db67415ecc3]
+
+2008-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* emul/charclass.h, fnmatch.c, glob.c:
+	Add character class support to included glob(3) and fnmatch(3).
+	[6b5b4ad77899]
+
+2008-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* emul/fnmatch.h:
+	Remove UCB advertising clause and some compatibility defines.
+	[2ade7bee74e1]
+
+2008-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Check EDITOR/VISUAL to make sure sudoedit is not re-invoking itself
+	or sudo. This allows one to set EDITOR to sudoedit without getting
+	into an infinite loop of sudoedit running itself until the path gets
+	too big.
+	[aa49ab68f82d]
+
+	* def_data.c, def_data.h, def_data.in, defaults.c, sudo.c:
+	Add sudoers_locale Defaults option to override the default sudoers
+	locale of "C".
+	[0639886a35bf]
+
+2008-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Set locale to system default except for during sudoers parse.
+	[016dd2736728]
+
+2008-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Redo change in 1.34 to use pointer arithmetic.
+	[f9e7b63bb450]
+
+2008-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Fix a dereference (read) of a freed pointer. Reported by Patrick
+	Williams.
+	[69877b633753]
+
+2008-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Set locale to "C" to avoid interpretation issues with character
+	ranges in sudoers. May want to make the locale a sudoers option in
+	the future.
+	[098a95de1746]
+
+2008-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	we no longer use setproctitle
+	[c7f20fb747ea]
+
+	* sudo.h:
+	remove #if 1
+	[a368ee6816c6]
+
+	* LICENSE, mkstemp.c:
+	Use my replacement mkstemp() from the mktemp package.
+	[d07c2beb0f9e]
+
+2008-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* gram.c:
+	regen with yacc skeleton bug fixed
+	[24784571cbb8]
+
+	* sudoers.pod:
+	Remove duplicate "as root". From Martin Toft.
+	[97241acfee5e]
+
+2008-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c, sudo.c, sudo.h, testsudoers.c:
+	Flesh out the fake passwd entry used for running commands as a uid
+	not listed in the passwd database. Fixes an issue with some PAM
+	modules.
+	[a6648227f3f2]
+
+2008-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Error out in -i mode if the user has no shell. This can happen when
+	running commands as a uid with no password entry.
+	[0c174bef36ff]
+
+2008-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Better fix for line continuation inside double quotes. Now accepts
+	whitespace between the backslash and the newline like the main
+	lexer.
+	[64efcdf86d31]
+
+2008-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Fix line continuation in strings. It was only being honored if
+	preceded by whitespace.
+	[96c21271a3e4]
+
+2008-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, logging.c:
+	Replace the double fork with a fork + daemonize.
+	[328505441e67]
+
+2008-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c, sudo.c:
+	The -i flag should imply env_reset. This got broken in sudo 1.6.9.
+	[3caedfeaec87]
+
+	* logging.c, sudo.c, sudo_edit.c, visudo.c:
+	Change how the mailer is waited for. Instead of having a SIGCHLD
+	handler, use the double fork trick to orphan the child that opens
+	the pipe to sendmail. Fixes a problem running su on some Linux
+	distros.
+	[b59ce60a393d]
+
+2008-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix configure test for dirfd() on Linux where DIR is opaque.
+	[b8f729cdfecc]
+
+2008-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If QNX still has
+	this problem we'll need to revisit this again.
+	[c17fee8ad530]
+
+2008-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	Ignore SIGPIPE instead of blocking it when piping to the mailer. If
+	we only block the signal it may be delivered later when we unblock.
+	Also, there is no need to block SIGCHLD since we no longer do the
+	double fork. The normal SIGCHLD handler is sufficient.
+	[e94a49e992e5]
+
+2008-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add description for NO_PAM_SESSION, from a redhat patch.
+	[b9e4c939ec09]
+
+2008-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudo.pod:
+	Fix typos in -i usage
+	[2d7ce5de0235]
+
+2008-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Redo the test for dgettext() in a way that hopefully will work
+	around the libintl_dgettext() undefined problem.
+	[d27beb0cf85e]
+
+2008-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* schema.ActiveDirectory:
+	change filename in comment
+	[733da4ee9ac5]
+
+2008-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
+	sudoers.ldap.pod:
+	Reference schema.ActiveDirectory
+	[d6aec537800e]
+
+2008-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* schema.OpenLDAP, schema.iPlanet:
+	Mark sudoRunAs as deprecated.
+	[00c50df807af]
+
+	* schema.ActiveDirectory:
+	add sudoRunAsUser and sudoRunAsGroup
+	[19bcce6f72fb]
+
+	* schema.ActiveDirectory:
+	Active Directory schema by Chantal Paradis and Eric Paquet
+	[06a09c92c6a5]
+
+2008-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	remove an XXX that was fixed
+	[b88038062fa2]
+
+	* ChangeLog:
+	sync
+	[8fc27c17270e]
+
+	* parse.c:
+	Initialize tags to UNSPEC instead of def_* in "sudo -l" mode. This
+	fixes a problem where the tag value printed was influenced by
+	defaults set in the first pass through the parser.
+	[588ccd630367]
+
+2008-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, sudo.psf:
+	No point in packaging the TODO file
+	[9590248fffe1]
+
+	* ChangeLog:
+	sync
+	[152acf4c6813]
+
+2008-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
+	sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod:
+	Add env_file Defaults option that is similar to /etc/environment on
+	some systems.
+	[1daf53d51e18]
+
+2008-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
+	sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.man.in,
+	version.h, visudo.cat, visudo.man.in:
+	change version to 1.7.0
+	[d41d126b9bd8]
+
+	* UPGRADE:
+	initial valgrind pass done
+	[c59c3876d8ca]
+
+2008-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Fix typo/think in sudo_ldap_read_secret() when storing the secret.
+	[830d246c09b0]
+
+2008-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	define LDAPS_PORT if the system headers do not
+	[247b12325701]
+
+2008-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* gram.c, gram.y:
+	Fix another memory leak in init_parser().
+	[7bba47deba11]
+
+	* configure, configure.in:
+	There was a missing space before the ldap libs in SUDO_LIBS for some
+	configurations.
+	[7524cfc93759]
+
+	* alias.c, gram.c, gram.y, toke.c, toke.l:
+	Clean up some memory leaks pointed out by valgrind.
+	[a965866ece1a]
+
+2008-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	fix "sudo -s" broken by mode/flags breakout
+	[acffe984d408]
+
+	* configure, configure.in:
+	remove duplicate check for dgettext
+	[58145529133c]
+
+2008-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aix.c:
+	Fall back to default stanza if no user-specific limit is found.
+	[7b8cb29123ee]
+
+2008-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* snprintf.c:
+	include stdint.h if present
+	[f0ec38529306]
+
+	* snprintf.c:
+	Use LLONG_MAX, not the old QUAD_MAX
+	[01041ce508fb]
+
+2008-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.ldap.pod:
+	fix cut and pasto
+	[34240fdef5ab]
+
+2008-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c:
+	Add #ifdef PURITY
+	[ce1b571ad526]
+
+2008-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/bsdauth.c:
+	remove useless cast
+	[494f8a862e1d]
+
+2008-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog:
+	sync
+	[f5c97ffaabcc]
+
+	* TODO:
+	sync
+	[96ff1c44c182]
+
+	* sudo.h:
+	Split MODE_* defines into primary and flags.
+	[c02ee3027cb9]
+
+2008-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aix.c:
+	It turns out the logic for getting AIX limits is more convoluted
+	than I realized and differs depending on whether the soft and/or
+	hard limits are defined.
+	[cf8d3f85d395]
+
+2008-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, configure, configure.in:
+	Back out AIX-specific change to set the sudo_noexec path to the .a
+	file, we do really want to use the .so file. Since libtool doesn't
+	do that correctly, just install the .so file ourselves in the
+	Makefile.
+	[05c6f33177d9]
+
+	* install-sh:
+	If the file given to install is a path, only use the basename of the
+	file when building the destination path.
+	[695ba4e429ce]
+
+2008-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	parse_args() cleanup: Sort command line options in the getopt()
+	switch The -U option requires a parameter Normalize a few ISSET
+	calls Split mode into mode and flags and retire the now-obsolete
+	excl variable
+	[0d156835f861]
+
+	* WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod,
+	sudo_usage.h.in:
+	Add -n (non-interactive) flag.
+	[e3e50400d32d]
+
+	* sudo.c:
+	Move version printing, etc. into a separate function.
+	[18c91b476e2c]
+
+	* sudo.c:
+	Don't try to cleanup nsswitch if it has not been initialized.
+	[aeb1ca1b399d]
+
+2008-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	Block SIGPIPE in send_mail() so sudo is not killed by a problem
+	executing the mailer.
+	[f130e7924cca]
+
+2008-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	AIX shared libs end in .a, not .so.
+	[a5deb07020d8]
+
+2008-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Preserve HOME by default too. Matches documentation and previous
+	behavior.
+	[c16f17f1047c]
+
+2008-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Use getopt() to parse the command line. We need to be able to
+	intersperse env variables and options yet still honor "--"" which
+	complicates things slightly.
+	[60f271ce5c16]
+
+2008-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog:
+	sync
+	[685e67964eda]
+
+	* acsite.m4, configure, ltmain.sh:
+	update to libtool-1.5.26
+	[4c9a8c3d3b40]
+
+	* config.guess, config.sub:
+	update from libtool-1.5.26 distribution
+	[c6641aef2527]
+
+	* aix.c, sudo.h:
+	attempt to fix compilation errors on AIX
+	[edb13e5b2184]
+
+	* Makefile.in:
+	fix typo in last commit
+	[25ba7f7ceae4]
+
+	* Makefile.in:
+	Add WHATSNEW file to the distribution
+	[213f4115de8f]
+
+	* visudo.c:
+	use warningx instead of fprintf(stderr, ...)
+	[a3494b8ccb19]
+
+	* list.c:
+	add DEBUG to list2tq
+	[115d24a3000c]
+
+	* ChangeLog, TODO:
+	sync
+	[60e6f4d1fac0]
+
+	* WHATSNEW:
+	mention mailfrom
+	[e2498f9e18d6]
+
+	* Makefile.in, aix.c, config.h.in, configure, configure.in,
+	set_perms.c, sudo.h:
+	Add aix_setlimits() to set resource limits on AIX using a
+	combination of getuserattr() and setrlimit(). Currently untested.
+	[9b1441fd89ca]
+
+2008-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
+	sudoers.man.in, sudoers.pod:
+	Add mailfrom Defaults option that sets the value of the From: field
+	in the warning/error mail. If unset the login name of the invoking
+	user is used.
+	[029b9f05d3d9]
+
+	* defaults.c:
+	store a copy of _PATH_SUDO_ASKPASS in def_askpass that is freeable
+	[a90e407d5e00]
+
+	* gram.c, gram.y:
+	When adding a default, only call list2tq() once to do the list to tq
+	conversion. It is not legal to call list2tq multiple times on the
+	same list since list2tq consumes and modifies the list argument.
+	[fbc25d245c4a]
+
+	* sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
+	comment out XXXs for now
+	[595a1d43309d]
+
+	* WHATSNEW:
+	mention askpass
+	[b993e0837c22]
+
+2008-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Error out if both -A and -S are specified Error out if -A is
+	specified but no askpass is configured
+	[24f1df2638f6]
+
+	* configure, configure.in:
+	we are not going to ship a sudo-specific askpass
+	[61949e7a3943]
+
+2008-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	fix definition of TGP_ASKPASS
+	[0447c57ba4c3]
+
+	* def_data.c, def_data.in:
+	make askpass boolean-capable
+	[e0885893a325]
+
+	* INSTALL:
+	document --with-askpass
+	[c76e15ba97cf]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
+	sudoers.man.in, visudo.cat:
+	regen
+	[8d16242980b7]
+
+2008-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, sudo_usage.h.in, sudoers.pod:
+	document -A and askpass
+	[02c07505a78c]
+
+	* auth/sudo_auth.c, check.c, configure, configure.in, def_data.c,
+	def_data.h, def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
+	sudo_usage.h.in, tgetpass.c:
+	Add support for running a helper program to read the password when
+	no tty is present (or when specified with the -A flag). TODO: docs.
+	[05780f5f71fd]
+
+	* def_data.c, def_data.in:
+	add missing printf format to SELinux role and type strings
+	[2b32774715e7]
+
+2008-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.in:
+	Disable use of gss_krb5_ccache_name() by default and add
+	--enable-gss-krb5-ccache-name configure option to enable it. It seems
+	that gss_krb5_ccache_name() doesn't work properly with some
+	combinations of Heimdal and OpenLDAP.
+	[f61ebd3b19bd]
+
+2008-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* selinux.c:
+	Ignore setexeccon() failing in permissive mode. Also add a call to
+	setkeycreatecon() (though this is probably insufficient). From Dan
+	Walsh.
+	[52564fc1c069]
+
+	* auth/pam.c:
+	Only set std_prompt for the PAM_PROMPT_* cases. The conversation
+	function may be called for non-password reading purposes so we must
+	be careful not to use def_prompt in cases where it may not be set.
+	[29d88ca575ba]
+
+2008-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* selinux.c:
+	Don't free the new tty context, we need to keep it around when we
+	restore the tty context after the command completes
+	[5b4bd39b6ea8]
+
+2008-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* selinux.c:
+	s/newrole/sudo/
+	[21b8a96ff8df]
+
+	* sudo.man.pl, sudo.pod:
+	Only put login_cap(3) in SEE ALSO section if we have login.conf
+	support
+	[05250ddff2c0]
+
+2008-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
+	sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
+	regen
+	[301e5c5ccdbe]
+
+	* Makefile.in, configure, configure.in:
+	Substitute in comment characters for lines partaining to login.conf,
+	BSD auth and SELinux and only enable them if pertinent.
+	[9a02bd6a6658]
+
+	* sudo.man.pl:
+	Substitute in comment characters for lines partaining to login.conf,
+	BSD auth and SELinux and only enable them if pertinent.
+	[0c56d4750ac3]
+
+	* sudo.pod:
+	Substitute in comment characters for lines partaining to login.conf,
+	BSD auth and SELinux and only enable them if pertinent.
+	[acdbdfd24e1d]
+
+	* sudoers.man.pl:
+	Substitute in comment characters for lines partaining to login.conf,
+	BSD auth and SELinux and only enable them if pertinent.
+	[6c88f30b878a]
+
+	* sudoers.pod:
+	Substitute in comment characters for lines partaining to login.conf,
+	BSD auth and SELinux and only enable them if pertinent.
+	[c1c98fa163ce]
+
+	* Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
+	Remove the =cut on the first line (above the copyright notice) to
+	quiet pod2man. Also remove the hackery in the FILES section and just
+	deal with the fact that there will a newline between each pathname.
+	[2ac1ab191835]
+
+2008-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	run sudo.man.pl when generating sudo.man.in
+	[859727369168]
+
+	* configure, configure.in, sudo.man.pl:
+	comment out SELinux manual bits unless --with-selinux was specified
+	[97ff4212b649]
+
+	* sudoers.pod:
+	document role and type defaults for SELinux
+	[870f303366b3]
+
+	* sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
+	Document "sudo -ll" and make "sudo -l -l" be equivalent.
+	[3ce6dc429ea3]
+
+2008-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Treat k*bsd*-gnu like Linux, not BSD. Fixes compilation problems on
+	Debian GNU/kFreeBSD.
+	[c4efa567a328]
+
+2008-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	Avoid Heimdal'isms introduced in the rev 1.32 rewrite of
+	verify_krb_v5_tgt()
+	[f80538e5a6fa]
+
+	* logging.c, logging.h, sudo.c:
+	Remove dependence on VALIDATE_NOT_OK in logging functions. Split
+	log_auth() into log_allowed() and log_denial() Replace mail_auth()
+	with should_mail() and a call to send_mail()
+	[58aac9997557]
+
+2008-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Add debugging so we can tell if the krb5 ccache is accessible
+	[c679322527bb]
+
+	* INSTALL:
+	mention --with-selinux
+	[9efbe0b52194]
+
+2008-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[467a834f867c]
+
+	* selinux.c:
+	add Sudo tag
+	[d004ee669bed]
+
+	* sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod, sudo_usage.h.in,
+	sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod,
+	testsudoers.c, toke.c, toke.l:
+	Add support for SELinux RBAC. Sudoers entries may specify a role and
+	type. There are also role and type defaults that may be used. To
+	make sure a transition occurs, when using RBAC commands are executed
+	via the new sesh binary. Based on initial changes from Dan Walsh.
+	[1d4abfe2c004]
+
+	* Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
+	def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
+	pathnames.h.in, selinux.c:
+	Add support for SELinux RBAC. Sudoers entries may specify a role and
+	type. There are also role and type defaults that may be used. To
+	make sure a transition occurs, when using RBAC commands are executed
+	via the new sesh binary. Based on initial changes from Dan Walsh.
+	[6b421948286e]
+
+	* sesh.c:
+	Add support for SELinux RBAC. Sudoers entries may specify a role and
+	type. There are also role and type defaults that may be used. To
+	make sure a transition occurs, when using RBAC commands are executed
+	via the new sesh binary. Based on initial changes from Dan Walsh.
+	[1e3b395ce049]
+
+2008-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c:
+	Add long list (sudo -ll) support for printing verbose LDAP and
+	sudoers file entries. Still need to update manual.
+	[2875be37935c]
+
+2008-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h:
+	Unify the -l output for file and ldap based sudoers and use lbufs
+	for both. The ldap output does not currently include options that
+	cannot be represented as tags. This will be remedied in a long list
+	output mode to come.
+	[b2e429456596]
+
+2008-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Use a specific error message for errno == EAGAIN when setuid() et al
+	fails. On Linux systems setuid() will fail with errno set to EAGAIN
+	if changing to the new uid would result in a resource limit
+	violation.
+	[08d0aecd9f03]
+
+	* sudo.c:
+	Unlimit nproc on Linux systems where calling the setuid() family of
+	syscalls causes the nroc resource limit to be checked. The limits
+	will be reset by pam_limits.so when PAM is used. In the non-PAM case
+	the nproc limit will remain unlimited but there doesn't seem to be a
+	way around that other than having sudo parse
+	/etc/security/limits.conf directly.
+	[df024b415a8d]
+
+	* env.c, sudo.c, sudo.pod:
+	Only read /etc/environment on Linux and AIX
+	[90669e2aefdb]
+
+2008-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Use SUDO_DEFINE_UNQUOTED instead of AC_DEFINE_UNQUOTED to prevent
+	ldap.conf and ldap.secret paths from going into config.h. Avoid
+	single quotes in variable expansion when using SUDO_DEFINE_UNQUOTED
+	since in some versions of bash they will end up literally in the
+	resulting define.
+	[25390f3ef10a]
+
+2008-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	mention --with-nsswitch=no
+	[c509df927263]
+
+	* configure, configure.in:
+	ldap_ssl.h depends on ldap.h being included first
+	[d96d90e9b21f]
+
+	* config.h.in, configure, configure.in, ldap.c:
+	Include ldap_ssl.h if we can find it. Needed for the
+	ldapssl_set_strength defines on HP-UX at least.
+	[9e530470948a]
+
+	* sudoers.ldap.pod:
+	sync
+	[b9d101f4673a]
+
+	* TODO:
+	sync
+	[2ce951b2ecd0]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
+	sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
+	regen
+	[b61d793987e0]
+
+	* Makefile.in:
+	Use 78n line length when formatting cat pages.
+	[761bee9d5759]
+
+	* README.LDAP:
+	Remove redundant info that is now in sudoers.ldap.pod
+	[01828dcce59e]
+
+2008-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
+	Reorganize the first section a bit. Substitute the proper path for
+	/etc/sudoers.
+	[11ae165e065d]
+
+	* sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
+	Substitute values for ldap.conf, ldap.secret and nsswitch.conf Move
+	schema into EXAMPLES
+	[ab6509d1dde7]
+
+	* configure, configure.in:
+	Substitute values for ldap.conf, ldap.secret and nsswitch.conf into
+	sudoers.ldap.man.
+	[6e689972f465]
+
+	* configure, configure.in:
+	substitute for sudoers.ldap.man
+	[5a4a25766dee]
+
+	* Makefile.in:
+	Fix cut & pasto introduced when adding sudoers.ldap man page.
+	[a7b069af8894]
+
+	* sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
+	Fill in some of the missing pieces. Still needs some reorganization
+	and editing.
+	[5e7331722166]
+
+2008-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
+	sudoers.ldap.pod:
+	Beginnings of a sudoers.ldap man page. Currently, much of the
+	information is adapted from README.LDAP.
+	[aad28c8a922d]
+
+2008-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c:
+	When copying gr_mem we must guarantee that the storage space for
+	gr_mem is properly aligned. The simplest way to do this is to simply
+	store gr_mem directly after struct group. This is not a problem for
+	gr_passwd or gr_name as they are simple strings.
+	[af58fc76f1ed]
+
+	* ldap.c:
+	Fix a typo/thinko in one of the calls to
+	sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
+	[70b2eb8097f5]
+
+2008-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, ldap.c:
+	include <mps/ldap_ssl.h> in ldap.c if available
+	[34346206ef16]
+
+2008-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* gram.c, gram.y:
+	Make sure we define SIZE_MAX for yacc's skeleton.c
+	[d8a45c7a3c42]
+
+	* tgetpass.c:
+	Use TCSAFLUSH when restoring terminal settings (and echo) to
+	guarantee that any pending output is discarded
+	[549a184479e5]
+
+2008-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers:
+	no longer need to specify SETENV when user has sudo ALL
+	[3051b41f8032]
+
+	* testsudoers.c:
+	sync user_args size calculation with sudo.c Add -g group option,
+	renaming old -g to -G Add set_runasgr() and set_runaspw() and use
+	them
+	[0850325180f0]
+
+	* sudo.c, sudo.h:
+	Make set_runaspw static void
+	[5d44d7a340ce]
+
+	* testsudoers.c, visudo.c:
+	g/c set_runaspw stub
+	[79ebb5e2cc38]
+
+	* configure, configure.in:
+	Don't add -llber twice.
+	[4356d302eef4]
+
+2008-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	fix typo
+	[249cecc557e9]
+
+2008-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* gram.c:
+	regen
+	[2f94ea375b67]
+
+	* configure, configure.in:
+	Fix check that determines whether -llber is required.
+	[6afa99523379]
+
+	* README.LDAP, config.h.in, configure, configure.in, ldap.c:
+	For netscape-based LDAP, use ldapssl_set_strength() to implement the
+	checkpeer ldap.conf option.
+	[16ae24d73795]
+
+	* auth/kerb5.c:
+	Delay krb5_cc_initialize() until we actually need to use the cred
+	cache, which is what krb5_verify_user() does. Better cleanup on
+	failure.
+	[d12e5f1695b8]
+
+2008-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	Rewrite verify_krb_v5_tgt() based on what heimdal's
+	krb5_verify_user() does.
+	[05b5815f86c9]
+
+2008-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* gram.c:
+	The U suffix on constants is an ANSI feature
+	[c6dfce3167f1]
+
+	* configure, configure.in:
+	Add check for ber_set_option() in -llber
+	[43d0c0566074]
+
+2008-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	default if no nsswitch.conf is files only
+	[c13001d9c998]
+
+2008-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	don't tell people to mail aaron about LDAP stuff
+	[8165ec1ef0c6]
+
+	* README.LDAP:
+	timelimit and bind_timelimit
+	[44f74cbed167]
+
+	* ChangeLog:
+	sync
+	[aba1a0ab02bd]
+
+	* ldap.c:
+	Move ldap.secret reading into a separate function.
+	[1948acc9f7a4]
+
+	* check.c:
+	user_runas -> runas_pw
+	[334490fc2bae]
+
+2008-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	sync
+	[c7b165cc47c6]
+
+	* check.c, sudo.pod, sudoers.pod:
+	Add and document the %p escape in the password prompt. Based on a
+	patch from Patrick Schoenfeld.
+	[3972d4f31ffa]
+
+	* ldap.c:
+	Check strlcpy() return values.
+	[9b42f3ae8ff1]
+
+	* ldap.c:
+	refactor ldap binding code into sudo_ldap_bind_s()
+	[cb0c66a4d955]
+
+	* README.LDAP:
+	Make it clear that host and uri can take multiple parameters. URI is
+	now supported for more than just openldap nsswitch.conf does't
+	accept "compat"
+	[f610dea656d6]
+
+	* sudo.c:
+	comment cleanup and update (c) year
+	[6cd69c810ca5]
+
+	* parse.c, sudo_nss.c:
+	Move display_privs() and display_cmnd() from parse.c to sudo_nss.c.
+	This should make it possible to build an LDAP-only sudo binary.
+	[61c3f27066a0]
+
+	* ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h:
+	Improve chaining of multiple sudoers sources by passing in the
+	previous return value to the next in the chain
+	[2c0b722b1b2d]
+
+	* gram.y:
+	Free up parser data structures in sudo_file_close().
+	[2251531d4519]
+
+	* gram.c, parse.c:
+	Free up parser data structures in sudo_file_close().
+	[8371f130f401]
+
+	* ldap.c:
+	Parse uri ourself if no ldap_initialize() is present Use
+	ldap_create() instead of deprecated ldap_init() Use
+	ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
+	[85d3825b1953]
+
+	* config.h.in, configure, configure.in:
+	Add check for ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from
+	CFLAGS
+	[240524512bc5]
+
+2008-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in:
+	add check for ldap_create
+	[3089badd73b8]
+
+2008-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, ldap.c:
+	Add sudo_ldap_get_first_rdn() to return the first rdn of an entry's
+	dn using the mechanism appropriate for the LDAP SDK in use. Use
+	ldap_unbind_ext_s() instead of deprecated ldap_unbind_s(). Emulate
+	ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's without them.
+	[6deeca3d00cc]
+
+	* lbuf.c:
+	include unistd.h
+	[8419ed0bae7f]
+
+	* config.h.in, configure.in:
+	fix typo in mtim_getnsec
+	[2d5f21230a60]
+
+2008-01-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in:
+	add check for st__tim in struct stat as used by SCO
+	[587060ea2a89]
+
+	* ldap.c:
+	use ldap_search_ext_s instead of deprecated ldap_search_s
+	[5fc44fe3b44c]
+
+	* Makefile.in, TODO, sudo.cat, sudo.man.in:
+	add sudo_nss.h to HDRS
+	[86f01a70ff29]
+
+	* ldap.c:
+	Replace deprecated ldap_explode_dn() with calls to ldap_str2dn() and
+	ldap_rdn2str().
+	[aa217002cfae]
+
+2008-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Use ldap_get_values_len()/ldap_value_free_len() instead of the
+	deprecated ldap_get_values()/ldap_value_free().
+	[e22dceb85e57]
+
+	* ChangeLog:
+	sync
+	[adad27b36107]
+
+	* TODO:
+	sync
+	[c449eb47e0ef]
+
+	* gettime.c, sudo.c:
+	Remove some already fixed XXXs
+	[532788d0e6da]
+
+	* ldap.c:
+	Same return value as non-existent sudoers if LDAP was unable to
+	connect.
+	[5819810e8e4e]
+
+	* sudo.pod:
+	mention /etc/environment
+	[ea8e6102f853]
+
+	* README.LDAP, UPGRADE, WHATSNEW:
+	Update to reflect recent developments.
+	[ed1fb026fe77]
+
+	* sudo.c:
+	Print nsswitch.conf, ldap.conf and ldap.secret paths in -V output.
+	[55b68a58260d]
+
+	* ldap.c:
+	When building up a query don't list groups in the aux group vector
+	that are the same as the passwd file group. On most systems the
+	first gid in the group vector is the same as the passwd entry gid.
+	[4bb51e297e0d]
+
+	* env.c, ldap.c:
+	Define LDAPNOINIT before calling ldap_init(), etc. to disable user
+	ldaprc and system defaults that could affect how LDAP works.
+	[ce5036440db2]
+
+	* INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
+	sudo_nss.c, sudo_nss.h:
+	Rename read_nss -> sudo_read_nss Add --with-nsswitch to allow users
+	to specify nsswitch.conf path or disable it. If --with-nsswitch=no
+	but --with-ldap, order is LDAP, then sudoers. Fix --with-ldap-conf-
+	file and --with-ldap-secret-file
+	[ea5d7704381f]
+
+	* parse.c:
+	Honor def_ignore_local_sudoers
+	[f38e1121fae1]
+
+2007-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	no longer need to check def_ignore_local_sudoers here
+	[fce2a72f96fb]
+
+	* parse.c:
+	Refactor group vector resetting into a function and also call it
+	from display_cmnd. Stop after the first sucessful match in
+	display_cmnd. Print a newline between each display_privs method.
+	[981b37b5adff]
+
+	* parse.c:
+	fix double free introduced in rev 1.218
+	[c574b02d8747]
+
+	* ldap.c:
+	belt and suspenders; zero out result after freeing it
+	[7732988d4620]
+
+	* env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c:
+	Refactor line reading into a separate function, sudo_parseln(),
+	which removes comments, leading/trailing whitespace and newlines.
+	May want to rethink the use of sudo_parseln() for /etc/ldap.secret
+	[61d9068f0645]
+
+	* parse.c, sudo.c:
+	Make the inability to read the sudoers file a non-fatal error if
+	there are other sudoers sources available. sudoers_file_lookup now
+	returns "not OK" if sudoers was not present
+	[643babf597a8]
+
+	* ldap.c:
+	make it clear that the global options are from LDAP
+	[9ff950349463]
+
+	* logging.c:
+	allocate proper amount of space for error string
+	[8bebb7d46d19]
+
+	* sudo_nss.c, sudo_nss.h:
+	actual sudo nss code
+	[5bd7d52d7738]
+
+	* ldap.c, parse.c, sudo.c, sudo.h:
+	nss-ify display_privs and display_cmnd.
+	[cccfdd3253f2]
+
+	* defaults.c, parse.c, testsudoers.c, visudo.c:
+	move update_defaults() to parse.c
+	[ace144b958a9]
+
+	* Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
+	Use nsswitch to hide some sudoers vs. ldap implementation details
+	and reduce the number of #ifdef LDAP TODO: fix display routines and
+	error handling
+	[6225edde89a6]
+
+2007-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
+	First cut at nsswitch.conf support. Further reorganizaton and
+	related changes are forthcoming.
+	[717f59d0790b]
+
+2007-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c, pathnames.h.in, sudo.c, sudo.h:
+	Add support for reading and /etc/environment file. Still needs to be
+	documented and should probably only applies to OSes that have it
+	(AIX and Linux, maybe others).
+	[15d3edae27e4]
+
+	* ldap.c:
+	include limits.h
+	[e19875ef0f82]
+
+2007-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW:
+	reword LDAP SASL
+	[7ec3c4ec31b5]
+
+2007-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	sync
+	[87c5a7aea7bf]
+
+	* README.LDAP:
+	Add an example sudoRole, clarify netscape vs. openldap a bit more
+	[6f96c0ca8107]
+
+	* README.LDAP:
+	Be clear on what is OpenLDAP vs. Netscape-derived
+	[a33c8314dec5]
+
+	* config.h.in, configure, configure.in, ldap.c:
+	Use ldapssl_init() for ldaps support instead of trying to do it
+	manually with ldap_init() + ldapssl_install_routines(). Use tls_cert
+	and tls_key for cert7.db and key3.db respectively. Don't print
+	debugging info for options that are not set. Add warning if
+	start_tls specified when not supported.
+	[abb62dc7e4a3]
+
+	* ldap.c:
+	fix compilation on solaris
+	[03d449684e80]
+
+	* Makefile.in:
+	add missing .h and .c files for missing lib objs
+	[8b37825bdfc7]
+
+2007-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	fix LDAP_OPT_NETWORK_TIMEOUT setting
+	[226eba89c0ad]
+
+	* ldap.c:
+	fix compilation on Solaris
+	[917d47639eb6]
+
+2007-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	fix typo
+	[009d5c81b225]
+
+	* README.LDAP:
+	try to clear up which variables are for OpenLDAP and which are for
+	netscape-derived SDKs
+	[f8d9823ee73c]
+
+	* config.h.in, configure, configure.in, ldap.c:
+	Add support for "ssl on" in both netscape and openldap flavors. Only
+	the OpenLDAP flavor has been tested.
+	[952745829ec5]
+
+	* logging.c, sudo.c, sudo.h:
+	Call cleanup() before exit in log_error() instead of calling
+	sudo_ldap_close() directly. ldap_conn can now be static to sudo.c
+	[da02d1b67a2c]
+
+	* sudo.c:
+	ld -> ldap_conn
+	[01afa6d927cc]
+
+2007-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c, sudo.c, sudo.h:
+	Better ldap cleanup.
+	[25b9abe2d617]
+
+	* ldap.c:
+	Distinguish between LDAP conf settings that are connection-specific
+	(which take an ld pointer) and those that are default settings
+	(which do not).
+	[d48dc6c9c3b4]
+
+2007-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Improved warnings on error.
+	[c8dce7b4feb4]
+
+	* ldap.c:
+	Make ldap config table driven and set the config *after* we open the
+	connection.
+	[d9698b5a2681]
+
+2007-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
+	[598c6df06660]
+
+	* configure, configure.in:
+	some operating systems need to link with -lkrb5support when using
+	krb5
+	[8896365dde9e]
+
+2007-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW:
+	minor update
+	[acfeeb7f4886]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
+	regen
+	[a3c6699674f9]
+
+2007-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog, TODO:
+	sync
+	[138e99b925ee]
+
+	* ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif:
+	add -g support for LDAP
+	[8fc27dbe9287]
+
+2007-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in:
+	The -i and -s flags can now take an optional command.
+	[6afec104ee77]
+
+2007-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c, def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
+	sudoers.pod:
+	Add passprompt_override flag to sudoers that will cause the prompt
+	to be overridden in all cases. This flag is also set when the user
+	specifies the -p flag.
+	[e4c5402131a6]
+
+	* sudo.c:
+	Move setting of login class until after sudoers has been parsed. Set
+	NewArgv[0] for -i after runas_pw has been set.
+	[62a48c8c56fa]
+
+	* configure, configure.in:
+	Move the dgettext check.
+	[5fd8a4712d1c]
+
+2007-12-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c, config.h.in, configure, configure.in:
+	Add basic support for looking up the string "Password: " in the PAM
+	localized text db. This allows us to determine whether the PAM
+	prompt is the default "Password: " one even if it has been
+	localized.
+
+	TODO: concatenate non-std PAM prompts and user-specified sudo
+	prompts.
+	[81c25a415d41]
+
+2007-11-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, config.h.in, configure, configure.in, parse.c,
+	set_perms.c, sudo.c, sudo.h:
+	Use AC_FUNC_GETGROUPS instead of a home-grown attempt that was
+	insufficient.
+	[1cce6ec1a91e]
+
+	* acsite.m4, configure, interfaces.c, memrchr.c:
+	Fix typos; Martynas Venckus
+	[be1233cca11a]
+
+2007-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Don't assume runas_pw is set; it may not be in the -g case.
+	[aa11bd2193ac]
+
+2007-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c, set_perms.c:
+	Set aux group vector for PERM_RUNAS and restore group vector for
+	PERM_ROOT if we previously changed it. Stash the runas group vector
+	so we don't have to call initgroups more than once. Also add no-op
+	check to check_perms.
+	[53837fc755f7]
+
+2007-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h, gram.y,
+	ldap.c, logging.c, match.c, mon_systrace.c, parse.c, parse.h,
+	pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
+	sudo.pod, sudo_usage.h.in, sudoers.cat, sudoers.man.in, sudoers.pod,
+	testsudoers.c, visudo.c, visudo.cat, visudo.man.in:
+	Add support for runas groups. This allows the user to run a command
+	with a different effective group. If the -g option is specified
+	without -u the command will be run as the current user (only the
+	group will change). the -g and -u options may be used together.
+	TODO: implement runas group for ldap improve runas group
+	documentation add testsudoers support
+	[9019309df6d0]
+
+	* configure, configure.in:
+	fix setting of mandir
+	[2c60f269399f]
+
+	* sudo.pod, sudoers.pod:
+	document that ALL implies SETENV
+	[bcc8e5b703b9]
+
+	* ldap.c:
+	s/setenv_ok/setenv_implied/g
+	[f005df2c2eea]
+
+	* ldap.c:
+	hostname_matches() returns TRUE on match in sudo 1.7.
+	[c3d4377b6e8b]
+
+	* ldap.c:
+	use strcmp, not strcasecmp when comparing ALL
+	[e486024574a1]
+
+	* ldap.c:
+	Make sudo ALL imply setenv. Note that unlike with file-based sudoers
+	this does affect all the commands in the sudoRole.
+	[bc12f54321d1]
+
+	* gram.c, gram.y, parse.c, parse.h:
+	sudo "ALL" now implies the SETENV tag but, unlike an explicit tag,
+	it is not passed on to other commands in the list.
+	[026e2cb40680]
+
+	* visudo.c:
+	Add missing sudo_setpwent() and sudo_setgrent() calls. Also use
+	sudo_getpwuid() instead of getpwuid().
+	[86f30a8fbd49]
+
+2007-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers:
+	Expand on the dangers of not using visudo to edit sudoers.
+	[e434e8057d02]
+
+2007-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Don't quote *?[]! on output since the lexer does not strip off the
+	backslash when reading those in.
+	[561da4a13afa]
+
+2007-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* glob.c:
+	expand "u_foo" types to "unsigned foo" to avoid compatibility
+	issues.
+	[b0d7c64d78c3]
+
+2007-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	Refactor log line generation in to new_logline().
+	[6a9b9730615d]
+
+2007-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	fix typo
+	[9e19d4f86e47]
+
+2007-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, interfaces.c, interfaces.h,
+	match.c:
+	Add configure check for struct in6_addr instead of relying on
+	AF_INET6 since some systems define AF_INET6 but do not include IPv6
+	support.
+	[e24082c416bd]
+
+2007-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix block to add -lutil for FreeBSD and NetBSD when logincap is in
+	use.
+	[76a9df4a63be]
+
+2007-10-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	POSIX states that struct timespec be declared in time.h so check
+	there regardless of the value of TIME_WITH_SYS_TIME.
+	[e42c55ec9daf]
+
+2007-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Instead of defining a macro to call the appropriate method for
+	turning on/off echo, just define tc[gs]etattr() and the related
+	defines that use the correct terminal ioctls if needed. Also go back
+	to using TCSAFLUSH instead of TCSADRAIN on all but QNX.
+	[5dfb2379d995]
+
+2007-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	g/c @ALLOCA@
+	[e6946c2e3820]
+
+	* configure:
+	regen
+	[9bac7159a138]
+
+	* INSTALL, auth/pam.c, config.h.in, configure.in:
+	Add --disable-pam-session configure option to disable calling
+	pam_{open,close}_session. May work around bugs in some PAM
+	implementations.
+	[273d0fdb4a9d]
+
+2007-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	quiet gcc warnings
+	[325565c5a579]
+
+	* tgetpass.c:
+	Avoid printing the prompt if we are already backgrounded. E.g. if
+	the user runs "sudo foo &" from the shell. In this case, the call to
+	tcsetattr() will cause SIGTTOU to be delivered.
+	[db2139a8d8b8]
+
+2007-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.h, def_data.in:
+	Reorder things such that the definition of env_reset come right
+	before the env variable lists.
+	[e0d8e22a581a]
+
+	* parse.h:
+	Shrink type and seqno in struct alias from int to u_short
+	[9425263dd565]
+
+	* alias.c, match.c, parse.c, parse.h:
+	Add a sequence number in the aliases for loop detection. If we find
+	an alias with the seqno already set to the current (global) value we
+	know we've visited it before so ignore it.
+	[301a0548ffff]
+
+2007-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO, auth/pam.c, sudo.c, sudo.h:
+	PAM wants the full tty path so add user_ttypath which holds the full
+	path to the tty or is NULL if no tty was present.
+	[c7c1dd4b36c8]
+
+	* auth/pam.c:
+	Set PAM_RHOST to work around a bug in Solaris 7 and lower that
+	results in a segv.
+	[3a8865b3a357]
+
+2007-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* gram.c:
+	regen
+	[5647be127950]
+
+	* alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
+	parse.h, testsudoers.c, visudo.c:
+	rename lh_ -> tq_
+	[8f500c542c4a]
+
+2007-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* alloc.c:
+	remove some useless casts
+	[409a448b23f5]
+
+	* alloc.c:
+	pull in inttypes.h for SIZE_MAX; we avoid stdint.h since inttypes.h
+	predates the final C99 spec and the standard specifies that it shall
+	include stdint.h anyway
+	[ae478fdef61a]
+
+2007-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, alloca.c, configure.in:
+	Since we ship with a pre-generated parser there is no need to ship a
+	bogus alloca implementation.
+	[3f611a7cc0e5]
+
+	* configure:
+	regen
+	[771eccf5269c]
+
+	* configure.in:
+	remove initial setting of CHECKSIA, we require that it be unset if
+	not used
+	[a2e91adc5aa2]
+
+	* Makefile.in:
+	add list.c to SRCS
+	[7db0e56cf5b9]
+
+	* configure:
+	regen
+	[3716ec30172e]
+
+	* configure.in:
+	only do SIA checks on Digital Unix
+	[6a96e1af2597]
+
+2007-09-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[ac1dc29de72b]
+
+	* ChangeLog, TODO:
+	sync
+	[781effce0a2d]
+
+	* auth/kerb5.c:
+	Remove call to krb5_cc_register() as it is not needed for modern
+	kerb5.
+	[351b8b764f16]
+
+	* configure:
+	regen
+	[ac21dbcc9c2c]
+
+	* aclocal.m4, configure.in:
+	New method for setting the default authentication type and avoiding
+	conflicts in auth types.
+	[5fb15be11f78]
+
+	* match.c, parse.c, testsudoers.c:
+	Each entry in a cmndlist now has an associated runaslist so no need
+	to keep track of the most recent non-NULL one.
+	[582e015786b0]
+
+2007-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	back out partial ldaps support mistakenly committed
+	[357703e94b2d]
+
+	* ldap.c:
+	Add support for unix groups and netgroups in sudoRunas
+	[2f04eb91c6d0]
+
+2007-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Fix sudoedit of a non-existent file. From Tilo Stritzky.
+	[a5488a03bddd]
+
+2007-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[541177376ee1]
+
+	* INSTALL:
+	update --passprompt escape info
+	[6d57db4cd538]
+
+	* configure.in:
+	remove now-bogus comment and update copyright date
+	[6a4af45fa331]
+
+	* configure.in:
+	Fix up use of with_passwd
+	[7c79d8640f77]
+
+	* acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
+	Update to autoconf-2.61 andf libtool-1.5.24
+	[045259b0b439]
+
+	* Makefile.in:
+	"cmp -s" not just cmp Add @datarootdir@ to quiet autoconf-2.61
+	[f5b6a7afb817]
+
+2007-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* gram.c:
+	regen
+	[b5b78e71d2cb]
+
+	* gram.y:
+	move tags and runaslist propagation to be earlier
+	[94f7805f4489]
+
+	* visudo.c:
+	If -f flag given use the permissions of the original file as a
+	template
+	[9303d22bddb0]
+
+	* gram.y:
+	prevent a double free() when re-initing the parser
+	[5b3907c4de5a]
+
+2007-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[49a90b19a17d]
+
+	* aclocal.m4, alias.c, alloc.c, auth/API, auth/afs.c, auth/bsdauth.c,
+	auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/securid.c,
+	auth/securid5.c, auth/sia.c, auth/sudo_auth.h, config.h.in,
+	configure.in, env.c, ldap.c, list.c, list.h, memrchr.c, parse.c,
+	parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c, sudo.c,
+	sudo.h, testsudoers.c, visudo.c, zero_bytes.c:
+	Remove support for compilers that don't support void *
+	[35e1d01ae197]
+
+	* gram.c:
+	regen
+	[70ce412a458a]
+
+	* Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h, match.c,
+	parse.c, parse.h, testsudoers.c, visudo.c:
+	Move list manipulation macros to list.h and create C versions of the
+	more complex ones in list.c. The names have been down-cased so they
+	appear more like normal functions.
+	[9cea0e281148]
+
+	* Makefile.in:
+	Fix cmp command when regenerating parser. Make gram.o the first
+	dependency for all programs so gram.h will be generated before
+	anything that needs it.
+	[429ea065abf1]
+
+	* gram.y, parse.h:
+	Convert NEW_DEFAULT anf NEW_MEMBER into static functions.
+	[2f3433833589]
+
+	* match.c, parse.c, testsudoers.c:
+	Use LH_FOREACH_REV when checking permission and short-circuit on the
+	first non-UNSPEC hit we get for the command. This means that instead
+	of cycling through the all the parsed sudoers entries we start at
+	the end and work backwards and quit after the first positive or
+	negative match.
+	[881474532f3e]
+
+	* gram.c:
+	regen
+	[9152a19d4188]
+
+	* defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
+	Change list head macros to take a pointer, not a struct.
+	[054f1dcce4cc]
+
+	* gram.c:
+	regen
+	[be154aae6235]
+
+	* gram.y:
+	Propagate the runasspec from one command to the next in a cmndspec.
+	[4957b1cb03a3]
+
+2007-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Replace has_meta() with a macro that calls strpbrk().
+	[a2e58846a542]
+
+	* regen
+	[5a932a5c9451]
+
+	* alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
+	testsudoers.c, visudo.c:
+	Use a list head struct when storing the semi-circular lists and
+	convert to tail queues in the process. This will allow us to reverse
+	foreach loops more easily and it makes it clearer which functions
+	expect a list as opposed to a single member.
+
+	Add macros for manipulating lists. Some of these should become
+	functions.
+
+	When freeing up a list, just pop off the last item in the queue
+	instead of going from head to tail. This is simpler since we don't
+	have to stash a pointer to the next member, we always just use the
+	last one in the queue until the queue is empty.
+
+	Rename match functions that take a list to have list in the name.
+	Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
+	[7c37b271607a]
+
+	* parse.c:
+	Fix pasto, append "!" not negated (which is an int) for sudo -l
+	output.
+	[93a444c3997f]
+
+	* Makefile.in:
+	Remove the dependency of gram .h on gram.y, the .c dependency is
+	enough. Only move y.tab.h to gram.h if it is different; avoids
+	needless rebuilding.
+	[67bf4ea2a2e5]
+
+2007-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Defaults lines may be associated with lists of users, hosts,
+	commands and runas users, not just single entries.
+	[795effacb6be]
+
+2007-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Revert the "cmp" portion of the last diff, it doesn't make sense.
+	[26f34bf4e2e3]
+
+	* Makefile.in:
+	Remove *.lo for clean: When generating the parser, only move the
+	generated files into place if they differ from the existing ones.
+	[84673fea371b]
+
+2007-08-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Replace IPV6 regexp with a much simpler (readable) one and add an
+	extra check when it matches to make sure we have a valid address.
+	[592e9f690556]
+
+	* match.c:
+	Fix thinko introduced when merging IPV6 support.
+	[da38cd5eb8c7]
+
+2007-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY, LICENSE:
+	regen
+	[0d7b27b90634]
+
+	* license.pod:
+	add 2007
+	[510e5048ae1a]
+
+	* UPGRADE:
+	mention #uid vs. comment pitfall
+	[4d2861898bcc]
+
+	* acsite.m4:
+	Merge in a patch from the libtool cvs that fixes a problem with the
+	latest autoconf. From Stepan Kasal.
+	[0c279ae7df3e]
+
+	* parse.h:
+	Back out he XOR swap trick, it is slower than a temp variable on
+	modern CPUs.
+	[91c4b024e317]
+
+	* gram.c:
+	regen
+	[cb6d4106fb74]
+
+	* gram.y, parse.h:
+	Convert the tail queue to a semi-circle queue and use the XOR swap
+	trick to swap the prev pointers during append.
+	[8bf4d9fbee58]
+
+2007-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.h:
+	remove useless statement
+	[421ec1dd73e6]
+
+	* toke.c, toke.l:
+	Refactor #include parsing into a separate function and return
+	unparsed chars (such as newline or comment) back to the lexer.
+	[64166917aa3d]
+
+2007-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* WHATSNEW:
+	mention better uid support
+	[56f510e7f2ec]
+
+	* sudoers.pod:
+	Users may now consist of a uid.
+	[5fd31b2c55ed]
+
+	* gram.c, gram.h, toke.c:
+	regen
+	[599e58af6dc1]
+
+	* parse.c:
+	Use lbuf_append_quoted() for sudo -l output to quote characters that
+	would require quoting in sudoers.
+	[3132d05c990a]
+
+	* lbuf.c, lbuf.h:
+	Add lbuf_append_quoted() which takes a set of characters which
+	should be quoted with a backslash when displayed.
+	[ab09bebb1d65]
+
+	* toke.l:
+	Require that the first character after a comment not be a digit or a
+	dash. This allows us to remove the GOTRUNAS state and treat uid/gids
+	similar to other words. It also means that we can now specify uids
+	in User_Lists and a User_Spec may now contain a uid.
+	[461fe01f8392]
+
+	* gram.y, toke.l:
+	Replace RUNAS token with '(' and ')' tokens to make the runas
+	portion of the grammar more natural.
+	[e0c383b4684d]
+
+	* BUGS:
+	The BUGS file is history
+	[4d9a809585c7]
+
+	* Makefile.in, README:
+	The BUGS file is history
+	[d9500e261172]
+
+2007-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	Allow comments after a RunasAlias as long as the character after the
+	pound sign isn't a digit or a dash.
+	[d7f3bd94eeda]
+
+	* WHATSNEW:
+	Glob support was back-ported to 1.6.9
+	[d1d5cfd46228]
+
+2007-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	remove sudo_usage.h in distclean
+	[df05ce9c4127]
+
+	* parse.c:
+	If a Defaults value contains a blank, double-quote the string.
+	[9057a910daad]
+
+	* toke.c, toke.l:
+	Properly deal with Defaults double-quoted strings that span multiple
+	lines using the line continuation char. Previously, the entire
+	thing, including the continuation char, newline, and spaces was
+	stored as-is.
+	[4a4e8eacefe6]
+
+	* sudo.c:
+	Be consistent when using single quotes and backticks.
+	[d010b83a0fa1]
+
+2007-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
+	sudo.c, sudo_usage.h.in:
+	Add new linebuf code to do appends of dynamically allocated strings
+	and word-wrapped output. Currently used for sudo's usage() and sudo
+	-l output. Sudo usage strings are now in sudo_usage.h which is
+	generated at configure time.
+	[4dfd0ee8d961]
+
+2007-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c, sudo.c, sudo.h:
+	Fix line wrapping in usage() and use the actual tty width instead of
+	assuming 80.
+	[700eab37c5a6]
+
+2007-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* history.pod:
+	some more info
+	[8140112a8ae1]
+
+	* history.pod:
+	Mentioned Chris Jepeway's parser and also the new one that is in
+	sudo 1.7.
+	[2132d00f0597]
+
+2007-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, visudo.pod:
+	For the options list, add flag args where appropriate and increase
+	the indent level so there is room for them.
+	[2b60fb572e12]
+
+2007-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Fix some spacing in "sudo -l" and add a comment about some bogosity
+	in the line wrapping.
+	[b59b056f5ee2]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	regen
+	[5fb719f18ebc]
+
+	* INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
+	def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
+	parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
+	testsudoers.c, toke.c, toke.l:
+	Remove monitor support until there is a versino of systrace that
+	uses a lookaside buffer (or we have a better mechanism to use).
+	[61ff76878e4a]
+
+	* config.h.in, configure, configure.in, sudo.c:
+	use getaddrinfo() instead of gethostbyname() if it is available
+	[cc33c136aa6a]
+
+2007-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c, sudo.c:
+	Deal with OSes where sizeof(gid_t) < sizeof(int).
+	[130a89cbdfba]
+
+	* interfaces.c:
+	repair non-getifaddrs() code after ipv6 integration
+	[7ae7a89e2236]
+
+	* sudo.c:
+	If we can open sudoers but fail to read the first byte, close the
+	file stream before trying again.
+	[6f31272fae7b]
+
+2007-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c:
+	regen
+	[4d7afe0aa6fa]
+
+	* gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
+	Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
+	[4e6ff2965a42]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Add some missing markup Update copyright
+	[7e6d3c686b5e]
+
+2007-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	fix sudo_noexec extension which got broken in the libtool update
+	[3a5b447df861]
+
+2007-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	explicitly specify -Tascii to nroff
+	[45c8da4cbefe]
+
+2007-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	remove an ANSI-ism that crept in
+	[29086f87b2ca]
+
+2007-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	Adjust list indents Prevent -- from being turned into an em dash Use
+	a list for the environment instead of a literal paragraph
+	[c3abcd8f76f4]
+
+	* visudo.pod:
+	Use a list for the environment instead of an indented literal
+	paragraph.
+	[0ffcfcb7349f]
+
+	* sudoers.pod:
+	Adjust list indentation
+	[615c89e3123a]
+
+	* license.pod:
+	add =head3
+	[8b2e0d38c0bd]
+
+2007-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	mention that when specifying a uid for the -u option the shell may
+	require that the # be escaped
+	[3e3a17bff150]
+
+2007-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Fix off by one in group matching.
+	[b529602b7fba]
+
+2007-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From David Krause.
+	[ffbf8907c6e7]
+
+2007-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add missing define of HAVE_GSS_KRB5_CCACHE_NAME for the
+	-lgssapi_krb5 case.
+	[2b85a89c2252]
+
+	* aclocal.m4, configure, configure.in:
+	Fix link tests such that new gcc doesn't optimize away the test.
+	[83484ec95cba]
+
+2007-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	add missing over/back
+	[251a12c89b91]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Change FILES section to use =item
+	[60b9efc3a0b2]
+
+	* env.c:
+	Add back allocation of the env struct in rebuild_env but save a copy
+	of the old pointer and free it before returning.
+	[1100cd4fa997]
+
+	* env.c:
+	Don't init the private environment in rebuild_env() since it may
+	have already been done implicitly sudo_setenv/sudo_unsetenv.
+
+	Multiply length by sizeof(char *) in memcpy/memmove when copying the
+	environment so we copy the full thing.
+
+	Add missing set of parens so we deref the right pointer in
+	sudo_unsetenv when searching for a matching variable.
+	[9086a8f756b1]
+
+2007-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Use file markup for paths in the FILES section
+	[940d99f731f2]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Don't capitalize sudo/visudo
+	[f067a455d44b]
+
+	* sudoers.pod:
+	Sort sudoers options; based on a diff from Igor Sobrado.
+	[a9b9befe85ac]
+
+2007-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Use 8 and 5 instead of @mansectsu@ and @mansectform@ since the
+	latter confuses pod2man. The Makefile rules for the .man.in file
+	will add @mansectsu@ and @mansectform@ back in after pod2man is done
+	anyway.
+	[b50ea0db727c]
+
+2007-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE, Makefile.in, license.pod:
+	Move license info to pod format
+	[25bdd82e592b]
+
+	* configure, configure.in, sudoers.pod:
+	Substitute value of path_info into sudoers man page.
+	[9ba661a82798]
+
+	* WHATSNEW:
+	remove features that were back-ported to 1.6.9
+	[e76d756cbe65]
+
+	* sudo.c, sudo.pod, visudo.c, visudo.pod:
+	Sort SYNOPSIS and sync usage. From Igor Sobrado.
+	[4970386c9e54]
+
+	* env.c:
+	Only need sudo_setenv/sudo_unsetenv if we are going to use
+	ldap_sasl_interactive_bind_s() but don't have
+	gss_krb5_ccache_name().
+	[f1a73d8b35c5]
+
+	* ChangeLog:
+	rebuild without branch info
+	[5d5a33494677]
+
+	* Makefile.in:
+	Add ChangeLog target
+	[a702034fdd89]
+
+	* auth/pam.c:
+	Run cleanup code if the user hits ^C at the password prompt.
+	[9cf87768e921]
+
+	* auth/pam.c:
+	Some versions of pam_lastlog have a bug that will cause a crash if
+	PAM_TTY is not set so if there is no tty, set PAM_TTY to the empty
+	string.
+	[5b63f6c88866]
+
+2007-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	ChageLog not Changelog
+	[1243d8473ceb]
+
+	* ChangeLog:
+	sync
+	[d887df98c6b0]
+
+	* Makefile.in:
+	CHANGE -> Changelog
+	[917738df30dd]
+
+	* TODO:
+	sync
+	[cd382f7d1948]
+
+2007-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, ldap.c:
+	Add configure hooks for gss_krb5_ccache_name() and the gssapi
+	headers.
+	[139606209991]
+
+2007-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c, sudo.c:
+	rebuild_env() and insert_env_vars() no longer return environment
+	pointer, they set environ directly.
+
+	No longer need to pass around an envp pointer since we just operate
+	on environ now.
+
+	Add dosync argument to insert_env() that indicates whether it should
+	reset environ when realloc()ing env.envp.
+
+	Use an initial size of 128 for the environment.
+	[4735fd5fddb8]
+
+	* env.c:
+	Split sudo_setenv() into an external version and a version only for
+	use by rebuild_env().
+	[fda7d655adb1]
+
+2007-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Add support for using gss_krb5_ccache_name() instead of setting
+	KRB5CCNAME. Also use sudo_unsetenv() in the non-
+	gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
+	original environment. TODO: configure setup for
+	gss_krb5_ccache_name()
+	[fcafa5a49caf]
+
+	* README.LDAP:
+	add krb5_ccname
+	[fceb8f883886]
+
+	* README.LDAP, ldap.c:
+	Add support for sasl_secprops in ldap.conf
+	[1f06f4bf7347]
+
+	* env.c, sudo.h:
+	Add sudo_unsetenv() and refactor private env syncing code into
+	sync_env().
+	[045ecb3fd22b]
+
+	* README.LDAP, ldap.c:
+	The ldap.conf variable is sasl_auth_id not sasl_authid.
+	[a5f98491311b]
+
+2007-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c, sudo.c, sudo.h:
+	Add support for krb5_ccname in ldap.conf. If specified, it will
+	override the default value of KRB5CCNAME in the environment for the
+	duration of the call to ldap_sasl_interactive_bind_s().
+	[b08a10c3045b]
+
+	* env.c, sudo.h:
+	Remove format_env() Add sudo_setenv() to replace most format_env() +
+	insert_env() combinations. insert_env() no longer takes a struct
+	environment *
+	[131da52f43f3]
+
+	* ldap.c:
+	Fix use_sasl vs. rootuse_sasl logic.
+	[0c0417b6918c]
+
+	* README.LDAP, config.h.in, configure, configure.in, ldap.c:
+	Add support for SASL auth when connecting to an LDAP server. Adapted
+	from a diff by Tom McLaughlin.
+	[a6285f1356ea]
+
+2007-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Only enable AIX or BSD auth if no other exclusive auth method has
+	been chosen. Allows people to e.g., use PAM on AIX without adding
+	--without-aixauth. A better solution is needed to deal with default
+	authentication since if a non-exclusive method is chosen we will
+	still get an error.
+	[83f7afdc0ec3]
+
+2007-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY, Makefile.in, history.pod:
+	Generate HISTORY from history.pod (which is also used for web pages)
+	[60bcd5164931]
+
+2007-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.man.in, sudoers.man.in:
+	regen
+	[63956a366191]
+
+	* sudo.pod:
+	Better explanation of environment handling in the sudo man page.
+	[6c247742f7ee]
+
+	* env.c, sudo.c:
+	Defer setting user-specified env vars until after authentication.
+	[4750b79323ee]
+
+	* env.c:
+	honor def_default_path for PATH set on the command line
+	[6db31d9b6d65]
+
+	* env.c, sudo.c, sudo.pod, sudoers.pod:
+	Allow user to set environment variables on the command line as long
+	as they are allowed by env_keep and env_check. Ie: apply the same
+	restrictions as normal environment variables. TODO: deal with
+	secure_path
+	[26c0da3840cf]
+
+2007-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, sudo_edit.c:
+	Call rebuild_env() in call cases. Pass original envp to sudo_edit().
+	Don't allow -E or env var setting in sudoedit mode. More accurate
+	usage() when called as sudoedit.
+	[a4af20658361]
+
+	* ldap.c:
+	warn -> warning
+	[d87d1192b048]
+
+	* sudo.pod:
+	add -c option to sudoedit synopsis
+	[15b596a7e2db]
+
+	* TODO:
+	udpate to reality
+	[e2f8fde89db1]
+
+	* parse.c:
+	Use ALLOW/DENY instead of TRUE/FALSE when dealing with the return
+	value from {user,host,runas,cmnd}_matches(). Rename *matches
+	variables -> *match. Purely cosmetic.
+	[e54a44c00a88]
+
+	* parse.c:
+	Move setting of FLAG_NO_CHECK into the if(pwflag) block. No change
+	in behavior.
+	[c6272b4f2127]
+
+	* sudoers:
+	add SETENV tag
+	[3a3066bb6788]
+
+2007-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Make pwcheck local to the pwflag block. Use pwcheck even if user
+	didn't match since Defaults options may still apply.
+	[45da9efbbafd]
+
+	* check.c, sudo.c:
+	Do not update timestamp if user not validated by sudoers.
+	[a4a9d4364827]
+
+	* set_perms.c:
+	for PERM_RUNAS, set the egid to the runas user's gid and restore to
+	the user's original in PERM_ROOT
+	[1514bfb32847]
+
+	* logging.c, mon_systrace.c, set_perms.c, sudo.h:
+	PERM_FULL_ROOT is now no different than PERM_ROOT so remove
+	PERM_FULL_ROOT
+	[b9d047a3178c]
+
+	* check.c:
+	don't check timestamp mtime if we are just going to remove it
+	[5d2470bc6cbd]
+
+	* sudoers.pod:
+	Move sudoers defaults parameters into their own section.
+	[54701fbc0ff3]
+
+	* testsudoers.c:
+	Reduce a level of indent by a few placed continue statements.
+	[5d5a9838c8ef]
+
+	* parse.c:
+	Make matching but negated commands/hosts/runas entries override a
+	previous match as expected. Also reduce some levels of indent by a
+	few placed continue statements.
+	[dd59fa4b91a1]
+
+2007-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Print default runas in "sudo -l" if sudoers don't specify one.
+	[07d408c400bd]
+
+	* match.c:
+	Less hacky way of testing whether the domain was set.
+	[a537059776e5]
+
+2007-07-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Mention pam-devel and openldap-devel for Linux
+	[9e708c54ecc3]
+
+2007-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	or vs. are
+	[abe8c0f3a410]
+
+2007-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	fix typo in Solaris project support
+	[2ffeb2d80959]
+
+	* HISTORY:
+	update
+	[df162b36f120]
+
+	* sudo.c:
+	Make -- on the command line match the manual page. The implied shell
+	case has been simplified as a result.
+	[cd217a1f6694]
+
+2007-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers2ldif:
+	add simplistic support for sudoRunas; note that if a sudoers entry
+	contains multiple Runas users, all will apply to the sudoRole
+	[65b11421f5c8]
+
+	* sudoers2ldif:
+	honor SETENV and NOSETENV tags
+	[2c0d5ba7a09b]
+
+2007-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	Redo setting of user_args. We now build up a private copy of argv
+	first and then replace the NULs with spaces.
+	[ccbba72ea112]
+
+	* mon_systrace.c:
+	getcwd() returns NULL on failure, not 0 on success
+	[88cd9e66e530]
+
+	* mon_systrace.c:
+	allow chunksiz to reach 1 before erroring out
+	[619d68f14964]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	regen
+	[8db512d3caf0]
+
+2007-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h, gram.y,
+	logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod, sudoers.pod,
+	toke.c, toke.l:
+	Add support for setting environment variables on the command line.
+	This is only allowed if the setenv sudoers options is enabled or if
+	the command is prefixed with the SETENV tag.
+	[5744caebd969]
+
+	* README.LDAP:
+	replace Aaron's email address with the sudo-workers list
+	[2ffce5f9afc0]
+
+	* configure:
+	regen
+	[8013dff82c0c]
+
+2007-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, README.LDAP:
+	Break schema out into separate files.
+	[1a53966ca1fa]
+
+	* schema.OpenLDAP, schema.iPlanet:
+	Break schema out into separate files.
+	[15e598e4c60b]
+
+2007-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/aix_auth.c:
+	free message if set by authenticate()
+	[849c220c1236]
+
+	* match.c:
+	deal with NULL gr_mem
+	[49e4d74f0bbe]
+
+2007-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	regen
+	[fead999ad3e9]
+
+	* configure.in:
+	add template for HAVE_PROJECT_H
+	[e6c42c2eaad1]
+
+	* closefrom.c:
+	include fcntl.h
+	[54d98b382f03]
+
+2007-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	mention --with-project
+	[d3ea3baad7c5]
+
+	* config.h.in, configure.in, sudo.c:
+	Add Solaris 10 "project" support. From Michael Brantley.
+	[f14f3c8c6554]
+
+	* sudoers.pod:
+	fix typo
+	[50db81a19787]
+
+	* configure:
+	regen
+	[ea71afd3e564]
+
+	* configure.in:
+	Fix preservation of LDFLAGS in the LDAP case.
+	[40a3a47e8059]
+
+	* memrchr.c:
+	Remove dependecy on NULL
+	[c957ae5e1733]
+
+	* configure:
+	regen
+	[4955ce0c6912]
+
+	* aclocal.m4, configure.in:
+	Can't use the regular autoconf fnmatch() check since we need
+	FNM_CASEFOLD so go back to our custom one.
+	[f10d76237486]
+
+	* env.c:
+	Fix preserving of variables in env_keep.
+	[d040049d6b84]
+
+	* env.c:
+	add XAUTHORIZATION
+	[0d589a5fe015]
+
+	* UPGRADE:
+	expand upon env resetting and mention that it began in 1.6.9 not
+	1.7.
+	[dba251655c76]
+
+	* sudoers.pod:
+	Update descriptions of env_keep and env_check to match current
+	reality.
+	[dba77357954b]
+
+2007-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Add LINGUAS to initial_checkenv_table. Add COLORS, HOSTNAME,
+	LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to intial_keepenv_table.
+	[eec4632bd190]
+
+	* env.c, logging.c:
+	Treat USERNAME environemnt variable like LOGNAME/USER
+	[09f52dcfd70c]
+
+	* env.c:
+	Don't need to populate keepenv table with the contents of the
+	checkenv table.
+	[527a14afd973]
+
+	* sudo.c:
+	Don't force sudo into the C locale.
+	[8a5bd301ef96]
+
+	* env.c:
+	Make env_check apply when env_reset it true. Environment variables
+	are passed through unless they contain '/' or '%'. There is no need
+	to have a variable in both env_check and env_keep.
+	[840c802721e4]
+
+2007-06-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Remove an duplicate lock_file() call and add a comment.
+	[5af9dcdf0eb6]
+
+	* UPGRADE:
+	Add sudo 1.6.9 upgrade note.
+	[1585149f2914]
+
+2007-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	Solaris will return EINVAL if the buffer used in SIOCGIFCONF is too
+	small. From Klaus Wagner.
+	[d6899fc44f77]
+
+	* logging.c, sudo.h:
+	Redo the long syslog line splitting based on a patch from Eygene
+	Ryabinkin. Include memrchr() for systems without it.
+	[66a50e8d553a]
+
+	* Makefile.in, config.h.in, configure, configure.in:
+	Redo the long syslog line splitting based on a patch from Eygene
+	Ryabinkin. Include memrchr() for systems without it.
+	[407a46190921]
+
+	* memrchr.c:
+	Redo the long syslog line splitting based on a patch from Eygene
+	Ryabinkin. Include memrchr() for systems without it.
+	[2f6702b7d41b]
+
+	* configure.in:
+	Since we need to be able to convert timespec to timeval for utimes()
+	the last 3 digits in the tv_nsec are not significant. This makes the
+	sudoedit file date comparison work again.
+	[9d0258849fa9]
+
+2007-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure, configure.in:
+	Add SUDO_ADD_AUTH macro to deal with adding things to AUTH_OBJS.
+	This deals with exclusive authentication methods in a simple way.
+	[7d70072c0f35]
+
+2007-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE:
+	mkstemp.c is BSD code too.
+	[29e236d98162]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	No commercial support for now.
+	[7c76b3e192dd]
+
+2007-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	cleanenv() is no more.
+	[518080514408]
+
+2007-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ChangeLog:
+	Display branch info in Changelog
+	[44e3b27427c7]
+
+	* utimes.c:
+	Include config.h early so we have it for TIME_WITH_SYS_TIME
+	[4bf1a00d0703]
+
+	* ChangeLog:
+	Fix Changelog generation and update.
+	[6e960dbcbece]
+
+2007-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* closefrom.c:
+	Use /proc/self/fd instead of /proc/$$/fd
+
+	Move old-style fd closing into closefrom_fallback() and call that if
+	/proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
+	[faa7e4810758]
+
+	* auth/kerb5.c, config.h.in, configure.in:
+	o use krb5_verify_user() if available instead of doing it by hand o
+	use krb5_init_secure_context() if we have it o pass an encryption
+	type of 0 to krb5_kt_read_service_key() instead of
+	ENCTYPE_DES_CBC_MD5 to let kerberos choose.
+	[df7acf72bd7c]
+
+	* env.c:
+	Check TERM and COLORTERM for '%' and '/' characters. From Debian.
+	[f92d05197e40]
+
+	* configure.in:
+	Fix closefrom() substitution in the Makefile
+	[b642b13fcc5c]
+
+	* TROUBLESHOOTING:
+	Mention alternate sudo pronunciation.
+	[7c71dc73409f]
+
+2007-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Remove KRB5_KTNAME from environment. Allow COLORTERM.
+	[70f35a79f780]
+
+	* auth/kerb5.c:
+	If we cannot get a valid service key using the default keytab it is
+	a fatal error. Fixes a bug where sudo could be tricked into allowing
+	access when it should not by a fake KDC. From Thor Lancelot Simon.
+	[a3ae6a47cb23]
+
+2007-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure, configure.in:
+	Update long long checks to use AC_CHECK_TYPES and to cache values.
+	[047318eaaeb2]
+
+	* aclocal.m4, configure.in:
+	Use AC_FUNC_FNMATCH instead of a homebrew fnmatch checker. We can't
+	use AC_REPLACE_FNMATCH since that assumes replacing with GNU
+	fnmatch.
+	[80513a1003ea]
+
+2007-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Add closefrom() to LIB_OBJS not SUDO_OBJS if it is missing since we
+	need it for visudo now too.
+	[50837c7c2b5e]
+
+2007-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Attempt to clarify the bit talking about network numbers w/o
+	netmasks.
+	[211e68c1d034]
+
+	* sudo.pod:
+	Clarify timestamp dir ownership sentence.
+	[9178f132c7f7]
+
+2007-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Linux PAM now defines __LINUX_PAM__, not __LIBPAM_VERSION. From
+	Dmitry V. Levin.
+	[81fce91667bc]
+
+2007-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	-i is also one of the mutually exclusive options to list it in the
+	warning message. Noted by Chris Pepper.
+	[7da73fb248e9]
+
+2007-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.pod:
+	The sudoers variable is env_editor, not enveditor. From Jean-
+	Francois Saucier.
+	[2a86ec09a6db]
+
+2007-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* redblack.c:
+	I tracked down the original author so credit him and include his
+	license info.
+	[3733553a1bba]
+
+2007-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
+	sudoers.pod:
+	Fix typos; from Jason McIntyre.
+	[1ee4ce2512f2]
+
+	* logging.c:
+	Restore signal mask before calling reapchild(). Fixes a possible
+	race condition that could prevent sudo from properly waiting for the
+	child.
+	[9ee4192385dc]
+
+2007-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c:
+	Don't declare pw_free() if we are not going to use it.
+	[adb79a4289ca]
+
+	* env.c:
+	Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD and
+	LDR_PRELOAD64. The 64-bit version is not currently supported. Remove
+	zero_env() prototype as it no longer exists.
+	[b4fe65027fb6]
+
+2006-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	Add "Auto-Submitted: auto-generated" line to sudo mail for rfc 3834.
+	[78002ad90f7b]
+
+2006-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	If the user enters ^C at the password prompt, abort instead of
+	trying to authenticate with an empty password (which causes an
+	annoying delay).
+	[da3f27b747c7]
+
+2006-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* closefrom.c, config.h.in, configure, configure.in:
+	Add fcntl F_CLOSEM support to closefrom(); adapted from a diff by
+	Darren Tucker.
+	[0331b7780759]
+
+	* pwutil.c:
+	pw_free() is only used by sudo_freepwcache() so ifdef it out too.
+	[0014c0d9eeba]
+
+2006-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.guess, config.sub:
+	Update to latest versions from cvs.savannah.gnu.org
+	[aa0143101c20]
+
+2006-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c, sudo_edit.c:
+	Move password/group cache cleaning out of sudo_end{pw,grp}ent() so
+	we can close the passwd/group files early.
+	[559074bd7eb7]
+
+	* config.h.in, configure, configure.in, set_perms.c:
+	Add seteuid() flavor of set_perms() for systems without setreuid()
+	or setresuid() that have a working seteuid(). Tested on Darwin.
+	[508d8da99189]
+
+2006-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	systrace_read() returns ssize_t
+	[9f97d1d1a59d]
+
+	* configure, configure.in:
+	Fix typo, -lldap vs. -ldap; from Tim Knox.
+	[a8cc43c3bb2a]
+
+2006-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY:
+	Fix typo; Matt Ackeret
+	[86964ee3dfbd]
+
+2006-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Print sudoers path in -V mode for root.
+	[dc43f2d75bd9]
+
+2006-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Do a sub tree search instead of a base search (one level in the tree
+	only) for sudo right objects. This allows system administrators to
+	categorize the rights in a tree to make them easier to manage.
+	[6d2d9abf996e]
+
+2005-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	fix typo
+	[1473413bcbda]
+
+2005-12-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Convert GET_OPT and GET_OPTI to use just 2 args. Add timelimit and
+	bind_timelimit support; adapted from gentoo.
+	[afc816093026]
+
+2005-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Support comments that start in the middle of a line
+	[c25df6ee3db8]
+
+	* configure, configure.in:
+	Define LDAP_DEPRECATED until we start using ldap_get_values_len()
+	[ee249bfe230a]
+
+2005-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* closefrom.c:
+	Silence gcc -Wsign-compare; djm@openbsd.org
+	[28769ce6418d]
+
+	* error.c, sudo.c, sudo.h, testsudoers.c, visudo.c:
+	cleanup() now takes an int as an arg so it can be used as a signal
+	handler too.
+	[2bb0df34d09c]
+
+	* sudo.c:
+	Make a copy of the shell field in the passwd struct for NewArgv to
+	avoid a use after free situation after sudo_endpwent() is called.
+	[5dcc9ffd362e]
+
+2005-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in:
+	Add mkstemp() for those poor souls without it.
+	[5fdd02e863e0]
+
+	* Makefile.in:
+	Add mkstemp() for those poor souls without it.
+	[9c1cf2678f24]
+
+	* mkstemp.c:
+	Add mkstemp() for those poor souls without it.
+	[c99401207860]
+
+2005-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Add PERL5DB to list of environment variables to remove.
+	[7375c27ecf75]
+
+2005-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c, mon_systrace.h:
+	Instead of calling the check function twice with a state cookie use
+	separate check/log functions.
+
+	Check more ioctl() calls for failure.
+
+	systrace_{read,write} now return the number of bytes read/written or
+	-1 on error.
+	[3dc8946d90e9]
+
+	* env.c:
+	Add more environment variables to remove; from gentoo linux Add some
+	comments about what bad env variables go to what (more to do)
+	[6918110a6b82]
+
+2005-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, sudo_edit.c:
+	Move sudo_end{gr,pw}ent() until just before the exec since they free
+	up our cached copy of the passwd structs, including sudo_user and
+	sudo_runas. Fixes a use-after-free bug.
+	[54de3778bad0]
+
+	* visudo.c:
+	Close all fd's before executing editor.
+	[4fcc05e1bec8]
+
+	* sudo.c:
+	Enable malloc debugging on OpenBSD when SUDO_DEVEL is set.
+	[ef0e8ffa5c9f]
+
+	* check.c:
+	Fix fd leak when lecture file option is enabled. From Jerry Brown
+	[ce97f9207cd8]
+
+2005-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
+	environment variables to remove. From Charles Morris
+	[c96e1367d1c1]
+
+2005-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
+	[72a6a1571226]
+
+2005-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	add PS4 and SHELLOPTS to initial_badenv_table for bash
+	[89dfb3f318f3]
+
+2005-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Fix typo; Toby Peterson
+	[b7a3222b23f4]
+
+2005-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tsgetgrpw.c:
+	Make return buffers static so they don't get clobbered
+	[13323a39b9f5]
+
+2005-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/securid5.c:
+	Fix securid5 authentication, was not checking for ACM_OK. Also add
+	default cases for the two switch()es. Problem noted by ccon at
+	worldbank
+	[14091e418333]
+
+2005-06-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Remove ncat() in favor of just counting bytes and pre-allocating
+	what is needed.
+	[25b8712adb61]
+
+2005-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Fix up some comments Add missing fclose() for the rootbinddn case
+	[ae95c8a89711]
+
+	* ldap.c:
+	align struct ldap_config
+	[35d0d64c76f8]
+
+	* ldap.c:
+	use LINE_MAX for max conf file line size
+	[da116cb8853d]
+
+	* pathnames.h.in:
+	add _PATH_LDAP_SECRET
+	[128b04ecfab7]
+
+	* README.LDAP:
+	Mention rootbinddn Give example ou=SUDOers container
+	[852edc69bd1c]
+
+2005-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, configure, configure.in, ldap.c:
+	Support rootbinddn in ldap.conf
+	[1615c91522a1]
+
+	* env.c, sudo.pod, sudoers.pod:
+	Preserve DISPLAY environment variable by default.
+	[05f503d5f438]
+
+	* acsite.m4, configure:
+	set need_lib_prefix=no for all cases; this is safe for LD_PRELOAD
+	[18a04dea8d05]
+
+	* acsite.m4, configure:
+	set need_version=no for all cases; this is safe for LD_PRELOAD
+	[b542560e1a73]
+
+	* aclocal.m4:
+	typo
+	[c040df0fcd5a]
+
+	* configure, configure.in:
+	Add dragonfly
+	[f13794618636]
+
+	* auth/pam.c:
+	Fix call to pam_end() when pam_open_session() fails.
+	[0be47cdfdef1]
+
+	* configure:
+	regen
+	[7f5c13b4b800]
+
+	* acsite.m4:
+	rebuild acsite.m4 from libtool 1.9f libtool.m4 ltoptions.m4
+	ltsugar.m4 ltversion.m4
+	[a7ba9fd1a2ab]
+
+	* config.guess, config.sub, ltmain.sh:
+	merge in local changes: config.guess: o better openbsd support
+	config.sub: o hiuxmpp support ltmain.sh o remove requirement that
+	libs must begin with "lib" o don't print a bunch of crap about
+	library installs o don't run ldconfig
+	[f4149f2c720f]
+
+	* config.guess, config.sub, ltmain.sh:
+	libtool 1.9f
+	[82a534e7121f]
+
+	* configure.in:
+	Update with autoupdate and make minor changes for libtool 1.9f
+	[11b5ae5c1428]
+
+2005-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	don't call sudo_ldap_display_cmnd if ldap not setup
+	[8bcf6c094ffe]
+
+	* check.c, compat.h:
+	Move declatation of struct timespec to its own include files for
+	systems without it since it needs time_t defined.
+	[2ef2ace8fe85]
+
+	* emul/timespec.h:
+	Move declatation of struct timespec to its own include files for
+	systems without it since it needs time_t defined.
+	[f95137771564]
+
+	* fileops.c:
+	Move declatation of struct timespec to its own include files for
+	systems without it since it needs time_t defined.
+	[dd8573b2ee7d]
+
+	* gettime.c:
+	Move declatation of struct timespec to its own include files for
+	systems without it since it needs time_t defined.
+	[021b4569cc0c]
+
+	* sudo_edit.c, visudo.c:
+	Move declatation of struct timespec to its own include files for
+	systems without it since it needs time_t defined.
+	[b95c333299a0]
+
+	* ldap.c:
+	Don't set safe_cmnd for the "sudo ALL" case.
+	[ad7fa9e07da0]
+
+2005-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Call pam_open_session() and pam_close_session() to give pam_limits a
+	chance to run. Idea from Karel Zak.
+	[fed46d471350]
+
+2005-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, sudo.c:
+	Add explicit cast from mode_t -> u_int in printf to silence warnings
+	on Solaris
+	[17bb961fe22d]
+
+	* parse.c:
+	include grp.h to silence a warning on Solaris
+	[14386fbab640]
+
+2005-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Fix printing of += and -= defaults.
+	[a667604c56cd]
+
+2005-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	Sanity check number of syscall args with argsize. Not really needed
+	but a little paranoia never hurts.
+	[6bb455a2c2d6]
+
+	* mon_systrace.c, mon_systrace.h:
+	Don't do pointer arithmetic on void * Use int, not size_t/ssize_t
+	for systrace lengths (since it uses int)
+	[3cafccffcffd]
+
+2005-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	Add some memsets for paranoia Fix namespace collsion w/ error Check
+	rval of decode_args() and update_env() Remove improper setting of
+	validated variable
+	[3d385158354d]
+
+2005-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c, sudo.c, sudo.h:
+	In -l mode, only check local sudoers file if def_ignore_sudoers is
+	not set and call LDAP versions from display_privs() and
+	display_cmnd() instead of directly from main(). Because of this we
+	need to defer closing the ldap connection until after -l processing
+	has ocurred and we must pass in the ldap pointer to display_privs()
+	and display_cmnd().
+	[1dfc2e8c9f2b]
+
+	* ldap.c:
+	Reorganize LDAP code to better match normal sudoers parsing. Instead
+	of storing strings for later printing in -l mode we do another query
+	since the authenticating user and the user being listed may not be
+	the same (the new -U flag). Also add support for "sudo -l command".
+
+	There is still a fair bit if duplicated code that can probably be
+	refactored.
+	[e9568f19bde5]
+
+2005-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Replace pass variable with do_netgr for better readability.
+	[1bba841b6e79]
+
+	* ldap.c:
+	use DPRINTF macro
+	[02b159b66bb5]
+
+	* ldap.c:
+	estrdup, not strdup
+	[22cdee7973c1]
+
+2005-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Add macro to test if the tag changed to improve readability.
+	[4e11b4819556]
+
+	* parse.c:
+	Avoid printing defaults header if there are no defaults to print...
+	[41a28627df03]
+
+	* glob.c:
+	Fix a warning on systems without strlcpy().
+	[6814e0f0e4f4]
+
+	* pwutil.c:
+	Use macros where possible for sudo_grdup() like sudo_pwdup().
+	[30f201ff35cd]
+
+2005-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* utimes.c:
+	It is possible for tv_usec to hold >= 1000000 usecs so add in
+	tv_usec / 1000000.
+	[794ac4d53a65]
+
+2005-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	The component in krb5_principal_get_comp_string() should be 1, not 0
+	for Heimdal. From Alex Plotnick.
+	[fefa351c5044]
+
+2005-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c, gram.y,
+	interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c, pwutil.c,
+	redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
+	Add efree() for consistency with emalloc() et al. Allows us to rely
+	on C89 behavior (free(NULL) is valid) even on K&R.
+	[7876bb80d87c]
+
+	* parse.c, sudo.c:
+	Move initgroups() for -U option into display_privs() so group
+	matching in sudoers works correctly.
+	[b074428ad2ca]
+
+2005-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Removed duplicate call to ldap_unbind_s introduced along with
+	sudo_ldap_close.
+	[19acc1c20f7c]
+
+	* parse.c:
+	Add missing space in Defaults printing
+	[95d2935bf6d4]
+
+2005-03-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c:
+	Sync sudo_pwdup with OpenBSD changes: use macros for size computaton
+	and string copies.
+	[6b6b241495e5]
+
+2005-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c:
+	Zero old pw_passwd before replacing with version from shadow file.
+	[3251b349dfe1]
+
+	* configure, configure.in:
+	Only attempt shadow password detection if PAM is not being used Add
+	shadow_* variables to make shadow password detection more generic.
+	[d498a3423ac9]
+
+	* configure.in:
+	Use OSDEFS for os-specific -D_FOO_BAR stuff rather than CPPFLAGS
+	[04d55bbd5e35]
+
+2005-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	use a non-breaking space to avoid a double space after e.g.
+	[11cdb54bdf7b]
+
+	* sudo.pod:
+	commna, not colon after e.g.
+	[8d5875ff72e0]
+
+2005-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_noexec.c:
+	Add __ variants of the exec functions. GNU libc at least uses
+	__execve() internally.
+	[d1880473d790]
+
+	* indent.pro:
+	Match reality a bit more.
+	[633e3fa875a7]
+
+	* pwutil.c:
+	Missed piece from rev. 1.6, fix sudo_getpwnam() too.
+	[128f7b21c2ee]
+
+	* pwutil.c:
+	Store shadow password after making a local copy of struct passwd in
+	case normal and shadow routines use the same internal buffer in
+	libc.
+	[f806052a6ffc]
+
+2005-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* alloc.c, logging.c:
+	Make varargs usage consistent with the rest of the code.
+	[3d45affc9851]
+
+2005-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_noexec.c:
+	Wrap more of the exec family since on Linux the others do not appear
+	to go through the normal execve() path.
+	[8167769b4e19]
+
+	* visudo.c:
+	make print_unused static like proto says
+	[ecf10e1bae55]
+
+	* glob.c:
+	silence a warning on K&R systems
+	[2e00425f1a5c]
+
+	* alias.c, error.c:
+	make this build in K&R land
+	[156f65f8525a]
+
+	* parse.c:
+	make this build in K&R land
+	[6fc9276889cb]
+
+2005-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c:
+	regen
+	[3b349748cd21]
+
+2005-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	return(foo) not return foo optimize _atobool() slightly
+	[11d09d154ed5]
+
+	* ldap.c:
+	Use TRUE/FALSE
+	[53999320d98f]
+
+	* ldap.c:
+	Reformat to match the rest of sudo's code.
+	[1bd0f2afa0e7]
+
+	* sudo.pod:
+	I am the primary author
+	[5d311ecd85c6]
+
+2005-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, README, RUNSON:
+	The RUNSON file is toast--it confused too many people and really
+	isn't needed in a configure-oriented world.
+	[96a6ef7bbc08]
+
+	* INSTALL:
+	alternate -> alternative
+	[b65015c5d0a2]
+
+	* tgetpass.c:
+	Use TCSADRAIN instead of TCSAFLUSH since some OSes have issues with
+	TCSAFLUSH.
+	[c66b4763ffdc]
+
+	* toke.l:
+	Allow leading blanks before Defaults and Foo_Alias definitions
+	[2add513d9277]
+
+	* Makefile.in:
+	fix rules to build toke.o and gram.o in devel mode
+	[96cbb414ebd3]
+
+2005-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	env_keep overrides set_logname
+	[401877193a15]
+
+	* env.c:
+	Fix disabling set_logname and make env_keep override set_logname.
+	[0906e7a5ed93]
+
+	* compat.h, config.h.in, configure, configure.in:
+	No longer need memmove()
+	[43bdb6efe3f2]
+
+	* env.c, sudo.c:
+	Just clean the environment once. This assumes that any further
+	setenv/putenv will be able to handle the fact that we replaced
+	environ with our own malloc'd copy but all the implementations I've
+	checked do.
+	[11658fe92ba2]
+
+2005-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c, sudo.c:
+	In -i mode, base the value of insert_env()'s dupcheck flag on
+	DID_FOO flags. Move checks for $HOME resetting into rebuild_env()
+	[8365b0bd0c71]
+
+2005-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c, sudo.c:
+	Move setting of user_path, user_shell, user_prompt and prev_user
+	into init_vars() since user_shell at least is needed there.
+	[37e22dce66e9]
+
+2005-02-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	fix devel builds
+	[9fbb15ef164c]
+
+	* sudo.c:
+	Fix some printf format mismatches on error.
+	[ffc1c3f11740]
+
+	* check.c:
+	Fix some printf format mismatches on error.
+	[7b3b508adf50]
+
+	* configure, gram.c, toke.c:
+	regen
+	[aa76f9d8b02a]
+
+	* Makefile.in, aclocal.m4, alias.c, alloc.c, auth/afs.c,
+	auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
+	auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
+	auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c,
+	auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c,
+	closefrom.c, compat.h, configure.in, defaults.c, defaults.h,
+	emul/utime.h, env.c, error.c, fileops.c, find_path.c, getprogname.c,
+	getspwuid.c, gettime.c, goodpath.c, gram.y, interfaces.c,
+	interfaces.h, ldap.c, logging.c, logging.h, match.c, mon_systrace.c,
+	parse.c, redblack.c, redblack.h, set_perms.c, sigaction.c,
+	snprintf.c, strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
+	sudo.h, sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.pod,
+	testsudoers.c, tgetpass.c, toke.l, utimes.c, version.h, visudo.c,
+	visudo.pod, zero_bytes.c:
+	Update copyright years.
+	[0610c3654739]
+
+	* LICENSE:
+	Update copyright years.
+	[f60473bca4b1]
+
+	* Makefile.binary.in:
+	Update copyright years.
+	[d78ffc9f2e2b]
+
+	* BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
+	version 1.7
+	[aa977a544ca1]
+
+	* WHATSNEW:
+	What's new in sudo 1.7, based on the 1.7 CHANGES entries.
+	[ecfcf7269c14]
+
+2005-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h, logging.h, sudo.h:
+	Add __printflike and use it with gcc to warn about printf-like
+	format mismatches
+	[b192ad4a0548]
+
+2005-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, ChangeLog:
+	Replaced CHANGES file with ChangeLog generated from cvs logs
+	[d9ace9dab98f]
+
+	* set_perms.c:
+	Use warning/error instead of perror/fatal.
+	[e33259df7738]
+
+	* config.guess:
+	Update OpenBSD section
+	[9d2c23de6801]
+
+	* UPGRADE:
+	Add upgrading noted for 1.7
+	[1fb6b6d6df07]
+
+	* env.c, sudo.c, sudoers.pod:
+	Instead of zeroing out the environment, just prune out entries based
+	on the env_delete and env_check lists. Base building up the new
+	environment on the current environment and the variables we removed
+	initially.
+	[fc192df8fd15]
+
+	* config.h.in, configure, configure.in, sudo.c:
+	Set locale to "C" if locales are supported, just to be safe.
+	[91fbaa98f02e]
+
+	* toke.c, toke.l:
+	Cast argument to ctype functions to unsigned char.
+	[e096b4d65796]
+
+2005-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	correct value for DID_USER
+	[b5b05d36ec15]
+
+	* error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c:
+	#include <compat.h> not "compat.h"
+	[7a0ad9a0ccd7]
+
+	* defaults.c:
+	Reset the environment by default.
+	[4ecc6423e0f0]
+
+	* sudo.c:
+	Alloc an extra slot in NewArgv. Removes the need to malloc an new
+	vector if execve() fails.
+	[83dfb6f584a7]
+
+2005-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, config.h.in, configure, configure.in, sudo.c:
+	Use execve(2) and wrap the command in sh if we get ENOEXEC.
+	[c0c6af4e2a21]
+
+2005-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_noexec.c:
+	Only include time.h on systems that lack struct timespec which gets
+	defind in compat.h (using time_t).
+	[e373e518b4cb]
+
+	* sudo_noexec.c:
+	Include time.h for time_t in compat.h for systems w/o struct
+	timespec.
+	[a34b5637e458]
+
+	* compat.h, config.h.in, configure, configure.in:
+	use bcopy on systems w/o memmove
+	[f835eafd78c6]
+
+	* compat.h:
+	__attribute__((__unused__)) doesn't work in gcc 2.7.2.1 so limit its
+	use to gcc >= 2.8.
+	[1cb9a4e58566]
+
+	* Makefile.in:
+	Add explicit rule to build sudo_noexec.lo
+	[df1dfcf8dd77]
+
+2005-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL.configure, Makefile.in:
+	No longer depend on VPATH; pointed out a bunch of missed
+	dependencies.
+	[601a45d4af6b]
+
+	* TROUBLESHOOTING:
+	Help for PAM when account section is missing
+	[9b8221256756]
+
+	* auth/pam.c:
+	Give user a clue when there is a missing "account" section in the
+	PAM config.
+	[2529625c0495]
+
+	* auth/pam.c:
+	Better error handling.
+	[518c9bda23d8]
+
+	* config.h.in, configure, configure.in:
+	Move _FOO_SOURCE to CPPFLAGS so it takes effect as early as
+	possible. Silences a warning about isblank() on linux.
+	[19c94d7ecdc8]
+
+	* auth/pam.c:
+	Fix typo (missing comma) that caused an incorrect number of args to
+	be passed to log_error().
+	[0099dfec560f]
+
+2005-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c:
+	Don't try to destroy a tree we didn't create.
+	[d43c4fe03aa4]
+
+2005-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
+	auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
+	auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
+	auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c,
+	compat.h, defaults.c, env.c, error.c, fileops.c, find_path.c,
+	fnmatch.c, getcwd.c, getprogname.c, getspwuid.c, gettime.c,
+	goodpath.c, gram.c, gram.y, interfaces.c, ldap.c, logging.c,
+	match.c, mon_systrace.c, parse.c, pwutil.c, set_perms.c,
+	sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c,
+	strlcpy.c, sudo.c, sudo_edit.c, sudo_noexec.c, testsudoers.c,
+	tgetpass.c, toke.c, toke.l, utimes.c, visudo.c, zero_bytes.c:
+	Add __unused to rcsids
+	[ad6b4ac45705]
+
+2005-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix error message when mixing invalid auth types
+	[68069b3ff5bc]
+
+	* INSTALL:
+	PAM, AIX auth, BSD auth and login_cap are now on by default if the
+	OS supports them.
+	[4e44e9098cf0]
+
+	* auth/sudo_auth.h, config.h.in:
+	s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
+	[2d569b43b23e]
+
+	* configure.in:
+	Better checking for conflicting authentication methods Display the
+	authentication methods used at the end of configure Rename --with-
+	authenticate -> --with-aixauth Use --with-aixauth, --with-bsdauth,
+	--with-pam, --with-logincap by default on systems that support them
+	unless disabled. Add OSMAJOR variable that replaces old OSREV; now
+	OSREV has full version number
+	[a21115b6fe9f]
+
+2005-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.in, sudo.c, sudoers.pod:
+	s/-O/-C/
+	[ee73f1b81923]
+
+2005-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	Replace: test -n "$FOO" || FOO="bar"
+
+	With: : ${FOO='bar'}
+	[37552d9054fc]
+
+2005-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* pwutil.c, testsudoers.c, tsgetgrpw.c:
+	Use function pointers to only call private passwd/group routines
+	when using a nonstandard passwd/group file.
+	[215908681dfb]
+
+2005-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	sync
+	[2e55c03f5790]
+
+	* tsgetgrpw.c:
+	Can't use strtok() since it doesn't handle empty fields so add
+	getpwent()/getgrent() functions and call those.
+	[bdaa5b0db70e]
+
+2005-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Fix dummied out toke.c and gram.c dependencies.
+	[4b909c8b2ebe]
+
+	* Makefile.in:
+	Rename PARSESRCS -> GENERATED since it is only used in the clean
+	target Add devdir variable and use it to specify the path to parser
+	sources
+	[f27b3f41ca23]
+
+	* configure:
+	regen
+	[22c6435dbd46]
+
+	* configure.in:
+	Add a devdir variables that defaults to $(srcdir) and is set to . if
+	--devel was specified. Allows for proper dependecies building the
+	parser.
+	[a36d694c6d21]
+
+	* testsudoers.c:
+	Add support for custom passwd/group files.
+	[296549ff4b87]
+
+	* Makefile.in:
+	Build private copy of pwutil.o for testsudoers with MYPW defined so
+	it uses our own passwd/group routines.
+	[bafa54ec78ca]
+
+	* visudo.c:
+	Remove sudo_*{pw,gr}* stubs and add sudo_setspent/sudo_endspent
+	stubs instead. We can now just use the caching sudo_*{pw,gr}*
+	functions in pwutil.c Add comment about wanting to call
+	sudo_endpwent/sudo_endgrent in cleanup()
+	[7e59d6b5510d]
+
+	* tsgetgrpw.c:
+	Remove caching; we will just use what is in pwutil.c Use global
+	buffers for passwd/group structs Rename functions from sudo_* to
+	my_*
+	[8c1e068f574c]
+
+	* logging.c, sudo.c:
+	g/c pwcache_init/pwcache_destroy
+	[60a24909b947]
+
+	* sudo.h:
+	Undo last commit and add sudo_setspent and sudo_endspent instead.
+	[bac80db08296]
+
+	* getspwuid.c, pwutil.c:
+	Move all but the shadow stuff from getspwuid.c to pwutil.c and
+	pwcache_get and pwcache_put as they are no longer needed. Also add
+	preprocessor magic to use private versions of the passwd and group
+	routines if MYPW is defined (for use by testsudoers).
+	[a16b8678a426]
+
+	* tsgetgrpw.c:
+	zero out struct passwd/group before filling it in so if there are
+	fields we don't handle they end up as 0.
+	[274cb6a93301]
+
+	* logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c:
+	Adapt to pwutil.c
+	[43ebd04c8b82]
+
+	* Makefile.in:
+	Add tsgetgrpw.c and pwutil.c Rename the *OBJ variables for better
+	readability.
+	[7f88c6061e2d]
+
+	* tsgetgrpw.c:
+	Passwd and group lookup routines for testsudoers that support
+	alternate passwd and group files.
+	[d7803101d34e]
+
+	* getspwuid.c, pwutil.c:
+	Split off pw/gr cache and dup code into its own file. This allows
+	visudo and testsudoers to use the pw/gr cache too.
+	[ef333d3ffedf]
+
+2005-01-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Print Defaults info in "sudo -l" output and wrap lines based on the
+	terminal width.
+	[e559eae4250e]
+
+2005-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c, testsudoers.c, visudo.c:
+	Only check group vector in usergr_matches() if we are matching the
+	invoking or list user. Always check the group members, even if there
+	was a group vector.
+	[d0c7ceb2a041]
+
+2004-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE, Makefile.in, fnmatch.3:
+	No longer bundle fnmatch.3
+	[72db4a4ff4e1]
+
+	* CHANGES, TODO:
+	checkpoint
+	[e92781bfd99c]
+
+2004-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	sort usage
+	[15e3b876ec2c]
+
+	* sudo.pod:
+	Sort command line options
+	[c1fa56584bc4]
+
+	* def_data.c, def_data.h, def_data.in, defaults.c, logging.c, sudo.c,
+	sudo.pod, sudoers.pod:
+	Add closefrom sudoers option to start closing at a point other than
+	3. Add closefrom_override sudoers option and -C sudo flag to allow
+	the user to specify a different closefrom starting point.
+	[370652b099d1]
+
+	* pathnames.h.in:
+	Add _PATH_DEVNULL for those without it.
+	[0c4c3e0ceb8b]
+
+	* LICENSE:
+	no more UCB strcasecmp
+	[397a6298e07f]
+
+	* strcasecmp.c:
+	replace BSD licensed one with version derived from pdksh
+	[d7cfda8c57a2]
+
+2004-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Fix last commit.
+	[7afb9a180532]
+
+	* sudo.c:
+	Make sure stdin, stdout and stderr are open and dup them to
+	/dev/null if not.
+	[590f387068bd]
+
+2004-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c, mon_systrace.c, sudo.c, sudo.h:
+	add sudo_ldap_close
+	[4273a36765a7]
+
+	* fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
+	Use TIME_WITH_SYS_TIME
+	[c32b59bf15fb]
+
+	* config.h.in, configure, configure.in:
+	Add TIME_WITH_SYS_TIME_H
+	[57cb146f451d]
+
+2004-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE being set
+	unconditionally on darwin. From Toby Peterson.
+	[d69959681c87]
+
+	* getspwuid.c:
+	Check rbinsert() return value. In the case of faked up entries there
+	is usually a negative response cached that we need to overwrite.
+
+	In pwfree() don't try to zero out a NULL pw_passwd pointer.
+	[00b32d1a48c1]
+
+	* mon_systrace.c:
+	Use the double fork trick to avoid the monitor process being waited
+	for by the main program run through sudo.
+	[e0ce556712ff]
+
+2004-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Call initgroups() in -U mode so group matches work normally.
+	[2235bea15283]
+
+	* def_data.h, mkdefaults:
+	Don't print a trailing comma for the last entry in enum def_tupple
+	[c43a96bb31df]
+
+2004-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	Mention values when lecture, listpw and verifypw are used in boolean
+	context.
+	[a0b5c0abaccf]
+
+	* def_data.c, def_data.in:
+	verifypw when used in a boolean TRUE context should be "all", not
+	"any".
+	[2eb076ddd5e2]
+
+2004-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.in, defaults.c:
+	Allow tuples that can be used as booleans to be used as boolean
+	TRUE. In this case the 2nd possible value of the tuple is used for
+	TRUE.
+	[bd99aa77e88b]
+
+2004-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Correct the test for 2-parameter timespecsub
+	[d41c9cb26b97]
+
+	* sudo.h:
+	Add strub struct definitions for passwd, timeval and timespec
+	[c4ce5c43d8c5]
+
+	* config.h.in, configure, configure.in, sudo_edit.c, visudo.c:
+	Add check for 2-argument form of timespecsub (FreeBSD and BSD/OS)
+	and fix a typo in the gettimeofday check.
+	[8ac9893057ce]
+
+2004-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c, testsudoers.c:
+	Deal with user_stat being NULL as it is for visudo and testsudoers.
+	[3605a6ff64d0]
+
+	* parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod:
+	Add -U option to use in conjunction with -l instead of -u. Add
+	support for "sudo -l command" to test a specific command.
+	[99638789d415]
+
+	* gram.c, gram.y, sudo.c:
+	Set safe_cmnd after sudoers_lookup() if it has not been set.
+	Previously it was set by sudo "ALL" in the parser but at that point
+	the fully-qualified pathname has not yet been found.
+	[ac30d98f8225]
+
+2004-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c, testsudoers.c:
+	Correctly handle multiple privileges per userspec and runas
+	inheritence.
+	[a98a965181af]
+
+2004-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c:
+	Zero out sd_un for each entry in sudo_defs_table in init_defaults.
+	[031d3cd4a848]
+
+2004-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* toke.c, toke.l:
+	make per-command defaults work with sudoedit
+	[e56fe33db916]
+
+	* ldap.c, parse.c, sudo.c, sudo.h:
+	Remove the FLAG_NOPASS, FLAG_NOEXEC and FLAG_MONITOR flags. Instead,
+	we just set the approriate defaults variable.
+	[756eeecc1d86]
+
+	* sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
+	Document per-command Defaults.
+	[92a0f84b91c1]
+
+	* defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
+	sudo.c, testsudoers.c, toke.c, toke.l, visudo.c:
+	Add support for command-specific Defaults entries. E.g.
+	Defaults!/usr/bin/vi noexec
+	[be3d52bf01cf]
+
+	* defaults.c, match.c, parse.c, parse.h, testsudoers.c:
+	Change an occurence of user_matches() -> runas_matches() missed
+	previously runas_matches(), host_matches() and cmnd_matches() only
+	really need to pass in a list of members. user_matches() still needs
+	to pass in a passwd struct because of "sudo -l"
+	[833b22fc6fa0]
+
+	* parse.c:
+	Check def_authenticate, def_noexec and def_monitor when setting
+	return flags. XXX May be better to just set the defaults directly
+	and get rid of those flags.
+	[b6db22b59d69]
+
+	* alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
+	auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
+	auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
+	auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c,
+	defaults.c, env.c, error.c, fileops.c, find_path.c, fnmatch.c,
+	getcwd.c, getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
+	gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
+	mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
+	strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo_edit.c,
+	sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c, toke.l, utimes.c,
+	visudo.c, zero_bytes.c:
+	Use: #include <config.h> Not: #include "config.h" That way we get
+	the correct config.h when build dir != src dir
+	[97e5670a442b]
+
+	* Makefile.in:
+	Back out part of rev 1.263; fix -I order
+	[197ea01cad5d]
+
+	* toke.c, toke.l:
+	More robust parsing if #include; could be much better still.
+	[31bc3cd8f045]
+
+	* sudo_edit.c, visudo.c:
+	Make arg splitting in visudo and sudoedit consistent.
+	[7bc74485f246]
+
+	* Makefile.in, alias.c, gram.c, gram.y, parse.h:
+	Split alias routines out into their own file.
+	[d90f633cf9ae]
+
+	* error.h:
+	__attribute__ is already defined in compat.h
+	[676ed3fe9203]
+
+	* visudo.c:
+	quit() should not be __noreturn__ as it is non-void on some
+	platforms.
+	[e528c2b6ba10]
+
+	* auth/fwtk.c, auth/rfc1938.c, auth/securid.c, auth/securid5.c:
+	Add local error/warning functions like err/warn but that call an
+	additional cleanup routine in the error case. This means we no
+	longer need to compile a special version of alloc.o for visudo.
+	[e78e8aae882e]
+
+	* parse.h:
+	Clarify comments about the data structures
+	[ae894e266701]
+
+2004-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Add support for VISUAL and EDITOR containing command line args. If
+	env_editor is not set any args in VISUAL and EDITOR are ignored.
+	Arguments are also now supported in def_editor.
+	[ff7303b8e298]
+
+2004-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.h:
+	alias_matches() is no more
+	[b59825e28084]
+
+	* CHANGES, TODO:
+	sync
+	[2b8f5f63c1de]
+
+	* Makefile.in:
+	When regenerating the parser, don't replace gram.h unless it has
+	changed.
+	[819949668018]
+
+	* Makefile.in:
+	remove Makefile.binary for distclean
+	[351eec8d00b2]
+
+	* env.c:
+	Preserve KRB5CCNAME in zero_env() and add a paranoia check to make
+	sure we can't overflow new_env.
+	[3284d17b9c6d]
+
+	* sudo_edit.c:
+	paranoia when stripping trailing slashes from tempdir.
+	[012f1aa2b81f]
+
+	* sudo.c:
+	Set user_ngroups to 0 if getgroups() returns an error.
+	[c46d43e9449a]
+
+2004-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, sudo.c:
+	Add configure check for getgroups()
+	[5d8a214e2cef]
+
+	* ldap.c:
+	Use supplementary group vector in struct sudo_user.
+	[3d0c463c034d]
+
+	* match.c:
+	Only do string comparisons on the group members if there is no
+	supplemental group list.
+	[be1c8362f7ef]
+
+	* CHANGES, TODO:
+	sync
+	[db188bc5b975]
+
+	* sudo_edit.c:
+	On Digital UNIX _PATH_VAR_TMP doesn't end with a trailing slash so
+	chop off any trailing slashes we see and add an explicit one.
+	[e1b477dafee1]
+
+	* match.c:
+	remove bogus XXX comment
+	[8aecb8a28d40]
+
+	* match.c:
+	Get rid of alias_matches and correctly fall through to the non-alias
+	cases when there is no alias with the specified name.
+	[2cd555246f09]
+
+	* getspwuid.c:
+	Cache non-existent passwd/group entries too.
+	[8de9a467d271]
+
+	* gram.c:
+	regen
+	[9ece18c58f36]
+
+	* getspwuid.c:
+	fix typo
+	[9a7ae371eac1]
+
+	* check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
+	mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
+	Implement group caching and use the passwd and group caches
+	throughout.
+	[f1d8c5015169]
+
+2004-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* match.c:
+	Properly negate the return value of alias_matches() when
+	appropriate.
+	[ce59c4ce77ad]
+
+	* match.c:
+	Make hostname_matches() return TRUE for a match, else FALSE like the
+	caller expects.
+	[1dc03902d3a2]
+
+	* Makefile.in:
+	Add missing dependencies on gram.h
+	[4f94bbb1d50c]
+
+	* match.c:
+	Use runas_matches in alias_matches() now that we have it.
+	[284d22e91178]
+
+	* parse.c, parse.h:
+	Expand aliases in "sudo -l" mode
+	[f67a38b79c44]
+
+	* gram.y, match.c:
+	Use ALIAS for the member type when storing an alias instead of
+	HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since match.c relies on the
+	more generic type. Expand runas_matches instead of calling
+	user_matches() inside of it since user_matches() looks up
+	USERALIASes, not RUNASALIASes.
+	[52004d75232b]
+
+	* CHANGES, getspwuid.c:
+	Paranoia; zero out pw_passwd before freeing passwd entry.
+	[bd1b22638f00]
+
+	* LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
+	configure.in, defaults.c, emul/err.h, env.c, err.c, error.c,
+	error.h, find_path.c, interfaces.c, logging.c, mon_systrace.c,
+	sudo.c, sudo.h, sudo_edit.c, testsudoers.c, visudo.c:
+	Add local error/warning functions like err/warn but that call an
+	additional cleanup routine in the error case. This means we no
+	longer need to compile a special version of alloc.o for visudo.
+	[25000b676cfe]
+
+	* match.c:
+	Use userpw_matches() to compare usernames, not strcmp(), since the
+	latter checks for "#uid".
+	[fcbe4b859f66]
+
+	* getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c:
+	Cache passwd db entries in 2 reb-black trees; one indexed by uid,
+	the other by user name. The data returned from the cache should be
+	considered read-only and is destroyed by sudo_endpwent().
+	[ee2418ff3f86]
+
+	* match.c:
+	add cast to uid_t
+	[eb6415302d84]
+
+	* gram.y:
+	missing free in alias_destroy
+	[572ecb680ad8]
+
+	* redblack.c:
+	Can't use rbapply() for rbdestroy since the destructor is passed a
+	data pointer, not a node pointer.
+	[11ce713830c0]
+
+	* getspwuid.c, logging.c, sudo.c, sudo.h:
+	Create and use private versions of setpwent() and endpwent() that
+	set/end the shadow password file too.
+	[616bc76d23bf]
+
+	* gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c, visudo.c:
+	Store aliases in a red-black tree.
+	[ce017d540416]
+
+	* Makefile.in, redblack.c, redblack.h:
+	red-black tree implementation
+	[cd5586e8f48b]
+
+	* visudo.c:
+	Edit all sudoers file if there were unused or undefined aliases and
+	we are in strict mode.
+	[b6d5f5bb7262]
+
+2004-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
+	find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
+	Bring back the "secure_path" Defaults option now that Defaults take
+	effect before the path is searched.
+	[2e52c0e27606]
+
+2004-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c, parse.c:
+	A user can always list their own entries, even with -u. Better error
+	message when failing to list another user's entries.
+	[e2e24deb0071]
+
+	* parse.c, sudo.c, sudo.h:
+	The syntax to list another user's entries is now "-u otheruser -l".
+	Only root or users with sudo "ALL" may list other user's entries.
+	[3c0657e8f5fe]
+
+	* sudo.cat, sudo.man.in, sudo.pod:
+	Update env variable info in SECURITY NOTES
+	[299716071024]
+
+	* env.c:
+	strip CDPATH too
+	[9b97643b26f9]
+
+	* env.c:
+	strip exported bash functions from the environment.
+	[9e5090c8284f]
+
+2004-10-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Only reset sudo_user.pw based on SUDO_USER environment variables for
+	real commands and sudoedit. This avoids a confusing message when a
+	user tries "sudo -l" or "sudo -v" and is denied.
+	[3ea6d0053274]
+
+	* gram.c, gram.y, parse.h:
+	Extend LIST_APPEND to deal with appending lists too
+	[d963e42f622f]
+
+2004-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	Convert some bitwise AND to ISSET
+	[130dc40d268e]
+
+	* lex.yy.c, toke.c:
+	toke.c replaces lex.yy.c
+	[048858df79e7]
+
+	* CHANGES, TODO:
+	sync
+	[d19e7abf251c]
+
+	* BUGS:
+	new parser fixes most of the outstanding bugs
+	[0891f66e3758]
+
+	* configure:
+	regen
+	[1a3358cc7283]
+
+	* visudo.c:
+	Rework for the new parser. Now checks for unused aliases in sudoers.
+	[ad462ede3094]
+
+	* testsudoers.c:
+	Rewrite for the new parser. Now supports a -d flag (dump) and adds a
+	-h flag (host). It now defaults to the local hostname unless
+	otherwise specified.
+	[1b69685cc601]
+
+	* sudo.h:
+	Add new prototypes. Remove NOMATCH/UNSPEC (now in parse.h)
+	[2e4fb3abfef0]
+
+	* sudo.c:
+	Update for new parse. We now call find_path() *after* we have
+	updated the global defaults based on sudoers. Also adds support for
+	listing other user's privs if you are root.
+	[cf3db9fc3024]
+
+	* mon_systrace.c:
+	Working LDAP support; also remove a now-unneeded rewind().
+	[649ecf1baf6b]
+
+	* logging.c, logging.h:
+	Add NO_STDERR flag.
+	[6cb935af94e0]
+
+	* ldap.c:
+	Split sudo_ldap_check() into three pieces: sudo_ldap_open(),
+	udo_ldap_update_defaults() and sudo_ldap_check(). This allows us to
+	connecto to LDAP, apply the default options, find the command in the
+	user's path, and then check whether the user is allowed to run it.
+	The important thing here is that the default runas user may be
+	specified as a default option and that needs to be set before we
+	search for the command.
+	[fc0426abc6f1]
+
+	* ldap.c:
+	Add casts to unsigned char for isspace() to quiet a gcc warning.
+	[e5358e3df439]
+
+	* defaults.h:
+	Add prototype for update_defaults()
+	[564dac3db74e]
+
+	* defaults.c:
+	Don't warn about line numbers now that we operate on a set of data
+	structures (or LDAP) and not a file.
+	[bcd9ffb9b67c]
+
+	* config.h.in:
+	No long use lsearch()
+	[9d048c587319]
+
+	* Makefile.in:
+	Update for new and changed file names.
+	[6f424a7c4515]
+
+	* LICENSE:
+	no more BSD lsearch.c
+	[463a96d89026]
+
+	* match.c:
+	foo_matches() routines now live in match.c Added user_matches(),
+	runas_matches(), host_matches(), cmnd_matches() and alias_matches()
+	that operate on the parsed sudoers file.
+	[b14da8a0567e]
+
+	* parse.lex, toke.l:
+	Move parse.lex -> toke.l Rename buffer_frob() -> switch_buffer()
+	WORD no longer needs to exclude '@' kill yywrap()
+	[a922294eb7b7]
+
+	* gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.c,
+	sudo.tab.h:
+	Rewritten parser that converts sudoers into a set of data
+	structures. This eliminates ordering issues and makes it possible to
+	apply sudoers Defaults entries before searching for the command.
+	[30d2ec4d203c]
+
+	* configure.in, emul/search.h, lsearch.c:
+	We won't be using lsearch() any longer.
+	[29c4d54bfac0]
+
+	* ldap.c:
+	sudo should not send mail if someone who runs 'sudo -l' has no
+	entry.
+	[6fc27a69fd9c]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	regen
+	[8166347917f3]
+
+	* visudo.pod:
+	Update warnings to match new visudo
+	[004c0766798f]
+
+	* sudoers.pod:
+	The new parser doesn't have the old ordering constraints.
+	[ffd43bd08661]
+
+	* sudo.pod:
+	Document that -l now takes an optional username argument
+	[278f9557de8b]
+
+2004-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	AIX 5.2.0.0 works
+	[523acd29d858]
+
+	* ldap.c:
+	If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS instead. Fixes
+	a compilation problem with Solaris 9's native LDAP.
+
+	Set FLAG_MONITOR when needed.
+	[35824ade672d]
+
+2004-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	Call sudo_goodpath() *after* changing the cwd to match the traced
+	process. Fixes relative paths.
+	[12ee111d0ad7]
+
+2004-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* testsudoers.c:
+	Kill set_perms() stub--it is no longer needed.
+	[116ed702935d]
+
+2004-10-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	stay_setuid now requires set_reuid() or setresuid()
+	[8511f67e25d5]
+
+	* INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
+	configure.in, set_perms.c, sudo.c, sudo.h:
+	Kill use of POSIX saved uids; they aren't worth bothering with.
+	[b3b1f19f18c1]
+
+2004-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* glob.c:
+	remove call to issetugid()
+	[63f2e492c08f]
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	Remove warning about wildcards. Now that we use glob() the bug is
+	fixed.
+	[b15729d32266]
+
+	* parse.c:
+	Use glob(3) instead of fnmatch(3) for matching pathnames and stat
+	each result that matches the basename of the user's command. This
+	makes "cd /usr/bin ; sudo ./blah" work when sudoers allows
+	/usr/bin/blah. Fixes bug #143.
+	[e31eb6310340]
+
+	* config.h.in, configure, configure.in:
+	Define HAVE_EXTENDED_GLOB for extended glob (GLOB_TILDE and
+	GLOB_BRACE)
+	[677ed6661e17]
+
+	* config.h.in, configure, configure.in:
+	Check for a glob() that supports GLOB_BRACE and GLOB_TILDE
+	[aaa2329dd266]
+
+	* LICENSE:
+	reference glob
+	[bedc9a923423]
+
+	* emul/glob.h:
+	4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions
+	removed.
+	[0335cf31fb1e]
+
+	* glob.c:
+	4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions
+	removed.
+	[81799451473c]
+
+2004-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	Just return if STRIOCINJECT or STRIOCREPLACE fail. It probably means
+	we are out of space in the stack gap...
+	[5b02b702021e]
+
+	* CHANGES:
+	sync
+	[be3826273e56]
+
+	* mon_systrace.c:
+	Take a stab at ldap sudoers support here.
+	[9d023695b0de]
+
+	* mon_systrace.c, mon_systrace.h:
+	Detach from tracee on SIGHUP, SIGINT and SIGTERM. Now "sudo reboot"
+	doesn't cause reboot to inadvertanly kill itself.
+	[d4aab2365610]
+
+	* mon_systrace.c:
+	put "monitor" in the proctitle, not "systrace"
+	[9a9025767d86]
+
+	* mon_systrace.c:
+	When modifying the environment, don't replace envp when we can get
+	away with just rewriting pointers in the traced process.
+	[c03622f7a2e2]
+
+	* mon_systrace.c, mon_systrace.h:
+	Add environment updating via STRIOCINJECT (if available).
+	[037291016870]
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[869acc511046]
+
+2004-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c:
+	regen
+	[4e61a9bd3c97]
+
+	* parse.lex:
+	Fix bug introduced in unput() removal; want yyless(0) not yyless(1)
+	[b70d7bd6e147]
+
+	* mon_systrace.c:
+	Include file is now mon_systrace.h
+	[ead4e36d92ae]
+
+	* Makefile.in, configure, configure.in, def_data.c, def_data.h,
+	def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
+	sudo.c, sudo.h, sudo.tab.c, sudo.tab.h, sudoers.pod:
+	No longer call it tracing, it is now "monitoring" which should be
+	more a obvious name to non-hackers.
+	[aa811ded0789]
+
+2004-10-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c, mon_systrace.h:
+	Fix some XXX
+	[a271072dacc6]
+
+	* mon_systrace.c, mon_systrace.h:
+	No need to include syscall.h, use 1024 as the max # of entries (the
+	max that systrace(4) allows).
+
+	Only need to use SYSTR_POLICY_ASSIGN once
+
+	Change check_syscall() -> find_handler() and have it return the
+	handler instead of just running it. We need this since handler now
+	have two parts: one part that generates and answer and another that
+	gets called after the answer is accepted (to do logging).
+
+	Add some missing check_exec for emul execv
+	[a89d243f0525]
+
+	* sample.pam, sample.sudoers, sample.syslog.conf, sudoers:
+	Add $Sudo$ tags.
+	[6f3fedb0daba]
+
+	* config.h.in:
+	Add missing HAVE_LINUX_SYSTRACE_H
+	[ff75ab7bfc53]
+
+	* Makefile.in:
+	add trace_systrace.o dependency
+	[88a408668ab2]
+
+2004-09-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Also look for systrace.h in /usr/include/linux
+	[98b98b436cf3]
+
+	* mon_systrace.c, mon_systrace.h:
+	Move all struct defs and prototypes into trace_systrace.h and mark
+	all but systace_attach() static.
+	[85511253b570]
+
+	* mon_systrace.c, mon_systrace.h:
+	Add support for tracing emulations. At the moment, all emulations
+	are compiled in. It might make sense to #ifdef them in the future,
+	though this impeeds readability.
+	[87bb50abf277]
+
+	* Makefile.in, configure, configure.in:
+	rename systrace.c -> trace_systrace.c
+	[31cfa4407d93]
+
+	* parse.yacc, sudo.tab.c:
+	Allow this to build with a K&R compiler again
+	[32876af5bb98]
+
+	* TODO:
+	sync
+	[46865bd70f7c]
+
+	* compat.h, sudo.c, visudo.c:
+	Use __attribute__((__noreturn__))
+	[65bbad71fe89]
+
+	* visudo.c:
+	Exit() takes a negative value to indicate it was not called via
+	signal.
+	[b93032ed7b60]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	regen
+	[45bcf4661558]
+
+	* Makefile.in, visudo.c:
+	Define Err() and Errx() that are like err() and errx() but call
+	Exit() instead of exit(). Build private copy of alloc.o for visudo
+	that calls Err() and Errx().
+	[c6d02bf42edd]
+
+2004-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[39de7e7c59da]
+
+	* CHANGES:
+	sync
+	[ba481d9ed1aa]
+
+	* visudo.c:
+	Overhaul visudo for editing multiple files: o visudo has been broken
+	out into functions (more work needed here) o each file is now edited
+	before sudoers is re-parsed o if a #include line is added that file
+	will be edited too
+
+	TODO: o cleanup temp files when exiting via err() or errx() o
+	continue breaking things out into separate functions
+	[80c35cf534eb]
+
+	* parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c:
+	Add keepopen arg to open_sudoers that open_sudoers can use to
+	indicate to the caller that the fd should not be closed when it is
+	done with it. To be used by visudo to keep locked fds from being
+	closed prematurely (and thus losing the lock).
+	[f330fe632470]
+
+	* parse.yacc, sudo.c:
+	Add errorfile global that contains the name of the file that caused
+	the error.
+	[98079c7a37ed]
+
+	* parse.lex:
+	return COMMENT to yacc grammar for a #include line
+	[2024a8de4fa8]
+
+	* parse.lex:
+	Remove us of unput() in favor of yyless() which is cheaper.
+	[c61291902beb]
+
+	* parse.yacc:
+	Allow an empty sudoers file.
+	[62fb111db2e7]
+
+2004-09-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	Rewind sudoers_fp now that sudoers_lookup() doesn't do it for us.
+	[9e15869ef597]
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[c29bdd43bfad]
+
+	* visudo.c:
+	Do signal setup before calling edit_sudoers(). Don't shadow the
+	"quiet" global.
+	[74252efd09ff]
+
+	* visudo.c:
+	If a sudoers file includes other files, edit those too. Does not yes
+	deal with creating the new includes files itself.
+	[06af7b9c173f]
+
+	* testsudoers.c:
+	init_parser now takes a path
+	[b5ee186eb192]
+
+	* parse.c, parse.h, parse.lex, parse.yacc:
+	More scaffolding for dealing with multiple sudoers files: o
+	init_parser() now takes a path used to populate the sudoers global o
+	the sudoers global is used to print the correct file in yyerror() o
+	when switching to a new sudoers file, perserve old file name and
+	line number
+	[d9be4970b8bd]
+
+	* Makefile.in, pathnames.h.in:
+	Kill _PATH_SUDOERS_TMP; it is not meaningful now that we can have
+	multiple sudoers files.
+	[6ccc4e921c43]
+
+	* parse.c, sudo.c:
+	Rewind sudoers_fp in open_sudoers() instead of sudoers_lookup() so
+	we start at the right file position when reading include files.
+	[91fcb961e7a4]
+
+	* sudoers.pod:
+	document #include
+	[fbb92a25a726]
+
+	* lex.yy.c:
+	regen
+	[50cd7a4c9dff]
+
+	* parse.lex:
+	Add max depth of 128 for the include stack to avoid loops.
+
+	Since yyerror() doesn't stop parsing, pass return values back to
+	yylex and call yyterminate() on error.
+	[e79dbffb729d]
+
+2004-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	document tracing
+	[165a467eadd8]
+
+	* sudo.pod:
+	Mention PREVENTING SHELL ESCAPES section of sudoers man page
+	[3217ccecd834]
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[fbd58d1d3a76]
+
+	* parse.lex:
+	Add support for #include in sudoers (visudo support TBD)
+	[a78015ca81af]
+
+	* parse.yacc:
+	make yyerror()'s argument const
+	[7d8e168c019a]
+
+	* testsudoers.c, visudo.c:
+	Add open_sudoers() stubs.
+	[087466787198]
+
+	* sudo.c, sudo.h:
+	Rename check_sudoers() open_sudoers() and make it return a FILE *
+	[142fc511fc65]
+
+2004-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
+	version.h:
+	Crank version
+	[1adc3f839480]
+
+	* Makefile.in, sudo.psf:
+	Better HP-UX depot construction
+	[2d952b000e63]
+
+2004-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mon_systrace.c:
+	o Made children global so check_exec() can lookup a child. o
+	Replaced uid in struct childinfo with struct passwd * (for runas) o
+	new_child() now takes a parent pid so the runas info can be
+	inherited o Added find_child() to lookup a child by its pid o
+	update_child() now fills in a struct passwd o Converted the big
+	if/else mess in set_policy to a switch o Syscalls that change uid
+	are now "ask" so we get SYSTR_MSG_UGID events
+	[29b9ea3f09a3]
+
+	* getspwuid.c:
+	Add flag to sudo_pwdup that indicates whether or not to lookup the
+	shadow password. Will be used to a struct passwd that has the shadow
+	password already filled in.
+	[e19d43dd7238]
+
+	* mon_systrace.c:
+	add missing increment of addr in read_string()
+	[f9eb0f060cb6]
+
+	* mon_systrace.c:
+	Remove bogus call to update_child() and some cosmetic fixes
+	[701ab0b97fef]
+
+	* mon_systrace.c:
+	Don't leak /dev/systrace fd to tracee Make initialized global for
+	simplicity If STRIOCATTACH returns EBUSY we are already being traced
+	Check for user_args == NULL in setproctitle() call Add missing calls
+	to STRIOCANSWER
+	[1956edf9bc3a]
+
+	* sudo.c:
+	g/c sudo_pwdup proto
+	[b7c4d6249ecb]
+
+	* Makefile.in, sudo.psf:
+	Add target for building a depot file
+	[357019efd99b]
+
+	* mon_systrace.c:
+	trim includes
+	[501534428471]
+
+2004-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c, sudo.tab.c, sudo.tab.h:
+	regen
+	[52fd250c6986]
+
+	* INSTALL:
+	document --with-systrace
+	[79623927c94e]
+
+	* config.h.in, configure, configure.in:
+	Add check for setproctitle
+	[1730cf1c26ed]
+
+	* mon_systrace.c:
+	pass struct str_msg_ask in to syscall checker so it can set the
+	error code
+	[1703fd2fdef6]
+
+	* mon_systrace.c:
+	systrace(4) support for sudo. On systems with the systrace(4) kernel
+	facility (OpenBSD, NetBSD, Linux w/ patches) sudo can intercept exec
+	calls and check the exec args against the sudoers file. In other
+	words, sudo can now control subcommands and shell escapes.
+	[928c9217c386]
+
+	* sudo.c, sudo.h:
+	Call systrace_attach() if FLAG_TRACE is set.
+	[014ba9402fa5]
+
+	* parse.c, parse.h, parse.lex, parse.yacc, sudo.h:
+	Add trace Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
+	[a99904db5e56]
+
+	* parse.c, sudo.c:
+	Don't close sudoers_fp, keep it open and set close on exec flag
+	instead.
+	[43a9fec60bee]
+
+	* def_data.c, def_data.h, def_data.in:
+	Add trace option
+	[5b643b86730a]
+
+	* Makefile.in:
+	Add systrace
+	[47a0519c427c]
+
+	* INSTALL:
+	SunOS /bin/sh blows up with configure
+	[005a23cc5615]
+
+	* configure, configure.in:
+	Include sys/param.h before systrace.h
+	[9345bc8efecf]
+
+	* configure:
+	regen
+	[a8f53fcbb254]
+
+	* pathnames.h.in:
+	_PATH_DEV_SYSTRACE
+	[d2ad1e492a00]
+
+	* configure.in:
+	line up options in --help
+	[fa51f2821d09]
+
+	* config.h.in, configure.in:
+	Add --with-systrace
+	[a264d54bc413]
+
+2004-09-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[a4dad0bcc523]
+
+	* aclocal.m4, configure.in:
+	make this work with autoconf-2.59
+	[c4a92b6a684a]
+
+2004-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Simplify logic around open & stat of files and do sanity on edited
+	file even if we lack fstat (still racable but worth doing).
+	[adda65ade70c]
+
+2004-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY:
+	Add support url
+	[bf6590fbde9f]
+
+	* Makefile.in:
+	versino 1.6.8p1
+	[b84ebfaf1552] [SUDO_1_6_8p1]
+
+	* CHANGES:
+	more changes for 1.6.8p1
+	[e23a9c0393b6]
+
+	* version.h:
+	1.6.8p1
+	[872f14504b5f]
+
+	* CHANGES, sudo_edit.c:
+	Add sanity check so we don't try to edit something other than a
+	regular file.
+	[350134ec6d4e]
+
+2004-09-15  Aaron Spangler  <aaron777@gmail.com>
+
+	* CHANGES:
+	sync
+	[3091ca9eae00]
+
+	* INSTALL:
+	document --with-ldap-conf-file
+	[0e2cd6b896f1]
+
+2004-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, ins_csops.h:
+	political correctness strikes again
+	[428e8bc77f55]
+
+	* RUNSON:
+	sync
+	[27f44bd423dc]
+
+2004-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.binary.in, Makefile.in:
+	Install sudoedit man link
+	[19a55234fc1f]
+
+	* INSTALL:
+	Update PAM note and mention where HP-UX users can download gcc
+	binaries.
+	[d37cdbbabfd4]
+
+	* Makefile.in:
+	libtool wants to install stuff from .libs so fake one up for binary
+	installations.
+	[a681bc6fcfba]
+
+	* Makefile.binary.in:
+	rm -f old sudoedit link instead of using ln -f set LIBTOOL correctly
+	[3e0c4b3372cc]
+
+	* Makefile.in:
+	Deal with "uname -m" having slashes in it rm -f old sudoedit link
+	instead of using ln -f
+	[cff33fb97e5b]
+
+	* Makefile.binary, Makefile.binary.in:
+	Makefile.binary -> Makefile.binary.in for config.status substitution
+	Add support for installing noexec bits
+	[37d8bb3483c6]
+
+	* Makefile.in:
+	Copy noexec bits into binary dists too No longer use my old arch
+	script for making binary dists
+	[e7058bab9e33]
+
+	* Makefile.binary:
+	Install sudoedit link.
+	[417d1e101711]
+
+2004-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* emul/utime.h:
+	avoid __P so there is no need for compat.h to be included
+	[6d8d1f1abf7d]
+
+	* utimes.c:
+	Don't use HAVE_UTIME_H before including config.h.
+	[013b7bb61181]
+
+2004-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	Fix Solatis futimes macro
+	[d4eda2ca0d29]
+
+2004-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Rename ots -> omtim for improved readability.
+	[127ca5bb297c]
+
+2004-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Redo changes in revision 1.7. Don't really need to keep the temp
+	file open; re-opening it with the invoking user's euid is
+	sufficient.
+	[55a883165a95]
+
+	* CHANGES:
+	sync
+	[9015b291170d]
+
+	* sudo.cat, sudo.man.in:
+	regen
+	[c0313f6ed783]
+
+	* sudo.pod:
+	back out revision 1.70; it is no long applicable
+	[b641d503aff6]
+
+	* env.c:
+	Let the loader initialize nep
+	[bec192139b02]
+
+	* config.h.in, configure, configure.in:
+	Removed unneed check for fchown Add check for gettimeofday Move
+	autoheader template stuff into separate AH_TEMPLATE lines
+	[bfc0edbd43f2]
+
+	* check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c:
+	Use timespec throughout.
+	[1a178a23b69b]
+
+	* Makefile.in:
+	gettime.[co]
+	[6aeb48a7ab7f]
+
+	* gettime.c:
+	function to return the current time in a struct timespec
+	[bf8eb12cb63f]
+
+	* utimes.c:
+	Not a darpa-sponsored file.
+	[121ce5e2036c]
+
+2004-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h, config.h.in, configure, configure.in:
+	Add a check for struct timespec and provide it for those without.
+	[42124055030d]
+
+	* config.h.in, configure, configure.in, sudo_edit.c:
+	Add checks for st_mtim and st_mtimespec and add macros for pulling
+	the mtime sec and nsec out of struct stat. These are used in
+	sudo_edit() to better tell whether or not the file has changed.
+	[23debfbb3fab]
+
+	* check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c:
+	Add an extra param to touch() for nsec
+	[56f7a4ba8ddb]
+
+	* sudo_edit.c:
+	Call mkstemp() as the in invoking user so we don't have to chown the
+	file later. Only touch() the temp file if we can do it via the file
+	descriptor. Don't check for modification of the temp file if we lack
+	fstat(). Catch errors read()ing the temp file.
+	[665f52c70836]
+
+	* fileops.c:
+	If path is NULL and fd == -1 return -1.
+	[757a518a824c]
+
+	* sudo_edit.c:
+	closefrom() is overkill, the only extra fds are the ones we opened
+	so just close those in the child.
+	[f361c9d2a1f4]
+
+	* Makefile.in, aclocal.m4, check.c, compat.h, config.h.in, configure,
+	configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c, utimes.c,
+	visudo.c:
+	Use utimes() and futimes() instead of utime() in touch(), emulating
+	as needed. Not all systems are able to support setting the times of
+	an fd so touch() takes both an fd and a file name as arguments.
+	[3d9276f29717]
+
+2004-09-07  Aaron Spangler  <aaron777@gmail.com>
+
+	* env.c:
+	Rare SEGV
+	[8995f828782d]
+
+2004-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	regen
+	[b8e9406711c5]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Add SUPPORT section and re-order some of the sections to match the
+	order we use in OpenBSD.
+	[fa37bd917e2c]
+
+2004-09-06  Aaron Spangler  <aaron777@gmail.com>
+
+	* env.c:
+	Openldap ~/.ldaprc fix
+	[1a37afe6850f]
+
+2004-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	Talk about how the editor must write its changes to the original
+	file and not just use rename(2).
+	[c55ed91c5ee9]
+
+	* CHANGES:
+	sync
+	[62af26bd37a2]
+
+	* sudo_edit.c:
+	Keep the temp file open instead of re-opening after the editor has
+	exited.
+	[de41eeb6dcf2]
+
+	* sample.pam:
+	Update for current redhat/fedora core.
+	[8cf083077333]
+
+2004-09-03  Aaron Spangler  <aaron777@gmail.com>
+
+	* README.LDAP:
+	tls_ examples
+	[ba783d88a034]
+
+2004-09-02  Aaron Spangler  <aaron777@gmail.com>
+
+	* ldap.c:
+	config tls_* options
+	[0b0e0797b3b9]
+
+2004-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	No need for -lcrypt when using pam.
+	[41fff3a53e68]
+
+2004-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[75820aecce2c]
+
+2004-08-27  Aaron Spangler  <aaron777@gmail.com>
+
+	* configure.in, ldap.c, pathnames.h.in:
+	Allow --with-ldap-conf-file option to override LDAP_CONF
+	[c9909bc484a5]
+
+	* ldap.c:
+	cleanup debug message
+	[1f6ca4824d8d]
+
+2004-08-26  Aaron Spangler  <aaron777@gmail.com>
+
+	* README.LDAP:
+	more config info
+	[f2e7147fd507]
+
+2004-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
+	Add cmnd_base to struct sudo_user and set it in init_vars(). Add
+	cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
+	longer use gross statics in command_matches(). Also rename some
+	variables for improved clarity.
+	[7169a6c7bea4]
+
+2004-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	document HP's crippled compiler deficiency.
+	[c405ea5a8d4c]
+
+	* INSTALL:
+	Fix some thinkos in --with-editor and --with-env-editor
+	descriptions. Noticed by Norihiko Murase.
+	[dd781de1c985]
+
+	* configure, configure.in:
+	--with-noexec takes an optional PATH argument.
+	[8f6ab77f22cc]
+
+	* INSTALL:
+	document --with-noexec
+	[50cb1fc627ce]
+
+2004-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON, TODO:
+	sync
+	[f2503bd13373] [SUDO_1_6_8]
+
+	* sudo_edit.c:
+	Better warning message when sudoedit is unable to write to the
+	destination file.
+	[f78c18f2ffa8]
+
+	* sudo.cat, sudo.man.in:
+	regen
+	[7e2bf63d6d9a]
+
+	* sudo.pod:
+	Don't italicize the string "sudoedit"
+	[c691643bd269]
+
+2004-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY:
+	Mention GratiSoft.
+	[dc53de581b2d]
+
+2004-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	regen
+	[8ae0484dfc38]
+
+	* parse.yacc:
+	Reset used_runas to FALSE when re-intializing the parser.
+	[b7403f353a02]
+
+2004-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.guess:
+	Correct OpenBSD mips support
+	[314fc7afc165]
+
+	* config.guess:
+	Add OpenBSD/mips
+	[ac87d0a773ef]
+
+2004-08-07  Aaron Spangler  <aaron777@gmail.com>
+
+	* README.LDAP:
+	More behavior notes
+	[13be1d212b47]
+
+	* README.LDAP:
+	Updates on current behavior
+	[d498a8866d6f]
+
+2004-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	=back does not take an indentlevel (makes no difference to formatted
+	files).
+	[e5f479e24fa8]
+
+	* sudoers.pod:
+	=back does not take an indentlevel (makes no difference to formatted
+	files).
+	[9c8523bb382a]
+
+	* CHANGES:
+	new
+	[2dbd9aba8b33]
+
+	* sudo.c:
+	Consistency. Use same error for bad -u #uid when targetpw is set as
+	we do when a bad -u username is specified.
+	[922961c4a9d6]
+
+	* TODO:
+	Add checksum idea from Steve Mancini
+	[e6ece1b766ba]
+
+	* sudo.cat, sudo.man.in:
+	regen
+	[f93d41fc38b1]
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[370d2317829f]
+
+	* sudo.pod, sudoers.pod:
+	Document the restriction on uids specified via -u when targetpw is
+	set.
+	[878fedb455db]
+
+	* sudo.c:
+	Error out when targetpw is enabled and sudo is run with -u #uid but
+	#uid does not exist in the passwd database. We can't do target
+	authentication when the target is not in passwd!
+	[27c5888c86eb]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
+	regen
+	[ceb65711050c]
+
+	* TODO:
+	Some more todo for the next release.
+	[7b7417be7601]
+
+	* INSTALL:
+	Make it clear that PAM should be used for DCE support when possible.
+	[7502029fd385]
+
+	* sudoers.pod:
+	o Document problems with wildcards and relative paths. o Make the
+	order requirements more prominent. o Change a "set" to "reset" for
+	clarity.
+	[bacdd181b33f]
+
+2004-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	Mention --with-secure-path, not SECURE_PATH.
+	[41283ddde5e1]
+
+2004-08-03  Aaron Spangler  <aaron777@gmail.com>
+
+	* ldap.c:
+	reflect changes to parse.c
+	[8880fe9b724d]
+
+2004-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	regen
+	[a57658ca9177]
+
+	* parse.yacc:
+	Don't pass user_cmnd and user_args to command_matches(), just use
+	the globals there. Since we keep state with statics anyway it is
+	misleading to pretend that passing in different cmnd and cmnd_args
+	will work.
+	[a4910bf6032b]
+
+	* parse.c, parse.h, testsudoers.c, visudo.c:
+	Don't pass user_cmnd and user_args to command_matches(), just use
+	the globals there. Since we keep state with statics anyway it is
+	misleading to pretend that passing in different cmnd and cmnd_args
+	will work.
+	[0a2544991fd6]
+
+	* parse.c:
+	Fix a bug introduced in rev. 1.149. When checking for pseudo-
+	commands check for a '/' anywhere in cmnd, not just the first
+	character.
+	[ce98142f03ca]
+
+2004-07-31  Aaron Spangler  <aaron777@gmail.com>
+
+	* sudo.man.in, sudo.pod:
+	Clarification thanks to Olivier Blin <oblin@mandrakesoft.com>
+	[a91800e094b1]
+
+	* sudoers.man.in, sudoers.pod:
+	Add ignore_local_sudoers
+	[741ddcbf7083]
+
+	* README.LDAP:
+	Sun One schema definition by Andreas.Bussjaeger@t-systems.com and
+	janth@moldung.no
+	[742c02e07cd9]
+
+2004-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	typo
+	[e7cdefbd7a9a]
+
+2004-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	sync
+	[734dafc4a85e]
+
+	* parse.c:
+	Parse sudoers file as PERM_RUNAS not PERM_ROOT and remove a useless
+	PERM_SUDOERS. Restore to PERM_ROOT upon exit of the parse.
+	[151b7f593568]
+
+2004-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	PAM change
+	[d8fb6d6a22d0]
+
+2004-07-08  Aaron Spangler  <aaron777@gmail.com>
+
+	* ldap.c:
+	Better debugging of ALL command
+	[9db3e84029dc]
+
+2004-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	When matching for "sudoedit" in sudoers check both the command the
+	user typed *and* the command that is listed in the sudoers entry.
+	[f36ca1f94095]
+
+2004-07-04  Aaron Spangler  <aaron777@gmail.com>
+
+	* ldap.c:
+	Added !command feature
+	[ed539574611b]
+
+2004-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Use pam_acct_mgmt() to check for disabled accounts; Brian Farrell
+	[2be8e0e8813a]
+
+2004-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE:
+	License is ISC-style, not BSD-style
+	[ac0589e1dd5d]
+
+	* CHANGES:
+	sync
+	[16058a30f404]
+
+2004-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in:
+	regen
+	[8820eb9c809b]
+
+	* sudo.pod:
+	o Update some out of date bits to reality o Change the shell promt
+	in examples to bourne-shell style o Clarify some details o Add a
+	CAVEAT about "sudo cd /foo"
+	[b0af373214b6]
+
+	* check.c:
+	Don't ask for a password if invoking user == target user.
+	[dd5c96141132]
+
+	* sudo.c:
+	typo in comment
+	[278d20f9b249]
+
+2004-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[9036c6f39eff]
+
+	* sudoers.pod:
+	Expand on NOEXEC a little.
+	[9a13756aebe4]
+
+	* TODO:
+	sync
+	[8d2c1af48de8]
+
+	* visudo.cat, visudo.man.in:
+	regen
+	[3921f01607c8]
+
+	* sudo.tab.c:
+	regen
+	[9338c3d68250]
+
+	* CHANGES, parse.yacc, visudo.c:
+	Add a check in visudo for runas_default being set after it has
+	already been used.
+	[803560986a8a]
+
+	* visudo.pod:
+	Add a check in visudo for runas_default being set after it has
+	already been used.
+	[6700358d7ad8]
+
+	* sudo.tab.c:
+	regen
+	[b60636e2cf63]
+
+	* parse.yacc:
+	Add a MATCHED macro for testing whether foo_matches has been set to
+	TRUE or FALSE. This is more readable than checking for >=0 or < 0.
+	Doesn't change the actual code generated.
+	[f376da8ccdc8]
+
+2004-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat:
+	regen
+	[6cceb6d6c9bd]
+
+	* sudoers.man.in:
+	regen
+	[5acd12b730b3]
+
+	* sudoers:
+	Correct description of where Defaults specs should go.
+	[868db857630d]
+
+	* sudoers.pod:
+	Correct description of where Defaults specs should go.
+	[6b11ff53d7ad]
+
+	* auth/bsdauth.c, auth/kerb5.c:
+	update (c) year
+	[d72eb434c068]
+
+	* auth/pam.c:
+	update (c) year
+	[87149e0eed50]
+
+	* find_path.c:
+	update (c) year
+	[40c227af9227]
+
+	* ldap.c:
+	update (c) year
+	[f264632488a0]
+
+	* logging.h:
+	update (c) year
+	[3cec76d400ce]
+
+	* testsudoers.c, visudo.c:
+	update (c) year
+	[272c8a53604c]
+
+2004-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	regen
+	[83408d9e9d2e]
+
+	* auth/bsdauth.c, auth/kerb5.c, auth/pam.c, visudo.c:
+	Remove trailing spaces, no actual code changes.
+	[4c3bf2819293]
+
+	* ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c:
+	Remove trailing spaces, no actual code changes.
+	[c7075d1cbed5]
+
+	* tgetpass.c:
+	Remove trailing spaces, no actual code changes.
+	[96f6e0a24c26]
+
+	* compat.h, defaults.c, env.c:
+	Remove trailing spaces, no actual code changes.
+	[893e83c33795]
+
+	* find_path.c:
+	Remove trailing spaces, no actual code changes.
+	[7ed7099f3c71]
+
+	* getcwd.c:
+	Remove trailing spaces, no actual code changes.
+	[776cc0374547]
+
+	* check.c:
+	Remove trailing spaces, no actual code changes.
+	[f77750f8803b]
+
+	* sudo.tab.c:
+	regen
+	[62e0ed883b31]
+
+	* parse.yacc:
+	Fix a >=0 that should be <0 that was improperly converted when
+	UNSPEC was added.
+	[ad1531a55a49]
+
+	* parse.yacc:
+	Add do {} while(0) around pop macro Set cmnd_matches to UNSPEC, not
+	NOMATCH when resetting it.
+	[ae017a12870a]
+
+	* parse.yacc:
+	Fix pastos introduced in SETNMATCH addition.
+	[6ea1c9d80681]
+
+2004-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README.LDAP:
+	Update for configure changes
+	[637a635da287]
+
+	* sudo.tab.c:
+	regen
+	[4753c2788713]
+
+	* parse.yacc:
+	Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use
+	these in parse.yacc. Also in parse.yacc initialize the *_matches
+	vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use
+	when setting *_matches to a value that may be
+	NOMATCH/UNSPEC/TRUE/FALSE.
+	[746b519e41a6]
+
+	* sudo.h:
+	Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use
+	these in parse.yacc. Also in parse.yacc initialize the *_matches
+	vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use
+	when setting *_matches to a value that may be
+	NOMATCH/UNSPEC/TRUE/FALSE.
+	[2ba622e15a4d]
+
+	* parse.yacc:
+	Initialize runas to -2, not -1 since we need to be able to
+	distinguish between the initialized value and the value of a non-
+	match when passing along the runas value to multiple commands.
+
+	The result of this is that an unmatched runas is now set to -1, not
+	0. This is required now that parse.c treats a FALSE value for runas
+	as being explicitly denied.
+	[7791ed3621f6]
+
+2004-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* getprogname.c:
+	Error out if argc < 1.
+	[c566cce8dc78]
+
+	* sudo.c, visudo.c:
+	Error out if argc < 1.
+	[ce6b2a9eda3c]
+
+	* configure, configure.in:
+	Add tests for what libs we need to link with for ldap and for
+	whether or not lber.h needs to be explicitly included.
+	[b2e9729cc4e7]
+
+2004-06-03  Aaron Spangler  <aaron777@gmail.com>
+
+	* ldap.c:
+	Solaris native LDAP build fix
+	[39929e40eb11]
+
+2004-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ldap.c:
+	Set edn to NULL is ldap_get_dn() fails to avoid potential use of an
+	unset variable.
+	[6a4c20a66f98]
+
+	* sudo.h:
+	Add prototype for sudo_ldap_list_matches
+	[443b007a8dab]
+
+	* compat.h:
+	Better check for dirfd macro--we now set HAVE_DIRFD for the macro
+	version too. Added check for dd_fd in `DIR' if no dirfd is found;
+	this is now used to confitionally define the dirfd macro in
+	compat.h.
+	[8d50ff1bbf2a]
+
+	* config.h.in:
+	Better check for dirfd macro--we now set HAVE_DIRFD for the macro
+	version too. Added check for dd_fd in `DIR' if no dirfd is found;
+	this is now used to confitionally define the dirfd macro in
+	compat.h.
+	[34eace4faec8]
+
+	* configure, configure.in:
+	Better check for dirfd macro--we now set HAVE_DIRFD for the macro
+	version too. Added check for dd_fd in `DIR' if no dirfd is found;
+	this is now used to confitionally define the dirfd macro in
+	compat.h.
+	[567656978f7e]
+
+	* closefrom.c:
+	Only check /proc/$$/fd if we have the dirfd function/macro.
+	[15e3ccce7553]
+
+	* compat.h, config.h.in, configure, configure.in:
+	Add a check for a dirfd() function (like Linux) and add a dirfd
+	macro in compat.h if there is no dirfd() function or macro.
+	[1e95756edb50]
+
+	* closefrom.c, getcwd.c:
+	dirfd() is now defined in compat.h as needed.
+	[bb1d79271188]
+
+	* CHANGES:
+	Clarify closefrom() note.
+	[f4e4a5508dda]
+
+	* parse.c:
+	When checking for a command in the directory, only copy the base dir
+	once.
+	[7a3276808b87]
+
+	* closefrom.c:
+	If there is a /proc/$$/fd directory, behave like the Solaris
+	closefrom() and only close the descriptors listed therein.
+	[19de23779e84]
+
+	* alloc.c:
+	compat.h guarantees INT_MAX is defined.
+	[1bf0c79d4606]
+
+	* compat.h:
+	Add definitions of OPEN_MAX and INT_MAX for those without it and
+	remove definition of RLIM_INFINITY (now unused).
+	[f827d1ebf96e]
+
+	* CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c, parse.c,
+	sudo.c, sudo.h, visudo.c:
+	Use PATH_MAX, not MAXPATHLEN since the former is standardized.
+	[59788f211c24]
+
+2004-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	sync
+	[d32fa124f1ad]
+
+	* RUNSON:
+	Add some entries that were mailed in a while ago
+	[ff8d5bfec54e]
+
+	* closefrom.c:
+	o sysconf returns a long, not an int. o check for negative return
+	value from sysconf/getdtablesize and use OPEN_MAX in this case. o
+	define OPEN_MAX to 256 for those without it (a fair guess...)
+	[ccf81ae6deb2]
+
+2004-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* UPGRADE:
+	Mention change in parse order for RunAs entries.
+	[dc73b0bca617]
+
+	* configure:
+	regen
+	[07cce8e0534e]
+
+2004-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, README.LDAP, config.h.in, configure.in:
+	o --with-ldap now takes an optional dir as a parameter o added check
+	for ldap_initialize() and start_tls_s()
+	[2b846c7974c6]
+
+	* README.LDAP:
+	Fix some typos, word choice and formatting issues.
+	[00dc8ca84b10]
+
+2004-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Use SA_INTERRUPT so SunOS works correctly, avoid stdio and just use
+	read/write as it is simpler.
+	[30f5446ee8b0]
+
+	* configure, configure.in:
+	Remove hack overriding cross-compiler check. It should no longer be
+	needed.
+	[22a6cbd88608]
+
+	* compat.h:
+	Remove select() compat bits since we no longer use select().
+	[d7bbf7cd36f5]
+
+	* CHANGES, tgetpass.c:
+	Use alarm() instead of select() for the timeout for systems that
+	don't fully/properly implement select().
+	[d7cc60f15800]
+
+2004-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	synbc
+	[132a39788e07]
+
+	* RUNSON:
+	update
+	[61ef508380c6]
+
+	* set_perms.c:
+	Deal with systems that have no way of setting the effective uid such
+	as nsr-tandem-nsk.
+	[306e00e9b5a4]
+
+	* configure, configure.in:
+	Define NO_SAVED_IDS if we don't find seteuid()
+	[8588f18345cf]
+
+	* config.h.in, configure, configure.in:
+	Add back check for setreuid() since NSK doesn't have it.
+	[43127bd703d1]
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[af4f4b20e422]
+
+	* BUGS:
+	sync
+	[3593f17f72ed]
+
+	* CHANGES:
+	sync
+	[29ca3b699c24]
+
+	* parse.c:
+	In sudoers_lookup() return VALIDATE_NOT_OK if the runas user was
+	explicitly denied and the command matched. This fixes a long-
+	standing bug and makes: foo machine = (ALL) /usr/bin/blah foo
+	machine = (!bar) /usr/bin/blah
+
+	equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
+	[2f5ee244985a]
+
+	* sudoers.pod:
+	Clarify mail_noperm
+	[3238b2d41989]
+
+2004-05-20  Aaron Spangler  <aaron777@gmail.com>
+
+	* Makefile.in:
+	Missing DESTDIR in make install for sudo_noexec.la
+	[91431e821525]
+
+2004-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	regen
+	[cdfde0dcb556]
+
+	* TODO:
+	sync
+	[4799b7d8b62c]
+
+	* sample.sudoers:
+	Remove fastboot/fasthalt (who still remembers these?) and add a
+	minimal sudoedit example.
+	[b1bca73d6250]
+
+	* sudoers.pod:
+	Remove fastboot/fasthalt (who still remembers these?) and add a
+	minimal sudoedit example.
+	[19d299f233cd]
+
+	* CHANGES, INSTALL:
+	filesystem -> file system
+	[85948b608ffe]
+
+	* TROUBLESHOOTING:
+	filesystem -> file system
+	[39fb594e9338]
+
+	* UPGRADE, sudo.c, visudo.c:
+	filesystem -> file system
+	[1e1afaf30469]
+
+	* sudo.pod, sudoers.pod:
+	Fix some minor typos and formatting goofs
+	[e94d243a0b90]
+
+	* lex.yy.c:
+	regen
+	[2eed0ab1f4c4]
+
+	* visudo.pod:
+	remove my email addr
+	[b63262c0389b]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Use @mansectform@ and @mansectsu@ everywhere Make man page
+	references links with L<>
+	[f459f4b9ddb9]
+
+	* parse.lex:
+	Accept quoted globbing characters and pass them verbatim for
+	fnmatch()
+	[8248b86e9380]
+
+	* UPGRADE:
+	Document that /tmp/.odus is gone.
+	[3667b66af5bb]
+
+	* pathnames.h.in:
+	No longer use /tmp/.odus as a possible timestamp dir unless
+	specifically configured to do so. Instead, if no /var/run exists,
+	use /var/adm/sudo or /usr/adm/sudo.
+	[48d94c9f9ad4]
+
+	* CHANGES:
+	No longer use /tmp/.odus as a possible timestamp dir unless
+	specifically configured to do so. Instead, if no /var/run exists,
+	use /var/adm/sudo or /usr/adm/sudo.
+	[6058c4cefcec]
+
+	* aclocal.m4:
+	No longer use /tmp/.odus as a possible timestamp dir unless
+	specifically configured to do so. Instead, if no /var/run exists,
+	use /var/adm/sudo or /usr/adm/sudo.
+	[cf52c4c2803f]
+
+	* configure:
+	No longer use /tmp/.odus as a possible timestamp dir unless
+	specifically configured to do so. Instead, if no /var/run exists,
+	use /var/adm/sudo or /usr/adm/sudo.
+	[058d7b8cf07b]
+
+	* check.c, compat.h:
+	Preliminary changes to support nsr-tandem-nsk. Based on patches from
+	Tom Bates.
+	[390b698b5924]
+
+	* logging.c:
+	Preliminary changes to support nsr-tandem-nsk. Based on patches from
+	Tom Bates.
+	[934bbe6872b6]
+
+	* set_perms.c, sudo.c, tgetpass.c, visudo.c:
+	Preliminary changes to support nsr-tandem-nsk. Based on patches from
+	Tom Bates.
+	[2e5f81834383]
+
+2004-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	There was no 1.6.7p6.
+	[8013d2e6b062]
+
+	* BUGS, CHANGES:
+	sync
+	[c38b41f32857]
+
+	* Makefile.in:
+	add missing files to DISTFILES
+	[e6a80ad03039]
+
+	* sudo.cat, sudoers.cat, visudo.cat:
+	regen
+	[027bc9746dd5]
+
+	* sudoers.man.in:
+	regen
+	[f5e85ef686cf]
+
+	* Makefile.in:
+	Fix some line wrap and update (c) year
+	[bad1f46aa1ca]
+
+2004-04-28  Aaron Spangler  <aaron777@gmail.com>
+
+	* README.LDAP:
+	Build Note
+	[7a061248249b]
+
+2004-04-07  Aaron Spangler  <aaron777@gmail.com>
+
+	* Makefile.in:
+	Fix install-dirs
+	[be0726dd92e7]
+
+2004-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	regen
+	[3f4f0d1ab8b9]
+
+	* visudo.c:
+	In Exit() when used as a signal handler, emsg is a pointer so
+	sizeof() is wrong so make it a #define instead. Also avoid using a
+	negative exit value. Found by Aaron Campbell
+	[78716a3a3fdc]
+
+2004-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Remove bogus sentence about uids in a User_List. Document usernames
+	vs. uid parsing in a Runas_List.
+	[7ca510b5031c]
+
+	* parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
+	If the user specified a uid with the -u flag and the uid exists in
+	the passwd file, set runas_user to the name, not the uid.
+
+	When comparing usernames in sudoers, if a name is really a uid
+	(starts with '#') compare it numerically to pw_uid.
+	[8d6935d04673]
+
+2004-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	krb5_mcc_ops should be const; Johnny C. Lam
+	[aa8c753e426e]
+
+2004-02-28  Aaron Spangler  <aaron777@gmail.com>
+
+	* CHANGES, config.h.in, ldap.c:
+	Added start_tls support
+	[7ef864c15b69]
+
+2004-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Clean up libtool stuff for 'make distclean' and add def_data.c,
+	def_data.h to PARSESRCS.
+	[bf9bb6bb06ab]
+
+2004-02-14  Aaron Spangler  <aaron777@gmail.com>
+
+	* strlcat.c, strlcpy.c:
+	Un-Fix last license munge
+	[42654b77ac71]
+
+2004-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[e4de6b23a4dc]
+
+	* CHANGES, RUNSON, TODO:
+	checkpoint
+	[94e1ace84d5c]
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[8ce784505643]
+
+	* auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
+	auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
+	emul/search.h, emul/utime.h:
+	More to a less restrictive, ISC-style license.
+	[a31b20e48003]
+
+	* auth/afs.c, auth/aix_auth.c, zero_bytes.c:
+	More to a less restrictive, ISC-style license.
+	[6d234be91c5e]
+
+	* auth/bsdauth.c:
+	More to a less restrictive, ISC-style license.
+	[e21be6594b58]
+
+	* auth/dce.c, auth/fwtk.c, auth/kerb4.c:
+	More to a less restrictive, ISC-style license.
+	[87534c164a52]
+
+	* auth/kerb5.c, auth/pam.c:
+	More to a less restrictive, ISC-style license.
+	[e41f92b41216]
+
+	* sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, visudo.c,
+	visudo.man.in, visudo.pod:
+	More to a less restrictive, ISC-style license.
+	[b02aea324fd6]
+
+	* Makefile.binary:
+	More to a less restrictive, ISC-style license.
+	[1ed561734535]
+
+	* parse.lex, parse.yacc:
+	More to a less restrictive, ISC-style license.
+	[2f5942e847a1]
+
+	* utime.c, version.h:
+	More to a less restrictive, ISC-style license.
+	[e2e038ad8209]
+
+	* LICENSE, Makefile.in, alloc.c, check.c, closefrom.c, compat.h,
+	defaults.c:
+	More to a less restrictive, ISC-style license.
+	[d8d7bfc8a18b]
+
+	* defaults.h:
+	More to a less restrictive, ISC-style license.
+	[008f5d5743f5]
+
+	* env.c:
+	More to a less restrictive, ISC-style license.
+	[d5bd859757de]
+
+	* fileops.c:
+	More to a less restrictive, ISC-style license.
+	[4129a8b38a67]
+
+	* find_path.c, getprogname.c:
+	More to a less restrictive, ISC-style license.
+	[f605d5eab6f1]
+
+	* getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
+	ins_goons.h, insults.h, interfaces.c, interfaces.h:
+	More to a less restrictive, ISC-style license.
+	[520381c60a54]
+
+	* ldap.c, logging.c, logging.h, parse.c, parse.h, pathnames.h.in,
+	set_perms.c:
+	More to a less restrictive, ISC-style license.
+	[64d772d70ab3]
+
+	* sigaction.c, strerror.c:
+	More to a less restrictive, ISC-style license.
+	[4bccdedca58a]
+
+	* strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
+	sudo_edit.c:
+	More to a less restrictive, ISC-style license.
+	[71cdcc241e94]
+
+	* sudo_noexec.c:
+	More to a less restrictive, ISC-style license.
+	[a6da7631e0b2]
+
+2004-02-13  Aaron Spangler  <aaron777@gmail.com>
+
+	* CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in:
+	Merged in LDAP Support
+	[1038092a161e]
+
+	* def_data.c, def_data.h, def_data.in:
+	Merged in LDAP Support
+	[8fb255280e42]
+
+	* ldap.c, sudo.c, sudo.h:
+	Merged in LDAP Support
+	[547eaa346fcc]
+
+	* sudoers2ldif:
+	Merged in LDAP Support
+	[3994c4d05947]
+
+2004-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h, sudo_noexec.c:
+	Only do "extern int errno" if errno is not a macro.
+	[b2e02a08be8b]
+
+2004-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	setreuid(0, 0) fails on QNX if the euid is not already 0 so set the
+	euid first, then just call setuid(0) to set the real uid too.
+	[f08546e2e0ee]
+
+	* set_perms.c:
+	Use setresuid() and setreuid() for PERM_RUNAS when appropriate
+	instead of seteuid() which may not exist.
+	[ba508581befb]
+
+2004-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE:
+	2004
+	[37425513a342]
+
+	* INSTALL, config.h.in, configure, configure.in, ins_classic.h:
+	Add --with-pc-insults configure option
+	[7daa5294c17b]
+
+	* visudo.man.in:
+	Prefer VISUAL over EDITOR like old vipw did.
+	[996252a4ab65]
+
+2004-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.man.in, sudoers.man.in:
+	regen
+	[a247f1c52eb9]
+
+	* sudoers.pod:
+	Add a note that noexec is not a cure-all.
+	[9e7fc535367d]
+
+	* sudoers.pod:
+	Mention that disabling "root_sudo" is pretty pointless.
+	[f38a415afba0]
+
+	* configure, configure.in:
+	Substitute for root_sudo in sudoers.pod
+	[ce483cfc86be]
+
+	* sudo.pod:
+	Add sudoedit to the NAME section
+	[51bc453ec2f6]
+
+	* sudoers.pod:
+	Document that fact that setting ignore_dot in sudoers has no effect
+	due to the fact that find_path() is called *before* sudoers is read.
+	[6808df7e417c]
+
+2004-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Do not require _PATH_USRTMP to be set.
+	[546f3270dd10]
+
+	* BUGS, CHANGES, TODO:
+	sync
+	[4205ddeab781]
+
+	* sudo.man.in:
+	regen
+	[e2143690a88a]
+
+	* sudo.pod:
+	Clarify that when sudo is run by root with the SUDO_USER variable
+	set, the sudoers lookup happens for root and not the SUDO_USER user.
+	[47207bec1bdf]
+
+2004-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c, auth/sudo_auth.c, interfaces.c, logging.c, parse.c,
+	set_perms.c, sigaction.c, sudo.c, tgetpass.c:
+	Use the SET, CLR and ISSET macros.
+	[a8b0d7f1e8fd]
+
+	* defaults.c, env.c:
+	Use the SET, CLR and ISSET macros.
+	[2f39431e0a49]
+
+	* fnmatch.c:
+	Use the SET, CLR and ISSET macros.
+	[1afbcba22ba6]
+
+	* interfaces.h:
+	MAIN was replaced with _SUDO_MAIN some time ago.
+	[ea1b38f2ac9d]
+
+	* sudo.c:
+	Don't look at prev_user until after we've parsed sudoers and done
+	the password check. That way, if sudo/sudoedit is run from a root
+	process that was invoked by sudo, we check sudoers for root, not the
+	previous user. This makes sudoedit much more useful and means that
+	for the sudo case, we get correct logging on who actually ran the
+	command.
+	[431dfbf20552]
+
+2004-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_edit.c:
+	Add a comment describing why we need to be notified about our child
+	stopping.
+	[0bec3ce4b49d]
+
+2004-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.in:
+	Update the noexec variable descriptions
+	[9cb7f1aa0e57]
+
+	* sudoers.man.in, sudoers.pod:
+	noexec now replaces more than just execve()
+	[23cbdc0ee95c]
+
+	* sudo_noexec.c:
+	Alas, all the world does not go through execve(2). Many systems
+	still have an execv(2) system call, Linux 2.6 provides fexecve(2)
+	and it is not uncommon for libc to have underscore ('_') versions of
+	the functions to be used internally by the library. Instead of
+	stubbing all these out by hand, define a macro and let it do the
+	work. Extra exec functions pointed out by Reznic Valery.
+	[9fa0cd871b0c]
+
+	* sudo.c, sudo_edit.c:
+	Fix suspending the editor in -e mode. Because we do a fork() first
+	we need to be notified when the child has been stopped and then send
+	that same signal to ourself so the shell can do its job control
+	thing.
+	[773165eb6057]
+
+	* visudo.c:
+	Use WIFEXITED and WEXITSTATUS macros. If there are systems out there
+	that want to run sudo that still don't support these we can try to
+	deal with that later.
+	[6af68e4aff60]
+
+	* lex.yy.c:
+	regen
+	[403435317d5d]
+
+	* sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod:
+	Document sudo -e / sudoedit
+	[a80f6ea910af]
+
+	* configure, configure.in:
+	fix typo
+	[5020fcdc27f4]
+
+	* config.h.in, configure.in:
+	Add SET/CLR/ISSET
+	[03ff57286e7e]
+
+2004-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Allow non-exclusive flags when invoked as sudoedit. Pretty print the
+	long usage() line to not wrap (assumes 80 char display)
+	[3941fa4004bb]
+
+	* Makefile.in, sudo.c:
+	If sudo is invoked as "sudoedit" the -e flag is implied and no other
+	flags are permitted.
+	[929670b01293]
+
+	* sudo.h:
+	Add a new flag, -e, that makes it possible to give users the ability
+	to edit files with the editor of their choice as the invoking user,
+	not the runas user. Temporary files are used for the actual edit and
+	the temp file is copied over the original after the editor is done.
+	[c4051414c1f4]
+
+	* Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c:
+	Add a new flag, -e, that makes it possible to give users the ability
+	to edit files with the editor of their choice as the invoking user,
+	not the runas user. Temporary files are used for the actual edit and
+	the temp file is copied over the original after the editor is done.
+	[37ac05c8ac3c]
+
+	* env.c, sudo.c:
+	If real uid == 0 and the SUDO_USER environment variables is set, use
+	that to determine the invoking user's true identity. That way the
+	proper info gets logged by someone who has done "sudo su" but still
+	uses sudo to as root. We can't do this for non-root users since that
+	would open up a security hole, though perhaps it would be acceptable
+	to use getlogin(2) on OSes where this a system call (and doesn't
+	just look in the utmp file).
+	[c2f9198708a1]
+
+	* pathnames.h.in:
+	Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
+	[7d9e5768df93]
+
+	* config.h.in, configure, configure.in:
+	Add check for fchown(2)
+	[a85df18798ed]
+
+2004-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Back out portions of the -i commit that set NewArgv[0] in
+	set_runaspw. It is far to late to set NewArgv[0] there and will have
+	no effect anyway as cmnd and safe_cmnd have already been set.
+	[c2d343430c1c]
+
+	* visudo.c, visudo.pod:
+	Prefer VISUAL over EDITOR like old vipw did.
+	[ae32f477cea3]
+
+2004-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c, sudo.c:
+	In -i mode always set new environment based on the runas user's
+	passwd entry.
+	[fa653b7887a8]
+
+2004-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.man.in, sudo.pod:
+	Document the new -i flag and sync SYNOPSIS section with usage() in
+	sudo.c. Also sort the flags in the OPTIONS section.
+	[6aabc0ffc47e]
+
+	* sudo.c, sudo.h:
+	o Add -i that acts similar to "su -", based on patches from David J.
+	MacKenzie o Sort the flags in the usage message
+	[c0fe7d6beffd]
+
+	* sudoers.man.in, sudoers.pod:
+	Add a missing @runas_default@ substitution.
+	[60516fe2d090]
+
+2004-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Change euid to runas user before calling find_path(). Unfortunately,
+	though runas_user can be modified in sudoers we haven't parsed
+	sudoers yet.
+	[f469fdf2e313]
+
+	* sudoers.man.in, sudoers.pod:
+	Add missing defintion of Parameter_List and use single pipes in the
+	Defaults EBNF definition.
+	[f7bed6e909bf]
+
+	* sudo.c:
+	Fix a bug when set_runaspw() is used as a callback. We don't want to
+	reset the contents of runas_pw if the user specified a user via the
+	-u flag.
+
+	Avoid unnecessary passwd lookups in set_authpw(). In most cases we
+	already have the info in runas_pw.
+	[efc35623ba09]
+
+2004-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	Add Stan Lee / Uncle Ben quote to the lecture from RedHat
+	[ebd5a76ccd7e]
+
+	* sudo.h:
+	Update sudo_getepw() proto and add one for set_runaspw()
+	[6ed65795c17f]
+
+	* parse.c:
+	If we can't stat the command as root, try as the runas user instead.
+	[ae713fca0e15]
+
+	* testsudoers.c, visudo.c:
+	Add stub set_runaspw() function
+	[42aa37050053]
+
+	* sudo.c:
+	Add set_runaspw() function to fill in runas_pw. This will be used as
+	a callback to update runas_pw when the runas user changes.
+	[e570aa0088d0]
+
+	* env.c, sudo.c:
+	PERM_RUNAS -> PERM_FULL_RUNAS
+	[51eec6f9e89a]
+
+	* set_perms.c, sudo.h:
+	Rename PERM_RUNAS -> PERM_FULL_RUNAS and add a PERM_RUNAS that just
+	changes the euid.
+	[877c6fe4d12c]
+
+	* getspwuid.c:
+	Make sudo_pwdup() act like OpenBSD pw_dup() and allocate memory in
+	one chunk for easy free()ing. Also change it from static to extern.
+	[ab503260a7ec]
+
+	* defaults.c, defaults.h:
+	Add callback support
+	[a61c4ca983fb]
+
+	* def_data.c, def_data.in:
+	Add a callback field and use it for runas_default
+	[d3e9f06872b8]
+
+	* mkdefaults:
+	Add a callback field and use it for runas_default
+	[96b69c27df5e]
+
+2004-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/fwtk.c:
+	Add support for chalnecho and display server responses used by fwtk
+	>= 2.0
+	[b1870f7aaf0d]
+
+2004-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.man.in, sudoers.pod:
+	ld.so is ld.so.1 on solaris
+	[2bf9a123fa4c]
+
+	* Makefile.in, config.h.in, configure, configure.in, sudo.c, sudo.h:
+	Use closefrom() instead of doing the equivalent inline.
+	[7e3ef6072884]
+
+	* closefrom.c:
+	closefrom(3) for systems w/o it
+	[35caf58bb636]
+
+2004-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.man.in:
+	Update from .pod file.
+	[d4c94fc0e0c9]
+
+	* configure, configure.in:
+	Substitute noexec_file for the sudoers man page
+	[203d3376a551]
+
+	* sudo.man.in, sudo.pod:
+	Mention noexec
+	[014375ddbb06]
+
+	* sudoers.man.in, sudoers.pod:
+	Document noexec
+	[49a65d06201f]
+
+	* auth/pam.c, config.h.in, configure.in:
+	Move PAM_CONST macro definition from config.h to pam.c where it
+	belongs. We can't have this in config.h since that gets included too
+	early.
+	[e64748071637]
+
+	* auth/pam.c, config.h.in, configure, configure.in:
+	Some PAM implementations put their headers in /usr/include/pam
+	instead of /usr/include/security.
+	[8cc749e9575c]
+
+	* configure.in:
+	I missed changing the EXEC macro -> EXECV here when I changed this
+	in config.h.in and sudo.c a while ago.
+	[6f5afac7789f]
+
+	* acsite.m4:
+	OpenBSD vax/m88k/hppa don't do shared libs
+	[e4901d958bb7]
+
+	* configure, configure.in:
+	o merge the hpux case entries into a single entry w/ its own sub-
+	case statement. o HP-UX >= 11 support getspnam(), use it in
+	preference to getprpwuid()
+	[0caad428894e]
+
+	* configure, configure.in:
+	eval $shrext so that it expands nicely on MacOS X
+	[40419343eef8]
+
+	* Makefile.in:
+	Don't lie about making a module, it does the wrong thing on mach
+	[7629b28f5688]
+
+	* ltmain.sh:
+	Remove requirement that libs must begin with "lib". They don't when
+	we point directly at the lib using LD_PRELOAD or its equivalent.
+	[d66f3de6ec85]
+
+	* acsite.m4:
+	Disable support for c++, f77 and java. We don't need it, it takes a
+	lot of time, and it hosed our check for shared lib support.
+	[4f5749c52ce4]
+
+	* configure:
+	regen
+	[160865e9d15f]
+
+	* configure.in:
+	Call AC_ENABLE_SHARED and check the status of enable_shared to know
+	when shared libs are available.
+	[42504c1668fc]
+
+	* acsite.m4:
+	Duh, OpenBSD suports shared libs too
+	[8e3cd9417475]
+
+	* config.h.in, configure.in:
+	Only OpenPAM and Linux PAM use const qualifiers.
+	[b2f76476e866]
+
+	* configure, configure.in:
+	o No need to check for sed, libtool config does that for us o move
+	check for --with-noexec until after libtool magic is run so we can
+	use $can_build_shared and $shrext
+	[668c656e89cc]
+
+	* ltmain.sh:
+	Don't print a bunch of crap about library installs since we are not
+	really installing a library.
+	[83fbcad29fe4]
+
+	* env.c:
+	Make format_env() varargs Add noexec support for Darwin, MacOS X,
+	Irix, and Tru64
+	[468885d75d10]
+
+	* acsite.m4, ltconfig, ltmain.sh:
+	Update to libtool 1.5 with local changes: o no ldconfig in the
+	finish step o assume no libprefix or version is needed
+	[4961cffc3797]
+
+	* sudo_noexec.c:
+	Fix compilation under K&R
+	[8b309bf0b1b2]
+
+2004-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	checkpoint
+	[3c368badab32]
+
+	* sudo_noexec.c:
+	stub execve() that just returns EACCES; used for noexec
+	functionality
+	[1297acae283a]
+
+	* sudo.tab.c:
+	Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with
+	generated code.
+	[0a61c735eabe]
+
+	* sudo.tab.h:
+	Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with
+	generated code.
+	[dcab78c49273]
+
+2004-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* def_data.c, def_data.h, def_data.in:
+	Move the environment defaults to the end and shorten a few of the
+	descriptions.
+	[66787b9c612c]
+
+	* configure, configure.in:
+	no shared libs on ultris or convexos
+	[2c5f3c456e32]
+
+	* Makefile.in, configure, configure.in:
+	Build sudo_noexec shared object using libtool; could use some
+	cleanup.
+	[373f483555dd]
+
+	* acsite.m4, ltconfig, ltmain.sh:
+	libtool scaffolding
+	[c903a42e3d90]
+
+	* parse.yacc, sudo.tab.c:
+	Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so that order is not
+	important.
+	[c6e8a34639a4]
+
+	* defaults.c, env.c, lex.yy.c, parse.c, parse.h, parse.lex,
+	parse.yacc, pathnames.h.in, sudo.c, sudo.h, sudo.tab.c:
+	update copyright year
+	[a16372ae1711]
+
+	* configure, configure.in, defaults.c, env.c, pathnames.h.in:
+	Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
+	option. The default value of noexec_file is set to this.
+	[7d88e1d3c494]
+
+	* def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
+	parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c,
+	sudo.tab.h:
+	Add support for preloading a shared object containing a dummy
+	execve() function that just sets error and returns -1. This adds a
+	"noexec_file" option to load the filename as well as a "noexec" flag
+	to enable it unconditionally. There is also a NOEXEC tag that can be
+	attached to specific commands and an EXEC tag to disable it.
+	[c8b6712feb91]
+
+	* mkdefaults:
+	add missing newline to usage statement
+	[e84746618362]
+
+	* config.h.in, sudo.c:
+	Rename EXEC macro -> EXECV
+	[ddaa0c027299]
+
+	* logging.c:
+	Don't truncate usernames to 8 characters in the log message.
+	[f62a20f27075]
+
+	* check.c, sudoers.man.in, sudoers.pod:
+	Update copyright year
+	[ca9964054085]
+
+	* check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
+	sudoers.pod:
+	Add a new option, lecture_file, that can be used to point to a
+	custom sudo lecture.
+	[940133231216]
+
+2003-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
+	auth/sudo_auth.c:
+	Add a zero_bytes() function to do the equivalent of bzero in such a
+	way that will heopfully not be optimized away by sneaky compilers.
+	[161b6d74bfb4]
+
+	* Makefile.in, sudo.h:
+	Add a zero_bytes() function to do the equivalent of bzero in such a
+	way that will heopfully not be optimized away by sneaky compilers.
+	[ff136de3e255]
+
+	* zero_bytes.c:
+	Add a zero_bytes() function to do the equivalent of bzero in such a
+	way that will heopfully not be optimized away by sneaky compilers.
+	[d035abf0af94]
+
+	* err.c:
+	Use #ifdef __STDC__, not #if __STDC__.
+	[6889dd6bc51a]
+
+2003-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkdefaults:
+	Always put at least one space between the def_* macro name and its
+	definition.
+	[6b3ad0e6619a]
+
+	* configure, configure.in:
+	Adjust code for --without-lecture to match new values.
+	[062aa788a6b9]
+
+	* visudo.man.in:
+	regen after pasto fix
+	[3deec16906c0]
+
+	* sudoers.man.in, sudoers.pod:
+	Document that "lecture" has changed from a flag to a tuple.
+	[e2c03062b533]
+
+	* check.c, def_data.c, def_data.h, def_data.in, defaults.c,
+	defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h:
+	Add support for tuples in def_data.in; these are implemented as an
+	enum type. Currently there is only a single tuple enum but in the
+	future we may have one tuple enum per T_TUPLE entry in def_data.in.
+	Currently listpw, verifypw and lecture are tuples. This avoids the
+	need to have two entries (one ival, one str) for pwflags and syslog
+	values.
+
+	lecture is now a tuple with the following values: never, once,
+	always
+
+	We no longer use both an int and string entry for syslog facilities
+	and priorities. Instead, there are logfac2str() and logpri2str()
+	functions that get used when we need to print the string values.
+	[5293f946c836]
+
+	* auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
+	auth/rfc1938.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c,
+	check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
+	logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
+	sudo.tab.c, visudo.c:
+	Create def_* macros for each defaults value so we no longer need the
+	def_{flag,ival,str,list,mode} macros (which have been removed). This
+	is a step toward more flexible data types in def_data.in.
+	[009c02934106]
+
+	* TODO:
+	checkpoint
+	[0a99a4bb5d15]
+
+2003-12-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	If we are in -k/-K mode, just spew to stderr. It is not unusual for
+	users to place "sudo -k" in a .logout file which can cause sudo to
+	be run during reboot after the YP/NIS/NIS+/LDAP/etc daemon has died.
+	Previously, this would result in useless mail and logging.
+	[d282e7ed63af]
+
+2003-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.pod:
+	fix pasto in VISUAL description
+	[1c6a6148b5f9]
+
+2003-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[f44312c63799]
+
+	* CHANGES:
+	checkpoint
+	[0c42e38f78d5]
+
+	* TROUBLESHOOTING:
+	Some OSes (like Solaris) allow export w/ nosuid too
+	[973ce85ffa12]
+
+2003-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	We don't use FD_ZERO anymore so just define FD_SET (if not already
+	there).
+	[d1c8c11905cd]
+
+2003-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Fix a core dump on Solaris by preserving the pam_handle_t we used
+	during authentication for pam_prep_user(). If we didn't authenticate
+	(ie: ticket still valid), we call pam_init() from pam_prep_user().
+	This is something of a hack; it may be better to change the auth API
+	and add an auth_final() function that acts like pam_prep_user().
+	[f787de49b175]
+
+2003-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Add explicit declaration of printerr variable in function header
+	(was defaulting to int which is OK but oh so K&R :-). From Theo.
+	[492c2358783f]
+
+2003-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure.in:
+	s/HAVE_STOW/USE_STOW/
+	[4b99e1824ece]
+
+	* logging.c:
+	Also exit waitpid() loop when pid == 0. Fixes a problem where the
+	sudo process would spin eating up CPU until sendmail finished when
+	it has to send mail.
+	[ec3d5792b9b4]
+
+2003-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* fnmatch.3:
+	Remove advertising clause, UCB has disavowed it
+	[3ff24291bcfa]
+
+	* fnmatch.c:
+	Remove advertising clause, UCB has disavowed it
+	[43a26bbd6628]
+
+2003-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	Don't assume that getgrnam() calls don't modify contents of struct
+	passwd returned by getpwnam(). On FreeBSD w/ NIS this can happen.
+	Based on a patch from Kirk Webb.
+	[5574c68f60f3]
+
+2003-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	missing ;;
+	[22378f2a9d31]
+
+	* configure.in:
+	darwin has a broken setreuid() in at least some versions
+	[d572aed930d2]
+
+	* env.c:
+	Fix an off by one error when reallocating the environment; Kevin Pye
+	[3d98e7cf097a]
+
+2003-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Fix User_Spec definition; SEKINE Tatsuo
+	[49b0da65e090]
+
+2003-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY:
+	More info on the early days from Coggs.
+	[9381ca10b06b]
+
+2003-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	remove errant semicolon that prevented compilation under heimdal
+	[d2f2bb73a598]
+
+2003-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
+	auth/fwtk.c, auth/kerb4.c, parse.lex, parse.yacc, utime.c,
+	version.h:
+	add DARPA credit on affected files
+	[868d54cbddea]
+
+	* auth/kerb5.c, auth/pam.c:
+	add DARPA credit on affected files
+	[15da3021b49c]
+
+	* auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
+	auth/securid5.c, auth/sia.c, auth/sudo_auth.c, fileops.c,
+	find_path.c, getprogname.c, getspwuid.c, goodpath.c, interfaces.c,
+	interfaces.h:
+	add DARPA credit on affected files
+	[da66e28fb3f5]
+
+	* logging.c, parse.c:
+	add DARPA credit on affected files
+	[8f75f822755b]
+
+	* pathnames.h.in:
+	add DARPA credit on affected files
+	[e334cdda422f]
+
+	* set_perms.c:
+	add DARPA credit on affected files
+	[3d79fdabb582]
+
+	* sigaction.c, strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
+	sudoers.man.in:
+	add DARPA credit on affected files
+	[d8adf1c2ba22]
+
+	* sudoers.pod:
+	add DARPA credit on affected files
+	[83b46318750b]
+
+	* testsudoers.c, tgetpass.c, visudo.c, visudo.man.in, visudo.pod:
+	add DARPA credit on affected files
+	[7020785ee50d]
+
+	* Makefile.in, alloc.c, check.c:
+	add DARPA credit on affected files
+	[cd939e05c810]
+
+	* compat.h:
+	add DARPA credit on affected files
+	[316a735783c4]
+
+	* defaults.c, defaults.h:
+	add DARPA credit on affected files
+	[6a64205fd1eb]
+
+	* env.c:
+	add DARPA credit on affected files
+	[90239f51ef0a]
+
+	* LICENSE:
+	slightly different wording for the darpa credit
+	[e468909c4a21]
+
+2003-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE:
+	Add DARPA credit
+	[8eb20e2cd63e]
+
+2003-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	Use krb5_princ_component() instead of krb5_princ_realm() for MIT
+	Kerberos like we did before I messed things up ;-)
+
+	Use krb5_principal_get_comp_string() to do the same thing w/
+	Heimdal. I'm not sure if the component should be 0 or 1 in this
+	case.
+
+	#define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
+	older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
+	should be a configure check for this I guess.
+	[74919a3933fe]
+
+2003-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING, config.h.in, configure, configure.in:
+	builtin -> built-in; Jason McIntyre
+	[70b81ac48943]
+
+	* sample.sudoers:
+	builtin -> built-in; Jason McIntyre
+	[027f2187923e]
+
+	* sudoers.pod:
+	built in -> built-in; Jason McIntyre
+	[da658ef5138d]
+
+2003-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	checkpoint for 1.6.7p3
+	[da85f989fadf]
+
+	* HISTORY:
+	Update info on the early years @ SUNY-Buffalo from Cliff Spencer.
+	Amazingly, sudo source from 1985 is available via groups.google.com
+	[39e0fc85b89f]
+
+	* sudo.c:
+	Don't change rl.rlim_max for RLIMIT_CORE. We need only set
+	rl.rlim_cur to 0 to turn off core dumps. This may be needed for the
+	RLIMIT_CORE restoration on some OSes.
+	[7e2c1a7adfd8]
+
+2003-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	Make this compile on Heimdal and MIT Kerberos 5
+	[44c07d615868]
+
+	* config.h.in, configure, configure.in:
+	Check for heimdal even if we found krb5-config and define
+	HAVE_HEIMDAL.
+	[aba0126f0059]
+
+	* auth/kerb5.c:
+	Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5. The former is no
+	longer defined by MIT kerb5 (though it used to be and indeed remains
+	so in Heimdal).
+	[e5a6c64d7cd5]
+
+2003-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkinstalldirs:
+	Remove newer stuff that passes multiple (possibly duplicate)
+	directories to "mkdir -p" since that seems to break on Tru64 Unix at
+	least. This basically brings back what shipped with sudo 1.6.6.
+	[f2a1abd872b3]
+
+2003-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/kerb5.c:
+	Correct number of args to krb5_principal_get_realm() and fix an
+	unclosed comment that hid the bug.
+	[0b37f8ce7824]
+
+	* configure:
+	regen
+	[1876cb840fe0]
+
+	* BUGS:
+	++version
+	[ea3573432412]
+
+	* CHANGES, version.h:
+	++version
+	[f66985a64063]
+
+	* INSTALL:
+	++version
+	[555aeba5c2bf]
+
+	* INSTALL.binary:
+	++version
+	[a506204e77d0]
+
+	* Makefile.in:
+	++version
+	[97ef63cedc38]
+
+	* README:
+	++version
+	[488e0bbff613]
+
+	* configure.in:
+	++version
+	[480aff7c048e]
+
+	* configure.in:
+	use krb5-config to determine Kerberos V details if it exists
+	[7b46bbdaf774]
+
+	* alloc.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
+	auth/securid5.c, auth/sia.c, check.c, compat.h, defaults.c, env.c,
+	find_path.c, interfaces.c, logging.c, parse.c, sudo.c, sudo.h,
+	testsudoers.c, visudo.c:
+	Use warn/err and getprogname() throughout. The main exception is
+	openlog(). Since the admin may be filtering logs based on the
+	program name in the log files, hard code this to "sudo".
+	[9f180d015cfa]
+
+	* Makefile.in:
+	Add getprogname.c and err.c
+	[d411c54a07dc]
+
+	* configure:
+	regen
+	[6d585d391acc]
+
+	* config.h.in, configure.in:
+	Add checks for getprognam(), __progname and err.h
+	[bcbccf61d34a]
+
+	* emul/err.h:
+	For systems withour err/warn functions.
+	[1b33118884d9]
+
+	* err.c:
+	For systems withour err/warn functions.
+	[26721f6b041f]
+
+	* getprogname.c:
+	For systems neither getprogname() nor __progname; uses Argv[0].
+	[841cf42af1eb]
+
+2003-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	checkpoint for 1.6.7p1
+	[5bfdaf441dce]
+
+	* sudo.c, testsudoers.c:
+	fix strlcpy() rval check (innocuous)
+	[e05ac7e0d1f3]
+
+	* check.c:
+	oflow detection in expand_prompt() was faulty (false positives). The
+	count was based on strlcat() return value which includes the length
+	of the entire string.
+	[086c5a0acb25]
+
+2003-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	checkpoint for the sudo 1.6.7 release
+	[87322187ed78]
+
+	* RUNSON, TODO:
+	checkpoint for the sudo 1.6.7 release
+	[096bab4da29a] [SUDO_1_6_7]
+
+2003-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	g/c unused variable
+	[c57cd4a17765]
+
+	* configure:
+	regen
+	[e7c1f581dfac]
+
+	* configure.in:
+	use man sections 8 and 5 for csops
+	[87de581bda88]
+
+2003-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[cb1433a9c7a1]
+
+	* configure.in:
+	Add -lskey or -lopie directly to SUDO_LIBS instead of having
+	AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
+	[ac5667978939]
+
+	* configure:
+	regen
+	[638459118a2a]
+
+	* INSTALL:
+	Add --with-blibpath for AIX. An alternate libpath may be specified
+	or
+	-blibpath support can be disabled. Also change conifgure such that
+	-blibpath is not specified if no -L libpaths were added to
+	SUDO_LDFLAGS.
+	[4b4bbe5bbe1b]
+
+	* aclocal.m4:
+	Add --with-blibpath for AIX. An alternate libpath may be specified
+	or
+	-blibpath support can be disabled. Also change conifgure such that
+	-blibpath is not specified if no -L libpaths were added to
+	SUDO_LDFLAGS.
+	[37022e991575]
+
+	* configure.in:
+	Add --with-blibpath for AIX. An alternate libpath may be specified
+	or
+	-blibpath support can be disabled. Also change conifgure such that
+	-blibpath is not specified if no -L libpaths were added to
+	SUDO_LDFLAGS.
+	[c7d17b480cad]
+
+	* configure.in:
+	add AIX blibpath support
+	[16ba788bf086]
+
+	* INSTALL, configure.in:
+	--with-skey and --with-opie now take an option directory argument
+	This obsoletes a --with-csops hack (/tools/cs/skey)
+
+	Also remove the remaining direct uses of "echo"
+	[5b4986a90c03]
+
+2003-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	Detect KTH Kerberos IV and deal with it. Also make -lroken optional
+	for KTH Kerberos IV and V.
+	[119f97b48e18]
+
+	* aclocal.m4:
+	Add SUDO_APPEND_LIBPATH function that add -L/path/to/dir (and
+	-R/path/to/dir if $with_rpath) to the specified variable.
+	[e55e49d076ce]
+
+	* INSTALL, configure.in:
+	Add -R/path/to/libs for Solaris and SVR4. There is a new configure
+	option, --with-rpath to control this behavior.
+	[d4730c5399ab]
+
+	* configure.in:
+	for kerb4 put libdes after libkrb on the link line
+	[5c566100eab6]
+
+	* auth/kerb4.c:
+	typo
+	[6541b72b64a3]
+
+	* configure.in:
+	fix kerberos lib check when a path is specified
+	[ae833a914c6f]
+
+	* logging.c:
+	Fix boolean thinko in SIGCHLD reaper and call reapchild after
+	sending mail instead of doing a conditional sudo_waitpid.
+	[86fa9a35df5a]
+
+2003-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[e6275cf528ba]
+
+	* configure.in:
+	replace =DIR with [=DIR] where sensible
+	[c39a59173b38]
+
+	* configure.in:
+	o Use AC_MSG_* instead of "echo" o New Kerberos include/lib
+	detection based on openssh's configure.in
+	[5b7a340912df]
+
+	* INSTALL:
+	--with-kerb4 and --with-kerb5 now take an optional argument.
+	[71ed87fc9c64]
+
+2003-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/securid.c:
+	Kill remaining strcpy(), the programmer's guide says username is 32
+	bytes.
+	[bdba70fcd08d]
+
+	* auth/kerb4.c:
+	trat uid_t as unsigned long for printf and use snprintf, not sprintf
+	[8072f5f8966d]
+
+	* auth/rfc1938.c:
+	use snprintf
+	[fc0c70c665fe]
+
+2003-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
+	auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
+	auth/rfc1938.c, auth/sudo_auth.c:
+	update copyright year
+	[b0a10ccb1d0e]
+
+	* sudo.man.in, sudoers.man.in, visudo.man.in:
+	update copyright year
+	[8fce0034eb51]
+
+	* LICENSE, Makefile.in, aclocal.m4, alloc.c, check.c, compat.h,
+	configure.in, env.c, find_path.c, interfaces.c, logging.c, parse.c,
+	parse.lex, parse.yacc, set_perms.c, sudo.c, sudo.h, sudo.pod,
+	sudoers.pod, testsudoers.c, version.h, visudo.c, visudo.pod:
+	update copyright year
+	[d541e75fe520]
+
+	* check.c, env.c, sudo.c:
+	Cast [ug]ids to unsigned long and printf with %lu
+	[2ede64d3592b]
+
+	* configure:
+	regen
+	[c7c3245bdf3e]
+
+	* configure.in:
+	correct error messages for --with-sudoers-{mode,uid,gid}
+	[77fc15b1c9db]
+
+	* alloc.c:
+	make the malloc(0) error specific to each function to aid tracking
+	down bugs.
+	[a58c34374b4b]
+
+	* alloc.c:
+	deal with platforms where size_t is signed and there is no SIZE_MAX
+	or SIZE_T_MAX
+	[7192abb4ab4e]
+
+	* auth/kerb5.c:
+	Make this compile w/ Heimdal and fix some gcc warnings.
+	[f52f026f31c2]
+
+	* sudo.c:
+	Use stat_sudoers macro so --with-stow can work
+	[c3674735c139]
+
+	* INSTALL, config.h.in, configure, configure.in:
+	Add support for --with-stow based on patches from Robert Uhl
+	[b274cc1dd52c]
+
+	* env.c:
+	fix indentation
+	[110d9f1721b1]
+
+	* configure.in:
+	back out rev 1.352
+	[1eee91c83f11]
+
+	* lex.yy.c:
+	regen
+	[72fba1c9590b]
+
+	* parse.lex:
+	use strlcpy, not strncpy
+	[4faccbaeccef]
+
+	* set_perms.c:
+	Fix typo; check pw_uid, not pw_gid after setusercontext() failure.
+	[33bf0d18fdc1]
+
+	* logging.c:
+	use pid_t
+	[3e0536993d2c]
+
+2003-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* strlcat.c, strlcpy.c:
+	Make gcc shutup about unused rcsid
+	[1669a0c74e9e]
+
+	* interfaces.c:
+	Move the n == 0 check for the non-getifaddrs cas
+	[2460be061b2a]
+
+	* auth/rfc1938.c:
+	skeychallenge() on NetBSD take a size parameter
+	[05acc2012801]
+
+	* configure:
+	regen
+	[24bccf4749e8]
+
+	* configure.in:
+	put -ldl after -lpam, not before; fixes static linking on Linux
+	[7f06b7b2b4d8]
+
+	* interfaces.c:
+	Avoid malloc(0) and fix the loop invariant for the getifaddrs()
+	case.
+	[239a55068646]
+
+	* sudo.cat, sudoers.cat, visudo.cat:
+	regen
+	[4a2eed3981ca]
+
+	* sudo.man.in, sudoers.man.in, visudo.man.in:
+	regen
+	[2c96ea2cf930]
+
+	* Makefile.in:
+	Preserve copyright notice from .pod file in .man.in file
+	[519fbd09aebc]
+
+	* visudo.pod:
+	Add sudoers(5) to SEE ALSO
+	[77ecfe3aedf1]
+
+2003-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c:
+	regen
+	[6f5751ce0b74]
+
+	* parse.lex:
+	Don't assume libc can realloc() a NULL string. If malloc/realloc
+	fails, make sure we just return; yyerror() is not terminal.
+	[1b8618623708]
+
+	* lex.yy.c:
+	regen
+	[5d31b46191c6]
+
+	* parse.lex:
+	simplify fill_args a little and use strlcpy for paranoia
+	[0ea35a55542b]
+
+	* sudo.tab.c:
+	regen
+	[5a8d508d708b]
+
+	* check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
+	testsudoers.c:
+	Use strlc{at,py} for paranoia's sake and exit on overflow. In all
+	cases the strings were either pre-allocated to the correct size of
+	length checks were done before the copy but a little paranoia can go
+	a long way.
+	[e73d28f1d14e]
+
+	* sudo.h:
+	Add strlc{at,py} protos
+	[748ffc7fc7f4]
+
+	* env.c, interfaces.c:
+	Use erealloc3()
+	[47f2cb46aba8]
+
+	* configure:
+	regen
+	[e7e2fb79f935]
+
+	* alloc.c:
+	Oflow test of nmemb > SIZE_MAX / size is fine (don't need >=). Use
+	memcpy() instead of strcpy() in estrdup() so this is strcpy()-free.
+	[7e0fa4d6fc1d]
+
+	* sudo.c:
+	snprintf() a uid as %lu, not %ld to match the MAX_UID_T_LEN test in
+	configure.
+	[09ea4d3959e9]
+
+	* aclocal.m4:
+	In MAX_UID_T_LEN test cast uid_t to unsigned long, just unsigned.
+	[31b4fdfdb8bf]
+
+2003-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Use snprintf() for paranoia
+	[a2659ceb46de]
+
+	* parse.yacc:
+	Use emalloc2 and erealloc3
+	[90a069842401]
+
+	* Makefile.in:
+	strlc{at,py} for those w/o it
+	[bac82dc916ee]
+
+	* strlcat.c, strlcpy.c:
+	stlc{at,py} for those w/o it.
+	[ce7254f5db09]
+
+	* config.h.in, configure, configure.in:
+	Add stlc{at,py} for those w/o it.
+	[00f08219657a]
+
+	* alloc.c, sudo.h:
+	Add erealloc3(), a realloc() version of emalloc2().
+	[c96eaf08bbed]
+
+	* interfaces.c, sudo.c:
+	Use emalloc2() to allocate N things of a certain size.
+	[1e0aba365555]
+
+	* alloc.c, sudo.h:
+	Add emalloc2() -- like calloc() but w/o the bzero and with
+	error/oflow checking.
+	[292150bc4153]
+
+	* alloc.c:
+	Error out on malloc(0); suggested by theo
+	[995279e81326]
+
+2003-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	fix a typo; David Krause
+	[f161213a17ab]
+
+2003-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	fix typo
+	[3ae5ad9a351a]
+
+2003-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Remove DYLD_ from the environment for MacOS X; from bbraun
+	[38caad5a3935]
+
+2003-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure.in:
+	not not; Anil Madhavapeddy
+	[d4f4f0bfc66b]
+
+2003-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	typos; jmc@openbsd.org
+	[868c0f09bf9e]
+
+2003-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	Add some missing ';' rule terminators that bison warns about.
+	[535b0b8dcce5]
+
+	* config.sub:
+	fix typo I introduced in last merge
+	[81db4e4f43fe]
+
+	* configure:
+	regenerate with autoconf 2.57
+	[ca0c1e9564f8]
+
+	* config.h.in:
+	Add missing "$HOME"
+	[209186197ad1]
+
+	* configure.in:
+	Add some more square backets to make autoconf 2.57 happy
+	[b5639c14faf7]
+
+	* config.guess:
+	Updates from autoconf-2.57
+	[ea0f8ca622af]
+
+	* config.sub, mkinstalldirs:
+	Updates from autoconf-2.57
+	[36be35eb331b]
+
+2003-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[0b529db7cb6d]
+
+	* sudo.tab.h:
+	regen
+	[13a65a421567]
+
+	* parse.lex, parse.yacc, sudoers.pod:
+	Add support for Defaults>RunasUser
+	[20d726373175]
+
+2003-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	fclose() yyin after each yyparse() is done and use fopen() instead
+	of using freopen().
+	[587f8a2df857]
+
+	* parse.lex:
+	Better fix for sudoers files w/o a newline before EOF. It looks like
+	the issue is that yyrestart() does not reset the start condition to
+	INITIAL which is an issue since we parse sudoers multiple times.
+	[920f8326968a]
+
+2003-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	Work around what appears to be a flex bug when dealing with files
+	that lack a final newline before EOF. This adds a rule to match EOF
+	in the non-initial states which resets the state to INITIAL and
+	throws an error.
+	[b94943bb1f81]
+
+	* visudo.c:
+	o The parser needs sudoers to end with a newline but some editors
+	(emacs) may not add one. Check for a missing newline at EOF and add
+	one if needed. o Set quiet flag during initial sudoers parse (to get
+	options) o Move yyrestart() call and always use freopen() to open
+	yyin after initial sudoers parse.
+	[12d12f9b07aa]
+
+2002-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Fix pasto/thinko in setresgid()/setregid() usage. Want to set
+	effective gid, not real gid, when reading sudoers.
+	[c7d18b810fcd]
+
+	* set_perms.c:
+	don't compile set_perms_posix if we have setreuid or setresuid
+	[b9cea7a81a29]
+
+2002-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, sudoers.pod:
+	document new prompt escapes
+	[2f088076b640]
+
+	* check.c:
+	Add %U and %H escapes and redo prompt rewriting. "%%" now gets
+	collapsed to "%" as was originally intended. This also gets rid of
+	lastchar (does lookahead instead of lookback) which should simplify
+	the logic slightly.
+	[4b707b77b3c7]
+
+2002-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Write the prompt *after* turning off echo to avoid some password
+	characters being echoed on heavily-loaded machines with fast
+	typists.
+	[d38c57775915]
+
+	* config.sub:
+	Add support for mipseb; wiz@danbala.tuwien.ac.at
+	[cfdac87ed5c8]
+
+	* configure.in:
+	Fix IRIX fallout from name changes in man dir/sect Makefile
+	variables. Patch from erici AT motown DOT cc DOT utexas DOT edu
+	[9a7618755c23]
+
+	* auth/pam.c:
+	Keep a local copy of tgetpass_flags so we don't add in TGP_ECHO to
+	the global copy. Problem noted by Peter Pentchev.
+	[d0a3e189cb06]
+
+2002-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	regen
+	[23b931359087]
+
+	* parse.yacc:
+	Add missing yyerror() calls; YYERROR does not seem to call this for
+	us.
+	[0be7aeb3ac57]
+
+2002-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	fix typo in comment; Pedro Bastos
+	[d7406c460e99]
+
+2002-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	document --disable-setresuid
+	[fbd03d03a027]
+
+	* auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
+	auth/sudo_auth.c:
+	Sprinkle some volatile qualifiers to prevent over-enthusiastic
+	optimizers from removing memset() calls.
+	[5370ac0e6129]
+
+	* logging.c, parse.yacc:
+	minor sign fixes pointed out by gcc -Wsign-compare
+	[db872438337f]
+
+	* set_perms.c, sudo.c, sudo.h:
+	Revamp set_perms. We now use a version based on setresuid() or
+	setreuid() when possible since that allows us to support the
+	stay_setuid option and we always know exactly what the semantics
+	will be (various Linux kernels have broken POSIX saved uid support).
+	[523bc212396c]
+
+	* config.h.in, configure:
+	regen from configure.in
+	[351877ea2624]
+
+	* configure.in:
+	Add checks for setresuid() and a way to disable using it
+	[a5b21653d169]
+
+	* compat.h:
+	No long need to emulate set*[ug]id() via setres[ug]id() or
+	setre[ug]id(). The new set_perms stuff only uses things it knows are
+	there.
+	[47884bd5d1d9]
+
+	* sudo.c:
+	Before exec, restore state of signal handlers to be the same as when
+	we were initialy invoked instead of just reseting to SIG_DFL. Fixes
+	a problem when using sudo with nohup. Based on a patch from Paul
+	Markham.
+	[f8f5a1484faa]
+
+	* sudo.c:
+	o timestamp_uid should be uid_t, not int o clarify error message
+	when sudo is run by root and no_root_sudo is set
+	[19dda0734264]
+
+2002-09-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	update ftp link for bison
+	[98bc191016e3]
+
+2002-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Error out if setusercontext() fails and the runas user is not root.
+	[089f9ade4686]
+
+2002-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/securid5.c:
+	Fix rcsid
+	[07e9e85dcc2f]
+
+	* configure.in:
+	Fix SecurID API test
+	[5ec201f454a5]
+
+2002-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	typo in comment
+	[9d385c9ac533]
+
+	* configure.in:
+	securid5 stuff needs pthreads. Just adding -lpthread is suboptimal
+	but I don't see a better way at the moment.
+	[f89e55cbb313]
+
+	* Makefile.in, auth/securid5.c:
+	SecurID API version 5 support from Michael Stroucken
+	[68500ac7e531]
+
+	* configure.in:
+	Add check for SecurID 5.0 API
+	[1ee242e6de6b]
+
+2002-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* strerror.c:
+	We actually do still need config.h to get the 'const' definition for
+	K&R C.
+	[d9c982032d85]
+
+2002-05-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen with autoconf 2.5.3
+	[c71fc086eef5]
+
+	* configure.in:
+	Don't set sysconfdir to '/etc' if the user has specified a --prefix.
+	[d90da1efafd9]
+
+	* configure.in:
+	Some fixes for autoconf 2.53 from Robert Uhl o don't AC_SUBST
+	LIBOBJS o force a 4th arg for AC_CHECK_HEADER() to workaround a bug
+	[dd67afefa90d]
+
+	* env.c, sudo.c, sudo.h:
+	No need for dump_badenv() now that dump_defaults() knows how to dump
+	lists.
+	[6bcda468501d]
+
+	* BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
+	version.h:
+	++version
+	[44e3b8f95f0b]
+
+	* sudoers.pod:
+	document timestampowner
+	[37ebd69e9dd1]
+
+	* check.c:
+	Don't call set_perms() when doing timestamp stuff unless
+	timestamp_uid != 0.
+	[63a63d41d18c]
+
+	* auth/sudo_auth.c, check.c, logging.c, parse.c, set_perms.c, sudo.c,
+	sudo.h, testsudoers.c:
+	g/c second arg to set_perms--it is no longer used
+	[7ac4ce50c612]
+
+2002-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, set_perms.c, sudo.c, sudo.h:
+	Add support for non-root timestamp dirs. This allows the timestamp
+	dir to be shared via NFS (though this is not recommended).
+	[faa83dd2b7fb]
+
+	* def_data.c, def_data.h, def_data.in:
+	Add timestampowner, "Owner of the authentication timestamp dir"
+	[d47640d4c86a]
+
+2002-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Don't try to pre-compute the size of the new envp, just allocate
+	space up front and realloc as needed. Changes to the new env pointer
+	must all be made through insert_env() which now keeps track of
+	spaced used and allocates as needed.
+	[39bc934a9f2c]
+
+2002-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[0e12c09bb790]
+
+	* configure.in:
+	Fix two typo/pastos; from jrj@purdue.edu
+	[b718a4bf1181]
+
+2002-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL.binary, README:
+	++version
+	[a1e33027278c] [SUDO_1_6_6]
+
+	* configure, sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
+	visudo.cat, visudo.man.in:
+	regen
+	[19eb2be283ef]
+
+	* CHANGES, RUNSON, TODO:
+	Sync with 1.6.6
+	[2ff9a9087f63]
+
+	* check.c:
+	The the loop used to expand %h and %u, the lastchar variable was not
+	being initialized. This means that if the last char in the prompt is
+	'%' and the first char is 'h' or 'u' a extra copy of the host or
+	user name would be copied, for which space had not been allocated.
+	[b2e27197857d]
+
+2002-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, Makefile.in, configure.in, version.h:
+	crank version to 1.6.6
+	[cfd08689e597]
+
+	* auth/afs.c:
+	#undef VOID to get rid of an AFS warning
+	[b40760564dc1]
+
+	* env.c:
+	Use easprintf instead of emalloc + sprintf for some things.
+	[e7bfe2e69a03]
+
+2002-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[35327104383d]
+
+	* parse.c, parse.lex, parse.yacc, testsudoers.c:
+	Remove Chris Jepeway's email address so people don't bug him ;-)
+	[c03410747a69]
+
+2002-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Move endpwent() to be after set_perms(PERM_RUNAS, ...) and also call
+	endgrent() at the same time.
+	[28b6097d5d1a]
+
+2002-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Make it clear which configure options take arguments.
+	[38529e7efad0]
+
+2002-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there is no
+	RLIM_INFINITY, just pretend it is -1. This works because we only
+	check for RLIM_INFINITY and do not set anything to that value.
+	[53173d34e6eb]
+
+2002-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Zero and free allocated memory when there is a conversation error.
+	[e342133db579]
+
+	* auth/bsdauth.c:
+	Use sigaction() not signal()
+	[126c2790561f]
+
+	* INSTALL:
+	Mention that some linux kernels have broken POSIX saved ID support
+	[571ef1a893d3]
+
+	* CHANGES:
+	checkpoint for 1.6.5p2
+	[9e9e456f7f43]
+
+	* configure:
+	regen
+	[d53703a46708]
+
+	* configure.in:
+	Add --disable-setreuid flag
+	[3b9f2679cb55]
+
+	* INSTALL:
+	Document new --disable-setreuid option and change description for
+	--disable-saved-ids to match new error message.
+	[14fd3e5f60a5]
+
+	* set_perms.c:
+	fatal() now takes an argument that determines whether or not to call
+	perror().
+	[d826b25e62ff]
+
+	* PORTING:
+	Update for new error messages from set_perms()
+	[60c545a6bcff]
+
+	* TROUBLESHOOTING:
+	Update for new error messages from set_perms()
+	[78007c3f76a9]
+
+2002-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Make this compile w/o warnings
+	[b90843a29af5]
+
+	* auth/pam.c:
+	Mention that we can't use pam_acct_mgmt()
+	[1dfc5a6e0479]
+
+	* auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c:
+	The user's password was not zeroed after use when AIX
+	authentication, BSD authentication, FWTK or PAM was in use.
+	[b18fff30b1e7]
+
+2002-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Avoid giving PAM a NULL password response, use the empty string
+	instead. This avoids a log warning when the user hits ^C at the
+	password prompt when PAM is in use.
+	[c3315805e4e4]
+
+	* auth/pam.c:
+	Don't check the return value of pam_setcred(). In Linux-PAM 0.75
+	pam_setcred() returns the last saved return code, not the return
+	code for the setcred module. Because we haven't called
+	pam_authenticate(), this is not set and so pam_setcred() returns
+	PAM_PERM_DENIED.
+	[73db145fa179]
+
+	* Makefile.binary:
+	Don't need a '/' between $(DESTDIR) and a directory.
+	[cd7eb6098b87]
+
+	* Makefile.in:
+	Don't need a '/' between $(DESTDIR) and a directory.
+	[0901ca618176]
+
+2002-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[41b12c039282]
+
+	* configure.in:
+	o BSDi also has a bogus setreuid() o Old FreeBSD has a bogus
+	setreuid() o new NetBSD has a real setreuid() o add check for
+	freeifaddrs() if getifaddrs() exists.
+	[a82ee3b01733]
+
+	* config.h.in, interfaces.c:
+	Older BSDi releases lack freeifaddrs() so add a test for that and if
+	it is not present just use free().
+	[6270671ea9d5]
+
+2002-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, RUNSON:
+	Checkpoint for 1.6.5p1
+	[26134ecf9b36]
+
+	* auth/passwd.c:
+	Return AUTH_FAILURE in passwd_init() if skeyaccess() denies access
+	to normal passwords, not AUTH_FATAL (which just causes an exit).
+	[785e0f4bc0e2]
+
+	* visudo.c:
+	Don't use memory after it has been freed.
+	[c60492739fdb]
+
+	* auth/passwd.c:
+	skeyaccess() wants a struct passwd * not a char *; Patch from
+	Phillip E. Lobbes
+	[65a1d3806fcd] [SUDO_1_6_5]
+
+	* BUGS:
+	++version
+	[b2e1825e692e]
+
+	* CHANGES, RUNSON, TODO:
+	checkpoint for sudo 1.6.5
+	[d730945622e7]
+
+2002-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[49744c403ac9]
+
+	* INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
+	version 1.6.5
+	[ec30a5f7fc45]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	sudo version 1.6.5
+	[458a3bed535d]
+
+	* logging.c:
+	o when invoking the mailer as root use a hard-coded environment that
+	doesn't include any info from the user's environment. Basically
+	paranoia.
+
+	o Add support for the NO_ROOT_MAILER compile-time option and run the
+	mailer as the user and not root if NO_ROOT_MAILER is defined.
+	[4df351ec92ce]
+
+	* set_perms.c, sudo.h:
+	Bring back PERM_FULL_USER
+	[edb6039bb284]
+
+	* configure:
+	regen
+	[3eb2943afa03]
+
+	* version.h:
+	version 1.6.5
+	[044fc9a0c72b]
+
+	* INSTALL, config.h.in, configure.in:
+	Add --disable-root-mailer option to run the mailer as the user and
+	not root.
+	[e9f805397963]
+
+	* CHANGES:
+	checkpoint for 1.6.4p2
+	[b58aae5aa98a]
+
+	* PORTING:
+	Mention the "seteuid(0): Operation not permitted" problem here too
+	just for good measure.
+	[90135b37a691]
+
+2002-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c, getspwuid.c, sudo.c:
+	The SHELL environment variable was preserved from the user's
+	environment instead of being reset based on the passwd database when
+	the "env_reset" option was used. Now it is reset as it should be.
+	[300066ef3c71]
+
+	* configure:
+	regen
+	[a47d779e6552]
+
+	* INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
+	sudo.c:
+	Add a configure option to turn off use of POSIX saved IDs
+	[fb18cc8e94d0]
+
+	* configure:
+	regen
+	[d4f2f20025b6]
+
+	* configure.in:
+	add --with-efence option
+	[45c4f33a8e88]
+
+	* sudo.c:
+	Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a problem where
+	"sudo -l" would not work if always_set_home was set.
+	[c3a6de6c4800]
+
+	* lex.yy.c:
+	regen
+	[417424452998]
+
+	* parse.lex:
+	Quoted commas were not being treated correctly in command line
+	arguments.
+	[753415541b37]
+
+	* sudo.c:
+	o Move the call to rebuild_env() until after MODE_RESET_HOME is set.
+	Otherwise, the set_home option has no effect.
+
+	o Fix use of freed memory when the "fqdn" flag is set. This was
+	introduced by the fix for the "segv when gethostbynam() fails" bug.
+	Also, we no longer call set_fqdn() if the "fqdn" flag is not set so
+	there is no need to check the "fqdn" flag in set_fqdn() itself.
+	[4b6a4245c04e]
+
+	* env.c:
+	Add 'continue' statements to optimize the switch statement. From
+	Solar.
+	[a82c76975ae5]
+
+2002-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in:
+	Regen from new sudoers.pod
+	[6ecc07b3d0e1] [SUDO_1_6_4]
+
+	* sudoers.pod:
+	Add caveat about stay_setuid flag
+	[9d228a7bea1b]
+
+	* sudo.c:
+	If set_perms == set_perms_posix and the stay_setuid flag is not set,
+	set all uids to 0 and use set_perms_fallback().
+	[c4e54d1ec86f]
+
+	* set_perms.c, sudo.h:
+	Remove PERM_FULL_USER (which is no longer used) and add
+	PERM_FULL_ROOT (used when exec'ing the mailer).
+	[15406c522ea2]
+
+	* logging.c:
+	Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the mailer since we
+	never want to run the mailer setuid.
+	[2294853e0666]
+
+2002-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
+	visudo.pod:
+	Use sudo.ws instead of courtesan.com in URLs
+	[55204002a308]
+
+	* Makefile.binary, Makefile.in:
+	Fix mansect substitution
+	[b7b5cbc3aa91]
+
+	* Makefile.in:
+	Substitute man sections in Makefile.binary
+	[040deb785e56]
+
+	* Makefile.binary:
+	Sync install targets with Makefile.in and substitute in man
+	sections.
+	[77882a275281]
+
+	* INSTALL, INSTALL.binary:
+	version is 1.6.4
+	[0f87aabbcb70]
+
+	* Makefile.in:
+	Repair bindist target
+	[8d43bfe7e2d1]
+
+	* CHANGES:
+	sync for 1.6.4
+	[13ca3d4a0a72]
+
+2002-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	Fix case where neither whoami nor id are found
+	[424dd270bc47]
+
+2002-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	If neither whoami nor id exists, just assume we are root.
+	[2d2644e42c53]
+
+	* alloc.c:
+	Add explicit cast to (VOID *) on malloc/realloc. Seems to be needed
+	on AIX which for some reason isn't pulling in the malloc prototype.
+	[231440d2ee3b]
+
+2002-01-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c:
+	(c) 2002
+	[700e3b41a68e]
+
+	* CHANGES:
+	checkpoint
+	[33e604bd8d5b]
+
+	* sudo.c:
+	Defer assigning new environment until right before the exec.
+	[f13c49e75c1c]
+
+	* parse.c:
+	kill extra blank line
+	[12ef22e9dae3]
+
+2002-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[a6cd2d788f74]
+
+	* configure.in:
+	Use -O not -O2 for m88k-motorola-sysv* since motorola gcc-derived
+	compiler doesn't recognise -O2.
+	[5234aa543692]
+
+	* HISTORY:
+	Clarify origins of Root Group sudo a bit based on info from
+	billp@rootgroup.com
+	[4deef01c4208]
+
+2002-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE:
+	2002
+	[6c8e089dbd1a]
+
+	* CHANGES:
+	checkpoint for 1.6.4rc1
+	[3349eb87a49f]
+
+2002-01-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	now generated via autoheader
+	[84657d303cb9]
+
+	* configure:
+	regen
+	[207bfa6a13f6]
+
+	* compat.h:
+	Move in some stuff that was previously in config.h.
+	[e576d8b6480f]
+
+	* aclocal.m4, configure.in:
+	Add info for autoheader.
+	[0549cd5da27c]
+
+2002-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	o Add DESTDIR support o Use -M, -O, and -G instead of -m, -o, and -g
+	to facilitate non-root installs
+	[619216038f56]
+
+	* install-sh:
+	Add -M option (like -m but only for root) If we can't find "whoami",
+	use "id" w/ some sed.
+	[b39121c8b792]
+
+	* configure:
+	regen
+	[b39b93ff9804]
+
+	* configure.in:
+	allow user to always override mansectsu and mansectform
+	[0fca5e63bd90]
+
+2001-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkinstalldirs:
+	update from autoconf 2.52
+	[07bd75a508c3]
+
+	* config.guess, config.sub:
+	Update from autoconf 2.52
+	[857b90fe31b7]
+
+	* configure:
+	regen with autoconf 2.52
+	[08e7d1ea2aeb]
+
+	* configure.in:
+	o Call AC_PROG_CC_STDC to find out how to run the compiler in ANSI
+	mode o Remove compiler-specific checks for HP-UX now that we use
+	AC_PROG_CC_STDC
+	[d433a70b6208]
+
+	* RUNSON:
+	Checkpoint
+	[babf6d2235d1]
+
+	* auth/pam.c:
+	o Add pam_prep_user function to call pam_setcred() for the target
+	user; on Linux this often sets resource limits. o When calling
+	pam_end(), try to convert the auth->result to a PAM_FOO value. This
+	is a hack--we really need to stash the last PAM_FOO value received
+	and use that instead.
+	[6ad6f340dd2a]
+
+	* set_perms.c, sudo.h:
+	o Add pam_prep_user function to call pam_setcred() for the target
+	user; on Linux this often sets resource limits.
+	[67795421ac82]
+
+	* env.c:
+	Fix off by one error in number of bytes allocated via malloc (does
+	not affected any released version of sudo).
+	[5f5915360111]
+
+2001-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c:
+	regen
+	[8208c0277775]
+
+	* parse.lex:
+	Allow '@', '(', ')', ':' in arguments to a defaults variable w/o
+	requiring that they be quoted.
+	[ae59bc8f68dd]
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	Mention that no double quotes are needed when
+	adding/deleting/assigning a single value to a list.
+	[25efc940a1f0]
+
+	* Makefile.in:
+	Don't rely on mkdefaults being executable, call perl explicitly.
+	[6edc97ba5f1d]
+
+	* sudo.tab.c:
+	regen
+	[49130b2e7e4d]
+
+	* parse.yacc:
+	Remove some XXX that are no longer relevant.
+	[d460ac0d3767]
+
+	* defaults.c:
+	o Roll our own loop instead of using strpbrk() for better
+	grokability o When adding to a list we must malloc() and use
+	memcpy(), not strdup() since we must only copy len bytes from str.
+	[649bef08e1f0]
+
+2001-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	regen
+	[f0bbf2c38c0e]
+
+	* parse.yacc:
+	typo in comment
+	[2563711ff593]
+
+2001-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	checkpoint
+	[a6d8a29fb30e]
+
+	* configure:
+	regen
+	[bdfcaaf3bd13]
+
+	* configure.in:
+	avoid the -g flag unless --with-devel was specified
+	[a976707bef30]
+
+	* Makefile.in:
+	mkdefaults, def_data.in and sigaction.c were missing from the
+	tarball
+	[6917ffbaa412]
+
+	* Makefile.in:
+	def_data.c was missing
+	[87c78b11453d]
+
+2001-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	Fix setting of $USER and $LOGNAME in the non-reset_env case. Also
+	allow HOME, SHELL, LOGNAME, and USER to be specified in keep_env
+	[fc8698e6a45e]
+
+	* TODO:
+	Another TODO item
+	[6f251d6cd466]
+
+	* sudoers:
+	Add comment for Default section so folks know where it should go.
+	[7edba626f392]
+
+2001-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Use TCSETAF, not TCSETA to set terminal in termio case
+	[fbd172f6c5d3]
+
+	* sudoers.cat, sudoers.man.in:
+	regen from sudoers.pod
+	[64edd2de816e]
+
+	* sudoers.pod:
+	o Typo, Runas_User_List should be Runas_List o a User_List can not
+	contain a uid o mention that the Defaults section should come after
+	Alias definitions but before the user specifications
+	[54070ba2092b]
+
+2001-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[e62d1d97693c]
+
+	* sudoers.pod:
+	Fix listpw and verifypw sections, they were not being formatted
+	properly.
+	[123868c2f3e9]
+
+	* sudoers.cat, sudoers.man.in:
+	regen
+	[f94841f8b374]
+
+	* sudoers.pod:
+	fix typos
+	[f278f1c1184e]
+
+	* configure:
+	regen
+	[d2270049ba9f]
+
+	* config.h.in, configure.in:
+	use AC_SYS_POSIX_TERMIOS instead of rolling our own
+	[c1a13f1354b9]
+
+	* README:
+	Reference sudo.ws not courtesan.com
+	[ca13be67ebd7]
+
+	* PORTING:
+	Add notes on shadow passwords
+	[aa13863f2314]
+
+	* BUGS:
+	In list mode (sudo -l), characters escaped with a backslash are
+	shown verbatim with the backslash.
+	[1a75a2858be2]
+
+	* sudoers:
+	Add simple examples from OpenBSD (Marc Espie)
+	[3ae9a9ae4125]
+
+	* tgetpass.c:
+	Catch SIGTTIN and SIGTTOU too and treat them like SIGTSTP.
+	[f8817699ee10]
+
+	* CHANGES:
+	minor prettyification
+	[f523587929b9]
+
+	* CHANGES:
+	Updated change log
+	[39d9010ee7a8]
+
+	* testsudoers.c:
+	Fix CIDR handling here too.
+	[c91db8344c32]
+
+	* auth/pam.c:
+	Apparently a NULL response is OK
+	[83bae61078d9]
+
+	* TODO:
+	Checkpoint for upcoming beta release
+	[efb95c09df2a]
+
+	* TROUBLESHOOTING:
+	Many people believe that adding a runas spec should obviate the need
+	for the -u flag. It does not.
+	[c698bad85b0e]
+
+	* RUNSON:
+	checkpoint update for upcoming 1.6.4 beta
+	[009e465a0a45]
+
+	* config.h.in:
+	o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define HAVE_STRINGS_H even
+	if HAVE_STRING_H is defined -- this is safe now
+	[d27c035f4e14]
+
+	* PORTING:
+	Add signals section
+	[2d24c13cb3c8]
+
+	* configure:
+	regen
+	[2b80a939e2ed]
+
+	* configure.in:
+	Fix check for sigaction_t
+	[6fa41c89ab20]
+
+	* sudo.c:
+	XXX - should call find_path() as runas user, not root. Can't do that
+	until the parser changes though.
+	[f0b4f85651bd]
+
+	* sudo.c:
+	If find_path() fails as root, try again as the invoking user (useful
+	for NFS). Idea from Chip Capelik.
+	[e03fa7872692]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
+	Regenerate after pod file changes
+	[48e4bd75ec21]
+
+	* def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
+	sudo.pod, sudoers.pod:
+	Add new sudoers option "preserve_groups". Previously sudo would not
+	call initgroups() if the target user was root. Now it always calls
+	initgroups() unless the -P command line option or the
+	"preserve_groups" sudoers option is set. Idea from TJ Saunders.
+	[4f730359f101]
+
+2001-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h, config.h.in:
+	Use new HAVE_SIGACTION_T define
+	[dfb25f3cae5b]
+
+	* logging.c:
+	Fix compilation on K&C
+	[7355e3275e34]
+
+	* configure:
+	regen
+	[a710584f92f0]
+
+	* configure.in:
+	Add check for sigaction_t -- IRIX already defines this so don't
+	redefine it.
+	[df9c5737f6da]
+
+	* snprintf.c:
+	fix typo
+	[3d782b8134c8]
+
+	* interfaces.c:
+	need stdlib.h here too
+	[c789d8973ab2]
+
+	* configure:
+	regen
+	[44822856bf46]
+
+	* configure.in:
+	Remove redundant checks for string.h, strings.h and unistd.h
+	[933c94f8bbf4]
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	Regen from pod files
+	[ad18c590f638]
+
+	* BUGS:
+	Update for 1.6.4
+	[26bc88b69d22]
+
+	* configure, lex.yy.c, sudo.tab.c:
+	regen
+	[bef89fd6fa2d]
+
+	* strerror.c:
+	Return EINVAL if errnum > sys_nerr
+	[0512374e6661]
+
+	* auth/sudo_auth.h:
+	o Update copyright year
+	[a877016db6e2]
+
+	* LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
+	config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
+	sudo.pod:
+	o Update copyright year
+	[e15a1b39039f]
+
+	* configure.in:
+	o Don't define STDC_HEADERS unconditionally for IRIX o Update
+	copyright year
+	[82a8cb819e07]
+
+	* README:
+	update version
+	[d82e523a16b4]
+
+	* auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
+	auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
+	auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
+	auth/sudo_auth.c, logging.c, parse.c, parse.lex, parse.yacc,
+	set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c, utime.c,
+	visudo.c:
+	o Reorder some headers and use STDC_HEADERS define properly o Update
+	copyright year
+	[fe39f76b3795]
+
+	* lsearch.c:
+	o Reorder some headers and use STDC_HEADERS define properly o Update
+	copyright year
+	[764ba3d4fa13]
+
+	* alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
+	fnmatch.c:
+	o Reorder some headers and use STDC_HEADERS define properly o Update
+	copyright year
+	[dab8f192a3ed]
+
+	* getcwd.c:
+	o Reorder some headers and use STDC_HEADERS define properly o Update
+	copyright year
+	[b199d70ac7ab]
+
+	* getspwuid.c, goodpath.c, interfaces.c:
+	o Reorder some headers and use STDC_HEADERS define properly o Update
+	copyright year
+	[fb46d46140d4]
+
+	* configure:
+	regen
+	[156658f25cea]
+
+	* tgetpass.c:
+	flags set in signal handlers should be volatile sig_atomic_t
+	[c22931a5535e]
+
+	* config.h.in, configure.in:
+	Add checks for volatile and sig_atomic_t
+	[b03b3341381d]
+
+	* configure, lex.yy.c:
+	regen
+	[ed9daba88217]
+
+	* def_data.c, def_data.h, def_data.in, defaults.c, env.c, find_path.c,
+	sudo.c, sudoers.pod:
+	Remove "secure_path" Defaults option since it cannot work with the
+	existing parser.
+	[c9e54a0f5971]
+
+	* find_path.c, sudo.c:
+	Unset "secure_path" if user_is_exempt()
+	[fb7544565ae8]
+
+	* env.c, pathnames.h.in:
+	o Remove assumption that PATH and TERM are not listed in env_keep o
+	If no PATH is in the environment use a default value o If TERM is
+	not set in the non-reset case also give it a default value.
+	[c987eb7df268]
+
+	* aclocal.m4, configure.in, defaults.c, pathnames.h.in:
+	_PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works on
+	systems that define in paths.h
+	[51865b0cdebf]
+
+	* auth/passwd.c, auth/sudo_auth.c, auth/sudo_auth.h:
+	Add support for skeyaccess(3) if it is present in libskey.
+	[8add77c7d3e7]
+
+2001-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Only need to do 'lc = login_getclass(NULL)' if lc == NULL
+	[5a3d3cbf2c6d]
+
+	* parse.lex:
+	'\\' is a perfectly legal character to have in a command line
+	argument.
+	[c15a466ef00e]
+
+	* sudo.c:
+	o Defer call to set_fqdn() until it is safe to use log_error() o
+	Don't print errno string value if gethostbyname fails, it is not
+	relevant
+	[c0c6bcf08bcb]
+
+	* parse.c:
+	Fix CIDR -> in_addr_t conversion.
+	[2f307ebeb63f]
+
+2001-12-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Remove an extra "User_List" in the User_Spec definition From
+	ybertrand AT snoopymail.com
+	[97bde59ea280]
+
+	* parse.c:
+	Make 'listpw=never' work for users who are not explicitly mentioned
+	in sudoers.
+	[258f0f30a428]
+
+	* sudoers.pod:
+	Remove gratuitous '=' in EBNF grammar; era AT iki.fi
+	[4b0f03872ee1]
+
+	* sudoers.pod:
+	Document new list Defaults type and convert env_keep and env_delete
+	to lists. Document new env_check option.
+	[a07f1f079fe3]
+
+	* lex.yy.c, sudo.tab.c, sudo.tab.h:
+	regen parser
+	[e39ac6c6581b]
+
+	* parse.lex:
+	Don't let '#' appear in a {WORD} and restrict #foo in a Runas spec
+	to #[0-9-]+.
+	[69c5388908f3]
+
+	* configure:
+	regen
+	[0f1877b88cb3]
+
+	* aclocal.m4:
+	Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
+	[6545503ae361]
+
+	* config.h.in, configure.in:
+	Add check for skeyaccess(3)
+	[6caf69fe6359]
+
+	* visudo.pod:
+	Document new -c, -f, and -q options
+	[13d0203c21d3]
+
+	* visudo.c:
+	o Add -f option (alternate sudoers file) o Convert to use getopt(3)
+	[4c2b664d617d]
+
+	* configure:
+	regen
+	[6d5bd932e7b5]
+
+	* aclocal.m4, config.h.in, configure.in:
+	Add check for isblank and a replacement macro if it doesn't exist.
+	[b524f5e4f953]
+
+2001-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	In check-only mode, don't create sudoers if it does not already
+	exist.
+	[c748a2d5acad]
+
+	* parse.yacc:
+	o Add a new token, DEFVAR, to indicate a Defaults variable name o
+	Add support for "+=" and "-=" list operators o replace some 1 and 0
+	with TRUE and FALSE for greater legibility.
+	[554cb174b37e]
+
+	* parse.lex:
+	o Use exclusive start conditions to remove some ambiguity in the
+	lexer. Also reorder some things for clarity. o Add support for "+="
+	and "-=" list operators. o Use the new DEFVAR token to denote a
+	Defaults variable name.
+	[3a2cf8323e26]
+
+	* sudo.h:
+	Prototype init_envtables()
+	[b74916469dab]
+
+	* env.c:
+	o Convert environment handling to use lists instead of strings. This
+	greatly simplifies routines that need to do "foreach" type
+	operations. o Add new init_envtables() function to set env_check and
+	env_delete defaults based on initial_badenv_table and
+	initial_checkenv_table (formerly sudo_badenv_table).
+	[0a8b404658b6]
+
+	* defaults.c, defaults.h:
+	o Add a new LIST type and functions to manipulate it. o This is for
+	use with environment handling variables. o Call new init_envtables()
+	routine inside init_defaults() to initialize the environment lists.
+	[ae73e64f0902]
+
+	* def_data.c, def_data.h, def_data.in:
+	Convert environment options to use the new LIST type and add a new
+	one, env_check that only deletes if the sanity check fails.
+	[3019503936de]
+
+	* testsudoers.c:
+	Add dummy version of init_envtables()
+	[9d9e3ee609d9]
+
+	* parse.yacc:
+	honor quiet mode
+	[8330fba6167c]
+
+	* visudo.c:
+	Add check-only mode
+	[dab411bc8c35]
+
+	* mkdefaults:
+	Fix generation of entries with NULL descriptions.
+	[ea75b9fed02e]
+
+2001-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Use sigaction_t and quiet a gcc warning.
+	[6f67d719c452]
+
+	* sudo.c:
+	Must reset signal handlers before we exec
+	[300418120e1a]
+
+	* auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
+	auth/sudo_auth.c:
+	Be carefule now that tgetpass() can return NULL (user hit ^C). PAM
+	version needs testing. Set SIGTSTP to SIG_DFL during password entry
+	so user can suspend us.
+	[00304aa58747]
+
+	* tgetpass.c:
+	Add support for interrupting/suspending tgetpass via keyboard input.
+	If you suspend sudo from the password prompt and resume it will re-
+	prompt you.
+	[4af2b5101d32]
+
+	* sudo.c:
+	Don't block keyboard interrupt signals, just set them to SIG_IGN.
+	[d46d7f67ef6b]
+
+2001-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	add back HAVE_SIGACTION
+	[c9c7702c603e]
+
+	* configure:
+	regen
+	[09fe669d337f]
+
+	* config.h.in, configure.in, logging.c, sudo.c, visudo.c:
+	Kill POSIX_SIGNALS define and old signal support now that we emulate
+	POSIX ones Also be sure to correctly initialize struct sigaction.
+	[4bc2a6dbb2be]
+
+	* strerror.c:
+	Don't need config.h or "#ifndef HAVE_STRERROR" wrapper.
+	[1ad64a19f328]
+
+	* compat.h:
+	Add scaffolding for POSIX signal emulation
+	[945861d4c93b]
+
+	* sigaction.c:
+	o Add missing ';' so this compiles o Can't use NULL since we don't
+	include stdio.h
+	[04d0cac7438f]
+
+	* sigaction.c:
+	Emulate sigaction() using sigvec()
+	[d0b54a989875]
+
+2001-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Document new behavior of negative values of timestamp_timeout Fix a
+	typo
+	[4c0716570d01]
+
+	* sudo.pod:
+	Add security note about command not being logged after 'sudo su' and
+	friends.
+	[43294851a33c]
+
+	* sudo.pod:
+	Mention that -V prints default values when run as root, including
+	the list of environment variables to clear.
+	[d9e5e550a8c3]
+
+	* Makefile.in:
+	Run pod2man with --quotes=none to avoid stupid quoting of C<>
+	entries.
+	[997b23c35dbe]
+
+2001-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/sudo_auth.c, def_data.c, def_data.h, def_data.in, sudoers.pod:
+	Add mail_badpass option Also modify mail_always behavior to also
+	send mail when the password is wrong
+	[838d40ccafce]
+
+	* env.c, sudo.c, sudo.h:
+	Dump default bad env table when 'sudo -V' is run by root.
+	[f67f1b8048b0]
+
+	* sudoers.pod:
+	document env_delete
+	[d74f893663a2]
+
+	* env.c:
+	Add support for '*' in env_keep when not resetting the environment
+	(ie: the normal case).
+	[fd4fb62ea8fd]
+
+	* env.c:
+	Add env_delete variable that lets the user replace/add to the
+	bad_env_table. Allow '*' wildcard in env_keep entries.
+	[aa728bc35e29]
+
+2001-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkinstalldirs:
+	Force umask to 022 to guarantee sane directory permissions.
+	[9ab3cfe70569]
+
+2001-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	add sudo.tab.h and sudo.tab.c to sudo.tab.o dependency
+	[671010465e6f]
+
+	* mkdefaults:
+	fix breakage in last commit
+	[8318f8851e56]
+
+	* Makefile.in:
+	acsite.m4 -> aclocal.m4
+	[30c146873a01]
+
+	* check.c:
+	fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in previous commit
+	[4dc8b39954da]
+
+	* def_data.c:
+	regenerated from def_data.in
+	[915ea16ce1eb]
+
+	* check.c, defaults.c, defaults.h:
+	Add new T_UINT type that most things use instead of T_INT If
+	timestamp_timeout is < 0 then treat the ticket as never expiring (to
+	be expired manually by the user).
+	[3a3a636a2a5d]
+
+	* def_data.in:
+	change most T_INT -> T_UINT
+	[a2228d2457af]
+
+	* mkdefaults:
+	fix warning when no args
+	[ca70a5394af5]
+
+	* visudo.c:
+	Change 2 Exit() -> exit() Avoid stdio in Exit() and call _exit() if
+	we are a signal handler. We no longer print the signal number but
+	the user can just check the exit value for that.
+	[dc424f631fef]
+
+2001-10-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	when setting up pipes in child process check for case where stdin ==
+	pipe fd 0
+	[518112d76184]
+
+2001-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Ignore editor exit value since XPG4 says vi's exit value is the
+	count of editing errors made (failed searches, etc).
+	[b9d952284865]
+
+2001-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[cb3aa586f03b]
+
+	* configure.in:
+	sco now is identified by config.guess as *-sco-*
+	[46664bbdea61]
+
+	* configure.in:
+	Check for getspnam() in -lgen if not in -lc for UnixWare.
+	[0f152ad1ba93]
+
+2001-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod, visudo.pod:
+	"upper case" -> "uppercase"
+	[f9151f232326]
+
+	* sudoers.pod:
+	fix typos and grammar; pjanzen@foatdi.harvard.edu
+	[2855d73d0237]
+
+2001-08-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Missing word (specify); krapht@secureops.com
+	[65523eb37a2c]
+
+2001-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	If we fail to lookup a login class, apply the default one.
+	[d4869faa6816]
+
+	* logging.c:
+	In log_error() free message, not logline unconditionally, then free
+	logline if it is not the same as message. No function change but
+	this mirrors how they are allocated.
+	[565e5f6cc643]
+
+2001-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regenerate
+	[834a48f548a2]
+
+	* configure.in:
+	remove some backslash quotes that are unneeded
+	[50d401d6e2ca]
+
+	* configure.in:
+	o Tweaks to make this work with autoconf-2.50 o Use AC_LIBOBJ
+	instead of changing LIBOBJS directly o Use AC_REPLACE_FUNCS where we
+	can o Use AC_CHECK_FUNCS instead of AC_CHECK_FUNC so we don't have
+	to AC_DEFINE things manually.
+	[f502c5f15f92]
+
+	* config.guess, config.sub:
+	Updated from autoconf-2.50
+	[6140205915ef]
+
+2001-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	Update mailing list section. We use mailman now, not majordomo.
+	[b9a8ca45e6dc]
+
+2001-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* getspwuid.c, logging.c, sudo.c:
+	Use setpwent()/endpwent() + all the shadow variants to make sure we
+	don't inadvertantly leak an fd to the child. Apparently Linux's
+	shadow routines leave the fd open even if you don't call setspent().
+	Reported by mike@gistnet.com; different patch used.
+	[d33792ef6c01]
+
+2001-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	s/eg./e.g./
+	[bd32a0acaf93]
+
+	* tgetpass.c:
+	select() may return EAGAIN. If so, continue like we do for EINTR.
+	[5f202c943818]
+
+	* logging.c:
+	Fix a non-exploitable buffer overflow in the word splitting code.
+	This should really be rewritten.
+	[4c724363863a]
+
+	* Makefile.in:
+	FAQ link goes away
+	[1d26dd6c8972]
+
+	* INSTALL:
+	Tell people to look in sample.syslog.conf for examples, not FAQ
+	[affcae3f43ca]
+
+	* TROUBLESHOOTING:
+	Update list of env vars that are cleared
+	[234e56f1435a]
+
+	* sudo.c:
+	remove struct env_table decl since that stuff has all moved to env.c
+	[5dd923148777]
+
+2001-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* fileops.c:
+	Fix a pasto in flock-style unlocking and include <sys/file.h> for
+	flock on older systems; twetzel@gwdg.de
+	[d5420d9d2861]
+
+	* configure:
+	regen to get NeXT lockf/flock fix
+	[d3ba6ed70e15]
+
+	* configure.in:
+	force NeXT to use flock since lockf is broken
+	[bd5391dca1bb]
+
+2001-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	Use stashed user_gid when checking against exempt gid since sudo
+	sets its gid to a a value that makes sudoers readable. Previously if
+	you used gid 0 as the exempt group everyone would be exempt. From
+	Paul Kranenburg <pk@cs.few.eur.nl>
+	[0b140cc3a817]
+
+2001-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[cc455408f32b]
+
+	* aclocal.m4:
+	#include stdio.h in SUDO_CHECK_TYPE since IRIX 6 aparently defines
+	some types (such as ssize_t) therein.
+	[b6aee85ca331]
+
+2001-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c:
+	Fix negation of paths in a boolean context. Problem found by
+	apt@UH.EDU
+	[8aee217a7cdf]
+
+2001-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	pasto
+	[ad32b277bf68]
+
+2001-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	SA_RESETHAND means the opposite of what I was thinking--oops To
+	block all signals in old-style signals use ~0, not 0xffffffff
+	[6ecdd793590a]
+
+2001-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c:
+	coerce difference of pointers to int when used in a string length
+	printf format; deraadt@openbsd.org
+	[a9d10f07180d]
+
+2001-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Block all signals in Exit() to avoid a signal race. There is still a
+	tiny window but I'm not going to worry about it.
+	[6661805c0458]
+
+2001-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* env.c:
+	glibc uses the LANGUAGE env var so clear that too; Solar Designer
+	[d4ba95628afb]
+
+	* lex.yy.c:
+	Regenerate with a fix to flex.skl that preserves errno from
+	clobbering by isatty().
+	[607eec736e19]
+
+2000-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
+	auth/sia.c, auth/sudo_auth.c:
+	Some defaults I_ defines got renamed.
+	[ec19b23caaf3]
+
+	* Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
+	defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
+	set_perms.c, sudo.c, sudo.tab.c:
+	Move defaults info into its own files from which we generate .h and
+	.c files. This makes adding or rearranging variables much simpler.
+	[e91b880b5043]
+
+2000-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	fix typo in last commit
+	[10a6ee2bae71]
+
+	* compat.h, config.h.in, configure, configure.in:
+	Add check + emulation for setegid (like seteuid).
+	[29492092bd2f]
+
+	* env.c:
+	Make env_keep override badenv_table as documented Fix traversal of
+	badenv_table (broken in last commit)
+	[37c9f0d22673]
+
+	* set_perms.c, sudo.c, sudo.h:
+	Don't try and build saved uid version of set_perms on systems w/o
+	them. Rename set_perms_saved_uid() -> set_perms_posix() Make
+	set_perms_setreuid simply be set_perms_fallback() and simply include
+	the appropriate function at compile time (setreuid() vs. setuid()).
+	[3107333c062c]
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	PATH is also preserved when env_reset is in effect
+	[90e45c5711ff]
+
+	* CHANGES, Makefile.in, check.c, compat.h, config.h.in, configure,
+	configure.in, defaults.c, defaults.h, env.c, find_path.c,
+	getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
+	sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, testsudoers.c,
+	visudo.c, visudo.cat, visudo.man.in:
+	New Defaults options: o stay_setuid - sudo will remain setuid if
+	system has saved uids or setreuid(2) o env_reset - reset the
+	environment to a sane default o env_keep - preserve environment
+	variables that would otherwise be cleared
+
+	No longer use getenv/putenv/setenv functions--do environment munging
+	by hand. Potentially dangerous environment variables can be cleared
+	only if they contain '/' pr '%' characters to protect buggy
+	programs. Moved environment routines into env.c (new file)
+	[c2f97651db4c]
+
+	* INSTALL:
+	Clear up --without-passwd description
+	[2f336dab6733]
+
+	* putenv.c, sudo_setenv.c:
+	We now build up a new environment from scratch and assign it to
+	"environ".
+	[6ae6152f2238]
+
+2000-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, visudo.pod:
+	Grammatical fixes from Paul Janzen
+	[e03ead2e56f8]
+
+2000-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	If there was a syntax error and the user just wants to quit, unlink
+	sudoers if it is zero length.
+	[74ba7921f520]
+
+	* visudo.c:
+	'Q' means ignore parse error, not 'q'
+	[e8d0e4491fe6]
+
+	* visudo.c:
+	Open sudoers for writing with mode SUDOERS_MODE From Dimitry Andric
+	<dim@xs4all.nl>
+	[b24990a72491]
+
+2000-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* set_perms.c:
+	Add missing #ifdef HAVE_LOGIN_CAP_H; ayamura@ayamura.org
+	[41a8db10e076]
+
+2000-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.guess, config.sub:
+	Darwin / Mac OS X support from Wilfredo Sanchez <wsanchez@apple.com>
+	[6052da895d2e]
+
+2000-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, visudo.c:
+	Use exit(127), not exit(-1)
+	[9ff0c3eada34]
+
+	* Makefile.in, defaults.c, defaults.h, set_perms.c, sudo.c:
+	Move set_perms() to its own file and use POSIX saved uid or
+	setreuid() if available.
+
+	Added stay_setuid option for systems that have libraries that
+	perform extra paranoia checks in system libraries for setuid
+	programs (ie: anything with issetugid(2)).
+	[28960f842698]
+
+	* sudo.c:
+	strip more bits from the environment and add a facility for
+	stripping things only if they contain '/' or '%' to address printf
+	format string vulnerabilities in other programs.
+	[b98d6375f299]
+
+2000-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[7e74e5c91049]
+
+	* configure.in:
+	For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache the existence of
+	strcasecmp().
+	[a418e9e70442]
+
+	* configure:
+	regen
+	[bbff244a52bc]
+
+	* configure.in:
+	Check for strcasecmp(3) in -lc89 for NCR Unix
+	[361c99576681]
+
+2000-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	Define HAVE_INNETGR #ifdef HAVE__INNETGR
+	[473cdb92b6db]
+
+	* configure:
+	regen
+	[4e6364a195e0]
+
+	* compat.h, config.h.in, configure.in:
+	Add check for _innetgr(3) since NCR systems have that instead of
+	innetgr(3).
+	[25e6852e7494]
+
+2000-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/securid.c:
+	check return value of creadcfg() call sd_close() after sd_auth()
+	store username in sd->username so we don't rely on the USER env
+	variable
+	[d106b4f42722]
+
+2000-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	document --with-bsdauth
+	[f1518ecc2ee9]
+
+	* configure:
+	regen
+	[dceb35071ea8]
+
+	* configure.in:
+	--with-bsdauth assumes --with-logincap
+	[4200778083fd]
+
+	* auth/bsdauth.c, auth/fwtk.c:
+	When prompting for a response to a challenge, if the user just hits
+	return then reprompt with echo turned on.
+	[a539b6474a97]
+
+2000-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Remove debugging code that should not have been committed, oops.
+	[9862607b77a7]
+
+	* auth/bsdauth.c:
+	Use lower-level routines and get the password ourselves. Checks for
+	a challenge and if there is one echo is not turned off.
+	[2d8fcd166baa]
+
+	* auth/pam.c, auth/sudo_auth.h:
+	minor housekeeping, no real code changes
+	[d0074a277fb4]
+
+2000-10-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Fix a coredump in the logging functions if gethostname(2) fails by
+	deferring the call to log_error() until things are better setup.
+
+	Fix return value of set_loginclass() in non-BSD-auth case.
+
+	Hard-code 'sudo' in the usage message so we can fit more options on
+	a line
+	[d9d1b7579818]
+
+	* logging.c:
+	Fix errant ';' (typo) that broken MSG_ONLY
+	[849b2276a470]
+
+2000-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in:
+	regen
+	[bb3c8c6704d1]
+
+	* sudo.pod:
+	Document -a flag
+	[e18316cebaac]
+
+	* Makefile.in, auth/bsdauth.c, auth/sudo_auth.h, config.h.in,
+	configure, configure.in, getspwuid.c, sudo.c:
+	Add support for BSD authentication.
+	[f374cfd9ca0d]
+
+2000-10-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Fix typo; from sato@complex.eng.hokudai.ac.jp
+	[3085fee9766e]
+
+2000-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	Mention negating umask
+	[c9e410294dae]
+
+	* defaults.c:
+	Allow user to specify umask of 0777 (same as !umask)
+	[bb771daa96fe]
+
+2000-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, visudo.pod:
+	Fix a typo and give a URL for the sudo history.
+	[77f73199aedb]
+
+2000-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c, sudo.pod:
+	fix typos; pepper@reppep.com
+	[5532c7421340]
+
+2000-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, sudo.h, sudo_setenv.c:
+	sudo_setenv() now exits on memory alloc failure instead of returning
+	-1.
+	[71f1cf18f47b]
+
+2000-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Strip out NLSPATH and PATH_LOCALE from the environment for FreeBSD
+	and possibly others.
+	[b69d985b0d22]
+
+	* logging.c:
+	Don't use vsyslog(3) since HP-UX (and others?) lack it. This means
+	that "%m" won't be expanded but we don't use that anyway since the
+	logging routines may splat to stderr as well.
+	[8d37a544d0c0]
+
+	* defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
+	sudoers.pod:
+	Add always_set_home variable
+	[dbcaff646e07]
+
+	* configure, configure.in:
+	Have to hard code default values in help since the defaults are set
+	_after_ the help stuff.
+	[7b5d6d72f55c]
+
+2000-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lex.yy.c, parse.lex:
+	Allow special characters (including '#') to be embedded in pathnames
+	if quoted by a '\\'. The quoted chars will be dealt with by
+	fnmatch(). Unfortunately, 'sudo -l' still prints the '\\'.
+	[3ed33cf09977]
+
+2000-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	Better path searching for programs we need.
+	[60517cb1f0d6]
+
+	* TROUBLESHOOTING:
+	Add section on "C compiler cannot create executables" errors.
+	[e4ada6eaee59]
+
+	* Makefile.binary, Makefile.in, version.h:
+	Crank version
+	[93d1bd5b7f5e]
+
+	* aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
+	sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
+	visudo.man.in, visudo.pod:
+	Substitute values from configure into man pages.
+	[619854c356c1]
+
+2000-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c, sudo.c:
+	The listpw and verifypw sudoers options would not take effect
+	because the value of the default was checked *before* sudoers was
+	parsed. Instead of passing in the value of PWCHECK_* to
+	sudoers_lookup(), pass in the arg for def_ival() so the check can be
+	deferred until after sudoers is parsed.
+	[4f596e358f72]
+
+2000-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	When writing prompt, no need to write the NUL as well;
+	hag@linnaean.org
+	[fbcdd7b431ee]
+
+2000-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	When looking for chown, check in /sbin too
+	[657ba6653f8c]
+
+2000-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Remove extraneous call to init_defaults() and set runas_user to NULL
+	betweem parses so init_defaults will reset it each time, thus
+	avoiding a reference to free()d data.
+	[7421fcd692af]
+
+2000-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, interfaces.c, interfaces.h, sudo.c:
+	Add support for using getifaddrs() to get the list of ip addr /
+	netmask pairs. Currently IPv4-only.
+	[a35bc4f7306d]
+
+	* visudo.c:
+	Add a missing check for UserEditor == NULL Add missing '+' before
+	line number when invoking editor to fix a syntax error
+	[f0d4635f6082]
+
+2000-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Call clean_env very early in main() for paranoia's sake. Idea from
+	Marc Esipovich.
+	[f8d72ebd0115]
+
+2000-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	Update proto for evasprintf and easprintf
+	[d147d6e58419]
+
+	* alloc.c:
+	Make easprintf() and evasprintf() return an int.
+	[b2ca5d089667]
+
+	* check.c:
+	If the targetpw flag is set, use target username as part of the
+	timestamp path. If tty tickets are in effect cat the tty and the
+	target username with a ':' as the separator.
+	[de11abc693c2]
+
+2000-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	Backout part of last change; setting PAM_USER to the invoking user
+	breaks things like targetpw.
+	[427218a7387f]
+
+	* auth/pam.c:
+	set tty and username via pam_set_item
+	[85d1922dbcc9]
+
+	* auth/sudo_auth.c, check.c, getspwuid.c, sudo.c, sudo.h:
+	Fix root, runas, and target authentication for non-passwd file auth
+	methods.
+	[a14535e7b30c]
+
+2000-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
+	sudoers.pod, visudo.cat, visudo.man.in, visudo.pod:
+	Use B<-Z> not C<-Z> for command line flags in all places. This is
+	more consistent and works around a bug in Pod::Man.
+	[64b5a05f30c5]
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	Fix an occurence of 'semicolon' that should be 'colon'
+	[4ea5aacae3fb]
+
+2000-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix --with-badpri help line
+	[3cc40977c043]
+
+2000-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c, logging.c, sudo.c:
+	Bracket calls to syslog with an openlog() and closelog() since some
+	authentication methods (like PAM) may do their own logging via
+	syslog. Since we don't use syslog much (usually just once per
+	session) this doesn't really incur a performance penalty. It also
+	Fixes a SEGV with pam_kafs.
+	[fe1cc28529f6]
+
+2000-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Fix -H flag. runas_homedir is only valid after set_perms(PERM_RUNAS,
+	mode)
+	[ce9b1c6f68a6]
+
+2000-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Clarify the fact that insults are not enabled just by including them
+	in the binary.
+	[d5a31d48320c]
+
+2000-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
+	visudo.man.in:
+	Regenerated with perl 5.6.0 pod2man
+	[21751433768b]
+
+	* Makefile.in:
+	Give date string to pod2man since its default is ugly and it ain't
+	got no alibi.
+	[0080b2f6298f]
+
+	* Makefile.in:
+	Do section substitution on the output of pod2man and remove hack
+	needed for old pod2man.
+	[1ef843d5c78b]
+
+	* sudo.pod, sudoers.pod, visudo.pod:
+	Put back real man sections, we will do the substitution later.
+	[f728c1abad7e]
+
+2000-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Don't bother checking for the path to vi if user specified --with-
+	editor
+	[bf698487e0d5]
+
+2000-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, visudo.c:
+	Visudo now does its own fork/exec instead of calling system(3).
+	[99bbcd88863b]
+
+	* CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
+	sudoers.pod, visudo.c:
+	Visudo now checks for the existence of an editor and gives a
+	sensible error if it does not exist.
+
+	The path to the editor for visudo is now a colon-separated list of
+	allowable editors. If the user has $EDITOR set and it matches one of
+	the allowed editors that editor will be used. If not, the first
+	editor in the list that actually exists is used.
+	[cc86eb9f5440]
+
+	* sudo.cat, sudo.man.in, sudo.pod:
+	Clear up confusion wrt sudo's return value.
+	[9385b12d8e79]
+
+2000-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Strip sudo and visudo for bindist target
+	[a995ddd79177]
+
+	* sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
+	sudoers.pod, visudo.cat, visudo.man.in, visudo.pod:
+	Use @mansectsu@ and @mansectform@ in the man page bodies as well.
+	[5eb9e60a726f] [SUDO_1_6_3]
+
+	* visudo.cat, visudo.man.in, visudo.pod:
+	Typo: @sysconf@ -> @sysconfdir@
+	[f07f52fcd099]
+
+	* Makefile.in:
+	'make dist' should not cause any files to be modified so remove its
+	dependencies.
+	[7f44a2666a9c]
+
+	* CHANGES:
+	Whoops, forgot to add release marker
+	[16c0f16b35b8]
+
+2000-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	Final change for 1.6.3 (or so I hope)
+	[473c89da6123]
+
+	* sudo.cat, sudoers.cat, visudo.cat:
+	Use SYSV man sections since BSD systems will have nroff...
+	[0a6bd154324e]
+
+2000-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc, sudo.tab.c:
+	When checking to see if the host/user matches in a defaults spec,
+	check against TRUE, not just non-zero since it might be -1.
+	[41f2b7ad3fdd]
+
+	* configure, configure.in:
+	OSF/1 puts file formats in section 4, not 5.
+	[d77c1301afa9]
+
+	* CHANGES, INSTALL, sudo.c:
+	Make login class support work on BSD/OS
+	[e9bbe3c08ade]
+
+	* RUNSON:
+	Update for 1.6.3
+	[c40ce1d76c4d]
+
+	* configure, configure.in:
+	If there is no inet_addr but there *is* an __inet_addr that's ok
+	since inet_addr is probably just a macro then. The better thing to
+	do would be to look for the macro, but this is fine for now.
+	[1b8865ae4d68]
+
+	* configure, configure.in:
+	Don't use shlicc for BSD/OS 4.x
+	[83fbf6dedd2c]
+
+	* Makefile.in, configure, configure.in:
+	*.man lives in cwd, *.cat lives in $(srcdir), add a @mansrcdir@
+	configure variable so we can deal with this. Also, only remove *.man
+	for 'distclean' not 'clean'.
+	[30d56e6de214]
+
+	* sudo.c:
+	set_loginclass() should be static like the proto says
+	[d570a2d55fb8]
+
+2000-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* fnmatch.c:
+	Add #ifdef __STDC__ around the rangematch function header to avoid
+	promotion of test to int, thus violating the prototype. Gcc handles
+	this gracefully but more std ANSI compilers will complain.
+	[7d98c3e332b2]
+
+	* emul/fnmatch.h:
+	Pull in newer fnmatch(3) that supports FNM_CASEFOLD
+	[4e1320852f8b]
+
+	* aclocal.m4, configure, fnmatch.3, fnmatch.c:
+	Pull in newer fnmatch(3) that supports FNM_CASEFOLD Check for
+	FNM_CASEFOLD in configure
+	[9ef952bf1896]
+
+	* CHANGES, TODO:
+	update for 1.6.3
+	[e4ba6368a0c5]
+
+	* sudo.tab.c, sudo.tab.h, testsudoers.c, visudo.c:
+	Fully qualified hosts w/ wildcards were not matching the FQHOST
+	token type. There's really no need for a separate token for fully-
+	qualified vs. unqualified anymore so FQHOST is now history and
+	hostname_matches now decides which hostname (short or long) to check
+	based on whether or not the pattern contains a '.'.
+	[fbd2887d9811]
+
+	* lex.yy.c, parse.c, parse.lex, parse.yacc:
+	Fully qualified hosts w/ wildcards were not matching the FQHOST
+	token type. There's really no need for a separate token for fully-
+	qualified vs. unqualified anymore so FQHOST is now history and
+	hostname_matches now decides which hostname (short or long) to check
+	based on whether or not the pattern contains a '.'.
+	[630d9d205397]
+
+	* parse.h:
+	Fully qualified hosts w/ wildcards were not matching the FQHOST
+	token type. There's really no need for a separate token for fully-
+	qualified vs. unqualified anymore so FQHOST is now history and
+	hostname_matches now decides which hostname (short or long) to check
+	based on whether or not the pattern contains a '.'.
+	[dd7bbe223461]
+
+	* parse.c, parse.h, parse.yacc, sudo.tab.c, sudoers.cat,
+	sudoers.man.in, sudoers.pod, testsudoers.c, visudo.c:
+	Add support for wildcards in the hostname.
+	[d8d821ed4238]
+
+	* Makefile.in:
+	Add targets for *.man.in, using config.status to generate *.man from
+	*.man.in
+	[640e50ede485]
+
+	* sudoers.cat, sudoers.man.in, sudoers.pod:
+	Document set_logname option and enbolden refs to sudo and visudo.
+	[9622b3a48707]
+
+	* INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.cat,
+	sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
+	visudo.cat, visudo.man.in, visudo.pod:
+	Add FreeBSD login.conf support (untested on BSD/OS) based on a patch
+	from Michael D. Marchionna. configure now does substitution on the
+	man pages, allowing us to fix up the paths and set the section
+	correctly. Based on an idea from Michael D. Marchionna.
+	[463e928a0a2f]
+
+	* auth/passwd.c:
+	Better fix for handling HP-UX aging info.
+	[3950f42d8549]
+
+	* sudo.c:
+	Add support for set_logname run-time default
+	[c6a7cc76b8b4]
+
+	* sudo.man.in, sudoers.man.in, visudo.man.in:
+	configure does substitution on these to produce *.man
+	[b83fc3c1bfc9]
+
+	* sudo.man, sudoers.man, visudo.man:
+	These files now get generated from *.man.in at configure time.
+	[c499061f79e0]
+
+2000-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c, defaults.h:
+	Add set_logname option so users can turn off setting of LOGNAME/USER
+	environment variables.
+	[6316869180b8]
+
+	* lsearch.c, parse.c, testsudoers.c:
+	kill register
+	[6e104e653748]
+
+2000-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/passwd.c:
+	HP-UX adds extra info at the end for password aging so when
+	comparing the result of crypt to pw_passwd we only compare the first
+	len(epass) bytes *unless* the user entered an empty string for a
+	password.
+	[3d24d4e4e889]
+
+	* logging.c:
+	Get rid of grandchild hack, it was causing problems and there is
+	really no need for it. This fixes a bug where we spin eating up CPU
+	when the user runs a long-running process like a shell.
+	[5743b10b1e81]
+
+2000-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	User can always specify a login class if he/she is already root.
+	[710d160cef9f]
+
+	* config.h.in, configure, configure.in, defaults.c, defaults.h,
+	sudo.c, sudo.h:
+	FreeBSD login class (login.conf) support.
+	[026b981d6328]
+
+2000-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/sudo_auth.c:
+	HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes secureware support
+	[9cd4929f1a78]
+
+2000-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/passwd.c:
+	Truncate unencrypted password to 8 chars if encrypted password is
+	exactly 13 characters (indicateing standard a DES password). Many
+	versions of crypt() do this for you, but not all (like HP-UX's).
+	[a9d0259cb193]
+
+2000-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, RUNSON:
+	Mention that gcc on dynix may have problems
+	[77b97fa5bf1b]
+
+2000-02-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	Link visudo with NET_LIBS since we now call syslog via defaults.c
+	[9e3830b277cc]
+
+	* defaults.c:
+	Use Argv[0] as the first arg to openlog() since visudo uses this
+	too.
+	[e61078f328ec]
+
+2000-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Stash coredumpsize resource limit and retsore it before the exec()
+	Otherwise the child ends up with a coredumpsize of 0.
+	[f6a4783835a3]
+
+2000-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man, sudo.pod:
+	document -S flag
+	[3ebd805b7142]
+
+	* sudo.c:
+	fix usage string
+	[66b2dfa47fe8]
+
+	* CHANGES, RUNSON, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c,
+	auth/sudo_auth.c, sudo.c, sudo.h, tgetpass.c:
+	Added -S flag (read passwd from stdin) and tgetpass_flags global
+	that holds flags to be passed in to tgetpass(). Change echo_off
+	param to tgetpass() into a flags field. There are currently 2
+	possible flags for tgetpass(): TGP_ECHO and TGP_STDIN. In
+	tgetpass(), abstract the echo set/clear via macros and if (flags &
+	TGP_ECHO) but echo is not set on the terminal, but sure to set it.
+	[a4fcbb712cd0]
+
+	* tgetpass.c:
+	Fixed a bug that caused an infinite loop when the password timeout
+	was disabled.
+	[2be1ffc5a39f]
+
+2000-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
+	sudoers.cat, sudoers.man, sudoers.pod, visudo.c:
+	Add rootpw, runaspw, and targetpw options.
+	[2d4563e46df7]
+
+	* CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
+	visudo.c:
+	enveditor -> env_editor
+	[ddc5f856e583]
+
+2000-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, Makefile.in, README, configure, configure.in,
+	sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h, visudo.cat,
+	visudo.man:
+	crank versino to 1.6.3
+	[a5f7d3e74360]
+
+	* INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
+	sudoers.pod, visudo.c:
+	Add 'editor' and 'enveditor' sudoers defaults and make visudo honor
+	them. This means that visudo will now parse the sudoers file
+	*before* it is edited so a bogus sudoers file will cause a warning
+	to go to stderr. Also, visudo checks the variables once--it does not
+	check them after each editor run since that could be confusing.
+	[9f5af18e9212]
+
+2000-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	1.6.2 -> 1.6.2p1
+	[e25b74f1d1af]
+
+	* check.c, sudo.c, sudo.h:
+	Move user_is_exempt prototype into sudo.h
+	[daf26a6ded8a]
+
+2000-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	Fix thinko, some && should have been || in the last commit
+	[4b9b2d487ded]
+
+	* configure, configure.in:
+	Don't initialized Makefile variables to be NULL since the user may
+	want to import variables from their environment.
+	[7be019f4422c]
+
+2000-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	typo
+	[38f4d8971f0a]
+
+2000-01-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	fix a yacc (skeleton.c) warning
+	[a2da228a937b]
+
+2000-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, RUNSON, configure, configure.in:
+	Make pam work on HP-UX 11.0;jaearick@colby.edu
+	[b94de0ff6f42]
+
+	* CHANGES:
+	recent changes; prepare for 1.6.2p1
+	[b291635ea141]
+
+	* find_path.c:
+	Don't apply SECURE_PATH if user is example; jmknoble@pobox.com
+	[4306285c4f6e]
+
+2000-01-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	Regen with yacc that has a memory leak plugged.
+	[e26383a04eb7]
+
+	* sudoers.cat, sudoers.man, sudoers.pod:
+	Expanded docs on sudoers 'defaults' options based on INSTALL file
+	info.
+	[54c3d62d6c74]
+
+	* INSTALL:
+	Fix some while lies
+	[d15311782150]
+
+2000-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	When making a bindist, link FAQ to TROUBLESHOOTING instead of
+	copying.
+	[2d88a6ac88cf]
+
+	* sudoers.cat, sudoers.man, sudoers.pod:
+	Add netgroup caveat
+	[28d119f466e3] [SUDO_1_6_2]
+
+	* RUNSON:
+	Last minute updates
+	[89fb4ed22d52]
+
+	* TROUBLESHOOTING:
+	PAM entry
+	[a9fd59f39457]
+
+	* auth/pam.c:
+	correct a comment
+	[a29627225ba9]
+
+	* CHANGES, RUNSON:
+	update for 1.6.2
+	[b7f1c40ea732]
+
+	* auth/pam.c:
+	Better detection of PAM errors and fix custom prompts with PAM.
+	Based on patches from "Cloyce D. Spradling" <cloyce@headgear.org>
+	[ff69234b94a5]
+
+2000-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* snprintf.c:
+	Cast ULONG_MAX to unsigned long long when comparing to an unsigned
+	long long value.
+	[9d918c3a2ecd]
+
+2000-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, config.h.in, configure, configure.in, visudo.c:
+	Fix sudoers locking in visudo. We now lock the sudoers file itself,
+	not the temp file (since locking the temp file can foul up editors).
+	The previous locking scheme didn't work because the fd was closed
+	too early.
+	[de2011bb11ed]
+
+	* config.h.in, configure, configure.in:
+	Don't need test for ftruncate() any more.
+	[e5f71c848104]
+
+	* configure, configure.in:
+	Add a test for the -Aa flag w/ HP-UX's cc. Fixes compilation with
+	the unbundled HP-UX cc.
+	[2c373612c644]
+
+2000-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.man, sudoers.pod:
+	"a a" -> "a"; Aaron Campbell <aaron@cs.dal.ca>
+	[05360d2c314e]
+
+2000-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
+	parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c, tgetpass.c,
+	version.h, visudo.c:
+	update copyright year on changed files
+	[5792a2a28a4c]
+
+	* RUNSON:
+	updates
+	[edf8f19aa403]
+
+	* CHANGES:
+	aix fix
+	[4d4a243b31e2]
+
+	* INSTALL:
+	Crank version to 1.6.2
+	[bcb5cb411624]
+
+	* configure:
+	Crank version to 1.6.2
+	[32a19f33427f]
+
+	* sudo.c:
+	When using rlimit check for RLIM_INFINITY When computing the value
+	of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
+	[8c16166802e5]
+
+	* CHANGES:
+	recent changes
+	[09fc7112e44d]
+
+	* BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
+	sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
+	Crank version to 1.6.2
+	[055fa61a7c61]
+
+	* INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod:
+	Add 'shell_noargs' runtime option back in. We have to defer checking
+	until after the sudoers file has been parsed but since there are now
+	other options that operate that way this one can too. Based on a
+	patch from bguillory@email.com.
+	[231db7a007a6]
+
+	* defaults.c, defaults.h, parse.c, sudo.c, sudo.h:
+	Add "listpw" and "verifypw" options.
+	[190683bac878]
+
+	* sudoers.cat, sudoers.man, sudoers.pod:
+	o Fix some typos/omissions o Add section on verifypw and listpw o
+	Define how NOPASSWD interacts with the -v and -l flags
+	[6feb7350eb79]
+
+2000-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	For HP-UX cc, add -Aa to CPPFLAGS. For HP-UX always add
+	-D_HPUX_SOURCE to CPPFLAGS.
+	[06cc35d89dc8]
+
+	* defaults.c, defaults.h:
+	In struct sudo_defs_types, move the union to the end and don't
+	initialize the union member since that only works with an ANSI
+	compiler. We set the value of the union by hand in init_defaults()
+	anyway. This allows sudo to compile on a K&R compiler again.
+	[623487e1fcfa]
+
+2000-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c, parse.h, parse.yacc, sudo.tab.c, testsudoers.c, visudo.c:
+	netgr_matches needs to check shost as well as host since they may be
+	different.
+	[3f43ace23d3e]
+
+	* tgetpass.c:
+	End on \r as well as \n
+	[cb7c6e6f4202]
+
+2000-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Update statbuf.st_mode based on SUDOERS_MODE when we are chaning
+	from 0400 to whatever SUDOERS_MODE is (converting from the old
+	sudoers mode). Assumes that SUDOERS_MODE is less restrictive than
+	0400 which should always be the case.
+	[34cd83d49d20]
+
+	* parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c:
+	Make treatment of -l and -v sane wrt NOPASSWD flags. Now allow -l
+	w/o a passwd if there is *any* entry for the user on the host with a
+	NOPASSWD flag. For -v, only allow w/o a passwd if *all* entries for
+	the user on the host w/ the specified runas user have the NOPASSWD
+	flag set.
+	[4b3b85697653]
+
+	* Makefile.in:
+	add check target
+	[3d24d34a76fd]
+
+1999-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Treat EOF at whatnow prompt like 'x' instead of looping.
+	[5deffc27114c]
+
+1999-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	recent changes
+	[5836a9452568] [SUDO_1_6_1]
+
+1999-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure, configure.in, sudo.c:
+	Add check for initgroups() since old SYSV lacks this.
+	[657a6005a569]
+
+	* CHANGES, RUNSON, aclocal.m4, config.h.in, configure, configure.in,
+	parse.c, testsudoers.c:
+	o Kill HAVE_FNMATCH_H o Only define HAVE_FNMATCH if <fnmatch.h>
+	exists.
+	[17d081e917d6]
+
+1999-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/sudo_auth.c:
+	Don't allow insults to be enabled if the insults[] array is empty.
+	Otherwise there would be division by zero.
+	[b20c14db6029]
+
+	* CHANGES, RUNSON:
+	Don't allow insults to be enabled if the insults[] array is empty.
+	Otherwise there would be division by zero.
+	[974f4780254b]
+
+	* insults.h:
+	Don't allow insults to be enabled if the insults[] array is empty.
+	Otherwise there would be division by zero.
+	[028f130204b0]
+
+	* insults.h:
+	Don't care about USE_INSULTS #define since the insult stuff may be
+	overridden at runtime.
+	[b873df8b299c]
+
+	* auth/sudo_auth.c:
+	Honor insults flag.
+	[756111640fdc]
+
+	* CHANGES, parse.c:
+	Don't ask the user for a password if the user is not allowed to run
+	the command and the authenticate flag (in sudoers) is false.
+	[cea9fdc09c76]
+
+	* CHANGES, RUNSON, lex.yy.c, parse.lex:
+	o Whenever we get a bare newline we change to the INITIAL state. o
+	Enter GOTRUNAS when we see Runas_Alias
+
+	This allows #uid to work in a RunasAlias.
+	[a475513e7c7a]
+
+1999-12-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, parse.yacc, sudo.tab.c:
+	fix parsing of runas lists: o oprunasuser and runaslist now return a
+	value o in a runasspec, if a runaslist does not return TRUE, set
+	runas_matches to FALSE. Normally, a runaslist only returns FALSE for
+	explicitly denied users. o since runaslist does not modify the stack
+	there is no need for a push/pop in runasalias.
+	[82b305b34a8c]
+
+	* check.c, sudo.c:
+	Don't kill the user's tickets until after sudoers has been parsed
+	since tty_tickets and ticket_dir could be set in sudoers.
+	[f43e25367f3a]
+
+	* BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
+	configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
+	sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man:
+	crank version to 1.6
+	[95f8bdcf9bb2]
+
+	* testsudoers.c:
+	add set_fqdn() stub
+	[bbc81af5b41a]
+
+1999-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
+	sudoers.man, sudoers.pod, visudo.c:
+	o Kill shell_noargs option, it cannot work since the command needs
+	to be set before sudoers is parsed. o Fix the "set_home" sudoers
+	option (only worked at compile time). o Fix "fqdn" sudoers option.
+	We now set host/shost via set_fqdn which gets called when the "fqdn"
+	option is set in sudoers. o Move the openlog() to store_syslogfac()
+	so this gets overridden correctly from the sudoers file.
+	[3dca861f0f5d]
+
+	* auth/securid.c:
+	SecurID support should compile now.
+	[a544e5c6ea34]
+
+1999-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.man, sudo.pod, sudoers.cat, sudoers.man, visudo.cat,
+	visudo.man, visudo.pod:
+	fix some syntactic goofs
+	[b3451f0d5239]
+
+1999-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, sudo.html, sudoers.html, visudo.html:
+	No longer need the .html files as they are generated automatically
+	on the web site.
+	[1b4aa4204584]
+
+	* CHANGES, LICENSE:
+	kill characters that made wml unhappy
+	[b988fbc6da56]
+
+	* HISTORY:
+	typo
+	[a418963f7fce]
+
+1999-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	majordomo@cs.colorado.edu -> majordomo@courtesan.com
+	[5d151e8ffd3b]
+
+	* Makefile.in, configure:
+	Wrap script execution w/ /bin/sh for the benefit of ctm
+	[3a9c4766b2c3]
+
+1999-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Make the -s flag be exclusive too. Also reorder the flags in the
+	exclusive usage message so they are alphabetical.
+	[4c7af200db34]
+
+1999-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	make pam errors other than PAM_PERM_DENIED fatal
+	[64bcb3fd2baf]
+
+	* auth/API:
+	fix typo
+	[f3134c88b12e]
+
+	* INSTALL:
+	make it clear that /etc/pam.d/sudo is required on linux
+	[213cc3eaad82]
+
+	* auth/pam.c:
+	fix a warning on redhat and spew an error if pam_authenticate()
+	returns an error other than AUTH_SUCCESS or PAM_PERM_DENIED
+	[7e46dd19da89]
+
+	* sudo.cat, sudo.html, sudo.man, sudo.pod:
+	Be very clear that the password required is the user's not root's
+	[a6da127347e5]
+
+1999-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	add sample.syslog.conf to DISTFILES and BINFILES
+	[8661c27c007e]
+
+1999-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updates from Brian Jackson + some formatting
+	[6d31c6fa63f8]
+
+1999-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL.binary, Makefile.binary, README, RUNSON:
+	o One RUNSon update o Changes for automating real binary releases
+	[dd9585f4406c]
+
+	* Makefile.in:
+	Add bindist target
+	[546ed3fa94bb]
+
+1999-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	talk about run-time options in addition to compile-time options
+	[1eb813ff0a9a] [SUDO_1_6_0]
+
+	* CHANGES:
+	fix typos
+	[65e92bb70a7b]
+
+	* sudo.c:
+	need sys/time.h if HAVE_SETRLIMIT
+	[ce31655a8a60]
+
+	* PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
+	sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod:
+	get rid of references to sudo-bugs. Now mention the web site or the
+	sudo@ alias
+	[a9db861fd8c6]
+
+	* sudoers.html:
+	repair pod2html damage
+	[62ece4277f1f]
+
+	* RUNSON, TODO:
+	Update for 1.6 release
+	[98569c57ba2a]
+
+	* sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
+	Add warning about using ALL in a command context.
+	[6c77685ab280]
+
+1999-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	Call yyrestart() on a parse error to reset the lexer state.
+	[1370a27acdb2]
+
+	* lex.yy.c, parse.lex:
+	Don't need YY_FLUSH_BUFFER after all Move yyrestart() into visudo.c
+	since it might not get called in yywrap if we get a parse error (and
+	we only reread the file on error anyway).
+	[37f4b449e28e]
+
+	* lex.yy.c, parse.lex:
+	Call YY_FLUSH_BUFFER macro in yywrap() to clean up any buffers that
+	might still exist. Call yyrestart() instead of using the deprecated
+	YY_NEW_FILE macro.
+	[7d0d873046c6]
+
+	* lex.yy.c, parse.lex:
+	flex doesn't need %N table size declarations
+	[268b020fd60a]
+
+	* sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
+	Mention what characters need to be escaped in names.
+	[72ccbb6b0f31]
+
+1999-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure:
+	regen
+	[65827abb5c7b]
+
+	* INSTALL:
+	clarify Mac OS X entry
+	[8da1549a71f5]
+
+	* RUNSON:
+	update
+	[0cff8df7459f]
+
+	* configure.in:
+	o Use AC_MSG_ERROR throughout o Check syslog configure options for
+	danity
+	[4cb81e642e5c]
+
+1999-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c:
+	Fix printing of type T_MODE in dump_defaults()
+	[a868bb6f5515]
+
+	* strcasecmp.c:
+	missing sys/types.h
+	[ca694ca325b6]
+
+	* INSTALL:
+	Break out options that may be overridden at run time into their own
+	section. Add a not about Max OS X and correct some lies.
+	[d8bcfd120593]
+
+1999-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, config.h.in, configure, configure.in, sudo.c:
+	o Now use getrlimit to find the highest fd when closing all non-std
+	fd's o Turn off core dumps via setrlimit for the sake of paranoia
+	[dd9f651b6def]
+
+	* RUNSON:
+	updates
+	[f581841fe615]
+
+1999-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updates
+	[553baa1d44c7]
+
+	* tgetpass.c:
+	When read()'ing, do a single character at a time to be sure we don't
+	go oast the newline.
+	[907d33f55bb4]
+
+	* sudo.c:
+	For the sudo_root option, check against user_uid, not getuid() since
+	at this point, ruid == euid == 0.
+	[92d5c51939b4]
+
+	* RUNSON:
+	some updates
+	[e3ed0c1f312b]
+
+	* logging.h:
+	Fix compilation problem when --with-logging=file was specified. This
+	means that syslog is now required to build sudo but that should not
+	be a problem. If it is it can be fixed trivially with a configure
+	check for syslog() or syslog.h.
+	[839a4b069190]
+
+	* tgetpass.c:
+	Make this work again for things like "sudo echo hi | more" where the
+	tty gets put into character at a time mode. We read until we read
+	end of line or we run out of space (similar to fgets(3)).
+	[c8f746df2e63]
+
+1999-10-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
+	change ital to bold
+	[f860978e530a]
+
+	* RUNSON:
+	update
+	[9bcfbb405568]
+
+1999-10-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c:
+	Error out if syslog parameters are given without a value. For Ultrix
+	or 4.2BSD "syslog" is allowed without a value since there are no
+	facilities in the 4.2BSD syslog.
+	[69e7a686f5f0]
+
+1999-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c:
+	Ignore the syslog facility for systems w/ old syslog like Ultrix.
+	[5c250adbbb84]
+
+	* TROUBLESHOOTING:
+	people with "." early in their path can have problems running sudo
+	from the build dir ;-)
+	[20a1744a24a4]
+
+1999-10-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.html, sudo.man, sudo.pod:
+	Remove -r realm option
+	[127caa537f95]
+
+	* auth/kerb5.c, auth/sudo_auth.c, auth/sudo_auth.h, configure,
+	configure.in, sudo.c:
+	New krb5 code from Frank Cusack <fcusack@iconnet.net>.
+	[7177a3893a62]
+
+	* CHANGES:
+	update to reality
+	[766cfbb512d6]
+
+1999-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/fwtk.c:
+	include <auth.h> to get function prototypes.
+	[d6c7c12d09fe]
+
+	* sudo.cat, sudo.html, sudo.man, sudo.pod:
+	document -L flag
+	[dc803e1ce0d7]
+
+1999-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	in set_perms(), always call setuid(0) before changing the ruid/euid
+	so we always know it will succeed.
+	[8cced1b862bf]
+
+	* defaults.h:
+	#undef T_FOO to avoid conflicts with system defines (like on
+	ULTRIX).
+	[d9f0aac092b0]
+
+	* TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
+	sudoers.pod:
+	Docuement "Defaults" lines in /etc/sudoers. Still needs some
+	fleshing out but this is a start.
+	[521a1e629bbc]
+
+1999-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* use strtol, not strtoul since not everyone has not strtoul
+	[988462f093cc]
+
+	* defaults.c:
+	use strtol, not strtoul since not everyone has not strtoul
+	[fce835ce62e3]
+
+	* lex.yy.c, parse.lex:
+	last {WORD} rule should only apply in the INITIAL state
+	[9b57570bfa83]
+
+	* lex.yy.c, parse.lex:
+	o Add support for escaped characters in the WORD macro o Modify
+	fill() to squash escape chars
+	[87572d59e4e0]
+
+	* defaults.c, defaults.h:
+	o Add T_PATH flag to allow simple sanity checks for default values
+	that are supposed to be pathnames. o Fix a duplicate free when
+	visudo finds an error.
+	[bdc6855a6c6d]
+
+1999-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c, defaults.h, logging.c:
+	mail_if_foo -> mail_foo
+	[cbee9415875d]
+
+1999-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c:
+	o Add requiretty option o Move O_NOCTTY to compat.h
+	[65b8bf0e1795]
+
+	* logging.c:
+	The exit() in log_error() was mistakenly removed in a previous
+	version. Put it back...
+	[9473449130a4]
+
+1999-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c,
+	auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c, check.c, config.h.in,
+	configure, configure.in, defaults.c, defaults.h, find_path.c,
+	getspwuid.c, logging.c, parse.yacc, sudo.c, sudo.tab.c:
+	o Change defaults stuff to put the value right in the struct. o
+	Implement mailer_flags o Store syslog stuff both in int and string
+	form. Setting the string form magically updates the int version. o
+	Add boolean attribute to strings where it makes sense to say !foo
+	[4698953f9a36]
+
+	* tgetpass.c:
+	add O_NOCTTY when opening /dev/tty just in case
+	[4c6d1d1bb300]
+
+1999-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/API:
+	cleanup function no longer takes a status arg
+	[0819edbfe7f8]
+
+	* INSTALL:
+	the the
+	[19aadb65ea28]
+
+1999-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO, config.h.in, configure, configure.in, logging.c:
+	Use strftime() instead of ctime() if it is available.
+	[fb60ea63b514]
+
+1999-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* defaults.c:
+	fix copyright date
+	[4a53b54aa72f]
+
+	* RUNSON:
+	update ReliantUNIX entry
+	[de618a4f67d9]
+
+	* defaults.c, defaults.h, logging.c:
+	add log_year option
+	[251a9e20568a]
+
+	* configure, configure.in:
+	add --without-sendmail to help output
+	[93162f199902]
+
+	* configure, configure.in:
+	enforce an otctal arg for --with-suoders-mode
+	[45e1b04ccad3]
+
+1999-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, auth/aix_auth.c,
+	auth/fwtk.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c, auth/sia.c,
+	auth/sudo_auth.c, check.c, config.h.in, configure, configure.in,
+	defaults.c, defaults.h, find_path.c, lex.yy.c, logging.c, parse.h,
+	parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c, sudo.tab.h,
+	testsudoers.c, version.c, visudo.c:
+	Add support for "Defaults" line in sudoers to make configuration
+	variables changable at runtime (and on a global, per-host and per-
+	user basis). Both the names and the internal representation are
+	still subject to change. It was necessary to make sudo_user.runas
+	but a char ** instead of a char * since this value can be changed by
+	a Defaults line. There is a similar (but more complicated) issue
+	with sudo_user.prompt but it is handled differently at the moment.
+
+	Add a "-L" flag to list the name of options with their descriptions.
+	This may only be temporary.
+
+	Move some prototypes to parse.h
+
+	Be much less restrictive on what is allowed for a username.
+	[f71abf7ba80c]
+
+	* sample.syslog.conf:
+	Add more info
+	[e952e6f42d4d]
+
+1999-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE, fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
+	strcasecmp.c:
+	UCB has dropped the advertising clause from their license.
+	[a5602b36a341]
+
+1999-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/sudo_auth.h:
+	move dce_verofy proto to correct section
+	[972c815af558]
+
+	* auth/dce.c:
+	remove XXX
+	[820631855be0]
+
+1999-08-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* emul/fnmatch.h:
+	Add fnmatch() prototype
+	[79e84576d92a]
+
+	* fnmatch.c, parse.c, testsudoers.c:
+	Move inclusion of emul/fnmatch.h to be after sudo.h for __P
+	[1182c89fa811]
+
+	* sudo.h:
+	add strcasecmp proto
+	[512d1d8a6a0c]
+
+	* auth/sudo_auth.c:
+	add check for case where there are no auth methods
+	[e4af2b91b43e]
+
+	* configure, configure.in:
+	Define _XOPEN_EXTENDED_SOURCE on AIX and __USE_FIXED_PROTOTYPES__ on
+	SunOS4 w/ gcc
+	[746ce8bcec23]
+
+	* getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c:
+	include strings.h everywhere we include string.h
+	[6f7d5d437e7b]
+
+	* version.c:
+	nicer output when showing auth methods
+	[0eac4b977f9d]
+
+	* version.c:
+	Add support for SEND_MAIL_WHEN_NO_HOST
+	[9f20a3a3fae6]
+
+	* config.h.in, configure, configure.in:
+	Add _GNU_SOURCE for Linux
+	[c7bd8c511847]
+
+	* lex.yy.c, parse.lex:
+	fix definition of OCTECT
+	[4af30e63244d]
+
+	* configure, configure.in:
+	aix_auth.o not authenticate.o
+	[fe95dfb08df4]
+
+1999-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Only block SIGINT, SIGQUIT, SIGTSTP (which can be generated from the
+	keyboard). Since we run with ruid/euid == 0 the user can't really
+	signal us in nasty ways.
+	[a7f6487c0f48]
+
+	* visudo.c:
+	Don't need to worry about catching too many signals since we do
+	locking on the tmp file. If a lockfile is really stale, it will be
+	detected and overwritten.
+	[28983db3e749]
+
+	* INSTALL, Makefile.in:
+	include auth/API in tarball
+	[014991600252]
+
+	* auth/sudo_auth.c:
+	move memset() of plaintext pw outside of verify loop and only do the
+	memset if we are *not* in standalone mode.
+	[66f8e87567e2]
+
+	* auth/sudo_auth.c, auth/sudo_auth.h:
+	DCE is not a standalone method
+	[34963e2d8a1b]
+
+	* sudo.c:
+	fix --enable-noargs-shell
+	[4234062abbb0]
+
+	* snprintf.c:
+	"#ifdef __STDC__" not "#if __STDC__" (I missed one)
+	[c430b80454c6]
+
+	* auth/fwtk.c, auth/sia.c:
+	_cleanup() function returns an int.
+	[d1a1cc071ec1]
+
+	* auth/dce.c:
+	there were still some return(0)'s hanging around, make them
+	AUTH_FAILURE
+	[1002aa1962c3]
+
+	* parse.c:
+	typo in comment
+	[5abc410dbfd2]
+
+	* version.c:
+	add missing semicolon
+	[a262283b52a5]
+
+	* auth/sudo_auth.h:
+	missing backslash
+	[bf89f6bd2900]
+
+1999-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, config.h.in, configure, configure.in:
+	Kill _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
+	[f1a9bca0cf67]
+
+	* Makefile.in:
+	add parse.h to HDRS
+	[a3d054987766]
+
+	* Makefile.in, configure, configure.in:
+	Kill VISUDO_LIBS and VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and
+	LDFLAGS. Common libs go in LIBS, commong ld flags go in LDFLAGS and
+	network libs like -lsocket, -lnsl go in NET_LIBS. This allows
+	testsudoers to build on Solaris and is a bit cleaner in general.
+	[4e6239e97002]
+
+	* UPGRADE:
+	mention ptmp -> sudoers.tmp
+	[ec3baa0fe8a1]
+
+	* config.h.in, configure, configure.in:
+	Define _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
+	[6f93dc7f39f5]
+
+	* RUNSON:
+	add 2 reports
+	[ce0fcc00ee4e]
+
+	* auth/kerb5.c:
+	Minor changes, mostly cosmetic. verify_krb_v5_tgt() changed to
+	return a value more like a system function
+	[0dd56aa21424]
+
+	* auth/dce.c:
+	Add an XXX
+	[58fc8562c212]
+
+	* TODO:
+	more things todo!
+	[5a459d0cf339]
+
+	* sample.sudoers:
+	update based on what is in the man page
+	[1a0477db96fa]
+
+	* parse.yacc, sudo.tab.c:
+	minor change to first line printed in -l mode
+	[69eb57d96952]
+
+	* sudo.cat, sudo.html, sudo.man, sudo.pod:
+	rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
+	standard and add "EXAMPLES" section
+	[7e543335ebe1]
+
+	* visudo.cat, visudo.html, visudo.man, visudo.pod:
+	rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
+	standard
+	[f82d87ed65c2]
+
+	* logging.c, parse.c, sudo.h:
+	add FLAG_NO_CHECK
+	[c7d69176a2d7]
+
+	* lex.yy.c, parse.lex:
+	make an OCTET really be limited to 0-255
+	[6ee568dd6a02]
+
+	* UPGRADE:
+	mention timestamp changes
+	[e44d5302bf60]
+
+	* PORTING:
+	cosmetic cleanup
+	[36fa3a2664dd]
+
+	* sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
+	new sudoers(8) man page
+	[e674d06283d0]
+
+1999-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* version.c:
+	Update comments about syslog name tables
+	[63830a782dcb]
+
+	* CHANGES, LICENSE, Makefile.in, configure, configure.in, parse.yacc,
+	strcasecmp.c, sudo.tab.c:
+	include strcasecmp() for those without it
+	[a0d8e2488bbc]
+
+	* sample.sudoers:
+	Use the : operator some more and fix a typo
+	[18804c70da86]
+
+	* HISTORY:
+	update the history of sudo
+	[9d9b3d5279b3]
+
+	* parse.c, parse.lex, testsudoers.c:
+	CIDR-style netmask support
+	[768644467353]
+
+	* CHANGES:
+	recent changes
+	[a4319e9d07cb]
+
+	* sudo.tab.c, sudo.tab.h:
+	these should be generated with byacc, not bison
+	[f57b9489b752]
+
+	* lex.yy.c:
+	regen
+	[522461f95dfa]
+
+	* parse.h, parse.yacc, sudo.tab.c, sudo.tab.h:
+	In "sudo -l" mode, the type of the stored (expanded) alias was not
+	stored with the contents. This could lead to incorrect output if the
+	sudoers file had different alias types with the same name. Normal
+	parsing (ie: not in '-l' mode) is unaffected.
+	[823fe2bc4b79]
+
+1999-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	define _XOPEN_SOURCE to get at crypt() proto on some systems
+	[1b3769b86fb9]
+
+1999-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* snprintf.c:
+	fix comment
+	[fc1264df00f7]
+
+	* tgetpass.c:
+	don't need limits.h
+	[f1631829af45]
+
+	* snprintf.c:
+	kill bogus reference to vfprintf
+	[a0b99b25d389]
+
+	* sample.sudoers, sudoers:
+	better examples
+	[b4d87ea64cc8]
+
+	* snprintf.c:
+	Add some const in the K&R defs. This is safe since we define const
+	away if the compiler doesn't grok it.
+	[614d6e83d45e]
+
+	* aclocal.m4, configure:
+	Better test for working long long support. Ultrix compiler supports
+	basic long long but not all operations on them.
+	[5da1508710ed]
+
+	* aclocal.m4, auth/secureware.c, config.h.in, configure, getspwuid.c,
+	snprintf.c, sudo.c:
+	Add check for LONG_IS_QUAD #undef MAXINT before including
+	hpsecurity.h to silence an HP-UX warning Check for U?LONG_LONG_MAX
+	in snprintf.c and use LONG_IS_QUAD
+	[a1f7993367fc]
+
+1999-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* LICENSE, aclocal.m4, config.h.in, configure, configure.in,
+	snprintf.c:
+	UCB-derived snprintf + asprintf support. Supports quads if the
+	compiler does. No floating point yet, perhaps later...
+	[0caf05aba945]
+
+1999-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/API, auth/sudo_auth.c, auth/sudo_auth.h, check.c, find_path.c,
+	goodpath.c, logging.c, parse.c, sudo.c:
+	Run most of the code as root, not the invoking user. It doesn't
+	really gain us anything to run as the user since an attacker can
+	just have an setuid(0) in their egg. Running as root solves
+	potential problems wrt signalling.
+	[408e530dda01]
+
+	* sudo.tab.c:
+	regen
+	[f8cfb37e37de]
+
+1999-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c, sudo.c:
+	Don't wait for child to finish in log_error(), let the signal
+	handler get it if we are still running, else let init reap it for
+	us. The extra time it takes to wait lets the user know that mail is
+	being sent.
+
+	Install SIGCHLD handler in main() and for POSIX signals, block
+	everything
+	*except* SIGCHLD.
+	[d2b6ab0ef3be]
+
+	* INSTALL, config.h.in, configure, configure.in, logging.c, parse.c,
+	parse.yacc, sudo.c, sudo.h:
+	sudoers_lookup() now returns a bitmap instead of an int. This makes
+	it possible to express things like "failed to validate because user
+	not listed for this host". Some thigns that were previously
+	VALIDATE_FOO are now FLAG_FOO. This may change later on.
+
+	Reorganized code in log_auth() and sudo.c to deal with above
+	changes.
+
+	Safer versions of push/pushcp with in the do { ... } while (0) style
+
+	parse.yacc now saves info on the stack to allow parse.c to determine
+	if a user was listed, but not for the host he/she tried to run on.
+
+	Added --with-mail-if-no-host option
+	[63326cb01efc]
+
+1999-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc, sudo.h, sudo.tab.c, visudo.c, visudo.cat, visudo.html,
+	visudo.man, visudo.pod:
+	o NewArgv and NewArgc don't need to be externally visible. o If
+	pedantic > 1, it is a parse error. o Add -s (strict) option to
+	visudo which sets pedantic to 2.
+	[5d7d81b55cd5]
+
+	* HISTORY, INSTALL:
+	Just have sudo-bugs contact info in one place
+	[e7f6588ea683]
+
+	* sudo.cat, sudo.html, sudo.man, sudo.pod:
+	Add BUGS section
+	[6607d96ea510]
+
+	* Makefile.in, configure, configure.in:
+	Add testsudoers to default build target if --with-devel Don't clean
+	generated parser files unless "distclean".
+	[5827b769dc57]
+
+	* parse.yacc, sudo.tab.c:
+	In pedantic mode we need to save *all* the aliases, not just those
+	that match, or we get spurious warnings.
+	[24f5b1f0e1de]
+
+	* TROUBLESHOOTING:
+	reference samples.sylog.conf
+	[11841668380a]
+
+1999-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sample.syslog.conf:
+	Sample entries for syslog.conf
+	[0f7697d878a1]
+
+	* CHANGES:
+	recent changes
+	[8bca8810c6bd]
+
+	* auth/API, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
+	auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
+	auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
+	auth/sudo_auth.c, auth/sudo_auth.h:
+	In struct sudo_auth, turn need_root and configured into flags and
+	add a flag to specify an auth method is running alone (the only
+	one). Pass auth methods their sudo_auth pointer, not the data
+	pointer. This allows us to get at the flags and tell if we are the
+	only auth method. That, in turn, allows the method to be able to
+	decide what should/should not be a fatal error. Currently only
+	rfc1938 uses it this way, which allows us to kill the OTP_ONLY
+	define and te hackery that went with it. With access to the
+	sudo_auth struct, methods can also get at a string holding their
+	cannonical name (useful in error messages).
+	[b7e320fc6511]
+
+	* INSTALL, Makefile.in, README, config.h.in, configure, configure.in,
+	getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c,
+	sudo.tab.h:
+	o --with-otp deprecated, use --without-passwd instead o real
+	dependencies in the Makefile o --with-devel option to enable yacc,
+	lex, and -Wall o style -- "foo -> bar" becomes "foo->bar" o ALL goes
+	back to being a token, not a string but don't leak memory o rename
+	hsotspec -> host in parse.yacc
+	[912c45226cb2]
+
+1999-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, CHANGES:
+	recent changes
+	[801fa6e55687]
+
+	* auth/sudo_auth.c, configure, configure.in, interfaces.c, snprintf.c,
+	sudo.c, sudo.h:
+	o Digital UNIX needs to check for *snprintf() before -ldb is added
+	to LIBS since -ldb includes a bogus snprintf(). o Add forward refs
+	for struct mbuf and struct rtentry for Digital UNIX. o Reorder some
+	functions in snprintf.c to fix -Wall o Add missing includes to fix
+	more -Wall
+	[8d207203e126]
+
+	* INSTALL, auth/sudo_auth.c, check.c, config.h.in, configure,
+	configure.in, parse.yacc, sudo.tab.c, testsudoers.c, version.c,
+	visudo.c:
+	o Add a "pedentic" flag to the parser. This makes sudo warn in cases
+	where an alias may be used before it is defined. Only turned on for
+	visudo and testsudoers. o Add --disable-authentication option that
+	makes sudo not require authentication by default. The PASSWD tag can
+	be used to require authentication for an entry. We no longer
+	overload --without-passwd.
+	[f307e09adf98]
+
+	* lex.yy.c, parse.lex:
+	Break 'WORD' regexp def into HOSTNAME and USERNAME. These days a
+	username can contain just about anything so be very permissive. Also
+	drop the unused \. punctuation.
+	[06a50614ff89]
+
+1999-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc, sudo.tab.c:
+	o add a 'val' element to aliasinfo struct and move -> parse.h o
+	find_alias() now returns an aliasinfo * instead of boolean o
+	add_alias() now takes a value parameter to store in the
+	aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
+	return: 1) positive match 0) negative match (due to '!')
+	-1) no match This means setting $$ explicitly in all cases, which I
+	should have done in the first place. It also means that we always
+	store a value that is != -1 and when we see a '!' we can set
+	*_matches to !rv if rv != -1. The upshot of all of this is that '!'
+	now works the way it should in lists and some of the rules are more
+	uniform and sensible.
+	[ad8e73b5d581]
+
+	* Makefile.in:
+	add parse.h dependency
+	[4ccccd464d30]
+
+	* parse.h:
+	kill unused *_matched macros
+	[02cba6dcb732]
+
+	* parse.yacc:
+	Allow a list of users as the first thing in a user spec, not just a
+	single entry. This makes things more uniform, though it does allow
+	you to write user specs that are hard to read.
+	[3c4c91c508ca]
+
+	* sudo.tab.c:
+	parse.yacc
+	[feca81881bb6]
+
+	* configure:
+	regen
+	[6f247010bb3b]
+
+	* configure.in:
+	fix check for crypt() in libufc
+	[82770736f4b0]
+
+1999-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	sudo-users list now exists
+	[4716d2bb0bbf]
+
+	* INSTALL, PORTING, README, TODO, TROUBLESHOOTING:
+	Update to reality.
+	[1eda2d57e42a]
+
+	* CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
+	config.h.in, configure, configure.in, fileops.c, logging.c, sudo.h,
+	version.c, visudo.c:
+	o Move lock_file() and touch() into fileops.c so visudo can use them
+	o Visudo now locks the sudoers temp file instead of bailing when the
+	temp file already exists. This fixes the problem of stale temp files
+	but it does *require* that you not try to put the temp file in a
+	world-writable directory. This shoud not be an issue as the temp
+	file should live in the same dir as sudoers. o Visudo now only
+	installs the temp file as sudoers if it changed.
+	[2517cd06c070]
+
+1999-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	add fcntl locking
+	[c304adeaf515]
+
+	* config.h.in, configure, configure.in, logging.c:
+	Lock the log file.
+	[d8652704fbdf]
+
+	* Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
+	visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod:
+	o /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
+	temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and _PATH_SUDO_STMP
+	-> _PATH_SUDOERS_TMP
+	[68cad8975807]
+
+1999-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, check.c, config.h.in, configure, configure.in, version.c:
+	o Kill *_MESSAGE and replace with NO_LECTURE o Add more things to
+	root sudo -V config reporting
+	[cdd2613a9dcf]
+
+	* configure, configure.in:
+	aix_auth.o not authenticate.o
+	[d972e35f6730]
+
+	* config.h.in:
+	Add --with-goodpri and --with-badpri configure options to specify
+	the syslog priority to use.
+	[2595ae50ab86]
+
+	* INSTALL, configure, configure.in, logging.h:
+	Add --with-goodpri and --with-badpri configure options to specify
+	the syslog priority to use.
+	[8276ee9b2b49]
+
+	* compat.h:
+	kill crufty AIX stuff
+	[a4f35ef9854e]
+
+	* Makefile.in:
+	Sigh, some versions of make (like Solaris's) don't deal with $< like
+	I would expect. Both GNU and BSD makes get this right but... So, we
+	just expand $< inline at the cost of some ugliness.
+	[b1b456f8801f]
+
+	* version.c:
+	If the invoking user is root, sudo will now print configure info in
+	-V mode. Currently just prints logging info, to be expanded later.
+	[392f7ed99267]
+
+	* logging.c, logging.h, sudo.c, sudo.h:
+	o new defines for syslog facility and priority o use new
+	print_version() functino for -V mode
+	[78abc5142985]
+
+	* check.c:
+	Don't need version.c
+	[db9a830ad893]
+
+	* aclocal.m4, config.h.in, configure, configure.in:
+	Add check for syslog facilities and priorities tables in syslog.h
+	[b86213e5fc5c]
+
+	* Makefile.in:
+	o authenticate -> aix_auth o add version.c
+	[44b6b9a8d0f5]
+
+	* auth/sudo_auth.c:
+	Missed a prompt -> user_prompt conversion
+	[e4c60b1f210c]
+
+1999-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	sudo should lock its logfile
+	[6d2830b28b07]
+
+	* parse.yacc, sudo.tab.c:
+	o Add '!' correctly when expanding Aliases. o Add shortcut macros
+	for append() to make things more readable. o The separator in
+	append() is now a string instead of a char. o In append(), only
+	prepend the separator if the last char is not a '!'. This is a hack
+	but it greatly simplifies '!' handling. o In -l mode, Runas lists
+	and NOPASSWD/PASSWD tags are now inherited across entries in a list
+	(matches current behavior). o Fix formatting in -l mode such that
+	items in a list are separated by a space. Greatlt improves
+	readability. o Space for name field in struct aliasinfo is now
+	allocated dyanically instead of using a (big) buffer. o In
+	add_alias(), only search the list once (lsearch instead of lfind +
+	lsearch)
+	[51f7e07addb9]
+
+	* lex.yy.c, sudo.tab.c, sudo.tab.h:
+	regen
+	[5c19bb05dc21]
+
+	* configure, configure.in:
+	Solais pam doesn't require anye xtra setup
+	[a25ba03d91d1]
+
+	* parse.yacc:
+	o Simpler '!' support now that the lexer deals with multiple !'s for
+	us. o In the case of opFOO, have FOO give a boolean return value and
+	set foo_matches in opFOO, not FOO. o Treat 'ALL' as a string since
+	it gets fill()'d in parse.lex--fixes a small memory leak. In the
+	long run it may be better to just fix parse.lex and make ALL back
+	into a token. However, having it be a string is useful since it can
+	be easily passed back to the parent rule if we so desire.
+	[b3c64b443018]
+
+	* parse.lex:
+	o Remove some unnecessary backslashes o collapse multiple !'s by
+	using !+ and checking if yyleng is even or odd. this allows us to
+	simplify ! handling in parse.yacc
+	[76330e8da8e3]
+
+	* sudo.c:
+	-u flag was being ignored
+	[e30283207585]
+
+1999-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	correct fix
+	[a0e2377dec8f]
+
+	* Makefile.in:
+	work around pod2man stupididy
+	[7c755640b67f]
+
+	* Makefile.in:
+	correct dependencies for .cat
+	[5ed7b0653b68]
+
+	* sudo.cat, sudo.man, visudo.cat, visudo.man:
+	regen
+	[b74510dd6a0a]
+
+	* sudo.pod, visudo.pod:
+	Add copyright Update to reality
+	[188e9b046c15]
+
+	* parse.c, sudo.c, sudo.h:
+	rename validate() to the more descriptive sudoers_lookup()
+	[7a1cb652f379]
+
+	* auth/aix_auth.c:
+	use tgetpass
+	[b8ba5daec40a]
+
+1999-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updates
+	[e61460cdf4a0]
+
+	* HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
+	configure, configure.in, sudo.c:
+	Sudo, not CU Sudo
+	[9061b3573c0c]
+
+	* LICENSE:
+	add 4th term to license similar to term 5 in the apache license
+	[92712e895afb]
+
+	* emul/search.h, emul/utime.h:
+	add 4th term to license similar to term 5 in the apache license
+	[4f93a8b9396e]
+
+	* auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c,
+	auth/kerb5.c, auth/pam.c, auth/passwd.c, auth/rfc1938.c,
+	auth/secureware.c, auth/securid.c, auth/sia.c, auth/sudo_auth.c,
+	auth/sudo_auth.h, insults.h, interfaces.c, interfaces.h, lex.yy.c,
+	logging.c, logging.h, parse.c, parse.h, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h, sudo.tab.c,
+	sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
+	visudo.c:
+	add 4th term to license similar to term 5 in the apache license
+	[afae9f2bf9ec]
+
+	* Makefile.in, alloc.c, check.c, compat.h, config.h.in, find_path.c,
+	getspwuid.c, goodpath.c:
+	add 4th term to license similar to term 5 in the apache license
+	[969e63dbd38e]
+
+	* ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
+	add 4th term to license similar to term 5 in the apache license
+	[c389d3fdafac]
+
+	* LICENSE, aclocal.m4, auth/rfc1938.c, check.c, configure.in,
+	insults.h, logging.c, sudo.c, sudo.h:
+	there was a 1995 release too
+	[5963fd89457a]
+
+1999-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updates
+	[254b794f16ab]
+
+	* check.c:
+	Use dirs instead of files for timestamp. This allows tty and non-
+	tty schemes to coexist reasonably. Note, however, that when you
+	update a tty ticket, the mtime on the user dir gets updated as well.
+	[44bfac32f799]
+
+	* configure, configure.in:
+	Fix getprpwnam() checking on SCO. Need to link with "-lprot -lx"
+	when linking test program, not just -lprot. Also add check for
+	getspnam(). The SCO docs indicate that /etc/shadow can be used but
+	this may be a lie.
+	[2ba21d36cc1e]
+
+1999-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/API:
+	first cut at auth API description
+	[3d10df021eb8]
+
+1999-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c,
+	auth/secureware.c, auth/securid.c, auth/sudo_auth.c,
+	auth/sudo_auth.h:
+	auth API change. There is now an init method that gets run before
+	the main loop. This allows auth routines to differentiate between
+	initialization that happens once vs. setup that needs to run each
+	time through the loop.
+	[76df1c0d3478]
+
+	* auth/kerb5.c, logging.c:
+	use easprintf() and evasprintf()
+	[fd97d96dc12f]
+
+	* alloc.c, sudo.h:
+	add easprintf() and evasprintf(), error checking versions of
+	asprintf() and vasprintf()
+	[f54385de20b7]
+
+	* TODO:
+	remove 2 items. One done, one won't do.
+	[64513b47bc7a]
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[4aa299de2752]
+
+	* configure, sudo.cat, sudo.html, sudo.man, sudoers.html, visudo.cat,
+	visudo.html, visudo.man:
+	regen
+	[553c0d1209be]
+
+	* CHANGES:
+	new changes
+	[d7be00b7e36b]
+
+	* sudo.pod:
+	o Document -K flag and update meaning of -k flag. o BSD-style
+	copyright o Document clearing of BIND resolver environment variables
+	o Clarify bit about shared libs o suggest rc files create /tmp/.odus
+	if your OS gives away files
+	[4a4092be1455]
+
+	* visudo.pod:
+	BSD license
+	[ad0bfd0a4630]
+
+	* version.h:
+	BSD-style copyright
+	[ecc6479325be]
+
+	* tgetpass.c:
+	o BSD copyright o no need to block signals, we now do that in main()
+	o cosmetic changes
+	[61958beda7ab]
+
+	* testsudoers.c, visudo.c:
+	o BSD-style copyright o Use "struct sudo_user" instead of old
+	globals. o some cometic cleanup
+	[88c0c6924082]
+
+	* sudo_setenv.c:
+	BSD-style copyright
+	[df20290129a0]
+
+	* sudo.h:
+	o BSD copyright o logging and parser bits moved to their own .h
+	files o new "struct sudo_user" to encapsulate many of the old
+	globals.
+	[50fc86bf25cb]
+
+	* sudo.c:
+	o no longer contains sudo 1.1/1.2 code o BSD copyright o use new
+	logging routines o simplified flow of control o BIND resolver
+	additions to badenv_table
+	[8c53f15bfcb0]
+
+	* strerror.c:
+	BSD-style copyright
+	[7c906c3a82ac]
+
+	* snprintf.c:
+	Now compiles on more K&R compilers
+	[07ab1d3231c7]
+
+	* putenv.c:
+	BSD-style copyright, cosmetic changes
+	[c42371295881]
+
+	* pathnames.h.in:
+	BSD-style copyright
+	[e5c34ebd4cf1]
+
+	* parse.c, parse.h, parse.lex, parse.yacc:
+	BSD-style copyright. Move parser-specific defines and structs into
+	parse.h + other cosmetic changes
+	[d3088efb6228]
+
+	* logging.h:
+	defines for logging routines
+	[13147941c02d]
+
+	* find_path.c, getspwuid.c, goodpath.c, interfaces.c:
+	BSD-style copyright, cosmetic changes
+	[e8205e91a4fa]
+
+	* ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.h:
+	BSD-style copyright
+	[b9499da7cdce]
+
+	* configure.in:
+	o tgetpass.c is no longer optional o kill DCE_OBJS, add AUTH_OBJS o
+	kill --disable-tgetpass o add --without-passwd o changes to fill in
+	AUTH_OBJS for new auth api o check for strerror(), v?snprintf() and
+	v?asprintf() o replace --with-AuthSRV with --with-fwtk
+	[9a3f39b9c128]
+
+	* config.h.in:
+	BSD-style copyright. Remove USE_GETPASS and HAVE_UTIME_NULL. Add
+	HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF, HAVE_VSNPRINTF,
+	HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and NO_PASSWD
+	[9a09054db53a]
+
+	* compat.h:
+	BSD-style copyright; Add S_IFLNK and MIN/MAX id they are missing.
+	[25509c566975]
+
+	* alloc.c:
+	BSD-style copyright
+	[4967be892363]
+
+	* TROUBLESHOOTING:
+	no more --with-getpass
+	[afd5b670c196]
+
+	* TODO:
+	Take out things I've done...
+	[375420c8270e]
+
+	* README:
+	Refer to LICENSE
+	[c486c8db30f6]
+
+	* PORTING:
+	--with-getpass no longer exists
+	[db48202df1bb]
+
+	* Makefile.in:
+	BSD-style copyright. Update to reflect reality wrt new files and new
+	auth modules.
+	[61a2ca7940fb]
+
+	* INSTALL:
+	Remove --with-AuthSRV and --disable-tgetpass. Add --with-fwtk and
+	--without-passwd.
+	[64e8f9e1c05e]
+
+	* HISTORY:
+	Update history a bit
+	[df60c0a871b8]
+
+	* COPYING, LICENSE:
+	Now distributed under a BSD-style license
+	[d1a184ccabe1]
+
+	* auth/sudo_auth.c:
+	o BSD-style copyright o Add support for NO_PASSWD/WITHOUT_PASSWD
+	options. o skey/opie replaced by rfc1938 code o new struct sudo_user
+	global
+	[891b57060868]
+
+	* auth/pam.c, auth/sia.c:
+	BSD-style copyright and use new log functions
+	[65c44445ea84]
+
+	* auth/kerb5.c:
+	o BSD-style copyright o Use new log functiongs o Use asprintf() and
+	snprintf() where sensible.
+	[1ff0feaacf95]
+
+	* check.c:
+	Rewrote all the old sudo 1.1/1.2 code. Timestamp handling is now
+	done more reasonably--better sanity checks and tty-based stamps are
+	now done as files in a directory with the same name as the invoking
+	user, eg. /var/run/sudo/millert/ttyp1. It is not currently possible
+	to mix tty and non-tty based ticket schemes but this may change in
+	the future (it requires sudo to use a directory instead of a file in
+	the non-tty case). Also, ``sudo -k'' now sets the ticket back to the
+	epoch and ``sudo -K'' really deletes the file. That way you don't
+	get the lecture again just because you killed your ticket in
+	.logout. BSD-style copyright now.
+	[ec3460f85be8]
+
+	* logging.c:
+	o rewritten logging routines. log_error() now takes printf-style
+	varargs and log_auth() for the return value of validate(). o BSD-
+	style copyright
+	[438292025c4e]
+
+	* auth.c, check_sia.c, dce_pwent.c, secureware.c:
+	superceded by new auth API
+	[412060590da7]
+
+	* auth/kerb4.c:
+	BSD-style copyright
+	[cc4e800833c7]
+
+	* auth/fwtk.c:
+	Use snprintf() where it makes sense and add a BSD-style copyright
+	[1b7502388a74]
+
+	* auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/passwd.c,
+	auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sudo_auth.h:
+	BSD-style copyright
+	[42583bedae5c]
+
+	* emul/utime.h, utime.c:
+	BSD-style copyright
+	[3985c90aba47]
+
+	* emul/search.h:
+	this has been rewritten so use my BSD-style copyright
+	[176df1b0de6f]
+
+1999-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* snprintf.c:
+	include malloc.h if no stdlib.h
+	[7b123f1d1d03]
+
+	* snprintf.c:
+	KTH snprintf()/asprintf() for systems w/o them
+	[3ca9aefb9d01]
+
+	* strerror.c:
+	strerror() for systems w/o it
+	[7f0bd8a1c1b4]
+
+1999-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	stylistic changes
+	[6f99aceb7170]
+
+	* parse.c, parse.lex, parse.yacc:
+	Add contribution info in the main comment
+	[e50cec10acd6]
+
+1999-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth/pam.c:
+	remove missed ref to PAM_nullpw
+	[a43e59692cdb]
+
+	* auth/sudo_auth.h:
+	pasto
+	[891ff138ab89]
+
+	* auth/kerb5.c:
+	more or less complete now--still untested
+	[21036732faa0]
+
+	* auth/afs.c, auth/pam.c:
+	don't use user_name macro, it will go away
+	[def7cf727349]
+
+	* auth/opie.c, auth/rfc1938.c, auth/skey.c, auth/sudo_auth.h:
+	combine skey/opie code into rfc1938.c
+	[44d88ca93d3e]
+
+	* auth/dce.c, auth/sudo_auth.h:
+	DCE authentication method; basically unchanged from dce_pwent.c
+	[4d468473dd6f]
+
+	* auth/aix_auth.c, auth/sudo_auth.h:
+	AIX authenticate() support. Could probably be much better
+	[000013321a33]
+
+	* auth/sia.c:
+	Fix an uninitialized variable and some cleanup. Now works (tested)
+	[fd6ad88ff055]
+
+	* auth/sia.c, auth/sudo_auth.h:
+	SIA support for digital unix
+	[5335f3e70eab]
+
+	* auth/pam.c:
+	don't use prompt global, it will go away
+	[fadd22dd6ce4]
+
+	* auth/secureware.c:
+	correct copyright years
+	[6aa07c49f51b]
+
+	* auth/afs.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/opie.c,
+	auth/pam.c, auth/passwd.c, auth/secureware.c, auth/securid.c,
+	auth/skey.c, auth/sudo_auth.c, auth/sudo_auth.h:
+	New authentication API and methods
+	[9debe9b59c79]
+
+1999-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.tab.c:
+	regen
+	[84578e82c1a6]
+
+	* parse.yacc:
+	only save an entry if user_matches && host_matches, even if the
+	stack is empty (fix for previous commit)
+	[00984b078d8a]
+
+	* sudo.tab.c:
+	regen
+	[66acf160b4b7]
+
+	* parse.yacc:
+	1) Always save an entry on the stack if it is empty. This fixes the
+	-l and -v flags that were broken by earlier parser changes.
+
+	2) In a Runas list, don't negate FALSE -> TRUE since that would make
+	!foo match any time the user specified a runas user (via -u) other
+	than foo.
+	[f322eb54b015]
+
+	* testsudoers.c:
+	interfaces and num_interfaces are now auto, not extern
+	[113add5c6518]
+
+1999-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth.c:
+	use a static global to keep stae about empty passwords
+	[bc02e30807d8]
+
+	* check_sia.c:
+	make PASSWORD_NOT_CORRECT logging consistent with other modules
+	[21962549d5fd]
+
+1999-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* auth.c:
+	PAM prompt code was wrong, looks like we have to kludge it after
+	all.
+	[91f246155ead]
+
+	* auth.c:
+	In the PAM code, when a user hits return at the first password
+	prompt, exit without a warning just like the normal auth code
+	[918f59bacdb7]
+
+	* configure, configure.in:
+	kludge around cross-compiler false positives
+	[5e5fc8356400]
+
+	* auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c:
+	New (correct) PAM code Tgetpass now takes an echo flag for use with
+	PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
+	useless umask setting Change error from BAD_ALLOCATION ->
+	BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to auth.c
+	for consistency
+	[e71397f09dd8]
+
+	* sudo.c:
+	Some -Wall and kill some trailing spaces
+	[8229b43d5c4e]
+
+	* configure.in:
+	define -D__EXTENSIONS__ for solaris so we get crypt() proto
+	[7533e4436cab]
+
+1999-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	add Dynix 4.4.4
+	[b69f773efbce]
+
+	* INSTALL, config.h.in, configure, configure.in:
+	for kerberos V < version, fall back on old kerb4 auth code
+	[d685ed3a1d8e]
+
+	* INSTALL:
+	clarify some things
+	[2f5ba2e8e53a]
+
+	* UPGRADE, sudoers.cat, sudoers.man, sudoers.pod:
+	typos
+	[8925a109c093]
+
+1999-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	mention why DONT_LEAK_PATH_INFO is not the default
+	[0346260cb4ec]
+
+1999-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	Fix open(2) return value checking, was NULL for fopen, should be -1
+	for open
+	[355878bf6d8a]
+
+	* configure:
+	regen
+	[68bf82871862]
+
+	* configure.in:
+	better wording for solaris pam notice
+	[04e88c7a6c42]
+
+	* CHANGES:
+	document recent changes
+	[7c922c5622ef]
+
+	* TROUBLESHOOTING:
+	Update shadow password section
+	[e8448bae7d66]
+
+	* auth.c:
+	move authentication code from check.c to auth.c
+	[e9f6ecae2399]
+
+	* Makefile.in, check.c, sudo.h:
+	move authentication code to auth.c
+	[124cded85f46]
+
+1999-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
+	getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
+	logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
+	sudo.h, sudo.tab.c, sudo_setenv.c, testsudoers.c, tgetpass.c,
+	visudo.c:
+	Move interface-related defines to interfaces.h so we don't have to
+	include <netinet/in.h> everywhere.
+	[e7599d8ea0bf]
+
+1999-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c, logging.c,
+	parse.yacc, sudo.c, sudo.tab.c, tgetpass.c:
+	o Replace _PASSWD_LEN braindeath with our own SUDO_MAX_PASS. It
+	turns out the old DES crypt does the right thing with passwords
+	longert than 8 characters. o Fix common typo (necesary -> necessary)
+	o Update TODO list
+	[ad75007a6f13]
+
+1999-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	set $LOGNAME when we set $USER
+	[391596210fd7]
+
+1999-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	add comment about digital unix and interfaces.c warning with gcc
+	[e20f815901cc]
+
+1999-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sample.sudoers:
+	use modern paths and give examples for some of the new parser
+	features
+	[e7b2e507c695]
+
+1999-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	fix comment
+	[5eb0d005a65f]
+
+	* alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
+	getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c, parse.c,
+	parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c, sudo.tab.c,
+	sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	Function names should be flush with the start of the line so they
+	can be found trivially in an editor and with grep
+	[3c400abde574]
+
+	* find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex, parse.yacc,
+	sudo.c, sudo.tab.c, testsudoers.c, tgetpass.c, visudo.c:
+	free(3) is already void, no need to cast it
+	[6981e1ebda0f]
+
+	* logging.c, sudo.c, sudo.h:
+	catch case where cmnd_safe is not set (this should not be possible)
+	[3e1e3038546c]
+
+	* CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c,
+	testsudoers.c, visudo.c:
+	Stash the "safe" path (ie: the one listed in sudoers) to the command
+	instead of stashing the struct stat. Should be safer.
+	[aa2883fcf57e]
+
+1999-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, Makefile.in, UPGRADE:
+	notes on updating from an earlier release
+	[df9fffa4ab2c]
+
+	* CHANGES:
+	updated
+	[574f5065d15a]
+
+1999-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc, sudo.tab.c, sudo.tab.h, sudoers.cat, sudoers.html,
+	sudoers.man, sudoers.pod:
+	You can now specifiy a host list instead of just a host or alias.
+	Ie: user = host1,host2,ALIAS,!host3 my_command now works.
+	[e3942bb78021]
+
+	* testsudoers.c:
+	Quiet -Wall
+	[a3edc8b08c3a]
+
+	* parse.yacc, sudo.tab.c:
+	Move the push from the beginning of cmndspec to the end. This means
+	we no longer have to do a push at the end of privilege, just reset
+	some values.
+	[8ea66e5860c6]
+
+	* sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
+	runas-lists and NOPASSWD/PASSWD modifiers are now sticky and you can
+	use "!" most everywhere
+	[aadae4d1c9d5]
+
+1999-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	modernize paths and update su example based on sample.sudoers one
+	[3f6a37e16c83]
+
+	* sample.sudoers:
+	New runas semantics
+	[756ee92865b7]
+
+	* CHANGES, Makefile.in, alloc.c, config.h.in, configure, configure.in,
+	strdup.c, sudo.h:
+	In estrdup(), do the malloc ourselves so we don't need to rely on
+	the system strdup(3) which may or may not exist. There is now no
+	need to provide strdup() for those w/o it. Also, the prototype for
+	estrdup() was wrong, it returns char * and its param is const.
+	[5f1f984da8e3]
+
+	* getcwd.c:
+	$Sudo tag
+	[e4188a35e68c]
+
+	* check.c:
+	buf should be prompt; Michael Robokoff <mrobo@networkcs.com>
+	[2aec87c86cde]
+
+	* CHANGES, TODO, parse.yacc, sudo.tab.c:
+	It is now possible to use the '!' operator in a runas list as well
+	as in a Cmnd_Alias, Host_Alias and User_Alias.
+	[a4fdaabda990]
+
+	* logging.c, sudo.h:
+	Kill GLOBAL_NO_SPW_ENT (not used) and crank GLOBAL_PROBLEM
+	[73d0376785ae]
+
+	* sudo.h:
+	Definitions of *_matched were wrong--user top, not top-2 as
+	subscript.
+	[5f8350a57362]
+
+	* logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c:
+	Add VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
+	command but the NOPASSWD flag was set. Make runasspec, runaslist,
+	runasuser, and nopasswd typeless in parse.yacc Add support for '!'
+	in the runas list Fix double printing of '%' and '+' for groups and
+	netgroups respectively Add *_matched macros (no need for local stack
+	variable). Should only be used directly after a pop (since top must
+	be >= 2).
+	[392b1400c4e6]
+
+	* aclocal.m4, configure.in:
+	Add copyright, somewhat silly
+	[55c2cdd82dca]
+
+1999-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, Makefile.in, README, alloc.c, check.c, check_sia.c,
+	compat.h, config.h.in, configure, configure.in, dce_pwent.c,
+	emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
+	ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
+	lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
+	putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
+	sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat, sudoers.man,
+	testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c, visudo.cat,
+	visudo.man:
+	Crank version to 1.6 and combine copyright statements
+	[0e1c791658ae]
+
+	* sample.sudoers:
+	Use ! not ^ to do negation
+	[1480a0761730]
+
+	* lex.yy.c, sudo.tab.c:
+	regen
+	[89ca5a46684b]
+
+	* parse.lex, parse.yacc:
+	Make runas and NOPASSWD tags persistent across entris in a command
+	list. Add a PASSWD tag to reverse NOPASSWD. When you override a
+	runas or *PASSWD tag the value given becomes the new default for the
+	rest of the command list.
+	[f1bbb4066542]
+
+1999-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, RUNSON:
+	update for 1.5.9
+	[a1ae9d4a7d54] [SUDO_1_5_9]
+
+	* visudo.c:
+	Shift return value of system(3) by 8 to get real exit value and if
+	it is not 1 or 0 print the retval along with the error message.
+	[c1ff50d743fb]
+
+1999-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	testsudoers needs LIBOBJS too
+	[972571b4e4bf]
+
+	* parse.c, parse.yacc, sudo.tab.c:
+	Fix another parser bug. For a sudoers entry like this: millert
+	ALL=/bin/ls,(daemon) !/bin/ls sudo would not allow millert to run ls
+	as root.
+	[51968e1eb33d]
+
+	* CHANGES:
+	new change
+	[271c6110bb62]
+
+	* parse.yacc, sudo.tab.c:
+	Save entries that match a ! command on the matching stack too
+	[5afb5107116c]
+
+	* sudo.c:
+	Make sudo's usage info better when mutually exclusive args are given
+	and don't rely on argument order to detect this; nick@zeta.org.au
+	[2422753c88fd]
+
+1999-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, Makefile.in, RUNSON:
+	updates from CU
+	[b37381e3dafb]
+
+	* Makefile.in:
+	use gzip
+	[94a64e52a166]
+
+	* parse.yacc, sudo.tab.c:
+	Fix off by one error introduced in *alloc changes
+	[95ede581153a]
+
+	* BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
+	check_sia.c, compat.h, config.h.in, configure, configure.in,
+	dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat,
+	sudo.h, sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat,
+	sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
+	visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod:
+	++version
+	[c6d88f024e37]
+
+	* Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
+	interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
+	putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo.tab.c,
+	sudo_setenv.c, testsudoers.c, utime.c, visudo.c:
+	Use emalloc/erealloc/estrdup
+	[44221d97361a]
+
+	* alloc.c:
+	error checking memory allocation routines
+	[5f8c1e7bbc71]
+
+	* parse.yacc, sudo.tab.c:
+	Still not right, this fixes it for real
+	[ad553b6f5339]
+
+	* parse.yacc, sudo.tab.c:
+	Fix for previous commit
+	[4d6f989f9bf2]
+
+	* CHANGES, INSTALL, parse.yacc:
+	Fix a parser bug that was exposed when mixing different runas specs
+	and ! commands. For example: millert ALL=(daemon)
+	/usr/bin/whoami,!/bin/ls would allow millert to run whoami as root
+	as well as daemon when it should just allow daemon. The problem was
+	that comma-separated commands in a list shared the same entry on the
+	matching stack. Now they get their own entry iff there is a full
+	match. It may be better to just make the runas spec persistent
+	across all commands in a list like the user and host entries of the
+	matching stack. However, since that is a fairly major change it
+	should gets its own minor rev increase.
+	[c4b939cdcc8e]
+
+1999-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, config.h.in:
+	Simplify PAM code and fix a PAM-related warning on Linux
+	[2468399523b6]
+
+1999-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updates
+	[29d4a997769c]
+
+	* sample.sudoers:
+	better su entry
+	[76d8285a72ba]
+
+	* configure:
+	regen
+	[b7450cc6975d]
+
+	* check.c, configure.in:
+	new pam code that works on solaris, should work on linux too;
+	aelberg@home.com
+	[84c16c0ff259]
+
+1999-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	more entries
+	[b6bef8660759]
+
+	* config.h.in:
+	only include strings.h if there is no string.h
+	[b66054a32b00]
+
+1999-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.guess:
+	Sinix is now being called ReliantUNIX; bjjackso@us.oracle.com
+	[c086d2fe63af]
+
+1999-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	shost must be set before log functions are called #ifdef HOST_IN_LOG
+	[d49a7944358f]
+
+1999-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, lex.yy.c, parse.lex:
+	Fix a bug wrt quoting characters in command args. Stop processing an
+	arg when you hit a backslash so the quoted-character detection can
+	catch it.
+	[2281438d7f41]
+
+1999-02-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	include sys/time.h; aparently AIX needs it. ppz@cdu.elektra.ru
+	[31118a9e9916]
+
+1999-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	add missing case statement so --without-sendmail works
+	[ca25614f7dd9]
+
+1999-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	more
+	[4d70e44f7f93]
+
+1999-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	only search for -lsun in irix <= 4.x
+	[e604238317b1]
+
+	* configure, configure.in:
+	back out last configure.in change now that I've hacked autoconf to
+	fix the real problem and add a missing newline
+	[2dabf59a79b5]
+
+	* CHANGES:
+	updated
+	[bb35d526552f]
+
+	* getcwd.c:
+	add def of dirfd() for those without it
+	[95f0173d8441]
+
+	* configure, configure.in:
+	When falling back to checking for socket() when linking with
+	"-lsocket -lnsl" check for main() instead since autoconf has already
+	cached the results of checking for socket() in -lsocket. This is
+	really an autoconf bug as it should use the extra libs as part of
+	the cache variable name.
+	[a845f8b710ad]
+
+	* configure.in:
+	typo
+	[a7d62f62a478]
+
+1999-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	fix occurrence of $with_timeout that should be
+	$with_password_timeout; Michael.Neef@neuroinformatik.ruhr-uni-
+	bochum.de
+	[8c4da2cf73d1]
+
+1999-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.cat, sudo.html, sudo.man, sudo.pod:
+	fix grammar; espie@openbsd.org
+	[7031d9dfbc3e] [SUDO_1_5_8]
+
+1999-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc, sudo.c, testsudoers.c:
+	add cast for strdup in places it does not have it
+	[7ce4478d3b0f]
+
+1999-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	define for_BSD_TYPES irix
+	[858337ff4af8]
+
+1999-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod:
+	Make it clear that it is the user's password, not root's, that we
+	want.
+	[ae0f51b35ee4]
+
+	* check.c, sudo.h:
+	If the user enters an empty password and really has no password,
+	accept the empty password they entered. Perviously, they could enter
+	anything
+	*but* an empty password. Also, add GETPASS macro that calls either
+	tgetpass() or getpass() depending on how sudo was configured.
+	Problem noted by jdg@maths.qmw.ac.uk
+	[2fde21ce94c1]
+
+1999-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
+	dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.c, logging.c, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
+	sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
+	visudo.c:
+	add explicate copyright
+	[d3b4449834a5]
+
+	* CHANGES:
+	mention -lsocket, -lnsl configure changes
+	[9140af4ad8ae]
+
+1999-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Don't clobber errno after calling check_sudoers().
+	[59bd581b2654]
+
+1999-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	When linking with both -lsocket and -lnsl be sure to do so in that
+	order. Also, when we can't find socket() or inet_addr() and have to
+	try linking with both libs, issue a warning.
+	[0ee547163067]
+
+	* sudo.cat, sudo.man, sudo.pod:
+	clarify bad timestamp and fmt
+	[70e42cf56c75]
+
+1999-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, RUNSON:
+	be clear that pam is linux-only and add a RUNSON entry
+	[7fdeab875e0d]
+
+1999-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, INSTALL, configure, configure.in:
+	fix and correctly document --with-umask; problem noted by
+	adap@adap.org
+	[11cd0481d63a]
+
+1999-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure, configure.in:
+	only use /usr/{man,catman}/local to store man pages if suer didn't
+	override prefix or mandir
+	[781ad2cbe9be]
+
+	* INSTALL, configure, configure.in:
+	fix typo, make --with-SecurID take an arg
+	[026a9b4014fc]
+
+1999-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updates from users
+	[2286982b31e6]
+
+	* CHANGES, INSTALL, check.c, configure, configure.in:
+	FWTK 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
+	[23aa4e5c6b02]
+
+	* configure, configure.in:
+	better fix for the problem of unresolved symbols in -lnsl or
+	-lsocket
+	[82fe70fc287f]
+
+	* configure, configure.in:
+	when checking for functions in -lnsl and -lsocket link with both of
+	them to avoid unresolved symbols on some weirdo systems
+	[1734a591808e]
+
+1999-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, CHANGES, RUNSON, TODO:
+	old changes that didn't make it into RCS before the RCS->CVS switch
+	[846eb2b8f9aa]
+
+1999-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
+	configure.in, dce_pwent.c, emul/search.h, emul/utime.h, find_path.c,
+	getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
+	ins_goons.h, insults.h, interfaces.c, lex.yy.c, logging.c,
+	lsearch.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
+	secureware.c, strdup.c, sudo.c, sudo.pod, sudo_setenv.c,
+	sudoers.pod, testsudoers.c, tgetpass.c, utime.c, visudo.c,
+	visudo.pod:
+	add sudo tags
+	[962f81eaa5ab]
+
+	* sudo.h:
+	testing Sudo tag
+	[e84cbc521129]
+
+	* version.h:
+	testing Sudo tag
+	[a8c3a3998b88]
+
+	* BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c, compat.h,
+	config.h.in, configure, configure.in, dce_pwent.c, emul/utime.h,
+	find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
+	ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
+	logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
+	secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h, sudo.man,
+	sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c, tgetpass.c,
+	utime.c, version.h, visudo.c, visudo.cat, visudo.man:
+	crank version and regen files
+	[23eacf00a1a4]
+
+	* Makefile.in:
+	kill rcs goop in update_version and fix now that version is a const
+	[e6e50bd8d1e1]
+
+	* INSTALL, check.c, config.h.in, configure, configure.in, logging.c,
+	sudo.c, sudo.h, sudo.pod:
+	kerb5 support from fcusack@iconnet.net
+	[8134027986e2]
+
+	* realpath.c, sudo_realpath.c:
+	we no longer use realpath
+	[0f5f64abc646]
+
+	* qualify.c:
+	replaced by find_path.c
+	[9e32a87e09c4]
+
+	* options.h:
+	all options are now configure flags
+	[ee6bd9610102]
+
+	* lex.yy.c:
+	regen
+	[bdbf8a18161f]
+
+	* getwd.c:
+	superceded by getcwd.c
+	[1e54ee0990b4]
+
+	* getpass.c:
+	superceded by tgetpass.c
+	[4e0d1edc30e3]
+
+	* SUPPORTED:
+	superceded by RUNSON
+	[854c5a21cb53]
+
+	* OPTIONS:
+	No longer used now that we have configure options for everything.
+	[9b1ae1c89259]
+
+	* configure:
+	regen based on configure.in
+	[3a4d73936973]
+
+	* sudo.cat, sudo.html, sudo.man, sudoers.cat, sudoers.html,
+	sudoers.man, visudo.cat, visudo.html, visudo.man:
+	regen based on sudo.pod, sudoers.pod, and visudo.pod
+	[c267beb90778]
+
+1998-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	fix tty tickets in remove_timestamp (didn't use ':')
+	[fd964a74a32b]
+
+1998-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	close sock when we are done with it
+	[95de0380f8a4]
+
+1998-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	never say "error on line -1"
+	[361db1491121]
+
+1998-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	check for -lnsl before -lsocket
+	[8e966d6bbcb5]
+
+	* configure.in:
+	quote '[', ']' used in ranges correctly
+	[fa4f9c6ff651]
+
+1998-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	add missing NO_ROOT_SUDO noted by drno@tsd.edu
+	[c969f25d1667]
+
+1998-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* version.h:
+	1.5.7
+	[7a22de0bc148]
+
+	* INSTALL:
+	more info for 1.5.7
+	[30ad9e784799]
+
+	* README:
+	update for 1.5.7
+	[cd03a0a27cd2]
+
+	* parse.yacc:
+	make increases of cm_list_size and ga_list_size be similar to
+	increases of stacksize (ie: >= not > in initial compare).
+	[6bd450a896c7]
+
+	* parse.yacc:
+	when we get a syntax error, report it for the previous line since
+	that's generally where the error occurred.
+	[c4ac84058f0b]
+
+1998-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in, configure.in, interfaces.c:
+	add back check for sys/sockio.h but only use it if SIOCGIFCONF is
+	not defined
+	[d197f31fd1e4] [SUDO_1_5_7]
+
+	* config.h.in:
+	define BSD_COMP for svr4
+	[87ac1147ff79]
+
+	* check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
+	goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex,
+	parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	more -Wall
+	[d98e2d32db2a]
+
+	* configure.in:
+	kill check for sockio,h
+	[4399779014c1]
+
+	* config.h.in:
+	no more HAVE_SYS_SOCKIO_H
+	[67484528e347]
+
+	* check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
+	goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex,
+	parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	-Wall
+	[2b7e83976788]
+
+1998-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	add missing inform_user()
+	[8689528c6d55]
+
+1998-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	return NOT_FOUND if given fully qualified path and it does not exist
+	previously it would perror(ENOENT) which bypasses the option to not
+	leak path info
+	[ccbc3d0130ae]
+
+	* configure.in:
+	for kerb5, check for -lkerb4, fall back on -lkrb for kerb, check for
+	-ldes
+	[c77d3b484ece]
+
+1998-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	tty tickets are user:tty now
+	[a53a303a614d]
+
+	* check.c:
+	when using tty tickets make it user:tty not user.tty as a username
+	could have a '.' in it
+	[3160b3f5c890]
+
+1998-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	add "ignoring foo found in ." for auth successful case
+	[24257169e0bd]
+
+1998-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	add missing printf param
+	[8c905124f777]
+
+1998-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
+	go back to printing "command not found" unless --disable-path-info
+	specified. Also, tell user when we ignore '.' in their path and it
+	would have been used but for --with-ignore-dot.
+	[066e118c11e4]
+
+	* check.c, sudo.c:
+	Only one space after a colon, not two, in printf's
+	[38452f4c8007]
+
+1998-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	document setting $USER
+	[80557fe6aede]
+
+	* check.c:
+	fix bugs with prompt expansion
+	[44c4fca5f009]
+
+	* sudo.c:
+	set $USER for root too
+	[4b525e1c6269]
+
+1998-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* getspwuid.c:
+	typo
+	[5107446f43e0]
+
+	* configure.in:
+	HP-UX's iscomsec is in -lsec, not libc
+	[03c9f700b795]
+
+	* configure.in:
+	remove some entries in the OS case statement that did nothing
+	[ea96e7e0f624]
+
+	* TROUBLESHOOTING:
+	add "cd" section and flush out syslog section
+	[5107f7363b78]
+
+	* Makefile.in:
+	no more sudo-lex.yy.c
+	[ed50826efbbc]
+
+	* check_sia.c:
+	add custom prompt support
+	[6a285cea10b7]
+
+	* testsudoers.c:
+	kill perror("malloc") since we already have a good error messages
+	pw_ent -> pw for brevity
+	[eee31052921e]
+
+	* sudo.c:
+	kill perror("malloc") since we already have a good error messages
+	pw_ent -> pw for brevity set $USER if -u specified
+	[9f3753461f8a]
+
+	* parse.yacc:
+	kill perror("malloc") since we already have a good error messages
+	[849459088ac3]
+
+	* parse.c:
+	kill perror("malloc") since we already have a good error messages
+	pw_ent -> pw for brevity when checking if %group matches, look up
+	user in password file so that %groups works in a RunAs spec.
+	[0489b4ecc59a]
+
+	* logging.c:
+	kill perror("malloc") since we already have a good error messages
+	[3191a18b3526]
+
+	* check.c, getspwuid.c, interfaces.c:
+	kill perror("malloc") since we already have a good error messages
+	pw_ent -> pw for brevity
+	[7193fdb38cf9]
+
+1998-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	the prompt is expanded before tgetpass is called
+	[0f408f508041]
+
+	* sudo.h:
+	tgetpass now has the same args as getpass again
+	[b6778cd9d79f]
+
+	* getspwuid.c:
+	add iscomsec, issecure support
+	[007be7ec7ae7]
+
+	* check.c:
+	we now expand any %h or %u in the prompt before passing to tgetpass
+	[f3db8c9ee387]
+
+	* configure.in:
+	add check for syslog(3) in -lsocket, -lnsl, -linet
+	[5a96f902ce00]
+
+	* config.h.in:
+	add HAVE_ISCOMSEC and HAVE_ISSECURE
+	[f640b0d4cf05]
+
+	* configure.in:
+	add check for iscomsec in HP-UX
+	[b28b249040f0]
+
+	* configure.in:
+	check for issecure if we have getpwanam on SunOS some options are
+	incompatible with DUNIX SIA check for dispcrypt on DUNIX
+	[a49d05d9c913]
+
+1998-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	add HAVE_DISPCRYPT
+	[7376d543d8d6]
+
+	* secureware.c:
+	add back support for non-dispcrypt based checking for older DUNIX
+	[977b98e936be]
+
+	* INSTALL:
+	sia changes
+	[c5387c06e30f]
+
+	* configure.in:
+	SIA becomes the default on Digital UNIX now havbe --disable-sia to
+	turn it off...
+	[3b647558ea13]
+
+	* check.c:
+	move local includes after system ones
+	[b2abad4c4aef]
+
+1998-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, check_sia.c, sudo.h:
+	add pass_warn() which prints out INCORRECT_PASSWORD or an insult to
+	stderr
+	[547cbf299661]
+
+	* check_sia.c:
+	fix while loop in sia_attempt_auth() that checks the password. Only
+	the first iteration was working.
+	[1886fd1ac831]
+
+1998-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4:
+	don't trust UID_MAX or MAXUID
+	[2aeddb1654d8]
+
+	* configure.in:
+	fix two pastos
+	[c18f0a10b75d]
+
+	* configure.in:
+	fix typo
+	[1eb3190ef12d]
+
+	* getspwuid.c, secureware.c:
+	init crypt_type to INT_MAX since it is legal to be negative in DUNX
+	5.0
+	[cefbde04822d]
+
+	* configure.in:
+	for secureware on dunix, use -lsecurity -ldb -laud -lm but check for
+	-ldb since DUNX < 4.0 lacks it
+	[e6b11d971068]
+
+1998-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, compat.h, config.h.in, configure.in, getspwuid.c,
+	secureware.c, sudo.c, tgetpass.c:
+	getprpwuid is broken in HP-UX 10.20 at least (it sleeps for 2
+	minutes if the shadow files don't exist).
+	[2f297d095004]
+
+1998-10-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	updated --with-editor blurb
+	[77d8a3ea7328]
+
+	* TROUBLESHOOTING:
+	tell how to put sudoers in a different dir
+	[456cd20eb1d0]
+
+	* configure.in:
+	add missing quotes around $with_editor
+	[22881748ab1b]
+
+	* configure.in:
+	typo in --with-editor bits
+	[ab6964580681]
+
+	* INSTALL:
+	I don't expect it to work on Solaris
+	[1c2fceaaf56e]
+
+	* check.c:
+	add back security/pam_misc.h
+	[6ffd30033c1e]
+
+1998-10-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	remove dunix note since configure checks for this now
+	[e9904512b8e8]
+
+	* configure.in:
+	add check for broken dunix prot.h (4.0 < 4.0D is bad)
+	[8a4c1e6aef3b]
+
+	* getspwuid.c, secureware.c, tgetpass.c:
+	new dunix shadow code, use dispcrypt(3)
+	[1b936bc7268c]
+
+	* config.h.in:
+	add HAVE_INITPRIVS
+	[4369f4c4f914]
+
+	* sudo.c:
+	call initprivs() if we have it for getprpwuid later on
+	[11cf5915d826]
+
+	* Makefile.in:
+	clean pathnames.h too
+	[5f1df3262613]
+
+	* configure.in:
+	quote "Sorry, try again." with [] since it has a comma in it set
+	LIBS when we add stuff to SUDO_LIBS set SECUREWARE when we find
+	getprpwuid() so we can check for bigcrypt, set_auth_parameters, and
+	initprivs later.
+	[e226b0a3f250]
+
+	* INSTALL:
+	update Digital UNIX note about acl.h
+	[80132b71d73a]
+
+	* INSTALL:
+	add --with-sia
+	--without-root-sudo -> --disable-root-sudo some reordering
+	[198386358818]
+
+	* secureware.c:
+	add whitespace
+	[4aadaf1a54b0]
+
+	* Makefile.in, check.c, config.h.in, configure.in, logging.c, sudo.h:
+	add SIA support
+	[fa3ddbb9cc51]
+
+	* check_sia.c:
+	Initial revision
+	[2968551d40e4]
+
+1998-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	when checking for -lsocket, -lnsl, and -linet, check for the
+	specific functions we need from them.
+	[8d33e64362a3]
+
+	* config.h.in, sudo.h:
+	move Syslog_* defs into sudo.h
+	[03d1774f25c7]
+
+	* Makefile.in, sudo.h:
+	added check_secureware
+	[e46e3cbb9a97]
+
+	* configure.in:
+	finished adding AC_MSG_CHECKING and AC_MSG_RESULT bits
+	[dbefe1856503]
+
+	* insults.h:
+	don't define CLASSIC_INSULTS and CSOPS_INSULTS if no other sets
+	defined. configure now does that for us
+	[e4520ea0581f]
+
+	* configure.in:
+	move some --with options around change a bunch of echo's to
+	AC_MSG_CHECKING, AC_MSG_RESULT pairs
+	[ffdf6869fdd7]
+
+	* configure.in:
+	change $with_foo-bar -> $with_foo_bar kill extra " that caused a
+	syntax error add some echo verbage
+	[3278c49bf74b]
+
+1998-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	moved SecureWare stuff into secureware.c
+	[42d3d3ac35dc]
+
+	* secureware.c:
+	Initial revision
+	[aa7f72a249cf]
+
+	* INSTALL:
+	update url to solaris gcc bins
+	[36a3eb668777]
+
+	* INSTALL:
+	change option formatter and flesh out someentries
+	[6fbd1db4a8ad]
+
+	* TROUBLESHOOTING, sudo.pod, visudo.pod:
+	environmental variable -> environment variable
+	[6f14d708e32d]
+
+	* BUGS:
+	everything is now done via configure
+	[c217858f58ab]
+
+	* README:
+	prev rev was 1.5.6
+	[7b4177103c35]
+
+	* Makefile.in:
+	passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID correctly
+	[31c6b0a5e0e2]
+
+	* config.h.in:
+	SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from the Makefile
+	[d406a1ef6d25]
+
+	* Makefile.in:
+	merge OSDEFS and OPTIONS into DEFS get sudoers_uid, sudoers_gid,
+	sudoers_mode from configure
+	[1c509500655a]
+
+	* configure.in:
+	SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get substituted into
+	the Makefile, not config.h
+	[d4482f1492fe]
+
+	* INSTALL:
+	document all --with/--enable options
+	[22d81b312d7f]
+
+1998-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* insults.h:
+	options.h is no more
+	[560946a33f7f]
+
+	* config.h.in:
+	assimilated options.h
+	[dd8ce74613c1]
+
+	* configure.in:
+	moved options from options.h to configure
+	[d39662f71b4e]
+
+	* check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
+	logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
+	sudo_setenv.c, visudo.c:
+	no more options.h
+	[43924bf0858d]
+
+	* INSTALL, Makefile.in, PORTING, TROUBLESHOOTING:
+	remove references to options.h
+	[ef3474295395]
+
+	* dce_pwent.c, interfaces.c, sudo.c:
+	kill sys/time.h
+	[4d833f0034e4]
+
+	* tgetpass.c:
+	if select return < -1 still prompt for pw
+	[e0009e5c93a2]
+
+	* options.h:
+	convert LOGGING, LOGFAC, MAXLOGFILELEN, IGNORE_DOT_PATH into
+	configure options
+	[e60a1e546516]
+
+	* parse.c:
+	FAST_MATCH is no longer an optino
+	[c448dbb3464b]
+
+	* check.c:
+	remove_timestamp() if timestamp is preposterous
+	[70d9a86c6ecd]
+
+	* options.h:
+	convert more options to --with/--enable
+	[34646d9b09dc]
+
+	* INSTALL, aclocal.m4:
+	logfile -> logpath
+	[42de502bc637]
+
+	* configure.in:
+	convert more options into --with and --enable
+	[92d0898c9844]
+
+	* tgetpass.c:
+	catch EINTR in select and restart
+	[f045d2f234d7]
+
+	* logging.c:
+	sys/errno -> errno
+	[7f0c5beab6f2]
+
+1998-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	UMASK -> SUDO_UMASK.
+	[48f308661514]
+
+	* check.c, logging.c:
+	time.h, not sys/time.h
+	[91de049c79e4]
+
+1998-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	MAILER -> _PATH_SENDMAIL
+	[df65d6896639]
+
+	* INSTALL, configure.in:
+	no more --with-C2, now it is --disable-shadow
+	[18bfcab3b9ab]
+
+	* aclocal.m4, check.c, compat.h, config.h.in, configure.in,
+	getspwuid.c, sudo.c, tgetpass.c:
+	new shadow password scheme. Always include shadow support if the
+	platform supports it and the user did not disable it via configure
+	[2135d93bb4a9]
+
+1998-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	--with-getpass -> --{enable,disable}-tgetpass
+	[451b33fdd4c7]
+
+	* Makefile.in:
+	pathnames.h -> pathnames.h.in
+	[b109022eca69]
+
+	* check.c:
+	fix version string
+	[761b25c314ea]
+
+	* check.c:
+	move pam_conv to be static to auth function remove pam_misc.h
+	(solaris doesn't have one)
+	[a682e4da987a]
+
+	* aclocal.m4:
+	_CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill SUDO_PROG_PWD
+	[e6005d0599b5]
+
+	* configure.in:
+	munge pathnames.h.in -> pathnames.h kill SUDO_PROG_PWD
+	[24c0ac2155ef]
+
+	* pathnames.h.in:
+	convert to pathnames.h.in
+	[013bddf7f684]
+
+1998-09-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	fix typo in sysv4 matching case /.
+	[2994c4f88cf5]
+
+1998-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	pam stuff needs to run as root, not user, for shadow passwords
+	[d94ff75de503]
+
+1998-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, README, configure.in:
+	updated version
+	[775adc7de7ac]
+
+	* Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
+	emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
+	ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
+	logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	updated version
+	[5ca599fb6b93]
+
+	* check.c:
+	user version.h for long message
+	[47a52ac7e542]
+
+	* check.c:
+	this is version 1.5.6
+	[8451ac79eee2]
+
+1998-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	remove errant backslash
+	[0222a8a650ff]
+
+1998-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* options.h, parse.yacc, pathnames.h.in:
+	fix version string
+	[fdee73255d64] [SUDO_1_5_6]
+
+	* BUGS, CHANGES, TODO:
+	updtaed for 1.5.6
+	[752443bf7f26]
+
+	* RUNSON:
+	updated for 1.5.6
+	[0f878123fe6a]
+
+1998-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	kill unused localhost_mask var copy if name to ifr_tmp after we zero
+	it
+	[8e89c364cef2]
+
+1998-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	Better description of new vs. old sudoers modes fix some typos
+	better description of /usr/ucb/cc gotchas on slowaris
+	[c00b2a6fc1e8]
+
+	* Makefile.in:
+	add sample.pam
+	[ec7f6cc19b00]
+
+	* sudo.c:
+	set NewArgv[0] to user_shell, not basename(user_shell)
+	[1e907cbc9f7b]
+
+1998-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	mention TROUBLESHOOTING more fix some typos
+	[2c2e6907d4a4]
+
+	* configure.in:
+	move --enable/--disable to be after --with
+	[9b30097f76c1]
+
+	* INSTALL:
+	document --enable/--disable
+	[c522362e38a8]
+
+	* INSTALL:
+	document --with-pam
+	[7e38932c78ac]
+
+1998-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	Add message for pam users
+	[d224f277e3cd]
+
+	* sample.pam:
+	Initial revision
+	[3a84d7045f54]
+
+	* config.h.in:
+	fix HAVE_PAM
+	[2f0f303ebd88]
+
+	* check.c, config.h.in, configure.in:
+	pam support, from Gary Calvin <GCalvin@kenwoodusa.com>
+	[ea3e0a72d707]
+
+1998-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	add HOST_IN_LOG and WRAP_LOG
+	[822c36eeb6a8]
+
+	* logging.c:
+	add WRAP_LOG and HOST_IN_LOG
+	[3cf6052bd27e]
+
+	* configure.in:
+	add --enable-log-host and --enable-log-wrap
+	[c968cc12b353]
+
+	* aclocal.m4:
+	use AC_DEFINE_UNQUOTED for --with-logfile and --with-timedir
+	[915fef7e11a1]
+
+1998-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	add howmany macro
+	[9107a057a7c8]
+
+	* tgetpass.c:
+	include sys/param.h to get howmany macro
+	[7e908b5e1f32]
+
+1998-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
+	add RUNAS_DEFAULT
+	[1e76398ea3fd]
+
+1998-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* fnmatch.c:
+	bring in stdio.h for NULL
+	[69c016610cbb]
+
+	* aclocal.m4:
+	allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
+	[15ab2972f8d0]
+
+	* sudo.c:
+	use HAVE_SET_AUTH_PARAMETERS
+	[8abfdc8c80f7]
+
+	* config.h.in:
+	add HAVE_SET_AUTH_PARAMETERS
+	[673a5ebd5539]
+
+	* configure.in:
+	add *-*-hiuxmpp* add test for set_auth_parameters() if secureware
+	[a401f5a7469a]
+
+	* config.sub:
+	add support for HI-UX/MPP SR220001 02-03 0 SR2201
+	[cb657b7acaae]
+
+	* interfaces.c:
+	initialize previfname
+	[26a1902f56dc]
+
+	* interfaces.c:
+	Don't use SIOCGIFADDR, we don't need it Use SIOCGIFFLAGS if we have
+	it check ifr_flags against IFF_UP and IFF_LOOPBACK instead of
+	kludging it
+	[fa5c890c313b]
+
+	* configure.in:
+	typo
+	[bff579fbe95c]
+
+	* Makefile.in:
+	don't need special build line for sudo.tab.o
+	[10c0a0a912e4]
+
+	* Makefile.in:
+	don't clean sudo.tab.[ch]
+	[c40d5968efbb]
+
+	* sudo.c:
+	Sudo should prompt for a password before telling the user that a
+	command could not be found.
+	[d718c85a0047]
+
+	* BUGS:
+	for 1.5.6
+	[0cc1fe5b9129]
+
+	* INSTALL, README:
+	no longer require yacc
+	[d9096fc5b8b6]
+
+	* Makefile.in:
+	typo
+	[70feb1aefbd5]
+
+	* Makefile.in:
+	y.tab -> sudo.tab include pre-yacc'd parse.yacc
+	[cc802025fd44]
+
+	* parse.lex:
+	include sudo.tab.h, not y.tab.h don't break out of command args if
+	you get a '='
+	[728ad26dbda5]
+
+	* insults.h:
+	fix version ,
+	[242bbce1b2d4]
+
+	* ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
+	fix version
+	[2bb9086fea1e]
+
+	* compat.h:
+	fix version
+	[7e634d498ce6]
+
+	* getcwd.c:
+	getcwd(3) from OpenBSD for those without it.
+	[6c68d0df8f6c]
+
+	* sudo.h:
+	HAVE_GETWD -> HAVE_GETCWD
+	[2ad1e64d60c0]
+
+	* configure.in:
+	pretend sunos doesn't have getcwd(3) since it opens a pipe to
+	getpwd!
+	[677992ba5a6a]
+
+	* parse.c:
+	use NAMLEN() macro
+	[8f5685aa3165]
+
+	* fnmatch.c:
+	remove duplicate include of string.h
+	[6024f3051ac3]
+
+	* configure.in:
+	call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
+	[3d82a9c22cc2]
+
+	* aclocal.m4:
+	add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
+	[53fbc47282f9]
+
+	* config.h.in:
+	add dev_t and ino_t
+	[5929bb0c7e1a]
+
+1998-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	fix OTP_ONLY for opie
+	[7edcfa78f2ec]
+
+1998-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* testsudoers.c, tgetpass.c:
+	include stdlib.h for malloc proto
+	[c9f4b99a2fe9]
+
+1998-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	make update_version saner
+	[d522f93ee04a]
+
+	* config.h.in:
+	add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
+	[c9a2d21dc608]
+
+	* configure.in:
+	check for waitpid and wait3 or no waitpid
+	[1f18c3224184]
+
+	* logging.c:
+	used waitpid or wait3 if we have 'em
+	[391c3279ee65]
+
+1998-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	fix some fprintf args, ariel@oz.engr.sgi.com (Ariel Faigon)
+	[fbf53b18178f]
+
+1998-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	don't need to explicately mention -lsocket -lnsl for sequent
+	[1898dc055352]
+
+1998-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	dynix should not link with -linet
+	[278a4b9cfe2a]
+
+1998-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	mention that HP-UX doesn't ship with yacc
+	[bde5147198c0]
+
+1998-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	ignore kerberos if we can't get the local realm
+	[1e311a091a27]
+
+1998-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, README, configure.in:
+	++version
+	[499ffc746018]
+
+	* version.h:
+	++
+	[35ba1ee01bd3]
+
+	* Makefile.in, check.c, config.h.in, dce_pwent.c, emul/utime.h,
+	find_path.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
+	logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c, sudo.h,
+	sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	updated version
+	[b4990a513f31]
+
+	* check.c, sudo.h:
+	fix version
+	[5710795834e8]
+
+	* getcwd.c:
+	don't use popen/pclose. Do it inline.
+	[29e57b0646a4]
+
+	* lsearch.c:
+	add rcsid
+	[b2b55c39858d]
+
+	* sudo.c:
+	typo
+	[d381ac39ed0f]
+
+	* check.c, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
+	ins_goons.h, insults.h, options.h, parse.yacc, pathnames.h.in,
+	sudo.h:
+	updated version
+	[462d6e1a2d75]
+
+	* check.c, find_path.c, parse.c, sudo.c, testsudoers.c:
+	MAX* + 1 -> MAX*
+	[2c2eeb78d34f]
+
+	* Makefile.in:
+	getwd.c -> getcwd.c
+	[7d718c32fc02]
+
+	* config.h.in:
+	kill HAVE_GETWD
+	[6ad3d702343f]
+
+	* configure.in:
+	getcwd, not getwd
+	[33e5b9841f58]
+
+	* getcwd.c:
+	use MAX* not MAX* + 1 always run pwd as using getwd() defeats the
+	purpose
+	[24e58d340161]
+
+1998-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS, options.h:
+	add STUB_LOAD_INTERFACES
+	[d747cb23ca83]
+
+	* Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
+	emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	updated version
+	[0798229312cc]
+
+	* configure.in:
+	support *-ccur-sysv4 and fix two typos
+	[24a823ad7cc9]
+
+1998-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	don't echo about with_logfile and with_timedir
+	[31e4a1e2d9ad]
+
+	* INSTALL:
+	document --with-logfile and --with-timedir
+	[674f811a40e0]
+
+	* aclocal.m4:
+	support --with-logfile and --with-timedir
+	[2fc36b35db12]
+
+	* configure.in:
+	Add --with-logfile and --with-timedir
+	[09045bf07e29]
+
+	* sudo.c:
+	change size computation of NewArgv for UNICOS
+	[b50df07da3a1]
+
+1998-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	treate -*-sysv4* like *-*-svr4
+	[471b7ef4dbf2]
+
+1998-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	fix spacing for --with-authenticate help
+	[8321cb37c410]
+
+	* Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
+	emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	updated version
+	[dc1ab97312eb]
+
+	* parse.yacc:
+	fix off by one error in push macro
+	[bece59c8c3a9]
+
+1998-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	removed bogus alloca hack
+	[a68dd720462d]
+
+	* check.c:
+	added AIX 4.x authenticate() support
+	[12985eb448a0]
+
+	* parse.yacc:
+	include alloca.h if using bison and not gcc and it exists. fixes an
+	alloca problem on hpux 10.x
+	[e3b5c4f26072]
+
+	* INSTALL:
+	mention --with-authenticate
+	[78a1c96820e7]
+
+	* configure.in:
+	added AIX authenticate() support
+	[c983193ec252]
+
+	* config.h.in:
+	add HAVE_AUTHENTICATE
+	[7b0e5f5db5d9]
+
+	* interfaces.c:
+	dynamically size ifconf buffer
+	[10afb0e9b2f9]
+
+	* configure.in:
+	quote '[' and ']'
+	[8fc38a4defad]
+
+	* Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
+	emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	updated version
+	[5f66de71ec61]
+
+	* visudo.pod:
+	add ERRORS section
+	[3df3edb73cf6]
+
+1998-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	add busy stmp file explanation
+	[6c555d469b6f]
+
+1998-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	the name of the cached var that signals whether or not you are cross
+	compiling changed. It is now ac_cv_prog_cc_cross
+	[123911c0658c]
+
+1998-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	mention glibc 2.07 is fixed wrt lsearch()\.
+	[ded758524582]
+
+1998-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sample.sudoers, sudoers.pod:
+	better example of su but not root su
+	[b3199610be21]
+
+1998-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
+	emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	updated version
+	[46922b84e86b]
+
+	* Makefile.in:
+	correct regexp for updating version
+	[8032728b2a8a]
+
+	* tgetpass.c:
+	remove bogus flush of stderr spew prompt before turning off echo.
+	Seems to fix a weird problem where if sudo complained about a bogus
+	stamp file the user would sometimes not have a chance to enter a
+	password
+	[7aa1493cc141]
+
+	* check.c:
+	fix bogus flush of stderr
+	[6d047871c5e8]
+
+	* sudo.c:
+	close fd's <=2 not <=3 and move that chunk of code up
+	[553e4faac195]
+
+	* configure.in:
+	support hpux1[0-9] not just hpux10
+	[5a34a000ff8a]
+
+1998-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	set sudoers_fp to nil after closing
+	[221a8b4bbf34]
+
+1998-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.guess, config.sub:
+	updated from autoconf 2.12
+	[6fc86a0fc61b]
+
+	* configure.in:
+	add *-*-svr4 rule
+	[38f0427f7c9d]
+
+1998-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	fix select usage for high fd's (dynamically allocate readfds)
+	[c2d1f76e0321]
+
+	* check.c:
+	kill extra whitespace
+	[d784b6c9c514]
+
+	* sudo.c:
+	do an initgroups() before running a command, unless the target user
+	is root.
+	[4ca561287480]
+
+1998-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	tell people to use tabs, not spaces, in syslog.conf
+	[8ae90a205134]
+
+1998-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, config.h.in, dce_pwent.c, emul/utime.h, getwd.c,
+	parse.lex, putenv.c, strdup.c, testsudoers.c, utime.c:
+	updated version
+	[4d855ff5de26]
+
+	* check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
+	logging.c, parse.c, sudo.c, sudo_setenv.c, tgetpass.c, visudo.c:
+	updated version
+	[8e007e178b33]
+
+	* compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
+	insults.h, options.h, parse.yacc, pathnames.h.in, sudo.h:
+	updated version
+	[9ddea5c8814d]
+
+	* Makefile.in:
+	more tweaks to update_version
+	[047698752855]
+
+	* Makefile.in:
+	fixed up update_version rule
+	[47b6fa34b77f]
+
+	* configure.in:
+	++version
+	[c1ca664e30b7]
+
+	* Makefile.in:
+	removed supe of check.c
+	[8f340a05296a]
+
+	* INSTALL:
+	++version I missed
+	[a298e6c17491]
+
+	* RUNSON:
+	updated
+	[a14f6057bc15]
+
+	* BUGS, INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
+	dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, getwd.c,
+	goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
+	insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex,
+	parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
+	sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
+	visudo.c:
+	updated version
+	[02231b1a3ab3]
+
+	* CHANGES:
+	updated for 1.5.5
+	[634e5fcaf40b]
+
+	* Makefile.in:
+	add rules to update version stuff in files so I don't need to do it
+	by hand
+	[3620ad60485a]
+
+	* sudo.h:
+	sudoers_fp is now extern
+	[88c6e9b9ea84]
+
+	* sudo.c:
+	in check_sudoers, cache the sudoers file handle in sudoers_fp so we
+	don't have to open it again in the parse. This may help with weird
+	solaris problems where EAGAIN sometime occurrs.
+	[d3c26451ed1d]
+
+	* parse.c:
+	sudoers file open is now done only in check_sudoers() so we just do
+	a rewind() instead of an open. May help people on solaris who were
+	getting EAGAIN.
+	[c8b8c7722fa5]
+
+1998-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	mention that newer glibc is fixed
+	[20f06f5d3ef3]
+
+1998-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	newer irix uses _RLDN32_* envariables for 32-bit binaries so ignore
+	_RLD* instead of _RLD_*
+	[1e22c588d602]
+
+	* parse.c:
+	typo
+	[d0b7cb85f08a]
+
+	* parse.c:
+	fix that bug for real
+	[5a6eeca6d04b]
+
+	* INSTALL:
+	document Linux's libc6 brokenness.
+	[0246c1aa64ee]
+
+	* parse.yacc:
+	-Wall
+	[d0e452fb1e2d]
+
+	* RUNSON:
+	updated
+	[4949a1bbd0a9] [SUDO_1_5_4]
+
+	* TROUBLESHOOTING:
+	remind people to HUP syslogd
+	[590962faa4f0]
+
+	* Makefile.in:
+	add -O flag to tar
+	[622d02de339d]
+
+	* RUNSON:
+	updated
+	[a72930d6e615]
+
+	* TODO:
+	updated
+	[4a51bd458390]
+
+	* sudo.pod:
+	remove author's email addr. people should mail sudo-bugs
+	[9b6bbdb3a6d9]
+
+	* INSTALL:
+	fix version
+	[246274c6c8af]
+
+	* README, check.c, compat.h, config.h.in, configure.in, dce_pwent.c,
+	find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
+	ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
+	logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
+	++version
+	[f532ff4ee766]
+
+	* RUNSON:
+	updated
+	[62d5c71358b5]
+
+	* INSTALL, Makefile.in:
+	++version
+	[1a7c7628edfc]
+
+	* CHANGES:
+	updated fort 1.5.4
+	[7e4873508c99]
+
+	* check.c:
+	exit(1) if user enters no passwd
+	[f382c0e35e4e]
+
+	* BUGS:
+	++version
+	[fab6a867ab67]
+
+	* parse.c:
+	commands can start with ./* not just /* -- fixes a serious security
+	hole.
+	[244d2fe35ee3]
+
+1997-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	Don't set the tty variable to NULL when we lack a tty, leave it as
+	"unknown".
+	[193b26daba03]
+
+1997-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sample.sudoers:
+	fix usage of (username) in conjunction with , and !
+	[7ae68607f68f]
+
+	* visudo.c:
+	catch the case where the user is not in the passwd file
+	[31650258deb0]
+
+	* tgetpass.c:
+	use fileno(input) + 1 instead of getdtablesize() as the nfds arg to
+	select(2)
+	[60ab2d9a9ee8]
+
+	* sudo.c:
+	define tty global to an initial value to avoid dumping core in
+	logging functions when passwd file is unavailable.
+	[77056c7bc908]
+
+	* sudo.c:
+	do the set_perms(PERM_USER, sudo_mode) after we have gotten the
+	passwd entry
+	[1fdb8e579a5a]
+
+	* sudo.pod:
+	talk about problem of ALL
+	[1cd1905c9f6f]
+
+1997-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	new web location
+	[d24dc26f6da5]
+
+	* INSTALL:
+	fdesc bug is fixed in Open/Net BSD
+	[7d4d81b08ac3]
+
+	* HISTORY:
+	updates from Nieusma
+	[3a43769a1b78]
+
+1997-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* dce_pwent.c:
+	move compat.h after the system includes
+	[5ea43a5968ac]
+
+1997-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	save errno from being clobbered by wait(). From Theo
+	[f2d1c48cd592]
+
+1997-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	fix an occurence of setresuid -> setreuid (typo)
+	[394de35c9b1c]
+
+1997-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	check for path to strip
+	[2b7ef824bd55]
+
+1997-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	deal with maxfilelen < 0 case
+	[f0af095178d7]
+
+	* OPTIONS:
+	fixed descriptin
+	[629f60bd4b5f]
+
+1996-12-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	correct error message if mode/owner wrong and not statable by owner
+	but is statable by root.
+	[cb631ce2e85e]
+
+1996-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.guess, config.sub:
+	autoconf 2.11
+	[f3cbe59e0756]
+
+1996-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, RUNSON, TODO:
+	sudo 1.5.3.
+	[2be3229b8626]
+
+1996-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc, sudo.h:
+	command_alias -> generic_alias
+	[c404ca8c510d] [SUDO_1_5_3]
+
+	* sample.sudoers:
+	added Runas_Alias example and fixed syntax errors
+	[c304053f4a8a]
+
+	* OPTIONS, options.h:
+	updated MAILSUBJECT
+	[18d1573fcd2a]
+
+	* logging.c:
+	added %h expansion
+	[a4bff9b284fd]
+
+	* INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
+	configure.in, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
+	goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
+	insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex,
+	parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
+	sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
+	visudo.c:
+	++version
+	[211ff20f956f]
+
+	* BUGS, emul/utime.h:
+	++version
+	[cde5376579e3]
+
+	* sudoers.pod:
+	document Runas_Alias
+	[b1a58f28fb2c]
+
+	* visudo.pod:
+	q (uid) -> Q
+	[d256649a0e6b]
+
+	* visudo.c:
+	buffer oflow checking q (uit) -> Q if yyparse() fails drop into
+	whatnow
+	[1cb183d15626]
+
+	* parse.yacc:
+	add size params to sprintf
+	[9228f698921f]
+
+	* parse.lex:
+	allow trailing space after '\\' but before '\n'
+	[f51dbbf69fdf]
+
+	* find_path.c:
+	off by one error in path size check
+	[a6d75ccd7632]
+
+	* check.c:
+	sprintf paranoia
+	[3ffb12d198dd]
+
+1996-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	fixed more_aliases
+	[aab12f2a50af]
+
+	* visudo.c:
+	now warns if killed by signal ./
+	[310c186a0fd7]
+
+1996-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	fix Runas_Alias stuff Alias's in runas list now get expanded (but it
+	is gross)
+	[45590b83120f]
+
+	* sudo.c:
+	Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE == 0400
+	[d53e01c14c58]
+
+	* parse.yacc:
+	add Runas_Alias support change FOO to FOO_ALIAS (ie: USER_ALIAS)
+	[7a4a040aae2d]
+
+	* parse.lex:
+	Add Runas_Alias and simplify a rule.
+	[6f794a769a37]
+
+	* parse.yacc:
+	always store User_Alias's since they can be used inside of a runas
+	list. Sigh. Really need a Runas_Alias instead.
+	[3bab058a873e]
+
+1996-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	deal with case where there is no sudoers file
+	[fa38b3bb244d]
+
+1996-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	added one
+	[e61346d06725]
+
+1996-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY, testsudoers.c:
+	developement -> development
+	[4df55e293941]
+
+	* INSTALL:
+	added a note
+	[3845fb83dbc0]
+
+	* RUNSON:
+	for 1.5.2
+	[5489b7298942]
+
+	* CHANGES:
+	updated
+	[0741834929e6]
+
+1996-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* PORTING:
+	removed seteuid() notes
+	[1010a60f281d] [SUDO_1_5_2]
+
+1996-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	better seteuid() emulatino
+	[e807623b662c]
+
+	* configure.in:
+	added check for seteuid
+	[8cf9fabc6f4f]
+
+	* config.h.in:
+	added HAVE_SETEUID
+	[596db46aa828]
+
+1996-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	first stab at sequent support
+	[b85a7bfcac76]
+
+	* config.h.in:
+	added HAVE_SYS_SELECT_H
+	[93ecdd042463]
+
+	* compat.h:
+	sequent -> _SEQUENT_
+	[63a38b6da98c]
+
+	* compat.h:
+	added seteuid() macro for DYNIX
+	[695bd63c5ea6]
+
+	* tgetpass.c:
+	_AIX -> HAVE_SYS_SELECT_H
+	[b31221211bc2]
+
+1996-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in, logging.c,
+	parse.c, parse.lex, parse.yacc, putenv.c, strdup.c, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, visudo.c:
+	++version
+	[8052992fd453]
+
+	* check.c, compat.h, dce_pwent.c, emul/utime.h, find_path.c,
+	getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
+	ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
+	pathnames.h.in, version.h:
+	++version
+	[f7ad15e1598a]
+
+	* sudo.pod:
+	added -H and SUDO_PS1
+	[bb965241e30c]
+
+	* configure.in:
+	use SUDO_FUNC_FNMATCH
+	[6a8350d85fb2]
+
+	* aclocal.m4:
+	added SUDO_FUNC_FNMATCH
+	[45b32c91c4ba]
+
+	* sudo.c:
+	added -H flag
+	[11ebc6872fd6]
+
+	* sudo.h:
+	added MODE_RESET_HOME /
+	[67a7f8bcbbd6]
+
+1996-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	mention OPIE
+	[5723515d5bbd]
+
+	* options.h:
+	SKEY -> OTP
+	[c1d268130bc4]
+
+	* configure.in:
+	added opie support
+	[123872b41b20]
+
+	* compat.h, config.h.in:
+	added HAVE_OPIE
+	[528c71afc1e5]
+
+	* check.c:
+	added HAVE_OPIE and changed to *_OTP_*
+	[4c62f5db872a]
+
+	* OPTIONS:
+	SKEY -> OTP
+	[bd858e5e9652]
+
+1996-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	moved fclose() in skey stuff.
+	[11f7dc8431a6]
+
+1996-10-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* putenv.c:
+	index -> strchr remove unnecesary stuff
+	[af2d05238062]
+
+	* check.c:
+	now call skeychallenge() to get challenge instead of making one up
+	ourselves. this way, we get extra goodies in the prompt.
+	[49b770d98d3a]
+
+1996-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	added one
+	[3f5149357e2a] [SUDO_1_5_1]
+
+	* parse.lex:
+	allow logins to start with a number (YUCK!)
+	[7ed7ef324741]
+
+1996-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	added soalris 2.5 vs 2.4 note
+	[16160a251aae]
+
+	* configure.in:
+	DUNIX doesn't need -lnsl
+	[be924cc322c3]
+
+	* CHANGES:
+	*** empty log message ***
+	[1b2937521981]
+
+	* check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
+	getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
+	ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
+	options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
+	strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c,
+	utime.c, version.h, visudo.c:
+	courtesan
+	[5f203589bbfe]
+
+	* PORTING, README, RUNSON:
+	courtesan
+	[d72517f4937e]
+
+	* INSTALL, Makefile.in, TROUBLESHOOTING:
+	courtesan
+	[5c007e3c7a71]
+
+	* visudo.pod:
+	*** empty log message ***
+	[37ebe85bd4e1]
+
+	* sudo.pod, visudo.pod:
+	courtesan
+	[37f02e2130ea]
+
+1996-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* HISTORY:
+	added courtesan ./
+	[b01435226276]
+
+1996-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	added $SUDO_PROMPT support
+	[cb1fa72c093d]
+
+1996-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	print long skey challemged to stderr, not stdout
+	[750fc775b3b2]
+
+1996-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updated for 1.5.1
+	[9b615f393057]
+
+	* emul/utime.h:
+	++version
+	[a94de18deafb]
+
+1996-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updated for 1.5.1
+	[4092f20ab634]
+
+1996-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	use shost, not host for tgetpass
+	[6061c49ff9be]
+
+	* sudo.pod:
+	documented %u and %h
+	[6d2922d29897]
+
+	* OPTIONS:
+	documented %u and %h
+	[1a71da13a864]
+
+	* configure.in:
+	fixed typo
+	[1230dec2b062]
+
+	* INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
+	dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
+	++version
+	[65ce8eabf77a]
+
+	* BUGS:
+	++version
+	[afecab53aab7]
+
+1996-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, configure.in, version.h:
+	++version
+	[fb3ff940d672]
+
+	* sudo.h:
+	new tgetpass() params
+	[9eccc5b0f8ae]
+
+	* check.c:
+	pass use and host to tgetpass
+	[c56d9d13c401]
+
+	* tgetpass.c:
+	added %u and %h escapes
+	[04ae775d3e5d]
+
+	* OPTIONS, check.c, options.h:
+	added NO_MESSAGE
+	[3927dad19057]
+
+	* configure.in:
+	added cray (unicos) support
+	[1122210c5fb1]
+
+1996-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS, options.h, sudo.c:
+	added SHELL_SETS_HOME
+	[0b26909b0929]
+
+1996-08-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	added note about "make install"
+	[7e56ea76d4b4]
+
+	* parse.yacc:
+	changed length/size params from int to size_t
+	[5654e5ceb1b3]
+
+	* OPTIONS:
+	now get CSOPS insults as well by default
+	[297323d0179a]
+
+	* insults.h:
+	use csops insults too by default
+	[07fafc136169]
+
+	* INSTALL, Makefile.in, README, config.h.in, configure.in, version.h:
+	version = 1.5
+	[4b8772b11e3b]
+
+	* sudo.c:
+	added runas_homedir
+	[b0e0d4417a15]
+
+	* TODO:
+	updated for 1.5
+	[66259df825d5]
+
+	* RUNSON:
+	updated for 1.5
+	[e08bc9ebfe95]
+
+	* CHANGES:
+	1.5 release
+	[8c16942fea41]
+
+	* INSTALL:
+	added "upgrading" notes
+	[210d968964ff]
+
+1996-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	now do chmod and chown after edit of temp file and before rename
+	[de174e34faa7] [SUDO_1_5_0]
+
+1996-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	++version added INSTALL.configure
+	[c9e9214f52ae]
+
+	* configure.in, version.h:
+	++version
+	[5985abed3eb2]
+
+	* TROUBLESHOOTING:
+	*** empty log message ***
+	[d65c540ec52e]
+
+	* parse.yacc:
+	added missing cast
+	[e7247319a7d5]
+
+	* sudo.c:
+	sets $HOME to pw_dir of runas user
+	[d3f7f4d05752]
+
+	* sudo.pod:
+	document $HOME change
+	[854454d458c4]
+
+1996-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	fixed up some wording
+	[b0c8582f2c97]
+
+	* check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
+	interfaces.c, logging.c, parse.c, parse.lex, parse.yacc, putenv.c,
+	strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
+	visudo.c:
+	++version
+	[748be723fd8b]
+
+	* compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
+	insults.h, options.h, pathnames.h.in, sudo.h:
+	++version
+	[acdf8b1b2a1b]
+
+	* emul/utime.h:
+	++version
+	[b3f35298ab8d]
+
+	* sudo.h:
+	name nad type changes
+	[db24ab3da141]
+
+	* testsudoers.c:
+	now works with new sudo
+	[379346c42cc2]
+
+	* parse.yacc:
+	fixed some XXX
+	[f5fe4c990052]
+
+	* parse.yacc:
+	some variable name changes + comment headers for functions.
+	[3dc3bd9aa73d]
+
+	* tgetpass.c:
+	added extra paren's to make compilers happy
+	[9e4968a34d56]
+
+	* sudo.c:
+	*** empty log message ***
+	[70c924c1ed69]
+
+	* parse.c:
+	now uses init_parser() if not in sudoers and tries "list" or
+	"validate" scold but don't be nasty.
+	[c0d8fb3f8c9e]
+
+	* TROUBLESHOOTING:
+	now can use upper case login names
+	[c772fffcefe5]
+
+	* visudo.c:
+	now uses init_parser()
+	[b9efae7243fd]
+
+	* INSTALL, README:
+	updated
+	[27dc8283fdc8]
+
+	* PORTING:
+	added info about PASSWORD_TIMEOUT
+	[980e15d892f8]
+
+	* INSTALL.configure:
+	Initial revision
+	[8292e89a08d3]
+
+	* BUGS:
+	fixed a bug ,
+	[c6e46f5624f9]
+
+	* parse.yacc:
+	now dynamically allocates memory for the stacks -- no more
+	overflows!
+	[8615c35b6ad3]
+
+	* sudo.pod:
+	-l now explands command aliases
+	[39f45605935d]
+
+	* parse.yacc:
+	hacks to expand command aliases for `sudo -l'
+	[e4eb752608f9]
+
+	* sudo.c:
+	remove $ENV and $BASH_ENV (dangerous in ksh, posix sh, and bash)
+	[01327ca5084b]
+
+	* sudo.h:
+	added struct command_alias
+	[dd2f32764082]
+
+	* sudo.pod:
+	fixed a bug
+	[e708ff08d2eb]
+
+	* lsearch.c:
+	in compar() key should be first arg
+	[fc14c3fa62ee]
+
+1996-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS:
+	fixed some bugs
+	[639dfe425bd5]
+
+	* parse.yacc:
+	can now deal with upcase HOST and USER names
+	[c6aa7bcfb00d]
+
+	* sudo.c:
+	don't yell too loudly at non-sudoers if they do "sudo -l"
+	[4ef146128d89]
+
+	* sudo.pod:
+	fixed thinko
+	[830f2f0f22e7]
+
+	* parse.c:
+	fix comment
+	[d20ce9e17ddc]
+
+1996-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c, parse.yacc:
+	added support for new `sudo -l' stuff
+	[7dceaef3c733]
+
+	* sudo.c:
+	now uses list_matches()
+	[293364821b61]
+
+	* sudo.h:
+	added struct sudo_match
+	[b2684179d179]
+
+	* configure.in:
+	now more -lgnumalloc
+	[4f8ae42617d8]
+
+1996-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	added more paths for chown and whoami
+	[6e685a19426c]
+
+1996-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	typo
+	[3adfa01c04bc]
+
+1996-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4:
+	fixed DUNIX check for shadow pw
+	[c25324bcd27b]
+
+	* tgetpass.c:
+	now only turn off echo if it is already on. this fixes a race when
+	you use sudo in a pipelin
+	[28388c2de21c]
+
+	* INSTALL:
+	updated
+	[b45ac9366b7e]
+
+	* configure.in:
+	changed "test -z $foo && do_this" to if; then construct
+	[2183c4426bca]
+
+1996-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added missing defines of SHADOW_TYPE
+	[be89ea68a7f3]
+
+1996-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since they are
+	only in dunix 4.x
+	[1e7c1c677263]
+
+	* getspwuid.c:
+	added AUTH_CRYPT_C1CRYPT support
+	[88d6b0058b20]
+
+	* parse.c:
+	no longer return VALIDATE_NOT_OK if there was a runas that didn't
+	match. Now we can have runas stuff on more than one line.
+	[52b68920d7b7]
+
+	* getspwuid.c, sudo.c, tgetpass.c:
+	use SHADOW_TYPE instead of HAVE_C2_SECURITY
+	[cf401dfcbc06]
+
+	* configure.in:
+	got rid of HAVE_C2_SECURITY SHADOW_TYPE is always defined to
+	something
+	[c7a233c4dd93]
+
+	* config.h.in:
+	removed HAVE_C2_SECURITY added SPW_BSD
+	[8314405e9754]
+
+	* compat.h:
+	use SHADOW_TYPE instead of HAVE_C2_SECURITY
+	[6f94870df17f]
+
+	* check.c:
+	SHADOW_TYPE is always defined so just against its value
+	[72c69a55d02f]
+
+	* aclocal.m4:
+	added SUDO_CHECK_SHADOW_DUNIX
+	[ef025ae9d496]
+
+1996-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	* -> ?* in one example added another instance of (runas) and one of
+	NOPASSWD:
+	[d74fe1dcbe7d]
+
+1996-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added back check for config.cache from other host type
+	[0ba87871f585]
+
+	* parse.lex:
+	removed an instance of \"
+	[1e008d3709f6]
+
+	* sample.sudoers:
+	added an example
+	[dbfcf68ee330]
+
+	* sudoers.pod:
+	updated wrt new wildcard matching
+	[193fa44a475b]
+
+	* configure.in:
+	new check for shadow passwords if we don't know anything
+	[67465df7dc9a]
+
+	* aclocal.m4:
+	new SUDO_CHECK_SHADOW_GENERIC
+	[3563b16a41b8]
+
+	* configure.in:
+	added back check for -lsocket (oops)
+	[a80882ee1cb6]
+
+	* configure.in:
+	better (working) check for shadow passwd type if we know to use C2.
+	[3cdd2a59a641]
+
+	* configure.in:
+	now uses AC_CANONICAL_HOST to figure out os type
+	[80db7fe6e704]
+
+	* Makefile.in:
+	added config.{guess,sub}
+	[c6be7e3ca384]
+
+	* aclocal.m4:
+	removed unused stuff to figure out os type
+	[c9a0f3b57123]
+
+	* config.sub:
+	added openbsd
+	[bfc6bfec3668]
+
+	* config.sub:
+	Initial revision
+	[e6e06ce0d17d]
+
+	* config.guess:
+	Initial revision
+	[99dd06f79199]
+
+	* testsudoers.c:
+	don't call fnmatch() with FNM_PATHNAME flag unless it can only be a
+	pathname. need to check against sudoers_args even if user_args is
+	nil
+	[66e6cf77f5d6]
+
+	* parse.c:
+	don't call fnmatch() with FNM_PATHNAME flag unless it can only be a
+	pathname need to check against sudoers_args even if user_args is nil
+	[74374df17311]
+
+1996-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
+	[cbb00261c415]
+
+	* testsudoers.c:
+	now takes command line args and uses cmnd_args
+	[f0c2fd35a527]
+
+	* parse.lex:
+	fill_args was adding an extra leading space
+	[692fc999b2e8]
+
+1996-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	fixed dummy command_matches()
+	[93d9543db6e2]
+
+	* parse.yacc:
+	fixed prototype
+	[7b0addfbd429]
+
+	* sudo.h:
+	added cmnd_args
+	[8f47c4ae65ef]
+
+	* parse.yacc:
+	now uses flat args string
+	[016e65877da3]
+
+	* parse.c, parse.lex:
+	now uses flat arg string
+	[5b5f2e3f4c09]
+
+	* visudo.c:
+	added cmnd_args def
+	[876867134775]
+
+	* sudo.c:
+	now sets cmnd_args global
+	[e6fee70cb59b]
+
+	* logging.c:
+	cmnd_args is now exported from sudo.[ch]
+	[7a9cd36e356f]
+
+1996-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	can't rely on cmnd_matches as much as I thought -- added some $$
+	stuff back in to prevent namespace pollution problems.
+	[3c45fedb5af3]
+
+	* parse.yacc:
+	Simplified parse rules wrt runas and NOPASSWD (more consistent).
+	[e6d838c8a4c7]
+
+1996-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	NOPASSWD may now have blanks before the ':' '(' only starts a
+	'runas' if in the initial state to avoid collision with command args
+	[c5c01172f499]
+
+	* configure.in:
+	added checks for specific shadow passwd schemes
+	[b7e3d1f7b84f]
+
+	* aclocal.m4:
+	added routines to check for specific shadow passwd types
+	[e5e1d19960a6]
+
+1996-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added support for ncr boxen
+	[bea9dc5aae7f]
+
+	* aclocal.m4:
+	added support for detecting ncr boxen
+	[8653a158a924]
+
+1996-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added sinix support
+	[5de2b2173ee1]
+
+1996-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	added info about "config.cache from other other" error.
+	[845b10198e0b]
+
+	* aclocal.m4:
+	now makes sure you don't have a config.cache file from another OS
+	[4fe32571c021]
+
+	* configure.in:
+	now sets $LIBS when needed to configure links with libs when doing
+	tests hpux10 now uses SPW_SECUREWARE for C2 added check for
+	bigcrypt(3) if SPW_SECUREWARE
+	[2df6b8ca538f]
+
+	* getspwuid.c:
+	fixed typo
+	[fe1cb1d792d6]
+
+	* tgetpass.c:
+	now include stuff for SPW_SECUREWARE to get AUTH_MAX_PASSWD_LENGTH
+	[f71138372c07]
+
+	* getspwuid.c:
+	no more SPW_HPUX10
+	[cfdeb18bc16b]
+
+	* config.h.in:
+	no more SPW_HPUX10 added HAVE_BIGCRYPT
+	[00d296479a61]
+
+	* compat.h:
+	now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
+	[6c6d9e680417]
+
+	* check.c:
+	SPW_SECUREWARE now uses bigcrypt
+	[be71fc66690f]
+
+1996-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sample.sudoers:
+	fixed 2 syntax errors
+	[45eee19ef4ac]
+
+	* sudoers:
+	root may now run ALL as ALL
+	[1b54c6b9b212]
+
+1996-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	fixed a typo/thinko that broke BSD's with sa_len
+	[603438360126]
+
+1996-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, configure.in:
+	updated AFS support
+	[e572eb8d177a]
+
+	* TROUBLESHOOTING:
+	added entry about /usr/ucb/cc
+	[025b353aa9d3]
+
+	* INSTALL:
+	prep no longer holds gcc binaries
+	[8b0942958049]
+
+	* INSTALL:
+	updated AFS note
+	[7af6efd5abe4]
+
+	* Makefile.in:
+	added @AFS_LIBS@
+	[97b6fe6ad7d6]
+
+	* compat.h:
+	AFS allows long passwords
+	[5fb17122c302]
+
+	* testsudoers.c:
+	fixed -u user support
+	[b1a0c1648639]
+
+	* parse.c:
+	sudo -v now groks VALIDATE_OK_NOPASS
+	[74fc03fffe7e]
+
+	* parse.yacc:
+	fixed no_passwd vs. runas_matched
+	[549a9b791a6a]
+
+	* TROUBLESHOOTING:
+	took out stuff about NFS-mounting since it is no longer an issue
+	[d95ab7fbbc61]
+
+	* INSTALL:
+	added --with-libraries > --with-libpath --with-incpath
+	[d5d15a7a0f4c]
+
+	* parse.yacc:
+	was setting runas_matches to -1 in wrong place
+	[db2b1deb8d33]
+
+	* check.c:
+	removed usersec.h which is not present in new AFS versions
+	[618b016dd17f]
+
+	* tgetpass.c:
+	now deals with timeout <= 0
+	[ba53a1257255]
+
+	* OPTIONS:
+	updated
+	[75093bd8fdca]
+
+	* configure.in:
+	BSD/OS >= 2.0 now uses shlicc instead of just gcc
+	[ff6dbf7825c2]
+
+	* sudo.c:
+	fixed backwards compatibility with sudo 1.4 sudoers mode for root
+	readable/writable filesystems
+	[2694ed627221]
+
+	* Makefile.in:
+	now gives INSTALL -c flag
+	[63db055a2fd1]
+
+	* parse.yacc:
+	slightly simpler initialization of no_passwd and runas_matches
+	[463a1b5fa323]
+
+	* testsudoers.c:
+	added -u username support
+	[38b072fcd6b3]
+
+	* configure.in:
+	improved --with-libraries support
+	[047dbc5f0af2]
+
+1996-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added --with-incpath, --with-libpath, --with-libraries
+	[20f20d6c718c]
+
+	* parse.yacc:
+	now initializes some fields that weren't getting set to -1 pretty
+	gross -- need a rewrite.
+	[021c160390c6]
+
+1996-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* alloca.c:
+	removed emacs'isms
+	[9d4ec2efe057]
+
+	* configure.in:
+	no longer add -lPW to *_LIBS since we include alloca.c
+	[a626d1bbea80]
+
+	* config.h.in:
+	added HAVE_ALLOCA_H
+	[15491e2a6cff]
+
+	* Makefile.in:
+	added alloca.c
+	[0400f25e1fe4]
+
+	* alloca.c:
+	Initial revision
+	[06d033aa4882]
+
+	* configure.in:
+	++version
+	[f52c0fb98f90]
+
+1996-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now set uid to 1 instead of nobody for PERM_SUDOERS since nobody is
+	not always set to a valid uid.
+	[c2669f77704d]
+
+	* OPTIONS:
+	fixed entry for SUDO_MODE
+	[d7272f6035b8]
+
+	* sudo.c:
+	Fixed NFS-mounted sudoers file under solaris both uid *and* gid were
+	being set to -2. Now beat NFS to the punch and set uid to "nobody"
+	ourselves, preserving group 0 to read sudoers.
+	[b1fbc5dd1e34]
+
+	* parse.c:
+	moved set_perms(PERM_ROOT) to be before yyparse()
+	[7619d8080735]
+
+	* logging.c:
+	fixed a typo
+	[318acc48cde0]
+
+	* configure.in:
+	no longer need AC_PROG_INSTALL
+	[de01b1336dc8]
+
+	* Makefile.in:
+	always use install-sh to avoid install(1)'s that use get{pw,gr}nam
+	[ea2351986406]
+
+	* INSTALL:
+	make clean -> make distclean
+	[704a98e8ba10]
+
+1996-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	removed some unnecsary if's
+	[f00db6508132]
+
+	* Makefile.in, version.h:
+	++version
+	[bdb6740b24c8]
+
+	* parse.c, testsudoers.c:
+	now includes netgroup.h
+	[93f5a06352bc]
+
+	* interfaces.c:
+	removed cats of ioctl to int since they didn't shut up -Wall
+	[83e9f912cd7a]
+
+	* interfaces.c:
+	explicately cast ioctl() to int since it it not always declared
+	[2ff9294e469e]
+
+	* sudo.h:
+	added declarations for yyparse() and yylex()
+	[6071321ab771]
+
+	* parse.yacc:
+	fixed an occurence of '==' -> '='
+	[2c46d2e11d57]
+
+	* config.h.in, configure.in:
+	added check for netgroup.h
+	[73403050f4e3]
+
+	* sudo.c:
+	fixed 2 compiler warnings
+	[680929b0bd97]
+
+	* sudo.c:
+	SHELL_IF_NO_ARGS caused core dump since NewArg[cv] weren't being
+	initialized
+	[18707ecd07c2]
+
+1996-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod:
+	fixed a typo
+	[e4b5c12aa130]
+
+1996-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	fixed a formatting thingie
+	[c79327b6f19b]
+
+	* parse.c, parse.yacc:
+	fixed -u support with multiple user lists on a line
+	[e4d1066adca2]
+
+	* configure.in:
+	unixware needs -lgen
+	[b5bf9bca63cc]
+
+	* README:
+	updated ftp location
+	[b25a033f7921]
+
+	* sudoers.pod:
+	add net_addr/netmask support
+	[674e83516d1e]
+
+	* sample.sudoers:
+	added net_addr/mask example
+	[774878e89b28]
+
+	* parse.c, parse.lex:
+	added support for net_addr/netmask
+	[e33de27325d8]
+
+1996-06-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	^ -> !
+	[1a084950d6ef]
+
+1996-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updated for 1.4.3
+	[c82019025d09]
+
+	* CHANGES:
+	udpated for 1.4.3
+	[ceaa81adb8f0]
+
+	* BUGS, TODO, TROUBLESHOOTING:
+	updated
+	[ff94fae4b853]
+
+	* sample.sudoers:
+	updated with examples of new stuff
+	[99d0b4cb4c9c]
+
+	* INSTALL, README:
+	++version
+	[b763b80fe836]
+
+	* sudoers.pod:
+	updated wrt -u and NOPASSWD
+	[0b5b722ea0f4]
+
+	* sudo.pod:
+	updated wrt -u and CAVEATS
+	[71d5d53b5d18]
+
+1996-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	fixed usage()
+	[114c7d09b550]
+
+	* parse.lex:
+	now use :foo: character classes (makes no diff for generated lexer)
+	[7b0aeb737a02]
+
+1996-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	fixed LONG_SKEY_PROMPT stuff
+	[0efe78b4bdda]
+
+1996-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	fixed a comment
+	[3d289017104b]
+
+	* lsearch.c:
+	make more like NetBSD one -- now compiles w/o warnings
+	[932206296a54]
+
+	* emul/search.h:
+	fixed decls of lsearch()
+	[c58cf4584c45]
+
+	* config.h.in, configure.in, getspwuid.c:
+	added SPW_HPUX10
+	[d74e5eaa5f17]
+
+	* check.c:
+	hpux 10 uses bigcrypt() if C2
+	[359eb63f4021]
+
+1996-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	now always uses fnmatch to match args
+	[a9d91f35256a]
+
+	* tgetpass.c:
+	back to using stdio instead of raw i/o since that caused some
+	problems
+	[e7ce2bc92974]
+
+1996-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now give usage warning if use -l,-v,-k with args
+	[6b48180c4fea]
+
+1996-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	NewArgc is now set to 1 for -l, -v, -k
+	[7497cb1416a8]
+
+	* sudo.c:
+	now sets sudoers to correct group if mode is 0400
+	[484c43d99718]
+
+	* install-sh:
+	updated to version used by inn and bind
+	[28683ad8725a]
+
+	* configure.in:
+	now uses -lgnumalloc if it exists
+	[3651ca4415a2]
+
+	* Makefile.in:
+	"make install" now sets uid/gid and mode on sudoers if it exists
+	[1f5216191ae9]
+
+	* sudo.c:
+	rmeoved debugging statements
+	[aeda278e2c26]
+
+	* parse.yacc:
+	added a missing free()
+	[592c9482a159]
+
+	* sudo.c:
+	now uses user_gid instead of getegid (which was wrong anyway) to set
+	SUDO_GID Now sets command line args in SUDO_COMMAND envariabled
+	(logging.c depends on args being in the environment)
+	[9f5328a3b942]
+
+	* logging.c:
+	now uses SUDO_COMMAND envariable to get command args rather than
+	building it up again.
+	[7f8edc5bccb7]
+
+	* parse.c:
+	now uses user_gid
+	[4b9303ae45fe]
+
+	* sudo.c:
+	fixed off by one error in allocation NewArgv
+	[921ea1a4e7c6]
+
+	* parse.c:
+	in sudoers, 'command ""' now means command with no args
+	[a5273648ace2]
+
+	* configure.in:
+	added check for fnmatch(3) and fnmatch.h
+	[258916a7866f]
+
+	* config.h.in:
+	added HAVE_FNMATCH
+	[b9860d361e93]
+
+	* Makefile.in:
+	replaced wildcat.* with fnmatch.*
+	[03ad9ee21a1c]
+
+	* testsudoers.c:
+	now uses fnmatch()
+	[5a7f7de987a9]
+
+1996-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	now uses fnmatch() instead of wildmat a trailing star (*) by itself
+	now matches multiple args added support for wildcards in the
+	pathname in sudoers
+	[1f7fb950b868]
+
+1996-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* fnmatch.c:
+	now includes compat.h and config.h
+	[090206b95cf8]
+
+	* config.h.in:
+	added HAVE_FNMATCH_H
+	[90eb42150173]
+
+	* configure.in:
+	now checks for alloca() (if needed by bison or dce) and links with
+	-lPW if it contains alloca() and libv and compiler do not.
+	[cfa2b3cef49a]
+
+	* emul/fnmatch.h, fnmatch.3, fnmatch.c:
+	Initial revision
+	[20b1f762a32a]
+
+1996-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now fixes mode on sudoers if set to 0400 to aid in upgrade
+	[d4bdfd521820]
+
+1996-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	fixed pod2man usage
+	[5adf2ec77b27]
+
+	* Makefile.in, configure.in, version.h:
+	++version
+	[b4029de876d0]
+
+	* testsudoers.c, visudo.c:
+	runas_user is now initialized to "root"
+	[8537d97bff39]
+
+	* sudo.h:
+	removed PERM_FULL_ROOT
+	[241f8bbf647f]
+
+	* sudo.c:
+	runas_user defaults to "root" so no more need to PERM_RUNAS
+	[fc0c0dfc72ba]
+
+	* parse.c:
+	will now only running commands as root if there was no runas list
+	(or if root is in the runas list)
+	[40c587666c81]
+
+	* logging.c:
+	now logs "USER=%s"
+	[b733504c87fd]
+
+	* parse.yacc:
+	runas_matches is now set to false if we get a negative match
+	[5495b150b300]
+
+	* parse.lex:
+	make #uid work + some minor cleanup
+	[07851bbce03a]
+
+	* sample.sudoers:
+	added support for NOPASSWD and "runas" from garp@opustel.com /
+	[7a9c67b51fa5]
+
+	* visudo.c:
+	added support for "runas" from garp@opustel.com replaced
+	SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added support for
+	SUDOERS_MODE
+	[e714209b9885]
+
+	* testsudoers.c:
+	added support for "runas" from garp@opustel.com
+	[b837f856da10]
+
+	* sudo.h:
+	added support for NO_PASSWD and runas from garp@opustel.com replaced
+	SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support fro
+	SUDOERS_MODE
+	[cea6f26679b7]
+
+	* sudo.c:
+	added support for NO_PASSWD and runas from garp@opustel.com replaced
+	SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support fro
+	SUDOERS_MODE
+	[61b5434237c5]
+
+	* parse.yacc:
+	added support for NO_PASSWD and runas from garp@opustel.com
+	[72ebd3056f22]
+
+	* parse.c, parse.lex:
+	added support for NO_PASSWD and runas from garp@opustel.com
+	[fef6dbdd114d]
+
+	* logging.c:
+	added support for SUDOERS_WRONG_MODE and "runas"
+	[e794efc2b443]
+
+	* configure.in:
+	added --with-CC only link with -lshadow on linux (with shadow pw) if
+	libc lacks getspnam()
+	[3ecf4ae21002]
+
+	* OPTIONS, options.h:
+	removed NO_PASSWD since it is not possible to do this in the sudoers
+	file itself. Replaced SUDOERS_OWNER with SUDOERS_UID and
+	SUDOERS_GID. Added SUDOERS_MODE.
+	[2eaa4891ef48]
+
+	* Makefile.in:
+	now uses SUDOERS_UID and SUDOERS_GID
+	[8d615f0fdb2a]
+
+1996-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	added --with-CC
+	[a1b8286a81b8]
+
+1996-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	added double quote support
+	[a5e4fc7e3a2b]
+
+	* sudoers.pod:
+	documented double quoting
+	[c6ea47969a44]
+
+1996-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* mkinstalldirs:
+	Initial revision
+	[dcb86d65ad8f]
+
+	* check.c:
+	fixed some indentation
+	[4d1c5ab8072b]
+
+	* Makefile.in:
+	fixed a typo
+	[0d27eebc7227]
+
+	* Makefile.in:
+	added install-dirs .
+	[f499b99b8be7]
+
+1996-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* dce_pwent.c:
+	new version from "Jeff A. Earickson" <jaearick@colby.edu>
+	[422481be5fbd]
+
+1996-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	$CSOPS -> $with_csops (whoops, missed one)
+	[b04c6948130e]
+
+	* BUGS:
+	updated
+	[c4d5713e227d]
+
+	* parse.lex:
+	FQHOST now has same constraints as non-FQHOST
+	[e1c3bf2381d1]
+
+	* INSTALL:
+	added note about OS's w/ shadow passwords turned on by default
+	[166257f43be4]
+
+1996-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	fixed a typo
+	[e5c3e2e9a359]
+
+	* configure.in:
+	added support for --without-THING sanitized shadow pw situtation by
+	adding support for
+	--without-C2
+	[65dc6bf64cce]
+
+	* tgetpass.c:
+	fixed a typo wrt placement of an end paren
+	[a8780f818231]
+
+	* check.c:
+	was closing an fd that may not have been opened
+	[760271c7bdc9]
+
+1996-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS, options.h, sudo.c:
+	added NO_PASSWD
+	[28ff1dc93d7a]
+
+1996-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now always use shadow pw on some arches
+	[069161ccffda]
+
+1996-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added pyramid support
+	[a0eb57a3a531]
+
+	* configure.in:
+	no longer check for C2 if alternate passwd method is used no longer
+	check for some libs twice
+	[2d0c3c902b40]
+
+	* parse.yacc:
+	moved fqdn stuff into parse.lex (FQHOST)
+	[d9c9abd481d8]
+
+	* parse.lex:
+	added FQHOST rules
+	[4a1695acff6d]
+
+	* tgetpass.c:
+	now define TCSASOFT in necesary
+	[3fac2e21c9ab]
+
+	* tgetpass.c:
+	now uses read/write instead of stdio string goop to avoid problems
+	with select(2)
+	[67fd174e518c]
+
+	* OPTIONS, find_path.c, options.h:
+	-DNO_DOT_PATH -> -DIGNORE_DOT_PATH
+	[d05ba5100d28]
+
+1996-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	added note about no shadow auto-detect if using alternate auth
+	schemes
+	[b425592232a3]
+
+	* configure.in:
+	don't check for C2 if AFS or DCE (unless they said --with-C2)
+	[61342962171a]
+
+	* testsudoers.c:
+	now groks shost
+	[85dda17303f6]
+
+	* OPTIONS, find_path.c, options.h:
+	added NO_DOT_PATH
+	[c261ca1fb196]
+
+1996-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	checkdot now works correctly
+	[3bc4835bb3e9]
+
+1996-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	can't have DCE and C2 passwords both...
+	[fb9a8ab7ca66]
+
+1996-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc, sudo.c, sudo.h, visudo.c:
+	now uses shost even if not FQDN
+	[87f7498b3a1f]
+
+	* configure.in:
+	now looks for skey in /usr/lib and doesn't require libskey to be in
+	/usr/local/lib just because skey.h is (for my netbsd box :-)
+	[ceb1763e37d2]
+
+	* aclocal.m4, config.h.in, pathnames.h.in:
+	_SUDO_PATH_ -> _CONFIG_PATH_
+	[84d97ad13d75]
+
+	* aclocal.m4, sudo.pod:
+	/var/run/.odus -> /var/run/sudo
+	[922da220b8f5]
+
+	* pathnames.h.in:
+	now uses _SUDO_PATH_TIMEDIR
+	[5ecab0155fdf]
+
+	* OPTIONS:
+	udpated FQDN
+	[361b6f7440c0]
+
+	* aclocal.m4, configure.in:
+	added SUDO_TIMEDIR
+	[368c95c8c950]
+
+	* config.h.in:
+	added _SUDO_PATH_TIMEDIR
+	[3879864d808c]
+
+	* sudo.pod:
+	updated wrt /var/run/sudo
+	[9e14f2a429d3]
+
+	* sudo.c, sudo.h:
+	added support for shost if FQDN
+	[51a3f51a09a1]
+
+	* parse.yacc, visudo.c:
+	now uses shost if FQDN
+	[d19da2e92b42]
+
+	* check.c:
+	Now use skeylookup() instead off skeychallenge()
+	[4c7438bb2ae0]
+
+1996-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	mail_argv should not contain ALERTMAIL as it includes "-t"
+	[67ffaaa8f843]
+
+1996-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, Makefile.in, README, configure.in, version.h:
+	++version
+	[e08fd4a809fc]
+
+	* compat.h:
+	added more _PASSWD_LEN stuff -- now uses PASS_MAX too
+	[2f20c3153689]
+
+	* tgetpass.c:
+	now includes limits.h moved _PASSWD_LEN -> compat.h
+	[b1ca3cafdacc]
+
+1996-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL, README:
+	++version
+	[3eacf32803f5]
+
+	* Makefile.in:
+	++versoin
+	[3b91c317630a]
+
+	* Makefile.in:
+	fixed a typo
+	[3661ac4a7803]
+
+	* configure.in:
+	++version
+	[60e842973745]
+
+1996-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updated
+	[def2c3c24195]
+
+	* CHANGES:
+	done for 1.4.1 (I hope)
+	[2ab543769a40]
+
+	* sudoers.pod:
+	added info on wildcards
+	[ce3bd41bc063]
+
+	* sample.sudoers:
+	added wildcard example
+	[762feb0577bd]
+
+	* Makefile.in:
+	now uses *.pod to build *.man and *.cat & *.html
+	[3ec14962028b]
+
+	* configure.in:
+	addedSUDO_PROG_BSHELL !ll
+	[3c80b320bf16]
+
+	* visudo.pod:
+	fixed up some formatting
+	[12166c434526]
+
+	* sudoers.pod:
+	redid section describing sample sudoers stuff
+	[b8065cceec71]
+
+	* sudo.pod:
+	fixed some formatting
+	[aa9a681add0f]
+
+	* getspwuid.c:
+	now treats "" as bourne shell
+	[30194a72ad56]
+
+	* Makefile.in:
+	TESTOBJS nwo includes wildmat.o
+	[86cc6500f84d]
+
+	* testsudoers.c:
+	now works with NewArg[cv]
+	[2f72674ce942]
+
+	* sudo.c:
+	removed an XXX (fixed it in getspwuid.c)
+	[e791ee0d1a68]
+
+	* aclocal.m4:
+	added check for bourne shell
+	[a2fd51676b8a]
+
+	* pathnames.h.in:
+	added _PATH_BSHELL
+	[e7c10011d47b]
+
+	* config.h.in:
+	added _SUDO_PATH_BSHELL
+	[6a1182898de9]
+
+1996-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	unixware vi returns 256 instead of 0
+	[234ffc7c6786]
+
+	* INSTALL:
+	added Linux note
+	[5f85efcd2b58]
+
+	* logging.c:
+	fixed up some XXX's. file log format now looks a little more like
+	real syslog(3) format.
+	[6df55707bfc3]
+
+	* README, TROUBLESHOOTING:
+	updated wrt lex/flex
+	[eb787d69156b]
+
+	* Makefile.in:
+	commented out rule to build lex.yy.c from parse.lex since we ship
+	with a pre-flex'd parser
+	[7507e2ce4a95]
+
+	* parse.c, parse.yacc, visudo.c:
+	path_matches -> command_matches
+	[0bd469424f86]
+
+	* logging.c:
+	eliminated some strcat()'s
+	[9878a79bc374]
+
+	* configure.in:
+	no longer checks for lex/flex (now assumes flex)
+	[a086ccc73798]
+
+	* configure.in:
+	now checks for $kerb_dir_candidate/krb.h instead of just
+	kerb_dir_candidate
+	[9133bc3c5208]
+
+1996-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	now use a 'hook' expression instead of an iffy one :-)
+	[9560df01b8c0]
+
+1996-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	now works with new sudo arg stuff
+	[310a0d43ddad]
+
+	* parse.yacc:
+	fixed dereferencing deadbeef
+	[474ef8a8006b]
+
+	* sudo.c:
+	changed an occurrence of Argv to NewArgv
+	[205b012b7691]
+
+	* parse.lex:
+	took out support for quoted commands since there is no need...
+	[5c5036d353b1]
+
+	* parse.c:
+	fixed a typo in a for() loop
+	[7e8d5283c43b]
+
+	* logging.c:
+	protected against dereferencing rogue pointers
+	[56debd517717]
+
+	* sudo.c:
+	now uses NewArgv amd NewArgc so cmnd_aegs is no longer needed this
+	also allows us to eliminate some kludges in parse_args() and
+	eliminate superfluous code.
+	[5122f66ad150]
+
+	* logging.c:
+	no longer uses cmnd_args, now uses NewArgv instead.
+	[abddd23cf068]
+
+	* sudo.h:
+	added struct sudo_command, NewArgc, and NewArgv removed cmnd_args
+	(no longer used)
+	[78410984fb05]
+
+	* Makefile.in:
+	added wildmat.c to SRCS & SUDOBJS
+	[3800efb41794]
+
+	* parse.yacc:
+	COMMAND is now a struct containing the path and args
+	[5c32822c5b94]
+
+	* parse.lex:
+	replaced append() with fill_cmnd() and fill_args. command args from
+	a sudoers entry are now stored in an arrary for easy matching.
+	[a981d7f4eb0d]
+
+	* parse.c:
+	command line args from sudoers file are now in an array like ones
+	passed in from the command line
+	[1d9e37e84519]
+
+1996-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	wildwat stuff now works
+	[49d16488531f]
+
+1996-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* version.h:
+	++version
+	[53e55463ef89]
+
+	* Makefile.in:
+	++version added wildmat.*
+	[0508297a4711]
+
+1996-01-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	added support for quoted commands (w/ or w/o args)
+	[b9a637155673]
+
+1996-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.pod, visudo.pod:
+	cleaned up formatting
+	[4591d4195437]
+
+	* sudo.pod, visudo.pod:
+	Initial revision
+	[7564a8242750]
+
+1996-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudoers.pod:
+	looks reasonable, could be mroe readable
+	[a5be2d19d9e0]
+
+	* sudoers.pod:
+	Initial revision
+	[957888be31a6]
+
+1996-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updated
+	[633743aa924b]
+
+	* OPTIONS:
+	updated NO_ROOT_SUDO entry
+	[f1c15b1dec9e]
+
+1996-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	*** empty log message ***
+	[5b63de579ff7] [SUDO_1_4_0]
+
+	* sudo.c:
+	fixed SECURE_PATH
+	[6002889f606d]
+
+	* RUNSON:
+	udpa`ted for 1.4
+	[6014a8592815]
+
+	* configure.in:
+	AIX aixcrypt.exp now uses $(srcdir)
+	[b0d57674fef4]
+
+	* TROUBLESHOOTING:
+	added entry for anal ansi compilers
+	[4193cec1c6b1]
+
+1996-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	added info on libcrypt_i for SCO
+	[575497d56698]
+
+	* TODO:
+	*** empty log message ***
+	[d0aaf67b9913]
+
+	* sample.sudoers:
+	added comments
+	[a7773f7eda8d]
+
+	* TODO:
+	1.4 release
+	[1dade29e9fd9]
+
+	* CHANGES:
+	++version
+	[67241be40780]
+
+	* INSTALL, OPTIONS, README, config.h.in, configure.in:
+	++version
+	[2e0a37897f68]
+
+	* BUGS:
+	++version and fixed ISC
+	[78963f01a0e3]
+
+	* check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
+	goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
+	insults.h, logging.c, options.h, pathnames.h.in, putenv.c, strdup.c,
+	sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
+	visudo.c:
+	++version
+	[b6227f29b3d9]
+
+	* interfaces.c:
+	added STUB_LOAD_INTERFACES ++version
+	[d8150a3fd577]
+
+	* Makefile.in, emul/utime.h, parse.c, parse.lex, parse.yacc,
+	version.h:
+	++version
+	[da9e90e69bdc]
+
+	* PORTING:
+	added info about fd_set in tgetpass added info on interfaces.c
+	[a39902febd17]
+
+1996-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* dce_pwent.c:
+	added sudo header
+	[fc0f2c48682e]
+
+	* tgetpass.c:
+	fixed a typo
+	[43d40b72ee8f]
+
+	* Makefile.in:
+	tgetpass.o is now only linked in with sudo (not visudo)
+	[7407c5ff11f8]
+
+1996-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in,
+	configure.in:
+	++version
+	[9b82ad805d6b]
+
+	* emul/utime.h:
+	added copyright notice
+	[4380f16cd075]
+
+	* check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
+	ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
+	interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
+	pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
+	testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
+	++version
+	[32717fdb5d05]
+
+	* tgetpass.c:
+	minor cleanup and now includes sys/bsdtypes for svr4'ish boxen
+	[326864428da2]
+
+	* configure.in:
+	ISC now gets -lcrypt now check for sys/bsdtypes.h
+	[e064799c054b]
+
+	* config.h.in:
+	added check for sys/bsdtypes.h
+	[9adb9533c363]
+
+1996-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	removed debugging stuff (setting freed ptr to NULL)
+	[02fe8eec63a0]
+
+	* TROUBLESHOOTING:
+	added 2 entries
+	[02884e2733e2]
+
+	* Makefile.in:
+	added FAQ
+	[074d8dfcf28d]
+
+	* TROUBLESHOOTING:
+	added section on syslog
+	[e6bc02a22b86]
+
+	* configure.in:
+	added AC_ISC_POSIX for better ISC support
+	[8436b3e12af2]
+
+	* config.h.in:
+	fixed typo
+	[f1b3922babf4]
+
+	* config.h.in:
+	added define for _POSIX_SOURCE
+	[ded6d92b34f9]
+
+1996-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	fixed check for lsearch()
+	[75baa5bc28a3]
+
+1995-12-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	fixed for AIX now deal if num_interfaces == 0 (should not happen)
+	[ae450e859227]
+
+1995-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now only define HAVE_LSEARCH if there is a corresponding search.h
+	[8ce645c5d17f]
+
+	* interfaces.c:
+	works on ISC again
+	[ccac920d424c]
+
+1995-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now define HAVE_LSEARCH if we find lsearch() in libcompat
+	[7343e4313a87]
+
+	* lsearch.c:
+	char * -> const char *
+	[1c0b11c2300a]
+
+	* configure.in:
+	now looks in -lcompat for lsearch()
+	[a1cc1d6fcd09]
+
+	* Makefile.in:
+	remove sudo.core visudo.core for clan target
+	[b523456a85df]
+
+	* aclocal.m4:
+	added UID_MAX support in check for MAX_UID_T_LEN
+	[7ab262b1173f]
+
+	* Makefile.in:
+	fixed another occurence of sudo_getpwuid.*
+	[fb5809c07da2]
+
+	* Makefile.in, getspwuid.c:
+	sudo_getpwuid.c -> getspwuid.c
+	[875f2ef808b4]
+
+	* configure.in:
+	moved the "echo"
+	[ad7b8f966076]
+
+	* BUGS, CHANGES, INSTALL, Makefile.in, OPTIONS, README, check.c,
+	compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
+	getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
+	ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c,
+	parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c,
+	sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
+	version.h, visudo.c:
+	++version
+	[ee57c6410ffa]
+
+	* testsudoers.c:
+	added group support
+	[54d8097df8bd]
+
+	* sample.sudoers:
+	added group entry
+	[50994d31fd49]
+
+	* sudoers.man:
+	documented group support
+	[0a16707f8fed]
+
+	* parse.c, parse.lex, parse.yacc, visudo.c:
+	added group support
+	[427218c879c8]
+
+1995-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	tkfile was too short and overflowed the kerberos realm
+	[53823a1ff5af]
+
+1995-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now copy command args directly from Argv
+	[77408278b6fd]
+
+	* sudo.c:
+	replaced code to copy cmnd_args so that is does not use realloc
+	since most realloc()'s really stink
+	[b29a0ff73fb6]
+
+1995-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	syslog() fixed in hpux 10.01
+	[2648e6f0cdb0]
+
+1995-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS if appropriate)
+	[8f108b8d8711]
+
+	* configure.in:
+	better error if cannot find skey incs or libs
+	[5887662ee9d3]
+
+	* aclocal.m4:
+	now use a temp file for determining max len of uid_t in string form.
+	the old hacky way broke on netbsd
+	[b68f470fa9f8]
+
+	* sudo.c:
+	added set of parens and a space
+	[8a3d4826d022]
+
+1995-12-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* dce_pwent.c:
+	fixes from Jeff Earickson <jaearick@colby.edu> ,
+	[bde0f0b756ec]
+
+	* check.c:
+	modified a comment
+	[e2a97f1afbbe]
+
+	* Makefile.in:
+	fixed up testsudoers target
+	[d39c4e7bb609]
+
+	* configure.in:
+	DCE changes from Jeff Earickson <jaearick@colby.edu> LIBS ->
+	SUDO_LIBS and VISUDO_LIBS LDFLAGS -> SUDO_FDFLAGS and VISUDO_LDFLAGS
+	[da7a1c433828]
+
+	* Makefile.in:
+	LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS -> SUDO_LDFLAGS,
+	VISUDO_LDFLAGS
+	[4b69503e8487]
+
+1995-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	fix for C2 on hpux 10 now uses -linet if it exists
+	[8d300112263d]
+
+	* check.c:
+	LONG_SKEY_PROMPT is less of a klusge /
+	[dcc144abaac3]
+
+	* configure.in:
+	fixed typos w/ dce stuff
+	[f7dfd6d4e149]
+
+	* Makefile.in:
+	added dce_pwent.c
+	[79047acdc516]
+
+1995-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	amended section on combining authentication mechanisms
+	[dc5138c7c716]
+
+	* PORTING:
+	minor updates for 1.3.6
+	[fe80c13bd994]
+
+	* TROUBLESHOOTING:
+	added 2 more entries
+	[c7201439a0f5]
+
+	* BUGS:
+	updated for 1.3.6
+	[979b414d2a2d]
+
+	* README:
+	overhauled
+	[3af8b60eb594]
+
+	* INSTALL:
+	rewrote for sudo 1.3.6
+	[b16027b9c726]
+
+	* TROUBLESHOOTING:
+	added 3 entries
+	[934c9ee3f153]
+
+1995-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c, getspwuid.c, sudo.c:
+	added explict casts for strdup since many includes don't prototype
+	it. gag me.
+	[3e19a11f2fcc]
+
+	* sudo.h:
+	removed prototype for sudo_getpwuid() since convex C compiler choked
+	on it.
+	[c3ea74ca67b0]
+
+	* sudo.c:
+	added prototype for sudo_getpwuid()
+	[4a8e3cdc2b98]
+
+	* lsearch.c:
+	now compiles on strict ANSI compilers
+	[3ce5d72d0b08]
+
+	* check.c:
+	added LONG_SKEY_PROMPT support
+	[48a18b8a2332]
+
+	* Makefile.in:
+	added extra $'s for make to eat up, yum.
+	[2995b214e12b]
+
+	* OPTIONS, options.h:
+	added LONG_SKEY_PROMPT
+	[f23ae799b5a4]
+
+1995-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	s/key support now works with normal s/key as well as logdaemon
+	[d67573f523bf]
+
+	* OPTIONS, options.h:
+	added SKEY_ONLY
+	[bbf07654e0de]
+
+	* compat.h:
+	set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
+	[205895b96a36]
+
+	* INSTALL:
+	added DCE note added more AIX notes
+	[6345403b3522]
+
+	* sudo.c:
+	now include pthread.h for DCE support
+	[6fe02865f679]
+
+	* check.c:
+	dce_pwent() is ok after all .,
+	[d26a8746a55d]
+
+	* logging.c:
+	now uses SYSLOG() macro that equates to either syslog() or
+	syslog_wrapper
+	[42ac4cff8045]
+
+	* dce_pwent.c:
+	minor formatting changes. renamed check() to somthing less generic
+	[71859f217be1]
+
+	* check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
+	visudo.c:
+	now uses user_pw_ent and simple macros to get at the contents
+	[f4cbf3e7145a]
+
+1995-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	simpler dec unix C2 support
+	[86bc8f75250e]
+
+	* getspwuid.c:
+	now sets crypt_type for DEC unix C2
+	[99aeadd18266]
+
+1995-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added csops paths for skey
+	[b8ca672e2117]
+
+	* getspwuid.c:
+	now includes string.h for strdup() prototype
+	[3605259c3620]
+
+	* getspwuid.c:
+	fixed a few typos
+	[46c97e4ea417]
+
+	* check.c:
+	now includes skey.h
+	[11e611ce1b61]
+
+	* getspwuid.c:
+	fixed up comments
+	[223dac56f0c8]
+
+	* check.c:
+	moved a lot of the shadow passwd crap to sudo_getpwuid()
+	[97d8887fb7d3]
+
+	* sudo.c:
+	now uses sudo_pw_ent
+	[d014dadbef48]
+
+	* testsudoers.c:
+	now uses sudo_pw_ent
+	[d92936ed7e34]
+
+	* visudo.c:
+	now sets sudo_pw_ent
+	[ff75cdfcf8b3]
+
+	* getspwuid.c:
+	Initial revision
+	[6deb6df9d7bc]
+
+	* tgetpass.c:
+	moved dce stuff into compat.h
+	[1124284396e7]
+
+	* logging.c, sudo.h:
+	now uses sudo_pw_ent
+	[404ff20a5067]
+
+	* Makefile.in:
+	added sudo_getpwuid.c
+	[6666d0644512]
+
+	* compat.h:
+	added dce support
+	[3c3b36a7ce0e]
+
+	* parse.yacc:
+	now uses sudo_pw_ent
+	[9f5e8d11bd68]
+
+1995-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	fixed exempt_group stuff for OS's that don't put base gid in group
+	vector
+	[003f153bd396]
+
+	* check.c:
+	S/Key support now works with sunos4 shadow passwords
+	[1eb64a5efff1]
+
+	* Makefile.in:
+	fixed clean rule
+	[5695a2c62816]
+
+	* config.h.in, configure.in:
+	added DCE support
+	[f53c766c1947]
+
+	* tgetpass.c:
+	DCE & KERB support
+	[904cf436506a]
+
+	* check.c:
+	first stab at dce support
+	[aea5ca07b1e3]
+
+	* dce_pwent.c:
+	now smells like sudo
+	[8b3d609b49cd]
+
+	* dce_pwent.c:
+	Initial revision
+	[b573555f2399]
+
+	* check.c:
+	skey'd sudo now works w/ normal password as well
+	[8d038f9f6e94]
+
+1995-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, OPTIONS, check.c, compat.h, config.h.in, find_path.c,
+	getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
+	ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c,
+	parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c,
+	sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
+	version.h, visudo.c:
+	updated version number
+	[ba7e346d7904]
+
+	* README:
+	updated to reflect version change
+	[1d15cf1d8cc8]
+
+	* configure.in:
+	--with options now line up ++version
+	[08ebf625fbca]
+
+	* sudo.h:
+	removed unecesary S/Key stuff
+	[68188cba90af]
+
+	* configure.in:
+	fixed S/Key support
+	[f6d9cbc36618]
+
+	* Makefile.in:
+	-I stuff now goes in CPPFLAGS
+	[7b8e53c5b046]
+
+	* check.c:
+	fixed SKey support
+	[52c1a5cf4435]
+
+	* README:
+	updated version
+	[bed6498a10bb]
+
+	* OPTIONS:
+	fixed description of EXEMPTGROUP
+	[cfeead55edc2]
+
+	* sudo.c:
+	more people use _RLD_ than just alphas...
+	[6a3c7090a6f6]
+
+	* Makefile.in:
+	replaced $man_prefix with $mandir
+	[dc4b36a550e2]
+
+	* configure.in:
+	fixed a typo
+	[a38a4acddcaf]
+
+	* Makefile.in:
+	now use more GNU'ish dir names
+	[c5498391a520]
+
+	* configure.in:
+	now set *dir correctly (can override from command line)
+	[523ff98fd438]
+
+	* sudo.c:
+	now deal with situations where we getwd() fails
+	[88a9e61dccbb]
+
+1995-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	added etc_dir, bin_dir, sbin_dir
+	[75fd08d92842]
+
+	* configure.in:
+	added sbin_dir
+	[3cb318c0d8d1]
+
+	* Makefile.in:
+	now ship a flex-generated lex.yy.c
+	[4d083ed70dce]
+
+	* Makefile.in:
+	now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP, SUDOERS_OWNER
+	[4d51dc9c3780]
+
+	* pathnames.h.in:
+	_PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile
+	[773fd163d52f]
+
+	* options.h:
+	no more error for redefining SUDOERS_OWNER
+	[4ba336644c6a]
+
+	* OPTIONS:
+	expanded SUDOERS_OWNER section
+	[12fae405759e]
+
+1995-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	now warn if chown(2) failed
+	[d0d1db6e3a1f]
+
+	* logging.c:
+	better default warning for NO_SUDOERS_FILE
+	[5260b458ac64]
+
+	* sudo.c:
+	added missing set_perms() no more cryptic message if the sudoers
+	file is zero length, now just give a parse error
+	[b81ea724838a]
+
+	* logging.c:
+	better diagnostics if NO_SUDOERS_FILE
+	[877e878663c5]
+
+	* sudo.c:
+	check_sudoers() now catches sudoers files that are not readable (but
+	are stat'able).
+	[fea05663b3de]
+
+1995-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now add -D__STDC__ for convex cc (not gcc)
+	[c80fc53ff51b]
+
+	* configure.in:
+	MAN_PREFIX -> man_prefix now sets prefix and exec_prefix
+	[fe238226a057]
+
+	* Makefile.in:
+	now uses exec_prefix & prefix from configure
+	[f62fca5f56bd]
+
+	* find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c, parse.c,
+	parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c, tgetpass.c,
+	utime.c, visudo.c:
+	options.h is now <> instead of "" so shadow build trees can have a
+	custom copy of options.h
+	[e6782676099c]
+
+	* check.c:
+	user_is_exempt() is no longer a hack, it now uses getgrnam()
+	[287f8d5356f7]
+
+	* options.h:
+	EXEMPTGROUP is now "sudo"
+	[61487304dbe1]
+
+	* configure.in:
+	MAN_POSTINSTALL now contains a leading space
+	[eaad4ac34012]
+
+	* Makefile.in:
+	removed leading tab if @MAN_POSTINSTALL@ not defined now removes
+	testsudoers in clean:
+	[e01711baceb8]
+
+	* tgetpass.c:
+	includes pwd.h to get _PASSWD_LEN definition
+	[8ec174f263f1]
+
+1995-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	unset the KRB_CONF envariable if using kerberos so we don't get
+	spoofed into using a bogus server
+	[2561a0274fca]
+
+1995-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	now explicately initialize match[] tp be FALSE
+	[0e45e5c47766]
+
+1995-09-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	removed unused variable now passes -Wall
+	[3452508bc16d]
+
+	* parse.yacc:
+	yyerror and dumpaliases are now void's now passes -Wall
+	[2769dfb51993]
+
+	* parse.lex:
+	added prototype for yyerror
+	[1f3f0c1b4ab4]
+
+	* check.c, logging.c, parse.c:
+	now passes -Wall
+	[eab57e5e81d2]
+
+	* interfaces.c:
+	rmeoved unused cruft now passes -Wall
+	[7a47e1866f4b]
+
+	* Makefile.in:
+	fixed headers that moved to emul dir
+	[e680c1e5049b]
+
+	* logging.c:
+	fixed deref of nil pointer if no args
+	[973b9bea432f]
+
+1995-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS:
+	added a caveat to FQDN section
+	[dcf6e2a5fff4]
+
+1995-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	more $srcdir support for install targets
+	[f6eac78436dd]
+
+	* find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc, putenv.c,
+	strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, visudo.c:
+	don't include malloc.h if we include stdlib.h
+	[fca2ff307cd8]
+
+	* parse.yacc:
+	local search.h now lives in emul
+	[51c458904424]
+
+	* check.c, utime.c:
+	local utime.h now lives in emul dir
+	[f92fc9e8c8de]
+
+	* lsearch.c:
+	local search.h now lives in emul
+	[579efc407439]
+
+	* Makefile.in:
+	added support for building in other than the sourcedir
+	[2ab53a43f7d4]
+
+1995-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS:
+	annotated CSOPS_INSULTS option
+	[9e57d45a0afa]
+
+	* TROUBLESHOOTING:
+	updated shadow passwords blurb
+	[39b785bc7253]
+
+	* sudo.c:
+	if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a shell and
+	passes along foo as the arguments
+	[a91077aa8fc5]
+
+1995-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	collapsed pathname and dir sections into one -- its now less
+	expensive
+	[89caa03bec25]
+
+	* parse.lex:
+	fixed spacing quoting [,:\\=] now works correctly append() and
+	fill() now take args to make the above work
+	[09d023d9ef3a]
+
+	* sudo.c:
+	fixed a typo that caused commands with no tty on fd 0 but a tty on
+	fd 1 to erroneously have "none" as their tty
+	[07d2c0e7977c]
+
+1995-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	timestampfile is now a global static removed decl of timestampfile
+	in remove_timestamp since we can just use the global one
+	[f0cbdc6aab1c]
+
+	* check.c:
+	created touch() to update timestamps added USE_TTY_TICKETS support
+	(bit of a kludge)
+	[cee1dd0318f8]
+
+	* compat.h:
+	added _S_IFDIR and S_ISDIR
+	[b4a51cc9628e]
+
+	* OPTIONS, options.h:
+	added USE_TTY_TICKETS
+	[b4e22f81f25e]
+
+	* parse.yacc:
+	removed const from casts for lsearch() & lfind() to placate irix 4.x
+	C compiler
+	[5003081f76ea]
+
+1995-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now only strip '/dev/' off of a tty if it starts with '/dev/'
+	[7f62bcd24039]
+
+	* pathnames.h.in:
+	added _PATH_DEV
+	[6375f44d1910]
+
+	* configure.in:
+	AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for tcgetattr only if
+	have termios.h
+	[9c60391235fd]
+
+	* tgetpass.c:
+	fixed incorrect #ifdef termio uses "unsigned short" not int for
+	c_?flag
+	[d032e6a29845]
+
+	* parse.lex, parse.yacc:
+	fixed a spelling error
+	[cad6a944c7b1]
+
+	* Makefile.in:
+	fixed typo
+	[204a65403e7c]
+
+1995-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	fixed a comment
+	[268f760e57ad]
+
+	* parse.yacc:
+	added dotcat() to cat 2 strings w/ a dot effeciently now that we
+	dynamically allocate strings they need to be free()'d
+	[ec2e2152f415]
+
+	* parse.lex:
+	dynamically allocates space for strings
+	[d10ac3533d66]
+
+	* sudo.h:
+	no more MAXCOMMANDLENGTH
+	[e2e1219bff8a]
+
+	* sudo.h:
+	added decl of tty
+	[c8ae81303ee5]
+
+	* logging.c, sudo.c:
+	moved tty stuff into sudo.c
+	[e028abefeb07]
+
+1995-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	fixed a logic bug. Was denying a command if user gave command line
+	args but there were none in the sudoers file which is wrong.
+	[7489a99b8e8a]
+
+	* sudo.h:
+	MAXCOMMMANDLEN dropped down to 1K
+	[38ef54ba290b]
+
+	* parse.lex:
+	return foo; -> return(foo);
+	[0e8be1b57001]
+
+	* parse.yacc:
+	fixed netgr_matches() prototype
+	[e69f15910464]
+
+	* parse.lex:
+	added support for escaping "termination" characters
+	[8bd4ef50f35c]
+
+	* parse.c:
+	buf is now of size MAXPATHLEN+1 since it never holds command args
+	[2ce4b763058c]
+
+	* sudo.c:
+	fixed comments
+	[0c74a3d2ebb0]
+
+	* goodpath.c:
+	fixed negation problem (doh!)
+	[782814e3a2d1]
+
+	* parse.yacc:
+	fixed 2nd parameter to lfind()
+	[63d7b1623c08]
+
+	* parse.lex:
+	now do bounds checking in fill() and append()
+	[54381b563251]
+
+	* sudo.c:
+	include netdb.h as we should added a missing void cast added
+	SHELL_IF_NO_ARGS support now use realloc() properly. would fail if
+	realloc actually moved the string instead of shrinking it
+	[897ccdec9c06]
+
+	* sample.sudoers:
+	updated with examples of new features
+	[9b3ed00e8aa6]
+
+	* goodpath.c:
+	now set errno to EACCES if not a regular file or not executable
+	[2d069548a5ea]
+
+	* find_path.c:
+	if given a fully-qualified or relative path we now check it with
+	sudo_goodpath() and error out with the appropriate error message if
+	the file does not exist or is not executable
+	[590f89dd8dec]
+
+	* emul/search.h, lsearch.c:
+	now use correct args for lfind
+	[fccdcdbf020e]
+
+	* logging.c:
+	added a comment
+	[fab9f49708ea]
+
+	* insults.h:
+	added in CSOps insults
+	[ad8eb1862adc]
+
+	* ins_csops.h:
+	Initial revision
+	[de5a475ec018]
+
+	* tgetpass.c:
+	added RCS id
+	[c3ffd550a482]
+
+	* sudo.h:
+	increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD -> HAVE_GETWD
+	[aba25c90d08a]
+
+	* OPTIONS:
+	added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
+	[e27bd62e9ccf]
+
+	* sudo.c:
+	fixed -k load_interfaces() now gets called if FQDN is set
+	-p now works with -s
+	[07ca2a34bae8]
+
+	* parse.c:
+	don't try to stat() "pseudo commands" like "validate"
+	[75527045984b]
+
+	* options.h:
+	added CLASSIC_INSULTS added CSOPS_INSULTS added SHELL_IF_NO_ARGS
+	[07b157a0eafd]
+
+	* configure.in:
+	added SecurID support added other insults to --with-csops
+	[6c992ceb244c]
+
+	* config.h.in:
+	added HAVE_SECURID
+	[e734ff617fe8]
+
+	* Makefile.in:
+	added clobber target added ins_csops.h now gets CFLAGS from
+	configure
+	[d1e29c7cec25]
+
+	* aclocal.m4:
+	relaxed SUDO_FULL_VOID
+	[fb4084f27406]
+
+	* visudo.c:
+	function comment blocks are now in same style as rest of code
+	[04a2931354c5]
+
+	* testsudoers.c:
+	added support for command line args in /etc/sudoers
+	[bfe4e1bcc655]
+
+	* sudoers.man:
+	updated to have command args in the sudoers file
+	[1cd34355e9ea]
+
+	* sudo.man:
+	added -s and -- flags added SHELL to ENVIRONMENT VARIABLES section
+	[930b48023b68]
+
+1995-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	PATH renamed to COMMAND
+	[4e109a6de3cd]
+
+	* parse.lex:
+	it is now a parse error for directories to have args attached to
+	them
+	[2ab10a146b54]
+
+	* logging.c:
+	now say command args if telling user to buzz off
+	[933de26ded8b]
+
+	* sudo.c:
+	-s no longer indicates end of args sped up loading on cmnd_args in
+	load_cmnd()
+	[eac99a4da862]
+
+	* parse.c:
+	removed an unreachable statement
+	[634302623c49]
+
+	* parse.lex:
+	made more efficient by pulling out the terminators when in GOTCMND
+	state and making them their own rule
+	[80798f1e1166]
+
+1995-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	removed MAXLOGLEN since it is no longer used
+	[102824196b71]
+
+	* parse.lex:
+	now allows command args
+	[d29dfa1e5254]
+
+	* parse.c:
+	now groks command arguments
+	[6c414cb7f105]
+
+	* logging.c:
+	now sets tty correctly when piped input
+	[de46a30c0406]
+
+	* sudo.c:
+	fixed loading of cmnd_args (was including command name too)
+	[15319a425ea6]
+
+	* logging.c:
+	fixed a core dump due to incorrect if construct
+	[582363c7d7fa]
+
+1995-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	only add -lsun is irix < 5 don't look for -lnsl or -lsocket if irix
+	[da591fe9b931]
+
+	* aclocal.m4:
+	fixed check for ISC
+	[52e59f2082a7]
+
+	* sudo.c:
+	now sets cmnd_args used by log_error() and that will be used by the
+	parse to check against command args
+	[c6804389723b]
+
+	* sudo.h:
+	added cmnd_args
+	[4d00446b4a8d]
+
+	* logging.c:
+	now dynamically allocate logline since we can guess at its size
+	[4bed8c8446aa]
+
+1995-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	cleaned up a bunch of unnecesary #ifdef's eliminated a buffer remove
+	"register" since the compiler knows more than I do now do a
+	"basename" of the tty
+	[3b1bbf0b3da1]
+
+1995-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	++version
+	[5ce552f9a5f1]
+
+	* sudo.h:
+	added shell extern changed MODE_* to be bit masks to allow for
+	several options together
+	[06f9dc4f400c]
+
+	* sudo.c:
+	added -s (shell) option made MODE_* masks so we can do bitwise & and
+	| to see if multiple flags are set.
+	[01f8143010ad]
+
+	* check.c:
+	added securid support
+	[909e078005fe]
+
+1995-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	removed a bunch of unnecesary strncpy()'s and replaced with strcat()
+	[644506b57d61]
+
+1995-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, version.h:
+	++version
+	[3cd6f1fbc3d9]
+
+1995-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	fixed free() of an uninitialized pointer (yuck)
+	[8c404ee502ee]
+
+	* testsudoers.c:
+	added netgr_matches
+	[e7c9fa2f774c]
+
+	* parse.c:
+	cleaned up netgr_matches
+	[8108f00b810e]
+
+1995-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updated for 1.3.4
+	[4741704310a1]
+
+1995-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	now installs sudoers.man -- really should clean this up though.
+	[455631d45a1d]
+
+	* Makefile.in:
+	added sudoers.cat and sudoers.man
+	[0bdedd6c7363]
+
+	* sudo.man:
+	pulled out stuff on the sudoers file format into a separate man page
+	[de215d999cb9]
+
+	* sudoers.man:
+	Initial revision
+	[f25eafbb7095]
+
+	* HISTORY:
+	fixed up my email address
+	[254fbf80be74]
+
+	* configure.in:
+	added checks for innetgr and getdomainname
+	[24a99cb7e97e]
+
+	* visudo.c:
+	added dummy netgr_matches function
+	[1841ff2c01da]
+
+	* parse.c:
+	added netgr_matches
+	[ec90db6a97b8]
+
+	* parse.lex, parse.yacc:
+	added NETGROUP support
+	[c9dd93e3bc4b]
+
+	* config.h.in:
+	added HAVE_INNETGR & HAVE_GETDOMAINNAME
+	[14abd494d875]
+
+1995-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	rewrote clean_env() that has rm_env() builtin
+	[55cb43818a95]
+
+1995-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	now cast uid to long in sprintf
+	[b549eea40aeb]
+
+	* OPTIONS:
+	added _INSULTS suffix to HAL & GOONS end
+	[ed620d0aad30]
+
+	* options.h:
+	added _INSULTS suffix to HAL & GOONS
+	[9f72e9b83afd]
+
+	* ins_2001.h, ins_classic.h, ins_goons.h, insults.h:
+	converted to new scheme of insult "unions" end
+	[2f6d2b412132]
+
+	* sudo.c:
+	now uses MAX_UID_T_LEN
+	[c1df79e0f389]
+
+	* configure.in:
+	added SUDO_UID_T_LEN !l
+	[195f0b9f5f84]
+
+	* config.h.in:
+	added MAX_UID_T_LEN
+	[73f42ae4f14d]
+
+	* check.c:
+	now use MAX_UID_T_LEN
+	[df9c063234cb]
+
+	* aclocal.m4:
+	added check for max len of uid_t fixed sco vs. isc check
+	[d558f36d2223]
+
+1995-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	corrected version
+	[828dd1571e86]
+
+	* configure.in:
+	added sco support
+	[af1e2f616638]
+
+	* aclocal.m4:
+	hack to check for sco
+	[549ab99a9a43]
+
+	* interfaces.c:
+	removed #include <net/route.h> since it was hosing some OS's
+	[ac78a7c04005]
+
+1995-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	fixed prreadlink() prototype
+	[b380fe1f2b11]
+
+	* check.c:
+	added parens in #if's
+	[e96ade691b82]
+
+	* configure.in:
+	added SPW_ prefix
+	[a302683a1483]
+
+	* sudo.h:
+	moved SPW_* to config.h.in
+	[6b3be70e34cf]
+
+	* sudo.c:
+	added a set of parens
+	[8188d735d695]
+
+	* config.h.in:
+	added SPW_*
+	[5ead6371cf60]
+
+	* sudo.h:
+	added SPW_* reordered error codes
+	[dead25b4ed0a]
+
+	* check.c:
+	moved SPW_* to sudo.h
+	[ca51fb04caf4]
+
+1995-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	SPW_AUTH -> SPW_SECUREWARE
+	[6b512b2bc5dc]
+
+	* logging.c:
+	GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
+	[defdd0944e2f]
+
+	* configure.in:
+	AUTH -> SECUREWARE
+	[d1f8a17001dd]
+
+	* check.c:
+	SPW_AUTH -> SPW_SECUREWARE
+	[af0e8d8b89b2]
+
+	* check.c:
+	now uses SHADOW_TYPE to make shadow pw support more readable and
+	modular. It's a start...
+	[8c2a59667014]
+
+	* configure.in:
+	added autodetection of shadow passwords
+	[85f81fa54b1b]
+
+	* sudo.c:
+	now uses SHADOW_TYPE define
+	[355e5dc09b07]
+
+	* config.h.in:
+	added SHADOW_TYPE which replaces SUNOS4 & __svr4__ defines
+	[c0c06e83e483]
+
+	* aclocal.m4:
+	added SUDO_CHECK_SHADOW
+	[464301301639]
+
+1995-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	define SVR4 for ISC define BROKEN_SYSLOG for hpux took out test for
+	memmove() since we dno longer use it...
+	[8aefa87d7d31]
+
+	* CHANGES:
+	updated
+	[ce97b3fd7182]
+
+	* logging.c:
+	added BROKEN_SYSLOG support
+	[a45c3bca36f6]
+
+	* config.h.in:
+	added BROKEN_SYSLOG
+	[6f6abf0a6268]
+
+	* check.c:
+	now only bitch it timestamp > time_now + 2 * timeout to allow for a
+	machine udpating its time from a server
+	[546bc8d35325]
+
+	* sudo.man:
+	added 2 security notes updated Nieusma's email addr
+	[616756c56977]
+
+	* lsearch.c:
+	changed a memmove() to memcpy() since we don't have to worry about
+	overlapping segments.
+	[30baa478526b]
+
+1995-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	cleanup up the loop when interfaces are groped in so that it is
+	readable
+	[1fa39446bd69]
+
+	* Makefile.in, version.h:
+	++version
+	[b46bd2b1770f]
+
+1995-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	annotated 124-126
+	[b82a2b3ec7ce]
+
+1995-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	fixed permissions check on /tmp/.odus
+	[cc2431a65468]
+
+1995-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	fixed some comments
+	[8896d09b4fda]
+
+	* check.c:
+	now checks owner & mode of timedir also checks for bogus dates on
+	timestamp file
+	[a0fad5df5b0a]
+
+	* OPTIONS:
+	updated TIMEOUT info
+	[033cc22d9e04]
+
+	* logging.c, sudo.h:
+	added BAD_STAMPDIR and BAD_STAMPFILE
+	[31d9ce691101]
+
+	* compat.h:
+	added definition of S_IRWXU
+	[ff2dab091a9b]
+
+	* CHANGES:
+	updated
+	[a40df90284f1]
+
+1995-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* interfaces.c:
+	added #ifdef to make it compile on strange arches
+	[4a127f12afce]
+
+1995-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4:
+	fixed check for fulkl void impl.
+	[b6f2a4a361d8]
+
+	* check.c:
+	added mssing "static"
+	[520552f2772b]
+
+	* insults.h:
+	replaced #elif with #else #if constructs for ancient C compilers
+	[39ab2d365b57]
+
+	* INSTALL:
+	updated irix c2 & kerb5 info
+	[ae79b99b4905]
+
+	* configure.in:
+	added shadow pw support for irix
+	[632469d9c528]
+
+1995-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS, TODO:
+	updated
+	[2a96bb18ac30]
+
+	* CHANGES:
+	last changes for sudo 1.3.3
+	[c1c0cd1034b8]
+
+	* configure.in:
+	now calls SUDO_SOCK_SA_LEN
+	[14ea78159d45]
+
+	* config.h.in:
+	added HAVE_SA_LEN
+	[cc2a346aa905]
+
+	* aclocal.m4:
+	added SUDO_SOCK_SA_LEN
+	[456a2025644a]
+
+	* interfaces.c:
+	now works with ip implementations that use sa_len in sockaddr
+	[90be6e028077]
+
+	* INSTALL:
+	added note about buggy AIX compiler
+	[c0f6d427e4e4]
+
+	* interfaces.c:
+	now include sys/time.h for AIX
+	[2510858ab38b]
+
+1995-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	getcwd -> getwd
+	[66085ebca98e]
+
+	* interfaces.c:
+	now works for ISC and others. yay.
+	[f336d4ffc927]
+
+1995-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, version.h:
+	version++
+	[836cffc2078d]
+
+1995-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4:
+	fixed test for full void impl
+	[fb004107e7b9]
+
+	* sudo.c:
+	now check to see that st_dev is non-zero before assuming that we are
+	being spoofed
+	[1b0e1c30c506]
+
+1995-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4, configure.in:
+	SUDO_FUNC_UTIME_NULL -> AC_FUNC_UTIME_NULL
+	[4953379bfb01]
+
+1995-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* aclocal.m4:
+	fixed include file order for SUDO_FUNC_UTIME_POSIX
+	[ff64ab7df44f]
+
+	* logging.c:
+	added cast for ttyname()
+	[444f05f56758]
+
+	* configure.in:
+	fixed typo
+	[de068e748431]
+
+	* check.c:
+	now deal correctly with all known variation of utime() -- yippe
+	[b778a4195a89]
+
+	* configure.in:
+	added SUDO_FUNC_UTIME_POSIX
+	[cf635f2269d6]
+
+	* aclocal.m4:
+	added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
+	[d79593be4b73]
+
+	* config.h.in:
+	added HAVE_UTIME_POSIX
+	[c67b4ac0dca5]
+
+	* check.c:
+	fixed a typo
+	[b14df5680f59]
+
+	* check.c:
+	no longer assume !HAVE_UTIME_NULL means old BSD utime()
+	[0aeaf4b2f38b]
+
+	* check.c:
+	fixed fascist C compiler warning
+	[c61ddf2f1f93]
+
+	* interfaces.c:
+	now set strioctl.ic_timout in STRSET() now initialize num_interfaces
+	to 0 (just to be anal)
+	[c54cc2ba0052]
+
+1995-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
+	[74cf585a54fb]
+
+	* logging.c:
+	added tty logging
+	[e27d8dcfbd78]
+
+	* interfaces.c:
+	reworked the ISC code
+	[bcf57ce8ae69]
+
+	* Makefile.in, version.h:
+	updated version
+	[032941c9b94d]
+
+	* check.c:
+	now expect old-style utime(3) if utime() can't take NULL as an arg
+	[018dd4a73030]
+
+	* configure.in:
+	added check for utime.h
+	[0b76e8feb618]
+
+	* config.h.in:
+	added HAVE_UTIME_H
+	[62ee42feda46]
+
+	* Makefile.in:
+	added CPPFLAGS STATIC_FLAGS -> LDFLAGS
+	[fa3201d294e1]
+
+	* configure.in:
+	now search for kerb libs and includes
+	[cc332401e571]
+
+	* check.c:
+	added support for utime(2)'s that can't take a NULL parameter
+	[98797fedf69f]
+
+	* utime.c:
+	moved HAVE_UTIME_NULL stuff to update_timestamp() where t belongs
+	[6ce6d825fb44]
+
+	* configure.in:
+	added utime(s) stuff
+	[a2afb744403e]
+
+	* check.c:
+	now use utime()
+	[48902240a51e]
+
+	* config.h.in:
+	added HAVE_UTIME and HAVE_UTIME_NULL
+	[9a56ab65d4f4]
+
+1995-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* utime.c:
+	now use HAVE_UTIME_NULL
+	[e3944de09a92]
+
+	* emul/utime.h, utime.c:
+	Initial revision
+	[a2cbf2ef3427]
+
+	* check.c:
+	need to setuid(0) to make kerb4 stuff work.
+	[c6cfda4039d7]
+
+	* tgetpass.c:
+	no more special case for kerberos
+	[4a5c33145be9]
+
+	* config.h.in:
+	took out setreuid and setresuid stuff added kerb5 stuff (use kerb4
+	emulation)
+	[a607ee43e650]
+
+	* compat.h:
+	no longer need setreuid() emulation now set _PASSWD_LEN to 128 if
+	kerberos
+	[02fb274cc136]
+
+	* check.c:
+	now use private ticket file for kerberos support to avoid trouncing
+	on system one
+	[28d8b6b812c7]
+
+1995-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	added SPOOF_ATTEMPT & cmnd_st
+	[d3b42a1f4d0d]
+
+	* sudo.c:
+	added anti-spoofing support
+	[ab1e2aa44a57]
+
+	* parse.c:
+	now use global cmnd_st
+	[47018265a1a6]
+
+	* logging.c:
+	added SPOOF_ATTEMPT suypport
+	[7bbe9dd2a021]
+
+	* testsudoers.c, visudo.c:
+	added void casts where appropriate
+	[f191441ba333]
+
+	* parse.yacc:
+	fixed up spacing and added void casts where appropriate
+	[15d886fc809c]
+
+	* sudo.c:
+	fixed problem with "-p prompt" but no args
+	[6fc048261a3e]
+
+1995-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.man:
+	added BUGS and annotated -l description
+	[e5c506de2603]
+
+	* sudo.h:
+	validate() now takes a flag
+	[26627becc60a]
+
+	* sudo.c:
+	validate() now takes a flag added -l
+	[a4f7bb97fe54]
+
+	* parse.yacc:
+	added support for -l
+	[e7a9b10b0ad3]
+
+	* parse.c:
+	validate() now takes a flag that says whether or not to check the
+	command
+	[9e1e67f4e281]
+
+1995-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	now deals with Argv == 1
+	[0acb637ab635]
+
+	* sudo.man:
+	added -p option
+	[e60382fc0561]
+
+	* sudo.c:
+	added prompt support reworked parse_args()
+	[2f605267ed4a]
+
+	* sudo.h:
+	added prompt
+	[5ab021bdb419]
+
+	* options.h:
+	added PASSPROMPT
+	[614727ff44a2]
+
+	* check.c:
+	now use BUFSIZ as length of kerb password added kpass so pass is
+	always a char * now use prompt global when asking for a password
+	[76be09af784f]
+
+	* tgetpass.c:
+	now use BUFSIZ as _PASSWD_LEN if using kerberos
+	[1e907eed312b]
+
+	* OPTIONS:
+	added PASSPROMPT
+	[ddb2f405ce40]
+
+1995-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	only look for -lufc or -lcrypt if crypt() not in libc
+	[9717d315661f]
+
+	* check.c:
+	don't exit on kerb error, just warn if k_errno == KDC_PR_UNKNOWN
+	(unknown user) silently fail
+	[2b48693d4ee9]
+
+	* INSTALL:
+	added kerb4 note
+	[986e393f740c]
+
+	* tgetpass.c:
+	HAVE_KERBEROS -> HAVE_KERB4
+	[e438bfb5e6aa]
+
+	* check.c:
+	removed debugging printf
+	[1cf9f5cbffa5]
+
+	* configure.in:
+	KERBEROS -> KERB4 added checks for setreuid & setresuid
+	[01e9945beb1e]
+
+	* config.h.in:
+	HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and HAVE_SETRESUID
+	[0e0bb5b8ac3e]
+
+	* compat.h:
+	added deif of UID_NO_CHANGE & GID_NO_CHANGE added setreuid emulation
+	with setresuid if applic
+	[9dae24c47696]
+
+	* check.c:
+	HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid chown() hack if
+	no setreuid() or a broken one
+	[1fca642bdb8e]
+
+1995-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added kerberos support
+	[da5639b9b8e7]
+
+	* config.h.in:
+	added HAVE_KERBEROS
+	[fcc5be550e65]
+
+	* tgetpass.c:
+	added KERBEROS support (long passwords)
+	[303ba6924dd2]
+
+	* check.c:
+	added kerberos support
+	[e40afe98fc1d]
+
+1995-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	added MODE_BACKGROUND
+	[9b483c932016]
+
+	* sudo.man:
+	escaped dashes added -b option
+	[62e84f1a7714]
+
+	* sudo.c:
+	added -b option
+	[7e78aaefeb95]
+
+	* check.c:
+	added crypt() for osf/1 3.x enhanced secuiry
+	[e9aa5abdb7d5]
+
+	* configure.in:
+	now check for -lcrypt
+	[5cb9c67e9fa2]
+
+	* interfaces.c:
+	added ENXIO like EADDRNOTAVAIL
+	[74223bb1ba75]
+
+1995-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now emulate getwd(), not getcwd()
+	[3e5439d9a5f4]
+
+	* sudo.c:
+	getcwd() -> getwd()
+	[6392a96a658e]
+
+	* getwd.c:
+	getcwd -> getwd
+	[1b0ab9bae11e]
+
+1995-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* ins_2001.h, ins_classic.h, ins_goons.h:
+	Initial revision
+	[86db60d8cf00]
+
+	* insults.h:
+	broke out insults into separate include files
+	[0a01993bd38a]
+
+	* OPTIONS, options.h:
+	added GOONS
+	[e283203c6515]
+
+	* Makefile.in:
+	added ins_2001.h ins_classic.h ins_goons.h
+	[2a39cd6a4cd2]
+
+	* Makefile.in, version.h:
+	++version
+	[05ebf4f5e41a]
+
+	* visudo.c:
+	moved signal handler setup to setup_signals()
+	[3dd976c04540]
+
+	* sudo.h:
+	added load_interfaces()
+	[af2d473b09e2]
+
+	* sudo.c:
+	moved load_interfaces to interfaces.c
+	[5c8c138e5d4c]
+
+	* parse.yacc:
+	added clearaliases
+	[aeb4ff301daa]
+
+	* OPTIONS, options.h:
+	added FAST_MATCH
+	[f49ea3d1b525]
+
+	* parse.lex:
+	now uses clearaliases variable
+	[a2dda415bf61]
+
+	* interfaces.c:
+	Initial revision
+	[a1990e3f5c69]
+
+	* Makefile.in:
+	added interfaces.[co]
+	[1e8e5984de97]
+
+	* testsudoers.c:
+	now uses ip addrs and netmasks via load_interfaces()
+	[54b8f7a6835e]
+
+	* sudo.c:
+	now remove IFS instead of setting to "sane" value
+	[ce7eec9f115e]
+
+1995-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.c:
+	added FAST_MATCH
+	[816d4f5fe81a]
+
+1995-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	sudo_goodpath.c-> goodpath.c
+	[a5072c4e1de2]
+
+	* sudo.c:
+	added Andy's new ISC changes
+	[caa6bbee358e]
+
+1995-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS:
+	added a sentence to SECURE_PATH info
+	[cad6e1569d15]
+
+	* BUGS:
+	added one
+	[4b35cf699a83]
+
+	* CHANGES:
+	updated
+	[5fded9dc62f0]
+
+	* RUNSON:
+	updated
+	[33cb993cfd39]
+
+1995-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* RUNSON:
+	updated for beta3
+	[a05dc6a91995]
+
+	* Makefile.in, version.h:
+	++version
+	[54aaf3fadc75]
+
+	* aclocal.m4:
+	sendmail is now looked for in /usr/ucblib
+	[231ac1a4662f]
+
+	* sudo.c:
+	fixed indentation
+	[fb137400c8c2]
+
+	* aclocal.m4:
+	fixed a typo
+	[e03f1acc468b]
+
+	* sudo.c:
+	updated ISC mods
+	[070290d4754b]
+
+	* configure.in:
+	added unixware case
+	[e90250bae0d9]
+
+	* check.c:
+	user_is_exempt is no longer hidden
+	[1a341765b8af]
+
+	* RUNSON:
+	updated
+	[a9c4898b26dd]
+
+	* aclocal.m4:
+	isc and riscos changes
+	[98b5d86585d1]
+
+	* OPTIONS:
+	added NOTE about new interaction of EXEMPTGROUP and SECURE_PATH
+	[e1ecc464ce4b]
+
+	* Makefile.in:
+	fixed a typo and added testsudoers stuff
+	[435d60e163dc]
+
+	* testsudoers.c:
+	Initial revision
+	[6ce14a448662]
+
+1995-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	applied fixed patch from Chris
+	[cd6144203d13]
+
+1995-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	fixed a typo
+	[34f8a54ba041]
+
+	* parse.yacc:
+	added a set of braces for bison
+	[f0e43b938914]
+
+	* parse.yacc:
+	merged in Chris' changes to dekludge the parser.
+	[82d6e373ab1c]
+
+	* logging.c:
+	send_mail() was calling find_path() which is wrong since find_path()
+	stores cmnd in a static var. Anyhow, it doesn't make much sense
+	since MAILER should always be fully qualified
+	[6eae6a0b8098]
+
+1995-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sample.sudoers:
+	added User_Alias stuff
+	[aaba8c8e918d]
+
+	* aclocal.m4:
+	SUDO_NEXT now looks for /usr/lib/NextStep/software_version
+	[52bd81f34b32]
+
+	* RUNSON:
+	added DEC UNIX 3.0 w/ gcc
+	[7daf570775b5]
+
+	* visudo.c:
+	Exit was being used in places where exit should be used
+	[6026a89c07ed]
+
+	* sudoers:
+	added "User alias specification"
+	[a487b6e234f8]
+
+	* parse.yacc:
+	fixed probs caused by making nslots and naliases a size_t
+	[0be919384f3f]
+
+	* RUNSON:
+	added KSR, upped rev to 1.3.1b2
+	[ce04ee6faadf]
+
+	* logging.c, parse.yacc:
+	1024 -> BUFSIZ
+	[cd6dda45fa11]
+
+	* parse.yacc:
+	void * -> VOID * naliases and nslots are now size_t to appease
+	lsearch on 64-bit machines
+	[bf2f807c0dc1]
+
+1995-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	did a bunch of things and added a bunch :-)
+	[42afd957b829]
+
+	* PORTING:
+	updated
+	[972f95c85776]
+
+	* visudo.man:
+	closer to BSD manpage style
+	[07ae88f50325]
+
+	* sudo.man:
+	closer to standard BSD man format
+	[372c28dcc135]
+
+	* compat.h, config.h.in, emul/search.h, insults.h, options.h,
+	pathnames.h.in, sudo.h, version.h:
+	added RCS id
+	[c0ec90b81002]
+
+	* sudo.h:
+	removed crufty #defines that are no longer used
+	[35e2b4b477f0]
+
+	* BUGS:
+	fixed a bug
+	[5bb3e1bee85e]
+
+	* sudo.man:
+	updated based on sudo changes
+	[e65de1cae438]
+
+	* parse.yacc:
+	now allow ALL keyword in User_Aliases now allow ALL keyword as well
+	as a NAME or ALIAS
+	[1fb31404dd0f]
+
+	* CHANGES:
+	updated
+	[b24018ac610b]
+
+	* sudo.c:
+	now sets SUDO_COMMAND and SUDO_GID envariables.
+	[e9d791557fb7]
+
+	* aclocal.m4:
+	fixed bug with full void impl check
+	[35715301023c]
+
+	* parse.yacc:
+	fixed User_Alias supoprt
+	[4c30dfbaaa07]
+
+	* parse.yacc:
+	added stubs for User_Alias support
+	[f4afbd247edf]
+
+	* sudo.c:
+	now sets removes # bogus interfaces from num_interfaces
+	[6f077fac9ab1]
+
+	* parse.lex:
+	added User_Alias support
+	[bc7997e5df85]
+
+1995-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	removed extraneous TODO
+	[bc87a3b14d6d]
+
+1995-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	ntwk_matches -> addr_matches
+	[475044e288b8]
+
+	* parse.yacc:
+	ntwk_matches -> addr_matches
+	[dd1f4093fd2d]
+
+	* parse.c:
+	ntwk_matches -> addr_matches now use inet_addr() not inet_network()
+	(which expects octet boundaries) fixes for OSF (sizeof(int) !=
+	sizeof(long))
+	[acd2f556940f]
+
+	* sudo.c:
+	took out debugging info
+	[044023063eca]
+
+	* aclocal.m4:
+	OS was being set to unknown before non-uname based host checks. This
+	caused no checks to happen since $OS was not zero-length.
+	[335a7267479d]
+
+	* sudo.c:
+	fixed loading of interfaces struct still has debugging info in
+	though
+	[2d1a18998c1e]
+
+	* parse.c:
+	fixed typo
+	[175674a3a9fa]
+
+1995-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	++version
+	[55d191b5daa3]
+
+	* version.h:
+	++
+	[d7d1f115696a]
+
+	* visudo.c:
+	removed extraneous extern decl of "top
+	[50355621047d]
+
+	* visudo.c:
+	now zeros "top"
+	[4e683210345b]
+
+	* parse.yacc:
+	removed parser_cleanup (no need for it now)
+	[afa59f222b6c]
+
+	* parse.lex:
+	now calls reset_aliases() directly
+	[3a23cbd60fc0]
+
+1995-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* OPTIONS:
+	added a sentence to SECURE_PATH description
+	[c5bf75b85af0]
+
+	* parse.c:
+	fixed my stupid bug where I used NAMLEN on something I wanted to
+	just get the name from. argh.
+	[111f460f6540]
+
+1995-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* lsearch.c:
+	fixed argument order of memmove() that i hosed when converting from
+	bcopy(). arghh.
+	[2f5336045c8b]
+
+	* Makefile.in:
+	finally fixed DISTFILES line
+	[a1b419e73a63]
+
+	* Makefile.in:
+	tabs -> spaces
+	[280fb03e5764]
+
+	* Makefile.in:
+	added missing files to DISTFILES
+	[991fc1cd2263]
+
+	* Makefile.in:
+	SUPPORTED -> RUNSON
+	[7580e65b05fb]
+
+1995-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	updated
+	[fe764a29c1cc]
+
+	* RUNSON:
+	updated for pl5b1 release
+	[aefc35bd2291]
+
+	* BUGS, TODO:
+	updated
+	[8f0ea249b687]
+
+	* check.c:
+	fixed bug where if you hit return at first sudo prompt it would
+	still log as a failure
+	[24539c854692]
+
+	* CHANGES:
+	updated
+	[251cc7b3ede4]
+
+	* aclocal.m4:
+	better test for bogus void * implementation
+	[efe23180cb88]
+
+	* logging.c:
+	added PASSWORDS_NOT_CORRECT
+	[bd12c73f83f7]
+
+	* check.c:
+	added PASSWORDS_NOT_CORRECT stuff]
+	[90de391a979f]
+
+	* sudo.h:
+	added PASSWORDS_NOT_CORRECT
+	[727fbeb76fc5]
+
+	* tgetpass.c:
+	moved pathnames.h
+	[4f910e5a8df7]
+
+	* sudo.c:
+	removed some unused vars and fixed up uid2str
+	[70e92c7f9076]
+
+	* putenv.c:
+	moved compat.h
+	[b271091586f6]
+
+	* getcwd.c, getwd.c:
+	added pathnames.h
+	[6f25218f133f]
+
+1995-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	fixed a typo I introduced in the last checkin :-(
+	[62c3af75c4fe]
+
+	* parse.lex:
+	can't have #ifdef's where N is defined so just do this the broken
+	way for AIX
+	[c5648a5594e4]
+
+	* parse.yacc:
+	better hack from Chris (but still a hack)
+	[6b6d8aed93f3]
+
+	* parse.lex:
+	stupid hack for broken aix lex
+	[efc3f9e5280e]
+
+	* tgetpass.c:
+	now includes compat.h 
+	[401822173f77]
+
+	* visudo.c:
+	now includes fcntl.h
+	[63865c2f8ac6]
+
+	* compat.h:
+	added FD_SET and FD_ZERO for 4.2BSD
+	[00c5597c0bb0]
+
+	* parse.yacc:
+	dirty hack to fix parser bug. i don't really like this but it works
+	for now...
+	[5b8bbdc81569]
+
+	* sudo.c:
+	uid2str is now static like the prototype says
+	[f2a97b5cb870]
+
+1995-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, SUPPORTED, TODO, TROUBLESHOOTING:
+	updated
+	[6f79c3e92716]
+
+	* RUNSON:
+	Initial revision
+	[12a09ef9e884]
+
+	* sudo.c:
+	check_sudoers now returns an error code and sudo calls inform_user
+	and log_error based on the return value.
+	[340eca188d9a]
+
+	* logging.c, sudo.h:
+	added entries for new errors
+	[6050d8542e1f]
+
+	* parse.c:
+	now set uid to that of SUDOERS_OWNER while parsing sudoers file
+	[3683c42bc9b0]
+
+	* Makefile.in:
+	took out testsudoers 
+	[65317d49db48]
+
+	* sudo.c:
+	now explicately checks that it is setuid root
+	[2fe1be60ef6a]
+
+	* sudo.c:
+	If a user has no passwd entry sudo would segv (writing to a garbage
+	pointer). Now allocate space before writing :-)
+	[d08e7eb5e5ef]
+
+	* configure.in:
+	reordered AC_CHECK_FUNCS
+	[4c82e56c6f4f]
+
+	* config.h.in:
+	fixed memset macro
+	[77ede6b714ab]
+
+	* tgetpass.c, visudo.c:
+	bzero -> memset
+	[1a005bb322c8]
+
+	* logging.c:
+	bzero -> memset when a parse error is logged the line number of the
+	error is now logged too
+	[a42d68047723]
+
+	* INSTALL:
+	added Sunos to blurb about c2 security
+	[af750a1d131e]
+
+	* configure.in:
+	added a SUN4 define for C2 security
+	[6ad5b23a3eb0]
+
+	* config.h.in:
+	bcopy -> memmove bzero -> memset
+	[5494460c8464]
+
+	* lsearch.c:
+	bcopy -> memmove char * -> VOID *
+	[a15f5c316e16]
+
+	* check.c:
+	added support for sunos with C2 security
+	[03fea5bb21e6]
+
+	* OPTIONS, options.h:
+	reordered
+	[1686265af3e1]
+
+	* pathnames.h.in:
+	_PATH_SUDO_LOGFILE now set based on configure
+	[5867b58e4a04]
+
+	* configure.in:
+	added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
+	[1984d9fd1b5c]
+
+	* config.h.in:
+	added _SUDO_PATH_LOGFILE
+	[dd3eebe62580]
+
+	* aclocal.m4:
+	added SUDO_LOGFILE to find where to put sudo.log added
+	SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h too) added
+	SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
+	[c589a515a99a]
+
+1995-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TROUBLESHOOTING:
+	Initial revision
+	[f42f1baba3a8]
+
+	* sudo.c:
+	now do set_perms(PERM_ROOT) before the getpwuid() in load_global()
+	to work around a problem is trusted hpux shadow passwords. yuck.
+	[ae1f13b54687]
+
+	* parse.yacc:
+	backed out a change in malloc/realloc
+	[ab868db0ad69]
+
+	* parse.yacc:
+	now include stdlib.h
+	[957eef0631eb]
+
+	* visudo.c:
+	now do an freopen() of the stmp file so that yyin will always point
+	to the same thing. This is important for flex since we are doing a
+	YY_NEWFILE
+	[44558922fd3e]
+
+	* parse.yacc:
+	replaced yywrap() with parser_cleanup() since yywrap() needs to be
+	in parse.lex to be able to use YY_NEW_FILE. sigh.
+	[12dd09921074]
+
+	* parse.lex:
+	now have a rule that matches anything that doesn't match an
+	explicite rule. well, you know what i mean (. matches anything not
+	yet matched). However, this means that there is input still queued
+	up so we need to do a YY_NEW_FILE; in yywrap. So, yywrap has moved
+	into parse.lex and it calls parser_cleanup() which is most of the
+	old yywrap() sigh.
+	[7f4042bc48d6]
+
+	* SUPPORTED:
+	no longer used
+	[8f220be4da94]
+
+	* getcwd.c, getwd.c:
+	moved compat.h to be the last include file
+	[9f3a65e2d485]
+
+	* parse.yacc:
+	fixed type of aliascmp() args
+	[1c27eb989bdf]
+
+	* find_path.c:
+	NULL -> '\0'
+	[5c8d8cf1692e]
+
+	* parse.yacc:
+	added casts to lfind and lsearch args for irix
+	[61027ddeecf8]
+
+	* Makefile.in:
+	bsdinstall -> install-sh
+	[61de6612c5a5]
+
+	* INSTALL:
+	added info about make realclean
+	[29c6324d727f]
+
+	* Makefile.in:
+	updated VERSION added dependencies for visudo.cat
+	[09077d7229d4]
+
+	* version.h:
+	-> pl5b1
+	[5d21c7ad1a41]
+
+	* sudo.c:
+	took out -l
+	[fc1478d81b38]
+
+	* Makefile.in:
+	now there is a real visudo.man and visudo.cat
+	[58aeac43a6dd]
+
+	* sudo.man:
+	took out visudo stuff
+	[4a6ac4393343]
+
+	* visudo.man:
+	Initial revision
+	[cba348843db8]
+
+	* parse.c, parse.lex, parse.yacc:
+	updated copyright
+	[ffa16b70944a]
+
+	* README:
+	updated for pl5
+	[a26e423e9e5f]
+
+	* sudo.man:
+	updated Nieusma & Hieb email addresses
+	[f0083e71989d]
+
+	* INSTALL:
+	updated to include options.h and OPTIONS
+	[ee59e2b76c94]
+
+	* CHANGES, TODO:
+	updated
+	[51e011ad5220]
+
+	* BUGS:
+	eliminated bug #1 (yay)
+	[e7e88515494e]
+
+	* configure.in:
+	sunos no longer gets linked statically
+	[2e5b3ff3108f]
+
+1995-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	prototype now uses __P()
+	[68ecdcab4c70]
+
+	* parse.lex:
+	make fill() non-ansi
+	[d6509972260b]
+
+	* parse.c:
+	made -v (validate) work
+	[13c9d520638c]
+
+	* logging.c:
+	now gives host
+	[f04859cdba5a]
+
+	* find_path.c:
+	don't check for execute/statable if fq or relative path given
+	[4bbe851f3973]
+
+	* parse.c:
+	added a cast
+	[345c308f72f3]
+
+	* visudo.c:
+	now include ctype.h for islower and tolower macros
+	[582c0aa332d5]
+
+	* goodpath.c:
+	moved _S_IFMT & _S_ISREG to compat.h
+	[828e4ca4e7b4]
+
+	* sudo.c:
+	moved a set of parens
+	[5783474ecf37]
+
+	* strdup.c:
+	now include compat.h
+	[75e2036b94af]
+
+	* emul/search.h:
+	void * -> VOID *
+	[cedcfaf04161]
+
+	* parse.yacc:
+	now cast malloc & realloc return vals added search for HAVE_LSEARCH
+	now use strcmp if no strcasecmp available
+	[d6a42bc3d4ae]
+
+	* lsearch.c:
+	void * -> VOID *
+	[886adc44f607]
+
+	* config.h.in:
+	removed HAVE_FLEX added VOID added HAVE_DIRENT_H, HAVE_SYS_NDIR_H,
+	HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
+	[3b50d7fb4349]
+
+	* compat.h:
+	added _S_IFMT, _S_IFREG, and S_ISREG
+	[73d506c7d53c]
+
+	* aclocal.m4:
+	took out SUDO_PROG_INSTALL 1.x to 2.x changes added echo and results
+	to most SUDO_* macros
+	[8442155f5936]
+
+	* Makefile.in:
+	no more -I.
+	[63462f195bd4]
+
+	* configure.in:
+	various 1.x ro 2.x autoconf changes now check for strcasecmp now use
+	AC_INSTALL_PROG instead of custom one added check for fully woorking
+	void implementation
+	[5ac6b6e6230f]
+
+	* Makefile.in:
+	added lsearch & search.h visudo links into $(LIBOBJS)
+	[bc119cda4598]
+
+	* aclocal.m4:
+	partial 1.x to 2.x changes added SUDO_FULL_VOID
+	[1194d01fa5c5]
+
+	* visudo.c:
+	whatnow_help was prototyped to be static be was not declared as such
+	[0f85489dd426]
+
+	* configure.in:
+	autoconf 2.x changes took out HAVE_FLEX (no longer used) added check
+	for dirent/dir/ndir.h
+	[7408f3854948]
+
+	* parse.c:
+	now use groovy gnu autoconf macro AC_HEADER_DIRENT
+	[e465db9f5dfa]
+
+	* getcwd.c, getwd.c:
+	MAXPATHLEN -> MAXPATHLEN+1
+	[714d87424e21]
+
+	* emul/search.h, lsearch.c:
+	Initial revision
+	[55d79482c535]
+
+1995-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	eliminated bison warnings
+	[61ca0a96da22]
+
+	* parse.lex:
+	added missing case
+	[6be0f849747c]
+
+	* visudo.c:
+	now iincludes signal.h
+	[221e0fcc144f]
+
+	* parse.yacc:
+	only clear data structures on a parse error
+	[7b1c0f1a4527]
+
+	* visudo.c:
+	whatnow() now gives help on invalid input
+	[e5a4cd88c587]
+
+	* visudo.c:
+	added a whatnow() function (sort of like mh)
+	[932d9b145f1c]
+
+	* parse.yacc:
+	kill_aliases -> reset_aliases yywrap() now cleans up by calling
+	reset_aliases() and clearing top took reset stuff out of yyerror()
+	since it doesn't beling there (and doesn't work anyway). errorlineno
+	is now initially set to -1 so we can set it to the first error that
+	occurrs (it was getting set to the last)
+	[2f71f95a974c]
+
+	* parse.lex:
+	added a void cast
+	[18ae6042dce4]
+
+	* visudo.c:
+	rewrote from scratch based on 4.3BSD vipw.c
+	[2f6814f18576]
+
+1995-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c, sudo.h:
+	removed ocmnd
+	[a31735f41ad4]
+
+	* sudo.h:
+	no more sudo_realpath() and find_path() changed params
+	[8e85c3b39159]
+
+	* sudo.c:
+	find_path() changed since no more realpath()
+	[b25366c7f2ee]
+
+	* parse.yacc:
+	on error, errorlineno is set to the line where the error occurred
+	added kill_aliases() to free the aliases struct now clean up in
+	yyerror() so we can reparse cleanly
+	[2342f578c27a]
+
+	* options.h, parse.c:
+	no more USE_REALPATH
+	[cfc59babeaff]
+
+	* logging.c:
+	changed to use new find_path()
+	[91c7a38e7751]
+
+	* find_path.c:
+	removed all the realpath() stuff
+	[cc21a43a8562]
+
+	* Makefile.in:
+	sudo_realpath.c -> sudo_goodpath.c
+	[03a9b1ddec2f]
+
+	* visudo.c:
+	now works correctly with utk parser
+	[08aa554a0ce8]
+
+	* goodpath.c:
+	Initial revision
+	[1ea607e1ffb2]
+
+	* sudo_realpath.c:
+	eliminated a compiler warning
+	[198bcccc55b6]
+
+	* sudo.c:
+	elinated compiler warning
+	[e2384f9a878b]
+
+	* sudo_realpath.c:
+	added sudo_goodpath()
+	[43878c4cc540]
+
+	* sudo.h:
+	added prototype for sudo_goodpath
+	[23e8627a2265]
+
+	* parse.c:
+	added support for /sys/dir.h
+	[eca897087741]
+
+	* options.h:
+	USE_REALPATH turned off
+	[620ac8b63d85]
+
+	* find_path.c:
+	added calls to sudo_goodpath()
+	[ad170904fbcd]
+
+	* configure.in:
+	added check for dirent.h
+	[7964a8c26855]
+
+	* config.h.in:
+	added HAVE_DIRENT_H
+	[1f785fec7e19]
+
+	* configure.in:
+	added in linux shadow pass stuff 
+	[e585a5785f50]
+
+1995-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	added back host, user, cmnd, parse_error
+	[0ec19f3d64f4]
+
+	* visudo.c:
+	added in utk changes plus some minor cosmetic changes
+	[c5c1921c8a58]
+
+	* sudo.c, sudo_realpath.c:
+	added void casts for printf's
+	[9c6ff11c0082]
+
+	* options.h:
+	added a define of USE_REALPATH
+	[db3711c9efc5]
+
+	* configure.in:
+	there is no more visudoers/Makefile
+	[36e1bc1f78d0]
+
+	* Makefile.in:
+	added in utk changes (visudo is now built from the toplevel)
+	[76203d4b345d]
+
+	* find_path.c:
+	added (void) casts to printf's
+	[dd5cb1e060ac]
+
+	* parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c:
+	merged in utk changes
+	[35563307fd8e]
+
+1995-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	now check to see that what we are trying to run is a file (or a link
+	to a file, we do a stat(2) so there is no diff)
+	[05889c4bcace]
+
+1995-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updated
+	[3e8047bb26fb]
+
+	* Makefile.in:
+	aclocal.m4 -> acsite.m4 make realclean updated for new autoconf 
+	[0bdbaa7c4c7d]
+
+	* sudo.man:
+	added myself as maintainer
+	[77a9d75aab84]
+
+1995-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	changed setegid -> setgid
+	[7f4788d73b6f]
+
+1995-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	fixed the test for irix 5.x to skip bad libs
+	[bfef896de013]
+
+	* aclocal.m4:
+	now initialize OS and OSREV
+	[cc302756e440]
+
+1995-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	irix5 changes
+	[ac985b23f5f2]
+
+	* configure.in:
+	AC_WITH -> AC_ARG_WITH changes other misc changes for autoconf 2.1
+	compatibility
+	[0cf8c92a06d7]
+
+1995-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	use YY_NEW_FILE, not yyrestart since OSF flex doesn't do the righ
+	thing wrt yyrestart (grrrr)
+	[18e8eabfbb82]
+
+1995-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	added visudoers/compat.h to DISTFILES
+	[db23b574b034]
+
+	* configure.in:
+	fixed an echo
+	[7cbc0462b89d]
+
+	* sudo.c:
+	added ocmnd declaration adjusted for find_path()'s new parameters
+	[d929cd156474]
+
+	* sudo.h:
+	added ocmnd extern adjusted find_path() prototype
+	[e0004daf5d3c]
+
+	* parse.c:
+	cmndcmp() now takes 3 arguments and checks against the qualified as
+	well as the unqualified pathname. more code that should use
+	cmndcmp() but did not, now does
+	[6f70a8c17bee]
+
+	* options.h:
+	added to a comment
+	[7a78680426b2]
+
+	* logging.c:
+	changed to use new find_path() parameter passing
+	[840981d30db4]
+
+	* find_path.c:
+	find_path() now takes 2 copyout parameters (one for the qualified
+	pathname and one for the unqualified pathname). The third parameter
+	may be NULL.
+	[851503b005e9]
+
+	* configure.in:
+	no longer munge pathnames.h
+	[427d8796c5a9]
+
+	* pathnames.h.in:
+	changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h)
+	as a result, pathnames.h does not need to be run through configure
+	and the user can override the configured values easily.
+	[2e378f2ebe88]
+
+	* config.h.in:
+	added _SUDO_PATH_* entries
+	[0857de7cebab]
+
+	* aclocal.m4:
+	_PATH* -> _SUDO_PATH_*
+	[7601193f56cc]
+
+	* Makefile.in:
+	updated DISTFILES and HDRS .o's now depend on config.h
+	[39d8601965cf]
+
+1995-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* compat.h:
+	removed extraneous #endif
+	[27d4c5f2ce7e]
+
+	* aclocal.m4:
+	added SUDO_PROG_MV
+	[76dda3bdd816]
+
+	* configure.in:
+	added SUDO_PROG_MV added riscos and isc os types took out
+	-DSHORT_MESSAGE from --with-csops since it is now the default
+	[68c206ad976e]
+
+	* sudo.c:
+	move the include of id.h to compat.h now includes options.h
+	[45a1eaafb3a8]
+
+	* sudo.h:
+	moved compatibility #defines to compat.h
+	[0eee27057698]
+
+	* pathnames.h.in:
+	added _PATH_MV
+	[e830797ab320]
+
+	* config.h.in:
+	move __P to compat.h
+	[188e12e0ba93]
+
+	* getcwd.c, getwd.c, putenv.c:
+	now includes compat.h
+	[c72cb6d73981]
+
+	* compat.h:
+	Initial revision
+	[d4d2f359ae03]
+
+1995-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	pull user-configurable stuff out and put in options.h
+	[ef929467b070]
+
+1995-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex, parse.yacc, visudo.c:
+	now includes options.h
+	[e36d7c82add1]
+
+	* check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
+	sudo_setenv.c:
+	now includes options.h
+	[f186ba03de07]
+
+	* Makefile.in:
+	added visudoers/options.h
+	[e5350c476494]
+
+	* OPTIONS, options.h:
+	Initial revision
+	[9b6b5001e318]
+
+	* Makefile.in:
+	added OPTIONS and options.h
+	[25448341e16a]
+
+	* logging.c:
+	changed #ifdef's to use LOGGING and SLOG_SYSLOG/SLOG_FILE
+	[5dd6385dd1d3]
+
+	* check.c, sudo.h:
+	changed PASSWORD_TIMEOUT to minutes
+	[0ec6aab98738]
+
+1994-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	now only do Editor +line_num if line_num != 0
+	[b69f04b5e3c7]
+
+1994-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	now use mv if rename(2) fails
+	[83210dca1bab]
+
+	* BUGS:
+	added a visudo bug
+	[d61a806f9aa7]
+
+	* check.c:
+	expanded comment
+	[641f2cba94cb]
+
+1994-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	fixed user_is_exempt to return 0 if EXEMPTGROUP is not set
+	[7a11135039a8]
+
+1994-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	added mips & isc support
+	[e258dc053119]
+
+	* parse.c:
+	added support for non-root owned sudoers file
+	[fea07e65a0fc]
+
+	* check.c:
+	added exempt group support
+	[928fb4bd9ad5]
+
+	* sudo.h:
+	added set_perms() support added SUDOERS_OWNER so can have non-root
+	own sudoers file added exempt group support added isc support
+	[61c578d31fc1]
+
+	* visudo.c:
+	now copy sudoers to temp file via read/write (not stdio) now chown
+	new sudoers file to SUDOERS_OWNER
+	[a5176c59df70]
+
+1994-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added skey support
+	[35a8d2fabdb7]
+
+	* sudo_realpath.c:
+	be_* -> setperms()
+	[a1631d686e1c]
+
+	* sudo.h:
+	fixed typo added set_perms support added skey support added
+	seteuid()/setegid() emulation for AIX
+	[c0c8d6771406]
+
+	* sudo.c:
+	be_* -> setperms() now check to make sure sudoers file is owned by
+	root nread/write by only root
+	[13ab1e261f1a]
+
+	* logging.c, parse.c:
+	be_* -> setperms()
+	[21499d845c8f]
+
+	* check.c:
+	be_* -> set_perms() added skey support
+	[df51b56871c1]
+
+1994-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	++version
+	[3c1abbe4e43c]
+
+	* version.h:
+	++
+	[1d2f9b540a95]
+
+1994-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now sets IFS
+	[eabbb41b9f08]
+
+	* insults.h:
+	fixed typo
+	[c7997f19216e]
+
+1994-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	added HAVE_SKEY
+	[da948ec4186b]
+
+1994-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updated
+	[f4b55ab007ea]
+
+	* Makefile.in:
+	++version
+	[0489068b8c95]
+
+	* version.h:
+	++
+	[d189faedf423]
+
+	* sudo.c:
+	now bail if ARgv[1] > MAXPATHLEN
+	[0cea8ecc9dc2]
+
+	* configure.in:
+	added function check for tcgetattr(3)
+	[e03289b22c2f]
+
+	* config.h.in:
+	only define HAVE_TERMIOS_H if you have tcgetattr(3)
+	[757eab83d1a2]
+
+	* config.h.in:
+	added check for tcgetattr
+	[c5ae92715930]
+
+1994-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updated
+	[cbc419883108]
+
+1994-09-22  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	now only include unistd.h for linux
+	[e9adeab95ef0]
+
+1994-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	added visudo.8 generation
+	[d6a3f0f887f8]
+
+	* configure.in:
+	added -Wl,-bI:./aixcrypt.exp to aix flags
+	[72594a21edcf]
+
+1994-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS:
+	added one
+	[9993a349e096]
+
+	* CHANGES:
+	updated
+	[297b31ec4cdd]
+
+	* README:
+	added mailing list info
+	[10372f94a2b2]
+
+	* parse.yacc:
+	now use sudolineno instead of yylineno fixed bison warnings
+	[25a83e62057b]
+
+	* configure.in:
+	now use -no_library_replacement for osf don't make a static binary
+	for hpux >= 9.0
+	[1fa7b892f1a3]
+
+	* tgetpass.c:
+	added string.h/strings.h inclusion
+	[71faa98fc0a1]
+
+	* config.h.in:
+	added ssize_t def
+	[406284bd1ac0]
+
+	* parse.lex:
+	added inclusion of string.h/strings.h
+	[6985b1df5d09]
+
+	* aclocal.m4:
+	fixed uname | sed (needed to quote the '[')
+	[4cd2d3415c1a]
+
+	* parse.lex:
+	replaced yylineno with sudolineno fixed bison syntax errors
+	[0bd31a5fab26]
+
+	* visudo.c:
+	changed yylineno to sudolineno since yylineno cannot be counted
+	upon.
+	[38c30104d0ae]
+
+	* TODO:
+	updated
+	[5d4746f1a752]
+
+	* parse.c:
+	added code to support command listings
+	[030172e133fd]
+
+	* sudo.c:
+	added code for -l flag
+	[801dbbc82778]
+
+	* sudo.man:
+	fixed typo added info for -l flag
+	[8916ca945d65]
+
+	* configure.in:
+	AC_SSIZE_T -> SUDO_SSIZE_T
+	[c61f7f47013f]
+
+	* aclocal.m4:
+	added SUDO_SSIZE_T
+	[0ccdb77be84d]
+
+	* sudo.h:
+	added MODE_LIST
+	[9b2bd844c76c]
+
+	* configure.in:
+	added AC_SSIZE_T
+	[35cca208f9b5]
+
+	* find_path.c, sudo_realpath.c:
+	readlink() is now declared as returning ssize~_t
+	[0640a08d1407]
+
+	* configure.in:
+	added -laud for OSF c2
+	[b7539c905efc]
+
+1994-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, visudo.c:
+	changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu
+	[067fd9bcb5e1]
+
+	* config.h.in, parse.lex, parse.yacc, pathnames.h.in:
+	changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu
+	[fc46e7c7110a]
+
+	* check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
+	parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
+	sudo_setenv.c, tgetpass.c, version.h:
+	changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
+	[d1d4fbc53a98]
+
+1994-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in:
+	++version
+	[b7066d97633f]
+
+	* version.h:
+	++
+	[65ec69d88110]
+
+	* logging.c:
+	added host to alertmail messages
+	[d973c19ce777]
+
+	* CHANGES, TODO:
+	udpated
+	[5a65eb16faeb]
+
+	* logging.c:
+	fixed logging problem where mail would not say which user it was
+	[35723edcc5d2]
+
+	* configure.in:
+	added -laud for gcc if osf & c2
+	[18f1e0ae5548]
+
+	* check.c:
+	moved set_auth_parameters to sudo.c
+	[d23112fe01db]
+
+	* sudo.c:
+	added set_auth_parameters for osf
+	[eb70f65214ac]
+
+	* configure.in:
+	cleaned up -static stuff
+	[01e9575f0422]
+
+	* Makefile.in:
+	++version
+	[7ac3bff5c770]
+
+	* version.h:
+	++
+	[10a4ff478469]
+
+	* sudo.c:
+	changed setenv() to sudo_setenv()
+	[40a78abb9946]
+
+	* check.c:
+	fixed osf problem
+	[3d69b118efb8]
+
+	* configure.in:
+	added OSF C2 stuff
+	[38cff3ad4093]
+
+	* CHANGES:
+	updated
+	[cd341dd0581a]
+
+	* check.c:
+	added osf auth support & removed some extra spaces
+	[a448cdd81514]
+
+	* INSTALL, SUPPORTED:
+	added osf C2 stuff
+	[f70484796146]
+
+1994-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	added 2 suggestions
+	[695fbdbd86e6]
+
+	* Makefile.in:
+	removed README.v1.3.1 and added VERSION stuff
+	[f69403eb04c6]
+
+	* version.h:
+	pl1
+	[21580c0f8cb1]
+
+1994-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* version.h:
+	1.3.1final
+	[630114970298]
+
+	* Makefile.in:
+	added HISTORY
+	[901bff251614]
+
+	* sudo.man:
+	mention HISTPRY file
+	[86dbcfd4326e]
+
+	* sudo.c:
+	use sizeof instead of a constant in 1 place
+	[d819604c68ca]
+
+	* parse.yacc:
+	added unistd.h
+	[6f9500f9fe7e]
+
+	* parse.lex:
+	added unistd.h
+	[468b81a276eb]
+
+	* README:
+	udpated
+	[7e275618923a]
+
+	* HISTORY:
+	Initial revision
+	[5db1b0a3939b]
+
+1994-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* version.h:
+	++
+	[7dfbb4a810bb] [SUDO_1_3_1]
+
+	* CHANGES:
+	updated
+	[7820ee610bf8]
+
+	* sudo_setenv.c:
+	added unistd.h include
+	[30cf2b654525]
+
+1994-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	added sys/time.h for AIX
+	[199fc8caf3a3]
+
+1994-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added check for -lsocket and sys/sockio.h
+	[f9abfbb31031]
+
+	* config.h.in:
+	took out libshadow check and added in sys/sockio.h check
+	[0c4b0393ac80]
+
+	* sudo.c:
+	now include sockio.h instead of ioctl.h if it exists "sudo -" now
+	gets a better error message
+	[53041bea5483]
+
+	* sample.sudoers:
+	now has a dir and subnet entry
+	[56b820f65438]
+
+1994-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	removed if_ether.h
+	[b4f64507493e]
+
+	* TODO:
+	added an item
+	[ea2a1bb6922a]
+
+	* sudo.man:
+	added network and ip addresses to man page
+	[01c85016511f]
+
+	* sudo.c:
+	no error if can't get interfaces or netmask since networking may not
+	be in the kernel.
+	[50b8890e2134]
+
+	* parse.c:
+	nwo check for interfaces == NULL
+	[dc1b3eef0db2]
+
+	* parse.c:
+	fixed a bug that caused directory specs in a Cmnd_Alias to fail if
+	the last entry in the spec failed (ie: it was only looking at the
+	last entry). CLeaned things up by adding the cmndcmp() function--all
+	neat & tidy
+	[007e93578e5e]
+
+	* CHANGES:
+	added one
+	[40e8a2cef497]
+
+1994-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now do two passes to skip bogus interfaces (lo0, etc)
+	[465e30aecaf7]
+
+	* parse.lex, parse.yacc, visudo.c:
+	added include of netinet/in.h
+	[11e3816ed362]
+
+	* logging.c, sudo_realpath.c, sudo_setenv.c:
+	added ninclude of netinet/in.h
+	[daccfa40fe1e]
+
+	* check.c, find_path.c, getcwd.c, getwd.c:
+	added include of netinet/in.h
+	[0222f95e06ad]
+
+	* version.h:
+	++
+	[d6b0cfa35a38]
+
+	* sudo.h:
+	added interfaces global
+	[ba52fa8ad75e]
+
+	* parse.c:
+	now uses new interfaces global
+	[17473ad5ecba]
+
+	* sudo.c:
+	now ip addresses are gleaned fw/o dns
+	[8828bb2007e0]
+
+1994-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	added load_ip_addrs() to load the ip_addrs global var
+	[60c825f04238]
+
+	* parse.c:
+	added hostcmp() to compare hostnames, ip addrs, and network addrs
+	[ab0e40e37537]
+
+	* sudo.h:
+	added ip_addrs def added load_ip_addrs prototype
+	[c41c565d0777]
+
+1994-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updated
+	[2a128dbe9bcb]
+
+	* Makefile.in:
+	removed multiple entries in DISTFILES
+	[2490f4f371e6]
+
+	* visudo.c:
+	ansified the !STDC_HEADERS decls
+	[646ba06d17ae]
+
+	* find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c:
+	don't do malloc decl if gnuc
+	[f1bad1925f98]
+
+	* sudo.c:
+	can't use getopt(3) since it munges args to the command to be run as
+	root don't do malloc decl if gnuc
+	[38e78f6da14e]
+
+	* find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
+	sudo_realpath.c, sudo_setenv.c:
+	ansi-fied !STDC_HEADER function prottypes
+	[51d8cad89976]
+
+	* getcwd.c, getwd.c:
+	added missing paren
+	[6a1fae70e27e]
+
+	* Makefile.in:
+	added putenv.c to DISTFILES
+	[a5e4523eabbb]
+
+	* sudo_setenv.c:
+	added params to func decls when STDC_HEADERS is not defined now can
+	count on putenv() being there
+	[fd587796189b]
+
+	* sudo_realpath.c:
+	took out errno decl since sudo.h does it for us fixed up a next cc
+	warning added params to func decls when STDC_HEADERS is not defined
+	[70fa5152ace6]
+
+	* sudo.h:
+	took out environ extern added local declaratio of putenv() if local
+	version is needed
+	[a84bae6c020d]
+
+	* find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c:
+	added params to func decls when STDC_HEADERS is not defined
+	[f406f0e47ac0]
+
+	* config.h.in:
+	added memcpy check check to see that ansi vs bsd macros are ntot
+	already defiend before defining (ie: avoid redefinition)
+	[879ae026e19f]
+
+	* configure.in:
+	removed fluff setenv check plus check w/ replace for putenv if also
+	no setenv
+	[e3c03814ad4b]
+
+	* putenv.c:
+	Initial revision
+	[3cff63e2dc1b]
+
+1994-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo_setenv.c:
+	Initial revision
+	[4d637631fa6b]
+
+	* sudo.h:
+	rm'd s realp[ath added sudo_realpath and sudo_setenv
+	[07ba001ff57e]
+
+	* sudo.c:
+	now use sudo_setenvc
+	[fd81e04d5ef0]
+
+	* configure.in:
+	added puteenv and setenv, removed realpath
+	[27bfacfb513b]
+
+	* config.h.in:
+	added putenv & setenv
+	[515f14eaf6e4]
+
+	* Makefile.in:
+	added sudo_setenv
+	[217731a717c5]
+
+	* version.h:
+	++
+	[eadb346d7129]
+
+1994-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added MAN_POSTINSTALL and /usr/share/catman for irix
+	[2a9496c1bdba]
+
+	* Makefile.in:
+	added MAN_POSTINSTALL
+	[89b0d4695529]
+
+	* CHANGES:
+	added
+	[48c021ba8a70]
+
+	* sudo.man:
+	added SUDO_* plus new options
+	[c0759cff5683]
+
+	* CHANGES:
+	added one
+	[7d44a3922d56]
+
+	* configure.in:
+	took out shadow lib
+	[07cf3de18701]
+
+	* TODO:
+	adde done
+	[a27a578e8afe]
+
+	* visudo.c:
+	now use yyrestart() if flex now reset yylineno to 0
+	[77d67ce0b677]
+
+	* Makefile.in:
+	support for installing a cat page instead of a man page if no nroff
+	[44671c0fc0fa]
+
+	* configure.in:
+	now defines HAVE_FLEX fixed up man stuff so that it looks for nroff
+	to determine whether or not to install a cat or man page
+	[0562d069c135]
+
+	* config.h.in:
+	added HAVE_FLEX
+	[c5490bae39d3]
+
+	* sudo.c:
+	not set ret to MODE_RUN initially
+	[88b4983c195b]
+
+	* find_path.c:
+	made command (and therefor cmnd dynamically allocated)
+	[95b82e32b6de]
+
+	* TODO:
+	did #8
+	[fb6f41308cdf]
+
+	* version.h:
+	++
+	[14112ecab5ae]
+
+	* sudo_realpath.c:
+	changed bufs from MAXPATHLEN to MAXPATHLEN+1
+	[0ad4f34e55c0]
+
+	* sudo.h:
+	added MODE_ removed validate_only and added remove_timestamp()
+	[dd5f99c57728]
+
+	* sudo.c:
+	usage() now takes an int (exit value) added parse_args() to parse
+	command line arguments moved call to find_path() from load_globals
+	to new function load_cmnd() removed validate_only global -- now use
+	the concept of "modes" added -h and -k options
+	[c3887090b28a]
+
+	* parse.c:
+	no longer use global validate_only now checks for command called
+	"validate" removed check for non-fully qualified commands since that
+	is done by find_path
+	[7d56fbd26369]
+
+	* find_path.c:
+	changed MAXPATHLEN r to MAXPATHLEN+1
+	[a86e8664d971]
+
+	* find_path.c:
+	fixed off by one error with MAXPATHLEN and fixed a comment
+	[58adcef8c981]
+
+	* check.c:
+	check_timestamp no longer runs reminder(), it is implied in the
+	return val added remove_timestamp()
+	[42ab5a77066f]
+
+	* CHANGES:
+	updated
+	[8e69b31df024]
+
+1994-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS:
+	fixed on
+	[bc34f1ac4280]
+
+	* sudo_realpath.c:
+	took out old_errno
+	[a168d00a0768]
+
+	* CHANGES:
+	updated
+	[04ba80922df7]
+
+1994-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	moved send_mail to after syslog
+	[4d4188087834]
+
+	* sudo.c:
+	now set SUDO_ envariables
+	[e5963f1bd3bb]
+
+1994-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* version.h:
+	++
+	[2a4534845d8c]
+
+	* sudo_realpath.c:
+	now print error if chdir fails
+	[0d75c8973d49]
+
+	* find_path.c:
+	removed an XXX
+	[e2077bcb35aa]
+
+1994-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updated
+	[e30a2b39b41a]
+
+	* configure.in:
+	no more static binaries for aix
+	[77a0beb6bd80]
+
+1994-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* INSTALL:
+	fixed typo
+	[ba5e0d391bc4]
+
+	* sudo_realpath.c:
+	took out stuff not needed for sudo now does be_root/be_user itself
+	now uses cwd global
+	[4f6d4641d793]
+
+	* version.h:
+	+=2
+	[97da927b297c]
+
+	* logging.c, sudo.c:
+	be_root/be_user is now down in sudo_realpath()
+	[f331662fa50f]
+
+	* logging.c, sudo.h:
+	now works with 4.2BSD syslog (blech)
+	[98e39d89dd36]
+
+	* find_path.c:
+	now use sudo_realpath()
+	[ab436a8ebd02]
+
+	* config.h.in:
+	took out realpth() stuff since we now use sudo_realpath()
+	[8de5ef9f6044]
+
+	* configure.in:
+	ultrix enhanced sec
+	[815fb7fffcc0]
+
+	* SUPPORTED:
+	added ultrix enhanced sec.
+	[6466766c8062]
+
+	* INSTALL:
+	updated
+	[d681a634297a]
+
+	* check.c:
+	ultrix enhanced security suport
+	[f10c8decbcc2]
+
+	* Makefile.in:
+	added sudo_realpath.c
+	[6b9bcd3be022]
+
+	* CHANGES:
+	updated
+	[2fa8084c1b53]
+
+	* tgetpass.c:
+	increased passwd len to 24 for c2 security
+	[ec64838be62d]
+
+	* BUGS:
+	updated BUGS
+	[ca00d8fec2ce]
+
+1994-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	now use user global var
+	[568769719013]
+
+	* configure.in:
+	took out -ls
+	[490a44180d5f]
+
+1994-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added AFS libs
+	[4fb40c8c01ba]
+
+	* sudo.h:
+	user is now a char * added epasswd
+	[27a919fafdfb]
+
+	* sudo.c:
+	added tzset() to load_globals added epasswd (encrypted password)
+	global made user dynamically allocated
+	[b99ef9bdbfce]
+
+	* configure.in:
+	added tzset test
+	[27592dd1214b]
+
+	* config.h.in:
+	added HAVE_TZSET
+	[b13f4213f3d0]
+
+	* check.c:
+	cleaned up encrypted passwd grab somewhat
+	[c8ba9a4db38a]
+
+	* configure.in:
+	fixed AFS typo
+	[2bfcbce237b6]
+
+	* INSTALL:
+	added AFS not
+	[80c67329393c]
+
+	* CHANGES:
+	udpated
+	[2f09ecdd5d31]
+
+	* logging.c:
+	can now log to both syslog & a file
+	[4d5c0932bc01]
+
+	* sudo.h:
+	added BOTH_LOGS
+	[623c539be824]
+
+	* CHANGES:
+	updated
+	[a1c7f5ef3616]
+
+	* configure.in:
+	--with-AFS
+	[28718d8f5daf]
+
+	* config.h.in:
+	added HAVE_AFS
+	[2e32bb4e63e4]
+
+	* check.c:
+	added afs changes
+	[fe4d0ff320a2]
+
+	* sudo.h:
+	removed AFS stuff :-)
+	[a40387e6fa27]
+
+	* tgetpass.c:
+	include sys/select for AIX
+	[f32c5a8f2c84]
+
+	* sudo.h:
+	added AFS
+	[da2ab3dd0348]
+
+	* version.h:
+	++
+	[452d4dfe25af]
+
+1994-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES, SUPPORTED:
+	updated
+	[e7dfe6f23a37]
+
+	* logging.c:
+	can now have MAILER undefined
+	[1d33b98b35e1]
+
+	* INSTALL:
+	new sub-note about MAILER
+	[d35c636a0574]
+
+	* sudo.man:
+	added blurb about password timeout
+	[70c2ee50de20]
+
+	* configure.in:
+	convex c2 changes
+	[367138a6232e]
+
+	* aclocal.m4:
+	took out duplicate define of _CONVEX_SOURCE
+	[647182138450]
+
+	* Makefile.in:
+	added OSDEFS
+	[7fdcd50602d1]
+
+	* config.h.in:
+	added spaces
+	[f2b8a05e48f3]
+
+	* tgetpass.c:
+	added a goto if fgets fails
+	[68a6586d9c45]
+
+	* sudo.h:
+	use __hpux not hpux convex c2 stuff
+	[5c377a8d5f34]
+
+	* sudo.c:
+	use __hpux not hpux
+	[9363bc0f9f9e]
+
+	* logging.c:
+	convex c2 stuff
+	[ea5630975ac4]
+
+	* config.h.in:
+	define ansi-ish cpp os defines if non-ansi are defined for hpux &
+	convex
+	[664f53a5e786]
+
+	* INSTALL:
+	updated to say we support sonvex C2
+	[5f2f8b87013e]
+
+	* check.c:
+	added convex c2 support
+	[9a665d4918fa]
+
+1994-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	no more ioctl never returns NULL uses fgets() and select() to
+	timeout
+	[b333e6d63e97]
+
+1994-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	things were testing -n "$GCC" instead of -z "$GCC"
+	[059a9b15ede2]
+
+	* tgetpass.c:
+	now works + uses fgets()
+	[353d7ebcb7bb]
+
+1994-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	select doesn't seem to recognize a single '\n' as input waiting so
+	we can;t use it, sigh.
+	[f76e3218b835]
+
+1994-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* PORTING:
+	updated tgetpass() blurb
+	[95baac736b49]
+
+	* configure.in:
+	added --with-getpass
+	[42ac0bdf58ed]
+
+	* Makefile.in:
+	added tgetpass stuff
+	[e2b38c635663]
+
+	* tgetpass.c:
+	now uses stdio
+	[36af8ff66e35]
+
+	* version.h:
+	++
+	[4e81c9db19bd]
+
+1994-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* PORTING:
+	updated ,.
+	[54f523770a05]
+
+	* config.h.in:
+	added USE_GETPASS && HAVE_C2_SECURITY
+	[86b355cb2953]
+
+	* configure.in:
+	fixed a test aded --with-C2 and --with-tgetpass
+	[abf6181588ef]
+
+	* check.c:
+	added hpux C2 shit
+	[20d4177ffa88]
+
+	* Makefile.in:
+	took out tgetpass.*
+	[cc82fd9984b4]
+
+	* INSTALL:
+	added C2 blurb
+	[1d2bfc35e4b6]
+
+1994-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	no termio(s) for ultrix since it is broken
+	[d3e82e835350]
+
+	* check.c:
+	added a space (yeah, anal)
+	[05e4b31ca68c]
+
+	* realpath.c, sudo_realpath.c:
+	fixed it (duh, rtfm)
+	[f13097cb8cb6]
+
+1994-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	took out bsd signal stuff for irix
+	[e179cdafc97a]
+
+	* visudo.c:
+	comments in #endif
+	[e3a629190f5e]
+
+	* configure.in:
+	don't define BSD signals for irix
+	[3ce57bffb7f0]
+
+	* TODO:
+	did some...
+	[274241cd0f74]
+
+	* CHANGES:
+	updated
+	[8f29fc755faf]
+
+	* realpath.c, sudo_realpath.c:
+	took out unneeded code by changing where a strings was terminated
+	[b5564d62d30e]
+
+1994-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* realpath.c, sudo_realpath.c:
+	fix bug where /dirname would return NULL
+	[b85f470daf26]
+
+	* sudo.h:
+	move __P to config.h
+	[7763c0ff3f28]
+
+	* getcwd.c, getwd.c, realpath.c, sudo_realpath.c:
+	added errno definition
+	[4cc9d2d9782a]
+
+	* config.h.in:
+	added __P
+	[ca06f5aa58f3]
+
+	* config.h.in:
+	added HAVE_FCHDIR
+	[206d714641e0]
+
+	* strdup.c:
+	now include stdio
+	[0d8458da0e1d]
+
+	* realpath.c, sudo_realpath.c:
+	now works if no fchdir
+	[e035911b6722]
+
+	* visudo.c:
+	define SA_RESETHAND to null if not defined
+	[afec03e84342]
+
+	* configure.in:
+	added check & replace
+	[c1a65481441c]
+
+	* configure.in:
+	took out -static for nextstep -- it doesn't work
+	[fa1a1a611743]
+
+1994-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	moved #endif to where it belongs
+	[07d3a8972097]
+
+	* SUPPORTED:
+	correction
+	[0c1ecba3e5a3]
+
+	* configure.in:
+	now checks for strdup realpath getcwd bzero
+	[f029a1917515]
+
+	* config.h.in:
+	emulate bzero
+	[d792352e44a3]
+
+	* visudo.c:
+	added posic signals
+	[2ed0005f90fc]
+
+	* tgetpass.c:
+	bzero cast
+	[6d91b1a1526f]
+
+	* logging.c:
+	added posix signals
+	[67ede9c22a05]
+
+	* configure.in:
+	removed BROKEN_GETPASS added new srcs toreplace missing functions
+	[cf44274bb1c8]
+
+	* config.h.in:
+	added posix signal stuff
+	[a3c1c98fe8ef]
+
+	* Makefile.in:
+	added new srcs
+	[b6a079afee47]
+
+	* visudo.c:
+	updated useag
+	[589ed091c44f]
+
+	* tgetpass.c:
+	now uses posix signals
+	[30f74964074f]
+
+	* PORTING:
+	updated sto reflect major changes
+	[bcfc309e017b]
+
+	* CHANGES, TODO:
+	updated
+	[23aacbd54278]
+
+	* tgetpass.c:
+	uses sysconf() if available
+	[a27431c90bab]
+
+	* sudo.h:
+	added PASSWORD_TIMEOUT + prototypes for new functions
+	[d7473c2f77c4]
+
+	* realpath.c, sudo_realpath.c:
+	for those w/o this in libc
+	[1e47aa7a9d46]
+
+	* getcwd.c, getwd.c:
+	Initial revision
+	[c90dea57a84f]
+
+	* find_path.c:
+	rewrote to use realpath(3) - nis now all my code
+	[d2c3bb8fb37d]
+
+	* config.h.in:
+	added HAVE_REALPATH
+	[02c10352a8c7]
+
+	* check.c:
+	now use tgetpass
+	[b5c021fc179f]
+
+	* Makefile.in:
+	added LIBOBJS use tgetpass.c
+	[230a7b3eeaa3]
+
+1994-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* tgetpass.c:
+	works now :-)
+	[025e7a3875ba]
+
+	* tgetpass.c:
+	Initial revision
+	[3316ab33b230]
+
+	* pathnames.h.in:
+	added /dev/tty
+	[29242585e53f]
+
+1994-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* version.h:
+	incremented
+	[f2e54b48280f]
+
+	* sudo.c:
+	always use getcwd
+	[c6068e8a4029]
+
+	* config.h.in:
+	added check for getwd
+	[ab1e102ad673]
+
+	* configure.in:
+	replace strdup & realpath & getcwd if missing
+	[b0eb14f2a1c3]
+
+	* pathnames.h.in:
+	added _PATH_PWD
+	[309d2388f69a]
+
+	* aclocal.m4:
+	added SUDO_PROG_PWD
+	[e16e85deb96c]
+
+	* strdup.c:
+	Initial revision
+	[810efdc15007]
+
+	* realpath.c, sudo_realpath.c:
+	Initial revision
+	[d85eee438e09]
+
+1994-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	quoted quare brackets
+	[d0e7ca111d98]
+
+1994-06-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	no need to strdup() a constant
+	[a8c44712df9a]
+
+	* CHANGES:
+	updated
+	[71364129cca0]
+
+	* sudo.man:
+	added validate
+	[0bb198095a26]
+
+	* sudo.c:
+	added -v to usage
+	[31ea71f11dbb]
+
+	* parse.c, sudo.c, sudo.h:
+	added validate_only stuff
+	[9bcd853d3c90]
+
+1994-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now finds sed
+	[6374bb0d3f28]
+
+	* aclocal.m4:
+	$OSREV is now an int
+	[ace0666d66cf]
+
+1994-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	added mtxinu to caser
+	[73a776887b16]
+
+	* sudo.h:
+	added EXEC macro
+	[2e8eb28b710a]
+
+	* sudo.c:
+	now use the EXEC nmacro now only do a gethostbyname() if FQDN is set
+	[56afb4f658d5]
+
+	* logging.c:
+	changed mail_argv[] def now use EXEC() macro
+	[ddcabd28edb1]
+
+	* check.c:
+	took out crypt() definition
+	[0e657724cf5f]
+
+	* version.h:
+	upped the version
+	[62c5d66119fc]
+
+	* configure.in:
+	always look for -lnsl
+	[d7b594f0313b]
+
+	* aclocal.m4:
+	added an echo
+	[1caae3491dc5]
+
+	* sudo.h:
+	SHORT_MESSAGE is now the default
+	[cfce35c3119a]
+
+	* config.h.in:
+	fixed typo
+	[6499a564bf75]
+
+	* configure.in:
+	added missing AC_DEFINE(SVR4) for solaris
+	[feef0b17b94f]
+
+	* sudo.man:
+	documented the -v flag
+	[a6429f2bc2cf]
+
+	* SUPPORTED:
+	updated
+	[088886e79540]
+
+	* check.c:
+	proto-ized crypt()
+	[801e4ff5b121]
+
+	* config.h.in:
+	added LIBSHADOW undef
+	[8df588e9ee2b]
+
+	* configure.in:
+	nwo set OS to be lowercase
+	[561ebed833e4]
+
+1994-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now use SUDO_OSTYPE to set $OS
+	[0e60aee23098]
+
+	* aclocal.m4:
+	now use uname to determine os
+	[99705e58d400]
+
+	* visudo.c:
+	added prototypes & moved sig handler around
+	[1f0bc8d23b51]
+
+	* sudo.h:
+	added prototyppes
+	[be3935a2b163]
+
+	* check.c, logging.c, sudo.c:
+	added prototypes
+	[2079b4605ab8]
+
+	* parse.c:
+	added comment
+	[a34d147d8399]
+
+	* config.h.in:
+	nwo use _BSD_SIGNALS not _BSD_COMPAT
+	[63663195f047]
+
+	* aixcrypt.exp:
+	Initial revision
+	[890aed08357e]
+
+	* Makefile.in:
+	added aixcrypt.exp
+	[1005a183105f]
+
+	* parse.lex, parse.yacc:
+	moved config.h to top of includes
+	[9569c49aa5f3]
+
+1994-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	now don't bitch if get EACCESS (treat like EPERM)
+	[dbeffb638de4]
+
+	* visudo.c:
+	added -v flag and usage()
+	[4d44ed60ed75]
+
+	* version.h:
+	fixed a typo
+	[cf3f9347ae41]
+
+	* sudo.c:
+	cast Argv to a const for exec added -v flag
+	[d11b6efc0e45]
+
+	* logging.c:
+	mail_argv is now a const
+	[93bb5d90bb6f]
+
+	* configure.in:
+	only set RETSIGTYPE if it is not set already
+	[c97aac260b77]
+
+	* aclocal.m4:
+	now defines & STDC_HEADERS for Irix
+	[9c2b24ad1fc5]
+
+	* Makefile.in:
+	added version.h
+	[9f79e880229a]
+
+	* insults.h, sudo.h:
+	prevent multiple inclusion
+	[d68c8a9243ce]
+
+	* version.h:
+	Initial revision
+	[dbb39c5ef8d9]
+
+	* parse.lex, parse.yacc:
+	now includes config.h
+	[f117e036a56b]
+
+	* aclocal.m4:
+	now talks about sunos 4.x
+	[c9054aa92d4e]
+
+	* visudo.c:
+	calls to Exit now pass an arg
+	[a92104670551]
+
+1994-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	signal handler now takes an int argument
+	[26f480c41523]
+
+	* CHANGES:
+	updated
+	[8c166a9d796b]
+
+	* sudo.c:
+	ok, the getcwd() is now *really* done as the user
+	[ab86cf85134a]
+
+	* configure.in:
+	changed AIX STATIC_FLAGS
+	[b9c0a3ba5663]
+
+	* aclocal.m4:
+	solaris now defines SVR4
+	[c3e20cac96f5]
+
+	* sudo.h:
+	added cwd and fixed stupid core dump that makes no sense. sigh.
+	[7a9755436dbb]
+
+	* sudo.c:
+	moved getcwd stuff into load_globals
+	[ec2bc90df1f3]
+
+	* parse.c:
+	took out externs that are in suod.h
+	[93c4b3f856d7]
+
+	* logging.c:
+	moved cwd into load_globals
+	[050de754d228]
+
+	* find_path.c:
+	moved cwd stuff
+	[22f3f3b4c34d]
+
+	* Makefile.in:
+	fixed make distclean & realclean
+	[c9964d89bcef]
+
+	* TODO:
+	updated .,
+	[e513581ef0e3]
+
+	* CHANGES:
+	added solaris changes
+	[505d930daf27]
+
+	* aclocal.m4:
+	added solaris changes, need to rework
+	[33f20fb16c49]
+
+	* configure.in:
+	cleaned up for solaris
+	[2fb8cfa05d0f]
+
+	* logging.c:
+	reinstall reapchild signal handler for non-bsd signals
+	[3d1dc545113d]
+
+	* sudo.h:
+	took out getdtablesize() emulation for HP-UX (no longer needed)
+	[1fc83d170f34]
+
+	* sudo.c:
+	support for HAVE_SYSCONF
+	[50ca2a7a224a]
+
+	* visudo.c:
+	added <fcntl.h> for solaris & reorg'd the includes + minor prettying
+	up /
+	[0a570e826dd4]
+
+	* config.h.in:
+	added HAVE_SYSCONF
+	[2b9a9f3a4e94]
+
+1994-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now tells you what os you are running /.
+	[06c6332a895b]
+
+	* aclocal.m4:
+	took out extra ','
+	[e8c75ce59f4a]
+
+1994-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* config.h.in:
+	added _BSD_COMPAT
+	[73c5099806c2]
+
+	* aclocal.m4:
+	fixed for irix5
+	[1047d1f6c0eb]
+
+	* CHANGES:
+	updated
+	[1bc4969fee96]
+
+	* sudo.c:
+	uid seinitialized to -2
+	[8d7812b1878b]
+
+1994-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	now removes LIBPATH for AIX
+	[075392eb1dd9]
+
+1994-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* configure.in:
+	now uses ufc if it finds it
+	[ab6ce30a5958]
+
+1994-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	no longer define yyval & yylval since yacc does it
+	[09d250aea50a]
+
+	* parse.lex:
+	now defines yylval as extenr
+	[8ec2b88952bc]
+
+	* configure.in:
+	BROKEN_GETPASS is now an OPTION
+	[3714f4bb8312]
+
+	* config.h.in:
+	took out BROKEN_GETPASS
+	[9c4f6aa50137]
+
+	* Makefile.in:
+	took out big comment
+	[4c13cff0e556]
+
+	* README:
+	updated
+	[b8b9902b620d]
+
+	* Makefile.in:
+	took out README.beta
+	[ed2cd861e82b]
+
+	* SUPPORTED:
+	Initial revision
+	[2fffc51e6606]
+
+	* INSTALL:
+	now reference SUPPORTED .,
+	[d112c30be1f2]
+
+	* config.h.in:
+	now check for convex OR __convex__
+	[a0e5701a3069]
+
+	* aclocal.m4:
+	now check for convex or __convex__
+	[5dae2bfbe3bc]
+
+	* Makefile.in:
+	added dist target
+	[400a54de57db]
+
+	* aclocal.m4:
+	use __convex__
+	[58a19470ed0b]
+
+	* find_path.c:
+	now use _S_* stat stuff to be ansi-like
+	[28cce560e048]
+
+	* INSTALL:
+	updated for configure directions
+	[a034ccc7c30a]
+
+	* Makefile.in:
+	distclean now removes config.h and pathnames.h
+	[300f2349b4ab]
+
+	* CHANGES:
+	updated
+	[646f7e9430c1]
+
+	* TODO:
+	fixed typoe
+	[70fd6361b2bc]
+
+	* visudo.c:
+	updated version
+	[cf13d87d789f]
+
+	* Makefile.in:
+	updated version
+	[8c5dacc27a7a]
+
+	* config.h.in, pathnames.h.in:
+	added copyright header
+	[747ce3d3d6b7]
+
+	* check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
+	parse.yacc, sudo.c, sudo.h:
+	udpated version
+	[4751c39bad18]
+
+	* visudo.c:
+	udpated to use configure + pathnames.h
+	[d45dff76a1cd]
+
+	* aclocal.m4:
+	updated
+	[f05a367a55be]
+
+	* Makefile.in, config.h.in, configure.in:
+	updated
+	[524778598879]
+
+	* sudo.h:
+	now works with configure
+	[83fc40e533f4]
+
+	* check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
+	updated to work with configure + pathnames.h
+	[cb67fa6ab52d]
+
+	* Makefile.in:
+	added LEXLIB
+	[f43cad4ab0a2]
+
+1994-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* COPYING:
+	updated gnu general licence to versio 2
+	[2b0b56112ddc]
+
+	* config.h.in, pathnames.h.in:
+	Initial revision
+	[4b586f39ec2d]
+
+	* sudo.h:
+	changed to work with configure
+	[13f3506ddf16]
+
+1994-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* Makefile.in, aclocal.m4, configure.in:
+	Initial revision
+	[a8636ae77371]
+
+	* visudo.c:
+	now uses defines used by configure
+	[de438d118993]
+
+1994-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	sudo won't bitch about EPERM now, for real
+	[ce26d9ef7e3f]
+
+1994-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* logging.c:
+	renamed exec_argv to eliminate a libc name clash with ksros
+	[bcb4350d8411]
+
+	* CHANGES:
+	corrected
+	[dae68d422efd]
+
+	* logging.c, sudo.c, sudo.h:
+	execve -> execv
+	[40cc2c4bdb15]
+
+	* TODO:
+	upated
+	[9275a8b8fc45]
+
+	* PORTING:
+	added 2 mroe items
+	[6cbb5c56993c]
+
+	* CHANGES:
+	updated
+	[73f34f8e571a]
+
+	* sudo.h:
+	added UMASK and mode_t declaration
+	[7c2015e1d171]
+
+	* sudo.c:
+	added UMASK
+	[d37be7523680]
+
+	* logging.c:
+	now opens log file with mode 077
+	[0825cc3ee841]
+
+	* check.c:
+	saved current umask ans restores it
+	[659c1aaae8e8]
+
+	* sudo.h:
+	added MAXLOGFILELEN
+	[34331c7dee90]
+
+	* logging.c:
+	split long log lines. FOr syslog, split into multiple entries, for a
+	log file, indent the extra for readability
+	[72c9e4cdba6e]
+
+1994-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	added changes
+	[81196833673d]
+
+	* sudo.h:
+	MAXLOGLEN & MAXSYSLOGLEN are now different (as they should be)
+	[1aa69e903840]
+
+1994-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	added input from Brett M Hogden <hogden@rge.com>
+	[80f01fc88ce9]
+
+1994-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	added rmenv() to remove stuff from environ. can now uses execvp() OR
+	execve() becuase of this.
+	[e7fc2535bd67]
+
+	* logging.c:
+	now uses execvp() OR execve()
+	[56391aa1f99d]
+
+	* sudo.h:
+	added USE_EXECVE
+	[f21f38050b95]
+
+	* sudo.h:
+	added environ
+	[6b805e23c6f6]
+
+	* find_path.c:
+	now ignore EPERM
+	[c8fd7117a1d7]
+
+	* sudo.h:
+	moved some func decls out of sudo.h and into sudo.c as statics /.
+	[5f555c267d27]
+
+	* CHANGES:
+	updated
+	[431f478af320]
+
+	* sudo.h:
+	took out Envp
+	[6f722be7793d]
+
+1994-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* BUGS:
+	Initial revision
+	[4a8ecf0da95c]
+
+1994-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	added SECURE_PATH
+	[1c72cb222609]
+
+	* sudo.c, sudo.h:
+	added SECURE_PATH
+	[5bf5357a63c5]
+
+	* sudo.h:
+	added SECURE_PATH
+	[3976a74405ac]
+
+	* INSTALL:
+	added sample.sudoers note
+	[1b395d29aaeb]
+
+	* sudoers:
+	Initial revision
+	[485888d07477]
+
+1994-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	fixed typo
+	[bfc3cc4d41ca]
+
+	* PORTING:
+	took out SAVED_UID garbage
+	[b7c2d3469661] [SUDO_1_3_0]
+
+	* INSTALL:
+	mentioned HAL
+	[253d6695df90]
+
+	* sudo.h:
+	added HAL line
+	[29ec1a4ac6de]
+
+	* insults.h:
+	added HAL insults
+	[7d7c96d77c74]
+
+	* TODO:
+	updated
+	[aa2ed9790586]
+
+	* logging.c:
+	more verbose error if mailer not found
+	[fca47fd00cb6]
+
+	* check.c:
+	now do getpwent as root for soem shadow password systems (bsdi)
+	[e0339e110d46]
+
+1994-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	took out SAVED_UID garbade
+	[fcb0e81dcdb5]
+
+	* sudo.c:
+	took out SAVED_UID garbage since it don't work
+	[507e9513e9c2]
+
+1994-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	updated
+	[d2b6b253dae5]
+
+	* insults.h:
+	added a missing space :-)
+	[8940ea991f87]
+
+	* sudo.c, sudo.h:
+	took out multimax cruft
+	[c2606b365181]
+
+	* INSTALL:
+	minor update
+	[05fb6ee73131]
+
+	* PORTING:
+	finished
+	[c4ac47c84dc5]
+
+	* sudo.c:
+	fixed a typo + indentation
+	[7eab40aae8fa]
+
+1994-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	took outumoved some defines to the config file ,. ,.
+	[defff05beb52]
+
+	* PORTING:
+	Initial revision
+	[c803e9127959]
+
+	* TODO:
+	did #6
+	[c6fa1c946c31]
+
+	* sudo.h:
+	added HAS_SAVED_UID
+	[6a88a39c0a07]
+
+	* sudo.c:
+	put back AIX cruft
+	[a24d2507ddd4]
+
+1994-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	aix changes
+	[1663915f754a]
+
+1994-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* CHANGES:
+	updated
+	[a8cc73747cae]
+
+	* check.c, logging.c, parse.c, sudo.c, sudo.h:
+	now is only root when abs necesary
+	[3c9d12c5cdfe]
+
+	* check.c:
+	added missing %s\n
+	[609320b72d89]
+
+1994-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* install-sh:
+	Initial revision
+	[b5bba140a175]
+
+	* TODO:
+	updated
+	[c9d2eba602af]
+
+	* CHANGES:
+	updated
+	[932f1fc3bb14]
+
+	* sudo.c:
+	now removed _RLD_* for alphas
+	[54a36e648158]
+
+	* INSTALL:
+	updated for new config scheme
+	[61c8ae800444]
+
+	* find_path.c:
+	more verbose eror messages
+	[b4fd123db42d]
+
+1994-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* TODO:
+	now have solaris
+	[371002fbf266]
+
+	* sudo.h:
+	define __svr4__ for SOLARIS
+	[0b5cf5ed936d]
+
+	* check.c:
+	added svr4 junk for shadow pws for solaris 2.x
+	[91ed58f21618]
+
+	* check.c, sudo.c:
+	took out setuid(0) and setreuid(udi) garbage. Its not needed since
+	we start out setuid with the correct perms.
+	[07689e782b0b]
+
+	* check.c, sudo.c, sudo.h:
+	now use setreuid()
+	[7d64d685d78e]
+
+1994-01-26  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.man:
+	revised AUTHORS secrtion & added ENV_EDITOR stuff to VARIABLES
+	sectoin
+	[b26967b1e19b]
+
+	* visudo.c:
+	now uses ENV_EDITOR if you want to use the EDITOR envar
+	[a4f8fcb9bd1d]
+
+	* sudo.h:
+	now uses ENV_EDITOR if you want to use the EDITOR envar >> .
+	[028cc55c4328]
+
+1993-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* README:
+	minor update + spell fix
+	[a411717a7249]
+
+	* INSTALL:
+	rewrote most of this
+	[a6750923f9c9]
+
+	* sudo.h:
+	added all options that are in the Makefile
+	[6db3b3b841b3]
+
+	* getpass.c:
+	now use USE_TERMIO #define for sgi & hpux
+	[b91f89ae6be1]
+
+	* TODO:
+	todo: posix sigs
+	[4548a56eb2ef]
+
+1993-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c, find_path.c:
+	always include strings.h
+	[1fc20bda92c0]
+
+	* visudo.c:
+	added STATICEDITOR
+	[0596f820716e]
+
+	* sudo.h:
+	sgi has vi in /usr/bin too
+	[94203b62bfd9]
+
+	* sudo.man:
+	added VISUAL
+	[87c2844c4cac]
+
+1993-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	sue /usr/bin/vi on some systems
+	[e3ad9190f35e]
+
+	* sudo.c:
+	fixed warning (include strings.h)
+	[0b896de4d8a0]
+
+	* sudo.man:
+	added John_Rouillard@dl5000.bc.edu's changes (new features)
+	[f41b4205a8cf]
+
+	* CHANGES:
+	changes from John_Rouillard@dl5000.bc.edu
+	[6bdef8e948d5]
+
+	* visudo.c:
+	added EDITOR envar
+	[5c4bf716de21]
+
+	* check.c, find_path.c, parse.c, sudo.c:
+	added patches from John_Rouillard directory spec uses EDITOR
+	[f62a435f8c41]
+
+1993-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* getpass.c:
+	added flush for hpux
+	[07cfdd6a7b55]
+
+1993-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	no longer assume malloc returns a char *
+	[7480bd2756f3]
+
+	* sudo.c:
+	alpha change to remove LD_-like thing fixed SHLIB_PATH stuff -- now
+	gets removed correctly
+	[8587166c6ac8]
+
+	* sudo.h:
+	added STD_HEADERS macro
+	[480f5a9a516c]
+
+	* sudo.c:
+	now uses STD_HEADERS macor for ansi
+	[c5018806fd59]
+
+	* find_path.c:
+	now uses STD_HEADERS macro
+	[ad821e0788ea]
+
+	* check.c:
+	niceties for C compiler bitches -- no real change
+	[0fc0b1a5fb64]
+
+1993-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	now doesn't fclose a file never opened.
+	[ee888ec9427d]
+
+1993-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.man:
+	added visudo line
+	[698d51c66407]
+
+	* sudo.man:
+	added error stuff added me in there...
+	[d202fd34b906]
+
+	* CHANGES:
+	noted insults
+	[998a22c2230c]
+
+	* INSTALL:
+	added blurb about reading stuff
+	[e71db100798f]
+
+	* sudo.h:
+	added insults
+	[c110431cec56]
+
+	* insults.h:
+	corrected somments and removed newlines
+	[493706fd488c]
+
+	* check.c:
+	now uses insults
+	[6d23cf06a0ef]
+
+	* insults.h:
+	Initial revision
+	[83153c26b4a3]
+
+	* INSTALL:
+	added dec syslog note
+	[555437273237]
+
+	* sample.sudoers:
+	added real stuff in there
+	[53442a7fba78]
+
+	* TODO:
+	added a todo
+	[c630472bd4dc]
+
+	* TODO:
+	added one
+	[806464453284]
+
+1993-11-27  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sample.sudoers:
+	Initial revision
+	[7db0a9f1ca8f]
+
+	* sudo.man:
+	updated with changes
+	[d9bf254c6c08]
+
+	* sudo.man:
+	Initial revision
+	[dd6f11174ac6]
+
+	* indent.pro:
+	Initial revision
+	[dbfbb494fad9]
+
+	* CHANGES, COPYING, INSTALL, README, TODO:
+	Initial revision
+	[6d98f489a079]
+
+	* visudo.c:
+	updated version number and took out jeff's old addr since it is no
+	good
+	[ee47c24818cb]
+
+	* check.c, find_path.c, logging.c, parse.c, parse.lex, parse.yacc,
+	sudo.c, sudo.h:
+	updated version number and took out jeff's email (since it is
+	invalid)
+	[54616458a52e]
+
+1993-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	added fflush()
+	[145c881f4fb4]
+
+1993-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	now return NULL instead pfof exiting for nopnn-fatal errors
+	[8bc74f8cb1ae]
+
+1993-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* check.c:
+	new banner
+	[5387ab2af516]
+
+	* parse.lex:
+	now sudo.h gets included first
+	[2acb01c18e18]
+
+1993-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.lex:
+	now can use flex
+	[164d3839adf0]
+
+	* sudo.h:
+	linux patch
+	[f1b6b1b1a2ca]
+
+	* sudo.c:
+	hpux 9 fix, removes SHLIB_PATH linux patch
+	[67611dc1737f]
+
+	* check.c:
+	linux diff
+	[c24536682397]
+
+1993-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	stat now ignores EINVAL
+	[c7761a5dc642]
+
+1993-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c, sudo.c:
+	now declare strdup as extern
+	[6b7d6f8784b5]
+
+1993-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* visudo.c:
+	reformatted with indent + by hand
+	[9d43084e4990]
+
+	* check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c, sudo.h:
+	used indent to "fix" coding style
+	[489ffacbdc70]
+
+	* find_path.c:
+	now checks '.' or '.' or '' in PATH -- but does it LAST should maybe
+	move the code that does this into the loop body. makes it messier
+	tho. hmmm.
+	[c4d22b48da9a]
+
+1993-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	redid the fix for non-executable files in an easier to read way plus
+	some minor aethetic changes
+	[84fe337f1426]
+
+	* find_path.c:
+	fixed bug with non-executable tings of same name in path introduced
+	by checkig errno after stat(2).
+	[c2a812cfcbc1]
+
+1993-09-05  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	fixed off by one error
+	[fabb7cee0041]
+
+	* find_path.c:
+	now handles decending below '/' correctly
+	[5d2ddfc0b220]
+
+	* sudo.c:
+	now actually builds Envp instead of munging envp
+	[bdc4b08f6898]
+
+1993-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* parse.yacc:
+	now includes sys/param.h
+	[efbb494ab4de]
+
+	* visudo.c:
+	now includes sys/param.h
+	[ad6c91d59958]
+
+	* sudo.h:
+	fixed ifndef -> ifdef
+	[7aebe822d863]
+
+	* qualify.c:
+	make more like find_path.c
+	[853b2dab2e03]
+
+	* find_path.c:
+	rewritten by millert
+	[c6a043cc11b3]
+
+	* sudo.h:
+	fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP added info
+	about new defines in the comment
+	[39ffefce3aec]
+
+	* logging.c:
+	now uses USE_CWD
+	[fa0f3b118bb3]
+
+	* sudo.h:
+	added delc for clean_envp() and Envp
+	[a12034e300c2]
+
+	* sudo.c:
+	now rips LD_* env vars out of envp and passed sanitized Envp to exec
+	[d201a218e056]
+
+	* logging.c:
+	now uses execve()
+	[f3e01032cd33]
+
+	* find_path.c:
+	ENOTDIR is ok now too (in case part of the path is bogus)
+	[b5cbbb201bb5]
+
+	* qualify.c:
+	now works correctly (ttaltotal rewrite)
+	[0c25d64a5c68]
+
+	* parse.lex:
+	now includes sys/param.h didn't match trailing / -- fix from
+	rouilj@cs.umb.edu
+	[b6363ba110af]
+
+1993-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	moved around the #ifndef _AIX
+	[7d4330950c20]
+
+	* check.c, logging.c, parse.c:
+	Initial revision
+	[c101e9572d7f]
+
+1993-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* qualify.c:
+	Initial revision
+	[5a5f21d0e0bf]
+
+1993-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* find_path.c:
+	now works if you do sudo bin/test
+	[07835120ce43]
+
+	* find_path.c:
+	works
+	[c3da8b5efa20]
+
+1993-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.h:
+	Initial revision
+	[28a1caa38b72]
+
+	* visudo.c:
+	Initial revision
+	[0e5cd7c3cdbe]
+
+	* parse.lex, parse.yacc:
+	Initial revision
+	[5f2d0cccb06b]
+
+1993-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* sudo.c:
+	took out errno.h
+	[7466431a2655]
+
+	* sudo.c:
+	now spews error if exec fails and exits with -1
+	[e5c41ea725c1]
+
+	* sudo.c:
+	Initial revision
+	[8aeabe39a0c2]
+
+	* find_path.c:
+	now only execs files with (an) executable bit set.
+	[0a451f9c0e58]
+
+	* find_path.c:
+	Initial revision
+	[02a534891a35]
+
+1993-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
+
+	* getpass.c:
+	added nice comment
+	[ea8b2aaa9389]
+
+	* getpass.c:
+	now works on sgi's
+	[bf2b7c6d0960]
+
+	* getpass.c:
+	Initial revision
+	[9f4de251c1b5]
+