To use the precompiled binaries attached below, consult our manual installation instructions
Added
- Linux kernels older than 5.9 are now supported.
- Support for
Defaults noexec
/NOEXEC:
on Linux systems based on seccomp
filtering to prevent shell escapes in wide range of cases. This should also
work on programs not written in C and statically linked executables. - Support for
passwd_timeout
- Support for
umask
andumask_override
--preserve-env=VAR
is now supported to preserve selected environment
variables in a more convenient way
Changed
- sudo-rs now uses CLOEXEC to close open file descriptors in the child process
- Relative paths like
./
insecure_path
/PATH
are now ignored. apparmor.so
is dynamically loaded by sudo itself, as-needed
Fixed
- Usernames that start with
_
or have non-western characters were not supported
as a valid username in /etc/sudoers (#1149) - Other usability improvements in /etc/sudoers (#1117, #1126, #1134, #1157)
Contributors for this release
Merged pull requests: @bjorn3, @squell, new contributors: @MggMuggins, @piguycs, @dzvon, @sohomdatta1
Closed issues opened by: @HanabishiRecca, @hyder365, @bertptrs, @mikkorantalainen, @satmandu, @raviksharma, @TheEdgeOfRage