Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-128623

Rebase of sudo to 1.9.17p2 [rhel-9]

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-9.8
    • rhel-9.7
    • sudo
    • sudo-1.9.17p2-2.el9
    • None
    • Low
    • Rebase
    • rhel-idm-sssd
    • 13
    • 15
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Rebase
    • Hide
      Version: 1.9.17p2
      List of highlights:
      * Support for regular expressions in the sudoers file
      * Support for log_subcmds and intercept
      * Support for json_compact logging
      * Plenty of bug fixes
      * Privilege listing enhancements
      * Adds the cmddenial_message sudoers option
      * The sudoers LDAP schema now allows sudoUser, sudoRunasUser and sudoRunasGroup to include UTF-8 characters.
      * Adds a new -N (no-update) command line option to sudo
      * log_stdin, log_stdout, log_stderr, log_ttyin, and log_ttyout sudoers settings can be used to support more fine-grained I/O logging.
      Show
      Version: 1.9.17p2 List of highlights: * Support for regular expressions in the sudoers file * Support for log_subcmds and intercept * Support for json_compact logging * Plenty of bug fixes * Privilege listing enhancements * Adds the cmddenial_message sudoers option * The sudoers LDAP schema now allows sudoUser, sudoRunasUser and sudoRunasGroup to include UTF-8 characters. * Adds a new -N (no-update) command line option to sudo * log_stdin, log_stdout, log_stderr, log_ttyin, and log_ttyout sudoers settings can be used to support more fine-grained I/O logging.
    • Proposed
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      This is a clone of issue RHEL-112100 to use for version rhel-9.8
      –
      Original description:

      Customer's request :

      RHEL 9 currently ships sudo 1.9.5p2, with RHEL 10 shipping 1.9.15p5. Since the release of 1.9.5, there have been a number of feature enhancements that I would like to take advantage of in our environment but we are unable for technical reasons to upgrade to RHEL 10 for the foreseeable future.

      Would it be possible to rebase sudo in RHEL 9 to at least match what's available in RHEL 10?

      Barring that, backports of the following features would be greatly appreciated:

      1. In order of internal priority
      • Support for regular expressions (introduced in 1.9.10)
      • Support for log_subcmds and intercept (introduced in 1.9.8, improved in 1.9.11)
      • Support for json_compact logging (introduced in 1.9.16)
      • Privilege listing enhancements (introduced in 1.9.15)

              rh-ee-allopez Alejandro Lopez
              watson-automation Watson Automation
              Alejandro Lopez Alejandro Lopez
              Jakub Vavra Jakub Vavra
              Louise McGarry Louise McGarry
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated: