2011-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>

	* term.c:
	Clear, don't set, OPOST in c_oflag as was intended in e26055d17b72.
	[eacd774c37c0]

2011-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>

	* check.c:
	If the user is running sudo as himself but as a different group we
	need to prompt for a password.
	[fe8a94f96542]

2011-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>

	* pwutil.c:
	If user has no supplementary groups, fall back on checking the group
	file explicitly.
	[c536ddb16bb6]

2011-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>

	* match.c:
	Fix NULL dereference with "sudo -g group" when the sudoers rule has
	no runas user or group listed. Fixes RedHat bug Bug 667103.
	[c51e2be737b2]

2010-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>

	* term.c:
	Clear OPOST from c_oflag like we used to. Fixes screen-based
	editors such as vi.
	[e26055d17b72]

	* sudoers.pod:
	Clarify umask option description. From Reuben Thomas.
	[fb8bdcb54feb]

2010-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>

	* pp:
	Add support for RHEL 6 file modes that include a trailing dot on
	files with an SELinux security context
	[fcc1daaf4df0]

2010-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudoers.pod:
	fix typo; from Michael T Hunter
	[46e70e2063af]

2010-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>

	* check.c:
	Having a timestamp file defined is no longer indicative of tty
	tickets being enabled. Check def_tty_tickets directly.
	[6c3803c239d9]

2010-10-01  Todd C. Miller  <Todd.Miller@courtesan.com>

	* set_perms.c:
	Sync set_project() with trunk.
	[646fd9bc0537]

	* set_perms.c, sudo.c:
	Move set_project() into runas_setup(). Fixes a NULL deref when
	project support is enabled and sudo's -g flag is used without the
	-u flag.
	[6ffd892243ab]

2010-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>

	* linux_audit.c:
	Ignore ECONNREFUSED from audit_log_user_command() which will occur
	if auditd is not running.
	[a686884684ca]

2010-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>

	* install-sh:
	Use sed instead of expr to split a flag from its argument. Fixes a
	problem with expr interpreting its arguments as a flag when they
	start with a dash.
	[16372da8a286]

2010-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>

	* bsm_audit.c:
	Solaris BSM audit return EINVAL when auditing is not enabled,
	whereas OpenBSM returns ENOSYS.
	[bb9c94a8fa7d]

2010-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>

	* toke.c, toke.l:
	Add missing LOG_INPUT/LOG_OUTPUT support in the lexer.
	[0a5519756bf1]

	* sudo.c:
	Set NewArgv[0] to the name of the pseudo-command we are running.
	Fixes a problem with "sudo -l" when auditing is enabled and the user
	is not allowed to run any commands on the host. Adapted from a patch
	from Daniel Kopecek.
	[694ed1a75a4a]

2010-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>

	* match.c:
	When matching the runas user and runas group (-u and -g command line
	options), keep track of runas group and runas user matches
	separately. Only return a positive match if we have a match for
	both runas user and runas group (if specified).
	[68d30216c13a]

2010-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>

	* ldap.c, parse.c:
	Do not return -1 on error from the display functions; the call
	expects a return value >= 0.
	[e50e6ae4d06d]

	* ldap.c:
	display_bound_defaults now returns a count so make the stub return
	0, not 1.
	[97293ced4908]

2010-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>

	* get_pty.c:
	It looks like AIX doesn't need to push STREAMS modules for ptys.
	[62c281fcd4ad]

2010-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>

	* Makefile.in:
	Install sudoers file from the build dir not hte src dir.
	[a26afd8db531]

2010-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>

	* set_perms.c:
	If runas_pw changes, reset the stashed runas aux group vector.
	Otherwise, if runas_default is set in a per-command Defaults
	statement, the command runs with root's aux group vector (i.e. the
	one that was used when locating the command).
	[24a695707b67]

	* Makefile.in:
	Add target to generate sudoers file Remove generated sudoers file as
	part of distclean
	[448627fc35b6]

2010-08-23  millert  <millert@rh4-x86.home.courtesan.com>

	* exec.c:
	When not logging I/O install a handler for SIGCONT and deliver it to
	the command upon resume. Fixes bugzilla #431
	[e84690aa67bd]

2010-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.c:
	Don't need to fork and wait when compiled with --disable-pam-session
	[2ae1bbe4437a]

2010-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>

	* lbuf.c:
	Convert a remaining puts() and putchar() to use the output function.
	[d68c213feb0f]

2010-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>

	* Makefile.in:
	Replace sudoers with sudoers.in in DISTFILES
	[616509f85d6c]

	* env.c:
	Set dupcheck to TRUE when setting new HOME value if !env_reset but
	always_set_home is true. Prevents a duplicate HOME in the
	environment (old value plus the new one) introduced in 9f97e4b43a4b.
	[2672ae047984]

	* configure, configure.in, sudoers, sudoers.in:
	Substitute sysconfdir in the installed sudoers file to get the
	correct path for sudoers.d.
	[ab14a68e546f]

2010-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>

	* boottime.c, get_pty.c:
	Fix typos that prevented compilation on Irix; Friedrich Haubensak
	[a3e6c5a66890]

2010-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>

	* auth/pam.c:
	If the user hits ^C while a password is being read, error out before
	reading any further passwords in the pam conversation function.
	Otherwise, if multiple PAM auth methods are required, the user will
	have to hit ^C for each one.
	[c8f6bc58fd86]

2010-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>

	* exec.c:
	Fix waitpid() loop termination condition.
	[97719b3259f2]

	* exec_pty.c:
	Use sudo_waitpid() instead of bare waitpid()
	[624a40269189]

2010-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.pp:
	Set pp_kit_version and strip off patchlevel
	[814c87778567]

	* sudo.pp:
	Better handling of versions with a patchlevel. For rpm and deb, use
	the patchlevel+1 as the release. For AIX, use the patchlevel as the
	4th version number. For the rest, just leave the patchlevel in the
	version string.
	[d18ef30f0a72]

2010-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>

	* auth/sudo_auth.c:
	For non-standalone auth methods, stop reading the password if the
	user enters ^C at the prompt.
	[59d2b1328d1e]

	* check.c:
	When removing/resetting the timestamp file ignore the tty ticket
	contents.
	[8b285f601ec0]

2010-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>

	* UPGRADE:
	Fix typo
	[0f443aa22e96]

2010-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>

	* check.c:
	Do not produce a warning for "sudo -k" if the ticket file does not
	exist.
	[eeaaa73d7f5b]

2010-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>

	* aclocal.m4, configure:
	Add cross-compile defaults for remaining AC_TRY_RUN usage.
	[fb88d22eabc6]

2010-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>

	* aclocal.m4, config.h.in, configure, configure.in, snprintf.c:
	Use AC_CHECK_MEMBER in SUDO_SOCK_SA_LEN Use AC_TYPE_LONG_LONG_INT
	and AC_CHECK_SIZEOF([long int]) instead of rolling our own.
	[5e7cc557a46e]

2010-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>

	* .hgtags:
	Added tag SUDO_1_7_4 for changeset 2920a3b9d568
	[e929004d5102]

	* pp:
	Debian: Remove dots from decoded release number AIX: looser matching
	of file command output for AIX 5.1
	[2920a3b9d568] [SUDO_1_7_4]

	* .hgtags:
	Added tag SUDO_1_7_4 for changeset 0d844aa34c1d
	[cf65ddcec602]

2010-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>

	* exec_pty.c:
	exec_monitor is static
	[0d844aa34c1d]

	* pp:
	Update to latest version
	[7b8a00defbd6]

2010-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.pp:
	Let pp determine pp_aix_version itself.
	[c5ee7944af03]

	* INSTALL, config.h.in, configure, configure.in, mkpkg, sudo.c:
	Add support for Ubuntu admin flag file and enable it when building
	Ubuntu packages.
	[2d97501cda0c]

	* sudo.pp, sudoers:
	Add commented out SuSE-like targetpw settings
	[f4ad331ace46]

	* configure, configure.in:
	Only try to use +DAportable for non-GCC on hppa Check the value of
	$pic_flag insteaf of whether the compiler is ANSI C when detecting
	the HP-UX bundled C compiler.
	[654da0091c16]

	* configure, configure.in:
	Prevent configure from adding the -g flag unless in devel mode
	[e3c11f228c56]

2010-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.pp:
	Go back to sudo-flavor to match existing packages and only use an
	underscore for those that need it.
	[1f78ecf3b990]

	* sudo.pp:
	Use sudo_$flavor instead of sudo-$flavor since that causes the least
	amount of trouble for the various package managers.
	[7e1e07115788]

	* mkpkg:
	Fix handling of the ldap flavor Remove destdir unless --debug was
	specified Make distclean before running configure if there is a
	Makefile present
	[2bde3925346d]

	* configure, configure.in:
	Back out version change in 5baf2187a138
	[bbc3a81afbba]

	* mkpkg:
	Pass extra args on to configure on HP-UX, if we don't have the HP C
	compiler, disable zlib to prevent gcc from finding it in
	/usr/local/lib.
	[87201c7f1116]

	* configure, configure.in, mkpkg:
	Use the HP ANSI C compiler on HP-UX if possible
	[5baf2187a138]

	* sudoreplay.c:
	Some getline() implementations (FreeBSD 8.0) do not ignore the
	length pointer when the line pointer is NULL as they should.
	[8652300785ed]

	* sudoreplay.c:
	Don't need to check for *cp being non-zero, isdigit() will do that.
	[107301a99b6a]

	* sudoreplay.c:
	Add setlocale() so the command line arguments that use floating
	point work in different locales. Since sudo now logs the timing
	data in the C locale we must Parse the seconds in the timing file
	manually instead of using strtod(). Furthermore, sudo 1.7.3 logged
	the number of seconds with the user's locale so if the decimal point
	is not '.' try using the locale-specific version.
	[2b8ed181e37c]

	* exec.c:
	Do I/O logging in the C locale so the floating point numbers in the
	timing file are not locale-dependent.
	[18abbca14078]

	* sudoreplay.c:
	Use errorx() not error() for thingsthat don't set errno.
	[a2e7c6793d26]

2010-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.pp:
	Add Tru64 kit support
	[40e2d21aa17f]

	* pp:
	Better support for 1.2.3 style versions in Tru64 kits
	[f7133199a711]

	* pp:
	Remove apparently unnecessary use of sudo
	[a667a69eeab0]

	* Makefile.in:
	Create timedir as part of install-dirs target.
	[a2e394d694dd]

	* exec_pty.c:
	Handle ENXIO from read/write which can occur when reading/writing a
	pty that has gone away. Fixes bugzilla 422
	[142f4c2efa17]

	* pwutil.c:
	sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL
	[82e5e46bf458]

	* mkpkg:
	platform is a pp flag not a variable
	[9d0ab9b9bf0c]

	* Makefile.in, mkpkg, sudo.pp:
	Add simple arg parsing for mkpkg so we can set debug, flavor or
	platform.
	[8142ab01ccd9]

	* pp:
	Make rpm backend work on AIX 5.x
	[2467a79d0b4d]

2010-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudoers:
	Add commented out Defaults entry for log_output
	[b3fe97e59ae0]

2010-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>

	* Makefile.in:
	Install binary files with -b~ to make a backup. Fixes "text file
	busy" error on HP-UX during install.
	[3563e3e0163a]

	* install-sh:
	"mv -f" on HP-UX doesn't unlink the destination first so add an
	explicit rm before moving the temporary into place.
	[3994af813c88]

	* configure, configure.in:
	Some more ${foo} -> $(foo) conversion for consistent Makefiles.
	[c214d50c32ec]

2010-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>

	* pathnames.h.in:
	Add missing include of maillock.h for Solaris
	[343f04b7a581]

	* NEWS, TROUBLESHOOTING, UPGRADE, configure, configure.in,
	sample.syslog.conf, sudoers.cat:
	Change the default syslog facility from local2 to authpriv (or auth
	if the operating system doesn't support authpriv).
	[949f39cf4a59]

	* Makefile.in, configure, configure.in, sudo.pp:
	Install sudoers as /etc/sudoers on RPM and debian systems where the
	package manager will not replace a user-modified configuration file.
	This fixes upgrades from the vendor sudo packages.
	[74c7ff01e880]

	* pp:
	RPM: use %config(noreplace) instead of %config for volatile This
	results in the new file being installed with a .rpmnew suffix
	instead of the file being replaced and the old one renamed with a
	.rpmsave suffix.
	[166133a4fb9e]

2010-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>

	* boottime.c, mkstemps.c:
	Include time.h for struct timeval.
	[50446e0b8398]

	* exec_pty.c:
	The return value of strsignal() may be const and should be treated
	as const regardless.
	[c035b17b50e3]

	* sudoers.cat, sudoers.man.in, sudoers.pod:
	Mention that 127.0.0.1 will not match, nor will localhost unless
	that is the actual host name.
	[e9977ec7ac4f]

	* Makefile.in:
	fix typo
	[f216d653404d]

	* Makefile.in, NEWS, README, UPGRADE, WHATSNEW:
	Rename WHATSNEW -> NEWS
	[f3ce0a462ca0]

	* pp:
	Updated pp with latest patches
	[cded68af5ba0]

	* WHATSNEW, exec.c, exec_pty.c, set_perms.c, sudo.c, sudo.h:
	If pam is in use, wait until the process has finished before calling
	pam_close_session().
	[fb3d7de50a05]

	* sudoers.cat, sudoers.man.in:
	regen sudoers manual
	[7498a058eeb1]

	* UPGRADE, sudoers, sudoers.pod:
	Add commented out line to add HOME to env_keep and add a warning to
	the note about the HOME change in UPGRADE.
	[0f7e08f09b9f]

2010-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudoreplay.c:
	Add LINE_MAX define for those without it.
	[6248dd44573c]

	* WHATSNEW:
	Mention that tty_tickets is now the default.
	[4cf26eaee5ba]

	* INSTALL, UPGRADE, config.h.in, configure, configure.in, defaults.c,
	sudoers.cat, sudoers.man.in, sudoers.pod:
	The tty_tickets option is now on by default.
	[73dd2b82a3a9]

	* WHATSNEW:
	Mention that AIX authdb support has been fixed.
	[9331829dc276]

	* aix.c:
	setauthdb() only sets the "old" registry if it was set by a previous
	call to setauthdb(). To restore the original value, passing NULL
	(or an empty string) to setauthdb() is sufficient.
	[d956fd763521]

2010-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudoers.cat, sudoers.man.in, sudoers.pod:
	Mention new handling of HOME in always_set_home and set_home
	descriptions.
	[a69c9bed3164]

	* sudo.cat, sudo.man.in, sudo.pod:
	fix typo
	[9b90bb3e9187]

	* UPGRADE, WHATSNEW, env.c, sudo.cat, sudo.man.in, sudo.pod:
	Reset HOME when env_reset is enabled unless it is in env_keep
	[18223dfd1ac3]

	* sudoers.cat, sudoers.man.in, sudoers.pod:
	The default for set_logname has been "true" for some time now.
	[9f97e4b43a4b]

	* sudoers.cat, sudoers.man.in, sudoers.pod:
	Document that MAIL it set in env_reset mode.
	[dcf9ad98079e]

	* boottime.c:
	Add missing include of time.h
	[57bee414982d]

	* defaults.c, sudo.c:
	Check return value of setdefs() but don't stop setting defaults if
	we hit an unknown one.
	[a42cb2d6b7ed]

	* logging.c:
	Fix check for dup2() return value.
	[916cd7fdeba7]

	* visudo.c:
	Treat an unknown defaults entry as a parse error.
	[1f94675835d9]

	* env.c:
	Check KEPT_MAIL not DID_MAIL when determining whether to set MAIL in
	-i and env_reset mode.
	[aa6657ccfe01]

	* env.c:
	Add PYTHONUSERBASE to initial_badenv_table
	[93058374f0d9]

	* WHATSNEW, aclocal.m4, config.h.in, configure, configure.in, env.c,
	pathnames.h.in, sudo.cat, sudo.man.in, sudo.pod:
	If env_reset is enabled, set the MAIL environment variable based on
	the target user unless MAIL is explicitly preserved in sudoers.
	[d903c904dcd4]

2010-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>

	* pp:
	decode debian code names
	[2df0ecbc23b4]

	* WHATSNEW:
	fix typo
	[b66a95fa1869]

2010-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>

	* WHATSNEW:
	Add entry about SuSE bash script fix.
	[04af78fa281c]

	* sudo.c:
	Restore RLIMIT_NPROC after the uid switch if it appears that
	runas_setup() did not do it for us. Fixes a bash script problem on
	SuSE with RLIMIT_NPROC set to RLIM_INFINITY.
	[bb14802d48b1]

2010-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>

	* mkpkg, pp, sudo.pp:
	Restore the dot removal in the os version reported by polypkg. Adapt
	mkpkg and sudo.pp to the change.
	[83c7870130fe]

2010-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>

	* WHATSNEW:
	Mention polypkg
	[c5f6e40bbb58]

	* README, WHATSNEW:
	Update for sudo 1.7.4
	[0c688f1f8160]

	* INSTALL:
	document --with-pam-login
	[33ca3f6308ae]

	* sudoers.cat, sudoers.man.in, sudoers.pod:
	The tag is NOSETENV, not UNSETENV. From Petr Uzel.
	[95f37e63ca15]

2010-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.pp:
	Include flavor in solaris package name
	[b6d56ccf367e]

	* mkpkg:
	Older shells don't support IFS= so set explictly to space, tab,
	newline.
	[336925525e17]

	* mkpkg:
	Use '=' not '==' in test
	[98c692271cfd]

	* mkpkg:
	Fix typo that prevented debian from matching
	[af4deec35e37]

	* mkpkg:
	Add missing prefix setting for debian
	[d0c1941cb6ec]

	* sudo.pp:
	Use tab indents to reduce the chance of problem with <<- Uncomment
	some env_keep lines for RHEL, SLES and Debian to more closely match
	the vendor sudoers files.
	[74ba26566cdc]

	* sudo.pp:
	Fix indentation Fix the debian %set section, pp does not set
	pp_deb_distro Uncomment %sudo line in sudoers for debian Add pam.d
	to %files for debian Remove the /etc/sudo-ldap.conf symlink on
	debian for ldap flavor
	[f15ff41b5afd]

	* sudoers:
	Add commented out env_keep entries, sample Aliases and a %sudo line
	for debian.
	[8264e4ed42dc]

	* configure, configure.in:
	Remove check for egrep; configure has its own
	[27b3d85ebf4f]

	* configure.in:
	Use enable_zlib instead of enableval for consistency
	[4a15cfd43d3e]

2010-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>

	* mkpkg:
	Enable zlib for linux distros
	[fcab91448bb0]

	* mkpkg:
	Add ldap flavor to default build
	[e35a577c8994]

	* mkpkg, sudo.pp:
	Simplify rpm linux distro settings
	[f30547765636]

	* UPGRADE, aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
	sudoers.cat:
	Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo.
	[8c9440423d98]

	* Makefile.in, mkpkg, sudo.pp:
	Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR
	environment variable.
	[9f418defc08a]

	* sudo.pp:
	Create sudo group on debian
	[4b0cc7b8b0b5]

	* mkpkg, sudo.pp:
	Add debian 4/5/6 and use the dot when doing version matches
	[d5184f0a1efc]

	* sudoers.cat, sudoers.man.in, sudoers.pod:
	Remove spurious "and"; from debian
	[8b9f2a5937bc]

	* aclocal.m4, configure:
	Use a loop when searching for mv, sendmail and sh
	[a1c7d19721a4]

	* aclocal.m4, configure, configure.in, sudoers.cat, sudoers.man.in,
	sudoers.pod, visudo.cat, visudo.man.in, visudo.pod:
	Substitute the value of EDITOR into the sudoers and visudo manuals.
	[f00dc9343f94]

2010-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>

	* mkpkg, pp, sudo.pp:
	Initial debian 4.0 support
	[6d73c000723f]

	* mkpkg:
	Some platforms need -fPIE instead of -fpie
	[8533a29633e8]

	* Makefile.in:
	Add packaging bits to DISTFILES
	[dea9f374f28b]

	* auth/pam.c:
	Only set PAM_RHOST for Solaris, where it is needed to avoid a bug.
	On Linux it causes a DNS lookup via libaudit.
	[22e04d2f5f0f]

	* sudo.psf:
	We now use pp to generate HP-UX packages
	[6c9f8ae6bc11]

2010-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>

	* auth/pam.c:
	Fix indentation
	[e52e9e6338d5]

	* INSTALL, Makefile.in:
	isntall-man -> install-doc
	[02cc8198ea7a]

	* configure, configure.in, sudo.cat, sudo.man.in, sudoers.cat,
	sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.man.in,
	sudoreplay.cat, sudoreplay.man.in, visudo.cat, visudo.man.in:
	Bump version to 1.7.4
	[df6ce4ea908a]

	* INSTALL.binary, Makefile.binary.in, Makefile.in:
	Remove remaining bits of the old binary package
	[8d4f82c23c22]

	* sudo.pp:
	Use http://rc.quest.com/topics/polypkg/ for packaging
	[d71793085629]

	* Makefile.in, mkpkg, pp:
	Use http://rc.quest.com/topics/polypkg/ for packaging
	[675e505758c5]

	* install-sh:
	Just ignore the -c option, it is the default Add support for -d
	option
	[2adfb3a63231]

	* env.c, logging.c, pathnames.h.in:
	Use _PATH_STDPATH instead of _PATH_DEFPATH
	[2c22d54a1f02]

	* Makefile.in:
	Do not strip binaries.
	[bc84682b372c]

	* INSTALL, configure, configure.in:
	Add --insults=disabled configure option to allow people to build in
	insult support but have the insults disabled unless explicitly
	enabled in sudoers.
	[6d9f40db9cca]

2010-07-10  Todd C. Miller  <Todd.Miller@courtesan.com>

	* env.c, sudoreplay.c:
	Fix K&R compilation
	[e44d3be7ab85]

2010-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>

	* auth/pam.c, config.h.in, configure, configure.in, env.c, sudo.c,
	sudo.h:
	Add support for a sudo-i pam.d file to be used for "sudo -i".
	Adapted from a RedHat patch.
	[2984c3831d88]

	* Makefile.in:
	Fix installation of sudo_noexec.so
	[d1f7ca8331b6]

	* Makefile.in, config.h.in, configure, configure.in, missing.h,
	mkstemp.c, mkstemps.c, sudo_edit.c:
	Use mkstemps() instead of mkstemp() in sudoedit. This allows
	sudoedit to preserve the file extension (if any) which may be used
	by the editor (like emacs) to choose the editing mode.
	[46399679d9ae]

2010-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>

	* ldap.c, sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
	TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses
	TLS_CACERT, not TLS_CACERTFILE in its ldap.conf. Other LDAP client
	code, such as nss_ldap, uses TLS_CACERTFILE. Also document why you
	should avoid disabling TLS_CHECKPEER is possible.
	[1d626a5cf8c0]

2010-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>

	* toke.c, toke.l:
	Add suport for negated user/host/command lists in a Defaults entry.
	E.g. Defaults:!baduser noexec
	[24f07a805dce]

2010-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudoers.ldap.pod:
	fix typo.
	[d5f2922cecf2]

2010-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>

	* .hgtags:
	Added tag SUDO_1_7_3 for changeset 72fd1f510a08
	[cc8b2277e17e]

	* configure, configure.in, sudo.cat, sudo.man.in, sudoers.cat,
	sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.man.in,
	sudoreplay.cat, sudoreplay.man.in, visudo.cat, visudo.man.in:
	Sudo 1.7.3 GA
	[72fd1f510a08] [SUDO_1_7_3]

	* alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
	auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
	auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
	auth/securid5.c, auth/sia.c, auth/sudo_auth.c, boottime.c, check.c,
	defaults.c, env.c, exec.c, exec_pty.c, fileops.c, find_path.c,
	fnmatch.c, get_pty.c, getcwd.c, getdate.c, getdate.y, getline.c,
	getspwuid.c, glob.c, goodpath.c, gram.c, gram.y, interfaces.c,
	iolog.c, lbuf.c, ldap.c, logging.c, match.c, parse.c, parse_args.c,
	pwutil.c, set_perms.c, snprintf.c, sudo.c, sudo_edit.c, sudo_nss.c,
	sudoreplay.c, term.c, testsudoers.c, tgetpass.c, toke.c, toke.l,
	tsgetgrpw.c, visudo.c:
	Include strings.h even if string.h exists since they may define
	different things. Fixes warnings on AIX and others.
	[7c6de7fb5dba]

	* env.c:
	Do not rely on env.env_len when unsetting a variable, just use the
	NULL terminator.
	[faf088613ce5]

	* env.c:
	In unsetenv() check for NULL or empty name as per POSIX 1003.1-2008
	[47f8dfcc7a48]

2010-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
	Mention that multiple URI lines are merged into a single one.
	[1dc0ac5929bf]

	* WHATSNEW:
	Document AIX fixes
	[be36e8a6dddd]

2010-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>

	* env.c, sudo.c, sudo.h:
	For env_init() just use environ not the envp from main().
	[d4f3e374caeb]

2010-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>

	* configure, configure.in, sudo.cat, sudo.man.in, sudoers.cat,
	sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.man.in,
	sudoreplay.cat, sudoreplay.man.in, visudo.cat, visudo.man.in:
	Update version to 1.7.3rc1
	[fe43fe79070d]

	* TODO:
	fqdn issue is resolved
	[f35cb63eb74b]

	* env.c:
	In unsetenv(), assign ep in the for loop instead of doing it
	earlier. This version of the code does not change env.envp in
	between when ep is assigned and when it is used but older versions
	(e.g. 1.7.2) do.
	[a4cd29c862c9]

	* aix.c:
	Use S_REGISTRY instead of S_AUTHSYSTEM as the argument to
	getuserattr() when fetching the administrative domain to be used by
	setauthdb(). This was suggested by AIX support and is consistent
	with what OpenSSH does.
	[d3109706ec85]

	* vasgroups.c:
	Use warningx() instead of log_error() since the latter is not
	available to visudo or testsudoers. This does mean that they don't
	end up in syslog.
	[0174e89f983b]

	* sudo.c:
	Defer call to sudo_nonunix_groupcheck_cleanup() until after we have
	closed the sudoers sources. From Quest sudo.
	[c1b33e3e0f9e]

	* pwutil.c:
	Ignore case when matching user/group names in the cache. From Quest
	sudo.
	[72df368a8a0e]

2010-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>

	* config.h.in, configure, configure.in, selinux.c:
	Add check for setkeycreatecon() when --with-selinux is specified.
	[24144c52c0cc]

	* configure, configure.in:
	Bump version to 1.7.3b5 Error out if libaudit.h is missing or
	ununable when --with-linux-audit was specified
	[215c7653d9bc]

	* aix.c:
	K&R function declaration for aix_setauthdb()
	[82da12d222a6]

	* env.c, sudo.c, sudo.h:
	If env_init() was called implicitly via getenv(), setenv() or
	putenv() just use the specified envp instead of mallocing a new
	copy. This prevents an infinite loop on OpenBSD which calls
	getenv() from malloc() to get MALLOC_OPTIONS.
	[8e82ce63f774]

	* ldap.c:
	Add support for multiple URI lines by joining the contents and
	passing the result to ldap_initialize.
	[b4e10b2ffdb1]

2010-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>

	* pwutil.c, set_perms.c, sudo_nss.c:
	Bracket initgroups with calls to aix_setauthdb() and
	aix_restoreauthdb()
	[363dbe449f1c]

	* aix.c:
	Include compat.h before alloc.h to get __P
	[819a2667ffd7]

	* auth/aix_auth.c:
	Include usersec.h for authenticate() prototype
	[2b8dd2b67131]

	* aix.c:
	Add missing includes Add missing trailing NUL in userinfo string
	[8deaedf44943]

2010-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>

	* HISTORY, history.pod:
	Mention when LDAP was incorporated.
	[4e6c8ec4f67c]

2010-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>

	* configure:
	Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it is
	not covered by _ALL_SOURCE.
	[3657f1b181b9]

	* pwutil.c:
	Include usersec.h on AIX to get IDtouser() prototype.
	[11483bbe15c7]

	* configure.in:
	Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it is
	not covered by _ALL_SOURCE.
