sync

diff --git a/BUGS b/BUGS
index a95fae0c39198775d0727f61f3994bdf8982390e..c5c9e36d7e66eea2c2bf1eac45c1d12643508ea8 100644 (file)
--- a/BUGS
+++ b/BUGS
@@ -24,5 +24,8 @@ Known bugs in sudo version 1.6.8
 6) For the same reason as #5, changing the value of "ignore_dot" has
    no effect (find_path() is called before sudoers is parsed).
 
+7) A negated user/uid in a runas list is not treated the same as a
+   negated command.  E.g. it does not override a previously allowed spec.
+
 For a list of things that are not bugs but that I would like to
 add / fix, please see the TODO file.

diff --git a/CHANGES b/CHANGES
index 7fe6528c7510751fb6f6a34dcae9f7996eeab90a..862e75c36aed5676453fbba696bc7ec342a25e14 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1678,3 +1678,5 @@ Sudo 1.6.7p6 released.
 
 526) Added start_tls support from Gudleik Rasch <gudleik@rastamatra.org>.
 
+527) A uid specified in sudoers now matches the user specified by the
+     -u flag even if the -u flag specified a name, not a uid.