Mention logging changes.

diff --git a/NEWS b/NEWS
index 48db32471ad66442032c725001c91e9047a07e86..58bfd96ce2203e9081e4ca1e2fc6d3a63bfca84e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -28,6 +28,11 @@ What's new in Sudo 1.8.6?
    ldap.conf options.  A new ldap.conf option, TLS_KEYPW can be
    used to specify a password to decrypt the key database.
 
+ * If a user fails to authenticate and the command would be rejected
+   by sudoers, it is now logged with "command not allowed" instead
+   of "N incorrect password attempts".  Likewise, the "mail_no_perms"
+   sudoers option now takes precedence over "mail_badpass".
+
 What's new in Sudo 1.8.5p2?
 
  * Fixed use of the SUDO_ASKPASS environment variable which was