add sections on tgetpass changes

diff --git a/UPGRADE b/UPGRADE
index d92728b3fbcced97a4f8a51c88a39179dac43316..86e646f353bbf835abce6521e5478f6056ba08c9 100644 (file)
--- a/UPGRADE
+++ b/UPGRADE
@@ -25,6 +25,9 @@ o Upgrading from a version prior to 1.7.0:
     in sudo's ldap.conf unless ldap.conf references a valid certificate
     authority file(s).
 
+    Please also see the WHATSNEW file for a list of new features in
+    sudo 1.7.0.
+
 o Upgrading from a version prior to 1.6.9:
 
     Starting with sudo 1.6.9, if an OS supports a modular authentication

diff --git a/WHATSNEW b/WHATSNEW
index 372e45b2a363a51b8a54f6aaf232a0ef4f5ef0ea..f3397061fbbd9e25fec37454aba2d91af390f52e 100644 (file)
--- a/WHATSNEW
+++ b/WHATSNEW
@@ -65,3 +65,12 @@ What's new in Sudo 1.7.0?
  * A new flag, -n, may be used to indicate that sudo should not
    prompt the user for a password and, instead, exit with an error
    if authentication is required.
+
+ * If sudo needs to prompt for a password and it is unable to disable
+   echo (and no askpass program is defined), it will refuse to run
+   unless the "visiblepw" Defaults option has been specified.
+
+ * Prior to version 1.7.0, hitting enter/return at the Password: prompt
+   would exit sudo.  In sudo 1.7.0 and beyond, this is treated as
+   an empty password.  To exit sudo, the user must press ^C or ^D
+   at the prompt.