checkpoint

diff --git a/CHANGES b/CHANGES
index 9db165b065bf0449c467d0b5046a4d90633e3ff0..f78a322b12f8ea475fcf517dcef9665caa759a01 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1360,9 +1360,10 @@ Sudo 1.6.3p7 released.
 426) Added stay_setuid option for systems that have libraries that perform
      extra paranoia checks in system libraries for setuid programs.
 
-427) Environment munging is now done by hand.  We build up a new environment
-     and assign it to "environ".  This means we don't rely on getenv(3),
-     putenv(3), or setenv(3).
+427) Environment munging is now done by hand.  The environment is zeroed
+     upon sudo startup and a new environment is built before the command
+     is executed.  This means we don't rely on getenv(3), putenv(3),
+     or setenv(3).
 
 428) Added a class of environment variables that are only cleared if they
      contain '/' or '%' characters.
@@ -1375,7 +1376,7 @@ Sudo 1.6.3p7 released.
 430) Fixed file locking in visudo on NeXT which has a broken lockf().
      Patch from twetzel@gwdg.de.
 
-431) Regenerated configure script with autoconf-2.50 (required some
+431) Regenerated configure script with autoconf-2.52 (required some
      tweaking of configure.in and friends).
 
 432) Added mail_badpass option to send mail when the user does not
@@ -1454,4 +1455,7 @@ Sudo 1.6.3p7 released.
 455) If "make install" is run by non-root and the destination dir
      is writable, install things normally but don't set owner and mode.
 
-456) config.h.in is now generated by autoheader.
+456) The Makefile now supports installing in a shadow hierarchy
+     specified via the DESTDIR variable.
+
+457) config.h.in is now generated by autoheader.