From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Mon, 10 Oct 2016 14:24:47 +0000 (-0600)
Subject: expand on 1.8.18p1 changes
X-Git-Tag: SUDO_1_8_18p1^2~2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=bea34c9e6d233c86c2684137fe2390828ac77e94;p=sudo

expand on 1.8.18p1 changes
---

diff --git a/NEWS b/NEWS
index eef53256f..29a0b41a6 100644
--- a/NEWS
+++ b/NEWS
@@ -1,10 +1,13 @@
 What's new in Sudo 1.8.18p1
 
  * When sudo_noexec.so is used, the WRDE_NOCMD flag is now added
-   if the wordexp() function is called.
+   if the wordexp() function is called.  This prevents commands
+   from being run via wordexp() without disabling it entirely.
 
  * On Linux systems, sudo_noexec.so now uses a seccomp filter to
-   disable execute access where it is supported.
+   disable execute access if the kernel supports seccomp.  This is
+   more robust than the traditional method of using stub functions
+   that return an error.
 
 What's new in Sudo 1.8.18