To use the precompiled binaries attached below, consult our manual installation instructions

Added

• Linux kernels older than 5.9 are now supported.
• Support for Defaults noexec/NOEXEC: on Linux systems based on seccomp filtering to prevent shell escapes in wide range of cases. This should also work on programs not written in C and statically linked executables.
• Support for passwd_timeout
• Support for umask and umask_override
• --preserve-env=VAR is now supported to preserve selected environment variables in a more convenient way

Changed

• sudo-rs now uses CLOEXEC to close open file descriptors in the child process
• Relative paths like ./ in secure_path/PATH are now ignored.
• apparmor.so is dynamically loaded by sudo itself, as-needed

Fixed

• Usernames that start with _ or have non-western characters were not supported as a valid username in /etc/sudoers (#1149)
• Other usability improvements in /etc/sudoers (#1117, #1126, #1134, #1157)

Contributors for this release

Merged pull requests: @bjorn3, @squell, new contributors: @MggMuggins, @piguycs, @dzvon, @sohomdatta1 Closed issues opened by: @HanabishiRecca, @hyder365, @bertptrs, @mikkorantalainen, @satmandu, @raviksharma, @TheEdgeOfRage