2012-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>

	* NEWS:
	Update for sudo 1.8.5p2
	[d369d4d40a19]

2012-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/env_hooks.c, src/sudo.h, src/tgetpass.c:
	Provide unhooked version of getenv() and use it when looking up
	DISPLAY and SUDO_ASKPASS in the environment.
	[04dbdccf4a14]

2012-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
	If sudoers_mode is group-readable but the actual sudoers file is
	not, open the file as uid 0, not uid 1. This fixes a problem when
	sudoers has a more restrictive mode than what sudo expects to find.
	In older versions, sudo would silently chmod the file to add the
	group-readable bit.
	[c056b6003e6f]

2012-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>

	* NEWS, configure, configure.in:
	Update for 1.8.5p1
	[c33c49bf5b4b]

	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
	Fix #includedir; from Mike Frysinger
	[d4833d4e39a0]

	* plugins/sudoers/check.c:
	Don't prompt for a password if the user is in the exempt group, is
	root, or is running the command as themselves even if the -k option
	was specified. This makes "sudo -k command" consistent with the
	behavior one would get if the user ran "sudo -k" immediately before
	running the command.
	[632b3961df00]

2012-05-15  Todd C. Miller  <Todd.Miller@courtesan.com>

	* INSTALL:
	Fix capitalization
	[7258aa977caf]

	* mkpkg:
	Build PIE executable on Mac OS X 10.5 and above.
	[2a5c7ef92182]

2012-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>

	* NEWS:
	Update for sudo 1.8.4p5
	[21164f508b68]

	* plugins/sudoers/match_addr.c:
	Add missing break between AF_INET and AF_INET6 in
	addr_matches_if_netmask()
	[672a4793931a]

	* plugins/sudoers/mon_systrace.c:
	Move systrace monitor code to the attic
	[d6faf4754e9c]

2012-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/exec.c:
	The pointer to the siginfo_t struct in a signal handler may be NULL.
	[41a4ee934b53]

2012-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/pwutil.c:
	Fix an alignment problem on NetBSD systems with a 64-bit time_t and
	strict alignment. Based on a patch from Martin Husemann.
	[1e5ba3c18f17]

	* include/missing.h:
	Add offsetof macro for those without it.
	[e44cb51d2587]

	* MANIFEST:
	add system_group plugin
	[6169793b510c]

2012-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>

	* compat/dlopen.c:
	Implement RTLD_NEXT and fix RTLD_DEFAULT for HP-UX.
	[85bd03bc5d94]

2012-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>

	* NEWS:
	Mention system_group plugin
	[05393dd4bdb8]

	* Makefile.in, plugins/sudoers/Makefile.in,
	plugins/system_group/Makefile.in:
	update depends
	[6feb0b824fc4]

	* plugins/system_group/system_group.c:
	Only call gr_delref() when use sudo's password caching functions.
	[1103442e21fa]

	* plugins/sample_group/Makefile.in, plugins/system_group/Makefile.in:
	Add missing dependency on libreplace.la
	[05bfd9d4657f]

	* compat/dlopen.c:
	Emulate RTLD_DEFAULT and RTLD_SELF w/ shl_findsym() using NULL and
	PROG_HANDLE.
	[2382d0693acc]

	* Makefile.in, configure, configure.in,
	plugins/system_group/Makefile.in,
	plugins/system_group/system_group.c,
	plugins/system_group/system_group.sym:
	Add group plugin that does lookups by name using the system group
	database.
	[2ddbb604112f]

	* plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po, src/po/pl.mo,
	src/po/pl.po:
	sync with translationproject.org
	[4ef05df4226d]

2012-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
	src/po/de.mo, src/po/de.po, src/po/eo.mo, src/po/eo.po,
	src/po/fi.mo, src/po/fi.po, src/po/ja.mo, src/po/ja.po,
	src/po/ru.mo, src/po/ru.po, src/po/sr.mo, src/po/sr.po,
	src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
	src/po/zh_CN.mo, src/po/zh_CN.po:
	sync with translationproject.org
	[115c3f828fc5]

2012-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.pp:
	Add mode for docdir and use '-' (default) for localedir mode. Fixes
	a problem on Linux when building in a directory with the setgid bit
	set.
	[582279c8bcb1]

2012-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>

	* pp:
	Match CentOS 6.0
	[1e99ef210f98]

2012-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>

	* NEWS:
	Update with recent changes
	[c5fc220ba696]

	* pp:
	Fix version check on AIX
	[d272e39112f4]

	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
	regen
	[72b23509465a]

	* plugins/sudoers/ldap.c:
	Need to call ldapssl_clientauth_init() for start_tls on Mozilla LDAP
	SDK.
	[87b685e70b9a]

	* plugins/sudoers/ldap.c:
	Fix printing of invalid uri
	[645aa53acdde]

	* plugins/sudoers/auth/pam.c:
	Pass PAM_SILENT when deleting creds to remove an annoying warning
	message on Solaris.
	[1dd0301ef293]

2012-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/utmp.c:
	Fix the setutxent and endutxent compatibility defines (this time
	correctly) when only setutent and endutent are available.
	[d136d2867db9]

	* plugins/sudoers/ldap.c:
	sudo_ldap_set_options_global() should not take an LDAP handle as an
	argument since the options affect the global settings.
	[1dc39b9d20f2]

	* mkpkg:
	Debian sudo has not been built with --with-exempt=sudo since 1.6.8.
	[c7716291a856]

	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
	plugins/sudoers/auth/pam.c, src/exec.c, src/exec_pty.c, src/sudo.c,
	src/sudo.h:
	Call the policy's init_session() function before we fork the child.
	That way, the session is created and destroyed in the same process,
	which is needed by some modules, such as pam_mount.
	[ece552ba002e]

	* doc/TROUBLESHOOTING:
	Add entry for SSL LDAP errors on Mozilla SDKs when the cert dir is
	not specified.
	[bd293e100b28]

	* plugins/sudoers/auth/pam.c:
	Delete creds after closing the PAM session.
	[5158d726d6a5]

	* plugins/sudoers/ldap.c:
	Provide a more useful error message if using a Mozilla-style LDAP
	SDK and you forgot to specify TLS_CERT in ldap.conf.
	[7cb78feb899c]

	* src/exec_pty.c:
	Add missing initialization of a sigaction structure when I/O
	logging. Fixes a potential problem when suspending the command.
	[f4480f2ba816]

	* plugins/sudoers/ldap.c:
	Split global and per-connection LDAP options into separate arrays.
	Set global LDAP options before calling ldap_initialize() or
	ldap_init(). After we have an LDAP handle, set the per-connection
	options. Fixes a problem with OpenLDAP using the nss crypto backend;
	bug #342
	[265c9d2dc12b]

	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
	plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
	src/po/de.mo, src/po/de.po, src/po/hr.mo, src/po/hr.po,
	src/po/vi.mo, src/po/vi.po, src/po/zh_CN.mo, src/po/zh_CN.po:
	sync with translationproject.org
	[6d7fe44be21e]

2012-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/sudo.c, src/sudo.h:
	Move struct passwd pointer into struct command details.
	[d6fb1eff2065]

2012-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>

	* pp:
	Sync with upstream for Mac OS X (and other) fixes.
	[c2f4998d01b0]

	* mkpkg:
	Only built Mac intel universal binary on an intel machine.
	[0009e0b7e5a8]

	* src/Makefile.in:
	Do not pass libtool the -static-libtool-libs option when building
	sudo and sesh. Otherwise, libtool may prefer a static version of an
	installed library over a dynamic one when linking.
	[6fbac9adc885]

2012-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>

	* MANIFEST, NEWS, doc/CONTRIBUTORS, plugins/sudoers/po/hr.mo,
	plugins/sudoers/po/hr.po, src/po/de.mo, src/po/de.po:
	Add German translation for sudo Add Croatian translation for sudoers
	[fa4da1a6530c]

	* plugins/sudoers/iolog.c:
	typo fix in comment
	[abd721d1288e]

2012-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>

	* NEWS:
	Update with recent changes
	[6fa11e8448b9]

	* Makefile.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
	Sort xgettext output by file name.
	[f650841810f0]

	* doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod:
	Clarify what "sudoreplay -l" displays and mention that it is sorted.
	[84031c117bd6]

	* config.h.in, configure, configure.in, src/ttyname.c:
	Use AC_HEADER_MAJOR to determine where major/minor are defined.
	[3c949650a223]

	* config.h.in, configure, configure.in, src/ttyname.c:
	Include sys/mkdev.h if present instead of sys/sysmacros.h for
	minor(). This is needed on Solaris (at least) where the makedev
	macros in sysmacros.h are obsolete and library functions should be
	used instead.
	[343928acf81e]

	* mkpkg:
	When building on Mac OS X, only set SDK_FLAGS if specified osversion
	doesn't match host.
	[d84c6efac872]

2012-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/ttyname.c:
	Add back buf and tty variables for _ttyname() case that were
	inadvertantly removed.
	[a4a820b22a44]

2012-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/po/sudoers.pot:
	regen
	[5446b12c1250]

	* configure, configure.in:
	Remove b8 from version number.
	[5adc4dcec061]

	* src/ttyname.c:
	remove some XXX
	[187579a5f593]

	* src/ttyname.c:
	When looking for a device match, do a breadth-first search instead
	of depth-first. We already special case /dev/pts/ so chances are
	good that if it is not a pseudo-tty it is in the base of /dev/. Also
	avoid a stat(2) when possible if struct dirent has d_type.
	[0183f8a1b278]

	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
	src/sudo.c, src/sudo.h:
	Pass pid, ppid, sid, pgid and tcpgid to plugin in user_info list.
	[f0574d878491]

	* src/po/eo.mo, src/po/es.mo, src/po/es.po, src/po/fi.mo,
	src/po/ja.mo, src/po/pl.mo, src/po/ru.mo, src/po/uk.mo,
	src/po/vi.mo:
	sync with translationproject.org
	[4527ea78fbd5]

	* MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/gl.mo, src/po/gl.po,
	src/po/hr.mo, src/po/hr.po:
	New Croatian and Galician translations from translationproject.org
	[ad4bd924b4de]

	* src/ttyname.c:
	Add depth-first traversal of /dev/ for the /proc case when not
	/dev/pts/N
	[499bd3456774]

	* config.h.in, configure, configure.in, plugins/sudoers/sudoreplay.c:
	If struct dirent has d_type, use it to avoid an extra stat().
	[741dabbe4bcd]

	* plugins/sudoers/sudoreplay.c:
	Sort output of "sudoreplay -l"
	[c0615795bd4b]

2012-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/sudoreplay.c:
	Fix duplicate free introduced in last rev
	[efdaabe69d75]

2012-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/auth/pam.c:
	Instead of treating ^C from tgetpass() specially, always return
	AUTH_INTR if tgetpass() returned NULL. Treat PAM_AUTHINFO_UNAVAIL
	like PAM_AUTH_ERR which Mac OS X returns this when there is no tty.
	[a3b17298d4d0]

	* config.h.in, configure, configure.in, src/ttyname.c:
	Rototill code to determine the tty. For Linux, we now look up the
	tty device in /proc/pid/stat instead of trying to open
	/proc/pid/fd/[0-2]. The sudo_ttyname_dev() function maps the given
	device number to a string. On BSD, we can use devname(). On
	Solaris, _ttyname_dev() does what we want. TODO: write /dev/
	traversal code for the generic sudo_ttyname_dev().
	[6b22be4d09f0]

2012-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/ttyname.c:
	Define PRNODEV for those w/o it.
	[f17290e64559]

	* config.h.in, configure, configure.in, src/ttyname.c:
	Check for SVR4-style struct psinfo.pr_ttydev and use that to
	determine the tty if std{in,out,err} are not ttys.
	[76ad33a91f4b]

	* src/ttyname.c:
	Better support for SVR4-style /proc entries where we can't use
	ttyname() on the /proc/pid/fd/[0-2] entries. We can, however,
	attempt to map the device number back to the correct pseudo-tty
	slave device.
	[4f9f48cc79eb]

	* src/ttyname.c:
	When trying to determine the tty name, check parent's stderr in
	addition to its stdin and stdout.
	[604644056c7d]

	* src/exec_pty.c:
	Treat a tty read failure like EOF as it usually means the pty has
	gone away. Handle write() on the tty returning EIO.
	[16957f4a706f]

	* src/exec.c, src/exec_pty.c:
	Linux select() may return ENOMEM if there is a kernel resource
	shortage. Older Solaris select() may return EIO instead of EBADF
	when the tty goes away. If we get an unhandled select() failure,
	kill the child and exit cleanly.
	[d93940a311ab]

	* src/ttyname.c:
	Open /proc/pid/fd/[0-2] in non-blocking mode just in case we might
	block in open.
	[a9f809d09d52]

2012-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/set_perms.c:
	Fix restoration of AIX permissions.
	[30c717115988]

	* src/parse_args.c:
	Allow the -k flag to be used along with the -i and -s flags.
	[0653b17c97f1]

	* plugins/sudoers/sudoreplay.c:
	Plug memory leak in parse_logfile() in the error path.
	[9cce86fa833b]

	* plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
	src/po/da.mo, src/po/da.po, src/po/eo.po, src/po/es.po,
	src/po/fi.po, src/po/it.mo, src/po/it.po, src/po/ja.po,
	src/po/pl.po, src/po/ru.po, src/po/uk.po, src/po/vi.po,
	src/po/zh_CN.mo, src/po/zh_CN.po:
	sync with translationproject.org
	[14af43d0b170]

2012-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>

	* compat/regress/glob/globtest.c, config.h.in, configure,
	configure.in, plugins/sudoers/match.c:
	Do not use GLOB_BRACE or GLOB_TILDE flags to glob()--we want the
	glob() and fnmatch() results to be consistent.
	[4226750d73c2]

2012-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>

	* MANIFEST, common/Makefile.in, common/ttysize.c, src/Makefile.in,
	src/ttysize.c:
	Move ttysize.c to common so sudoreplay can use it.
	[b4a0aa514cd4]

	* plugins/sudoers/sudoreplay.c:
	If I/O log file includes rows + cols, warn if the user's tty is not
	big enough.
	[b980ef89efff]

	* plugins/sudoers/sudoreplay.c:
	Fix printing of TSID in "sudoreplay -l"
	[4221e3e108b4]

	* common/sudo_debug.c, include/sudo_debug.h,
	plugins/sudoers/logging.c, plugins/sudoers/visudo.c, src/exec.c,
	src/exec_pty.c:
	Log the process id in the debug file output. Since we don't want to
	keep calling getpid(), stash the value at init time and when we
	fork().
	[2782d30c024d]

	* src/exec_pty.c:
	Ignore SIGTTIN and SIGTTOU in main sudo process when I/O logging. It
	is better to receive EIO from read()/write() than to be suspended
	when we don't expect it. Fixes a problem when our terminal is
	revoked which can happen when, e.g. our sshd is killed
	unceremoniously. Also, only change the value of "alive" from true to
	false, never from false to true. It is possible for us to receive
	notification of the child having stopped after it is already dead.
	This does not mean it has risen from the grave.
	[26c9fe8ce0f9]

	* src/exec_pty.c:
	Distinguish between signals we received from the parent vs. those
	delivered explicitly to the monitor process in debugging info.
	[40716cb180e5]

2012-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/check.c:
	In Solaris 11, /dev/pts under the "dev" filesystem, not "devices".
	Update tty_is_devpts() to match so we can determine when the tty has
	been reused.
	[2689665df027]

	* common/sudo_debug.c, include/error.h, include/sudo_debug.h:
	Always pass __func__, __FILE__ and __LINE__ in sudo_debug_printf()
	and use a new flag, SUDO_DEBUG_FILENO to specify when to use it.
	This allows consumers of sudo_debug_printf() to log that data
	without having to specify it manually.
	[7c94c4879208]

	* src/exec_pty.c:
	Make this compile after last change.
	[ee09034f3266]

	* src/exec_pty.c:
	Don't try to restore the terminal if we are not the foreground
	process. Otherwise, we may be stopped by SIGTTOU when we try to
	update the terminal settings when cleaning up.
	[c48b24335456]

	* src/exec.c:
	If select() return EBADF in the main event loop, one of the ttys
	must have gone away so perform any I/O we can and close the bad fds.
	[3bc8678c03ce]

	* common/sudo_debug.c, include/error.h, include/sudo_debug.h,
	plugins/sudoers/toke.c, plugins/sudoers/toke.h,
	plugins/sudoers/toke.l:
	Log warning() at SUDO_DEBUG_WARN not SUDO_DEBUG_ERROR. Log the
	function, file and line number in the debug log for warning() and
	error().
	[894cd131f11d]

2012-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>

	* common/sudo_debug.c, include/error.h, include/sudo_debug.h,
	src/conversation.c:
	Add SUDO_DEBUG_ERRNO flag to debug functions so we can log errno.
	Use this flag when wrapping error() and warning() so the debug
	output includes the error string.
	[1e2c67adaf1f]

2012-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>

	* NEWS:
	Update for sudo 1.8.5
	[7d2b62b823fe]

	* plugins/sudoers/po/sudoers.pot:
	regen
	[718ad9de92cd]

	* doc/CONTRIBUTORS:
	sync
	[f48013aea641]

	* plugins/sudoers/pwutil.c:
	Use ecalloc()
	[fabd23c1f271]

	* src/exec_pty.c:
	Don't need zero_bytes() after ecalloc()
	[1a9d95cd10ef]

	* config.h.in, configure, configure.in, src/sudo_noexec.c:
	Add execvpe(), exect(), posix_spawn() and posix_spawnp() wrappers to
	sudo_noexec.c.
	[cbaa1d4b0f8a]

	* src/utmp.c:
	Fix compat setutxent and endutxent macros for systems with
	setutent() but not setutxent(). From Gustavo Zacarias
	[d7ce622fc5f2]

2012-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>

	* configure.in:
	Add ignore_result definition to AH_BOTTOM
	[8d4096838a98]

	* common/sudo_debug.c, config.h.in, plugins/sample/sample_plugin.c,
	plugins/sudoers/iolog.c, plugins/sudoers/toke.c,
	plugins/sudoers/toke.l, plugins/sudoers/visudo.c, src/env_hooks.c,
	src/exec.c, src/exec_pty.c, src/tgetpass.c:
	Fix compiler warnings on some platforms and provide a better method
	of defeating gcc's warn_unused_result attribute.
	[9a8f804fcc75]

	* configure, configure.in:
	Fix building the builtin zlib from a build dir. When a zlib dir was
	specified, prepend its include path instead of appending so we get
	the right zlib headers.
	[5f61d591b186]

	* doc/LICENSE, zlib/adler32.c, zlib/crc32.c, zlib/crc32.h,
	zlib/deflate.c, zlib/deflate.h, zlib/gzguts.h, zlib/gzlib.c,
	zlib/gzread.c, zlib/gzwrite.c, zlib/infback.c, zlib/inffixed.h,
	zlib/inflate.c, zlib/inftrees.c, zlib/trees.c, zlib/zconf.h.in,
	zlib/zlib.h, zlib/zutil.c, zlib/zutil.h:
	Update zlib to version 1.2.6
	[173c4bc4d4fc]

2012-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>

	* include/missing.h:
	g/c __unused which is no longer used
	[7ef3f23edcd6]

	* src/env_hooks.c:
	Fix compilation if RTLD_NEXT is not defined.
	[d5605f468b71]

	* src/po/sr.mo, src/po/sr.po:
	sync with translationproject.org
	[27d559f7985d]

	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
	doc/sudoers.man.in:
	regen
	[f9f63ce478b6]

	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
	regen
	[59035d82d15a]

	* Makefile.in:
	Ignore Project-Id-Version when comparing pot files.
	[22feb9ede46b]

	* plugins/sudoers/bsm_audit.c:
	Use error() instead of log_fatal()
	[54130bda4b50]

	* plugins/sudoers/env.c:
	Fix signedness of didvar in env_update_didvar()
	[77048a80b3e4]

	* plugins/sudoers/iolog.c:
	Quiet a compiler warning on some platforms.
	[8fdcaece0400]

	* compat/fnmatch.c:
	cast ctype(3) function/macro arguments from char to unsigned char to
	avoid potential negative subscripting.
	[bdcf7eef21ef]

	* common/setgroups.c:
	Quiet a warning on systems where the gids array in setgroups() is
	not prototyped as being const, even though it really is.
	[fdd758c6302d]

	* src/env_hooks.c:
	Quiet a compiler warning on systems where the argument to putenv(3)
	is const.
	[51bae2193b53]

	* plugins/sudoers/sudoreplay.c:
	Undo an incorrect int -> bool conversion.
	[b9a4ce320f14]

	* MANIFEST, NEWS, plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
	src/po/sv.mo, src/po/sv.po:
	Add Swedish sudo and sudoers translations from
	translationproject.org
	[f7ce1de9073f]

	* plugins/sudoers/env.c:
	No need to preserve ODMDIR on AIX now that we always read
	/etc/environment.
	[4aa04b2f0125]

2012-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>

	* doc/sudoers.pod, plugins/sudoers/env.c:
	When initializing the environment for env_reset, start out with the
	contents of /etc/environment on AIX and login.conf on BSD.
	[5717bdc321e2]

	* doc/TROUBLESHOOTING, src/sudo.c:
	If we are not running with an effective uid of 0, try to give the
	user enough information to debug the problem.
	[fa4894896d8a]

	* plugins/sudoers/getdate.c, plugins/sudoers/gram.c:
	Quiet a clang-analyzer false positive.
	[c4c0c1b9c8b0]

	* src/tgetpass.c:
	If there is nothing to read from the askpass program, set errno to
	EINTR. This makes the cancel button behave like the user entered ^C
	at the password prompt when PAM is used.
	[594302cb9caf]

	* src/sudo.h, src/tgetpass.c:
	Fetch the value of "askpass" from the sudo conf struct.
	[4593ee8f1bd3]

	* common/sudo_conf.c:
	Fix matching of "Path askpass" and "Path noexec"
	[4df28d62afb9]

2012-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/visudo.c:
	Quiet a clang-analyzer dead store warning.
	[dd90bf385a3f]

	* plugins/sudoers/sudoers.c:
	If the "timestampowner" user cannot be resolved, use ROOT_UID
	instead of exiting with a fatal error.
	[8d62aae99715]

	* plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
	plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/bsm_audit.c,
	plugins/sudoers/check.c, plugins/sudoers/env.c,
	plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
	plugins/sudoers/logging.h, plugins/sudoers/parse.c,
	plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
	Remove the NO_EXIT flag to log_error() and add a log_fatal()
	function that exits and is marked no_return. Fixes false positives
	from static analyzers and is easier for humans to read too.
	[a0fe785c2a3d]

2012-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po, src/po/eo.mo,
	src/po/eo.po:
	sync with translationproject.org
	[df5e8777de13]

2012-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/po/da.mo, src/po/da.po:
	sync with translationproject.org
	[629d99548b78]

	* plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
	sync with translationproject.org
	[9d122a2860d6]

2012-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/po/it.mo, src/po/it.po:
	sync with translationproject.org
	[6397593b15cf]

	* common/sudo_conf.c, plugins/sudoers/alias.c,
	plugins/sudoers/defaults.c, plugins/sudoers/env.c,
	plugins/sudoers/gram.c, plugins/sudoers/gram.y,
	plugins/sudoers/interfaces.c, plugins/sudoers/ldap.c,
	plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
	plugins/sudoers/visudo.c, src/exec.c, src/exec_pty.c, src/hooks.c,
	src/load_plugins.c:
	Use ecalloc() when allocating structs.
	[8b5888868db2]

	* common/alloc.c, include/alloc.h:
	Add ecalloc() and commented out recalloc(). Use inline strnlen()
	instead of strlen() in estrndup().
	[7fb9aa46c1e0]

2012-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
	plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
	plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
	plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
	plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
	src/po/fi.mo, src/po/fi.po, src/po/ja.mo, src/po/ja.po,
	src/po/pl.mo, src/po/pl.po, src/po/ru.mo, src/po/ru.po,
	src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
	src/po/zh_CN.mo, src/po/zh_CN.po:
	sync with translationproject.org
	[45a032c37334]

2012-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/set_perms.c:
	Remove unused label
	[2660bb0c1313]

	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
	Document what changed in each plugin API revision
	[59b30a6fc4d1]

	* plugins/sudoers/set_perms.c:
	Remove bogus optimization that could lead to a double free of the
	group list.
	[b0bfbd2a83a8]

2012-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>

	* doc/TROUBLESHOOTING:
	Expand AIX /etc/security/privcmds entry.
	[9f3f072e034e]

	* NEWS:
	Update for sudo 1.8.5
	[086049011f25]

	* common/sudo_conf.c, doc/sample.sudo.conf, doc/sudo.cat,
	doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
	doc/sudo_plugin.man.in, doc/sudo_plugin.pod, doc/sudoers.cat,
	doc/sudoers.man.in, doc/sudoers.pod, include/sudo_conf.h,
	include/sudo_plugin.h, src/load_plugins.c, src/sudo.c,
	src/sudo_plugin_int.h:
	Rename plugin "args" to "options"
	[f25624951bd2]

	* doc/CONTRIBUTORS:
	Add Lithuanian and Vietnamese translators
	[2b4c075b69e3]

	* Makefile.in:
	Ignore comments when comparing new and old pot files.
	[f872999347b3]

	* src/Makefile.in:
	regen
	[c8193b1b11c7]

	* doc/sudo_plugin.cat, doc/sudo_plugin.man.in:
	regen
	[15e3c17e8a3a]

	* doc/sudo_plugin.pod, include/sudo_plugin.h,
	plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
	plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/env.c,
	plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/hooks.c,
	src/sudo.c, src/sudo.h:
	Pass a pointer to user_env in to the init_session policy plugin
	function so session setup can modify the user environment as needed.
	For PAM authentication, merge the PAM environment with the user
	environment at init_session time. We no longer need to swap in the
	user_env for environ during session init, nor do we need to disable
	the env hooks at init_session time.
	[3f5277b359d8]

	* plugins/sample/sample_plugin.c:
	Add explicit NULL entries for init_session, register_hooks and
	deregister_hooks with appropriate comments.
	[727a57978b40]

	* compat/pw_dup.c:
	Quiet a gcc "used uninitialized in this function" false positive.
	[f14b68379ce9]

	* plugins/sudoers/toke.c, plugins/sudoers/toke.l:
	We should always call warning() with a format string or a string
	literal. In this case, the argument (path) is not user-controlled.
	[e9ef51224024]

2012-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>

	* src/selinux.c:
	Include sudo_exec.h for the sudo_execve() prototype.
	[769e58065edc]

	* config.h.in, configure, configure.in:
	Add check for pam_getenvlist()
	[36bde3f26c60]

	* common/sudo_conf.c:
	Set args to NULL in default plugin info struct when there is no
	Plugin line in sudo.conf.
	[93ec67708f01]

	* plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
	regen
	[a9287677795c]

	* doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
	doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
	doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
	doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
	regen
	[a242769d7962]

	* configure, configure.in:
	Bump version to 1.8.5
	[e8618f0c2505]

	* doc/sudo_plugin.pod:
	Document hooks API
	[e6ad07d27958]

2012-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>

	* sudo.pp:
	Make sudoersdir relative to PKG_INSTALL_ROOT for Solaris.
	[fd72340042d3]

	* include/sudo_plugin.h:
	Use sudo_hook_fn_t in struct sudo_hook.
	[938f93112d6e]

	* doc/TROUBLESHOOTING:
	If cross compiling, --host must include the OS in the tuple. E.g.
	--host powerpc-unknown-linux
	[b8c010070c1e]

2012-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/parse.c:
	Fix bogus int -> bool conversion; tags can have a value of -1.
	[e63d6434a303]

	* plugins/sudoers/env.c:
	Add env_should_keep() and env_should_delete() wrapper functions to
	simplify things a bit and hide the fact that matches_env_check() is
	not bool.
	[7a03d7a12b50]

	* sudo.pp:
	Fix application of debian-specific sudoers mods when building
	packages as non-root.
	[34bf4c52c425]

	* plugins/sudoers/env.c:
	matches_env_check() returns int, not boolean
	[0ad915b8d5cb]

	* src/sudo_edit.c:
	Fix compilation when seteuid() is not available.
	[8a722f998000]

	* src/ttyname.c:
	Simply move the free of ki_proc outside the realloc() loop.
	[217b786da760]

	* src/ttyname.c:
	Bring back the erealloc() for the ENOMEM loop and just zero the
	pointer after we free it.
	[29a016e45127]

	* src/ttyname.c:
	Don't try to erealloc() a potentially freed pointer; Mateusz Guzik
	[266e08844065]

2012-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/set_perms.c:
	Use normal error path if unable to set sudoers gid.
	[01c816918c99]

	* plugins/sudoers/set_perms.c:
	Make this work again on systems w/o seteuid().
	[2e67f7421e97]

2012-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/set_perms.c:
	Fix compilation if no seteuid/setreuid/setresuid available.
	[d0b3c1f88eb4]

	* plugins/sudoers/set_perms.c:
	Better error messages, and added debugging throughout. Fixed
	seteuid() version of set_perms()/restore_perms(). Fixed logic bug in
	AIX version of restore_perms(). Added checks to avoid changing
	uid/gid when we don't have to. Never set gid/uid state to -1, use
	the old value instead.
	[29188d469b5c]

	* src/exec_pty.c, src/ttyname.c:
	Fix format string warning on Solaris with gcc 3.4.3.
	[d1eeb6e1dd0f]

	* src/sudo.c:
	Always declare environ now that we swap it around unilaterally.
	[aaa3e92e7d0d]

	* src/Makefile.in:
	Honor LDFLAGS when linking sesh; from Vita Cizek
	[498b41438f6e]

	* src/sesh.c:
	Include alloc.h for estrdup() prototype; from Vita Cizek
	[93203655a320]

2012-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>

	* plugins/sudoers/sudoers.c:
	Don't read /etc/environment on Linux when using PAM, PAM should set
	the environment variables as needed via pam_env.
	[b1ef62cb2d40]

	* INSTALL:
	Fix editor goof.
	[0c3dd3bb8b57]

	* src/hooks.c, src/sudo.c, src/sudo.h:
	Disable environment hooks after we get user_env back to make sure a
	plugin can't to modify user_env after we "own" it. This is kind of
[--snip--]
