Bug 931

Summary:	sudo 1.9.1 on AIX does no longer log in the sudo log file
Product:	Sudo	Reporter:	altmark
Component:	Sudo	Assignee:	Todd C. Miller <Todd.Miller>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	low
Version:	1.9.1
Hardware:	IBM
OS:	AIX

Description altmark 2020-07-06 07:48:50 MDT

As I just found out today, there are no more entries being logged in the sudo log file after I had updated the sudo RPM lately from version 1.9.0-1 to 1.9.1-1 on AIX. When I revert back to the older version, things work as expected.

The config files /etc/sudoers and those in the /etc/sudoers.d directory are unchanged (except for replacing "#includedir" with "@includedir").

These are the log specific options in /etc/sudoers:

Defaults log_year
Defaults logfile=/var/adm/sudo.log

Comment 1 Todd C. Miller 2020-07-06 15:05:38 MDT

In sudo 1.9.1 the logging of successful commands moved to an audit plugin but the symbol for it was not exported on systems where the compiler doesn't directly support symbol visibility.

I've committed a fix for that and rebuilt the sudo 1.9.1 AIX packages with the change.

Comment 2 altmark 2020-07-07 02:12:03 MDT

This fixes the issue. Thanks a lot for the quick response!

(BTW, the shasums on the download page seem to be still those for the old RPMs. Thought I'd mention it, since they didn't match after downloading the revised packages.)

Comment 3 Todd C. Miller 2020-07-07 07:42:58 MDT

I updated the web site so the sha2 checksums are now up to date.  Thanks for noticing that.

Comment 4 Todd C. Miller 2020-07-22 10:00:35 MDT

Fixed in sudo 1.9.2, available now.