Bug 931 – sudo 1.9.1 on AIX does no longer log in the sudo log file

Bug 931 - sudo 1.9.1 on AIX does no longer log in the sudo log file


Summary:	sudo 1.9.1 on AIX does no longer log in the sudo log file

Status:	RESOLVED FIXED

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.9.1
Hardware:	IBM AIX

Importance:	low normal
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2020-07-06 07:48 MDT by altmark
Modified:	2020-07-22 10:00 MDT (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description altmark 2020-07-06 07:48:50 MDT

As I just found out today, there are no more entries being logged in the sudo log file after I had updated the sudo RPM lately from version 1.9.0-1 to 1.9.1-1 on AIX. When I revert back to the older version, things work as expected.

The config files /etc/sudoers and those in the /etc/sudoers.d directory are unchanged (except for replacing "#includedir" with "@includedir").

These are the log specific options in /etc/sudoers:

Defaults log_year
Defaults logfile=/var/adm/sudo.log

Comment 1 Todd C. Miller 2020-07-06 15:05:38 MDT

In sudo 1.9.1 the logging of successful commands moved to an audit plugin but the symbol for it was not exported on systems where the compiler doesn't directly support symbol visibility.

I've committed a fix for that and rebuilt the sudo 1.9.1 AIX packages with the change.

Comment 2 altmark 2020-07-07 02:12:03 MDT

This fixes the issue. Thanks a lot for the quick response!

(BTW, the shasums on the download page seem to be still those for the old RPMs. Thought I'd mention it, since they didn't match after downloading the revised packages.)

Comment 3 Todd C. Miller 2020-07-07 07:42:58 MDT

I updated the web site so the sha2 checksums are now up to date.  Thanks for noticing that.

Comment 4 Todd C. Miller 2020-07-22 10:00:35 MDT

Fixed in sudo 1.9.2, available now.