Am Samstag, 5. November 2022, 10:17:54 CET schrieb Mathias Homann:
> Am 05.11.2022 um 10:06 schrieb Carlos E. R.:
> > On 2022-11-05 08:00, Mathias Homann wrote:
> >> Am Samstag, 5. November 2022, 01:21:58 CET schrieb Fritz Hudnut:
> >>
> >>
> >> the new behaviour is actually the whole POINT of sudo: enabling
> >> certain users
> >> to run commands as root (or other users) WITHOUT having to tell them the
> >> password for the target account - which would also enable them to
> >> just do "su
> >> -" and do ANYTHING as the other account.
> >>
> >> in short: "TargetPW" is actually contrary to the intent and purpose
> >> of sudo -
> >> and on all my machines one of the first to go.
> >
> > In that case the update should have come with a notice somewhere to
> > tell people how they should configure sudoers _before_ the update.
>
> It did. See the announcement here on this list for the snapshot 20221103,
> and what it says about changes to sudo.
No normal "only user" will read it. There need a clear info after the update, dependent from the source, which ask about, what should be done. Similar like at debian or sometimes inside a zypper update on CLI!
Thanks and nice weekend
Ulf