Am Samstag, 5. November 2022, 10:17:54 CET schrieb Mathias Homann:

> Am 05.11.2022 um 10:06 schrieb Carlos E. R.:

> > On 2022-11-05 08:00, Mathias Homann wrote:

> >> Am Samstag, 5. November 2022, 01:21:58 CET schrieb Fritz Hudnut:

> >>

> >>

> >> the new behaviour is actually the whole POINT of sudo: enabling

> >> certain users

> >> to run commands as root (or other users) WITHOUT having to tell them the

> >> password for the target account - which would also enable them to

> >> just do "su

> >> -" and do ANYTHING as the other account.

> >>

> >> in short: "TargetPW" is actually contrary to the intent and purpose

> >> of sudo -

> >> and on all my machines one of the first to go.

> >

> > In that case the update should have come with a notice somewhere to

> > tell people how they should configure sudoers _before_ the update.

>

> It did. See the announcement here on this list for the snapshot 20221103,

> and what it says about changes to sudo.

No normal "only user" will read it. There need a clear info after the update, dependent from the source, which ask about, what should be done. Similar like at debian or sometimes inside a zypper update on CLI!

Thanks and nice weekend

Ulf