merge sudo 1.9.2 from tip

--HG--
branch : 1.9

Author: millert

INSTALL

@@ -557,7 +557,8 @@ Authentication options:
         Use GNU crypt's SHA-2 message digest functions instead of the
         ones bundled with sudo (or in the system's C library).
         If specified, DIR should contain the GNU crypt include and
-        lib directories.
+        lib directories.  This option is ignored when the
+        --enable-openssl option is also specified.
 
   --enable-openssl[=DIR]
         Use OpenSSL's TLS and SHA-2 message digest functions.

NEWS

@@ -1,3 +1,21 @@
+What's new in Sudo 1.9.2
+
+ * Fixed package builds on RedHat Enterprise Linux 8.
+
+ * The configure script now uses pkg-config to find the openssl
+   cflags and libs where possible.
+
+ * The contents of the log.json I/O log file is now documented in
+   the sudoers manual.
+
+ * The sudoers plugin now properly exports the sudoers_audit symbol
+   on systems where the compiler lacks symbol visibility controls.
+   This caused a regression in 1.9.1 where a successful sudo command
+   was not logged due to the missing audit plugin.  Bug #931.
+
+ * Fixed a regression introduced in 1.9.1 that can result in crash
+   when there is a syntax error in the sudoers file.  Bug #934.
+
 What's new in Sudo 1.9.1
 
  * Fixed an AIX-specific problem when I/O logging was enabled.
@@ -74,6 +92,10 @@ What's new in Sudo 1.9.0
 
  * Fixed a test failure in the strsig_test regress test on FreeBSD.
 
+ * The maximum length of a conversation reply has been increased
+   from 255 to 1023 characters.  This allows for longer user passwords.
+   Bug #860.
+
  * Sudo now includes a logging daemon, sudo_logsrvd, which can be
    used to implement centralized logging of I/O logs.  TLS connections
    are supported when sudo is configured with the --enable-openssl
@@ -117,6 +139,10 @@ What's new in Sudo 1.9.0
    function to write to the standard output or standard error instead
    of the terminal device.
 
+ * Fixed a bug where if a #include or #includedir directive was the
+   last line in sudoers and there was no final newline character, it
+   was silently ignored.  Bug #917.
+
  * It is now possible to use "Cmd_Alias" instead of "Cmnd_Alias" for
    people who find the former more natural.
 

README

@@ -45,16 +45,20 @@ sudo-announce	This list receives announcements whenever a new version
 		of sudo is released.
 		https://www.sudo.ws/mailman/listinfo/sudo-announce
 
+sudo-blog	This list receives a message when a new sudo blog
+		article is available.
+		https://www.sudo.ws/mailman/listinfo/sudo-blog
+
+sudo-commits	This list receives a message for each commit made to
+		the sudo source repository.
+		https://www.sudo.ws/mailman/listinfo/sudo-commits
+
 sudo-users	This list is for questions and general discussion about sudo.
 		https://www.sudo.ws/mailman/listinfo/sudo-users
 
 sudo-workers	This list is for people working on and porting sudo.
 		https://www.sudo.ws/mailman/listinfo/sudo-workers
 
-sudo-commits	This list receives a message for each commit made to
-		the sudo source repository.
-		https://www.sudo.ws/mailman/listinfo/sudo-commits
-
 To subscribe to a list, visit its url (as listed above) and enter
 your email address to subscribe.  Digest versions are available but
 these are fairly low traffic lists so the digest versions are not

config.h.in

@@ -374,9 +374,15 @@
 /* Define to 1 if you have the `grantpt' function. */
 #undef HAVE_GRANTPT
 
+/* Define to 1 if you have the <gssapi/gssapi.h> header file. */
+#undef HAVE_GSSAPI_GSSAPI_H
+
 /* Define to 1 if you have the <gssapi/gssapi_krb5.h> header file. */
 #undef HAVE_GSSAPI_GSSAPI_KRB5_H
 
+/* Define to 1 if you have the <gssapi.h> header file. */
+#undef HAVE_GSSAPI_H
+
 /* Define to 1 if you have the `gss_krb5_ccache_name' function. */
 #undef HAVE_GSS_KRB5_CCACHE_NAME
 
@@ -1032,7 +1038,7 @@
 /* Define to 1 if you want sudo to free up memory before exiting. */
 #undef NO_LEAKS
 
-/* Define to 1 if you don't want users to get the lecture the first they user
+/* Define to 1 if you don't want users to get the lecture the first time they use
    sudo. */
 #undef NO_LECTURE