update to 1.8.8
    
    - major changes & fixes:
      - LDAP SASL support now works properly with Kerberos
      - root may no longer change its SELinux role without entering a password
      - user messages are now always displayed in the user's locale, even when
        the same message is being logged or mailed in a different locale.
      - log files created by sudo now explicitly have the group set to group
        ID 0 rather than relying on BSD group semantics
      - sudo now stores its libexec files in a sudo subdirectory instead of in
        libexec itself
      - system_group and group_file sudoers group provider plugins are now
        installed by default
      - the paths to ldap.conf and ldap.secret may now be specified as arguments
        to the sudoers plugin in the sudo.conf file
      - ...and many new features and settings. See the upstream ChangeLog for the
        full list.
    - several sssd support fixes
    - added patch to make uid/gid specification parsing more strict (don't accept
      an invalid number as uid/gid)
    - use the _pkgdocdir macro
      (see https://fedoraproject.org/wiki/Changes/UnversionedDocdirs)
    - fixed several bugs found by the clang static analyzer
    - added %post dependency on chmod