summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSteve Langasek <steve.langasek@ubuntu.com>2019-01-03 21:22:21 -0800
committerSteve Langasek <steve.langasek@ubuntu.com>2019-01-03 21:22:45 -0800
commit795badba7f95e737f979917859cd32c9bd47bcad (patch)
tree212a6a00baa11e9d0ca7bc27b12420d1dce6f07c
parentc55c14c5c6762139ec6695d84ea0e2e917da5264 (diff)
parentba315ae8effdcad591608c99452dad05c4cf20ab (diff)
New upstream version 1.1.8
-rw-r--r--CHANGELOG21
-rw-r--r--COPYING1
-rw-r--r--ChangeLog5581
-rw-r--r--ChangeLog-CVS5099
-rw-r--r--Copyright1
-rw-r--r--INSTALL255
-rw-r--r--Make.xml.rules1
-rw-r--r--Makefile.am31
-rw-r--r--Makefile.in265
-rw-r--r--NEWS23
-rw-r--r--README4
-rw-r--r--aclocal.m4463
-rwxr-xr-xbuild-aux/compile (renamed from compile)21
-rwxr-xr-xbuild-aux/config.guess (renamed from config.guess)323
-rwxr-xr-xbuild-aux/config.rpath (renamed from config.rpath)0
-rwxr-xr-xbuild-aux/config.sub (renamed from config.sub)91
-rwxr-xr-xbuild-aux/depcomp (renamed from depcomp)87
-rwxr-xr-xbuild-aux/install-sh520
-rwxr-xr-xbuild-aux/ltmain.sh (renamed from ltmain.sh)0
-rwxr-xr-xbuild-aux/missing (renamed from missing)49
-rwxr-xr-xbuild-aux/ylwrap (renamed from ylwrap)11
-rw-r--r--conf/Makefile.in153
-rwxr-xr-xconf/md5itall2
-rw-r--r--conf/pam.conf3
-rw-r--r--conf/pam_conv1/Makefile.in109
-rw-r--r--conf/pam_conv1/README1
-rw-r--r--conf/pam_conv1/pam_conv_l.c4
-rw-r--r--conf/pam_conv1/pam_conv_l.l4
-rw-r--r--conf/pam_conv1/pam_conv_y.c4
-rw-r--r--conf/pam_conv1/pam_conv_y.y4
-rw-r--r--config.h.in18
-rwxr-xr-xconfigure14248
-rw-r--r--configure.in20
-rw-r--r--doc/Makefile.am1
-rw-r--r--doc/Makefile.in192
-rw-r--r--doc/adg/Makefile.in59
-rw-r--r--doc/man/Makefile.in312
-rw-r--r--doc/man/PAM.8184
-rw-r--r--doc/man/misc_conv.3172
-rw-r--r--doc/man/misc_conv.3.xml2
-rw-r--r--doc/man/pam.3175
-rw-r--r--doc/man/pam.82
-rw-r--r--doc/man/pam.conf.5274
-rw-r--r--doc/man/pam.d.52
-rw-r--r--doc/man/pam_acct_mgmt.3168
-rw-r--r--doc/man/pam_authenticate.3168
-rw-r--r--doc/man/pam_chauthtok.3170
-rw-r--r--doc/man/pam_chauthtok.3.xml2
-rw-r--r--doc/man/pam_close_session.3170
-rw-r--r--doc/man/pam_conv.3190
-rw-r--r--doc/man/pam_end.3172
-rw-r--r--doc/man/pam_error.3170
-rw-r--r--doc/man/pam_fail_delay.3224
-rw-r--r--doc/man/pam_get_authtok.3184
-rw-r--r--doc/man/pam_get_authtok_noverify.32
-rw-r--r--doc/man/pam_get_authtok_verify.32
-rw-r--r--doc/man/pam_get_data.3168
-rw-r--r--doc/man/pam_get_item.3175
-rw-r--r--doc/man/pam_get_user.3170
-rw-r--r--doc/man/pam_get_user.3.xml8
-rw-r--r--doc/man/pam_getenv.3168
-rw-r--r--doc/man/pam_getenvlist.3172
-rw-r--r--doc/man/pam_info.3170
-rw-r--r--doc/man/pam_misc_drop_env.3168
-rw-r--r--doc/man/pam_misc_paste_env.3168
-rw-r--r--doc/man/pam_misc_setenv.3170
-rw-r--r--doc/man/pam_open_session.3170
-rw-r--r--doc/man/pam_prompt.3170
-rw-r--r--doc/man/pam_putenv.3171
-rw-r--r--doc/man/pam_set_data.3170
-rw-r--r--doc/man/pam_set_data.3.xml2
-rw-r--r--doc/man/pam_set_item.3173
-rw-r--r--doc/man/pam_setcred.3178
-rw-r--r--doc/man/pam_sm_acct_mgmt.3178
-rw-r--r--doc/man/pam_sm_authenticate.3176
-rw-r--r--doc/man/pam_sm_authenticate.3.xml4
-rw-r--r--doc/man/pam_sm_chauthtok.3180
-rw-r--r--doc/man/pam_sm_close_session.3174
-rw-r--r--doc/man/pam_sm_open_session.3174
-rw-r--r--doc/man/pam_sm_setcred.3180
-rw-r--r--doc/man/pam_start.3172
-rw-r--r--doc/man/pam_strerror.3168
-rw-r--r--doc/man/pam_syslog.3174
-rw-r--r--doc/man/pam_verror.32
-rw-r--r--doc/man/pam_vinfo.32
-rw-r--r--doc/man/pam_vprompt.32
-rw-r--r--doc/man/pam_vsyslog.32
-rw-r--r--doc/man/pam_xauth_data.3172
-rw-r--r--doc/mwg/Makefile.in59
-rw-r--r--doc/sag/Makefile.in59
-rw-r--r--doc/specs/Makefile.in148
-rw-r--r--doc/specs/draft-morgan-pam.raw8
-rw-r--r--doc/specs/parse_y.c8
-rw-r--r--doc/specs/parse_y.y8
-rw-r--r--doc/specs/rfc86.0.txt6
-rw-r--r--doc/specs/std-agent-id.raw2
-rw-r--r--examples/Makefile.am4
-rw-r--r--examples/Makefile.in121
-rw-r--r--examples/README1
-rw-r--r--examples/blank.c6
-rw-r--r--examples/check_user.c6
-rw-r--r--examples/vpass.c2
-rwxr-xr-xinstall-sh323
-rw-r--r--libpam/Makefile.in169
-rw-r--r--libpam/include/security/pam_modutil.h5
-rw-r--r--libpam/pam_audit.c4
-rw-r--r--libpam/pam_auth.c2
-rw-r--r--libpam/pam_delay.c3
-rw-r--r--libpam/pam_dispatch.c8
-rw-r--r--libpam/pam_dynamic.c10
-rw-r--r--libpam/pam_end.c2
-rw-r--r--libpam/pam_env.c2
-rw-r--r--libpam/pam_get_authtok.c5
-rw-r--r--libpam/pam_handlers.c18
-rw-r--r--libpam/pam_item.c8
-rw-r--r--libpam/pam_misc.c2
-rw-r--r--libpam/pam_modutil_cleanup.c2
-rw-r--r--libpam/pam_modutil_getgrgid.c14
-rw-r--r--libpam/pam_modutil_getgrnam.c10
-rw-r--r--libpam/pam_modutil_getlogin.c2
-rw-r--r--libpam/pam_modutil_getpwnam.c10
-rw-r--r--libpam/pam_modutil_getpwuid.c14
-rw-r--r--libpam/pam_modutil_getspnam.c10
-rw-r--r--libpam/pam_modutil_ingroup.c4
-rw-r--r--libpam/pam_modutil_ioloop.c2
-rw-r--r--libpam/pam_modutil_priv.c2
-rw-r--r--libpam/pam_modutil_private.h2
-rw-r--r--libpam/pam_password.c2
-rw-r--r--libpam/pam_prelude.h1
-rw-r--r--libpam/pam_session.c4
-rw-r--r--libpam/pam_start.c4
-rw-r--r--libpam/pam_static_modules.h14
-rw-r--r--libpam/pam_tokens.h6
-rw-r--r--libpam_misc/Makefile.am1
-rw-r--r--libpam_misc/Makefile.in155
-rw-r--r--libpam_misc/help_env.c2
-rw-r--r--libpam_misc/include/security/pam_misc.h6
-rw-r--r--libpam_misc/misc_conv.c2
-rw-r--r--libpamc/License1
-rw-r--r--libpamc/Makefile.in224
-rw-r--r--libpamc/include/security/pam_client.h4
-rw-r--r--libpamc/libpamc.h2
-rw-r--r--libpamc/pamc_client.c8
-rw-r--r--libpamc/pamc_converse.c2
-rw-r--r--libpamc/pamc_load.c10
-rw-r--r--libpamc/test/Makefile.in59
-rwxr-xr-xlibpamc/test/agents/secret@here9
-rw-r--r--libpamc/test/modules/pam_secret.c4
-rw-r--r--libpamc/test/regress/test.libpamc.c4
-rwxr-xr-xlibpamc/test/regress/test.secret@here3
-rw-r--r--m4/gettext.m4378
-rw-r--r--m4/iconv.m487
-rw-r--r--m4/intlmacosx.m451
-rw-r--r--m4/japhar_grep_cflags.m41
-rw-r--r--m4/lib-link.m4181
-rw-r--r--m4/libprelude.m42
-rw-r--r--m4/po.m425
-rwxr-xr-xmkinstalldirs158
-rw-r--r--modules/Makefile.in153
-rw-r--r--modules/modules.map3
-rw-r--r--modules/pam_access/Makefile.am2
-rw-r--r--modules/pam_access/Makefile.in375
-rw-r--r--modules/pam_access/access.conf.5171
-rw-r--r--modules/pam_access/pam_access.8179
-rw-r--r--modules/pam_access/pam_access.c14
-rw-r--r--modules/pam_cracklib/Makefile.am2
-rw-r--r--modules/pam_cracklib/Makefile.in276
-rw-r--r--modules/pam_cracklib/README59
-rw-r--r--modules/pam_cracklib/pam_cracklib.8258
-rw-r--r--modules/pam_cracklib/pam_cracklib.8.xml105
-rw-r--r--modules/pam_cracklib/pam_cracklib.c175
-rw-r--r--modules/pam_debug/Makefile.am2
-rw-r--r--modules/pam_debug/Makefile.in276
-rw-r--r--modules/pam_debug/pam_debug.8178
-rw-r--r--modules/pam_debug/pam_debug.c2
-rw-r--r--modules/pam_deny/Makefile.am2
-rw-r--r--modules/pam_deny/Makefile.in276
-rw-r--r--modules/pam_deny/pam_deny.8180
-rw-r--r--modules/pam_deny/pam_deny.c2
-rw-r--r--modules/pam_echo/Makefile.am2
-rw-r--r--modules/pam_echo/Makefile.in276
-rw-r--r--modules/pam_echo/pam_echo.8180
-rw-r--r--modules/pam_env/Makefile.am2
-rw-r--r--modules/pam_env/Makefile.in393
-rw-r--r--modules/pam_env/pam_env.8180
-rw-r--r--modules/pam_env/pam_env.conf16
-rw-r--r--modules/pam_env/pam_env.conf.5223
-rw-r--r--modules/pam_env/pam_env.conf.5.xml2
-rw-r--r--modules/pam_exec/Makefile.am2
-rw-r--r--modules/pam_exec/Makefile.in276
-rw-r--r--modules/pam_exec/README14
-rw-r--r--modules/pam_exec/pam_exec.8210
-rw-r--r--modules/pam_exec/pam_exec.8.xml42
-rw-r--r--modules/pam_exec/pam_exec.c110
-rw-r--r--modules/pam_faildelay/Makefile.am2
-rw-r--r--modules/pam_faildelay/Makefile.in276
-rw-r--r--modules/pam_faildelay/pam_faildelay.8180
-rw-r--r--modules/pam_filter/Makefile.am2
-rw-r--r--modules/pam_filter/Makefile.in365
-rw-r--r--modules/pam_filter/pam_filter.8184
-rw-r--r--modules/pam_filter/pam_filter.c2
-rw-r--r--modules/pam_filter/pam_filter.h2
-rw-r--r--modules/pam_filter/upperLOWER/Makefile.am2
-rw-r--r--modules/pam_filter/upperLOWER/Makefile.in153
-rw-r--r--modules/pam_ftp/Makefile.am2
-rw-r--r--modules/pam_ftp/Makefile.in276
-rw-r--r--modules/pam_ftp/pam_ftp.8184
-rw-r--r--modules/pam_ftp/pam_ftp.c2
-rw-r--r--modules/pam_group/Makefile.am2
-rw-r--r--modules/pam_group/Makefile.in371
-rw-r--r--modules/pam_group/group.conf.5215
-rw-r--r--modules/pam_group/pam_group.8175
-rw-r--r--modules/pam_issue/Makefile.am2
-rw-r--r--modules/pam_issue/Makefile.in276
-rw-r--r--modules/pam_issue/pam_issue.8184
-rw-r--r--modules/pam_keyinit/Makefile.am2
-rw-r--r--modules/pam_keyinit/Makefile.in276
-rw-r--r--modules/pam_keyinit/pam_keyinit.8188
-rw-r--r--modules/pam_keyinit/pam_keyinit.c1
-rw-r--r--modules/pam_lastlog/Makefile.am2
-rw-r--r--modules/pam_lastlog/Makefile.in276
-rw-r--r--modules/pam_lastlog/README21
-rw-r--r--modules/pam_lastlog/pam_lastlog.8242
-rw-r--r--modules/pam_lastlog/pam_lastlog.8.xml61
-rw-r--r--modules/pam_lastlog/pam_lastlog.c209
-rw-r--r--modules/pam_limits/Makefile.am2
-rw-r--r--modules/pam_limits/Makefile.in371
-rw-r--r--modules/pam_limits/README16
-rw-r--r--modules/pam_limits/limits.conf2
-rw-r--r--modules/pam_limits/limits.conf.5259
-rw-r--r--modules/pam_limits/limits.conf.5.xml11
-rw-r--r--modules/pam_limits/pam_limits.8198
-rw-r--r--modules/pam_limits/pam_limits.c16
-rw-r--r--modules/pam_listfile/Makefile.am2
-rw-r--r--modules/pam_listfile/Makefile.in276
-rw-r--r--modules/pam_listfile/pam_listfile.8208
-rw-r--r--modules/pam_localuser/Makefile.am2
-rw-r--r--modules/pam_localuser/Makefile.in276
-rw-r--r--modules/pam_localuser/pam_localuser.8188
-rw-r--r--modules/pam_loginuid/Makefile.am2
-rw-r--r--modules/pam_loginuid/Makefile.in276
-rw-r--r--modules/pam_loginuid/pam_loginuid.8180
-rw-r--r--modules/pam_mail/Makefile.am2
-rw-r--r--modules/pam_mail/Makefile.in276
-rw-r--r--modules/pam_mail/pam_mail.8202
-rw-r--r--modules/pam_mkhomedir/Makefile.am4
-rw-r--r--modules/pam_mkhomedir/Makefile.in336
-rw-r--r--modules/pam_mkhomedir/mkhomedir_helper.8165
-rw-r--r--modules/pam_mkhomedir/mkhomedir_helper.c14
-rw-r--r--modules/pam_mkhomedir/pam_mkhomedir.8188
-rw-r--r--modules/pam_mkhomedir/pam_mkhomedir.c2
-rw-r--r--modules/pam_motd/Makefile.am2
-rw-r--r--modules/pam_motd/Makefile.in276
-rw-r--r--modules/pam_motd/pam_motd.8184
-rw-r--r--modules/pam_motd/pam_motd.c2
-rw-r--r--modules/pam_namespace/Makefile.am6
-rw-r--r--modules/pam_namespace/Makefile.in465
-rw-r--r--modules/pam_namespace/README30
-rw-r--r--modules/pam_namespace/md5.c7
-rw-r--r--modules/pam_namespace/namespace.conf4
-rw-r--r--modules/pam_namespace/namespace.conf.5204
-rw-r--r--modules/pam_namespace/namespace.conf.5.xml14
-rwxr-xr-xmodules/pam_namespace/namespace.init2
-rw-r--r--modules/pam_namespace/pam_namespace.8207
-rw-r--r--modules/pam_namespace/pam_namespace.8.xml27
-rw-r--r--modules/pam_namespace/pam_namespace.c409
-rw-r--r--modules/pam_namespace/pam_namespace.h15
-rw-r--r--modules/pam_nologin/Makefile.am2
-rw-r--r--modules/pam_nologin/Makefile.in276
-rw-r--r--modules/pam_nologin/README2
-rw-r--r--modules/pam_nologin/pam_nologin.8191
-rw-r--r--modules/pam_nologin/pam_nologin.c2
-rw-r--r--modules/pam_permit/Makefile.am2
-rw-r--r--modules/pam_permit/Makefile.in276
-rw-r--r--modules/pam_permit/pam_permit.8182
-rw-r--r--modules/pam_permit/pam_permit.c2
-rw-r--r--modules/pam_pwhistory/Makefile.am2
-rw-r--r--modules/pam_pwhistory/Makefile.in276
-rw-r--r--modules/pam_pwhistory/README3
-rw-r--r--modules/pam_pwhistory/opasswd.c14
-rw-r--r--modules/pam_pwhistory/opasswd.h10
-rw-r--r--modules/pam_pwhistory/pam_pwhistory.8207
-rw-r--r--modules/pam_pwhistory/pam_pwhistory.c40
-rw-r--r--modules/pam_rhosts/Makefile.am2
-rw-r--r--modules/pam_rhosts/Makefile.in276
-rw-r--r--modules/pam_rhosts/pam_rhosts.8196
-rw-r--r--modules/pam_rootok/Makefile.am2
-rw-r--r--modules/pam_rootok/Makefile.in276
-rw-r--r--modules/pam_rootok/pam_rootok.8183
-rw-r--r--modules/pam_rootok/pam_rootok.c65
-rw-r--r--modules/pam_securetty/Makefile.am2
-rw-r--r--modules/pam_securetty/Makefile.in276
-rw-r--r--modules/pam_securetty/README10
-rw-r--r--modules/pam_securetty/pam_securetty.8204
-rw-r--r--modules/pam_securetty/pam_securetty.c4
-rw-r--r--modules/pam_selinux/Makefile.am11
-rw-r--r--modules/pam_selinux/Makefile.in306
-rw-r--r--modules/pam_selinux/README68
-rw-r--r--modules/pam_selinux/pam_selinux.8242
-rw-r--r--modules/pam_selinux/pam_selinux.8.xml113
-rw-r--r--modules/pam_selinux/pam_selinux.c716
-rw-r--r--modules/pam_selinux/pam_selinux_check.82
-rw-r--r--modules/pam_sepermit/Makefile.am7
-rw-r--r--modules/pam_sepermit/Makefile.in421
-rw-r--r--modules/pam_sepermit/pam_sepermit.8185
-rw-r--r--modules/pam_sepermit/pam_sepermit.c51
-rw-r--r--modules/pam_sepermit/sepermit.conf.5179
-rw-r--r--modules/pam_shells/Makefile.am2
-rw-r--r--modules/pam_shells/Makefile.in276
-rw-r--r--modules/pam_shells/pam_shells.8186
-rw-r--r--modules/pam_shells/pam_shells.c2
-rw-r--r--modules/pam_stress/Makefile.am2
-rw-r--r--modules/pam_stress/Makefile.in190
-rw-r--r--modules/pam_stress/pam_stress.c2
-rw-r--r--modules/pam_succeed_if/Makefile.am2
-rw-r--r--modules/pam_succeed_if/Makefile.in276
-rw-r--r--modules/pam_succeed_if/README8
-rw-r--r--modules/pam_succeed_if/pam_succeed_if.8208
-rw-r--r--modules/pam_succeed_if/pam_succeed_if.8.xml9
-rw-r--r--modules/pam_succeed_if/pam_succeed_if.c28
-rw-r--r--modules/pam_tally/Makefile.am2
-rw-r--r--modules/pam_tally/Makefile.in332
-rw-r--r--modules/pam_tally/faillog.h2
-rw-r--r--modules/pam_tally/pam_tally.8210
-rw-r--r--modules/pam_tally/pam_tally.c40
-rw-r--r--modules/pam_tally/pam_tally_app.c1
-rw-r--r--modules/pam_tally2/Makefile.am4
-rw-r--r--modules/pam_tally2/Makefile.in338
-rw-r--r--modules/pam_tally2/README4
-rw-r--r--modules/pam_tally2/pam_tally2.8203
-rw-r--r--modules/pam_tally2/pam_tally2.c55
-rw-r--r--modules/pam_tally2/pam_tally2_app.c1
-rw-r--r--modules/pam_time/Makefile.am2
-rw-r--r--modules/pam_time/Makefile.in371
-rw-r--r--modules/pam_time/README1
-rw-r--r--modules/pam_time/pam_time.8182
-rw-r--r--modules/pam_time/pam_time.c4
-rw-r--r--modules/pam_time/time.conf2
-rw-r--r--modules/pam_time/time.conf.5194
-rw-r--r--modules/pam_time/time.conf.5.xml2
-rw-r--r--modules/pam_timestamp/Makefile.am12
-rw-r--r--modules/pam_timestamp/Makefile.in381
-rw-r--r--modules/pam_timestamp/README2
-rwxr-xr-xmodules/pam_timestamp/hmacfilebin47932 -> 0 bytes
-rw-r--r--modules/pam_timestamp/hmacfile.c2
-rw-r--r--modules/pam_timestamp/hmacsha1.c4
-rw-r--r--modules/pam_timestamp/pam_timestamp.8182
-rw-r--r--modules/pam_timestamp/pam_timestamp.8.xml3
-rw-r--r--modules/pam_timestamp/pam_timestamp_check.8182
-rw-r--r--modules/pam_timestamp/pam_timestamp_check.8.xml1
-rw-r--r--modules/pam_timestamp/sha1.c2
-rw-r--r--modules/pam_tty_audit/Makefile.am2
-rw-r--r--modules/pam_tty_audit/Makefile.in277
-rw-r--r--modules/pam_tty_audit/README10
-rw-r--r--modules/pam_tty_audit/pam_tty_audit.8187
-rw-r--r--modules/pam_tty_audit/pam_tty_audit.8.xml15
-rw-r--r--modules/pam_tty_audit/pam_tty_audit.c23
-rw-r--r--modules/pam_umask/Makefile.am2
-rw-r--r--modules/pam_umask/Makefile.in276
-rw-r--r--modules/pam_umask/README15
-rw-r--r--modules/pam_umask/pam_umask.8212
-rw-r--r--modules/pam_umask/pam_umask.8.xml19
-rw-r--r--modules/pam_umask/pam_umask.c6
-rw-r--r--modules/pam_unix/CHANGELOG7
-rw-r--r--modules/pam_unix/Makefile.am8
-rw-r--r--modules/pam_unix/Makefile.in421
-rw-r--r--modules/pam_unix/README6
-rw-r--r--modules/pam_unix/bigcrypt.c17
-rw-r--r--modules/pam_unix/md5.c7
-rw-r--r--modules/pam_unix/md5_crypt.c2
-rw-r--r--modules/pam_unix/pam_unix.8204
-rw-r--r--modules/pam_unix/pam_unix.8.xml9
-rw-r--r--modules/pam_unix/pam_unix_acct.c35
-rw-r--r--modules/pam_unix/pam_unix_auth.c27
-rw-r--r--modules/pam_unix/pam_unix_passwd.c39
-rw-r--r--modules/pam_unix/pam_unix_sess.c34
-rw-r--r--modules/pam_unix/pam_unix_static.c23
-rw-r--r--modules/pam_unix/pam_unix_static.h6
-rw-r--r--modules/pam_unix/passverify.c29
-rw-r--r--modules/pam_unix/support.c118
-rw-r--r--modules/pam_unix/support.h65
-rw-r--r--modules/pam_unix/unix_chkpwd.8165
-rw-r--r--modules/pam_unix/unix_update.8167
-rw-r--r--modules/pam_unix/unix_update.8.xml2
-rw-r--r--modules/pam_unix/unix_update.c2
-rw-r--r--modules/pam_userdb/Makefile.am5
-rw-r--r--modules/pam_userdb/Makefile.in279
-rw-r--r--modules/pam_userdb/create.pl6
-rw-r--r--modules/pam_userdb/pam_userdb.8184
-rw-r--r--modules/pam_userdb/pam_userdb.c18
-rw-r--r--modules/pam_userdb/pam_userdb.h4
-rw-r--r--modules/pam_warn/Makefile.am4
-rw-r--r--modules/pam_warn/Makefile.in278
-rw-r--r--modules/pam_warn/pam_warn.8180
-rw-r--r--modules/pam_warn/pam_warn.c2
-rw-r--r--modules/pam_wheel/Makefile.am4
-rw-r--r--modules/pam_wheel/Makefile.in278
-rw-r--r--modules/pam_wheel/pam_wheel.8178
-rw-r--r--modules/pam_xauth/Makefile.am4
-rw-r--r--modules/pam_xauth/Makefile.in278
-rw-r--r--modules/pam_xauth/pam_xauth.8210
-rw-r--r--po/LINGUAS27
-rw-r--r--po/Linux-PAM.pot164
-rw-r--r--po/ar.gmobin9599 -> 9700 bytes
-rw-r--r--po/ar.po267
-rw-r--r--po/as.gmobin17197 -> 17453 bytes
-rw-r--r--po/as.po200
-rw-r--r--po/ast.gmobin0 -> 500 bytes
-rw-r--r--po/ast.po572
-rw-r--r--po/bal.gmobin0 -> 476 bytes
-rw-r--r--po/bal.po571
-rw-r--r--po/bg.gmobin0 -> 14963 bytes
-rw-r--r--po/bg.po583
-rw-r--r--po/bn.gmobin0 -> 18067 bytes
-rw-r--r--po/bn.po590
-rw-r--r--po/bn_IN.gmobin18190 -> 18071 bytes
-rw-r--r--po/bn_IN.po196
-rw-r--r--po/br.gmobin0 -> 495 bytes
-rw-r--r--po/br.po572
-rw-r--r--po/bs.gmobin0 -> 571 bytes
-rw-r--r--po/bs.po575
-rw-r--r--po/ca.gmobin11918 -> 12134 bytes
-rw-r--r--po/ca.po232
-rw-r--r--po/cs.gmobin11576 -> 11784 bytes
-rw-r--r--po/cs.po193
-rw-r--r--po/da.gmobin11283 -> 11481 bytes
-rw-r--r--po/da.po210
-rw-r--r--po/de.gmobin11848 -> 12045 bytes
-rw-r--r--po/de.po198
-rw-r--r--po/el.gmobin0 -> 472 bytes
-rw-r--r--po/el.po571
-rw-r--r--po/en_GB.gmobin0 -> 520 bytes
-rw-r--r--po/en_GB.po572
-rw-r--r--po/es.gmobin12087 -> 12225 bytes
-rw-r--r--po/es.po228
-rw-r--r--po/et.gmobin0 -> 3417 bytes
-rw-r--r--po/et.po574
-rw-r--r--po/eu.gmobin0 -> 897 bytes
-rw-r--r--po/eu.po573
-rw-r--r--po/fa.gmobin0 -> 490 bytes
-rw-r--r--po/fa.po570
-rw-r--r--po/fi.gmobin8095 -> 11893 bytes
-rw-r--r--po/fi.po307
-rw-r--r--po/fr.gmobin12176 -> 12324 bytes
-rw-r--r--po/fr.po216
-rw-r--r--po/ga.gmobin0 -> 12806 bytes
-rw-r--r--po/ga.po605
-rw-r--r--po/gl.gmobin0 -> 498 bytes
-rw-r--r--po/gl.po572
-rw-r--r--po/gu.gmobin17007 -> 17247 bytes
-rw-r--r--po/gu.po196
-rw-r--r--po/he.gmobin4986 -> 4997 bytes
-rw-r--r--po/he.po192
-rw-r--r--po/hi.gmobin16114 -> 16373 bytes
-rw-r--r--po/hi.po196
-rw-r--r--po/hu.gmobin11564 -> 11922 bytes
-rw-r--r--po/hu.po267
-rw-r--r--po/ia.gmobin0 -> 12062 bytes
-rw-r--r--po/ia.po584
-rw-r--r--po/id.gmobin0 -> 4539 bytes
-rw-r--r--po/id.po570
-rw-r--r--po/it.gmobin11693 -> 11848 bytes
-rw-r--r--po/it.po205
-rw-r--r--po/ja.gmobin12795 -> 13032 bytes
-rw-r--r--po/ja.po226
-rw-r--r--po/ka.gmobin0 -> 3663 bytes
-rw-r--r--po/ka.po571
-rw-r--r--po/kk.gmobin14699 -> 14908 bytes
-rw-r--r--po/kk.po230
-rw-r--r--po/km.gmobin13651 -> 13666 bytes
-rw-r--r--po/km.po265
-rw-r--r--po/kn.gmobin18649 -> 18537 bytes
-rw-r--r--po/kn.po199
-rw-r--r--po/ko.gmobin11643 -> 11876 bytes
-rw-r--r--po/ko.po193
-rw-r--r--po/ks.gmobin0 -> 498 bytes
-rw-r--r--po/ks.po572
-rw-r--r--po/lt.gmobin0 -> 563 bytes
-rw-r--r--po/lt.po575
-rw-r--r--po/lv.gmobin0 -> 532 bytes
-rw-r--r--po/lv.po575
-rw-r--r--po/mai.gmobin0 -> 500 bytes
-rw-r--r--po/mai.po572
-rw-r--r--po/ml.gmobin20981 -> 21314 bytes
-rw-r--r--po/ml.po191
-rw-r--r--po/mr.gmobin17344 -> 17594 bytes
-rw-r--r--po/mr.po192
-rw-r--r--po/ms.gmobin708 -> 678 bytes
-rw-r--r--po/ms.po385
-rw-r--r--po/nb.gmobin9328 -> 11268 bytes
-rw-r--r--po/nb.po234
-rw-r--r--po/nds.gmobin0 -> 481 bytes
-rw-r--r--po/nds.po571
-rw-r--r--po/nl.gmobin11554 -> 11809 bytes
-rw-r--r--po/nl.po372
-rw-r--r--po/nn.gmobin0 -> 478 bytes
-rw-r--r--po/nn.po571
-rw-r--r--po/or.gmobin18604 -> 18846 bytes
-rw-r--r--po/or.po196
-rw-r--r--po/pa.gmobin16339 -> 16596 bytes
-rw-r--r--po/pa.po193
-rw-r--r--po/pl.gmobin11823 -> 12027 bytes
-rw-r--r--po/pl.po213
-rw-r--r--po/pt.gmobin11994 -> 12126 bytes
-rw-r--r--po/pt.po217
-rw-r--r--po/pt_BR.gmobin11432 -> 11385 bytes
-rw-r--r--po/pt_BR.po228
-rw-r--r--po/ro.gmobin0 -> 539 bytes
-rw-r--r--po/ro.po575
-rw-r--r--po/ru.gmobin15515 -> 15775 bytes
-rw-r--r--po/ru.po208
-rw-r--r--po/si.gmobin13023 -> 13066 bytes
-rw-r--r--po/si.po241
-rw-r--r--po/sk.gmobin11656 -> 11591 bytes
-rw-r--r--po/sk.po202
-rw-r--r--po/sq.gmobin0 -> 498 bytes
-rw-r--r--po/sq.po572
-rw-r--r--po/sr.gmobin14755 -> 14616 bytes
-rw-r--r--po/sr.po200
-rw-r--r--po/sr@latin.gmobin11599 -> 11481 bytes
-rw-r--r--po/sr@latin.po200
-rw-r--r--po/sv.gmobin11358 -> 11572 bytes
-rw-r--r--po/sv.po220
-rw-r--r--po/ta.gmobin18175 -> 18482 bytes
-rw-r--r--po/ta.po197
-rw-r--r--po/te.gmobin18017 -> 18269 bytes
-rw-r--r--po/te.po194
-rw-r--r--po/tg.gmobin0 -> 495 bytes
-rw-r--r--po/tg.po572
-rw-r--r--po/tr.gmobin7643 -> 11759 bytes
-rw-r--r--po/tr.po205
-rw-r--r--po/uk.gmobin15071 -> 15351 bytes
-rw-r--r--po/uk.po214
-rw-r--r--po/ur.gmobin0 -> 473 bytes
-rw-r--r--po/ur.po571
-rw-r--r--po/vi.gmobin0 -> 12213 bytes
-rw-r--r--po/vi.po205
-rw-r--r--po/zh_CN.gmobin10596 -> 10767 bytes
-rw-r--r--po/zh_CN.po199
-rw-r--r--po/zh_HK.gmobin0 -> 481 bytes
-rw-r--r--po/zh_HK.po569
-rw-r--r--po/zh_TW.gmobin10826 -> 10898 bytes
-rw-r--r--po/zh_TW.po197
-rw-r--r--po/zu.gmobin8336 -> 8381 bytes
-rw-r--r--po/zu.po252
-rw-r--r--tests/Makefile.am2
-rw-r--r--tests/Makefile.in190
-rw-r--r--tests/tst-dlopen.c1
-rw-r--r--xtests/Makefile.am4
-rw-r--r--xtests/Makefile.in141
-rw-r--r--xtests/group.conf1
-rw-r--r--xtests/tst-pam_access1.pamd1
-rw-r--r--xtests/tst-pam_access2.pamd1
-rw-r--r--xtests/tst-pam_access3.pamd1
-rw-r--r--xtests/tst-pam_access4.pamd1
-rw-r--r--xtests/tst-pam_authfail.c4
-rw-r--r--xtests/tst-pam_authsucceed.c4
-rw-r--r--xtests/tst-pam_dispatch3.pamd1
-rw-r--r--xtests/tst-pam_group1.pamd1
-rw-r--r--xtests/tst-pam_limits1.pamd1
-rw-r--r--xtests/tst-pam_pwhistory1.pamd3
-rw-r--r--[-rwxr-xr-x]xtests/tst-pam_pwhistory1.sh0
-rw-r--r--xtests/tst-pam_substack1.pamd2
-rw-r--r--xtests/tst-pam_unix1.pamd1
-rw-r--r--xtests/tst-pam_unix2.pamd1
-rw-r--r--xtests/tst-pam_unix3.pamd1
-rw-r--r--xtests/tst-pam_unix4.pamd1
567 files changed, 46787 insertions, 43910 deletions
diff --git a/CHANGELOG b/CHANGELOG
index 02d081a8..a997c0f5 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -129,17 +129,17 @@ bug report - outstanding bugs are listed here:
* libpam: Fix debug code (kukuk)
* pam_limits: Fix order of LIMITS_DEF_* priorities (kukuk)
* pam_xauth: preserve DISPLAY variable (Novell #66885 - kukuk)
-* libpam: Add prelude ids (http://www.prelude-ids.org) support,
+* libpam: Add prelude ids (http://www.prelude-ids.org) support,
as experimental. (toady)
-* configure: Add the directory where new versions of cracklib is
- installed (from Jim Gifford - toady)
+* configure: Add the directory where new versions of cracklib is
+ installed (from Jim Gifford - toady)
* libpamc: Use standard u_intX_t types instead of __uX (kukuk)
0.78: Do Nov 18 14:48:36 CET 2004
* pam_unix: change the order of trying password changes - local first,
NIS second (t8m)
-* pam_wheel: add option only_root to make it affect authentication
+* pam_wheel: add option only_root to make it affect authentication
to root account only
* pam_unix: test return values on renaming files and report error to
syslog and to user
@@ -175,7 +175,7 @@ bug report - outstanding bugs are listed here:
The whole idea is to create few "systemwide" pam configs and include
parts of them in application pam configs.
(patch by "Dmitry V. Levin" <ldv@altlinux.org>) (Bug 812567 - baggins).
-* doc/modules/pam_mkhomedir.sgml: Remove wrong debug options
+* doc/modules/pam_mkhomedir.sgml: Remove wrong debug options
(Bug 591605 - kukuk)
* pam_unix: Call password checking helper whenever the password field
contains only one character (Bug 1027903 - kukuk)
@@ -1050,7 +1050,7 @@ libpam. Prior versions were buggy - see bugfix for Bug 129775.
(otherwise /etc/pam.conf is treated as before)
- given /etc/pam.d/
. config files are named (in lower case) by service-name
- . config files have same syntax as /etc/pam.conf except
+ . config files have same syntax as /etc/pam.conf except
that the "service-name" field is not present. (there
are thus three manditory fields (and arguments are
optional):
@@ -1207,7 +1207,7 @@ Sat Nov 30 19:30:20 PST 1996, Andrew Morgan <morgan@parc.power.net>
also some coverage of libpam_misc in the App. Developers' guide.
* Cristian's patches to pam_limits and pam_pwdb. Fixing bugs. (MORE added)
-
+
* adopted Cristian's _pam_macros.h file to help with common macros and
debugging stuff, gone through tree tidying up debugging lines to use
this [not complete].
@@ -1287,7 +1287,7 @@ A brief summary of what has changed:
* removed <bf/ .. / from documentation titles. This was not giving
politically correct html..
-
+
----- My vvvvvvvvvvvvvvvvvvv was a long time ago ;*] -----
Wed Sep 4 23:57:19 PDT 1996 (Andrew Morgan <morgan@physics.ucla.edu>
@@ -1345,7 +1345,7 @@ PASSWD - Elliot's account management included, and enhanced by Cristian Gafton.
*** If anyone has any trouble, please *say*. Your problem will be
fixed in the next release. Also please feel free to scour the
- code for race conditions etc...
+ code for race conditions etc...
[* The above change requires that you purge your /usr/lib/security
directory of the old pam_unix_XXX.so modules: they will NOT be deleted
@@ -1533,7 +1533,7 @@ CFLAGS* added 'make sterile' to top level makefile. This does extraclean and rem
future documentation of static module support in pam_modules.sgml)
* libpam; many changes to makefiles and also automated the inclusion of
static module objects in pam_static.c
-* modified modules for automated static/dynamic support. Added static &
+* modified modules for automated static/dynamic support. Added static &
dynamic subdirectories, as instructed by Michael
* removed an annoying syslog message from pam_filter: "parent exited.."
* updated todo list (anyone know anything about svgalib/X? we probably should
@@ -1763,4 +1763,3 @@ Sat Feb 17 17:30:24 EST 1996 (Alexander O. Yuriev alex@bach.cis.temple.edu)
* stable code from pam_unix is added to modules/pam_unix
* test/test.c now requests username and password and attempts
to perform authentication
-
diff --git a/COPYING b/COPYING
index 2f27a2ee..12ff8c53 100644
--- a/COPYING
+++ b/COPYING
@@ -38,4 +38,3 @@ TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
DAMAGE.
-------------------------------------------------------------------------
-
diff --git a/ChangeLog b/ChangeLog
index d7d808b0..a86707d2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5094 +1,693 @@
-2011-10-25 Thorsten Kukuk <kukuk@thkukuk.de>
+2013-09-19 Thorsten Kukuk <kukuk@thkukuk.de>
- * release version 1.1.5
+ Release version 1.1.8.
- * configure.in: Bump version number.
+2013-09-16 Thorsten Kukuk <kukuk@thkukuk.de>
- * modules/pam_tally2/pam_tally2.8.xml: Remove never used option
- "no_lock_time".
-
-2011-10-14 Kees Cook <kees@debian.org>
-
- * modules/pam_env/pam_env.c (_expand_arg): Abort when encountering an
- overflowed environment variable expansion.
- Fixes CVE-2011-3149.
- Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874565
-
- * modules/pam_env/pam_env.c (_assemble_line): Correctly count leading
- whitespace.
- Fixes CVE-2011-3148.
- Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874469
-
-2011-10-10 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_access/pam_access.c: Add hostname resolution
- cache.
- (user_match): Clear the cache in fake_item.
- (from_match): If from is not hostname, do not try to resolve it.
- Cache the getaddrinfo() result.
- (network_netmask_match): Cache the getaddrinfo() result.
- (pam_sm_authenticate): Free the getaddrinfo() result.
-
- * modules/pam_access/pam_access.c (netgroup_match): If getdomainname()
- fails or domainname not set use NULL as domain in innetgr().
-
-2011-09-30 Tomas Mraz <tm@t8m.info>
-
- * doc/man/pam.conf-syntax.xml: Improve documentation of the
- sufficient and requisite control values. (Red Hat Bug #742413)
-
-2011-08-25 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_access/pam_access.c (user_match): Fix the split
- on @ in the user field. (Red Hat Bug #732081)
-
- * modules/pam_loginuid/pam_loginuid.c: Correct the FSF address.
-
-2011-08-23 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_env/pam_env.c (_pam_parse): Fix missing dereference.
-
-2011-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 1.1.4
-
- * configure.in: Bump version number.
- * NEWS: Document changes since 1.1.3
- * libpam/Makefile.am: Bump release number of shared library
- * po/de.po: Translate new string.
-
- * modules/pam_unix/Makefile.am (pam_unix_la_LIBADD): Reorder
- Libraries.
-
-2011-06-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_limits/pam_limits.c: Add set_all option,
- read limits from PID one if no limit is specified and set_all
- is set.
- * modules/pam_limits/pam_limits.8.xml: Document set_all option.
- Based on Patch by Kees Cook.
-
-2011-06-15 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_sepermit/pam_sepermit.c (check_running): Avoid
- leaking memory and dir handle on realloc failure.
- (sepermit_unlock): Cast fcntl() and close() calls to void.
-
- * modules/pam_pwhistory/opasswd.c (check_old_password): Do not
- needlessly call strdupa().
- (save_old_password): Avoid memleaks in error paths. Avoid memleak of
- buf. Make the opasswd entry parsing more robust.
- * modules/pam_pwhistory/pam_pwhistory.8.xml: Document the
- special meaning of remember=0.
-
- * modules/pam_unix/support.c (_set_ctrl): Do not crash when remember,
- minlen, or rounds options are used with wrong module type.
-
- * modules/pam_timestamp/pam_timestamp.c (pam_sm_authenticate): Avoid
- memleak in error path.
- (pam_sm_open_session): Avoid memleak and fd leak in error path.
-
- * modules/pam_access/pam_access.c (user_match): Initialize the
- fake_item from item.
-
-2011-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Check for libtirpc by default.
- * libpam/Makefile.am: Add support for libtirpc.
- * modules/pam_access/Makefile.am: Likewise.
- * modules/pam_unix/Makefile.am: Likewise.
- * modules/pam_unix/pam_unix_passwd.c: Change ifdefs for
- new libtirpc support.
- * modules/pam_unix/yppasswd_xdr.c: Only compile if we have rpc/rpc.h.
-
-2011-06-13 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_securetty/pam_securetty.c (securetty_perform_check): Test
- also whether the tty is in the /sys/class/tty/console/active file.
- * modules/pam_securetty/pam_securetty.8.xml: Document the new check of
- /sys/class/tty/console/active/file.
-
-2011-06-07 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_namespace/pam_namespace.c (root_shared): New
- function to detect shared / mount.
- (pam_sm_open_session): Call the root_shared() and enable
- private mounts based on that.
- * modules/pam_namespace/pam_namespace.8.xml: Document the
- automatic detection of shared / mount.
-
-2011-06-06 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_group/pam_group.c (shift_bytes): Removed.
- (shift_buf, trim_spaces): Added new functions.
- (read_field): Thorough rewrite of the parsing.
- (check_account): read_field() now uses state information. No
- extra read_field() call at the end of configuration line.
- * modules/pam_time/pam_time.c (shift_bytes): Removed.
- (shift_buf, trim_spaces): Added new functions.
- (read_field): Thorough rewrite of the parsing.
- (check_account): read_field() now uses state information. No
- extra read_field() call at the end of configuration line.
-
- * modules/pam_namespace/pam_namespace.h: Define the MS_PRIVATE and
- MS_REC flags if they are not in sys/mount.h.
-
-2011-06-06 Nguyễn Thái Ngọc Duy <pclouds@gmail.com>
-
- * po/LINGUAS: Add vietnamese.
- * po/vi.po: Add vietnamese translation.
-
-2011-06-02 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_namespace/pam_namespace.c (protect_dir): Add parameter
- to always do protect mount the last directory in the path.
- (check_inst_parent, create_polydir): Update the protect_dir() call.
- (ns_setup): Likewise and add the MS_PRIVATE mount() call.
- (pam_sm_open_session): Check the mount_private option.
- * modules/pam_namespace/pam_namespace.h: Add the PAMNS_MOUNT_PRIVATE.
- * modules/pam_namespace/pam_namespace.8.xml: Document the mount_private
- option.
-
- * modules/pam_cracklib/pam_cracklib.c (str_lower): Make it no-op
- on NULL strings.
- (password_check): Guard for NULLs returned from memory allocation.
-
- * modules/pam_filter/pam_filter.c (process_args): Guard for error return
- from pam_get_user().
-
- * modules/pam_echo/pam_echo.c (replace_and_print): Guard for error return
- from pam_get_item().
-
-2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_timestamp/pam_timestamp.c (main): Remove unsused
- variable pretval.
-
- * modules/pam_stress/pam_stress.c (converse): **message is const.
- (stress_get_password): pmsg is const.
- (pam_sm_chauthtok): Likewise.
- * libpam/pam_item.c (pam_get_user): Make pmsg const and remove
- casts.
-
-2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_env/pam_env.c (_pam_parse): Implement debug option.
- Based on patch by Tomas Mraz.
-
-2011-05-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): quiet
- option has no argument, print no missing file if quiet is set
- [sf#3194930].
-
-2011-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Don't
- abort with error if btmp file does not exist.
-
-2011-03-21 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_unix/md5.c (MD5Final): Clear the whole ctx.
-
-2011-03-18 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_namespace/md5.c (MD5Final): Clear the whole ctx.
- * modules/pam_namespace/pam_namespace.c (del_polydir): Guard for NULL poly.
- (protect_dir): Guard for -1 passing to close().
- (ns_setup): Likewise.
- (pam_sm_open_session): Correctly test for SELinux enabled flag.
-
-2011-03-17 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_selinux/pam_selinux.c (config_context): Fix leak of type.
- (manual_context): Likewise.
- (context_from_env): Remove extraneous auditing in success case.
-
- * modules/pam_unix/support.c (_unix_run_helper_binary): Remove extra
- close() call.
-
-2011-02-22 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_nologin/pam_nologin.8.xml: Add missing space.
- * modules/pam_limits/limits.conf.5.xml: Fix typo.
-
-2010-12-21 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_selinux/pam_selinux.c (mls_range_allowed): Unhardcode
- values for security class and av permission bit.
-
-2010-12-14 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_limits/pam_limits.c (parse_uid_range): New function
- to parse the range of uids or gids.
- (parse_config_file): Call parse_uid_range() and if uid/gid range
- is identified, setup the limits if the range matches. New parameters
- containing user's uid and primary gid.
- (pam_sm_open_session): Pass the user's uid and primary gid to
- parse_config_file().
- * modules/pam_limits/limits.conf.5.xml: Document the uid/gid ranges.
-
-2010-12-14 Bahadır Kandemir <bahadir@pardus.org.tr>
-
- * po/tr.po: Updated translations.
-
-2010-11-25 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_securetty/pam_securetty.8.xml: Improve documentation
- of the kernel console feature and the noconsole option.
-
-2010-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_securetty/pam_securetty.c: Parse console= kernel
- option, add noconsole option.
- * modules/pam_securetty/pam_securetty.8.xml: Document new behavior
- for serial console.
- Patch from Lennart Poettering.
-
-2010-11-24 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_limits/limits.conf.5.xml: Document the %group syntax.
-
-2010-11-18 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_limits/pam_limits.c (pam_parse,pam_sm_open_session):
- Drop obsolete and broken option change_uid.
- * modules/pam_limits/pam_limits.8.xml: Likewise.
-
-2010-11-16 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Remove
- dead and duplicate code. Return PAM_INCOMPLETE instead of
- PAM_CONV_AGAIN.
-
-2010-11-11 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Fix
- potential use after free in case SELinux is misconfigured.
-
- * modules/pam_namespace/pam_namespace.c (process_line): Fix memory
- leak when parsing empty config file lines.
-
-2010-10-28 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 1.1.3
-
- * configure.in: Increase version to 1.1.3
-
- * NEWS: document visible changes
-
- * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
-
-2010-10-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/adg/Makefile.am: Use UTF-8 for html docu.
- * doc/mwg/Makefile.am: Likewise.
- * doc/sag/Makefile.am: Likewise.
-
-2010-10-22 Tomas Mraz <tm@t8m.info>
-
- * modules/pam_namespace/pam_namespace.c (inst_init): Use execle()
- to execute the init script with clean environment. (CVE-2010-3853)
- (cleanup_tmpdirs): Likewise for executing rm.
-
-2010-10-21 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_mkhomedir/mkhomedir_helper.c (rec_mkdir): Remove.
- (create_homedir): Use mkdir() instead of rec_mkdir().
- (make_parent_dirs): New function.
- (main): Use make_parent_dirs() to create parent directories only
- for the home directory itself.
-
-2010-10-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/support.c (_unix_getpwnam): Don't allocate
- unneeded buffer for uid/gid [sf#3059572].
-
-2010-10-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_get_authtok.3.xml: Fix xml code.
-
- * doc/man/Makefile.am: Fix build dependencys of pam_get_authtok.3.
-
- * xtests/Makefile.am: Only build xtests if we run xtests.
- * configure.in: Check for libdb with symbol versions, too.
- Patch from Diego Elio Pettenò.
-
- * modules/pam_mkhomedir/mkhomedir_helper.c (rec_mkdir): Create
- parent directories always with mode 0755.
- (create_homedir): Create main directory with mode 0700 at first.
-
-2010-10-19 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_selinux/Makefile.am (pam_selinux_la_LIBADD): Add
- @LIBAUDIT@.
-
- * m4/ld-O1.m4 (PAM_LD_O1): Fix typo.
-
- * m4/ld-no-undefined.m4: New file.
- * configure.in: Use PAM_LD_NO_UNDEFINED.
- * Makefile.am (M4_FILES): Add m4/ld-no-undefined.m4.
-
- * modules/pam_selinux/pam_selinux.c (verbose_message): Remove.
- (pam_sm_open_session): Call send_text() instead of verbose_message().
-
-2010-10-19 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_env/pam_env.8.xml: Document side effects of
- environment variables in the stack.
- * modules/pam_exec/pam_exec.8.xml: Document that user can
- have controll over the environment.
-
-2010-10-07 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_selinux/pam_selinux.c (verbose_message): Fix format
- string.
-
-2010-10-04 Dmitry V. Levin <ldv@altlinux.org>
-
- * libpam/pam_modutil_priv.c: New file.
- * libpam/Makefile.am (libpam_la_SOURCES): Add it.
- * libpam/include/security/pam_modutil.h (struct pam_modutil_privs,
- PAM_MODUTIL_DEF_PRIVS, pam_modutil_drop_priv,
- pam_modutil_regain_priv): New declarations.
- * libpam/libpam.map (LIBPAM_MODUTIL_1.1.3): New interface.
- * modules/pam_env/pam_env.c (handle_env): Use new pam_modutil interface.
- * modules/pam_mail/pam_mail.c (_do_mail): Likewise.
- * modules/pam_xauth/pam_xauth.c (check_acl, pam_sm_open_session,
- pam_sm_close_session): Likewise.
- (pam_sm_open_session): Remove redundant fchown call.
- Fixes CVE-2010-3430, CVE-2010-3431.
-
-2010-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Extend cross compiling check.
- * doc/specs/Makefile.am: Set CFLAGS and LDFLAGS to BUILD_CFLAGS
- and BUILD_LDFLAGS.
- Bug #3078936 / gentoo #339174
-
-2010-09-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Warn if
- unlink() fails.
-
-2010-09-27 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Return
- PAM_SUCCESS immediately if no cookie file is defined. Return
- PAM_SESSION_ERR if cookie file is defined but target uid cannot be
- determined. Do not modify cookiefile string returned by pam_get_data.
-
- * modules/pam_xauth/pam_xauth.c (check_acl): Ensure that the given
- access control file is a regular file.
-
-2010-09-16 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_env/pam_env.c (handle_env): Use setfsuid() return code.
- * modules/pam_mail/pam_mail.c (_do_mail): Likewise.
- * modules/pam_xauth/pam_xauth.c (check_acl, pam_sm_open_session,
- pam_sm_close_session): Likewise.
-
-2010-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 1.1.2
-
- * configure.in: Bump version number.
- * NEWS: Document changes since 1.1.1.
- * doc/adg/Linux-PAM_ADG.xml: Bump version number.
- * doc/mwg/Linux-PAM_MWG.xml: Likewise.
- * doc/sag/Linux-PAM_SAG.xml: Likewise.
- * libpam/Makefile.am: Bump revision of shared library.
- * po/*.po: Regenerate.
-
-2010-08-26 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_nologin/pam_nologin.c (perform_check): Try first
- /var/run/nologin if the nologin file is not explicitly specified.
- * modules/pam_nologin/pam_nologin.8.xml: Document that /var/run/nologin
- is tried first.
-
-2010-08-26 Sweta Kothari <swkothar@redhat.com>
-
- * po/gu.po: Updated translations.
-
-2010-08-26 Geert Warrink <geert.warrink@onsnet.nu>
-
- * po/nl.po: Updated translations.
-
-2010-08-26 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/specs/Makefile.am: Use CC_FOR_BUILD as compiler (cross
- compile support).
- * configure.in: Check for host compiler if cross compiling.
- Bug #2315432, debian#284854#42.
-
-2010-08-17 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/pam_unix_passwd.c: Implement minlen option.
+ Check return value of setuid to remove glibc warnings.
+ * modules/pam_unix/pam_unix_acct.c: Check setuid return value.
* modules/pam_unix/support.c: Likewise.
- * modules/pam_unix/support.h: Likewise.
-
- * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Adjust
- arguments for _set_ctrl call.
- * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
- * modules/pam_unix/pam_unix_session.c: Likewise.
-
- * modules/pam_unix/pam_unix.8.xml: Document minlen option.
- Based on patch by Steve Langasek.
-
-2010-08-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_mail/pam_mail.c: Check for mail only with user
- privilegs.
-
- * modules/pam_xauth/pam_xauth.c (run_coprocess): Check return
- value of setgid, setgroups and setuid.
-
- * modules/pam_xauth/pam_xauth.c (check_acl): Save errno for
- later usage.
-
- * modules/pam_env/pam_env.c (handle_env): Check if user exists,
- read local user config only with user privilegs.`
-
-2010-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_tally/pam_tally.8.xml: Document that pam_tally is
- deprecated.
-
- * modules/pam_tty_audit/Makefile.am (EXTRA_DIST): Fix make dist.
-
- * modules/pam_unix/passverify.c (check_shadow_expiry): Correct
- check for expired date.
-
- * modules/pam_unix/pam_unix_passwd.c (_pam_unix_approve_pass): Remove
- check for password length. Bug #2923437.
-
-2010-08-04 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_tally2/pam_tally2.c (get_tally): Create file
- with correct permissions. Patch by Diego Elio “Flameeyes” Pettenò.
-
- * modules/pam_unix/passverify.c (PAMH_ARG_DECL): Don't request
- password change if time is not yet set (1.1.1970). Bug #2730965.
-
- * modules/pam_access/pam_access.c (user_match): Make sure
- that user@host will not match @@netgroup. Bug #3035919.
-
- * modules/pam_group/pam_group.c (check_account): Add '%' for
- UNIX groups.
- * modules/pam_group/group.conf: Add example for '%'.
- * modules/pam_group/group.conf.5.xml: Document '%' syntax.
- Bug #3002340, #3037155.
-
-2010-08-02 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_mkhomedir/Makefile.am: don't pass --version-script
- options when linking executables, only when linking libraries
- Patch from Julien Cristau <jcristau@debian.org>
-
-2010-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate): Add
- audit flag to enable logging about unknown user (#2917257).
- * modules/pam_succeed_if/pam_succeed_if.8.xml: Document audit.
- * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
- * modules/pam_succeed_if/README: Regenerated from xml.
-
-2010-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_umask/pam_umask.8.xml: Remove comparisation of
- gid and uid for usergroups.
- * modules/pam_umask/pam_umask.c (setup_limits_from_gecos): Likewise.
- Bug #3004656
-
- * configure.in: Don't check for libxcrypt if no xcrypt.h exists,
- fix typo introduced with 1.1.1.
- Reported by Diego Elio “Flameeyes” Pettenò.
-
-2010-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Call
- setfsuid to be allowed to remove temporary files (#3010705).
- (pam_sm_open_session): Call fchown with correct permissions.
-
-2010-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_tty_audit/Makefile.am (TESTS): Add tst-pam_tty_audit.
- * modules/pam_tty_audit/tst-pam_tty_audit: New.
-
-2010-06-07 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_tty_audit/Makefile.am: If we don't have the libraries
- required for building pam_tty_audit, we shouldn't install the manpage
- either.
-
-2010-05-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_userdb/pam_userdb.c: Define HAVE_DBM
- for BerkDB 5.0 support. Patch by Diego Elio Pettenò.
-
-2010-04-15 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_exec/pam_exec.8.xml: Fix example.
-
-2010-04-13 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_pwhistory/opasswd.c: Fix compilation if
- cyprt_r() is not available.
- * configure.in: check for getutent_r.
- * modules/pam_timestamp/pam_timestamp.c: Use getutent()
- if getutent_r() does not exist.
- Patch from Diego Elio “Flameeyes” Pettenò.
-
-2010-04-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam.conf-syntax.xml: Better documentation of
- "actionN". Patch from Michal Soltys <soltys@ziu.info>.
-
-2010-04-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_rootok/pam_rootok.c: Add support for acct_mgmt
- and chauthtok.
- * modules/pam_rootok/pam_rootok.8.xml: Document new module
- types.
-
-2010-03-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/ar.po: Add missing Plural-Forms entry to header.
-
-2010-03-25 Daniel Nylander <po@danielnylander.se>
-
- * po/sv.po: Updated translations.
-
-2010-03-24 Ani Peter <anipeter@fedoraproject.org>
-
- * po/ml.po: Updated translations.
-
-2010-03-08 Yuri Chornoivan <yurchor@ukr.net>
-
- * po/uk.po: Updated translations.
-
-2010-02-09 Tomas Mraz <t8m@centrum.cz>
-
- * libpam/pam_get_authtok.c (pam_get_authtok_internal): Fix
- regression in the new password prompt.
-
-2010-01-04 Elad <el.il@doom.co.il>
-
- * po/he.po: New translation to Hebrew.
- * po/LINGUAS: Add Hebrew to the list.
-
-2009-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 1.1.1
-
- * NEWS: Adjust for 1.1.1
- * configure.in: Likewise.
- * doc/adg/Linux-PAM_ADG.xml: Likewise.
- * doc/mwg/Linux-PAM_MWG.xml: Likewise.
- * doc/sag/Linux-PAM_SAG.xml: Likewise.
- * po/*.po: Regenerated.
-
-2009-12-08 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Rename DEBUG to PAM_DEBUG.
- * libpam/pam_env.c: Likewise
- * libpam/pam_handlers.c: Likewise
- * libpam/pam_miscc.c: Likewise
- * libpam/pam_password.c: Likewise
- * libpam/include/security/_pam_macros.h: Likewise
- * libpamc/test/modules/pam_secret.c: Likewise
- * modules/pam_group/pam_group.c: Likewise
- * modules/pam_listfile/pam_listfile.c: Likewise
- * modules/pam_unix/pam_unix_auth.c: Likewise
- * modules/pam_unix/pam_unix_passwd.c: Likewise
-
-2009-12-08 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/passverify.c(unix_update_shadow): Create a shadow
- entry if not present in the file.
-
- * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Remove
- unused function and variable.
-
-2009-11-19 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return
- PAM_AUTH_ERR from the module if sepermit_lock() fails.
-
-2009-11-18 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.c(user_match): Revert the netgroup
- match to the original behavior, add new syntax for adding the local
- hostname.
- * modules/pam_access/access.conf.5.xml: Document the new syntax
- for adding the local hostname to the netgroup match.
-
-2009-11-10 Thorsten Kukuk <kukuk@suse.de>
-
- * doc/man/pam_get_authtok.3.xml: Document pam_get_authtok_noverify
- and pam_get_authtok_verify.
-
- * libpam/Makefile.am (libpam_la_LDFLAGS): Bump revesion of libpam.
-
- * libpam/pam_get_authtok.c (pam_get_authtok_internal): Renamed
- from pam_get_authtok, add flags argument, always check return
- values.
-
- * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Use
- pam_get_authtok_noverify and pam_get_authtok_verify.
-
- * libpam/include/security/pam_ext.h: Add prototypes for
- pam_get_authtok_noverify and pam_get_authtok_verify.
-
- * libpam/libpam.map: Add new pam_get_authtok_* functions.
-
-2009-11-02 Ani Peter <anipeter@fedoraproject.org>
-
- * po/ml.po: Updated translations.
-
-2009-11-02 Tomas Mraz <t8m@centrum.cz>
- * modules/pam_sepermit/Makefile.am: Add sepermit.conf(5) manual page.
- * modules/pam_sepermit/pam_sepermit.8.xml: Add reference to
- sepermit.conf(5). Drop some redundant text.
- * modules/pam_sepermit/sepermit.conf.5.xml: New file.
+2013-09-13 Tomas Mraz <tmraz@fedoraproject.org>
- * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Implement the ignore
- option in sepermit.conf.
+ Write to *rounds only if non-NULL.
+ modules/pam_unix/support.c(_set_ctrl): Write to *rounds only if non-NULL.
-2009-10-29 Tomas Mraz <t8m@centrum.cz>
+ Add missing ')'
+ modules/pam_unix/pam_unix_passwd.c: Add missing ')'..
- * modules/pam_xauth/Makefile.am: Link with libselinux.
- * modules/pam_xauth/pam_xauth.c(pam_sm_open_session): Call
- setfscreatecon() if selinux is enabled to create the .xauth file
- with the right label. Original idea by Dan Walsh.
+2013-09-11 Thorsten Kukuk <kukuk@thkukuk.de>
-2009-10-08 Tomas Mraz <t8m@centrum.cz>
+ Release version 1.1.7.
- * modules/pam_tty_audit/pam_tty_audit.8.xml: Add notice about aureport
- add SEE ALSO section.
+2013-09-11 Tomas Mraz <tmraz@fedoraproject.org>
-2009-10-06 Tomas Mraz <t8m@centrum.cz>
+ Updated translations from Transifex.
+ po/*.po: Updated translations from Transifex.
- * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Just
- call pam_modutil_user_in_group_nam_nam() instead of reimplementation
- of group matching.
+2013-09-04 Thorsten Kukuk <kukuk@thkukuk.de>
-2009-10-05 Kris Thomsen <lakristho@gmail.com>
+ Extend pam_exec by stdout and type= options (ticket #8):
+ * modules/pam_exec/pam_exec.c: Add stdout and type= option
+ * modules/pam_exec/pam_exec.8.xml: Document new options
- * po/da.po: Updated translations.
+2013-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
-2009-09-29 Piotr Drąg <piotrdrag@gmail.com>
+ Fix compile error.
+ * modules/pam_unix/pam_unix_acct.c: fix last change
- * po/pl.po: Updated translations.
+2013-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
-2009-09-21 Yulia Poyarkova <yulia.poyarkova@redhat.com>
-
- * po/ru.po: Updated translations.
-
-2009-09-17 Kiyoto Hashida <khashida@redhat.com>
-
- * po/ja.po: Updated translations.
-
-2009-09-17 Eunju Kim <eukim@redhat.com>
-
- * po/ko.po: Updated translations.
-
-2009-09-17 Yulia Poyarkova <yulia.poyarkova@redhat.com>
-
- * po/ru.po: Updated translations.
-
-2009-09-10 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_securetty/pam_securetty.c: pam_securetty should not
- return PAM_USER_UNKNOWN when the tty is secure, regardless of what
- was entered as a username.
- Patch from Nicolas François <nicolas.francois@centraliens.net>.
-
-2009-08-31 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_namespace/namespace.init: make this portable to POSIX
- awk, instead of using GNU awk extensions.
-
-2009-08-25 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_sepermit/pam_sepermit.8.xml: fix up one reference
- to pam.d(8) left behind because I've forgotten how CVS works
- * po/es.po: fix missing whitespace in password prompts.
-
-2009-08-24 Steve Langasek <vorlon@debian.org>
-
- * doc/pam_get_authtok.3.xml: grammar fix.
- * doc/adg/Linux-PAM-ADG.xml: Likewise.
- * doc/mwg/Linux-PAM_MWG.xml: Likewise.
- * doc/man/pam_setcred.3.xml: fix a typo.
-
-2009-07-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Delete
- new token if it does not match strength criteria.
-
-2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/yppasswd_xdr.c: Remove unnecessary header files.
-
- * modules/pam_unix/support.c (_unix_getpwnam): Only compile in NIS
- support if all necessary functions exist.
-
- * modules/pam_unix/pam_unix_passwd.c (getNISserver): Add debug
- option, handle correct if OS has no NIS support.
-
- * modules/pam_access/pam_access.c (netgroup_match): Check if
- yp_get_default_domain and innetgr are available at compile time.
-
- * configure.in: Check for functions: innetgr, getdomainname
- check for headers: rpcsvc/ypclnt.h, rpcsvc/yp_prot.h.
-
-2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/pam_unix.8.xml: Fix blowfish description.
- Reported by Diego E. “Flameeyes” Pettenò.
-
-2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_namespace/Makefile.am: Fix make maintainer-clean,
- fix docu dependencies.
-
- * modules/pam_xauth/Makefile.am: Fix make maintainer-clean.
- * modules/pam_access/Makefile.am: Likewise.
- * modules/pam_debug/Makefile.am: Likewise.
- * modules/pam_deny/Makefile.am: Likewise.
- * modules/pam_echo/Makefile.am: Likewise.
- * modules/pam_env/Makefile.am: Likewise.
- * modules/pam_faildelay/Makefile.am: Likewise.
- * modules/pam_ftp/Makefile.am: Likewise.
- * modules/pam_group/Makefile.am: Likewise.
- * modules/pam_issue/Makefile.am: Likewise.
- * modules/pam_keyinit/Makefile.am: Likewise.
- * modules/pam_lastlog/Makefile.am: Likewise.
- * modules/pam_limits/Makefile.am: Likewise.
- * modules/pam_listfile/Makefile.am: Likewise.
- * modules/pam_localuser/Makefile.am: Likewise.
- * modules/pam_loginuid/Makefile.am: Likewise.
- * modules/pam_mail/Makefile.am: Likewise.
- * modules/pam_mkhomedir/Makefile.am: Likewise.
- * modules/pam_motd/Makefile.am: Likewise.
- * modules/pam_nologin/Makefile.am: Likewise.
- * modules/pam_pwhistory/Makefile.am: Likewise.
- * modules/pam_rhosts/Makefile.am: Likewise.
- * modules/pam_rootok/Makefile.am: Likewise.
- * modules/pam_securetty/Makefile.am: Likewise.
- * modules/pam_shells/Makefile.am: Likewise.
- * modules/pam_succeed_if/Makefile.am: Likewise.
- * modules/pam_tally2/Makefile.am: Likewise.
- * modules/pam_tally/Makefile.am: Likewise.
- * modules/pam_time/Makefile.am: Likewise.
- * modules/pam_timestamp/Makefile.am: Likewise.
- * modules/pam_tty_audit/Makefile.am: Likewise.
- * modules/pam_umask/Makefile.am: Likewise.
- * modules/pam_unix/Makefile.am: Likewise.
- * modules/pam_warn/Makefile.am: Likewise.
- * modules/pam_wheel/Makefile.am: Likewise.
- * modules/pam_filter/Makefile.am: Likewise.
-
- * configure.in: Make regeneration of docu configureable,
- rename enable_man to enable_docu.
-
- * modules/pam_env/pam_env.c (_pam_parse): Fix typo in debug
- code.
-
- * modules/pam_cracklib/Makefile.am: Don't install docu if
- module is disabled for building.
- * modules/pam_userdb/Makefile.am: Likewise.
-
- * modules/pam_unix/pam_unix_passwd.c: Remove dead SELinux
- code.
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Fix
- usage of wrong variable [bug#2809661].
-
-2009-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Rename crypt_gensalt_rn to crypt_gensalt_r
- * modules/pam_unix/passverify.c: Likewise.
-
-2009-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 1.1.0
-
-2009-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/sag/Linux-PAM_SAG.xml: Fix typos.
- * doc/adg/Linux-PAM_ADG.xml: Likewise.
- * doc/mwg/Linux-PAM_MWG.xml: Likewise.
-
-2009-06-08 Rajesh Ranjan <rajesh672@gmail.com>
-
- * po/hi.po: Updated translations.
-
-2009-06-01 Jaswinder Singh <jsingh@redhat.com>
+ Restart waitpid if it returns with EINTR (ticket #17)
+ * modules/pam_unix/pam_unix_acct.c: run waitpid in a while loop.
+ * modules/pam_unix/pam_unix_passwd.c: Likewise.
+ * modules/pam_unix/support.c: Likewise.
- * po/pa.po: Updated translations.
+2013-08-28 Thorsten Kukuk <kukuk@thkukuk.de>
-2009-06-01 Tomáš Mráz <t8m@centrum.cz>
+ misc_conv.3: Fix documentation of misc_conv.
+ doc/man/misc_conv.3.xml: Fix return value of misc_conv
- * modules/pam_pwhistory/opasswd.c (save_old_password): Don't
- call fclose() on NULL descriptor. Found by Steve Grubb.
+2013-08-23 Tomas Mraz <tmraz@fedoraproject.org>
-2009-06-01 Ville Skyttä <ville.skytta@iki.fi>
+ Apply the exclusive check in pam_sepermit only when loginuid not set.
+ * modules/pam_sepermit/pam_sepermit.c(get_loginuid): Read loginuid from
+ /proc
+ (sepermit_match): Apply the exclusive check only when loginuid not set.
- * modules/pam_limits/pam_limits.8.xml: Only *.conf
- files are parsed. Spelling fixes.
- * modules/pam_access/pam_access.8.xml: Spelling fixes.
- * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
- * modules/pam_echo/pam_echo.8.xml: Likewise.
- * modules/pam_env/pam_env.8.xml: Likewise.
- * modules/pam_exec/pam_exec.8.xml: Likewise.
- * modules/pam_filter/pam_filter.8.xml: Likewise.
- * modules/pam_ftp/pam_ftp.8.xml: Likewise.
- * modules/pam_group/pam_group.8.xml: Likewise.
- * modules/pam_issue/pam_issue.8.xml: Likewise.
- * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
- * modules/pam_listfile/pam_listfile.8.xml: Likewise.
- * modules/pam_localuser/pam_localuser.8.xml: Likewise.
- * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
- * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
- * modules/pam_motd/pam_motd.8.xml: Likewise.
- * modules/pam_namespace/pam_namespace.8.xml: Likewise.
- * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
- * modules/pam_selinux/pam_selinux.8.xml: Likewise.
- * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
- * modules/pam_tally/pam_tally.8.xml: Likewise.
- * modules/pam_tally2/pam_tally2.8.xml: Likewise.
- * modules/pam_time/pam_time.8.xml: Likewise.
- * modules/pam_timestamp/pam_timestamp.8.xml: Likewise.
- * modules/pam_timestamp/pam_timestamp_check.8.xml: Likewise.
- * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
- * modules/pam_umask/pam_umask.8.xml: Likewise.
- * modules/pam_unix/pam_unix.8.xml: Likewise.
- * modules/pam_xauth/pam_xauth.8.xml: Likewise.
+2013-08-22 Tomas Mraz <tmraz@fedoraproject.org>
-2009-05-28 Jaswinder Singh <jsingh@redhat.com>
+ Updated translations from Transifex.
+ * po/*.po: Updated translations from Transifex.
- * po/pa.po: Updated translations.
+2013-07-02 Dmitry V. Levin <ldv@altlinux.org>
-2009-05-21 Albert Carabasa Giribet <albertc@asic.udl.cat>
+ pam_rootok: fix linking in --enable-audit mode.
+ pam_rootok.c explicitly uses functions from libaudit, so the module has
+ to be linked with the library.
- * po/ca.po: Updated translations.
+ * modules/pam_rootok/Makefile.am (pam_rootok_la_LIBADD): Add @LIBAUDIT@.
-2009-05-11 Ani Peter <anipeter@fedoraproject.org>
+2013-07-01 Richard Guy Briggs <rgb@redhat.com>
- * po/ml.po: Updated translations.
+ pam_tty_audit: fix a typo that crept in during patch review.
+ * modules/pam_tty_audit/pam_tty_audit.c (pam_sm_open_session): Replace
+ all occurrences of HAVE_AUDIT_TTY_STATUS_LOG_PASSWD with
+ HAVE_STRUCT_AUDIT_TTY_STATUS_LOG_PASSWD.
+ * configure.in (HAVE_AUDIT_TTY_STATUS_LOG_PASSWD): Remove.
-2009-05-11 Charles-Antoine Couret <cacouret@wanadoo.fr>
+2013-06-21 Richard Guy Briggs <rgb@redhat.com>
- * po/fr.po: Updated translations.
+ pam_tty_audit: add an option to control logging of passwords: log_passwd
+ Most commands are entered one line at a time and processed as complete lines
+ in non-canonical mode. Commands that interactively require a password, enter
+ canonical mode with echo set to off to do this. This feature (icanon and
+ !echo) can be used to avoid logging passwords by audit while still logging the
+ rest of the command. Adding a member to the struct audit_tty_status passed in
+ by pam_tty_audit allows control of logging passwords per task.
-2009-05-11 Tomáš Mráz <t8m@centrum.cz>
+ * configure.in: autoconf bits to conditionally add support at compile time
+ depending on struct audit_tty_status kernel header version.
+ * modules/pam_tty_audit/pam_tty_audit.8.xml: Document new pam_tty_audit module
+ log_passwd option.
+ * modules/pam_tty_audit/pam_tty_audit.c: (pam_sm_open_session): Added
+ "log_passwd" option parsing.
- * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary): Remove
- unnecessary setuid() call.
+2013-06-20 Tomas Mraz <tmraz@fedoraproject.org>
-2009-05-05 Thorsten Kukuk <kukuk@thkukuk.de>
+ Man page fix - unix_update runs in the permissive mode as well.
+ modules/pam_unix/unix_update.8.xml: unix_update helper runs in the
+ permissive mode as well.
- * release version 1.0.92
- * libpamc/Makefile.am (libpamc_la_LDFLAGS): Increase revesion.
- * configure.in: Increase version to 1.0.92.
+2013-06-18 Thorsten Kukuk <kukuk@orinoco.thkukuk.de>
-2009-04-20 Mario Santagiuliana <mario@marionline.it>
+ Use hash from /etc/login.defs as default if no other one is specified as argument.
+ * modules/pam_unix/support.c: Add search_key, call from __set_ctrl
+ * modules/pam_unix/support.h: Add define for /etc/login.defs
+ * modules/pam_unix/pam_unix.8.xml: Document new behavior.
+ * modules/pam_umask/pam_umask.c: Add missing NULL pointer check
- * po/it.po: Updated translations.
+2013-04-12 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-17 Fabian Affolter <fab@fedoraproject.org>
+ pam_access: better not change the default function used to get domain name.
+ modules/pam_access/pam_access.c (netgroup_match): As we did not use
+ yp_get_default_domain() in the 1.1 branch due to typo in ifdef
+ we should use it only as fallback.
- * po/de.po: Updated translations.
+2013-03-28 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-16 Tomáš Mráz <t8m@centrum.cz>
+ Fix strict aliasing issue in MD5 implementations.
+ modules/pam_namespace/md5.c (MD5Final): Use memcpy instead of assignment.
+ modules/pam_unix/md5.c (MD5Final): Use memcpy instead of assignment.
- * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Add user
- parameter. Use user instead of pwd->pw_name in comparsions.
- (pam_sm_authenticate): Pass the original user to evaluate().
+2013-03-22 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-14 Amitakhya Phukan <aphukan@fedoraproject.org>
+ pam_lastlog: Do not fail on short read if btmp is corrupted.
+ modules/pam_lastlog/pam_lastlog.c (last_login_failed): Just warn, not fail
+ on short read or read error.
- * po/as.po: Updated translations.
+ pam_rootok: Allow proper logging of the user AVC if access disallowed by SELinux
+ modules/pam_rootok/pam_rootok.c (log_callback, selinux_check_root): New functions.
+ (check_for_root): Use the selinux_check_root() instead of checkPasswdAccess.
-2009-04-14 Runa Bhattacharjee <runab@fedoraproject.org>
+2013-02-08 Tomas Mraz <tmraz@fedoraproject.org>
- * po/bn_IN.po: Updated translations.
+ Add checks for crypt() returning NULL.
+ modules/pam_pwhistory/opasswd.c (compare_password): Add check for crypt() NULL return.
+ modules/pam_unix/bigcrypt.c (bigcrypt): Likewise.
-2009-04-14 Sweta Kothari <swkothar@redhat.com>
+2013-02-07 Tomas Mraz <tmraz@fedoraproject.org>
- * po/gu.po: Updated translations.
+ pam_userdb: Allow also modern password hashes supported by crypt().
+ modules/pam_userdb/pam_userdb.c (user_lookup): Allow password hashes
+ longer than 13 characters and long salt.
-2009-04-14 Sandeep Shedmake <sandeep.shedmake@gmail.com>
+2013-01-18 Walter de Jong <walter.dejong@surfsara.nl>
- * po/mr.po: Updated translations.
+ pam_access: fix typo in ifdef.
+ modules/pam_access/pam_access.c (netgroup_match): Fix typo
+ in #ifdef HAVE_YP_GET_DEFAULT_DOMAIN.
-2009-04-14 Rui Gouveia <rui.gouveia@globaltek.pt>
+2012-12-20 Tomas Mraz <tmraz@fedoraproject.org>
- * po/pt.po: Updated translations.
+ pam_cracklib: Mention checks that are not run for root.
+ modules/pam_cracklib/pam_cracklib.8.xml: Add note about checks
+ when run as root.
-2009-04-14 I. Felix <ifelix@redhat.com>
+ Update also the POT file.
+ po/Linux-PAM.pot: Update to reflect current sources.
- * po/ta.po: Updated translations.
+2012-12-12 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-14 Krishna Babu K <kkrothap@redhat.com>
+ Updated translations from Transifex, added new languages.
+ po/LINGUAS: Added new languages.
+ po/*.po: Updated translations from Transifex including new languages.
- * po/te.po: Updated translations.
+2012-11-30 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-09 Thorsten Kukuk <kukuk@thkukuk.de>
+ pam_selinux: Drop obsolete and unsupported manual context selection.
+ modules/pam_selinux/pam_selinux.c (manual_context): Drop function.
+ (compute_exec_context): Drop manual_context() call.
- * modules/pam_unix/yppasswd.h: Update license to GPLv2 or later
- on request of Olaf Kirch (Author).
- * modules/pam_unix/yppasswd_xdr.c: Likewise.
+2012-11-23 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-06 R.E. van der Luit <nippur@fedoraproject.org>
+ pam_limits: fix grammatical mistake.
+ modules/pam_limits/limits.conf: Fix grammatical mistake.
- * po/nl.po: Updated translations.
+2012-11-13 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-06 Terry Chuang <tchuang@redhat.com>
+ Reflect the enforce_for_root semantics change in pam_pwhistory xtest.
+ xtests/tst-pam_pwhistory1.pamd: Use enforce_for_root as the test is
+ running with real uid == 0.
- * po/zh_TW.po: Updated translations.
+2012-10-10 Dmitry V. Levin <ldv@altlinux.org>
-2009-04-03 Shankar Prasad <svenkate@redhat.com>
+ pam_unix: fix build in --enable-selinux mode.
+ glibc's <sys/wait.h> starting with commit
+ http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=glibc-2.15-231-gd94a467
+ does not include <sys/resource.h> for POSIX 2008 conformance reasons, so
+ when pam is being built with SELinux support enabled, pam_unix_passwd.c
+ uses getrlimit(2) and therefore should include <sys/resource.h> without
+ relying on other headers.
- * po/kn.po: Updated translations.
+ * modules/pam_unix/pam_unix_passwd.c: Include <sys/resource.h>.
-2009-04-03 Manoj Kumar Giri <mgiri@redhat.com>
+ Reported-by: Guido Trentalancia <guido@trentalancia.com>
+ Reported-by: "Jory A. Pratt" <anarchy@gentoo.org>
+ Reported-by: Diego Elio Pettenò <flameeyes@flameeyes.eu>
- * po/or.po: Updated translations.
+2012-10-10 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-03 Miloš Komarčević <kmilos@gmail.com>
+ pam_namespace: add mntopts flag for tmpfs mount options.
+ modules/pam_namespace/pam_namespace.h: Add mount_opts member to polydir
+ structure.
+ modules/pam_namespace/pam_namespace.c (del_polydir): Free the mount_opts.
+ (parse_method): Parse the mntopts flag.
+ (ns_setup): Pass the mount_opts to mount().
+ modules/pam_namespace/namespace.conf.5.xml: Document the mntopts flag.
- * po/sr.po: Updated translations.
- * po/sr@latin.po: Updated translations.
+2012-09-06 Tomas Mraz <tmraz@fedoraproject.org>
-2009-04-03 Leah Liu <lliu@redhat.com>
+ pam_selinux, pam_tally2: Add tty and rhost to audit data.
+ modules/pam_selinux/pam_selinux.c (send_audit_message): Obtain tty and
+ rhost from PAM items and pass them to audit.
+ modules/pam_tally2/pam_tally2.c (tally_check): Obtain tty and
+ rhost from PAM items and pass them to audit.
+ (main): Obtain tty name of stdin and pass it to audit.
- * po/zh_CN.po: Updated translations.
+ Update configure.in to use more recent interfaces.
+ configure.in: Use LT_INIT instead of AC_PROG_LIBTOOL and AS_HELP_STRING instead
+ of AC_HELP_STRING.
-2009-04-03 Dmitry V. Levin <ldv@altlinux.org>
+2012-08-17 Tomas Mraz <tmraz@fedoraproject.org>
- * libpamc/pamc_load.c (__pamc_exec_agent): Replace call to exit(3)
- in child process with call to _exit(2).
- * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Likewise.
- * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
- Likewise.
- * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
- Likewise.
- * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
- * modules/pam_xauth/pam_xauth.c (run_coprocess): Likewise.
- * modules/pam_exec/pam_exec.c (call_exec): Replace all calls to
- exit(3) in child process with calls to _exit(2).
- * modules/pam_filter/pam_filter.c (set_filter): Likewise.
- * modules/pam_namespace/pam_namespace.c (inst_init,
- cleanup_tmpdirs): Likewise.
+ Add missing $(DESTDIR) when making directories on install.
+ modules/pam_namespace/Makefile.am: Add missing $(DESTDIR) when making
+ $(namespaceddir) on install.
+ modules/pam_sepermit/Makefile.am: Add missing $(DESTDIR) when making
+ $(sepermitlockdir) on install.
-2009-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
+2012-08-17 Thorsten Kukuk <kukuk@orinoco.thkukuk.de>
- * modules/pam_unix/support.c (_unix_run_helper_binary): Don't
- ignore return value of write().
+ release version 1.1.6.
+ configure.in: Bump version to 1.1.6
+ NEWS: Document changes
+ po/*.po: Regenerate *.po files
- * libpamc/include/security/pam_client.h (PAM_BP_ASSERT): Honour
- NDEBUG.
- * modules/pam_timestamp/pam_timestamp.c: don't ignore return
- values of lchown and fchown.
+2012-08-16 Thorsten Kukuk <kukuk@thkukuk.de>
-2009-03-25 Thorsten Kukuk <kukuk@thkukuk.de>
+ Small documentation and define fixes.
+ modules/pam_limits/limits.conf.5.xml: Document race of maxlogins [#10]
+ modules/pam_namespace/pam_namespace.h: Define MS_SLAVE if necessary
+ modules/pam_pwhistory/pam_pwhistory.c: Document how the module works
+ modules/pam_unix/pam_unix.8.xml: Document remember option obsoleted by pam_pwhistory [#6]
- * modules/pam_mkhomedir/pam_mkhomedir.c: Make option handling
- reentrant (#2487654)
- (_pam_parse): Fix umask option.
+2012-08-13 Tomas Mraz <tmraz@fedoraproject.org>
- * modules/pam_unix/passverify.c: Fix typo.
+ Respect PAM_AUTHTOK_TYPE in pam_get_authtok_verify().
+ libpam/pam_get_authtok.c (pam_get_authtok_internal): Set the PAM_AUTHTOK_TYPE
+ item when obtained from module options.
+ (pam_get_authtok_verify): Use the PAM_AUTHTOK_TYPE item when prompting.
- * modules/pam_issue/pam_issue.c: Fix compiler warning.
- * modules/pam_ftp/pam_ftp.c: Likewise.
+2012-08-09 Tomas Mraz <tmraz@fedoraproject.org>
-2009-03-25 Pavol Šimo <palo.simo@gmail.com>
+ Document limits.d also in the limits.conf manpage.
+ modules/pam_limits/limits.conf.5.xml: Document the limits.d existence.
- * po/sk.po: Updated translations.
+2012-07-23 Tomas Mraz <tmraz@fedoraproject.org>
-2009-03-24 Sulyok Péter <peti@sulyok.hu>
+ New autotools do not create empty directories on install.
+ modules/pam_namespace/Makefile.am: Add install-data-local target to create
+ namespaceddir.
+ modules/pam_sepermit/Makefile.am: Add install-data-local target to create
+ sepermitlockdir.
- * po/hu.po: Updated translations.
+2012-07-09 Stevan Bajić <stevan@bajic.ch>
-2009-03-24 Domingo Becker <domingobecker@gmail.com>
+ RLIMIT_* variables are no longer defined unless you explicitly include sys/resource.h.
- * po/es.po: Updated translations.
+ modules/pam_unix/pam_unix_acct.c: Include sys/resource.h.
-2009-03-24 Diego Búrigo Zacarão <diegobz@projetofedora.org>
+2012-06-27 Tomas Mraz <tmraz@fedoraproject.org>
- * po/pt_BR.po: Updated translations.
+ pam_umask: correct the documentation of GECOS field parsing.
+ modules/pam_umask/pam_umask.8.xml: Correct the documentation of GECOS field
+ parsing.
-2009-03-24 Piotr Drąg <piotrdrag@gmail.com>
+2012-06-22 Tomas Mraz <tmraz@fedoraproject.org>
- * po/pl.po: Updated translations.
+ pam_cracklib: Add monotonic character sequence checking.
+ modules/pam_cracklib/pam_cracklib.c (_pam_parse): Parse the maxsequence option.
+ (sequence): New function to check for too long monotonic sequence of characters.
+ (password_check): Call the sequence().
+ modules/pam_cracklib/pam_cracklib.8.xml: Document the maxsequence check.
-2009-03-24 Tomas Mraz <t8m@centrum.cz>
+2012-06-01 Tomas Mraz <tmraz@fedoraproject.org>
- * modules/pam_unix/passverify.c(save_old_password): Call fflush() and
- fsync().
- (unix_update_passwd, unix_update_shadow): Likewise.
- * modules/pam_pwhistory/opasswd.c(save_old_password): Likewise.
+ pam_timestamp: Fix copy&paste error in manpage.
+ modules/pam_timestamp/pam_timestamp.8.xml: Fix AUTHOR section.
- * po/cs.po: Updated translations.
+2012-05-28 Tomas Mraz <tmraz@fedoraproject.org>
-2009-03-09 Thorsten Kukuk <kukuk@thkukuk.de>
+ Pulled new translations from Transifex.
+ po/*.po: Updated translations.
- * release version 1.0.91
+ pam_pwhistory: Always record the old password even when root changes it.
+ modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Use the UID of
+ the process instead of the target user UID (same as in pam_cracklib) to
+ check for root. Always record old password.
- * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
- * xtests/Makefile.am: Add tst-pam_unix4.pamd, tst-pam_unix4.sh
- and time.conf.
+2012-05-24 Tomas Mraz <tmraz@fedoraproject.org>
-2009-03-03 Dmitry V. Levin <ldv@altlinux.org>
+ pam_cracklib: Add enforce_for_root option.
+ modules/pam_cracklib/pam_cracklib.c (_pam_parse): Recognize the enforce_for_root option.
+ (pam_sm_chauthtok): Enforce errors for root with the option.
+ modules/pam_cracklib/pam_cracklib.8.xml: Document the enforce_for_root option.
- * tests/tst-pam_mkargv.c (main): Fix for non-64bit architectures.
+2012-04-30 Tomas Mraz <tmraz@fedoraproject.org>
-2009-03-03 Tomas Mraz <t8m@centrum.cz>
+ pam_cracklib: Add maxclassrepeat, gecoscheck checks and remove unused difignore.
+ modules/pam_cracklib/pam_cracklib.c (_pam_parse): Recognize the maxclassrepeat, gecoscheck options. Ignore difignore option.
+ (simple): Add the check for the same class repetition.
+ (usercheck): Refactor into wordcheck().
+ (gecoscheck): New test for words from the GECOS field.
+ (password_check): Call the gecoscheck().
+ (pam_sm_chauthtok): Drop the diff_ignore from options struct.
+ modules/pam_cracklib/pam_cracklib.8.xml: Document the maxclassrepeat and gecoscheck checks, update the documentation of the difok test.
- * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Test
- for abnormal exit of the helper binary.
- * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary): Likewise.
- * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
- * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Likewise.
+ pam_lastlog: Never lock out the root account.
+ modules/pam_lastlog/pam_lastlog.c (pam_sm_authenticate): Return PAM_SUCCESS if
+ uid==0.
+ modules/pam_lastlog/pam_lastlog.8.xml: Improve documentation.
-2009-02-27 Tomas Mraz <t8m@centrum.cz>
+2012-04-17 Tomas Mraz <tmraz@fedoraproject.org>
- * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Replace
- signal() with sigaction().
- * modules/pam_namespace/pam_namespace.c(inst_init, cleanup_tmpdirs):
- Likewise.
- * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Likewise.
- * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary):
- Likewise.
- * modules/pam_unix/passverify.c(su_sighandler): Likewise.
- * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
-
- * modules/pam_tally2/Makefile.am: Link the pam_tally2 app to libpam
- for auxiliary functions.
- * modules/pam_tally2/pam_tally2.8.xml: Drop non-existing no_reset
- option. Document new serialize option.
- * modules/pam_tally2/pam_tally2.c: Add support for the new serialize
+ pam_lastlog: add possibility to lock out inactive users in auth or account
+ * modules/pam_lastlog/pam_lastlog.8.xml: Document the new functionality and
option.
- (_cleanup, tally_set_data, tally_get_data): Add tally file handle to
- tally PAM data. Needed for fcntl() locking.
- (get_tally): Use low level file access instead of stdio buffered FILE.
- If serialize option is used lock the tally file access.
- (set_tally, tally_bump, tally_reset): Use low level file access instead
- of stdio buffered FILE. Close the file handle only when it is not owned
- by PAM data.
- (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt): Pass the tally
- file handle to tally_set_data(). Get it from tally_get_data().
- (main): Use low level file access instead of stdio buffered FILE.
-
-2009-02-26 Tomas Mraz <t8m@centrum.cz>
-
- * xtests/Makefile.am: Add tst-pam_unix4.
- * xtests/tst-pam_unix4.c: New test for password change
- and shadow min days limit.
- * xtests/tst-pam_unix4.pamd: Likewise.
- * xtests/tst-pam_unix4.sh: Likewise.
-
- * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Ignore
- PAM_AUTHTOK_ERR on shadow verification.
- * modules/pam_unix/passverify.c (check_shadow_expiry): Return
- PAM_AUTHTOK_ERR if sp_min limit for password change is defied.
-
-2009-02-26 Timur Birsh <taem@linukz.org>
-
- * po/LINGUAS: New Kazakh translation.
- * po/kk.po: New Kazakh translation.
-
-2009-02-25 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_misc.c (_pam_StrTok): Use unsigned char
- instead of int. Reported by Marcus Granado.
- * tests/Makefile.am (TESTS): Add tst-pam_mkargv.
- * tests/tst-pam_mkargv.c (main): Test case for
- _pam_mkargv.
-
- * po/de.po: Update fuzzy translations.
-
-2009-02-25 Tomas Mraz <t8m@centrum.cz>
-
- * xtests/access.conf: Add a line for name resolution test case.
- * xtests/tst-pam_access4.c (main): Set PAM_RHOST for testing the LOCAL
- keyword. Add a test case for name resolution.
-
- * modules/pam_access/pam_access.c (from_match): Move name resolution
- to network_netmask_match().
- (network_netmask_match): Do a name resolution of the origin only if
- matching against a real network/netmask.
-
-2009-02-25 Fabian Affolter <fabian@bernewireless.net>
-
- * po/de.po: Updated translations.
-
-2009-02-25 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
-
- * po/pt_BR.po: Updated translations.
-
-2009-02-25 Domingo Becker <domingobecker@gmail.com>
-
- * po/es.po: Updated translations.
-
-2009-02-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_limits/limits.conf.5.xml: Document that the kernel
- can refuse values out of range for the local system.
- * modules/pam_limits/pam_limits.c (setup_limits): Log if setrlimit
- fails.
-
-2009-02-18 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_password.c (pam_chauthtok): Make sure applications
- don't set internal flags.
-
-2009-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_sm_chauthtok.3.xml: Document that sufficient
- can break the PRELIM_CHECK chain.
-
- * libpam/pam_dispatch.c: Don't freeze chain for chauthtok
- [bugzilla.novell.com#470337]
-
-2009-02-11 Daniel Nylander <po@danielnylander.se>
-
- * po/sv.po: Updated translations.
-
-2009-01-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_sm_setcred.3.xml: Document PAM_ESTABLISH_CRED.
-
-2009-01-19 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_mkhomedir/Makefile.am: Add mkhomedir_helper.
- * modules/pam_mkhomedir/mkhomedir_helper.8.xml: New file. Manual page
- for mkhomedir_helper.
- * modules/pam_mkhomedir/mkhomedir_helper.c: New file. Source
- for mkhomedir_helper. Most of the code moved from pam_mkhomedir.c.
- * modules/pam_mkhomedir/pam_mkhomedir.c (_pam_parse): Do not convert umask
- to integer.
- (rec_mkdir): Moved to mkhomedir_helper.c.
- (create_homedir): Just exec the helper.
- (pam_sm_open_session): Improve logging.
-
-2009-01-19 Daniel Cabrera <h.daniel.cabrera@gmail.com>
-
- * po/es.po: Updated translations.
-
-2009-01-14 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/de.po: Updated translations.
-
-2009-01-07 Piotr Drąg <piotrdrag@gmail.com>
-
- * po/pl.po: Updated translations.
-
-2008-12-23 Piotr Drąg <piotrdrag@gmail.com>
-
- * po/pl.po: Updated translations.
-
-2008-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_pwhistory/pam_pwhistory.c (parse_option): Rename
- type= option to authtok_type= (because of pam_get_authtok).
- * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
-
-2008-12-17 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_tty_audit/pam_tty_audit.c (pam_sm_open_session): Do
- not abort on unknown option. Avoid double free of old_status.
- (pam_sm_close_session): Use LOG_DEBUG for restored status message.
-
- * configure.in: Test for getseuser().
- * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Call getseuser()
- instead of getseuserbyname() if the function is available.
-
-2008-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 1.0.90
-
- * libpam_misc/Makefile.am: Increase version number of shared library.
- * libpamc/Makefile.am: Likewise.
-
-2008-12-12 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_tally2/pam_tally2.c (get_tally): Test for EACCES
- instead of EPERM.
- * modules/pam_tally2/pam_tally2.8.xml: Fix documentation.
-
-2008-12-10 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_item_types_ext.inc.xml: Document PAM_AUTHTOK_TYPE.
- * libpam/pam_end.c (pam_end): Free authtok_type.
- * tests/tst-pam_get_item.c: Add PAM_AUTHTOK_TYPE
- as test case.
- * tests/tst-pam_set_item.c: Likewise.
- * libpam/pam_start.c (pam_start): Initialize xdisplay,
- xauth and authtok_type.
- * libpam/pam_get_authtok.c (pam_get_authtok): Rename "type"
- to "authtok_type".
- * modules/pam_cracklib/pam_cracklib.8.xml: Replace "type=" with
- "authtok_type=".
- * doc/man/pam_get_authtok.3.xml: Document authtok_type argument.
- * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Set
- type= argument as PAM_AUTHTOK_TYPE item.
- * libpam/pam_get_authtok.c (pam_get_authtok): If no type
- argument given, use PAM_AUTHTOK_TYPE item.
- * libpam/pam_item.c (pam_get_item): Fetch PAM_AUTHTOK_TYPE item.
- (pam_set_item): Store PAM_AUTHTOK_TYPE item.
- * libpam/pam_private.h: Add authtok_type to pam_handle.
- * libpam/include/security/_pam_types.h (PAM_AUTHTOK_TYPE): New.
-
-2008-12-03 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_access/access.conf.5.xml: Replace
- 2001:4ca0 with 2001:db8:: [bug#2356400].
-
- * doc/man/Makefile.am: Add pam_get_authtok.3.xml.
- * doc/man/pam_get_authtok.3.xml: New.
- * libpam/Makefile.am: Add pam_get_authtok.c.
- * libpam/libpam.map: Export pam_get_authtok.
- * libpam/pam_get_authtok.c: New.
- * libpam/pam_private.h: Add mod_argc and mod_argv to pam_handle.
- * libpam_include/security/pam_ext.h: Add pam_get_authtok
- prototype.
- * modules/pam_cracklib/pam_cracklib.c: Use pam_get_authtok.
+ * modules/pam_lastlog/pam_lastlog.c: Add the inactive user lock out.
+ (_pam_session_parse): Renamed from _pam_parse.
+ (_pam_auth_parse): New function to parse auth arguments.
+ (_last_login_open): Factor out opening of the lastlog file.
+ (_last_login_read): Factor out opening of the lastlog file.
+ (pam_sm_authenticate): Implement the lockout functionality.
+ (pam_sm_setcred): Just return PAM_SUCCESS.
+ (pam_sm_acct_mgmt): Call pam_sm_authenticate().
+
+2012-04-11 Paul Wouters <pwouters@redhat.com>
+
+ Check for crypt() failure returning NULL.
+ * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Adjust syslog message.
+ * modules/pam_unix/passverify.c (create_password_hash): Check for crypt()
+ returning NULL.
+
+2012-02-03 Dmitry V. Levin <ldv@altlinux.org>
+
+ pam_unix: make configuration consistent in --enable-static-modules mode.
+ In --enable-static-modules mode, it was not possible to use "pam_unix"
+ in PAM config files. Instead, different names had to be used for each
+ management group: pam_unix_auth, pam_unix_acct, pam_unix_passwd and
+ pam_unix_session. This change makes pam_unix configuration consistent
+ with other PAM modules.
+
+ * README: Remove the paragraph describing pam_unix distinctions in
+ --enable-static-modules mode.
+ * libpam/pam_static_modules.h (_pam_unix_acct_modstruct,
+ _pam_unix_auth_modstruct, _pam_unix_passwd_modstruct,
+ _pam_unix_session_modstruct): Remove.
+ (_pam_unix_modstruct): New pam_module declaration.
+ * modules/pam_unix/pam_unix_static.h: New file.
+ * modules/pam_unix/pam_unix_static.c: Likewise.
+ * modules/pam_unix/Makefile.am (noinst_HEADERS): Add pam_unix_static.h
+ (pam_unix_la_SOURCES) [STATIC_MODULES]: Add pam_unix_static.c
+ * modules/pam_unix/pam_unix_acct.c [PAM_STATIC]: Include
+ pam_unix_static.h
+ [PAM_STATIC] (_pam_unix_acct_modstruct): Remove.
+ * modules/pam_unix/pam_unix_auth.c [PAM_STATIC]: Include
+ pam_unix_static.h
+ [PAM_STATIC] (_pam_unix_auth_modstruct): Remove.
+ * modules/pam_unix/pam_unix_passwd.c [PAM_STATIC]: Include
+ pam_unix_static.h
+ [PAM_STATIC] (_pam_unix_passwd_modstruct): Remove.
+ * modules/pam_unix/pam_unix_sess.c [PAM_STATIC]: Include
+ pam_unix_static.h
+ [PAM_STATIC] (_pam_unix_session_modstruct): Remove.
+
+ Suggested-by: Matveychikov Ilya <i.matveychikov@securitycode.ru>
+
+2012-01-27 Dmitry V. Levin <ldv@altlinux.org>
+
+ Make --disable-cracklib compatible with --enable-static-modules mode.
+ * configure.in: Define HAVE_LIBCRACK when cracklib is enabled.
+ * libpam/pam_static_modules.h (static_modules): Guard the use of
+ _pam_cracklib_modstruct by HAVE_LIBCRACK macro.
+
+2012-02-10 Tomas Mraz <tmraz@fedoraproject.org>
+
+ Add missing includes for types used in the pam_modutil.h.
+ * libpam/include/security/pam_modutil.h: Add missing includes for used types.
+
+2012-01-27 Matveychikov Ilya <i.matveychikov@securitycode.ru>
+
+ Fix compile time errors in --enable-static-modules mode.
+ * libpam/pam_static_modules.h (_pam_rhosts_auth_modstruct): Remove
+ obsolete declaration.
+ (static_modules): Remove undefined reference to
+ _pam_rhosts_auth_modstruct.
+ * modules/pam_pwhistory/opasswd.h: Rename {save,check}_old_password to
+ {save,check}_old_pass in order to avoid conflicts with pam_unix.
+ * modules/pam_pwhistory/opasswd.c: Likewise.
* modules/pam_pwhistory/pam_pwhistory.c: Likewise.
- * po/POTFILES.in: Add libpam/pam_get_authtok.c.
- * xtests/tst-pam_cracklib1.c: Adjust error codes.
-
- * modules/pam_timestamp/Makefile.am: Remove hmactest.c from
- EXTRA_DIST.
-
- * po/*.po: Regenerated.
-
-2008-12-02 Michael Calmer <mc@suse.de>
-
- * modules/pam_limits/limits.conf.5.xml: Document valid values
- for limits (bnc#448314).
-
-2008-12-02 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_env/pam_env.c: Add support for user specific
- environment file. Based on a patch from Ubuntu.
- * modules/pam_env/pam_env.8.xml: Document new options.
-
-2008-12-02 Olivier Fourdan <ofourdan@redhat.com>
-
- * modules/pam_filter/pam_filter.c (master): Use /dev/ptmx
- instead of the old BSD pseudoterminal API.
- (set_filter): Call grantpt(), unlockpt() and ptsname(). Do not
- close pseudoterminal handle in filter child.
- * modules/pam_filter/upperLOWER/upperLOWER.c (main): Use
- regular read() instead of pam_modutil_read() to allow for
- short reads.
-
-2008-12-02 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_timestamp/Makefile.am: Add hmacfile to tests.
- * modules/pam_timestamp/hmacfile.c: Do not try the short key
- testvector.
-
-2008-12-01 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/support.h: Fix masks for cipher algorithm
- flags.
-
-2008-12-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/pam_unix.8.xml: Document blowfish option.
-
- * configure.in: Check for crypt_gensalt_rn.
- * modules/pam_unix/pam_unix_passwd.c: Pass pamh to
- create_password_hash function.
- * modules/pam_unix/passverify.c (create_password_hash): Add
- blowfish support.
- * modules/pam_unix/passverify.h: Adjust create_password_hash
- prototype.
- * modules/pam_unix/support.c: Add support for blowfish option.
- * modules/pam_unix/support.h: Add defines for blowfish option.
- Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
-
-2008-12-01 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.8.xml: Fix description of nodefgroup
- option.
-
- * modules/pam_group/pam_group.c (is_same): Fix check for correct
- string length.
-
-2008-11-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Check for xcrypt.h, fix typo in libaudit check.
- * modules/pam_cracklib/pam_cracklib.c: Include xcrypt.h if
- available.
- * modules/pam_unix/bigcrypt.c: Likewise.
- * modules/pam_unix/passverify.c: Likewise.
- * modules/pam_userdb/pam_userdb.c: Likewise.
- Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
-
- * doc/man/pam_getenv.3.xml: Document that application should
- not free return value.
-
- * doc/man/pam.3.xml: Add Note about thread-safeness of libpam
- functions.
-
-2008-11-28 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/unix_update.c (set_password): Allow root to change
- passwords without verification of the old ones.
-
- * modules/pam_tally2/pam_tally2.c (tally_check): Fix info format
- to be the same as in pam_tally.
-
- * configure.in: Add modules/pam_timestamp/Makefile.
- * doc/sag/Linux-PAM_SAG.xml: Include pam_timestamp.xml.
- * doc/sag/pam_timestamp.xml: New.
- * libpam/pam_static_modules.h: Add pam_timestamp static struct.
- * modules/Makefile.am: Add pam_timestamp directory.
- * modules/pam_timestamp/Makefile.am: New.
- * modules/pam_timestamp/README.xml: New.
- * modules/pam_timestamp/hmacsha1.h: New.
- * modules/pam_timestamp/sha1.h: New.
- * modules/pam_timestamp/pam_timestamp.8.xml: New.
- * modules/pam_timestamp/pam_timestamp_check.8.xml: New.
- * modules/pam_timestamp/pam_timestamp.c: New.
- * modules/pam_timestamp/pam_timestamp_check.c: New.
- * modules/pam_timestamp/hmacfile.c: New.
- * modules/pam_timestamp/hmacsha1.c: New.
- * modules/pam_timestamp/sha1.c: New.
- * modules/pam_timestamp/tst-pam_timestamp: New.
- * po/POTFILES.in: Add pam_timestamp sources.
- * po/*.po: Regenerate.
- * po/cs.po: Updated translations.
-
-2008-11-25 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_pwhistory/opasswd.c (save_old_password): Fix typo.
-
- * modules/pam_time/pam_time.c (is_same): Fix check
- of correct string length (debian bug #326407).
-
-2008-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/Makefile.am: Add pam_time1 tests.
- * xtests/tst-pam_time1.c: New test case.
- * xtests/tst-pam_time1.pamd: New.
- * xtests/time.conf: New.
- * xtests/run-xtests.sh: Copy time.conf.
-
-2008-11-24 Tomas Mraz <t8m@centrum.cz>
-
- * libpam/pam_handlers.c (_pam_parse_conf_file): '-' at
- beginning of type token marks silent module.
- (_pam_load_module): Add handler_type parameter. Do not log
- module load error if module is silent.
- (_pam_add_handler): Pass handler_type to _pam_load_module().
- * libpam/pam_private.h: Add PAM_HT_SILENT_MODULE.
- * doc/man/pam.conf-syntax.xml: Document the '-' at beginning
- of type.
-
- * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Fix leaks
- in error path.
- * modules/pam_env/pam_env.c (_parse_env_file): Remove superfluous
- condition.
- * modules/pam_group/pam_group.c (check_account): Fix leak
- in error path.
- * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): Fix leak
- in error path.
- * modules/pam_securetty/pam_securetty.c (securetty_perform_check): Remove
- superfluous condition.
- * modules/pam_stress/pam_stress.c (stress_get_password,pam_sm_authenticate):
- Remove superfluous conditions.
- (pam_sm_chauthtok): Fix mistaken && for &.
- * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Remove
- superfluous condition.
- All the problems fixed in this commit were found by Steve Grubb.
-
-2008-11-20 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_sepermit/pam_sepermit.c (sepermit_match): Do not
- call sepermit_lock() if sense is deny. Do not crash on NULL seuser
- match.
- (pam_sm_authenticate): Try to call getseuserbyname() even if
- SELinux is disabled.
-
-2008-11-19 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_xauth/pam_xauth.c (pam_sm_open_session):
- Preserve XAUTHLOCALHOSTNAME environment variable.
-
- * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Finish
- implementation of type=STRING option.
-
- * modules/pam_pwhistory/pam_pwhistory.8.xml: Document
- "type=STRING" option.
-
-2008-10-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_setcred.3.xml: Document when credentials
- should be deleted.
- * po/ja.po: Fix syntax error.
- * po/de.po: Update translations.
- * po/*.po: Regenerate with pam_tally2 added.
-
-2008-10-23 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
-
- * po/pt_BR.po: Updated translations.
-
-2008-10-23 Krishna Babu K <kkrothap@redhat.com>
-
- * po/LINGUAS: New language.
- * po/te.po: New translation to Telugu.
-
-2008-10-23 Manoj Kumar Giri <mgiri@redhat.com>
-
- * po/or.po: Updated translations.
-
-2008-10-21 Amitakhya Phukan <aphukan@redhat.com>
-
- * po/as.po: Updated translations.
-
-2008-10-21 Ondrej Sulek <feonsu@gmail.com>
-
- * po/sk.po: Updated translations.
-
-2008-10-21 Terry Chuang <tchuang@redhat.com>
-
- * po/zh_TW.po: Updated translations.
-
-2008-10-21 Kiyoto Hashida <khashida@redhat.com>
-
- * po/ja.po: Updated translations.
-
-2008-10-21 Francesco Valente <fvalen@redhat.com>
-
- * po/it.po: Updated translations.
-
-2008-10-21 Peter van Egdom <p.van.egdom@gmail.com>
-
- * po/nl.po: Updated translations.
-
-2008-10-20 Ani Peter <apeter@redhat.com>
-
- * po/ml.po: Updated translations.
-
-2008-10-20 Pablo Martin-Gomez <pablo.martin-gomez@laposte.net>
-
- * po/fr.po: Updated translations.
-
-2008-10-20 Runa Bhattacharjee <runab@redhat.com>
-
- * po/bn_IN.po: Updated translations.
-
-2008-10-20 Shankar Prasad <svenkate@redhat.com>
-
- * po/kn.po: Updated translations.
-
-2008-10-20 Leah Liu <lliu@redhat.com>
-
- * po/zh_CN.po: Updated translations.
-
-2008-10-20 Ondrej Sulek <feonsu@gmail.com>
-
- * po/LINGUAS: New language.
- * po/sk.po: New translation to Slovak.
-
-2008-10-17 Tomas Mraz <t8m@centrum.cz>
-
- * configure.in: Add modules/pam_tally2/Makefile.
- * doc/sag/Linux-PAM_SAG.xml: Include pam_tally2.xml.
- * doc/sag/pam_tally2.xml: New.
- * libpam/pam_static_modules.h: Add pam_tally2 static struct.
- * modules/Makefile.am: Add pam_tally2 directory.
- * modules/pam_tally2/Makefile.am: New.
- * modules/pam_tally2/README.xml: New.
- * modules/pam_tally2/tallylog.h: New.
- * modules/pam_tally2/pam_tally2.8.xml: New.
- * modules/pam_tally2/pam_tally2.c: New.
- * modules/pam_tally2/pam_tally2_app.c: New.
- * modules/pam_tally2/tst-pam_tally2: New.
- * po/POTFILES.in: Add pam_tally2 sources.
-
-2008-10-17 Xavier Queralt Mateu <xqueralt@gmail.com>
-
- * po/ca.po: Updated translations.
-
-2008-10-15 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Save the old
- euid to suid to be able to restore it.
-
-2008-10-15 Piotr Drąg <piotrdrag@gmail.com>
-
- * po/pl.po: Updated translations.
-
-2008-10-13 Tomas Mraz <t8m@centrum.cz>
-
- * po/LINGUAS: New languages.
- * po/cs.po: Updated translations.
-
-2008-10-13 Amitakhya Phukan <aphukan@redhat.com>
-
- * po/as.po: Updated translations.
-
-2008-10-13 Shankar Prasad <svenkate@redhat.com>
-
- * po/kn.po: Updated translations.
-
-2008-10-13 Sandeep Sheshrao Shedmake <sshedmak@redhat.com>
-
- * po/mr.po: New translation to Marathi.
-
-2008-10-13 Runa Bhattacharjee <runab@redhat.com>
-
- * po/bn_IN.po: Updated translations.
-
-2008-10-13 Sharuzzaman Ahmat Raslan <sharuzzaman@gmail.com>
-
- * po/ms.po: New translation to Malay.
-
-2008-10-10 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass):
- Remove check for re-used passwords.
- * modules/pam_cracklib/pam_cracklib.8.xml: Remove documentation
- of re-used password check.
-
- * configure.in: add modules/pam_pwhistory/Makefile.
- * doc/sag/Linux-PAM_SAG.xml: Include pam_pwhistory.xml.
- * doc/sag/pam_pwhistory.xml: New.
- * libpam/pam_static_modules.h: Add pam_pwhistory data.
- * modules/Makefile.am: Add pam_pwhistory directory.
- * modules/pam_pwhistory/Makefile.am: New.
- * modules/pam_pwhistory/README.xml: New.
- * modules/pam_pwhistory/opasswd.c: New.
- * modules/pam_pwhistory/opasswd.h: New.
- * modules/pam_pwhistory/pam_pwhistory.8.xml: New.
- * modules/pam_pwhistory/pam_pwhistory.c: New.
- * modules/pam_pwhistory/tst-pam_pwhistory: New.
- * xtests/Makefile.am: New.
- * xtests/run-xtests.sh: New.
- * xtests/tst-pam_pwhistory1.c: New.
- * xtests/tst-pam_pwhistory1.pamd: New.
- * xtests/tst-pam_pwhistory1.sh: New.
- * po/POTFILES.in: Add modules/pam_pwhistory/.
- * po/de.po: Update translations.
-
-2008-10-02 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/de.po: Update translations.
-
-2008-09-30 Manoj Kumar Giri <mgiri@redhat.com>
-
- * po/or.po: Updated translations.
-
-2008-09-30 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
-
- * po/pt_BR.po: Updated translations.
-
-2008-09-30 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_lastlog/pam_lastlog.8.xml: Document new options
- noupdate and showfailed.
- * modules/pam_lastlog/pam_lastlog.c(pam_parse): Recognize the new
- options.
- (last_login_read): New output parameter lltime. Do not display
- the last login message if it would be empty.
- (last_login_date): New output parameter lltime. Do not write the
- last login info when LASTLOG_UPDATE is not set.
- (last_login_failed): New function to display the last bad login
- attempt from btmp.
- (pam_sm_open_session): Obtain lltime from last_login_date() and
- call last_login_failed() when appropriate.
-
- * po/Linux-pam.pot: Updated strings to translate.
- * po/*.po: Likewise.
-
-2008-09-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_echo/pam_echo.8.xml: Fix format error.
-
-2008-09-25 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_tally/pam_tally.c(get_tally): Fix syslog message.
- (tally_check): Open faillog read only. Close file descriptor.
- Fix typos in messages.
-
-2008-09-25 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_mail/pam_mail.c (report_mail): Fix logic of
- "quiet" option (Patch from Andreas Henriksson <andreas@fatal.se>)
-
- * modules/pam_mail/pam_mail.8.xml: Fix typo.
-
-2008-09-23 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_limits/limits.conf.5.xml: Comment that rss limit is
- ignored.
-
-2008-09-19 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_cracklib/pam_cracklib.8.xml: Fix description
- of the palindrome test. Document new options maxrepeat and
- reject_username.
- * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Parse
- the maxrepeat and reject_username options.
- (password_check): Call the new tests usercheck() and
- consecutive().
- (_pam_unix_approve_pass): Pass user name to the password_check().
-
-2008-09-16 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo.
-
- * modules/pam_unix/pam_unix.8.xml: Fix typo.
-
-2008-09-03 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_exec/pam_exec.c: Expose authtok if requested,
- provide environment variable containing service type.
- * modules/pam_exec/pam_exec.8.xml: Document new option.
-
-2008-08-29 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_loginuid/pam_loginuid.c(set_loginuid): Uids
- are unsigned.
-
-2008-08-18 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * Makefile.am (M4_FILES): Adjust list.
-
- * modules/pam_access/pam_access.8.xml: Fix module service
- vs. module type.
- * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
- * modules/pam_debug/pam_debug.8.xml: Likewise.
- * modules/pam_deny/pam_deny.8.xml: Likewise.
- * modules/pam_echo/pam_echo.8.xml: Likewise.
- * modules/pam_env/pam_env.8.xml: Likewise.
- * modules/pam_exec/pam_exec.8.xml: Likewise.
- * modules/pam_faildelay/pam_faildelay.8.xml: Likewise.
- * modules/pam_filter/pam_filter.8.xml: Likewise.
- * modules/pam_ftp/pam_ftp.8.xml: Likewise.
- * modules/pam_group/pam_group.8.xml: Likewise.
- * modules/pam_issue/pam_issue.8.xml: Likewise.
- * modules/pam_keyinit/pam_keyinit.8.xml: Likewise.
- * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
- * modules/pam_limits/pam_limits.8.xml: Likewise.
- * modules/pam_listfile/pam_listfile.8.xml: Likewise.
- * modules/pam_localuser/pam_localuser.8.xml: Likewise.
- * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
- * modules/pam_mail/pam_mail.8.xml: Likewise.
- * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
- * modules/pam_motd/pam_motd.8.xml: Likewise.
- * modules/pam_namespace/pam_namespace.8.xml: Likewise.
- * modules/pam_nologin/pam_nologin.8.xml: Likewise.
- * modules/pam_permit/pam_permit.8.xml: Likewise.
- * modules/pam_rhosts/pam_rhosts.8.xml: Likewise.
- * modules/pam_rootok/pam_rootok.8.xml: Likewise.
- * modules/pam_securetty/pam_securetty.8.xml: Likewise.
- * modules/pam_selinux/pam_selinux.8.xml: Likewise.
- * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
- * modules/pam_shells/pam_shells.8.xml: Likewise.
- * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
- * modules/pam_tally/pam_tally.8.xml: Likewise.
- * modules/pam_time/pam_time.8.xml: Likewise.
- * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
- * modules/pam_umask/pam_umask.8.xml: Likewise.
- * modules/pam_unix/pam_unix.8.xml: Likewise.
- * modules/pam_userdb/pam_userdb.8.xml: Likewise.
- * modules/pam_warn/pam_warn.8.xml: Likewise.
- * modules/pam_wheel/pam_wheel.8.xml: Likewise.
- * modules/pam_xauth/pam_xauth.8.xml: Likewise.
-
-2008-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Add version for gettext, add search path
- for m4 directory, fix handling of --disable-* options.
- Patches from Diego Pettenò <flameeyes@gmail.com>.
-
- * configure.in: Run autoupdate on it.
-
- * acincludde.m4: Rename to ...
- * m4/jh_path_xml_catalog.m4: ... this.
-
- * m4/*.m4: Remove all autoconf m4 files.
-
-2008-07-29 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_cracklib/pam_cracklib.8.xml: correct a typo,
- "Only he" -> "Only the"
-
-2008-07-28 Steve Langasek <vorlon@debian.org>
-
- * libpamc/test/regress/test.libpamc.c: use standard u_int8_t
- type instead of __u8, as elsewhere.
- Patch from Roger Leigh <rleigh@debian.org>.
- * modules/pam_unix/passverify.c: make save_old_password()
- thread-safe by using pam_modutil_getpwnam() instead of getpwnam()
- * modules/pam_unix/passverify.c, modules/pam_unix/passverify.h,
- modules/pam_unix/pam_unix_passwd.c: add pamh argument to
- save_old_password()
-
-2008-07-27 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_*/pam_*.8.xml: fix up the references to pam.d,
- which is in manpage section 5, not 8.
- * modules/pam_env/environment, modules/pam_env/pam_env.8.xml:
- spelling fix, seperate -> separate
-
-2008-07-26 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_env/pam_env.c: Fix module to skip over
- non-alphanumeric variable names, and to handle the case when
- asked to delete a non-existent variable.
-
-2008-07-13 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_mail/pam_mail.8.xml: Module supports session and
- not account service (#1980773).
-
-2008-07-11 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Do
- not close the pipe descriptor in borderline case (#2009766).
- * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
- Likewise.
- * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
- * modules/pam_unix/support.h: Define upper limit of fds we will
- attempt to close.
-
- * modules/pam_selinux/pam_selinux.c (config_context): Do not
- ask for the level if use_current_range is set.
- (context_from_env): New function to obtain the context from
- PAM environment variables.
- (pam_sm_open_session): Call context_from_env() if env_params option
- is present. use_current_range now modifies behavior of the
- context_from_env and config_context options.
- * modules/pam_selinux/pam_selinux.8.xml: Describe the env_params
- option. Adjust description of use_current_range option.
-
-2008-07-09 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_exec/pam_exec.c (call_exec): Move all variable
- declaration to begin of a block (#1976310).
-
- * xtests/tst-pam_group1.c (run_test): Move no_grps declaration
- to begin of function (#1976310).
-
- * modules/pam_securetty/pam_securetty.8.xml: Replace
- PAM_IGNORE with PAM_USER_UNKNOWN (#1994330).
-
- * modules/pam_tally/pam_tally.c: Add support for silent and
- no_log_info options.
- * modules/pam_tally/pam_tally.8.xml: Document silent and
- no_log_info options.
-
-2008-07-08 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/passverify.c (verify_pwd_hash): Adjust debug
- statement.
-
-2008-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/unix_chkpwd.c (main): Fix compiling without
- audit support.
-
- * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo in ucredit
- description (reported by Wayne Pollock <pollock@acm.org>)
-
-2008-06-19 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
- Detect configuration errors. Fail on incomplete condition.
-
-2008-05-20 Tomas Mraz <t8m@centrum.cz>
-
- * configure.in: Work correctly with autoconf-2.62.
-
-2008-05-19 Tomas Mraz <t8m@centrum.cz>
-
- * doc/man/pam_getenv.3.xml: Correct the pam_getenv documentation.
-
- * doc/man/pam_prompt.3.xml: Add missing description.
-
-2008-05-14 Kjartan Maraas <kmaraas@gnome.org>
-
- * po/nb.po: Updated translation.
-
-2008-05-14 Sulyok Péter <peti@sulyok.hu>
-
- * po/hu.po: Updated translation.
-
-2008-05-14 Tomas Mraz <t8m@centrum.cz>
-
- * libpam/pam_modutil_getgrgid.c: Replace hardcoded constant with
- define PWD_LENGTH_SHIFT.
- * libpam/pam_modutil_getgrnam.c: Likewise.
- * libpam/pam_modutil_getpwnam.c: Likewise.
- * libpam/pam_modutil_getpwuid.c: Likewise.
- * libpam/pam_modutil_getspnam.c: Likewise.
- * libpam/pam_modutil_private.h: Adjust values for PWD_ constants.
-
- * modules/pam_unix/pam_unix_passwd.c(pam_sm_chauthtok): Unset authtok
- item when password is not approved.
- * modules/pam_unix/support.c(_unix_read_password): UNIX_USE_FIRST_PASS
- is always set when UNIX_AUTHTOK is set, change order of conditions.
-
-2008-05-02 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_selinux/pam_selinux.c(query_response): Add handling
- for NULL response.
- (manual_context): Handle failed query_response() properly. Rename
- variable responses to response which is more correct name.
- (config_context): Likewise.
- (pam_sm_open_session): Do not base decision on whether there is a tty.
-
-2008-04-22 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_selinux/pam_selinux.c(pam_sm_close_sesion): Fix
- regression from the change from 2008-03-20. setexeccon() must be
- called also with NULL prev_context.
-
-2008-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_access/access.conf.5.xml: Document changed behavior
- of LOCAL keyword.
- * modules/pam_access/pam_access.c: Add from_remote_host to
- struct login_info to change behavior of LOCAL keyword: if
- PAM_RHOST is not set, LOCAL will be true.
-
-2008-04-18 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_namespace/pam_namespace.c: New functions
- unprotect_dirs(), cleanup_protect_data(), protect_mount(),
- protect_dir() to protect directory by bind mount.
- (cleanup_data): Renamed to cleanup_polydir_data().
- (parse_create_params): Allow missing specification of mode
- or owner.
- (check_inst_parent): Call protect_dir() on the instance parent
- directory. The directory is created when it doesn't exist.
- (create_polydir): Protect and make the polydir by protect_dir(),
- remove potential races.
- (create_dirs): Renamed to create_instance(), remove call to
- inst_init().
- (ns_setup): Call protect_dir() on the polydir if it already exists.
- Call inst_init() after the polydir is mounted.
- (setup_namespace): Set the namespace protect data to be cleaned up
- on pam_close_session()/pam_end().
- (pam_sm_open_session): Initialize the protect_dirs.
- (pam_sm_close_session): Cleanup namespace protect data.
- * modules/pam_namespace/pam_namespace.h: Define struct for the
- stack of protected dirs.
- * modules/pam_namespace/pam_namespace.8.xml: Document when the
- instance init script is called.
- * modules/pam_namespace/namespace.conf.5.xml: Likewise.
-
-2008-04-17 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.c(myhostname): Removed function.
- (user_match): Supply hostname of the machine to the netgroup_match().
- Use hostname from the loginfo instead of calling myhostname().
- (pam_sm_authenticate): Call gethostname() to fill hostname in the
- loginfo.
-
- * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try
- to lock if euid != 0.
-
-2008-04-16 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/Makefile.am: Link unix_chkpwd with libaudit.
- * modules/pam_unix/unix_chkpwd.c(_audit_log): New function for audit.
- (main): Call _audit_log() when appropriate.
-
- * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Recognize also
- try_first_pass and use_first_pass options.
- (pam_sm_chauthtok): Implement the new options.
-
-2008-04-08 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_xauth/pam_xauth.c(run_coprocess): Avoid multiple
- calls to sysconf() (based on patch by Sami Farin).
-
- * libpam/pam_item.c (TRY_SET): Do not set when destination
- is identical to source.
- (pam_set_item): Do not overwrite destination when it
- is identical to source.
-
-2008-04-07 Miloš Komarčević <kmilos@gmail.com>
-
- * po/sr.po: New file with translation.
- * po/sr@latin.po: Likewise.
- * po/LINGUAS: Add sr and sr@latin.
-
-2008-04-03 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 1.0.0
-
- * configure.in: Set version number to 1.0.0.
- * libpam/Makefile.am: Bump patchlevel of libpam.
- * doc/adg/Linux-PAM_ADG.xml: Update version/date.
- * doc/mwg/Linux-PAM_MWG.xml: Likewise.
- * doc/sag/Linux-PAM_SAG.xml: Likewise.
-
-2008-03-31 Dan Walsh <dwalsh@redhat.com>
-
- * modules/pam_sepermit/pam_sepermit.c(sepermit_lock): Mark lock fd to
- be closed on exec.
-
-2008-03-25 Leah Liu <lliu@redhat.com>
-
- * po/zh_CN.po: Updated translation.
-
-2008-03-20 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_namespace/pam_namespace.c(poly_name): Switch to USER
- method only when appropriate.
- (setup_namespace): Do not umount when not mounted with RUSER.
-
- * modules/pam_selinux/pam_selinux.c(pam_sm_close_session): Call
- freecontext() after the context is logged not before.
-
-2008-03-18 Canniot Thomas <thomas.canniot@mrtomlinux.org>
-
- * po/fr.po: Updated translation.
-
-2008-03-13 Ankit Patel <ankit@redhat.com>
-
- * po/gu.po: Updated translation.
-
-2008-03-05 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_cracklib/pam_cracklib.c(pam_sm_chauthtok): Avoid
- unnecessary x_strdup() of resp.
- * modules/pam_ftp/pam_ftp(pam_sm_authenticate): Call _pam_overwrite()
- before dropping password resp.
-
-2008-03-03 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_selinux/pam_selinux.c: Do not translate syslog messages.
- * po/Linux-PAM.pot: Update.
-
- * libpam/pam_item.c(RESET): Rename to TRY_SET, handle strdup failure.
- (pam_set_item): Use TRY_SET() also for PAM_AUTHTOK and PAM_OLDAUTHTOK.
- Handle allocation failure for PAM_XAUTHDATA.
- (pam_get_user): Return error when conversation returns NULL user.
- Call pam_set_item() instead of RESET().
-
-2008-02-26 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/Makefile.am: Do not link to cracklib.
- * modules/pam_unix/pam_unix_passwd.c(_pam_unix_approve_pass):
- Do not call FascistCheck() from cracklib.
-
-2008-02-29 Fabian Affolter <fab@fedoraproject.org>
-
- * po/de.po: Updated translation.
-
-2008-02-28 Piotr Drąg <piotrdrag@gmail.com>
-
- * po/pl.po: Updated translation.
-
-2008-02-26 Tomas Mraz <t8m@centrum.cz>
-
- * po/LINUGAS: New languages added.
- * po/es.po: Updated translations.
- * po/fr.po: Likewise.
- * po/it.po: Likewise.
- * po/ja.po: Likewise.
- * po/nl.po: Likewise.
- * po/pl.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/ru.po: Likewise.
- * po/zh_CN.po: Likewise.
- * po/as.po: New file.
- * po/gu.po: Likewise.
- * po/hi.po: Likewise.
- * po/kn.po: Likewise.
- * po/ko.po: Likewise.
- * po/ml.po: Likewise.
- * po/or.po: Likewise.
- * po/si.po: Likewise.
- * po/ta.po: Likewise.
-
-2008-02-21 Tomas Mraz <t8m@centrum.cz>
-
- * libpam/pam_audit.c (_pam_audit_writelog): Silence syslog
- message on non-error return.
-
- * modules/pam_unix/unix_chkpwd.c (main): Proceed as unprivileged
- user when checking password of another user.
- * modules/pam_unix/unix_update.c: Fix comment.
-
-2008-02-18 Dmitry V. Levin <ldv@altlinux.org>
-
- * libpam/pam_handlers.c (_pam_assemble_line): Fix potential
- buffer overflow.
- * xtests/tst-pam_assemble_line1.pamd: New test for
- _pam_assemble_line.
- * xtests/tst-pam_assemble_line1.sh: New script for
- tst-pam_assemble_line1.
- * xtests/Makefile.am (NOSRCTESTS): Add tst-pam_assemble_line1.
- (EXTRA_DIST): Add tst-pam_assemble_line1.pamd and
- tst-pam_assemble_line1.sh
-
- * modules/pam_exec/pam_exec.c (call_exec): Fix asprintf return
- code check.
-
-2008-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.10.0
-
- * configure.in: set version number.
-
- * modules/pam_rhosts/Makefile.am: Remove pam_rhosts_auth.
- * modules/pam_rhosts/pam_rhosts_auth.c: Removed.
- * modules/pam_rhosts/tst-pam_rhosts_auth: Removed.
-
- * modules/pam_namespace/Makefile.am (noinst_HEADERS): Add
- pam_namespace.h.
-
-2008-02-13 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_namespace/Makefile.am: Add argv_parse files and namespace.d
- dir.
- * modules/pam_namespace/argv_parse.c: New file.
- * modules/pam_namespace/argv_parse.h: New file.
- * modules/pam_namespace/namespace.conf.5.xml: Document new features.
- * modules/pam_namespace/pam_namespace.8.xml: Likewise.
- * modules/pam_namespace/pam_namespace.h: Use SECURECONF_DIR define.
- Define NAMESPACE_D_DIR and NAMESPACE_D_GLOB. Define new option flags
- and polydir flags.
- (polydir_s): Add rdir, replace exclusive with flags, add init_script,
- owner, group, and mode.
- (instance_data): Add ruser, gid, and ruid.
- * modules/pam_namespace/pam_namespace.c: Remove now unused copy_ent().
- (add_polydir_entry): Add the entry directly, no copy.
- (del_polydir): New function.
- (del_polydir_list): Call del_polydir().
- (expand_variables, parse_create_params, parse_iscript_params,
- parse_method): New functions.
- (process_line): Call expand_variables() on polydir and instance prefix.
- Call argv_parse() instead of strtok_r(). Allocate struct polydir_s on heap.
- (parse_config_file): Parse .conf files from namespace.d dir after
- namespace.conf.
- (form_context): Call getcon() or get_default_context_with_level() when
- appropriate flags are set.
- (poly_name): Handle shared polydir flag.
- (inst_init): Execute non-default init script when specified.
- (create_polydir): New function.
- (create_dirs): Remove the code which checks the polydir. Do not call
- inst_init() when noinit flag is set.
- (ns_setup): Check the polydir and eventually create it if the create flag
- is set.
- (setup_namespace): Use ruser uid from idata. Set the namespace polydir
- pam data only when namespace was set up correctly. Unmount polydir
- based on ruser.
- (get_user_data): New function.
- (pam_sm_open_session): Check for use_current_context and
- use_default_context options. Call get_user_data().
- (pam_sm_close_session): Call get_user_data().
-
-2008-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/de.po: Translate some more strings.
-
-2008-02-05 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/unix_update.c: Remove unused declarations.
-
-2008-02-04 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_static_modules.h: Add _pam_sepermit_modstruct.
- * modules/pam_sepermit/pam_sepermit.c: Fix typo.
- * modules/pam_sepermit/Makefile.am: Install config file only
- if we build the module.
-
- * README: Add --disable-pie to configure options for static library.
-
- * doc/man/Makefile.am: Fix building outside of src directory.
-
- * libpam/Makefile.am: Bump version number of libpam.
-
- * modules/Makefile.am: Add pam_sepermit.
-
- * doc/Makefile.am: Fix build out of source directory.
-
- * po/POTFILES.in: Add pam_sepermit.c.
-
- * modules/pam_exec/pam_exec.c: Set PAM environment variables and
- add 'quiet' option.
- * modules/pam_exec/pam_exec.8.xml: Document new behavior.
- Patch from Julien Lecomte <julien@lecomte.at>.
-
-2008-02-01 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_namespace/namespace.conf.5.xml: Add documentation for
- tmpfs and tmpdir polyinst and for ~ user list modifier.
- * modules/pam_namespace/namespace.init: Add documentation for the
- new init parameter. Add home directory initialization script.
- * modules/pam_namespace/pam_namespace.8.xml: Document the new
- init parameter of the namespace.init script.
- * modules/pam_namespace/pam_namespace.c(copy_ent): Copy exclusive flag.
- (cleanup_data): New function.
- (process_line): Set exclusive flag. Add tmpfs and tmpdir methods.
- (ns_override): Change behavior on the exclusive flag.
- (poly_name): Process tmpfs and tmpdir methods.
- (inst_init): Add flag for new directory initialization.
- (create_dirs): Process the tmpdir method, add the new directory
- flag.
- (ns_setup): Remove unused code. Process the tmpfs method.
- (cleanup_tmpdirs): New function.
- (setup_namespace): Set data for proper cleanup. Cleanup the tmpdirs
- on failures.
- (pam_sm_close_session): Instead of parsing the config file again use
- the previously set data for cleanup.
- * modules/pam_namespace/pam_namespace.h: Add TMPFS and TMPDIR methods
- and exclusive flag.
-
-2008-01-29 Tomas Mraz <t8m@centrum.cz>
-
- * configure.in: Test for setkeycreatecon needs libselinux.
- Add new module pam_sepermit.
- * modules/Makefile.am: Add new module pam_sepermit.
- * modules/pam_sepermit/.cvsignore: New file.
- * modules/pam_sepermit/Makefile.am: Likewise.
- * modules/pam_sepermit/README.xml: Likewise.
- * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
- * modules/pam_sepermit/pam_sepermit.c: Likewise.
- * modules/pam_sepermit/sepermit.conf: Likewise.
- * modules/pam_sepermit/tst-pam_sepermit: Likewise.
- * doc/sag/pam_sepermit.xml: Likewise.
-
- * doc/sag/pam_tty_audit.xml: Add pam_tty_audit to SAG.
-
-2008-01-29 Miloslav Trmac <mitr@redhat.com>
-
- * modules/pam_tty_audit/README.xml: Add notes section.
- * modules/pam_tty_audit/pam_tty_audit.8.xml: Describe patterns
- support and open_only option. Add notes.
- * modules/pam_tty_audit/pam_tty_audit.c(pam_sm_open_session): Add
- support for pattern matching and the open_only option.
-
-2008-01-28 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_audit.c: Include pam_modutil_private.h.
-
- * libpam/pam_item.c (pam_set_item): Fix compiler warning.
-
- * libpam/pam_end.c (pam_end): Cast to correct pointer type.
- * libpam/include/security/_pam_macros.h (_pam_overwrite_n): Use
- unsigned int.
-
- * modules/pam_unix/passverify.c: Fix compiling without SELinux
- support.
-
-2008-01-24 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/bigcrypt.c (bigcrypt): Use crypt_r() when
- available.
- * modules/pam_unix/passverify.c (strip_hpux_aging): New function
- to strip HP/UX aging info from password hash.
- (verify_pwd_hash): Call strip_hpux_aging(), use crypt_r() when
- available.
-
-2008-01-23 Tomas Mraz <t8m@centrum.cz>
-
- * configure.in: Add test for crypt_r(). Add setting/disabling random
- device support.
-
- * modules/pam_unix/Makefile.am: Add unix_update.8 manpage generated from
- XML, generate also unix_chkpwd.8 from XML.
- * modules/pam_unix/pam_unix_acct.c: Add rounds parameter to _set_ctrl().
- * modules/pam_unix/pam_unix_auth.c: Likewise.
- * modules/pam_unix/pam_unix_sess.c: Likewise.
- * modules/pam_unix/pam_unix_passwd.c: Likewise.
- * modules/pam_unix/support.c(_set_ctrl): Likewise.
- * modules/pam_unix/support.h: Likewise. Add UNIX_SHA256_PASS,
- UNIX_SHA512_PASS, and UNIX_ALGO_ROUNDS ctrls.
- (pam_sm_chauthtok): Refactor out new password encryption.
- * modules/pam_unix/passverify.c(crypt_make_salt): New function.
- (crypt_md5_wrapper): Call crypt_make_salt().
- (create_password_hash): New function refactored out of
- pam_sm_chauthtok(). Support for new password hashes.
- * modules/pam_unix/passverify.h: Drop ascii_to_bin() and bin_to_ascii()
- macros. Add prototype for create_password_hash().
- * modules/pam_unix/unix_update.8.xml: New file.
- * modules/pam_unix/unix_chkpwd.8.xml: Likewise.
-
- * modules/pam_unix/Makefile.am: Add unix_update helper.
- * modules/pam_unix/pam_unix_passwd.c: Move functions i64c(),
- crypt_md5_wrapper(), save_old_password(), _update_passwd() and
- _update_shadow() to passverify.c file. Rename _unix_run_shadow_binary()
- to _unix_run_update_binary(), which also verifies old password and
- does all writing.
- (_do_setpass, pam_sm_chauthtok): lckpwdf()->lock_pwdf(), the same for unlock.
- Call _unix_run_update_binary() appropriately.
- _update_passwd()->unix_update_passwd(), the same for shadow.
- * modules/pam_unix/passverify.c: Add new functions moved from
- pam_unix_passwd.c and unix_chkpwd.c.
- * modules/pam_unix/passverify.h: Likewise.
- * modules/pam_unix/unix_chkpwd.c: Remove SELinux checks. Move
- su_sighandler(), setup_signals(), getuidname() to passverify.c.
- (main): Remove 'shadow' option. Refactor out read_passwords() and
- call it. More strict checking how the binary is called.
- * modules/pam_unix/unix_update.c: New helper binary - non-setuid,
- called from SELinux confined apps only.
-
- * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Return
- status and daysleft instead of fake shadow entry.
- (pam_sm_acct_mgmt): Call _unix_run_verify_binary() appropriately.
- * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Call
- get_account_info() and check_shadow_expiry().
- * modules/pam_unix/support.h: Adjust _unix_run_verify_binary()
- prototype.
- * modules/pam_unix/support.c (_unix_run_helper_binary): Remove check
- on selinux enabled/disabled.
- * modules/pam_unix/unix_chkpwd.c (_verify_account): Rename to
- _check_expiry(), now checks shadow expiry info.
- (main): Remove check on selinux enabled/disabled. Check shadow
- expiry through _check_expiry().
-
- * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Call
- get_account_info() and check_shadow_expiry().
- * modules/pam_unix/passverify.c: Add get_account_info() to
- obtain shadow and passwd entry. Add check_shadow_expiry() to
- for shadow password expiry check.
- (get_pwd_hash): Call get_account_info().
- * modules/pam_unix/passverify.h: Add prototypes for get_account_info()
- and check_shadow_expiry().
-
-2008-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/Makefile.am: Fix manual page dependencies,
- add hack for bug in xsl stylestheets.
-
-2008-01-07 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/it.po: Fix typos.
- * po/de.po: Few new translations.
- * po/POTFILES.in: Add pam_tty_audit.c and passverify.c.
- * doc/man/pam_xauth_data.3.xml: Added to CVS.
- * doc/man/pam_xauth_data.3: Likewise.
- * modules/pam_tty_audit/README: Likewise.
- * modules/pam_tty_audit/pam_tty_audit.8: Likewise.
- * po/sv.po: Update swedish translation [#1857531].
- * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix
- cut & paste error [#1863490].
-
-2008-01-02 Petteri Räty <betelgeuse@gentoo.org>
- * modules/pam_limits/limits.conf: document allowed values for
- nice.
- * modules/pam_limits/limits.conf.5.xml: Likewise.
-
-2007-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * README: Document how to run make check with static modules
- (SF#1822779).
-
-2007-12-18 Peter Breitenlohner <peb@mppmu.mpg.de>
- * README: Document that "make check" requires a file
- /etc/pam.d/other (SF#1822764).
-
-2007-12-12 Eamon Walsh <ewalsh@tycho.nsa.gov>
-
- * doc/man/pam_item_types_ext.inc.xml: More appropriate wording
- for PAM_XDISPLAY doc.
-
-2007-12-07 Tomas Mraz <t8m@centrum.cz>
-
- * po/cs.po: Updated translations.
-
- * libpam/libpam.map: Add LIBPAM_MODUTIL_1.1 version.
- * libpam/pam_audit.c: Add _pam_audit_open() and
- pam_modutil_audit_write().
- (_pam_auditlog): Call _pam_audit_open().
- * libpam/include/security/pam_modutil.h: Add pam_modutil_audit_write().
- * modules/pam_access/pam_access.8.xml: Add noaudit option.
- Document auditing.
- * modules/pam_access/pam_access.c: Move fs, sep, pam_access_debug, and
- only_new_group_syntax variables to struct login_info. Add noaudit
- member.
- (_parse_args): Adjust for the move of variables and add support for
- noaudit option.
- (group_match): Add debug parameter.
- (string_match): Likewise.
- (network_netmask_match): Likewise.
- (login_access): Adjust for the move of variables. Add nonall_match.
- Add call to pam_modutil_audit_write().
- (list_match): Adjust for the move of variables.
- (user_match): Likewise.
- (from_match): Likewise.
- (pam_sm_authenticate): Call _parse_args() earlier.
- * modules/pam_limits/pam_limits.8.xml: Add noaudit option.
- Document auditing.
- * modules/pam_limits/pam_limits.c (_pam_parse): Add noaudit option.
- (setup_limits): Call pam_modutil_audit_write().
- * modules/pam_time/pam_time.8.xml: Add debug and noaudit options.
- Document auditing.
- * modules/pam_time/pam_time.c: Add option parsing (_pam_parse()).
- (check_account): Call _pam_parse(). Call pam_modutil_audit_write()
- and pam_syslog() on login denials.
-
-2007-12-07 Luca Bruno <luca.br@uno.it>
-
- * po/it.po: Updated translations.
-
-2007-12-06 Eamon Walsh <ewalsh@tycho.nsa.gov>
-
- * libpam/include/security/_pam_macros.h: Add _pam_overwrite_n()
- macro.
- * libpam/include/security/_pam_types.h: Add PAM_XDISPLAY,
- PAM_XAUTHDATA items, pam_xauth_data struct.
- * libpam/pam_item.c (pam_set_item, pam_get_item): Handle
- PAM_XDISPLAY and PAM_XAUTHDATA items.
- * libpam/pam_end.c (pam_end): Destroy the new items.
- * libpam/pam_private.h (pam_handle): Add data members for new
- items. Add prototype for _pam_memdup.
- * libpam/pam_misc.c: Add _pam_memdup.
- * doc/man/Makefile.am: Add pam_xauth_data.3. Replace
- pam_item_types.inc.xml with pam_item_types_std.inc.xml and
- pam_item_types_ext.inc.xml.
- * doc/man/pam_get_item.3.xml: Replace pam_item_types.inc.xml
- with pam_item_types_std.inc.xml and pam_item_types_ext.inc.xml.
- * doc/man/pam_set_item.3.xml: Likewise.
- * doc/man/pam_item_types.inc.xml: Removed file.
- * doc/man/pam_item_types_ext.inc.xml: New file.
- * doc/man/pam_item_types_std.inc.xml: New file.
-
-2007-12-06 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_tty_audit/pam_tty_audit.8.xml: Fix example.
-
-2007-12-05 Miloslav Trmac <mitr@redhat.com>
-
- * configure.in: Add test for audit_tty_status struct. Add
- pam_tty_audit module.
- * libpam/pam_static_modules.h: Add pam_tty_audit module.
- * modules/pam_tty_audit/Makefile.am: New file.
- * modules/pam_tty_audit/README.xml: Likewise.
- * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
- * modules/pam_tty_audit/pam_tty_audit.c: Likewise.
-
-2007-12-05 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/Makefile.am: Add passverify.h and passverify.c
- as first part of pam_unix refactorization.
- * modules/pam_unix/pam_unix/pam_unix_acct.c: Include passverify.h.
- * modules/pam_unix/pam_unix_passwd.c: Likewise.
- * modules/pam_unix/passverify.c: New file with common functions.
- * modules/pam_unix/passverify.h: Prototypes for the common functions.
- * modules/pam_unix/support.c: Include passverify.h, move
- _unix_shadowed() to passverify.c.
- (_unix_verify_password): Refactor out verify_pwd_hash() function.
- * modules/pam_unix/support.h: Move _unix_shadowed() prototype to
- passverify.h
- * modules/pam_unix/unix_chkpwd.c: Use _unix_shadowed() and
- verify_pwd_hash() from passverify.c.
-
-2007-11-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/Makefile.am (unix_chkpwd_LDADD): Don't link
- unix_chkpwd unnecessary against libpam (#1822779).
-
- * modules/pam_tally/pam_tally.c (tally_log): Map
- pam_modutil_getpwnam to getpwnam if we don't compile
- as module.
- * modules/pam_tally/Makefile.am: Don't link pam_tally_app
- against libpam (#1822779).
-
-2007-11-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/tst-pam_group1.c: Include stdlib.h
- * xtests/tst-pam_succeed_if1.c: Likewise.
- * xtests/tst-pam_limits1.c: Likewise.
- * xtests/tst-pam_access1.c: Likewise.
- * xtests/tst-pam_access2.c: Likewise.
- * xtests/tst-pam_access3.c: Likewise.
- * xtests/tst-pam_access4.c: Likewise.
- * xtests/tst-pam_unix1.c: Likewise.
- * xtests/tst-pam_unix2.c: Likewise.
- * xtests/tst-pam_unix3.c: Likewise.
- * xtests/tst-pam_cracklib1.c: Likewise.
- * xtests/tst-pam_cracklib2.c: Likewise.
-
- * libpam/pam_static_modules.h: Fix name of pam_namespace variable.
-
-2007-11-01 Peter Breitenlohner <peb@mppmu.mpg.de>
-
- * doc/man/pam_conv.3.xml: Correct typo.
-
-2007-10-30 Peter Breitenlohner <peb@mppmu.mpg.de>
-
- * modules/pam_rhosts/pam_rhosts_auth.c (__icheckhost): Correct
- misplaced parenthesis.
- * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Prevent use of
- dngettext() when NLS is disabled.
- * modules/pam_exec/pam_exec.c (call_exec): Avoid gcc warning.
- * doc/specs/parse_y.y (set_label, new_counter): Break trigraphs to
- avoid gcc warning.
- * modules/pam_wheel/pam_wheel.c: Remove excessive initializer
- elements.
-
- * modules/pam_cracklib/pam_cracklib.8.xml: Correct typo.
- * modules/pam_limits/limits.conf.5.xml: Likewise.
- * modules/pam_listfile/pam_listfile.8.xml: Likewise.
- * modules/pam_xauth/pam_xauth.8.xml: Likewise.
-
- * modules/pam_deny/pam_deny.8.xml: Correct spelling.
- * modules/pam_group/pam_group.8.xml: Likewise.
- * modules/pam_permit/pam_permit.8.xml: Likewise.
- * modules/pam_shells/pam_shells.8.xml: Likewise.
- * modules/pam_time/pam_time.8.xml: Likewise.
- * modules/pam_warn/pam_warn.8.xml: Likewise.
-
- * tests/tst-dlopen.c: Return 77 in case of static modules, such that
- all modules/pam_*/tst-pam_* tests yield SKIP instead of FAIL.
- * libpam/Makefile.am (libpam_la_LIBADD): Use "$(shell ls ...)" instead
- of "`ls ...`", to allow for static modules.
- * libpam/pam_static_modules.h: Make pam_keyinit module depend on
- HAVE_KEY_MANAGEMENT; correct name of pam_faildelay pam_module struct.
- * modules/pam_faildelay/pam_faildelay.c: Correct name of pam_module
- struct.
-
-2007-10-25 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_tally/pam_tally.c: fix the definition of OPT_AUDIT
- to be octal instead of decimal, so that it works properly in a
- bit field instead of forcing the "even_deny_root_account" and
- "no_reset" options to on.
- Patch from Corey Wright <undefined@pobox.com>.
-
-2007-10-19 Tomas Mraz <t8m@centrum.cz>
-
- * xtests/tst-pam_access1.c: Use different name for user and group.
- * xtests/tst-pam_access1.sh: Likewise.
- * xtests/tst-pam_access2.c: Likewise.
- * xtests/tst-pam_access2.sh: Likewise.
- * xtests/tst-pam_access4.c: Likewise.
- * xtests/tst-pam_access4.sh: Likewise.
- * xtests/group.conf: Likewise.
- * xtests/tst-pam_group1.c: Likewise.
- * xtests/tst-pam_group1.sh: Likewise.
-
- * libpam/pam_dispatch.c (_pam_dispatch_aux): Save states for substacks,
- record substack level, skip over virtual substack modules, implement
- evaluation of done, die, reset and jumps in substacks. Also fixes
- too far jumps in substacks.
- * libpam/pam_end.c (pam_end): Drop substack evaluation states.
- * libpam/pam_handlers.c (_pam_parse_conf_file): Add substack level
- parameter, instead of must_fail use handler_type needed for virtual
- substack modules.
- (_pam_load_conf_file): Add substack level parameter.
- (_pam_init_handlers): Substack level parameter added to
- _pam_parse_conf_file() calls.
- (_pam_load_module): New function.
- (_pam_add_handler): Refactor code into the _pam_load_module(). Add
- support for virtual substack modules.
- * libpam/pam_private.h: Rename must_fail to handler_type, add stack_level
- to struct handler. Define handler type constants. Add struct
- for substack evaluation states. Define constant for maximum
- substack level. Add substack states pointer to former state struct.
- * libpam/pam_start.c (pam_start): Initialize pointer to substack states.
- * doc/man/pam.conf-syntax.xml: Document substack control.
- * xtests/Makefile.am: Add new tests for substack evaluation.
- * xtests/run_xtests.sh: Support multiple .pamd files in a test.
- * xtests/tst-pam_authfail.pamd: New tests for substack evaluation.
- * xtests/tst-pam_authsucceed.pamd: Likewise.
- * xtests/tst-pam_substack1.pamd: Likewise.
- * xtests/tst-pam_substack1a.pamd: Likewise.
- * xtests/tst-pam_substack1.sh: Likewise.
- * xtests/tst-pam_substack2.pamd: Likewise.
- * xtests/tst-pam_substack2a.pamd: Likewise.
- * xtests/tst-pam_substack2.sh: Likewise.
- * xtests/tst-pam_substack3.pamd: Likewise.
- * xtests/tst-pam_substack3a.pamd: Likewise.
- * xtests/tst-pam_substack3.sh: Likewise.
- * xtests/tst-pam_substack4.pamd: Likewise.
- * xtests/tst-pam_substack4a.pamd: Likewise.
- * xtests/tst-pam_substack4.sh: Likewise.
- * xtests/tst-pam_substack5.pamd: Likewise.
- * xtests/tst-pam_substack5a.pamd: Likewise.
- * xtests/tst-pam_substack5.sh: Likewise.
-
-2007-10-18 Tomas Mraz <t8m@centrum.cz>
-
- * xtests/tst-pam_dispatch4.c: Fix comment about the test.
- * xtests/tst-pam_dispatch4.pamd: Improve the testcase.
- * xtests/tst-pam_cracklib2.c: Make the testcase more robust.
-
-2007-10-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/Makefile.am: Add tst-pam_dispatch5 sources
- * xtests/tst-pam_dispatch5.c: New test for jump too far.
- * xtests/tst-pam_dispatch5.pamd: New test configuration.
-
-2007-10-09 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_tally/pam_tally.8.xml: Document audit option
- correctly.
-
-2007-10-09 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.9.0
-
- * configure.in: Increase vesion number.
-
- * libpam/Makefile.am: Increase release number.
- * libpam_misc/Makefile.am: Increase release number.
-
- * po/*.po: Regenerate.
-
-2007-10-08 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_time/pam_time.c (is_same): Length of strings without
- wildcard needs to be the same.
- * modules/pam_group/pam_group.c (is_same): Likewise.
-
-2007-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/tst-pam_group1.c: New test case for user compare in pam_group.
- * xtests/tst-pam_group1.sh: Script to run test case.
- * xtests/tst-pam_group1.pamd: Config for test case.
- * xtests/Makefile.am: Add tst-pam_group1 test case.
- * xtests/run-xtests.sh: Save/restore group.conf.
- * xtests/group.conf: New.
-
- * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Don't
- free arguments used for putenv().
-
- * doc/man/pam_putenv.3.xml: Document that application has to free
- the memory.
-
-2007-09-27 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist): Fix in
- operator rhbz #295151.
- * modules/pam_namespace/pam_namespace.c (poly_name): Do not try to
- get context when SELinux is disabled.
-
-2007-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/tst-pam_succeed_if1.c: New test case for
- https://bugzilla.redhat.com/show_bug.cgi?id=295151
- * xtests/tst-pam_succeed_if1.sh: Script to run test case.
- * xtests/tst-pam_succeed_if1.pamd: Config for test case.
- * xtests/Makefile.am: Add tst-pam_succeed_if1 test case.
-
- * xtests/run-xtests.sh: Add support to skip tests.
- * xtests/tst-pam_limits1.c: Skip test if RLIMIT_NICE is not
- defined.
-
-2007-09-03 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_limits/pam_limits.c: remove a number of unnecessary
- string manipulations, including a strncpy() that was acting on
- overlapping memory.
-
- * libpam_misc/misc_conv.c: don't block SIGINT in misc_conv; it's
- perfectly valid to allow the user to interrupt at a prompt. If
- an application wants prompts to not be interruptable, the
- application should take responsibility for blocking SIGINT.
-
-2007-09-02 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * examples/Makefile.am: Fix usage of LIBADD, LDADD and LDFLAGS.
- * libpam/Makefile.am: Likewise.
- * modules/pam_access/Makefile.am: Likewise.
- * modules/pam_cracklib/Makefile.am: Likewise.
- * modules/pam_debug/Makefile.am: Likewise.
- * modules/pam_deny/Makefile.am: Likewise.
- * modules/pam_echo/Makefile.am: Likewise.
- * modules/pam_env/Makefile.am: Likewise.
- * modules/pam_exec/Makefile.am: Likewise.
- * modules/pam_faildelay/Makefile.am: Likewise.
- * modules/pam_filter/Makefile.am: Likewise.
- * modules/pam_filter/upperLOWER/Makefile.am: Likewise.
- * modules/pam_ftp/Makefile.am: Likewise.
- * modules/pam_group/Makefile.am: Likewise.
- * modules/pam_issue/Makefile.am: Likewise.
- * modules/pam_keyinit/Makefile.am: Likewise.
- * modules/pam_lastlog/Makefile.am: Likewise.
- * modules/pam_limits/Makefile.am: Likewise.
- * modules/pam_listfile/Makefile.am: Likewise.
- * modules/pam_localuser/Makefile.am: Likewise.
- * modules/pam_loginuid/Makefile.am: Likewise.
- * modules/pam_mail/Makefile.am: Likewise.
- * modules/pam_mkhomedir/Makefile.am: Likewise.
- * modules/pam_motd/Makefile.am: Likewise.
- * modules/pam_namespace/Makefile.am: Likewise.
- * modules/pam_nologin/Makefile.am: Likewise.
- * modules/pam_permit/Makefile.am: Likewise.
- * modules/pam_rhosts/Makefile.am: Likewise.
- * modules/pam_rootok/Makefile.am: Likewise.
- * modules/pam_securetty/Makefile.am: Likewise.
- * modules/pam_selinux/Makefile.am: Likewise.
- * modules/pam_shells/Makefile.am: Likewise.
- * modules/pam_stress/Makefile.am: Likewise.
- * modules/pam_succeed_if/Makefile.am: Likewise.
- * modules/pam_tally/Makefile.am: Likewise.
- * modules/pam_time/Makefile.am: Likewise.
- * modules/pam_umask/Makefile.am: Likewise.
- * modules/pam_unix/Makefile.am: Likewise.
- * tests/Makefile.am: Likewise.
-
-2007-08-31 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_group/group.conf: don't use "games" as an example
- group, on some distros this is a pre-existing group that it would
- be a security hole to give users access to.
-
-2007-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_limits/limits.conf.5.xml: Document that maxlogins
- is ignored for users with UID 0.
-
-2007-08-30 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_unix/support.c, modules/pam_unix/unix_chkpwd.c:
- A wrong username doesn't need to be logged at LOG_ALERT;
- LOG_WARNING should be sufficient.
- Patch from Sam Hartman <hartmans@debian.org>.
-
- * modules/pam_cracklib/pam_cracklib.c:
- s/CRACKLIB_DICT/CRACKLIB_DICTS/, for consistency with existing
- #define in pam_unix
-
-2007-08-29 Steve Langasek <vorlon@debian.org>
-
- * libpam/pam_modutil_getgrgid.c, libpam/pam_modutil_getgrnam.c,
- libpam/pam_modutil_getpwnam.c, libpam/pam_modutil_getpwuid.c,
- libpam/pam_modutil_getspnam.c: don't use pthread mutexes in libpam
- unnecessarily; this avoids linking problems on non-Linux
- platforms.
-
- * modules/pam_listfile/pam_listfile.c, modules/pam_listfile/README,
- modules/pam_listfile/pam_listfile.8,
- modules/pam_listfile/pam_listfile.8.xml: add a 'quiet' option to
- avoid logging errors any time a user is refused service by this
- module.
-
-2007-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_rhosts/pam_rhosts_auth.c: buflen needs to be size_t.
- (__icheckhost): Cast to int32_t to fix limited range error.
-
- * modules/pam_cracklib/pam_cracklib.c: Mark cracklib_dictpath
- as const.
-
-2007-08-29 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_rhosts/pam_rhosts_auth.c: getline returns -1 at
- EOF, not 0. Check accordingly to fix an infinite loop. Thanks
- to Stephan Springl <springl-rhosts@bfw-online.de> for catching
- this.
-
-2007-08-28 Steve Langasek <vorlon@debian.org>
-
- * configure.in: call AC_CHECK_HEADERS instead of AC_CHECK_HEADER
- for crack.h, so we get a HAVE_CRACK_H define.
- * modules/pam_cracklib/pam_cracklib.c: don't copy around the
- cracklib dictpath into a fixed-width buffer, when we can just
- point at the existing strings; and allow users to override the
- default cracklib path with -DCRACKLIB_DICT, required for
- compatibility with cracklib 2.7.
-
-2007-08-27 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_limits/pam_limits.c: when building on non-Linux
- systems, give a warning only, not an error; no one seems to
- remember why this error was here in the first place, but leave
- something in that might still grab the attention of non-Linux
- users.
- Patch from Michal Suchanek <hramrach_l@centrum.cz>.
- * configure.in, modules/pam_rhosts/pam_rhosts_auth.c: check for
- the presence of net/if.h before using, required for Hurd
- compatibility.
- Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
- * modules/pam_limits/pam_limits.c: conditionalize the use of
- RLIMIT_AS, which is not present on the Hurd.
- Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
- * modules/pam_rhosts/pam_rhosts_auth.c: use getline() instead of
- a static buffer when available; fixes the build on systems
- without MAXHOSTNAMELEN (i.e., the Hurd).
- * modules/pam_xauth/pam_xauth.c: make sure PATH_MAX is defined
- before using it.
-
-2007-08-26 Andrew Morgan <morgan@kernel.org>
-
- * doc/man/pam.conf-syntax.xml
- Minor fixes: '\[' -> '\]'.
-
-2007-08-25 Steve Langasek <vorlon@debian.org>
-
- * doc/man/pam.conf-syntax.xml, doc/man/pam.conf.5:
- Document "new" control options conv_again and incomplete, supported
- in pam.d's extended syntax.
- Patch from Ben Collins <bcollins@debian.org>.
-
-2007-08-15 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.c (list_match): Add explicit
- sptr argument for strtok_r, otherwise the code is not portable.
-
-2007-08-13 Olivier Blin <blino@mandriva.com>
-
- * doc/man/pam.3.xml: Fix typo.
- * doc/man/pam.3: Likewise.
- * doc/man/pam_end.3.xml: Likewise.
- * doc/man/pam_end.3: Likewise.
-
-2007-07-18 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.8.1
-
- * libpam/pam_audit.c: Include unistd.h for getuid().
- * libpam/Makefile.am: Bump version number.
-
-2007-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_audit.c (_pam_audit_writelog): Don't return
- error if application runs as normal user. Fixes regression
- introduced with last change.
-
-2007-07-10 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Add --with-db-uniquename option to support
- db libraries and functions with unique name extension.
- Patch from Diego 'Flameeyes' Pettenò <flameeyes@gmail.com>.
-
- * modules/pam_limits/pam_limits.c: Include locale.h.
-
-2007-07-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.8.0
-
- * configure.in: Check for audit_log_acct_message instead of
- audit_log_user_message.
- * libpam/pam_audit.c: Use audit_log_acct_message.
- Based on patch from Mark J Cox <mjc@redhat.com>.
- * libpam/Makefile.am: Bump version number of libpam.
-
- * modules/pam_umask/pam_umask.c (set_umask): mode_t is 32bit,
- not 64bit.
-
- * xtests/tst-pam_limits1.c: Fix printf arguments.
-
- * po/*.po: Merge po files with latest code changes.
-
-2007-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_limits/pam_limits.c (process_limit): Check upper and
- lower limit of nice value, fix off-by-one in conversation to rlim_t.
- * xtests/Makefile.am: Add new pam_limits test case.
- * xtests/limits.conf: New, config file for test case.
- * xtests/pam_limits1.c: New, test case for RLIMIT_NICE.
- * xtests/pam_limits1.sh: Likewise.
- * xtests/pam_limits1.pamd: Likewise.
-
-2007-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r
- result for recursive calls.
- * xtests/Makefile.am: Add new pam_access test cases.
- * xtests/pam_access1.c: New test case.
- * xtests/pam_access2.c: Likewise.
- * xtests/pam_access3.c: Likewise.
- * xtests/pam_access4.c: Likewise.
- * xtests/pam_access1.sh: Wrapper to create user accounts.
- * xtests/pam_access2.sh: Likewise.
- * xtests/pam_access3.sh: Likewise.
- * xtests/pam_access4.sh: Likewise.
- * xtests/pam_access1.pamd: PAM config file for pam_access tests.
- * xtests/pam_access2.pamd: Likewise.
- * xtests/pam_access3.pamd: Likewise.
- * xtests/pam_access4.pamd: Likewise.
- * xtests/access.conf: Config file for pam_access tests.
- * xtests/run-tests.sh: Install access.conf into system.
-
-2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print
- better error message if /proc/self/loginuid cannot be opened.
-
- * modules/pam_limits/pam_limits.c (process_limit): Check for
- variable overflow after multiplication [bnc#283001].
-
- * modules/pam_access/pam_access.c: Add new syntax for groups
- in access.conf to differentiate group names from account names.
- Based on patch from Julien Lecomte <julien@famille-lecomte.net>,
- solves feature request [#411390].
- * modules/pam_access/access.conf: Add example for new group
- syntax.
- * modules/pam_access/access.conf.5.xml: Document new syntax.
-
-2007-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_cracklib/pam_cracklib.8.xml: Document new minclass
- option.
- * modules/pam_cracklib/pam_cracklib.c: Add support for minimum
- character classes [#1688777]. Based on patch from Keith Schincke.
-
- * xtests/tst-pam_cracklib2.c: New, test case for minclass option.
- * xtests/tst-pam_cracklib2.pamd: New, PAM config file for test case.
- * xtests/Makefile.am: Add new testcase.
-
- * xtests/pam_cracklib.c: Fix comment what this application tests.
-
- * configure.in: Use /lib64 on x86-64, ppc64, s390x, sparc64
-
-2007-06-15 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_selinux/pam_selinux.8.xml: Remove multiple option,
- add select_context and use_current_range options.
- * modules/pam_selinux/pam_selinux.c (send_audit_message): Added
- function for auditing role/level changes.
- (query_response): Add default response.
- (select_context): Removed.
- (manual_context): Query only role and level.
- (mls_range_allowed): Added function for range check.
- (config_context): Added function for role and level override.
- (pam_sm_open_session): Remove multiple option, add select_context
- and use_current_range_options. Use getseuserbyname to obtain
- SELinux user and level. Audit role/level changes. Call setkeycreatecon
- to assign key creation context. Don't fail on errors when SELinux
- is not in enforcing mode.
- * configure.in: Check for setkeycreatecon().
-
- * modules/pam_namespace/README.xml: Avoid duplication of
- documentation.
- * modules/pam_namespace/namespace.conf: More real life example
- from MLS support.
- * modules/pam_namespace/namespace.conf.5.xml: Likewise plus
- properly describe how instance directory names are formed.
- * modules/pam_namespace/namespace.init: Preserve euid when
- called from setuid apps (su, newrole).
- * modules/pam_namespace/pam_namespace.8.xml: Added option
- no_unmount_on_close.
- * modules/pam_namespace/pam_namespace.c (process_line): Polyinst
- methods are now user, level and context. Fix crash on unknown
- override user in config file.
- (ns_override): Add explicit uid parameter.
- (form_context): Skip for user method. Implement level based
- polyinstantiation.
- (poly_name): Initialize contexts. Add level based polyinst,
- remove 'both' metod. Use raw contexts for instance names,
- truncate long instance names and add hash.
- (ns_setup): Hashing moved to poly_name().
- (setup_namespace): Handle correctly override users for
- su (when unmnt_remnt is used).
- (pam_sm_close_session): Added no_unmount_on_close option.
- * modules/pam_namespace/pam_namespace.h: Added
- no_unmount_on_close_option, level method, limit on instance
- directory name length.
-
-2007-05-04 Thorsten Kukuk <kukuk@suse.de>
-
- * xtests/run-xtests.sh: Use SRCDIR to find PAM config files.
- * xtests/Makefile.am: Call run-xtests.sh with srcdir as first
- argument.
- Based on patch by Bernard Leak <thisisnotapipe@hotmail.com>.
-
-2007-04-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_limits/limits.conf: Address space limit is KB.
- * modules/pam_limits/limits.conf.5.xml: Likewise.
- Reported by Thomas Vander Stichele <thomas@apestaart.org>.
-
- * modules/pam_mail/pam_mail.c (_do_mail): Remove duplicate
- check for PAM_SILENT and don't bail out if it is set [#1706247].
-
-2007-03-29 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.c (login_access, list_match):
- Replace strtok with strtok_r.
- * modules/pam_cracklib/pam_cracklib.c (check_old_password):
- Likewise.
- * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate):
+ * modules/pam_tally2/pam_tally2.c: Rename _pam_tally_modstruct to
+ _pam_tally2_modstruct.
+
+2012-01-26 Dmitry V. Levin <ldv@altlinux.org>
+
+ Fix SUBDIRS for --enable-static-modules mode.
+ There is no way to build "modules" subdirectory before "libpam" anyway.
+ In STATIC_MODULES mode, "libpam" subdirectory must be built twice to
+ produce a usable libpam.a without undefined references to multiple
+ _pam_*_modstruct symbols.
+
+ * Makefile.am: Use default SUBDIRS in STATIC_MODULES mode.
+
+2012-01-26 Matveychikov Ilya <i.matveychikov@securitycode.ru>
+
+ configure: fix typo in --disable-nis help string.
+ * configure.in: Change '-disable-nis' to '--disable-nis'.
+
+2012-01-26 Tomas Mraz <tmraz@fedoraproject.org>
+
+ Do not unmount anything by default in pam_namespace close session call.
+ * modules/pam_namespace/pam_namespace.c (pam_sm_close_session): Recognize
+ the unmount_on_close option and make the default to be to not unmount.
+ * modules/pam_namespace/pam_namespace.h: Rename PAMNS_NO_UNMOUNT_ON_CLOSE to
+ PAMNS_UNMOUNT_ON_CLOSE.
+ * modules/pam_namespace/pam_namespace.8.xml: Document the change.
+
+2012-01-24 Tomas Mraz <tmraz@fedoraproject.org>
+
+ Make / mount as rslave instead of bind mounting polydirs.
+ * modules/pam_namespace/pam_namespace.c (protect_dir): Drop the always argument.
+ (check_inst_parent): Drop the always argument from protect_dir().
+ (create_polydir): Likewise.
+ (ns_setup): Likewise and do not mark the polydir with MS_PRIVATE.
+ (setup_namespace): Mark the / with MS_SLAVE|MS_REC.
+ * modules/pam_namespace/pam_namespace.8.xml: Reflect the change in docs.
+
+2012-01-13 Tomas Mraz <tmraz@fedoraproject.org>
+
+ Add possibility to match ruser, rhost, and tty in pam_succeed_if.
+ * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Match ruser,
+ rhost, and tty as left operand.
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the new
+ possible left operands.
+
+2012-01-03 Tomas Mraz <tmraz@fedoraproject.org>
+
+ Merge branch 'master' of ssh://git.fedorahosted.org/git/linux-pam.
+
+ Fix matching of usernames in the pam_unix remember feature.
+ * modules/pam_unix/pam_unix_passwd.c (check_old_password): Make
+ sure we match only the whole username in opasswd entry.
+ * modules/pam_unix/passverify.c (save_old_password): Likewise make
+ sure we match only the whole username in opasswd entry.
+
+2011-12-26 Dmitry V. Levin <ldv@altlinux.org>
+
+ pam_start: fix memory leak on error path.
+ * libpam/pam_start.c (pam_start): If _pam_make_env() or
+ _pam_init_handlers() returned an error, release the memory allocated
+ for pam_conv structure.
+
+ Patch-by: cancel <suntsu@yandex.ru>.
+
+2011-11-03 Dmitry V. Levin <ldv@altlinux.org>
+
+ pam_selinux.8.xml: update.
+ * modules/pam_selinux/pam_selinux.8.xml (pam_selinux-cmdsynopsis):
+ Reorder options, add new "restore" option.
+ pam_selinux-description): Rewrite.
+ (pam_selinux-options): Reorder options, describe new "restore" option.
+ (pam_selinux-return_values): Remove PAM_AUTH_ERR, PAM_SESSION_ERR
+ and PAM_BUF_ERR.
+ (pam_selinux-see_also): Remove pam.conf(5). Add execve(2), tty(4)
+ and selinux(8).
+
+ pam_selinux.c: add "restore" option.
+ * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Add new
+ "restore" option.
+
+ pam_selinux.c: rewrite using pam_get_data/pam_set_data.
+ * modules/pam_selinux/pam_selinux.c (security_restorelabel_tty,
+ security_label_tty): Remove old functions.
+ (module_data_t): New structure.
+ (free_module_data, cleanup, get_module_data, get_item,
+ set_exec_context, set_file_context, compute_exec_context,
+ compute_tty_context, restore_context, set_context,
+ create_context): New functions.
+ (pam_sm_authenticate, pam_sm_setcred, pam_sm_open_session,
+ pam_sm_close_session): Use them.
+
+2011-10-28 Dmitry V. Levin <ldv@altlinux.org>
+
+ Use libpam.la/libpam_misc.la to link with -lpam/-lpam_misc.
+ GNU automake documentation recommends to avoid using -l options in
+ LDADD or LIBADD when referring to libraries built by the package.
+ Instead, it recommends to write the file name of the library explicitly,
+ and use -l option only to list third-party libraries. As result, the
+ default value of *_DEPENDENCIES will list all local libraries and omit
+ the other ones.
+ * modules/pam_access/Makefile.am (pam_access_la_LIBADD): Replace
+ "-L$(top_builddir)/libpam -lpam" with
+ "$(top_builddir)/libpam/libpam.la", to follow GNU automake
+ recommendations.
+ * modules/pam_cracklib/Makefile.am (pam_cracklib_la_LIBADD): Likewise.
+ * modules/pam_debug/Makefile.am (pam_debug_la_LIBADD): Likewise.
+ * modules/pam_deny/Makefile.am (pam_deny_la_LIBADD): Likewise.
+ * modules/pam_echo/Makefile.am (pam_echo_la_LIBADD): Likewise.
+ * modules/pam_env/Makefile.am (pam_env_la_LIBADD): Likewise.
+ * modules/pam_exec/Makefile.am (pam_exec_la_LIBADD): Likewise.
+ * modules/pam_faildelay/Makefile.am (pam_faildelay_la_LIBADD): Likewise.
+ * modules/pam_filter/Makefile.am (pam_filter_la_LIBADD): Likewise.
+ * modules/pam_filter/upperLOWER/Makefile.am (LDADD): Likewise.
+ * modules/pam_ftp/Makefile.am (pam_ftp_la_LIBADD): Likewise.
+ * modules/pam_group/Makefile.am (pam_group_la_LIBADD): Likewise.
+ * modules/pam_issue/Makefile.am (pam_issue_la_LIBADD): Likewise.
+ * modules/pam_keyinit/Makefile.am (pam_keyinit_la_LIBADD): Likewise.
+ * modules/pam_lastlog/Makefile.am (pam_lastlog_la_LIBADD): Likewise.
+ * modules/pam_limits/Makefile.am (pam_limits_la_LIBADD): Likewise.
+ * modules/pam_listfile/Makefile.am (pam_listfile_la_LIBADD): Likewise.
+ * modules/pam_localuser/Makefile.am (pam_localuser_la_LIBADD): Likewise.
+ * modules/pam_loginuid/Makefile.am (pam_loginuid_la_LIBADD): Likewise.
+ * modules/pam_mail/Makefile.am (pam_mail_la_LIBADD): Likewise.
+ * modules/pam_mkhomedir/Makefile.am (pam_mkhomedir_la_LIBADD,
+ mkhomedir_helper_LDADD): Likewise.
+ * modules/pam_motd/Makefile.am (pam_motd_la_LIBADD): Likewise.
+ * modules/pam_namespace/Makefile.am (pam_namespace_la_LIBADD): Likewise.
+ * modules/pam_nologin/Makefile.am (pam_nologin_la_LIBADD): Likewise.
+ * modules/pam_permit/Makefile.am (pam_permit_la_LIBADD): Likewise.
+ * modules/pam_pwhistory/Makefile.am (pam_pwhistory_la_LIBADD): Likewise.
+ * modules/pam_rhosts/Makefile.am (pam_rhosts_la_LIBADD): Likewise.
+ * modules/pam_rootok/Makefile.am (pam_rootok_la_LIBADD): Likewise.
+ * modules/pam_securetty/Makefile.am (pam_securetty_la_LIBADD): Likewise.
+ * modules/pam_sepermit/Makefile.am (pam_sepermit_la_LIBADD): Likewise.
+ * modules/pam_shells/Makefile.am (pam_shells_la_LIBADD): Likewise.
+ * modules/pam_stress/Makefile.am (pam_stress_la_LIBADD): Likewise.
+ * modules/pam_succeed_if/Makefile.am (pam_succeed_if_la_LIBADD):
Likewise.
- * modules/pam_unix/pam_unix_passwd.c (check_old_password,
- save_old_password): Likewise.
-
- * modules/pam_limits/Makefile.am: Define limits.d dir and install it.
- * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing.
- * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr.
- (pam_parse): conf_file is now ptr.
- (pam_sm_open_session): Add parsing files from limits.d subdir using
- glob, change pl to pointer.
-
-2007-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/ar.po: New translation.
- * po/ca.po: Likewise.
- * po/da.po: Likewise.
- * po/ru.po: Likewise.
- * po/sv.po: Likewise.
- * po/zu.po: Likewise.
- * po/LINGUAS: Add ar, ca, da, ru, sv, zu
-
- * po/hu.po: Update translation.
-
-2007-02-21 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Test for
- allocation failure in bigcrypt().
-
- * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Allow
- modification of '*' password by root.
-
-2007-02-06 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Remove
- debug syslog message when loginuid doesn't exist.
-
-2007-02-01 Tomas Mraz <t8m@centrum.cz>
-
- * xtests/tst-pam_unix3.c: Fix typos in comments.
-
- * modules/pam_unix/support.c (_unix_verify_password): Explicitly
- disallow '!' in the beginning of password hash. Treat only
- 13 bytes password hash specifically. (Suggested by Solar Designer.)
- Fix a warning and test for allocation failure.
- * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
-
-2007-01-31 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/Makefile.am: Add new pam_unix.so tests
- * xtests/run-xtests.sh: Prefer shell scripts (wrapper)
- over binaries.
- * xtests/tst-pam_cracklib1.c: Fix typo.
- * xtests/tst-pam_unix1.c: New, for sucurity fix.
- * xtests/tst-pam_unix1.pamd: New.
- * xtests/tst-pam_unix1.sh: New.
- * xtests/tst-pam_unix2.c: New, for crypt checks.
- * xtests/tst-pam_unix2.pamd: New.
- * xtests/tst-pam_unix2.sh: New.
- * xtests/tst-pam_unix3.c: New, for bigcrypt checks.
- * xtests/tst-pam_unix3.pamd: New.
- * xtests/tst-pam_unix3.sh: New.
-
-2007-01-23 Thorsten Kukuk <kukuk@suse.de>
-
- * release 0.99.7.1
-
- * configure.in: Set version number to 0.99.7.1
-
-2007-01-23 Thorsten Kukuk <kukuk@thukuk.de>
- Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/support.c (_unix_verify_password): Always
- compare full encrypted passwords (CVE-2007-0003).
-
-2007-01-23 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_loginuid/Makefile.am (AM_LDFLAGS): Add LIBAUDIT.
-
- * modules/pam_selinux/Makefile.am (pam_selinux_check_LDFLAGS): Add
+ * modules/pam_tally/Makefile.am (pam_tally_la_LIBADD): Likewise.
+ * modules/pam_tally2/Makefile.am (pam_tally2_la_LIBADD,
+ pam_tally2_LDADD): Likewise.
+ * modules/pam_time/Makefile.am (pam_time_la_LIBADD): Likewise.
+ * modules/pam_timestamp/Makefile.am (pam_timestamp_la_LIBADD,
+ pam_timestamp_check_LDADD, hmacfile_LDADD): Likewise.
+ * modules/pam_tty_audit/Makefile.am (pam_tty_audit_la_LIBADD): Likewise.
+ * modules/pam_umask/Makefile.am (pam_umask_la_LIBADD): Likewise.
+ * modules/pam_unix/Makefile.am (pam_unix_la_LIBADD): Likewise.
+ * modules/pam_userdb/Makefile.am (pam_userdb_la_LIBADD): Likewise.
+ * modules/pam_warn/Makefile.am (pam_warn_la_LIBADD): Likewise.
+ * modules/pam_wheel/Makefile.am (pam_wheel_la_LIBADD): Likewise.
+ * modules/pam_xauth/Makefile.am (pam_xauth_la_LIBADD): Likewise.
+ * tests/Makefile.am (LDADD): Likewise.
+ * examples/Makefile.am (LDADD): Replace "-L$(top_builddir)/libpam -lpam"
+ with "$(top_builddir)/libpam/libpam.la", and
+ "-L$(top_builddir)/libpam_misc -lpam_misc" with
+ "$(top_builddir)/libpam_misc/libpam_misc.la", to follow GNU automake
+ recommendations.
+ * xtests/Makefile.am (LDADD): Likewise.
+ * modules/pam_selinux/Makefile.am (pam_selinux_la_LIBADD): Likewise.
+
+ Fix usage of LIBADD, LDADD and LDFLAGS.
+ * modules/pam_selinux/Makefile.am: Rename pam_selinux_check_LDFLAGS to
+ pam_selinux_check_LDADD.
+ * modules/pam_userdb/Makefile.am: Split out pam_userdb_la_LIBADD from
AM_LDFLAGS.
- (pam_selinux_la_LDFLAGS): Likewise.
-
-2007-01-17 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release 0.99.7.0
-
- * configure.in: Set version number to 0.99.7.0
-
- * Makefile.am (M4_FILES): Replace GNU make extension by listing
- all m4 files.
-
-2007-01-17 Tomas Mraz <t8m@centrum.cz>
-
- * po/*.po: Updated strings to translate.
- * po/Linux-PAM.pot: Likewise.
-
-2007-01-16 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam.conf-syntax.xml: Improve documentation about
- sufficient keyword (Patch by Petteri Räty <betelgeuse@gentoo.org>)
-
-2006-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Forbid
- only '+' and '-' as first characters for account names.
- * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
-
-2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Fix ENOKEY check (specify errno.h as header
- file to search in).
-
- * configure.in: Add AM_PROG_CC_C_O.
- * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS.
- * modules/pam_tally/Makefile.am: Likewise.
- * modules/pam_unix/Makefile.am: Likewise.
-
- * modules/pam_stress/pam_stress.c (pam_sm_chauthtok): Fix
- localisation of message printed to user.
- * po/de.po: Adjust translation.
-
-2006-12-18 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Localize
- message printed to user.
-
- * modules/pam_unix/support.c (_unix_verify_password): Use strncmp
- only for bigcrypt result.
-
- * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Switch to new
- egid first, euid next. Revert euid/egid to old euid/egid and not
- ruid/rgid.
- (pam_sm_open_session): Switch to new rgid first, ruid next.
-
-2006-12-13 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_localuser/pam_localuser.c: Add support for session
- and chauthtok [SF#1606180].
- * modules/pam_localuser/pam_localuser.8.xml: Document last change.
-
- * libpam/pam_audit.c (_pam_audit_writelog): Print error message
- only once.
-
-2006-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_audit.c (_pam_audit_writelog): Print error
- message on failure to syslog.
-
-2006-12-09 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_umask/pam_umask.c: Use strtoul instead of strtol,
- fix overflow detection.
-
-2006-12-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_mkhomedir/pam_mkhomedir.c (rec_mkdir): Fix
- handling of left-most path component [SF#1591598].
- (create_homedir): Mark user visible messages for translation.
- * po/de.po: Adjust german translation for pam_mkhomedir.
-
- * modules/pam_faildelay/pam_faildelay.c: If no argument is
- given, try to read FAIL_DELAY from /etc/login.defs.
- * modules/pam_faildelay/pam_faildelay.8.xml: Document usage
- of /etc/login.defs.
-
-2006-12-04 Tomas Mraz <t8m@centrun.cz>
-
- * po/jp.po: Fixed mistake in Password: message (from
- Peng Huang <phuang@redhat.com>).
-
-2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/hu.po: Update hungarian translation (from
- Kalman Kemenczy <kkemenczy@novell.com>).
-
- * configure.in: Allow disabling support for cracklib, audit, libdb.
-
- * modules/pam_faildelay/pam_faildelay.8.xml: Correct name of Author.
-
- * configure.in: Remove --enable-docdir (obsolete by --docdir).
- * doc/Makefile.am: Don't overwrite htmldir.
- * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir.
- * doc/mwg/Makefile.am: Likewise.
- * doc/sag/Makefile.am: Likewise.
- * doc/specs/Makefile.am: Use docdir.
-
- * tests/tst-pam_set_data.c: New test cases for pam_set_data().
- * tests/Makefile.am: Add pam_set_data test case.
-
- * libpam/pam_data.c: Add NULL pointer check for module_data_name.
- * libpam/Makefile.am: Bump revision of shared library.
-
-2006-11-08 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Add modules/pam_faildelay/Makefile.
- * doc/sag/Linux-PAM_SAG.xml: Include pam_faildelay.xml.
- * doc/sag/pam_faildelay.xml: New.
- * libpam/pam_static_modules.h: Include static pam_faildelay data.
- * modules/Makefile.am: Add pam_faildelay directory.
- * modules/pam_faildelay/Makefile.am: New.
- * modules/pam_faildelay/README: New, generated from XML file.
- * modules/pam_faildelay/README.xml: New.
- * modules/pam_faildelay/pam_faildelay.8: New, generated from xml.
- * modules/pam_faildelay/pam_faildelay.8.xml: New.
- * modules/pam_faildelay/pam_faildelay.c: New.
- * modules/pam_faildelay/tst-pam_faildelay: New.
-
- * po/POTFILES.in: Add pam_faildelay.c and pam_loginuid.c.
-
-2006-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_cracklib/pam_cracklib.c: PAM_DEBUG_ARG
- is a bit mask and not a boolean value (Reported by
- Jochen Voss <voss@seehuhn.de>).
-
-2006-10-26 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam.3.xml: Add pam_get_user function.
-
- * modules/pam_motd/pam_motd.8.xml: Fix typo.
-
-2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_namespace/pam_namespace.c: Reserve space for
- trailing zero.
-
-2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/support.c (_unix_verify_password): Try system
- crypt() if we don't know the hash alogorithm.
- * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
-
-2006-10-13 Tomas Mraz <t8m@centrum.cz>
-
- * doc/mwg/Linux-PAM_MWG.xml: Add id[s] to section[s].
- * doc/sag/pam_access.xml: Likewise.
- * doc/sag/pam_echo.xml: Likewise.
- * doc/sag/pam_env.xml: Likewise.
- * doc/sag/pam_exec.xml: Likewise.
- * doc/sag/pam_group.xml: Likewise.
- * doc/sag/pam_limits.xml: Likewise.
- * doc/sag/pam_namespace.xml: Likewise.
- * doc/sag/pam_time.xml: Likewise.
- * doc/sag/Linux-PAM_SAG.xml: Add id to book.
- * doc/adg/Linux-PAM_ADG.xml: Add id to book.
- * doc/mwg/Linux-PAM_MWG.xml: Add id to book.
-
-
-2006-10-07 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/hu.po: Updated hungarian translation (from
- Kalman Kemenczy <kkemenczy@novell.com>)
-
-2006-09-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/adg/Makefile.am: Add manual pages as dependency.
- * doc/mwg/Makefile.am: Likewise.
- * doc/sag/Makefile.am: Likewise.
- * doc/sag/Linux-PAM_SAG.xml: Include pam_unix.xml.
- * doc/sag/pam_unix.xml: New.
- * modules/pam_unix/Makefile.am: Generate pam_unix.8 manual page.
- * modules/pam_unix/README.xml: New.
- * modules/pam_unix/pam_unix.8.xml: New.
- * modules/pam_unix/README: Regenerate from XML.
- * modules/pam_unix/pam_unix.8: Generated from XML.
-
-2006-09-09 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_wheel/pam_wheel.8.xml: Fix typo.
- * modules/pam_wheel/pam_wheel.8: Likewise.
- * modules/pam_wheel/README: Likewise.
-
-2006-09-08 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/de.po: Fix typo.
-
-2006-09-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.6.3
-
-2006-09-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_loginuid/pam_loginuid.8.xml: Fix typo in
- config name.
-
-2006-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_env/environment: New, dummy environment example
- config file.
-
- * modules/pam_namespace/Makefile.am: Don't install
- manual page if we don't build module.
-
- * m4/ld-as-needed.m4: Don't set LDFLAGS if check failed.
- * m4/ld-O1: Likewise.
-
-2006-08-30 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.8.xml: All services supported.
- * modules/pam_access/pam_access.c (pam_sm_open_session): New.
- (pam_sm_close_session): New.
- (pam_sm_chauthtok): New.
-
- * modules/pam_access/pam_succeed_if.8.xml: All services supported.
- * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return
- PAM_IGNORE rather than success.
- (pam_sm_open_session): New.
- (pam_sm_close_session): New.
- (pam_sm_chauthtok): New.
-
-2006-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/Makefile.am: Move shell code to execute tests from here ...
- * xtests/run-xtests.sh: ... to here.
- * xtests/*.c: Include config.h.
- * tests/*.c: Likewise.
-
- * modules/pam_namespace/pam_namespace.c: Use pam_modutil_getpwnam()
- instead of getpwnam().
-
-2006-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/sag/pam_loginuid.xml: New.
- * doc/sag/Linux-PAM_SAG.xml: Include pam_loginuid.xml.
-
- * configure.in: Add modules/pam_loginuid/Makefile.
- * modules/Makefile.am: Add pam_loginuid sub directory.
-
- * libpam/pam_static_modules.h: Add pam_loginuid.
-
- * modules/pam_loginuid/Makefile.am: New.
- * modules/pam_loginuid/tst-pam_loginuid: New.
- * modules/pam_loginuid/pam_loginuid.8.xml: New.
- * modules/pam_loginuid/pam_loginuid.8: New, generated from XML source.
- * modules/pam_loginuid/pam_loginuid.c: New.
- * modules/pam_loginuid/README.xml: New.
- * modules/pam_loginuid/README: New, generated from XML source.
-
-2006-08-29 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_exec/pam_exec.c (call_exec): Add required third
- argument to open() call with O_CREAT flag set.
-
-2006-08-28 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Remove
- duplicate code.
-
-2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.6.2
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_date): Create
- lastlog file if it does not exist.
-
- * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Check
- for error from getting second token.
- * xtests/Makefile.am: Add tst-pam_cracklib1
- * xtests/tst-pam_cracklib1.c: New, check for pam_cracklib seg.fault.
- * xtests/tst-pam_cracklib1.pamd: New, config for cracklib test.
-
-2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * xtests/tst-pam_dispatch4.c: New test.
- * xtests/tst-pam_dispatch4.pamd: PAM config for new test.
-
-2006-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.6.1
-
-2006-08-09 David Howells <dhowells@redhat.com>
-
- * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Set real uid
- to user's before revoking.
- (pam_sm_open_session): Remember the uid.
-
-2006-08-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_umask/pam_umask.c (setup_limits_from_gecos):
- Add error handling.
- * modules/pam_umask/pam_umask.8.xml: Document silent option.
-
- * xtests/Makefile.am: Fix includes for bootstrapping.
- Reported by Greg Schafer <gschafer@zip.com.au>.
-
-2006-08-05 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.6.0
-
- * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
- pam_modutil_getpwnam instead of getpwnam.
-
- * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
- svc variable to char pointer for snprintf.
-
- * configure.in: Generate xtests/Makefile.
- * Makefile.am (SUBDIRS): Add xtests.
- * README: Document make check and make xtests.
- * xtests/Makefile.am: New.
- * xtests/tst-pam_dispatch1.pamd: New.
- * xtests/tst-pam_dispatch2.pamd: New.
- * xtests/tst-pam_dispatch3.pamd: New.
- * xtests/tst-pam_dispatch1.c: New.
- * xtests/tst-pam_dispatch2.c: New.
- * xtests/tst-pam_dispatch3.c: New.
-
-2006-08-04 Ray Strode <rstrode@redhat.com>
-
- * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
- Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
-
-2006-08-03 David Howells <dhowells@redhat.com>
-
- * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
- (init_keyrings): Properly handle multiple invocations of the module.
- (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
-
-2006-08-03 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
- New function for list matching.
- (evaluate_notinlist): Likewise.
- (evaluate): Add service value match, list matching.
- * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
- features.
-
- * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
- relabelling error when the tty device doesn't exist (ENOENT).
-
-2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
- rationale about when this function should be used and when not.
-
- * doc/index.html: Cleanup to look prettier.
-
-2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/Makefile.am: Bump patchlevel of libpam.
- * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
- or [return=bad] is used, don't return PAM_IGNORE. Based on
- patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
-
-2006-07-28 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * ABOUT-NLS: Upgrade to gettext-0.15.
- * config.rpath: Likewise.
- * m4/gettext.m4: Upgrade to gettext-0.15.
- * m4/inttypes-h.m4: New file, from gettext-0.15.
- * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
- * m4/lib-link.m4: Upgrade to gettext-0.15.
- * m4/lib-prefix.m4: Upgrade to gettext-0.15.
- * m4/lock.m4: New file, from gettext-0.15.
- * m4/longdouble.m4: Upgrade to gettext-0.15.
- * m4/nls.m4: Upgrade to gettext-0.15.
- * m4/po.m4: Upgrade to gettext-0.15.
- * m4/size_max.m4: Upgrade to gettext-0.15.
- * m4/visibility.m4: New file, from gettext-0.15.
- * po/Makefile.in.in: Upgrade to gettext-0.15.
-
-2006-07-24 David Quigley <dpquigl@tycho.nsa.gov>
-
- * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
- * modules/pam_namespace/pam_namespace.c: Move includes and
- data structure definitions from here ...
- * modules/pam_namespace/pam_namespace.h: ... here. New file.
-
- * modules/pam_namespace/pam_namespace.c: Move large sections
- of code into new functions.
-
-2006-07-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/adg/Makefile.am: Add uninstall and distclean rules.
- * doc/mwg/Makefile.am: Likewise.
- * doc/sag/Makefile.am: Likewise.
-
-2006-07-08 Daniel Richard G. <skunk@iskunk.org>
-
- * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
- * conf/pam_conv1/pam_conv.lex: Rename to ...
- * conf/pam_conv1/pam_conv_l.l: ... this.
- * conf/pam_conv1/pam_conv.y: Rename to ...
- * conf/pam_conv1/pam_conv_y.y: ... this.
- * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
- calls.
- * doc/Makefile.am: Fix rule to install index.html.
- * doc/adg/Makefile.am: Fix test usage.
- * doc/mwg/Makefile.am: Likewise.
- * doc/sag/Makefile.am: Likewise.
- * doc/specs/Makefile.am: Fix rules for lex and yacc files.
- * specs/parse.lex: Rename to ...
- * doc/specs/parse_l.l: ... this.
- * doc/specs/parse.y: Rename to ...
- * doc/specs/parse_y.y: ... this.
- * libpam/pam_account.c: Fix #if vs. #ifdef.
- * libpam/pam_audit.c: Likewise.
- * libpam/pam_auth.c: Likewise.
- * libpam/pam_password.c: Likewise.
- * libpam/pam_private.h: Likewise.
- * libpam/pam_session.c: Likewise.
- * libpam/pam_start.c: Likewise.
- * libpam/pam_static.c: Fix "empty sourcefile" warning.
- * modules/pam_limits/pam_limits.c: Check for __linux, too.
- * modules/pam_userdb/Makefile.am: Don't run test if no
- libdb available.
- * tests/tst-dlopen.c: Include config.h.
-
-2006-07-03 Dan Yefimov
-
- * configure.in: Fixed have_key_syscalls test.
-
- * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
- match, removed AI_ADDRCONFIG flag.
-
-2006-06-30 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
-
-2006-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/Makefile.am (releasedocs): Fix directory layout.
- * doc/adg/Makefile.am: Likewise.
- * doc/mwg/Makefile.am: Likewise.
- * doc/sag/Makefile.am: Likewise.
-
-2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/sag: System Administrator Guide as XML source.
- * doc/sag/Makefile.am: New.
- * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
- * doc/sag/pam_*.xml: New, wrapper to include module documentation.
-
- * doc/adg: Application Developers Guide as XML source.
- * doc/adg/Makefile.am: New.
- * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
- * doc/adg/pam_*.xml: New, wrappers to include manual pages.
-
- * doc/mwg: Application Developers Guide as XML source.
- * doc/mwg/Makefile.am: New.
- * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
- * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
-
- * doc/CREDITS: Removed.
- * doc/NOTES: Removed.
- * doc/pam_appl.sgml: Removed.
- * doc/pam_modules.sgml: Removed.
- * doc/pam_source.sgml: Removed.
- * doc/figs/pam_orient.txt: Removed.
- * doc/figs: Removed.
-
- * configure.in: Remove checks for sgml2* progrs, add sag, adg
- and mwg Makefiles.
-
- * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
- directories.
- * doc/modules: Remove directory.
- * doc/html: Remove directory.
- * doc/ps: Remove directory.
- * doc/pdf: Remove directory.
- * doc/txts: Remove directory.
- * doc/index.html: Moved from html directory to here.
-
-2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.5.0
-
- * bump version number to 0.99.5.0
-
- * modules/pam_rhosts/pam_rhosts.c: New module, replaces
- pam_rhosts_auth.so.
- * modules/pam_rhosts/pam_rhosts.8.xml: New.
- * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
- * modules/pam_rhosts/tst-pam_rhosts: New.
- * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
- manual page and README.
- * modules/pam_rhosts/README.xml: New.
- * modules/pam_rhosts/reADME: Regenerated from XML source.
-
- * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
- writers guide.
- * doc/man/pam_sm_authenticate.3.xml: Likewise.
- * doc/man/pam_sm_chauthtok.3.xml: Likewise.
- * doc/man/pam_sm_close_session.3.xml: Likewise.
- * doc/man/pam_sm_open_session.3.xml: Likewise.
- * doc/man/pam_sm_setcred.3.xml: Likewise.
-
- * po/POTFILES.in: Add new source files.
-
- * libpam/pam_static_modules.h: Add new modules.
-
- * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
-
- * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
- files and manual page.
-
-2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Allow disabling of SELinux support, check for
- rootok_af.
-
-2006-06-27 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_namespace/pam_namespace.c: New module
- originally written by Janak Desai.
- * modules/pam_namespace/Makefile.am: New.
- * modules/pam_namespace/README: New.
- * modules/pam_namespace/md5.c: New.
- * modules/pam_namespace/md5.h: New.
- * modules/pam_namespace/namespace.conf: New.
- * modules/pam_namespace/namespace.conf.5: New.
- * modules/pam_namespace/namespace.conf.5.xml: New.
- * modules/pam_namespace/namespace.init: New.
- * modules/pam_namespace/pam_namespace.8: New.
- * modules/pam_namespace/pam_namespace.8.xml: New.
- * modules/pam_namespace/tst-pam_namespace: New.
- * modules/Makefile.am: Added pam_namespace.
- * configure.in: Added pam_namespace, test for unshare
- library call.
-
-2006-06-27 David Howells <dhowells@redhat.com>
-
- * modules/pam_keyinit/pam_keyinit.c: New module.
- * modules/pam_keyinit/pam_keyinit.8: New.
- * modules/pam_keyinit/pam_keyinit.8.xml: New.
- * modules/pam_keyinit/README: New.
- * modules/pam_keyinit/README.xml: New.
- * modules/pam_keyinit/Makefile.am: New.
- * modules/pam_keyinit/tst-pam_keyinit: New.
- * modules/Makefile.am: Added pam_keyinit.
- * configure.in: Added test for the key mgmt syscall.
-
-2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * m4/libprelude.m4: Sync with upstream.
-
-2006-06-27 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
- signal() fails with SIG_ERR return
- * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
- Likewise.
- * modules/pam_unix/support.c(_unix_run_helper_binary):
- Likewise.
-
-2006-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/misc_conv.3.xml: New.
- * doc/man/misc_conv.3: New.
- * doc/man/pam_misc_paste_env.3.xml: New.
- * doc/man/pam_misc_paste_env.3: New.
- * doc/man/pam_misc_drop_env.3.xml: New.
- * doc/man/pam_misc_drop_env.3: New.
- * doc/man/pam_misc_setenv.3.xml: New.
- * doc/man/pam_misc_setenv.3: New.
- * doc/man/Makefile.am: Add new manual pages.
-
- * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
- in Applicatoin Developer Guide.
- * doc/man/pam_authenticate.3.xml: Likewise
- * doc/man/pam_chauthtok.3.xml: Likewise
- * doc/man/pam_close_session.3.xml: Likewise
- * doc/man/pam_conv.3.xml: Likewise
- * doc/man/pam_end.3.xml: Likewise
- * doc/man/pam_fail_delay.3.xml: Likewise
- * doc/man/pam_getenv.3.xml: Likewise
- * doc/man/pam_getenvlist.3.xml: Likewise
- * doc/man/pam_open_session.3.xml: Likewise
- * doc/man/pam_putenv.3.xml: Likewise
- * doc/man/pam_setcred.3.xml: Likewise
- * doc/man/pam_start.3.xml: Likewise
- * doc/man/pam_strerror.3.xml: Likewise
-
- * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
- * doc/man/pam_authenticate.3: Likewise
- * doc/man/pam_chauthtok.3: Likewise
- * doc/man/pam_close_session.3: Likewise
- * doc/man/pam_conv.3: Likewise
- * doc/man/pam_end.3: Likewise
- * doc/man/pam_fail_delay.3: Likewise
- * doc/man/pam_getenv.3: Likewise
- * doc/man/pam_getenvlist.3: Likewise
- * doc/man/pam_open_session.3: Likewise
- * doc/man/pam_putenv.3: Likewise
- * doc/man/pam_setcred.3: Likewise
- * doc/man/pam_sm_close_session.3: Likewise
- * doc/man/pam_start.3: Likewise
- * doc/man/pam_strerror.3: Likewise
- * doc/man/pam_syslog.3: Likewise
- * doc/man/PAM.8: Likewise
-
-2006-06-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_limits/pam_limits.c (setup_limits): Don't
- reset priority for root.
-
-2006-06-23 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
- * modules/pam_access/pam_access.8.xml: Likewise.
- * modules/pam_deny/pam_deny.8.xml: Likewise.
- * modules/pam_echo/pam_echo.8.xml: Likewise.
- * modules/pam_env/pam_env.8.xml: Likewise.
- * modules/pam_env/pam_env.conf.5.xml: Likewise.
- * modules/pam_group/group.conf.5.xml: Likewise.
- * modules/pam_group/pam_group.8.xml: Likewise.
- * modules/pam_limits/limits.conf.5.xml: Likewise.
- * modules/pam_listfile/pam_listfile.8.xml: Likewise.
- * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
- * modules/pam_time/pam_time.8.xml: Likewise.
- * modules/pam_time/time.conf.5.xml: Likewise.
-
- * modules/pam_access/access.conf.5: Regenerate.
- * modules/pam_access/pam_access.8: Likewise.
- * modules/pam_deny/pam_deny.8: Likewise.
- * modules/pam_echo/README: Likewise.
- * modules/pam_echo/pam_echo.8: Likewise.
- * modules/pam_env/pam_env.8: Likewise.
- * modules/pam_env/pam_env.conf.5: Likewise.
- * modules/pam_group/README: Likewise.
- * modules/pam_group/group.conf.5: Likewise.
- * modules/pam_group/pam_group.8: Likewise.
- * modules/pam_limits/limits.conf.5: Likewise.
- * modules/pam_listfile/README: Likewise.
- * modules/pam_listfile/pam_listfile.8: Likewise.
- * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
- * modules/pam_time/pam_time.8: Likewise.
- * modules/pam_time/time.conf.5: Likewise.
-
- * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
- and pam.conf-syntax.xml.
- * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
- * doc/man/pam.conf.5: Regenerated.
- * doc/man/pam.conf-desc.xml: New.
- * doc/man/pam.conf-dir.xml: New.
- * doc/man/pam.conf-syntax.xml: New.
-
-2006-06-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
- is not installed.
-
- * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
- * modules/pam_issue/pam_issue.8: Regenerate.
-
-2006-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Remove unused check for libcap.
-
- * m4/ld-as-needed.m4: New.
- * m4/ld-O1.m4: New.
- * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
- require docbook version 4.4.
-
-2006-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam.8.xml: Syntax cleanup.
- * doc/pam/PAM.8: Regenerated from xml source.
- * man/pam_sm_chauthtok.3: New.
- * man/pam_sm_chauthtok.3.xml: New.
- * man/pam_sm_close_session.3: New.
- * man/pam_sm_close_session.3.xml: New.
- * man/pam_sm_open_session.3: New.
- * man/pam_sm_open_session.3.xml: New.
- * man/pam_sm_authenticate.3: New.
- * man/pam_sm_authenticate.3.xml: New.
- * man/pam_sm_setcred.3: New.
- * man/pam_sm_setcred.3.xml: New.
- * man/Makefile.am: Add new pam_sm_* manual pages.
-
- * specs/Makefile.am: Fix rule to generate draft.
-
-2006-06-18 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_tally/Makefile.am: Include Make.xml.rules.
- * modules/pam_tally/pam_tally.8.xml: New.
- * modules/pam_tally/pam_tally.8: New, generated from xml file.
- * modules/pam_tally/README.xml: New.
- * modules/pam_tally/README: Regenerated from xml file.
-
- * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
- * modules/pam_selinux/pam_selinux.8.xml: New.
- * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
- * modules/pam_selinux/README.xml: New.
- * modules/pam_selinux/README: Regenerated from xml file.
-
-2006-06-17 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_debug/Makefile.am: Include Make.xml.rules.
- * modules/pam_debug/pam_debug.8.xml: New.
- * modules/pam_debug/pam_debug.8: New, generated from xml file.
- * modules/pam_debug/README.xml: New.
- * modules/pam_debug/README: Regenerated from xml file.
-
- * examples/vpass.c: UID is unsigned on Linux.
- * modules/pam_exec/pam_exec.c: Likewise.
- * modules/pam_unix/pam_unix_acct.c: Likewise.
- * modules/pam_unix/pam_unix_sess.c: Likewise.
-
- * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
- * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
- * modules/pam_succeed_if/README: Regenerated.
-
- * modules/pam_limits/Makefile.am: Include Make.xml.rules.
- * modules/pam_limits/limits.conf.5: New, generated from xml file.
- * modules/pam_limits/limits.conf.5.xml: New.
- * modules/pam_limits/pam_limits.8: New, generated from xml file.
- * modules/pam_limits/pam_limits.8.xml: New.
- * modules/pam_limits/README.xml: New.
- * modules/pam_limits/README: Regenerated from README.xml.
-
-2006-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
- are unsigned on Linux, don't truncate them.
- (_do_setpass): err is of type clnt_stat, not int.
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
- truncate UID for syslog output.
-
- * modules/pam_time/pam_time.c: Replace type boolean with int.
- * modules/pam_group/pam_group.c: Likewise.
-
-2006-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/bigcrypt.h: New.
- * modules/pam_unix/Makefile.am: Add bigcrypt.h.
- * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
- * modules/pam_unix/support.c: Include bigcrypt.h, remove
- own prototype.
- * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
- own prototype.
- * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
- own prototype.
-
- * modules/pam_time/pam_time.c (logic_member): Remove unused
- variable len.
-
- * modules/pam_group/pam_group.c (logic_field): Accept
- colon in tty name. [#1428276].
- (logic_member): Remove unused variable len.
- (check_account): Fix usage of err variable in debug code.
-
- * modules/pam_time/pam_time.c (logic_field): Likewise.
-
- * configure.in: Add special exceptions for icc: different
- compiler warnings, no PIE support.
-
-2006-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
-
- * configure.in: Remove --enable-memory-debug, add option
- to disable prelude if installed.
-
- * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
- * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
- * modules/pam_unix/unix_chkpwd.c: Likewise.
- * libpam/include/security/_pam_types.h: Likewise.
- * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
- * libpam/pam_malloc.c: Remove file.
- * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
-
- * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
- instead of strdup.
-
- * libpam/pam_private.h: Remove _pam_strCMP.
- * libpam/pam_misc.c: Likewise.
- * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
-
-2006-06-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
- for modules from main application.
-
-2006-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_time/Makefile.am: Include Make.xml.rules.
- * modules/pam_time/time.conf.5: New, generated from xml file.
- * modules/pam_time/time.conf.5.xml: New.
- * modules/pam_time/pam_time.8: New, generated from xml file.
- * modules/pam_time/pam_time.8.xml: New.
- * modules/pam_time/README.xml: New.
- * modules/pam_time/README: Regenerated from README.xml.
-
- * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
- * modules/pam_wheel/pam_wheel.8.xml: New.
- * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
- * modules/pam_wheel/README.xml: New.
- * modules/pam_wheel/README: Regenerated from xml file.
-
- * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
- * modules/pam_xauth/pam_xauth.8.xml: New.
- * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
- * modules/pam_xauth/README.xml: New.
- * modules/pam_xauth/README: Regenerated from xml file.
-
- * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
- * modules/pam_deny/pam_deny.8: Regenerate from xml file.
- * modules/pam_deny/README: Likewise.
-
- * modules/pam_warn/Makefile.am: Include Make.xml.rules.
- * modules/pam_warn/pam_warn.8.xml: New.
- * modules/pam_warn/pam_warn.8: New, generated from xml file.
- * modules/pam_warn/README.xml: New.
- * modules/pam_warn/README: Regenerated from xml file.
-
- * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
- * modules/pam_userdb/pam_userdb.8.xml: New.
- * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
- * modules/pam_userdb/README.xml: New.
- * modules/pam_userdb/README: Regenerated from xml file.
-
-2006-06-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_shells/Makefile.am: Include Make.xml.rules.
- * modules/pam_shells/pam_shells.8.xml: New.
- * modules/pam_shells/pam_shells.8: New, generated from xml file.
- * modules/pam_shells/README.xml: New.
- * modules/pam_shells/README: Regenerated from xml file.
-
- * libpam/include/security/pam_malloc.h: Add missing license
- informations.
-
- * libpam/include/security/pam_ext.h: Add brackets for C++.
- * libpam/include/security/pam_modutil.h: Likewise.
-
- * libpam/include/security/pam_modules.h: Document where to
- find the copyright/license informations.
-
- * libpam/include/security/pam_appl.h: Move _pam_compat.h
- include inside of brackets.
-
-2006-06-04 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
- * modules/pam_securetty/pam_securetty.8.xml: New.
- * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
- * modules/pam_securetty/README.xml: New.
- * modules/pam_securetty/README: Regenerated from xml file.
-
- * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
- * modules/pam_rootok/pam_rootok.8.xml: New.
- * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
- * modules/pam_rootok/README.xml: New.
- * modules/pam_rootok/README: Regenerated from xml file.
-
- * modules/pam_permit/Makefile.am: Include Make.xml.rules.
- * modules/pam_permit/pam_permit.8.xml: New.
- * modules/pam_permit/pam_permit.8: New, generated from xml file.
- * modules/pam_permit/README.xml: New.
- * modules/pam_permit/README: Regenerated from xml file.
-
- * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
- * modules/pam_nologin/pam_nologin.8.xml: New.
- * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
- * modules/pam_nologin/README.xml: New.
- * modules/pam_nologin/README: Regenerated from xml file.
-
-2006-06-03 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_motd/Makefile.am: Include Make.xml.rules.
- * modules/pam_motd/pam_motd.8.xml: New.
- * modules/pam_motd/pam_motd.8: New, generated from xml file.
- * modules/pam_motd/README.xml: New.
- * modules/pam_motd/README: New, generated from xml file.
-
-2006-06-02 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_mail/Makefile.am: Include Make.xml.rules.
- * modules/pam_mail/pam_mail.8.xml: New.
- * modules/pam_mail/pam_mail.8: New, generated from xml file.
- * modules/pam_mail/README.xml: New.
- * modules/pam_mail/README: Regenerated from xml file.
-
- * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
- * modules/pam_localuser/pam_localuser.8.xml: New.
- * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
- * modules/pam_localuser/README.xml: New.
- * modules/pam_localuser/README: Regenerated from xml file.
-
- * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
- * doc/man/pam.3: Likewise.
- * doc/man/pam.conf.5: Likewise.
- * doc/man/pam_acct_mgmt.3: Likewise.
- * doc/man/pam_authenticate.3: Likewise.
- * doc/man/pam_chauthtok.3: Likewise.
- * doc/man/pam_close_session.3: Likewise.
- * doc/man/pam_conv.3: Likewise.
- * doc/man/pam_end.3: Likewise.
- * doc/man/pam_error.3: Likewise.
- * doc/man/pam_fail_delay.3: Likewise.
- * doc/man/pam_get_data.3: Likewise.
- * doc/man/pam_get_item.3: Likewise.
- * doc/man/pam_get_user.3: Likewise.
- * doc/man/pam_getenv.3: Likewise.
- * doc/man/pam_getenvlist.3: Likewise.
- * doc/man/pam_info.3: Likewise.
- * doc/man/pam_open_session.3: Likewise.
- * doc/man/pam_prompt.3: Likewise.
- * doc/man/pam_putenv.3: Likewise.
- * doc/man/pam_set_data.3: Likewise.
- * doc/man/pam_set_item.3: Likewise.
- * doc/man/pam_setcred.3: Likewise.
- * doc/man/pam_sm_acct_mgmt.3: Likewise.
- * doc/man/pam_start.3: Likewise.
- * doc/man/pam_strerror.3: Likewise.
- * doc/man/pam_syslog.3: Likewise.
- * modules/pam_access/access.conf.5: Likewise.
- * modules/pam_access/pam_access.8: Likewise.
- * modules/pam_cracklib/pam_cracklib.8: Likewise.
- * modules/pam_deny/pam_deny.8: Likewise.
- * modules/pam_echo/pam_echo.8: Likewise.
- * modules/pam_env/pam_env.8: Likewise.
- * modules/pam_env/pam_env.conf.5: Likewise.
- * modules/pam_exec/pam_exec.8: Likewise.
- * modules/pam_filter/pam_filter.8: Likewise.
- * modules/pam_ftp/pam_ftp.8: Likewise.
- * modules/pam_group/group.conf.5: Likewise.
- * modules/pam_group/pam_group.8: Likewise.
- * modules/pam_issue/pam_issue.8: Likewise.
- * modules/pam_lastlog/pam_lastlog.8: Likewise.
- * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
- * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
- * modules/pam_umask/pam_umask.8: Likewise.
-
- * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
- dngettext if available [#1427738].
- * configure.in: Check for dngettext [#1427738].
- * po/*.po: Update to dngettext usage.
-
- * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
- * modules/pam_listfile/pam_listfile.8.xml: New.
- * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
- * modules/pam_listfile/README.xml: New.
- * modules/pam_listfile/README: Regenerated from xml file.
-
-2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
- * modules/pam_lastlog/pam_lastlog.8.xml: New.
- * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
- * modules/pam_lastlog/README.xml: New.
- * modules/pam_lastlog/README: Regenerated from xml file.
-
- * modules/pam_group/Makefile.am: Include Make.xml.rules.
- * modules/pam_group/group.conf.5.xml: New.
- * modules/pam_group/group.conf.5: New, generated from xml file.
- * modules/pam_group/pam_group.8.xml: New.
- * modules/pam_group/pam_group.8: New, generated from xml file.
- * modules/pam_group/README.xml: New.
- * modules/pam_group/README: Regenerated from xml file.
-
- * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
- * modules/pam_ftp/pam_ftp.8.xml: New.
- * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
- * modules/pam_ftp/README.xml: New.
- * modules/pam_ftp/README: Regenerated from xml file.
-
- * modules/pam_issue/Makefile.am: Include Make.xml.rules.
- * modules/pam_issue/pam_issue.8.xml: New.
- * modules/pam_issue/pam_issue.8: New, generated from xml file.
- * modules/pam_issue/README.xml: New.
- * modules/pam_issue/README: Regenerated from xml file.
-
- * modules/pam_filter/Makefile.am: Include Make.xml.rules.
- * modules/pam_filter/pam_filter.8.xml: New.
- * modules/pam_filter/pam_filter.8: New, generated from xml file.
- * modules/pam_filter/README.xml: New.
- * modules/pam_filter/README: Regenerated from xml file.
-
-2006-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
- directory documentation.
-
- * modules/pam_umask/Makefile.am: Include Make.xml.rules.
- * modules/pam_umask/pam_umask.8.xml: New.
- * modules/pam_umask/pam_umask.8: New, generated from xml file.
- * modules/pam_umask/README.xml: New.
- * modules/pam_umask/README: Regenerated from xml file.
-
-2006-05-29 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
- * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
- * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
- * modules/pam_mkhomedir/README.xml: New.
- * modules/pam_mkhomedir/README: Regenerated from xml file.
-
-2006-05-23 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
- instead of read().
-
-2006-05-22 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
- Fix memory leaks, [#1490956] found by Coverity.
-
- * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
- value of pam_get_user().
- (tally_get_data): Check if oldtime is not NULL.
- [#1489818] found by Coverity.
-
- * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
- ignore return value of stat(). [#1489808] found by Coverity.
-
- * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
- NULL pointer dereference. [#1489792] found by Coverity.
-
- * libpam/Makefile.am: bump release number of libpam.so.
- * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
- [#1489804] found by Coverity.
-
- * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
- str, [#1489658] found by Coverity.
-
- * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
- a potential NULL pointer dereference.
- (pam_sm_chauthtok): Remove dead code.
- [#1489634] found by Coverity.
-
-2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Check for fseeko.
- * modules/pam_tally/pam_tally.c: Use fseeko if available
- (Based on patch by IBM).
-
-2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.4.0
-
- * libpam/pam_strerror.c: Unify error messages.
-
- * po/zh_TW.po: Adjust for last pam_strerror changes.
- * po/zh_CN.po: Likewise.
- * po/uk.po: Likewise.
- * po/tr.po: Likewise.
- * po/pt.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/pl.po: Likewise.
- * po/ja.po: Likewise.
- * po/nl.po: Likewise.
- * po/nb.po: Likewise.
- * po/it.po: Likewise.
- * po/hu.po: Likewise.
- * po/fr.po: Likewise.
- * po/fi.po: Likewise.
- * po/es.po: Likewise.
- * po/de.po: Likewise.
- * po/cs.po: Likewise.
-
- * doc/man/pam.3.xml: New.
- * doc/man/pam.3. New, generated from XML file.
-
- * doc/man/pam_sm_acct_mgmt.3.xml: New.
- * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
-
- * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
- all manual pages.
-
- * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
-
-2006-05-02 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
- different strings for plural or not [#1427738]
-
- * po/*.po: Adjust for pam_unix.so translation fix.
-
- * modules/pam_tally/pam_tally.c: Always close file handle
- in error case, don't close it depending on *TALLY value [#1478180]
-
-2006-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/fr.po: Updated.
-
-2006-04-11 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/km.po: Updated.
-
-2006-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/LINGUAS: Add uk.
-
- * po/uk.po: New.
- * po/cs.po: Updated.
- * po/po/es.po: Updated.
- * po/fi.po: Updated.
- * po/fr.po: Updated.
- * po/hu.po: Updated.
- * po/it.po: Updated.
- * po/ja.po: Updated.
- * po/nb.po: Updated.
- * po/pl.po: Updated.
- * po/pt.po: Updated.
- * po/pt_BR.po: Updated.
- * po/zh_CN.po: Updated.
- * po/zh_TW.po: Updated.
-
-2006-03-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Remove ALL_LINGUAS.
- * po/LINGUAS: New.
- * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
-
-2006-03-13 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_error.3.xml: New.
- * doc/man/pam_error.3: New, generated from XML file.
- * doc/man/pam_verror.3: New, generated from XML file.
- * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
-
- * modules/pam_lastlog/Makefile.am: Fix typo.
-
- * modules/pam_lastlog/pam_lastlog.c: Move comment for
- translators in right line.
- * po/*.po: Update po files with comment for translator.
-
-2006-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/Makefile.am: Add new manual pages.
-
- * doc/man/pam.conf.5.xml: Replace link with content
- of PAM admin guide.
- * doc/man/pam.conf.5: Regenerated from XML file.
-
- * doc/man/pam_info.3.xml: New.
- * doc/man/pam_info.3: New, generated from XML file.
- * doc/man/pam_vinfo.3: New, generated from XML file.
-
- * doc/man/pam_conv.3.xml: New.
- * doc/man/pam_conv.3: New, generated from XML file.
-
- * doc/man/pam_putenv.3.xml: New.
- * doc/man/pam_putenv.3: New, generated from XML file.
-
- * doc/man/pam_getenv.3.xml: New.
- * doc/man/pam_getenv.3: New, generated from XML file.
-
- * doc/man/pam_getenvlist.3.xml: New.
- * doc/man/pam_getenvlist.3: New, generated from XML file.
-
- * libpam/pam_item.c (pam_get_user): Check for valid pamh before
- using it.
-
- * configure.in: create tests/Makefile
- * Makefile.am (SUBDIRS): Add tests
- * tests/Makefile.am: New.
- * tests/tst-dlopen.c: New.
- * tests/tst-pam_acct_mgmt.c: New.
- * tests/tst-pam_authenticate.c: New.
- * tests/tst-pam_chauthtok.c: New.
- * tests/tst-pam_close_session.c: New.
- * tests/tst-pam_end.c: New.
- * tests/tst-pam_fail_delay.c: New.
- * tests/tst-pam_getenvlist.c: New.
- * tests/tst-pam_get_item.c: New.
- * tests/tst-pam_open_session.c: New.
- * tests/tst-pam_setcred.c: New.
- * tests/tst-pam_set_item.c: New.
- * tests/tst-pam_start.c: New.
- * tests/tst-pam_get_user.c: New.
-
- * modules/pam_access/Makefile.am: Add rules for make check
- * modules/pam_access/tst-pam_access: New
- * modules/pam_cracklib/Makefile.am: Add rules for make check
- * modules/pam_cracklib/tst-pam_cracklib: New
- * modules/pam_debug/Makefile.am: Add rules for make check
- * modules/pam_debug/tst-pam_debug: New
- * modules/pam_deny/Makefile.am: Add rules for make check
- * modules/pam_deny/tst-pam_deny: New
- * modules/pam_echo/Makefile.am: Add rules for make check
- * modules/pam_echo/tst-pam_echo: New
- * modules/pam_env/Makefile.am: Add rules for make check
- * modules/pam_env/tst-pam_env: New
- * modules/pam_exec/Makefile.am: Add rules for make check
- * modules/pam_exec/tst-pam_exec: New
- * modules/pam_filter/Makefile.am: Add rules for make check
- * modules/pam_filter/tst-pam_filter: New
- * modules/pam_ftp/Makefile.am: Add rules for make check
- * modules/pam_ftp/tst-pam_ftp: New
- * modules/pam_group/Makefile.am: Add rules for make check
- * modules/pam_group/tst-pam_group: New
- * modules/pam_issue/Makefile.am: Add rules for make check
- * modules/pam_issue/tst-pam_issue: New
- * modules/pam_lastlog/Makefile.am: Add rules for make check
- * modules/pam_lastlog/tst-pam_lastlog: New
- * modules/pam_limits/Makefile.am: Add rules for make check
- * modules/pam_limits/tst-pam_limits: New
- * modules/pam_listfile/Makefile.am: Add rules for make check
- * modules/pam_listfile/tst-pam_listfile: New
- * modules/pam_localuser/Makefile.am: Add rules for make check
- * modules/pam_localuser/tst-pam_localuser: New
- * modules/pam_mail/Makefile.am: Add rules for make check
- * modules/pam_mail/tst-pam_mail: New
- * modules/pam_mkhomedir/Makefile.am: Add rules for make check
- * modules/pam_mkhomedir/tst-pam_mkhomedir: New
- * modules/pam_motd/Makefile.am: Add rules for make check
- * modules/pam_motd/tst-pam_motd: New
- * modules/pam_nologin/Makefile.am: Add rules for make check
- * modules/pam_nologin/tst-pam_nologin: New
- * modules/pam_permit/Makefile.am: Add rules for make check
- * modules/pam_permit/tst-pam_permit: New
- * modules/pam_rhosts/Makefile.am: Add rules for make check
- * modules/pam_rhosts/tst-pam_rhosts: New
- * modules/pam_rootok/Makefile.am: Add rules for make check
- * modules/pam_rootok/tst-pam_rootok: New
- * modules/pam_securetty/Makefile.am: Add rules for make check
- * modules/pam_securetty/tst-pam_securetty: New
- * modules/pam_selinux/Makefile.am: Add rules for make check
- * modules/pam_selinux/tst-pam_selinux: New
- * modules/pam_shells/Makefile.am: Add rules for make check
- * modules/pam_shells/tst-pam_shells: New
- * modules/pam_stress/Makefile.am: Add rules for make check
- * modules/pam_stress/tst-pam_stress: New
- * modules/pam_succeed_if/Makefile.am: Add rules for make check
- * modules/pam_succeed_if/tst-pam_succeed_if: New
- * modules/pam_tally/Makefile.am: Add rules for make check
- * modules/pam_tally/tst-pam_tally: New
- * modules/pam_time/Makefile.am: Add rules for make check
- * modules/pam_time/tst-pam_time: New
- * modules/pam_umask/Makefile.am: Add rules for make check
- * modules/pam_umask/tst-pam_umask: New
- * modules/pam_unix/Makefile.am: Add rules for make check
- * modules/pam_unix/tst-pam_unix: New
- * modules/pam_userdb/Makefile.am: Add rules for make check
- * modules/pam_userdb/tst-pam_userdb: New
- * modules/pam_warn/Makefile.am: Add rules for make check
- * modules/pam_warn/tst-pam_warn: New
- * modules/pam_wheel/Makefile.am: Add rules for make check
- * modules/pam_wheel/tst-pam_wheel: New
- * modules/pam_xauth/Makefile.am: Add rules for make check
- * modules/pam_xauth/tst-pam_xauth: New
-
-2006-03-11 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/pam_fail_delay.3.xml: New.
- * doc/man/pam_fail_delay.3: New, generated from xml.
- * doc/man/pam_prompt.3.xml: New.
- * doc/man/pam_prompt.3: New, generated from xml.
- * doc/man/pam_syslog.3.xml: New.
- * doc/man/pam_syslog.3: New, generated from xml.
- * doc/man/pam_vprompt.3: New, generated from xml.
- * doc/man/pam_vsyslog.3: New, generated from xml.
-
-2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/km.po: Update Khmer translation.
-
-2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
- version from #1425487.
- * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
- * modules/pam_succeed_if/Makefile.am: Include XML rules.
- * modules/pam_succeed_if/README.xml: New.
- * modules/pam_succeed_if/README: Regenerated from xml.
- * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
- return values.
-
-2006-02-22 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Fix check for incomplete libaudit installations
- (Patch from Ruediger Oertel <ro@suse.de>).
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
- correct last_login field [#1427401].
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
- format string for translation to allow reorder [#1428269].
- * po/*.po: Update with last pam_lastlog change.
-
-
-2006-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/man/Makefile.am: Add new manual pages.
- * doc/man/pam_end.3: Regenerated from xml file.
- * doc/man/pam_end.3.xml: Document freeing of item data.
- * doc/man/pam_get_user.3: New.
- * doc/man/pam_get_user.3.xml: New.
- * modules/pam_access/access.conf.5.xml: Fix typos.
- * modules/pam_env/Makefile.am: Add new manual pages.
- * modules/pam_env/README: Regenerate from xml file.
- * modules/pam_env/README.xml: New.
- * modules/pam_env/pam_env.8: New.
- * modules/pam_env/pam_env.8.xml: New.
- * modules/pam_env/pam_env.conf.5: New.
- * modules/pam_env/pam_env.conf.5.xml New.
-
-2006-02-14 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/fi.po: Updated translations.
- * po/pl.po: Likewise.
- * po/km.po: New translation.
- * configure.in: Add km as new language.
-
-2006-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_echo/pam_echo.8.xml: New.
- * modules/pam_echo/pam_echo.8: Regenerated from xml file.
- * modules/pam_echo/Makefile.am: Include Make.xml.rules.
- * modules/pam_echo/pam_echo.c: Fix return value.
-
- * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
-
-2006-02-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Add doc/man/Makefile.
- * Make.xml.rules: Enable xincludes for manual pages.
- * doc/Makefile.am (EXRA_DIST): Remove manual pages.
- (SUBDIR): Add man subdirectory.
- * doc/man/Makefile.am: New.
- * doc/man/pam_acct_mgmt.3: New.
- * doc/man/pam_acct_mgmt.3.xml: New.
- * doc/man/pam_get_data.3: New.
- * doc/man/pam_get_data.3.xml: New.
- * doc/man/pam_set_data.3: New.
- * doc/man/pam_set_data.3.xml: New.
- * doc/man/pam.8.xml: New.
- * doc/man/pam.8: Regenerated from xml file.
- * doc/man/pam_authenticate.3.xml: New.
- * doc/man/pam_authenticate.3: Regenerated from xml file.
- * doc/man/pam_chauthtok.3.xml: New.
- * doc/man/pam_chauthtok.3: Regenerated from xml file.
- * doc/man/pam_close_session.3.xml: New.
- * doc/man/pam_close_session.3: Regenerated from xml file.
- * doc/man/pam_end.3.xml: New.
- * doc/man/pam_end.3: Regenerated from xml file.
- * doc/man/pam_fail_delay.3.xml: New.
- * doc/man/pam_fail_delay.3: Regenerated from xml file.
- * doc/man/pam_get_item.3.xml: New.
- * doc/man/pam_get_item.3: Regenerated from xml file.
- * doc/man/pam_item_types.inc.xml: New.
- * doc/man/pam_open_session.3.xml: New.
- * doc/man/pam_open_session.3: Regenerated from xml file.
- * doc/man/pam_set_item.3.xml: New.
- * doc/man/pam_set_item.3: Regenerated from xml file.
- * doc/man/pam_setcred.3.xml: New.
- * doc/man/pam_setcred.3: Regenerated from xml file.
- * doc/man/pam_start.3.xml: New.
- * doc/man/pam_start.3: Regenerated from xml file.
- * doc/man/pam_strerror.3.xml: New.
- * doc/man/pam_strerror.3: Regenerated from xml file.
- * doc/man/template-man: Removed.
-
-2006-02-10 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Remove pam_pwdb support.
- * modules/Makefile.am: remove pam_pwdb.
- * modules/pam_pwdb: Remove complete directory.
- * libpam/Makefile.am: Remove LIBPWDB references.
- * libpam/pam_static_modules.h: Remove pam_pwdb references.
- * doc/modules/pam_pwdb.sgml: Removed.
- * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
- * doc/pam_source.sgml: Remove references to libpwdb.
- * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
- * doc/modules/pam_group.sgml: Likewise.
- * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
- * doc/modules/pam_userdb.sgml: Likewise.
- * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
- with pam_unix.
- * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
- * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
-
- * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
- * modules/pam_cracklib/Makefile.am: Likewise.
- * modules/pam_deny/Makefile.am: Likewise.
- * modules/pam_exec/Makefile.am: Likewise.
-
-2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Check for text browser.
- * Make.xml.rules: Add rule to generate README from README.xml.
-
- * modules/pam_access/Makefile.am: Include Make.xml.rules.
- * modules/pam_access/README: Regenerated from README.xml.
- * modules/pam_access/README.xml: New.
- * modules/pam_access/access.conf: Extended by new examples.
- * modules/pam_access/access.conf.5: New, generated from xml file.
- * modules/pam_access/access.conf.5.xml: New.
- * modules/pam_access/pam_access.8: New, generated from xml file.
- * modules/pam_access/pam_access.8.xml: New.
- * modules/pam_access/pam_access.c: Add rules for IPv6 and
- netmasks.
- Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
-
- * modules/pam_deny/Makefile.am: Include Make.xml.rules.
- * modules/pam_deny/pam_deny.8.xml: New.
- * modules/pam_deny/pam_deny.8: New, generated from xml file.
- * modules/pam_deny/README.xml: New.
- * modules/pam_deny/README: Regenerated from xml file.
-
- * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
- * modules/pam_cracklib/pam_cracklib.8.xml: New.
- * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
- * modules/pam_cracklib/README.xml: New.
- * modules/pam_cracklib/README: Regenerated from xml file.
-
- * modules/pam_exec/Makefile.am: Add rule to generate README.
- * modules/pam_exec/README: Regenerated from xml file.
- * modules/pam_exec/pam_exec.8: Regenerated from xml file.
- * modules/pam_exec/pam_exec.8.xml: Syntax files.
-
-2006-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/nl.po: New.
- * po/pt.po: Update translations.
- * configure.in: Add nl as new language.
-
-2006-01-30 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
- * modules/pam_exec/Makefile.am: Include Make.xml.rules.
-
- * Make.xml.rules: New.
-
- * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
-
-2006-01-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Prefer libdb over libndbm, fix check for
- libcrack and remove not needed BACKUP_LIBS.
-
-2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
-
- * po/de.po: Fix one translation.
-
- * configure.in: Add modules/pam_exec.
- * modules/Makefile.am: Add pam_exec subdirectory.
- * modules/pam_exec/README: New.
- * modules/pam_exec/Makefile.am: New.
- * modules/pam_exec/pam_exec.8: New.
- * modules/pam_exec/pam_exec.c: New.
- * modules/pam_exec/pam_exec.8.xml: New.
- * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
- * po/*.po: Merge new pam_exec strings.
-
- * libpam/pam_static_modules.h: New.
- * Makefile.am: Reorder subdirectories for static modules.
- * configure.in: Add --enable-static-modules option.
- * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
- necessary, add pam_static_modules.h, link against all PAM
- module object files if STATIC_MODULES is defined.
- * libpam/pam_static.c: Remove old _static_module* includes,
- include pam_static_modules.h.
-
- * configure.in: Add checks for xsltproc, xmllint and docbook
- xsl stylesheet.
- * m4/jh_path_xml_catalog.m4: New.
-
-2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_succeed_if/pam_succeed_if.c: Add support for
- static modules.
- * modules/pam_xauth/pam_xauth.c: Likewise.
-
- * libpam/pam_static.c (_pam_open_static_handler): Add pamh
- as argument.
- * libpam/pam_private.h: Adjust prototype.
- * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
- _pam_open_static_handler call.
-
- * configure.in: Don't define PAM_DYNAMIC.
- * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
- include pam_dynamic.h
- * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
- exclude functions if we compile with PAM_STATIC.
- * libpam/pam_dynamic.h: Remove.
- * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
- * libpam/Makefile.am: Bump version number of libpam, remove
- pam_dynamic.h.
-
-2006-01-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_listfile/pam_listfile.c: Add support for session
- and password management.
-
-2006-01-19 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * doc/specs/Makefile.am (spec): Add padout to fix parallel
- build (Reported by Andreas Haumer <andreas@xss.co.at>).
-
-2006-01-15 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
- already defined.
-
-2006-01-13 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.3.0
-
- * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
- error.
-
- * modules/pam_umask/pam_umask.c (search_key): Don't ignore
- EOF/error return value from fgets().
-
- * configure.in: Check for getline and getdelim
-
- * po/fi.po: Add new translations.
- * po/de.po: Likewise.
- * po/es.po: Likewise.
- * po/fr.po: Likewise.
- * po/it.po: Likewise.
- * po/ja.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/zh_CH.po: Likewise.
- * po/zh_TW.po: Likewise.
-
-2006-01-13 Dmitry V. Levin <ldv@altlinux.org>
-
- * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
- call with %m specifier.
-
-2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * configure.in: Add check for -fpie/-pie
- * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
- upperLOWER with -fpie/-pie if supported.
- * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
- with -fpie/-pie if supported.
-
-2006-01-12 Steve Grubb <sgrubb@redhat.com>
-
- * configure.in: Add check for audit library.
- * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
- (libpam_la_SOURCES): Add pam_audit.c.
- * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
- * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
- * libpam/pam_password.c (pam_chauthtok): Likewise.
- * libpam/pam_session.c (pam_open_session),
- (pam_close_session): Likewise.
- * libpam/pam_private.h: Add audit_state member to pam_handle,
- declare _pam_auditlog and _pam_audit_end.
- * libpam/pam_start.c (pam_start): Initialize audit_state.
- * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
- implementation.
- * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
- * NEWS: Note about added auditing.
-
-2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
-
- * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
- if we compile libpam itself.
-
- * po/hu.po: Update with new translations.
-
-2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
- instead of PAM_AUTHTOK_RECOVER_ERR.
- * modules/pam_pwdb/support.-c: Likewise.
- * modules/pam_unix/support.c: Likewise.
- * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
- * libpam/pam_strerror.c (pam_strerror): Likewise.
-
- * libpam/include/security/_pam_compat.h: Define
- PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
-
- * libpam/include/security/_pam_types.h: Rename
- PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
-
-2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/include/security/_pam_types.h: Remove nonnull attribute
- from third paramter (item) of pam_get_item.
- * libpam/Makefile.am: Bump version number of shared library.
-
-2005-12-21 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
- (evaluate_notingroup): Simplified.
- (evaluate_innetgr), (evaluate_notinnetgr): New functions.
- (evaluate): Added calls to evaluate_(not)innetgr().
- * modules/pam_succeed_if/README: Documented netgroup matching.
- * NEWS: Mentioned the added netgroup matching support.
-
-2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
- strftime instead of ctime.
-
- * po/de.po: Fix typo.
-
-2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
- Reported by Charles_H_Bedford@nbc.gov.
-
- * modules/pam_time/pam_time.c (check_account): Implement
- support for netgroups.
-
- * modules/pam_time/time.conf: Document usage of netgroups.
-
-2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_group/pam_group.c (check_account): Implement
- support for netgroups.
-
- * modules/pam_group/group.conf: Add all documentation to this
- example config file and don't reference to outdated configs.
-
- * modules/pam_group/README: New.
-
- * modules/pam_group/Makefile.am: Add README to EXTRADIST.
-
-2005-12-15 Thorsten Kukuk <kukuk@suse.de>
-
- * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
- error if user logins the first time.
-
- * modules/pam_lastlog/README: New.
-
- * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
-
-2005-12-14 Thorsten Kukuk <kukuk@suse.de>
-
- * modules/pam_deny/pam_deny.c: Fix comment.
-
- * doc/pam_appl.sgml: Fix typo.
-
- Reported by Russell Bateman <russ@windofkeltia.com>
-
-2005-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.2.1
-
- * po/de.po: Remove new fuzzy entry
-
- * NEWS: Add 0.99.2.1 changes
-
- * configure.in: bump version number to 0.99.2.1
-
-2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
-
- Cleanup pam_syslog messages.
-
- * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
- * modules/pam_filter/pam_filter.c (set_filter): Append %m
- specifier to pam_syslog messages where appropriate.
- * modules/pam_group/pam_group.c (read_field): Likewise.
- * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
- (create_homedir): Do not use make_remark() wrapper, call
- pam_info() directly. Call pam_syslog() right after failed
- operation and append %m specifier to pam_syslog messages where
- appropriate.
- * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
- sequence of malloc(), strcpy() and strcat() calls with asprintf().
- Append %m specifier to pam_syslog messages where appropriate.
- * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
- Append %m specifier to pam_syslog messages where appropriate.
- * modules/pam_shells/pam_shells.c (perform_check): Likewise.
-
-2005-12-12 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
- * po/Linux-PAM.pot: Likewise.
- * po/de.po: Likewise.
- * po/es.po: Likewise.
- * po/fi.po: Likewise.
- * po/fr.po: Likewise.
- * po/hu.po: Likewise.
- * po/it.po: Likewise.
- * po/ja.po: Likewise.
- * po/nb.po: Likewise.
- * po/pa.po: Likewise.
- * po/pl.po: Likewise.
- * po/pt.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/zh_CN.po: Likewise.
- * po/zh_TW.po: Likewise.
- * po/de.po: Add new translation, fixed typo in string.
-
-2005-12-12 Mike Becher <Mike.Becher@lrz-muenchen.de>
-
- * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
-
-2005-12-12 Thorsten Kukuk <kukuk@suse.de>
-
- * modules/pam_mail/README: Document "quiet" and "standard"
- options.
-
-2005-12-07 Thorsten Kukuk <kukuk@suse.de>
-
- * modules/pam_mail/pam_mail.c: Modify assembling of output
- for easier translation.
-
- * po/de.po: Translate new pam_mail messages.
-
-
-2005-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * po/de.po: Add new translation, fix wrong format specifier.
- * po/cs.po: Fix wrong format specifier.
- * po/es.po: Likewise.
- * po/fi.po: Likewise.
- * po/fr.po: Likewise.
- * po/hu.po: Likewise.
- * po/it.po: Likewise.
- * po/ja.po: Likewise.
- * po/nb.po: Likewise.
- * po/pa.po: Likewise.
- * po/pl.po: Likewise.
- * po/pt.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/zh_CN.po: Likewise.
- * po/zh_TW.po: Likewise.
-
-2005-11-24 Dmitry V. Levin <ldv@altlinux.org>
-
- * config.h.in: Remove generated file.
- * .cvsignore: Add config.h.in.
-
- * configure.in: Do not check for strerror.
- * libpam_misc/misc_conv.c (read_string): Replace strerror()
- call with %m specifier.
- * libpamc/pamc_converse.c (pamc_converse): Likewise.
- * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
- * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
- Likewise.
- * modules/pam_selinux/pam_selinux.c (security_label_tty):
- Likewise.
- (security_restorelabel_tty, security_label_tty): Append %m
- specifier where appropriate.
- * modules/pam_selinux/pam_selinux_check.c (main): Replace
- strerror() call with %m specifier.
- * modules/pam_unix/pam_unix_passwd.c (save_old_password,
- _update_passwd, _update_shadow): Likewise.
- * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
- * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
- * po/Linux-PAM.pot: Update strings from pam_selinux.
- * po/cs.po: Likewise.
- * po/de.po: Likewise.
- * po/es.po: Likewise.
- * po/fi.po: Likewise.
- * po/fr.po: Likewise.
- * po/hu.po: Likewise.
- * po/it.po: Likewise.
- * po/ja.po: Likewise.
- * po/nb.po: Likewise.
- * po/pa.po: Likewise.
- * po/pl.po: Likewise.
- * po/pt.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/zh_CN.po: Likewise.
- * po/zh_TW.po: Likewise.
-
-2005-11-23 Thorsten Kukuk <kukuk@suse.de>
-
- * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
- new variable to fix compiler warning.
-
- * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
- don't need to start with /dev/.
-
-2005-11-21 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release version 0.99.2.0
-
- * libpam_misc/Makefile.am: Increase release number (for change
- from 2005-11-09)
-
- * NEWS: Adjust for 0.99.2.0
-
-2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
- Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
-
-2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * libpam/pam_handlers.c: Replace code for all dlopen variants with
- a generic wrapper.
- * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
- * libpam/pam_dynamic.h: Provide prototypes.
- For Mac OS X support [#534205]
-
-2005-11-09 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
- full path tty name.
- * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
- full path tty name. Allow unset tty.
- (logic_member): Allow matching ':' in tty name.
- * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
- full path tty name. Allow unset tty.
- (logic_member): Allow matching ':' in tty name.
-
- * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
- is not terminal.
-
-2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
- correct variable names.
-
-2005-11-06 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_env/pam_env.c: don't treat a missing
- /etc/environment as a fatal error when attempting to read it,
- and try to read this file by default; this restores the behavior
- from Linux-PAM 0.76.
-
-2005-11-02 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
- by ohyajapn.
-
- * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
- logic when comparing dates to handle corner cases better [#1245888].
-
-2005-10-31 Thorsten Kukuk <kukuk@suse.de>
-
- * modules/pam_filter/pam_filter.c: Use XCASE only if defined
- [#624214]
-
-2005-10-27 Thorsten Kukuk <kukuk@suse.de>
-
- * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
-
-2005-10-26 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
- modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
- modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
- uid to 0 before executing the helper if SELinux is enabled.
- * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
- if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
-
-
-2005-10-20 Tomas Mraz <t8m@centrum.cz>
-
- * configure.in: Added check for xauth binary and --with-xauth option.
- * config.h.in: Added configurable PAM_PATH_XAUTH.
- * modules/pam_xauth/README,
- modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
- * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
- searching xauth binary on multiple places.
- (run_coprocess): Don't use execvp as it can be a security risk.
-
-2005-10-04 Steve Langasek <vorlon@debian.org>
-
- * libpam/include/security/pam_malloc.h,
- libpam/include/security/pam_modules.h: Declare public header
- files extern "C" so that they are C++-safe.
-
-2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
- Steve Langasek <vorlon@debian.org>
-
- Cleanup gratuitous use of strdup().
- Fix "missing argument" checks.
-
- * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
- to conffile and envfile arguments. Do not use x_strdup() for
- conffile and envfile initialization. Fix "missing argument"
- checks.
- (_parse_config_file): Take conffile argument of type "const char *"
- instead of "char **". Do not free conffile.
- (_parse_env_file): Take env_file argument of type "const char *"
- instead of "char **". Do not free env_file.
- (pam_sm_setcred): Add const qualifier to conf_file and env_file.
- Pass conf_file and env_file to _parse_config_file() and
- _parse_env_file() by value.
- (pam_sm_open_session): Likewise.
-
- * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
- users argument. Do not use x_strdup() for users initialization.
- (lookup): Add const qualifier to list argument.
- (pam_sm_authenticate): Add const qualifier to users argument.
-
- * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
- to maildir argument. Do not use x_strdup() for maildir
- initialization. Fix "missing argument" check.
- (get_folder): Take path_mail argument of type "const char *"
- instead of "char **". Do not free path_mail.
- (_do_mail): Add const qualifier to path_mail argument.
- Pass path_mail to get_folder() by value.
-
- * modules/pam_motd/pam_motd.c: Include <syslog.h>.
- (pam_sm_open_session): Add const qualifier to motd_path.
- Do not use x_strdup() for motd_path initialization. Do not
- free motd_path. Fix "missing argument" check. Add "unknown
- option" warning.
-
- * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
- qualifier to database and cryptmode arguments. Fix "missing
- argument" checks.
- (pam_sm_authenticate): Add const qualifier to database and cryptmode.
- (pam_sm_acct_mgmt): Likewise.
-
-2005-10-01 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
-
-2005-09-30 Steve Langasek <vorlon@debian.org>
-
- * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
- gratuitous use of strdup().
-
-2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
-
- * release 0.99.1.0
-
- * doc/specs/Makefile.am (install-data-local): Install
- rfc and draft.
- (all): Copy rfc if we build outside of source directory.
-
-2005-09-27 Thorsten Kukuk <kukuk@suse.de>
-
- * NEWS: Document removal of pam_radius.
- * autogen.sh: Make configure script executeable.
-
- * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
- (lex.yy.c): Fixed out of tree build.
-
- * conv/pam_conv1/pam_conv.y: Fix main prototype.
-
- * README: Adjust.
-
- * po/POTFILES.in: Remove files not distributed by tar archive
- and not containing strings for translation.
-
-2005-09-26 Tomas Mraz <t8m@centrum.cz>
-
- * NEWS: Add a few missing entries from CHANGELOG.
-
- * AUTHORS: Fixed entries for Toady and me.
-
- * Makefile.am (M4_FILES): Fixed out of tree build.
- * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
- (spec, lex.yy.c): Fixed out of tree build.
-
- * modules/pam_userdb/README: Document try_first_pass and
- use_first_pass options, remove use_authtok option.
-
-
-2005-09-26 Dmitry V. Levin <ldv@altlinux.org>
-
- * NEWS: Mention changes in pam_lastlog.
-
-2005-09-26 Thorsten Kukuk <kukuk@suse.de>
-
- * NEWS: New file.
- * autogen.sh: Don't generate NEWS file.
- * CHANGELOG: Document it as obsolete.
-
-2005-09-26 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
- _log_err() -> pam_syslog()
- (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
- * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
- _log_err() -> pam_syslog()
- * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
- (getNISserver, _unix_run_shadow_binary, _update_passwd,
- _update_shadow, _do_setpass, _pam_unix_approve_pass,
- pam_sm_chauthtok): _log_err() -> pam_syslog()
- * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
- (pam_sm_open_session, pam_sm_close_session):
- _log_err() -> pam_syslog()
- * modules/pam_unix/support.c (_log_err, converse): removed
- (_make_remark): use pam_prompt() instead of converse()
- (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
- _unix_verify_password, _unix_read_password):
- _log_err() -> pam_syslog()
- _cleanup(), _unix_cleanup(): Silence unused param warnings.
- (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
- _unix_run_helper_binary): Silence incorrect type warnings.
- (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
- instead of converse().
- * modules/pam_unix/support.h (_log_err): removed
- * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
-
-2005-09-26 Thorsten Kukuk <kukuk@suse.de>
-
- * configure.in: Add doc/specs/Makefile.
- * Makefile.am: Add releasedocs rule.
- * doc/Makefile.am: Add specs subdir, remove files from specs
- directory, add rfc86.0.txt to releasedocs.
- * doc/specs/Makefile.am: New file.
- * doc/specs/formatter/parse.y: move from here ...
- * doc/specs/parse.y: ... here.
- * doc/specs/formatter/parse.lex: move from here ...
- * doc/specs/parse.lex: ... here.
-
- * modules/pam_mail/pam_mail.c: Mark missing strings for translation
- * po/Linux-PAM.pot: Add new strings from pam_mail
- * po/cs.po: Likewise.
- * po/de.po: Likewise.
- * po/es.po: Likewise.
- * po/fi.po: Likewise.
- * po/fr.po: Likewise.
- * po/hu.po: Likewise.
- * po/it.po: Likewise.
- * po/ja.po: Likewise.
- * po/nb.po: Likewise.
- * po/pa.po: Likewise.
- * po/pl.po: Likewise.
- * po/pt.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/zh_CN.po: Likewise.
- * po/zh_TW.po: Likewise.
-
-2005-09-23 Tomas Mraz <t8m@centrum.cz>
-
- * modules/pam_access/pam_access.c (from_match): Support NULL from.
- (string_match): Support NULL string, add NONE keyword matching it.
- (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
- * modules/pam_access/access.conf: NONE keyword description
- * modules/pam_access/README: NONE keyword description
-
-2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
- pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
- text of log messages.
- (pam_sm_open_session): Replace sequence of malloc(), strcpy()
- and strcat() calls with asprintf(). Replace syslog() calls
- with pam_syslog().
-
- * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
- instead of memcmp() for string comparison.
-
-2005-09-21 Dmitry V. Levin <ldv@altlinux.org>
-
- * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
- (parse_args): Add pam_handle_t* argument. Log unrecognized
- options.
- (perform_check): Log pam_get_user() and malloc() failures.
- (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
- Pass pam_handle_t* to parse_args().
-
- * modules/pam_mail/pam_mail.c: Include <errno.h>.
- Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
- NO_MAIL_STANDARD_FORMAT macros.
- (parse_args, get_folder): Cleanup error messages.
- (get_folder): Fix leak of the path_mail variable in case of
- pam_get_user() failure. Cleanup memory management.
- (get_mail_status): Add pam_handle_t* argument. Fix leaks of
- namelist variable. Cleanup memory management. Log memory
- allocation failures. Remove 250-byte limit on Maildir pathname.
- (report_mail): Mark text messages for translation.
- (_do_mail): Cleanup memory management. Pass pam_handle_t*
- to get_mail_status().
-
- * po/Linux-PAM.pot: Update with new strings from pam_mail for
- translation.
- * po/cs.po: Likewise.
- * po/de.po: Likewise.
- * po/es.po: Likewise.
- * po/fi.po: Likewise.
- * po/fr.po: Likewise.
- * po/hu.po: Likewise.
- * po/it.po: Likewise.
- * po/ja.po: Likewise.
- * po/nb.po: Likewise.
- * po/pa.po: Likewise.
- * po/pl.po: Likewise.
- * po/pt.po: Likewise.
- * po/pt_BR.po: Likewise.
- * po/zh_CN.po: Likewise.
- * po/zh_TW.po: Likewise.
-
-2005-09-20 Thorsten Kukuk <kukuk@suse.de>
-
- * configure.in: Add finish translation.
- * po/fi.po: New.
-
- * acinclude.m4: remove libprelude macros.
- * m4/libprelude.m4: New.
-
- * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
-
- * libpamc/Makefile.am (EXTRA_DIST): Add License.
-
-See CHANGELOG for earlier changes.
+ * modules/pam_warn/Makefile.am: Split out pam_warn_la_LIBADD from
+ AM_LDFLAGS.
+ * modules/pam_wheel/Makefile.am: Split out pam_wheel_la_LIBADD from
+ AM_LDFLAGS.
+ * modules/pam_xauth/Makefile.am: split out pam_xauth_la_LIBADD from
+ AM_LDFLAGS.
+ * xtests/Makefile.am: Rename AM_LDFLAGS to LDADD.
+
+2011-10-27 Dmitry V. Levin <ldv@altlinux.org>
+
+ Update .gitignore files.
+ * .gitignore: Add common ignore patterns.
+ * m4/.gitignore: Unignore local m4 files.
+ * dynamic/.gitignore: Unignore Makefile.
+ * libpamc/test/modules/.gitignore: Likewise.
+ * libpamc/test/regress/.gitignore: Likewise.
+ * po/.gitignore: Add Makevars.template.
+ * conf/.gitignore: Remove common ignore patterns.
+ * conf/pam_conv1/.gitignore: Likewise.
+ * doc/.gitignore: Likewise.
+ * doc/specs/.gitignore: Likewise.
+ * doc/specs/formatter/.gitignore: Likewise.
+ * examples/.gitignore: Likewise.
+ * modules/pam_filter/upperLOWER/.gitignore: Likewise.
+ * modules/pam_mkhomedir/.gitignore: Likewise.
+ * modules/pam_selinux/.gitignore: Likewise.
+ * modules/pam_stress/.gitignore: Likewise.
+ * modules/pam_tally/.gitignore: Likewise.
+ * modules/pam_tally2/.gitignore: Likewise.
+ * modules/pam_timestamp/.gitignore: Likewise.
+ * modules/pam_unix/.gitignore: Likewise.
+ * tests/.gitignore: Likewise.
+ * xtests/.gitignore: Likewise.
+ * doc/adg/.gitignore: Remove.
+ * doc/man/.gitignore: Remove.
+ * doc/mwg/.gitignore: Remove.
+ * doc/sag/.gitignore: Remove.
+ * libpamc/.gitignore: Remove.
+ * libpamc/test/.gitignore: Remove.
+ * libpam/.gitignore: Remove.
+ * libpam_misc/.gitignore: Remove.
+ * modules/.gitignore: Remove.
+ * modules/pam_access/.gitignore: Remove.
+ * modules/pam_cracklib/.gitignore: Remove.
+ * modules/pam_debug/.gitignore: Remove.
+ * modules/pam_deny/.gitignore: Remove.
+ * modules/pam_echo/.gitignore: Remove.
+ * modules/pam_env/.gitignore: Remove.
+ * modules/pam_exec/.gitignore: Remove.
+ * modules/pam_faildelay/.gitignore: Remove.
+ * modules/pam_filter/.gitignore: Remove.
+ * modules/pam_ftp/.gitignore: Remove.
+ * modules/pam_group/.gitignore: Remove.
+ * modules/pam_issue/.gitignore: Remove.
+ * modules/pam_keyinit/.gitignore: Remove.
+ * modules/pam_lastlog/.gitignore: Remove.
+ * modules/pam_limits/.gitignore: Remove.
+ * modules/pam_listfile/.gitignore: Remove.
+ * modules/pam_localuser/.gitignore: Remove.
+ * modules/pam_loginuid/.gitignore: Remove.
+ * modules/pam_mail/.gitignore: Remove.
+ * modules/pam_motd/.gitignore: Remove.
+ * modules/pam_namespace/.gitignore: Remove.
+ * modules/pam_nologin/.gitignore: Remove.
+ * modules/pam_permit/.gitignore: Remove.
+ * modules/pam_pwhistory/.gitignore: Remove.
+ * modules/pam_rhosts/.gitignore: Remove.
+ * modules/pam_rootok/.gitignore: Remove.
+ * modules/pam_securetty/.gitignore: Remove.
+ * modules/pam_sepermit/.gitignore: Remove.
+ * modules/pam_shells/.gitignore: Remove.
+ * modules/pam_succeed_if/.gitignore: Remove.
+ * modules/pam_time/.gitignore: Remove.
+ * modules/pam_tty_audit/.gitignore: Remove.
+ * modules/pam_umask/.gitignore: Remove.
+ * modules/pam_userdb/.gitignore: Remove.
+ * modules/pam_warn/.gitignore: Remove.
+ * modules/pam_wheel/.gitignore: Remove.
+ * modules/pam_xauth/.gitignore: Remove.
+
+ Move generated auxiliary files to build-aux directory.
+ * configure.in: Add AC_CONFIG_AUX_DIR([build-aux]).
+
+ Remove generated files.
+ * ABOUT-NLS: Remove.
+ * INSTALL: Remove.
+ * config.rpath: Remove.
+ * install-sh: Remove.
+ * mkinstalldirs: Remove.
+ * Makefile.am (EXTRA_DIST): Remove config.rpath and mkinstalldirs.
+ * .gitignore: Add ABOUT-NLS and INSTALL.
+
+ Create release tarballs using safe ownership and permissions.
+ * Makefile.am: Define and export TAR_OPTIONS.
+
+ Generate ChangeLog from git log.
+ * .gitignore: Add ChangeLog
+ * ChangeLog: Rename to ChangeLog-CVS.
+ * Makefile.am (gen-changelog): New rule.
+ (dist-hook, .PHONY): Depend on it.
+ (EXTRA_DIST): Add ChangeLog-CVS.
+ * README-hacking: New file.
+ * gitlog-to-changelog: Import from gnulib.
+ * autogen.sh: Create empty ChangeLog file to make automake strictness
+ check happy. Use automated "autoreconf -fiv" instead of manual
+ invocations of various autotools.
+
+ Fix "make distcheck"
+ There is no use to distribute m4 files manually, because automake does
+ the right thing, while manual distribution is not only redundant but
+ also very fragile.
+ * Makefile.am (M4_FILES): Remove.
+ (EXTRA_DIST): Remove M4_FILES.
+
+ Remove modules/pam_timestamp/hmacfile from distribution.
+ * modules/pam_timestamp/Makefile.am (dist_TESTS): Add tst-pam_timestamp.
+ (nodist_TESTS): Add hmacfile.
+ (EXTRA_DIST): Replace TESTS with dist_TESTS.
+
+ Rename all .cvsignore files to .gitignore.
+
+ Fix whitespace issues.
+ Cleanup trailing whitespaces, indentation that uses spaces before tabs,
+ and blank lines at EOF. Make the project free of warnings reported by
+ git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904 HEAD
+
+
+See ChangeLog-CVS for earlier changes.
diff --git a/ChangeLog-CVS b/ChangeLog-CVS
new file mode 100644
index 00000000..47b54cea
--- /dev/null
+++ b/ChangeLog-CVS
@@ -0,0 +1,5099 @@
+2011-10-26 Dmitry V. Levin <ldv@altlinux.org>
+
+ NB: ChangeLog file is no longer manually maintained.
+ See README-hacking for details.
+
+2011-10-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.1.5
+
+ * configure.in: Bump version number.
+
+ * modules/pam_tally2/pam_tally2.8.xml: Remove never used option
+ "no_lock_time".
+
+2011-10-14 Kees Cook <kees@debian.org>
+
+ * modules/pam_env/pam_env.c (_expand_arg): Abort when encountering an
+ overflowed environment variable expansion.
+ Fixes CVE-2011-3149.
+ Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874565
+
+ * modules/pam_env/pam_env.c (_assemble_line): Correctly count leading
+ whitespace.
+ Fixes CVE-2011-3148.
+ Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874469
+
+2011-10-10 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_access/pam_access.c: Add hostname resolution
+ cache.
+ (user_match): Clear the cache in fake_item.
+ (from_match): If from is not hostname, do not try to resolve it.
+ Cache the getaddrinfo() result.
+ (network_netmask_match): Cache the getaddrinfo() result.
+ (pam_sm_authenticate): Free the getaddrinfo() result.
+
+ * modules/pam_access/pam_access.c (netgroup_match): If getdomainname()
+ fails or domainname not set use NULL as domain in innetgr().
+
+2011-09-30 Tomas Mraz <tm@t8m.info>
+
+ * doc/man/pam.conf-syntax.xml: Improve documentation of the
+ sufficient and requisite control values. (Red Hat Bug #742413)
+
+2011-08-25 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_access/pam_access.c (user_match): Fix the split
+ on @ in the user field. (Red Hat Bug #732081)
+
+ * modules/pam_loginuid/pam_loginuid.c: Correct the FSF address.
+
+2011-08-23 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_env/pam_env.c (_pam_parse): Fix missing dereference.
+
+2011-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.1.4
+
+ * configure.in: Bump version number.
+ * NEWS: Document changes since 1.1.3
+ * libpam/Makefile.am: Bump release number of shared library
+ * po/de.po: Translate new string.
+
+ * modules/pam_unix/Makefile.am (pam_unix_la_LIBADD): Reorder
+ Libraries.
+
+2011-06-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_limits/pam_limits.c: Add set_all option,
+ read limits from PID one if no limit is specified and set_all
+ is set.
+ * modules/pam_limits/pam_limits.8.xml: Document set_all option.
+ Based on Patch by Kees Cook.
+
+2011-06-15 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_sepermit/pam_sepermit.c (check_running): Avoid
+ leaking memory and dir handle on realloc failure.
+ (sepermit_unlock): Cast fcntl() and close() calls to void.
+
+ * modules/pam_pwhistory/opasswd.c (check_old_password): Do not
+ needlessly call strdupa().
+ (save_old_password): Avoid memleaks in error paths. Avoid memleak of
+ buf. Make the opasswd entry parsing more robust.
+ * modules/pam_pwhistory/pam_pwhistory.8.xml: Document the
+ special meaning of remember=0.
+
+ * modules/pam_unix/support.c (_set_ctrl): Do not crash when remember,
+ minlen, or rounds options are used with wrong module type.
+
+ * modules/pam_timestamp/pam_timestamp.c (pam_sm_authenticate): Avoid
+ memleak in error path.
+ (pam_sm_open_session): Avoid memleak and fd leak in error path.
+
+ * modules/pam_access/pam_access.c (user_match): Initialize the
+ fake_item from item.
+
+2011-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Check for libtirpc by default.
+ * libpam/Makefile.am: Add support for libtirpc.
+ * modules/pam_access/Makefile.am: Likewise.
+ * modules/pam_unix/Makefile.am: Likewise.
+ * modules/pam_unix/pam_unix_passwd.c: Change ifdefs for
+ new libtirpc support.
+ * modules/pam_unix/yppasswd_xdr.c: Only compile if we have rpc/rpc.h.
+
+2011-06-13 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_securetty/pam_securetty.c (securetty_perform_check): Test
+ also whether the tty is in the /sys/class/tty/console/active file.
+ * modules/pam_securetty/pam_securetty.8.xml: Document the new check of
+ /sys/class/tty/console/active/file.
+
+2011-06-07 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_namespace/pam_namespace.c (root_shared): New
+ function to detect shared / mount.
+ (pam_sm_open_session): Call the root_shared() and enable
+ private mounts based on that.
+ * modules/pam_namespace/pam_namespace.8.xml: Document the
+ automatic detection of shared / mount.
+
+2011-06-06 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_group/pam_group.c (shift_bytes): Removed.
+ (shift_buf, trim_spaces): Added new functions.
+ (read_field): Thorough rewrite of the parsing.
+ (check_account): read_field() now uses state information. No
+ extra read_field() call at the end of configuration line.
+ * modules/pam_time/pam_time.c (shift_bytes): Removed.
+ (shift_buf, trim_spaces): Added new functions.
+ (read_field): Thorough rewrite of the parsing.
+ (check_account): read_field() now uses state information. No
+ extra read_field() call at the end of configuration line.
+
+ * modules/pam_namespace/pam_namespace.h: Define the MS_PRIVATE and
+ MS_REC flags if they are not in sys/mount.h.
+
+2011-06-06 Nguyễn Thái Ngọc Duy <pclouds@gmail.com>
+
+ * po/LINGUAS: Add vietnamese.
+ * po/vi.po: Add vietnamese translation.
+
+2011-06-02 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_namespace/pam_namespace.c (protect_dir): Add parameter
+ to always do protect mount the last directory in the path.
+ (check_inst_parent, create_polydir): Update the protect_dir() call.
+ (ns_setup): Likewise and add the MS_PRIVATE mount() call.
+ (pam_sm_open_session): Check the mount_private option.
+ * modules/pam_namespace/pam_namespace.h: Add the PAMNS_MOUNT_PRIVATE.
+ * modules/pam_namespace/pam_namespace.8.xml: Document the mount_private
+ option.
+
+ * modules/pam_cracklib/pam_cracklib.c (str_lower): Make it no-op
+ on NULL strings.
+ (password_check): Guard for NULLs returned from memory allocation.
+
+ * modules/pam_filter/pam_filter.c (process_args): Guard for error return
+ from pam_get_user().
+
+ * modules/pam_echo/pam_echo.c (replace_and_print): Guard for error return
+ from pam_get_item().
+
+2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_timestamp/pam_timestamp.c (main): Remove unsused
+ variable pretval.
+
+ * modules/pam_stress/pam_stress.c (converse): **message is const.
+ (stress_get_password): pmsg is const.
+ (pam_sm_chauthtok): Likewise.
+ * libpam/pam_item.c (pam_get_user): Make pmsg const and remove
+ casts.
+
+2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_env/pam_env.c (_pam_parse): Implement debug option.
+ Based on patch by Tomas Mraz.
+
+2011-05-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): quiet
+ option has no argument, print no missing file if quiet is set
+ [sf#3194930].
+
+2011-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Don't
+ abort with error if btmp file does not exist.
+
+2011-03-21 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_unix/md5.c (MD5Final): Clear the whole ctx.
+
+2011-03-18 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_namespace/md5.c (MD5Final): Clear the whole ctx.
+ * modules/pam_namespace/pam_namespace.c (del_polydir): Guard for NULL poly.
+ (protect_dir): Guard for -1 passing to close().
+ (ns_setup): Likewise.
+ (pam_sm_open_session): Correctly test for SELinux enabled flag.
+
+2011-03-17 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_selinux/pam_selinux.c (config_context): Fix leak of type.
+ (manual_context): Likewise.
+ (context_from_env): Remove extraneous auditing in success case.
+
+ * modules/pam_unix/support.c (_unix_run_helper_binary): Remove extra
+ close() call.
+
+2011-02-22 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_nologin/pam_nologin.8.xml: Add missing space.
+ * modules/pam_limits/limits.conf.5.xml: Fix typo.
+
+2010-12-21 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_selinux/pam_selinux.c (mls_range_allowed): Unhardcode
+ values for security class and av permission bit.
+
+2010-12-14 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_limits/pam_limits.c (parse_uid_range): New function
+ to parse the range of uids or gids.
+ (parse_config_file): Call parse_uid_range() and if uid/gid range
+ is identified, setup the limits if the range matches. New parameters
+ containing user's uid and primary gid.
+ (pam_sm_open_session): Pass the user's uid and primary gid to
+ parse_config_file().
+ * modules/pam_limits/limits.conf.5.xml: Document the uid/gid ranges.
+
+2010-12-14 Bahadır Kandemir <bahadir@pardus.org.tr>
+
+ * po/tr.po: Updated translations.
+
+2010-11-25 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_securetty/pam_securetty.8.xml: Improve documentation
+ of the kernel console feature and the noconsole option.
+
+2010-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_securetty/pam_securetty.c: Parse console= kernel
+ option, add noconsole option.
+ * modules/pam_securetty/pam_securetty.8.xml: Document new behavior
+ for serial console.
+ Patch from Lennart Poettering.
+
+2010-11-24 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_limits/limits.conf.5.xml: Document the %group syntax.
+
+2010-11-18 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_limits/pam_limits.c (pam_parse,pam_sm_open_session):
+ Drop obsolete and broken option change_uid.
+ * modules/pam_limits/pam_limits.8.xml: Likewise.
+
+2010-11-16 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Remove
+ dead and duplicate code. Return PAM_INCOMPLETE instead of
+ PAM_CONV_AGAIN.
+
+2010-11-11 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Fix
+ potential use after free in case SELinux is misconfigured.
+
+ * modules/pam_namespace/pam_namespace.c (process_line): Fix memory
+ leak when parsing empty config file lines.
+
+2010-10-28 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.1.3
+
+ * configure.in: Increase version to 1.1.3
+
+ * NEWS: document visible changes
+
+ * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
+
+2010-10-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/adg/Makefile.am: Use UTF-8 for html docu.
+ * doc/mwg/Makefile.am: Likewise.
+ * doc/sag/Makefile.am: Likewise.
+
+2010-10-22 Tomas Mraz <tm@t8m.info>
+
+ * modules/pam_namespace/pam_namespace.c (inst_init): Use execle()
+ to execute the init script with clean environment. (CVE-2010-3853)
+ (cleanup_tmpdirs): Likewise for executing rm.
+
+2010-10-21 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_mkhomedir/mkhomedir_helper.c (rec_mkdir): Remove.
+ (create_homedir): Use mkdir() instead of rec_mkdir().
+ (make_parent_dirs): New function.
+ (main): Use make_parent_dirs() to create parent directories only
+ for the home directory itself.
+
+2010-10-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/support.c (_unix_getpwnam): Don't allocate
+ unneeded buffer for uid/gid [sf#3059572].
+
+2010-10-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_get_authtok.3.xml: Fix xml code.
+
+ * doc/man/Makefile.am: Fix build dependencys of pam_get_authtok.3.
+
+ * xtests/Makefile.am: Only build xtests if we run xtests.
+ * configure.in: Check for libdb with symbol versions, too.
+ Patch from Diego Elio Pettenò.
+
+ * modules/pam_mkhomedir/mkhomedir_helper.c (rec_mkdir): Create
+ parent directories always with mode 0755.
+ (create_homedir): Create main directory with mode 0700 at first.
+
+2010-10-19 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_selinux/Makefile.am (pam_selinux_la_LIBADD): Add
+ @LIBAUDIT@.
+
+ * m4/ld-O1.m4 (PAM_LD_O1): Fix typo.
+
+ * m4/ld-no-undefined.m4: New file.
+ * configure.in: Use PAM_LD_NO_UNDEFINED.
+ * Makefile.am (M4_FILES): Add m4/ld-no-undefined.m4.
+
+ * modules/pam_selinux/pam_selinux.c (verbose_message): Remove.
+ (pam_sm_open_session): Call send_text() instead of verbose_message().
+
+2010-10-19 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_env/pam_env.8.xml: Document side effects of
+ environment variables in the stack.
+ * modules/pam_exec/pam_exec.8.xml: Document that user can
+ have controll over the environment.
+
+2010-10-07 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_selinux/pam_selinux.c (verbose_message): Fix format
+ string.
+
+2010-10-04 Dmitry V. Levin <ldv@altlinux.org>
+
+ * libpam/pam_modutil_priv.c: New file.
+ * libpam/Makefile.am (libpam_la_SOURCES): Add it.
+ * libpam/include/security/pam_modutil.h (struct pam_modutil_privs,
+ PAM_MODUTIL_DEF_PRIVS, pam_modutil_drop_priv,
+ pam_modutil_regain_priv): New declarations.
+ * libpam/libpam.map (LIBPAM_MODUTIL_1.1.3): New interface.
+ * modules/pam_env/pam_env.c (handle_env): Use new pam_modutil interface.
+ * modules/pam_mail/pam_mail.c (_do_mail): Likewise.
+ * modules/pam_xauth/pam_xauth.c (check_acl, pam_sm_open_session,
+ pam_sm_close_session): Likewise.
+ (pam_sm_open_session): Remove redundant fchown call.
+ Fixes CVE-2010-3430, CVE-2010-3431.
+
+2010-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Extend cross compiling check.
+ * doc/specs/Makefile.am: Set CFLAGS and LDFLAGS to BUILD_CFLAGS
+ and BUILD_LDFLAGS.
+ Bug #3078936 / gentoo #339174
+
+2010-09-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Warn if
+ unlink() fails.
+
+2010-09-27 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Return
+ PAM_SUCCESS immediately if no cookie file is defined. Return
+ PAM_SESSION_ERR if cookie file is defined but target uid cannot be
+ determined. Do not modify cookiefile string returned by pam_get_data.
+
+ * modules/pam_xauth/pam_xauth.c (check_acl): Ensure that the given
+ access control file is a regular file.
+
+2010-09-16 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_env/pam_env.c (handle_env): Use setfsuid() return code.
+ * modules/pam_mail/pam_mail.c (_do_mail): Likewise.
+ * modules/pam_xauth/pam_xauth.c (check_acl, pam_sm_open_session,
+ pam_sm_close_session): Likewise.
+
+2010-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.1.2
+
+ * configure.in: Bump version number.
+ * NEWS: Document changes since 1.1.1.
+ * doc/adg/Linux-PAM_ADG.xml: Bump version number.
+ * doc/mwg/Linux-PAM_MWG.xml: Likewise.
+ * doc/sag/Linux-PAM_SAG.xml: Likewise.
+ * libpam/Makefile.am: Bump revision of shared library.
+ * po/*.po: Regenerate.
+
+2010-08-26 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_nologin/pam_nologin.c (perform_check): Try first
+ /var/run/nologin if the nologin file is not explicitly specified.
+ * modules/pam_nologin/pam_nologin.8.xml: Document that /var/run/nologin
+ is tried first.
+
+2010-08-26 Sweta Kothari <swkothar@redhat.com>
+
+ * po/gu.po: Updated translations.
+
+2010-08-26 Geert Warrink <geert.warrink@onsnet.nu>
+
+ * po/nl.po: Updated translations.
+
+2010-08-26 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/specs/Makefile.am: Use CC_FOR_BUILD as compiler (cross
+ compile support).
+ * configure.in: Check for host compiler if cross compiling.
+ Bug #2315432, debian#284854#42.
+
+2010-08-17 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/pam_unix_passwd.c: Implement minlen option.
+ * modules/pam_unix/support.c: Likewise.
+ * modules/pam_unix/support.h: Likewise.
+
+ * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Adjust
+ arguments for _set_ctrl call.
+ * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
+ * modules/pam_unix/pam_unix_session.c: Likewise.
+
+ * modules/pam_unix/pam_unix.8.xml: Document minlen option.
+ Based on patch by Steve Langasek.
+
+2010-08-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_mail/pam_mail.c: Check for mail only with user
+ privilegs.
+
+ * modules/pam_xauth/pam_xauth.c (run_coprocess): Check return
+ value of setgid, setgroups and setuid.
+
+ * modules/pam_xauth/pam_xauth.c (check_acl): Save errno for
+ later usage.
+
+ * modules/pam_env/pam_env.c (handle_env): Check if user exists,
+ read local user config only with user privilegs.`
+
+2010-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_tally/pam_tally.8.xml: Document that pam_tally is
+ deprecated.
+
+ * modules/pam_tty_audit/Makefile.am (EXTRA_DIST): Fix make dist.
+
+ * modules/pam_unix/passverify.c (check_shadow_expiry): Correct
+ check for expired date.
+
+ * modules/pam_unix/pam_unix_passwd.c (_pam_unix_approve_pass): Remove
+ check for password length. Bug #2923437.
+
+2010-08-04 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_tally2/pam_tally2.c (get_tally): Create file
+ with correct permissions. Patch by Diego Elio “Flameeyes” Pettenò.
+
+ * modules/pam_unix/passverify.c (PAMH_ARG_DECL): Don't request
+ password change if time is not yet set (1.1.1970). Bug #2730965.
+
+ * modules/pam_access/pam_access.c (user_match): Make sure
+ that user@host will not match @@netgroup. Bug #3035919.
+
+ * modules/pam_group/pam_group.c (check_account): Add '%' for
+ UNIX groups.
+ * modules/pam_group/group.conf: Add example for '%'.
+ * modules/pam_group/group.conf.5.xml: Document '%' syntax.
+ Bug #3002340, #3037155.
+
+2010-08-02 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_mkhomedir/Makefile.am: don't pass --version-script
+ options when linking executables, only when linking libraries
+ Patch from Julien Cristau <jcristau@debian.org>
+
+2010-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate): Add
+ audit flag to enable logging about unknown user (#2917257).
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Document audit.
+ * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
+ * modules/pam_succeed_if/README: Regenerated from xml.
+
+2010-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_umask/pam_umask.8.xml: Remove comparisation of
+ gid and uid for usergroups.
+ * modules/pam_umask/pam_umask.c (setup_limits_from_gecos): Likewise.
+ Bug #3004656
+
+ * configure.in: Don't check for libxcrypt if no xcrypt.h exists,
+ fix typo introduced with 1.1.1.
+ Reported by Diego Elio “Flameeyes” Pettenò.
+
+2010-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Call
+ setfsuid to be allowed to remove temporary files (#3010705).
+ (pam_sm_open_session): Call fchown with correct permissions.
+
+2010-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_tty_audit/Makefile.am (TESTS): Add tst-pam_tty_audit.
+ * modules/pam_tty_audit/tst-pam_tty_audit: New.
+
+2010-06-07 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_tty_audit/Makefile.am: If we don't have the libraries
+ required for building pam_tty_audit, we shouldn't install the manpage
+ either.
+
+2010-05-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_userdb/pam_userdb.c: Define HAVE_DBM
+ for BerkDB 5.0 support. Patch by Diego Elio Pettenò.
+
+2010-04-15 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_exec/pam_exec.8.xml: Fix example.
+
+2010-04-13 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_pwhistory/opasswd.c: Fix compilation if
+ cyprt_r() is not available.
+ * configure.in: check for getutent_r.
+ * modules/pam_timestamp/pam_timestamp.c: Use getutent()
+ if getutent_r() does not exist.
+ Patch from Diego Elio “Flameeyes” Pettenò.
+
+2010-04-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam.conf-syntax.xml: Better documentation of
+ "actionN". Patch from Michal Soltys <soltys@ziu.info>.
+
+2010-04-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_rootok/pam_rootok.c: Add support for acct_mgmt
+ and chauthtok.
+ * modules/pam_rootok/pam_rootok.8.xml: Document new module
+ types.
+
+2010-03-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/ar.po: Add missing Plural-Forms entry to header.
+
+2010-03-25 Daniel Nylander <po@danielnylander.se>
+
+ * po/sv.po: Updated translations.
+
+2010-03-24 Ani Peter <anipeter@fedoraproject.org>
+
+ * po/ml.po: Updated translations.
+
+2010-03-08 Yuri Chornoivan <yurchor@ukr.net>
+
+ * po/uk.po: Updated translations.
+
+2010-02-09 Tomas Mraz <t8m@centrum.cz>
+
+ * libpam/pam_get_authtok.c (pam_get_authtok_internal): Fix
+ regression in the new password prompt.
+
+2010-01-04 Elad <el.il@doom.co.il>
+
+ * po/he.po: New translation to Hebrew.
+ * po/LINGUAS: Add Hebrew to the list.
+
+2009-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.1.1
+
+ * NEWS: Adjust for 1.1.1
+ * configure.in: Likewise.
+ * doc/adg/Linux-PAM_ADG.xml: Likewise.
+ * doc/mwg/Linux-PAM_MWG.xml: Likewise.
+ * doc/sag/Linux-PAM_SAG.xml: Likewise.
+ * po/*.po: Regenerated.
+
+2009-12-08 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Rename DEBUG to PAM_DEBUG.
+ * libpam/pam_env.c: Likewise
+ * libpam/pam_handlers.c: Likewise
+ * libpam/pam_miscc.c: Likewise
+ * libpam/pam_password.c: Likewise
+ * libpam/include/security/_pam_macros.h: Likewise
+ * libpamc/test/modules/pam_secret.c: Likewise
+ * modules/pam_group/pam_group.c: Likewise
+ * modules/pam_listfile/pam_listfile.c: Likewise
+ * modules/pam_unix/pam_unix_auth.c: Likewise
+ * modules/pam_unix/pam_unix_passwd.c: Likewise
+
+2009-12-08 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/passverify.c(unix_update_shadow): Create a shadow
+ entry if not present in the file.
+
+ * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Remove
+ unused function and variable.
+
+2009-11-19 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return
+ PAM_AUTH_ERR from the module if sepermit_lock() fails.
+
+2009-11-18 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.c(user_match): Revert the netgroup
+ match to the original behavior, add new syntax for adding the local
+ hostname.
+ * modules/pam_access/access.conf.5.xml: Document the new syntax
+ for adding the local hostname to the netgroup match.
+
+2009-11-10 Thorsten Kukuk <kukuk@suse.de>
+
+ * doc/man/pam_get_authtok.3.xml: Document pam_get_authtok_noverify
+ and pam_get_authtok_verify.
+
+ * libpam/Makefile.am (libpam_la_LDFLAGS): Bump revesion of libpam.
+
+ * libpam/pam_get_authtok.c (pam_get_authtok_internal): Renamed
+ from pam_get_authtok, add flags argument, always check return
+ values.
+
+ * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Use
+ pam_get_authtok_noverify and pam_get_authtok_verify.
+
+ * libpam/include/security/pam_ext.h: Add prototypes for
+ pam_get_authtok_noverify and pam_get_authtok_verify.
+
+ * libpam/libpam.map: Add new pam_get_authtok_* functions.
+
+2009-11-02 Ani Peter <anipeter@fedoraproject.org>
+
+ * po/ml.po: Updated translations.
+
+2009-11-02 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_sepermit/Makefile.am: Add sepermit.conf(5) manual page.
+ * modules/pam_sepermit/pam_sepermit.8.xml: Add reference to
+ sepermit.conf(5). Drop some redundant text.
+ * modules/pam_sepermit/sepermit.conf.5.xml: New file.
+
+ * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Implement the ignore
+ option in sepermit.conf.
+
+2009-10-29 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_xauth/Makefile.am: Link with libselinux.
+ * modules/pam_xauth/pam_xauth.c(pam_sm_open_session): Call
+ setfscreatecon() if selinux is enabled to create the .xauth file
+ with the right label. Original idea by Dan Walsh.
+
+2009-10-08 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_tty_audit/pam_tty_audit.8.xml: Add notice about aureport
+ add SEE ALSO section.
+
+2009-10-06 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Just
+ call pam_modutil_user_in_group_nam_nam() instead of reimplementation
+ of group matching.
+
+2009-10-05 Kris Thomsen <lakristho@gmail.com>
+
+ * po/da.po: Updated translations.
+
+2009-09-29 Piotr Drąg <piotrdrag@gmail.com>
+
+ * po/pl.po: Updated translations.
+
+2009-09-21 Yulia Poyarkova <yulia.poyarkova@redhat.com>
+
+ * po/ru.po: Updated translations.
+
+2009-09-17 Kiyoto Hashida <khashida@redhat.com>
+
+ * po/ja.po: Updated translations.
+
+2009-09-17 Eunju Kim <eukim@redhat.com>
+
+ * po/ko.po: Updated translations.
+
+2009-09-17 Yulia Poyarkova <yulia.poyarkova@redhat.com>
+
+ * po/ru.po: Updated translations.
+
+2009-09-10 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_securetty/pam_securetty.c: pam_securetty should not
+ return PAM_USER_UNKNOWN when the tty is secure, regardless of what
+ was entered as a username.
+ Patch from Nicolas François <nicolas.francois@centraliens.net>.
+
+2009-08-31 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_namespace/namespace.init: make this portable to POSIX
+ awk, instead of using GNU awk extensions.
+
+2009-08-25 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_sepermit/pam_sepermit.8.xml: fix up one reference
+ to pam.d(8) left behind because I've forgotten how CVS works
+ * po/es.po: fix missing whitespace in password prompts.
+
+2009-08-24 Steve Langasek <vorlon@debian.org>
+
+ * doc/pam_get_authtok.3.xml: grammar fix.
+ * doc/adg/Linux-PAM-ADG.xml: Likewise.
+ * doc/mwg/Linux-PAM_MWG.xml: Likewise.
+ * doc/man/pam_setcred.3.xml: fix a typo.
+
+2009-07-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Delete
+ new token if it does not match strength criteria.
+
+2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/yppasswd_xdr.c: Remove unnecessary header files.
+
+ * modules/pam_unix/support.c (_unix_getpwnam): Only compile in NIS
+ support if all necessary functions exist.
+
+ * modules/pam_unix/pam_unix_passwd.c (getNISserver): Add debug
+ option, handle correct if OS has no NIS support.
+
+ * modules/pam_access/pam_access.c (netgroup_match): Check if
+ yp_get_default_domain and innetgr are available at compile time.
+
+ * configure.in: Check for functions: innetgr, getdomainname
+ check for headers: rpcsvc/ypclnt.h, rpcsvc/yp_prot.h.
+
+2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/pam_unix.8.xml: Fix blowfish description.
+ Reported by Diego E. “Flameeyes” Pettenò.
+
+2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_namespace/Makefile.am: Fix make maintainer-clean,
+ fix docu dependencies.
+
+ * modules/pam_xauth/Makefile.am: Fix make maintainer-clean.
+ * modules/pam_access/Makefile.am: Likewise.
+ * modules/pam_debug/Makefile.am: Likewise.
+ * modules/pam_deny/Makefile.am: Likewise.
+ * modules/pam_echo/Makefile.am: Likewise.
+ * modules/pam_env/Makefile.am: Likewise.
+ * modules/pam_faildelay/Makefile.am: Likewise.
+ * modules/pam_ftp/Makefile.am: Likewise.
+ * modules/pam_group/Makefile.am: Likewise.
+ * modules/pam_issue/Makefile.am: Likewise.
+ * modules/pam_keyinit/Makefile.am: Likewise.
+ * modules/pam_lastlog/Makefile.am: Likewise.
+ * modules/pam_limits/Makefile.am: Likewise.
+ * modules/pam_listfile/Makefile.am: Likewise.
+ * modules/pam_localuser/Makefile.am: Likewise.
+ * modules/pam_loginuid/Makefile.am: Likewise.
+ * modules/pam_mail/Makefile.am: Likewise.
+ * modules/pam_mkhomedir/Makefile.am: Likewise.
+ * modules/pam_motd/Makefile.am: Likewise.
+ * modules/pam_nologin/Makefile.am: Likewise.
+ * modules/pam_pwhistory/Makefile.am: Likewise.
+ * modules/pam_rhosts/Makefile.am: Likewise.
+ * modules/pam_rootok/Makefile.am: Likewise.
+ * modules/pam_securetty/Makefile.am: Likewise.
+ * modules/pam_shells/Makefile.am: Likewise.
+ * modules/pam_succeed_if/Makefile.am: Likewise.
+ * modules/pam_tally2/Makefile.am: Likewise.
+ * modules/pam_tally/Makefile.am: Likewise.
+ * modules/pam_time/Makefile.am: Likewise.
+ * modules/pam_timestamp/Makefile.am: Likewise.
+ * modules/pam_tty_audit/Makefile.am: Likewise.
+ * modules/pam_umask/Makefile.am: Likewise.
+ * modules/pam_unix/Makefile.am: Likewise.
+ * modules/pam_warn/Makefile.am: Likewise.
+ * modules/pam_wheel/Makefile.am: Likewise.
+ * modules/pam_filter/Makefile.am: Likewise.
+
+ * configure.in: Make regeneration of docu configureable,
+ rename enable_man to enable_docu.
+
+ * modules/pam_env/pam_env.c (_pam_parse): Fix typo in debug
+ code.
+
+ * modules/pam_cracklib/Makefile.am: Don't install docu if
+ module is disabled for building.
+ * modules/pam_userdb/Makefile.am: Likewise.
+
+ * modules/pam_unix/pam_unix_passwd.c: Remove dead SELinux
+ code.
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Fix
+ usage of wrong variable [bug#2809661].
+
+2009-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Rename crypt_gensalt_rn to crypt_gensalt_r
+ * modules/pam_unix/passverify.c: Likewise.
+
+2009-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.1.0
+
+2009-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/sag/Linux-PAM_SAG.xml: Fix typos.
+ * doc/adg/Linux-PAM_ADG.xml: Likewise.
+ * doc/mwg/Linux-PAM_MWG.xml: Likewise.
+
+2009-06-08 Rajesh Ranjan <rajesh672@gmail.com>
+
+ * po/hi.po: Updated translations.
+
+2009-06-01 Jaswinder Singh <jsingh@redhat.com>
+
+ * po/pa.po: Updated translations.
+
+2009-06-01 Tomáš Mráz <t8m@centrum.cz>
+
+ * modules/pam_pwhistory/opasswd.c (save_old_password): Don't
+ call fclose() on NULL descriptor. Found by Steve Grubb.
+
+2009-06-01 Ville Skyttä <ville.skytta@iki.fi>
+
+ * modules/pam_limits/pam_limits.8.xml: Only *.conf
+ files are parsed. Spelling fixes.
+ * modules/pam_access/pam_access.8.xml: Spelling fixes.
+ * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
+ * modules/pam_echo/pam_echo.8.xml: Likewise.
+ * modules/pam_env/pam_env.8.xml: Likewise.
+ * modules/pam_exec/pam_exec.8.xml: Likewise.
+ * modules/pam_filter/pam_filter.8.xml: Likewise.
+ * modules/pam_ftp/pam_ftp.8.xml: Likewise.
+ * modules/pam_group/pam_group.8.xml: Likewise.
+ * modules/pam_issue/pam_issue.8.xml: Likewise.
+ * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
+ * modules/pam_listfile/pam_listfile.8.xml: Likewise.
+ * modules/pam_localuser/pam_localuser.8.xml: Likewise.
+ * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
+ * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
+ * modules/pam_motd/pam_motd.8.xml: Likewise.
+ * modules/pam_namespace/pam_namespace.8.xml: Likewise.
+ * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
+ * modules/pam_selinux/pam_selinux.8.xml: Likewise.
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
+ * modules/pam_tally/pam_tally.8.xml: Likewise.
+ * modules/pam_tally2/pam_tally2.8.xml: Likewise.
+ * modules/pam_time/pam_time.8.xml: Likewise.
+ * modules/pam_timestamp/pam_timestamp.8.xml: Likewise.
+ * modules/pam_timestamp/pam_timestamp_check.8.xml: Likewise.
+ * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
+ * modules/pam_umask/pam_umask.8.xml: Likewise.
+ * modules/pam_unix/pam_unix.8.xml: Likewise.
+ * modules/pam_xauth/pam_xauth.8.xml: Likewise.
+
+2009-05-28 Jaswinder Singh <jsingh@redhat.com>
+
+ * po/pa.po: Updated translations.
+
+2009-05-21 Albert Carabasa Giribet <albertc@asic.udl.cat>
+
+ * po/ca.po: Updated translations.
+
+2009-05-11 Ani Peter <anipeter@fedoraproject.org>
+
+ * po/ml.po: Updated translations.
+
+2009-05-11 Charles-Antoine Couret <cacouret@wanadoo.fr>
+
+ * po/fr.po: Updated translations.
+
+2009-05-11 Tomáš Mráz <t8m@centrum.cz>
+
+ * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary): Remove
+ unnecessary setuid() call.
+
+2009-05-05 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.0.92
+ * libpamc/Makefile.am (libpamc_la_LDFLAGS): Increase revesion.
+ * configure.in: Increase version to 1.0.92.
+
+2009-04-20 Mario Santagiuliana <mario@marionline.it>
+
+ * po/it.po: Updated translations.
+
+2009-04-17 Fabian Affolter <fab@fedoraproject.org>
+
+ * po/de.po: Updated translations.
+
+2009-04-16 Tomáš Mráz <t8m@centrum.cz>
+
+ * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Add user
+ parameter. Use user instead of pwd->pw_name in comparsions.
+ (pam_sm_authenticate): Pass the original user to evaluate().
+
+2009-04-14 Amitakhya Phukan <aphukan@fedoraproject.org>
+
+ * po/as.po: Updated translations.
+
+2009-04-14 Runa Bhattacharjee <runab@fedoraproject.org>
+
+ * po/bn_IN.po: Updated translations.
+
+2009-04-14 Sweta Kothari <swkothar@redhat.com>
+
+ * po/gu.po: Updated translations.
+
+2009-04-14 Sandeep Shedmake <sandeep.shedmake@gmail.com>
+
+ * po/mr.po: Updated translations.
+
+2009-04-14 Rui Gouveia <rui.gouveia@globaltek.pt>
+
+ * po/pt.po: Updated translations.
+
+2009-04-14 I. Felix <ifelix@redhat.com>
+
+ * po/ta.po: Updated translations.
+
+2009-04-14 Krishna Babu K <kkrothap@redhat.com>
+
+ * po/te.po: Updated translations.
+
+2009-04-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/yppasswd.h: Update license to GPLv2 or later
+ on request of Olaf Kirch (Author).
+ * modules/pam_unix/yppasswd_xdr.c: Likewise.
+
+2009-04-06 R.E. van der Luit <nippur@fedoraproject.org>
+
+ * po/nl.po: Updated translations.
+
+2009-04-06 Terry Chuang <tchuang@redhat.com>
+
+ * po/zh_TW.po: Updated translations.
+
+2009-04-03 Shankar Prasad <svenkate@redhat.com>
+
+ * po/kn.po: Updated translations.
+
+2009-04-03 Manoj Kumar Giri <mgiri@redhat.com>
+
+ * po/or.po: Updated translations.
+
+2009-04-03 Miloš Komarčević <kmilos@gmail.com>
+
+ * po/sr.po: Updated translations.
+ * po/sr@latin.po: Updated translations.
+
+2009-04-03 Leah Liu <lliu@redhat.com>
+
+ * po/zh_CN.po: Updated translations.
+
+2009-04-03 Dmitry V. Levin <ldv@altlinux.org>
+
+ * libpamc/pamc_load.c (__pamc_exec_agent): Replace call to exit(3)
+ in child process with call to _exit(2).
+ * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Likewise.
+ * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
+ Likewise.
+ * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
+ Likewise.
+ * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
+ * modules/pam_xauth/pam_xauth.c (run_coprocess): Likewise.
+ * modules/pam_exec/pam_exec.c (call_exec): Replace all calls to
+ exit(3) in child process with calls to _exit(2).
+ * modules/pam_filter/pam_filter.c (set_filter): Likewise.
+ * modules/pam_namespace/pam_namespace.c (inst_init,
+ cleanup_tmpdirs): Likewise.
+
+2009-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/support.c (_unix_run_helper_binary): Don't
+ ignore return value of write().
+
+ * libpamc/include/security/pam_client.h (PAM_BP_ASSERT): Honour
+ NDEBUG.
+ * modules/pam_timestamp/pam_timestamp.c: don't ignore return
+ values of lchown and fchown.
+
+2009-03-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_mkhomedir/pam_mkhomedir.c: Make option handling
+ reentrant (#2487654)
+ (_pam_parse): Fix umask option.
+
+ * modules/pam_unix/passverify.c: Fix typo.
+
+ * modules/pam_issue/pam_issue.c: Fix compiler warning.
+ * modules/pam_ftp/pam_ftp.c: Likewise.
+
+2009-03-25 Pavol Šimo <palo.simo@gmail.com>
+
+ * po/sk.po: Updated translations.
+
+2009-03-24 Sulyok Péter <peti@sulyok.hu>
+
+ * po/hu.po: Updated translations.
+
+2009-03-24 Domingo Becker <domingobecker@gmail.com>
+
+ * po/es.po: Updated translations.
+
+2009-03-24 Diego Búrigo Zacarão <diegobz@projetofedora.org>
+
+ * po/pt_BR.po: Updated translations.
+
+2009-03-24 Piotr Drąg <piotrdrag@gmail.com>
+
+ * po/pl.po: Updated translations.
+
+2009-03-24 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/passverify.c(save_old_password): Call fflush() and
+ fsync().
+ (unix_update_passwd, unix_update_shadow): Likewise.
+ * modules/pam_pwhistory/opasswd.c(save_old_password): Likewise.
+
+ * po/cs.po: Updated translations.
+
+2009-03-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.0.91
+
+ * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
+ * xtests/Makefile.am: Add tst-pam_unix4.pamd, tst-pam_unix4.sh
+ and time.conf.
+
+2009-03-03 Dmitry V. Levin <ldv@altlinux.org>
+
+ * tests/tst-pam_mkargv.c (main): Fix for non-64bit architectures.
+
+2009-03-03 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Test
+ for abnormal exit of the helper binary.
+ * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary): Likewise.
+ * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
+ * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Likewise.
+
+2009-02-27 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Replace
+ signal() with sigaction().
+ * modules/pam_namespace/pam_namespace.c(inst_init, cleanup_tmpdirs):
+ Likewise.
+ * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Likewise.
+ * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary):
+ Likewise.
+ * modules/pam_unix/passverify.c(su_sighandler): Likewise.
+ * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
+
+ * modules/pam_tally2/Makefile.am: Link the pam_tally2 app to libpam
+ for auxiliary functions.
+ * modules/pam_tally2/pam_tally2.8.xml: Drop non-existing no_reset
+ option. Document new serialize option.
+ * modules/pam_tally2/pam_tally2.c: Add support for the new serialize
+ option.
+ (_cleanup, tally_set_data, tally_get_data): Add tally file handle to
+ tally PAM data. Needed for fcntl() locking.
+ (get_tally): Use low level file access instead of stdio buffered FILE.
+ If serialize option is used lock the tally file access.
+ (set_tally, tally_bump, tally_reset): Use low level file access instead
+ of stdio buffered FILE. Close the file handle only when it is not owned
+ by PAM data.
+ (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt): Pass the tally
+ file handle to tally_set_data(). Get it from tally_get_data().
+ (main): Use low level file access instead of stdio buffered FILE.
+
+2009-02-26 Tomas Mraz <t8m@centrum.cz>
+
+ * xtests/Makefile.am: Add tst-pam_unix4.
+ * xtests/tst-pam_unix4.c: New test for password change
+ and shadow min days limit.
+ * xtests/tst-pam_unix4.pamd: Likewise.
+ * xtests/tst-pam_unix4.sh: Likewise.
+
+ * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Ignore
+ PAM_AUTHTOK_ERR on shadow verification.
+ * modules/pam_unix/passverify.c (check_shadow_expiry): Return
+ PAM_AUTHTOK_ERR if sp_min limit for password change is defied.
+
+2009-02-26 Timur Birsh <taem@linukz.org>
+
+ * po/LINGUAS: New Kazakh translation.
+ * po/kk.po: New Kazakh translation.
+
+2009-02-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_misc.c (_pam_StrTok): Use unsigned char
+ instead of int. Reported by Marcus Granado.
+ * tests/Makefile.am (TESTS): Add tst-pam_mkargv.
+ * tests/tst-pam_mkargv.c (main): Test case for
+ _pam_mkargv.
+
+ * po/de.po: Update fuzzy translations.
+
+2009-02-25 Tomas Mraz <t8m@centrum.cz>
+
+ * xtests/access.conf: Add a line for name resolution test case.
+ * xtests/tst-pam_access4.c (main): Set PAM_RHOST for testing the LOCAL
+ keyword. Add a test case for name resolution.
+
+ * modules/pam_access/pam_access.c (from_match): Move name resolution
+ to network_netmask_match().
+ (network_netmask_match): Do a name resolution of the origin only if
+ matching against a real network/netmask.
+
+2009-02-25 Fabian Affolter <fabian@bernewireless.net>
+
+ * po/de.po: Updated translations.
+
+2009-02-25 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
+
+ * po/pt_BR.po: Updated translations.
+
+2009-02-25 Domingo Becker <domingobecker@gmail.com>
+
+ * po/es.po: Updated translations.
+
+2009-02-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_limits/limits.conf.5.xml: Document that the kernel
+ can refuse values out of range for the local system.
+ * modules/pam_limits/pam_limits.c (setup_limits): Log if setrlimit
+ fails.
+
+2009-02-18 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_password.c (pam_chauthtok): Make sure applications
+ don't set internal flags.
+
+2009-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_sm_chauthtok.3.xml: Document that sufficient
+ can break the PRELIM_CHECK chain.
+
+ * libpam/pam_dispatch.c: Don't freeze chain for chauthtok
+ [bugzilla.novell.com#470337]
+
+2009-02-11 Daniel Nylander <po@danielnylander.se>
+
+ * po/sv.po: Updated translations.
+
+2009-01-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_sm_setcred.3.xml: Document PAM_ESTABLISH_CRED.
+
+2009-01-19 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_mkhomedir/Makefile.am: Add mkhomedir_helper.
+ * modules/pam_mkhomedir/mkhomedir_helper.8.xml: New file. Manual page
+ for mkhomedir_helper.
+ * modules/pam_mkhomedir/mkhomedir_helper.c: New file. Source
+ for mkhomedir_helper. Most of the code moved from pam_mkhomedir.c.
+ * modules/pam_mkhomedir/pam_mkhomedir.c (_pam_parse): Do not convert umask
+ to integer.
+ (rec_mkdir): Moved to mkhomedir_helper.c.
+ (create_homedir): Just exec the helper.
+ (pam_sm_open_session): Improve logging.
+
+2009-01-19 Daniel Cabrera <h.daniel.cabrera@gmail.com>
+
+ * po/es.po: Updated translations.
+
+2009-01-14 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/de.po: Updated translations.
+
+2009-01-07 Piotr Drąg <piotrdrag@gmail.com>
+
+ * po/pl.po: Updated translations.
+
+2008-12-23 Piotr Drąg <piotrdrag@gmail.com>
+
+ * po/pl.po: Updated translations.
+
+2008-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_pwhistory/pam_pwhistory.c (parse_option): Rename
+ type= option to authtok_type= (because of pam_get_authtok).
+ * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
+
+2008-12-17 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_tty_audit/pam_tty_audit.c (pam_sm_open_session): Do
+ not abort on unknown option. Avoid double free of old_status.
+ (pam_sm_close_session): Use LOG_DEBUG for restored status message.
+
+ * configure.in: Test for getseuser().
+ * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Call getseuser()
+ instead of getseuserbyname() if the function is available.
+
+2008-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.0.90
+
+ * libpam_misc/Makefile.am: Increase version number of shared library.
+ * libpamc/Makefile.am: Likewise.
+
+2008-12-12 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_tally2/pam_tally2.c (get_tally): Test for EACCES
+ instead of EPERM.
+ * modules/pam_tally2/pam_tally2.8.xml: Fix documentation.
+
+2008-12-10 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_item_types_ext.inc.xml: Document PAM_AUTHTOK_TYPE.
+ * libpam/pam_end.c (pam_end): Free authtok_type.
+ * tests/tst-pam_get_item.c: Add PAM_AUTHTOK_TYPE
+ as test case.
+ * tests/tst-pam_set_item.c: Likewise.
+ * libpam/pam_start.c (pam_start): Initialize xdisplay,
+ xauth and authtok_type.
+ * libpam/pam_get_authtok.c (pam_get_authtok): Rename "type"
+ to "authtok_type".
+ * modules/pam_cracklib/pam_cracklib.8.xml: Replace "type=" with
+ "authtok_type=".
+ * doc/man/pam_get_authtok.3.xml: Document authtok_type argument.
+ * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Set
+ type= argument as PAM_AUTHTOK_TYPE item.
+ * libpam/pam_get_authtok.c (pam_get_authtok): If no type
+ argument given, use PAM_AUTHTOK_TYPE item.
+ * libpam/pam_item.c (pam_get_item): Fetch PAM_AUTHTOK_TYPE item.
+ (pam_set_item): Store PAM_AUTHTOK_TYPE item.
+ * libpam/pam_private.h: Add authtok_type to pam_handle.
+ * libpam/include/security/_pam_types.h (PAM_AUTHTOK_TYPE): New.
+
+2008-12-03 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_access/access.conf.5.xml: Replace
+ 2001:4ca0 with 2001:db8:: [bug#2356400].
+
+ * doc/man/Makefile.am: Add pam_get_authtok.3.xml.
+ * doc/man/pam_get_authtok.3.xml: New.
+ * libpam/Makefile.am: Add pam_get_authtok.c.
+ * libpam/libpam.map: Export pam_get_authtok.
+ * libpam/pam_get_authtok.c: New.
+ * libpam/pam_private.h: Add mod_argc and mod_argv to pam_handle.
+ * libpam_include/security/pam_ext.h: Add pam_get_authtok
+ prototype.
+ * modules/pam_cracklib/pam_cracklib.c: Use pam_get_authtok.
+ * modules/pam_pwhistory/pam_pwhistory.c: Likewise.
+ * po/POTFILES.in: Add libpam/pam_get_authtok.c.
+ * xtests/tst-pam_cracklib1.c: Adjust error codes.
+
+ * modules/pam_timestamp/Makefile.am: Remove hmactest.c from
+ EXTRA_DIST.
+
+ * po/*.po: Regenerated.
+
+2008-12-02 Michael Calmer <mc@suse.de>
+
+ * modules/pam_limits/limits.conf.5.xml: Document valid values
+ for limits (bnc#448314).
+
+2008-12-02 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_env/pam_env.c: Add support for user specific
+ environment file. Based on a patch from Ubuntu.
+ * modules/pam_env/pam_env.8.xml: Document new options.
+
+2008-12-02 Olivier Fourdan <ofourdan@redhat.com>
+
+ * modules/pam_filter/pam_filter.c (master): Use /dev/ptmx
+ instead of the old BSD pseudoterminal API.
+ (set_filter): Call grantpt(), unlockpt() and ptsname(). Do not
+ close pseudoterminal handle in filter child.
+ * modules/pam_filter/upperLOWER/upperLOWER.c (main): Use
+ regular read() instead of pam_modutil_read() to allow for
+ short reads.
+
+2008-12-02 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_timestamp/Makefile.am: Add hmacfile to tests.
+ * modules/pam_timestamp/hmacfile.c: Do not try the short key
+ testvector.
+
+2008-12-01 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/support.h: Fix masks for cipher algorithm
+ flags.
+
+2008-12-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/pam_unix.8.xml: Document blowfish option.
+
+ * configure.in: Check for crypt_gensalt_rn.
+ * modules/pam_unix/pam_unix_passwd.c: Pass pamh to
+ create_password_hash function.
+ * modules/pam_unix/passverify.c (create_password_hash): Add
+ blowfish support.
+ * modules/pam_unix/passverify.h: Adjust create_password_hash
+ prototype.
+ * modules/pam_unix/support.c: Add support for blowfish option.
+ * modules/pam_unix/support.h: Add defines for blowfish option.
+ Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
+
+2008-12-01 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.8.xml: Fix description of nodefgroup
+ option.
+
+ * modules/pam_group/pam_group.c (is_same): Fix check for correct
+ string length.
+
+2008-11-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Check for xcrypt.h, fix typo in libaudit check.
+ * modules/pam_cracklib/pam_cracklib.c: Include xcrypt.h if
+ available.
+ * modules/pam_unix/bigcrypt.c: Likewise.
+ * modules/pam_unix/passverify.c: Likewise.
+ * modules/pam_userdb/pam_userdb.c: Likewise.
+ Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
+
+ * doc/man/pam_getenv.3.xml: Document that application should
+ not free return value.
+
+ * doc/man/pam.3.xml: Add Note about thread-safeness of libpam
+ functions.
+
+2008-11-28 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/unix_update.c (set_password): Allow root to change
+ passwords without verification of the old ones.
+
+ * modules/pam_tally2/pam_tally2.c (tally_check): Fix info format
+ to be the same as in pam_tally.
+
+ * configure.in: Add modules/pam_timestamp/Makefile.
+ * doc/sag/Linux-PAM_SAG.xml: Include pam_timestamp.xml.
+ * doc/sag/pam_timestamp.xml: New.
+ * libpam/pam_static_modules.h: Add pam_timestamp static struct.
+ * modules/Makefile.am: Add pam_timestamp directory.
+ * modules/pam_timestamp/Makefile.am: New.
+ * modules/pam_timestamp/README.xml: New.
+ * modules/pam_timestamp/hmacsha1.h: New.
+ * modules/pam_timestamp/sha1.h: New.
+ * modules/pam_timestamp/pam_timestamp.8.xml: New.
+ * modules/pam_timestamp/pam_timestamp_check.8.xml: New.
+ * modules/pam_timestamp/pam_timestamp.c: New.
+ * modules/pam_timestamp/pam_timestamp_check.c: New.
+ * modules/pam_timestamp/hmacfile.c: New.
+ * modules/pam_timestamp/hmacsha1.c: New.
+ * modules/pam_timestamp/sha1.c: New.
+ * modules/pam_timestamp/tst-pam_timestamp: New.
+ * po/POTFILES.in: Add pam_timestamp sources.
+ * po/*.po: Regenerate.
+ * po/cs.po: Updated translations.
+
+2008-11-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_pwhistory/opasswd.c (save_old_password): Fix typo.
+
+ * modules/pam_time/pam_time.c (is_same): Fix check
+ of correct string length (debian bug #326407).
+
+2008-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/Makefile.am: Add pam_time1 tests.
+ * xtests/tst-pam_time1.c: New test case.
+ * xtests/tst-pam_time1.pamd: New.
+ * xtests/time.conf: New.
+ * xtests/run-xtests.sh: Copy time.conf.
+
+2008-11-24 Tomas Mraz <t8m@centrum.cz>
+
+ * libpam/pam_handlers.c (_pam_parse_conf_file): '-' at
+ beginning of type token marks silent module.
+ (_pam_load_module): Add handler_type parameter. Do not log
+ module load error if module is silent.
+ (_pam_add_handler): Pass handler_type to _pam_load_module().
+ * libpam/pam_private.h: Add PAM_HT_SILENT_MODULE.
+ * doc/man/pam.conf-syntax.xml: Document the '-' at beginning
+ of type.
+
+ * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Fix leaks
+ in error path.
+ * modules/pam_env/pam_env.c (_parse_env_file): Remove superfluous
+ condition.
+ * modules/pam_group/pam_group.c (check_account): Fix leak
+ in error path.
+ * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): Fix leak
+ in error path.
+ * modules/pam_securetty/pam_securetty.c (securetty_perform_check): Remove
+ superfluous condition.
+ * modules/pam_stress/pam_stress.c (stress_get_password,pam_sm_authenticate):
+ Remove superfluous conditions.
+ (pam_sm_chauthtok): Fix mistaken && for &.
+ * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Remove
+ superfluous condition.
+ All the problems fixed in this commit were found by Steve Grubb.
+
+2008-11-20 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_sepermit/pam_sepermit.c (sepermit_match): Do not
+ call sepermit_lock() if sense is deny. Do not crash on NULL seuser
+ match.
+ (pam_sm_authenticate): Try to call getseuserbyname() even if
+ SELinux is disabled.
+
+2008-11-19 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_xauth/pam_xauth.c (pam_sm_open_session):
+ Preserve XAUTHLOCALHOSTNAME environment variable.
+
+ * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Finish
+ implementation of type=STRING option.
+
+ * modules/pam_pwhistory/pam_pwhistory.8.xml: Document
+ "type=STRING" option.
+
+2008-10-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_setcred.3.xml: Document when credentials
+ should be deleted.
+ * po/ja.po: Fix syntax error.
+ * po/de.po: Update translations.
+ * po/*.po: Regenerate with pam_tally2 added.
+
+2008-10-23 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
+
+ * po/pt_BR.po: Updated translations.
+
+2008-10-23 Krishna Babu K <kkrothap@redhat.com>
+
+ * po/LINGUAS: New language.
+ * po/te.po: New translation to Telugu.
+
+2008-10-23 Manoj Kumar Giri <mgiri@redhat.com>
+
+ * po/or.po: Updated translations.
+
+2008-10-21 Amitakhya Phukan <aphukan@redhat.com>
+
+ * po/as.po: Updated translations.
+
+2008-10-21 Ondrej Sulek <feonsu@gmail.com>
+
+ * po/sk.po: Updated translations.
+
+2008-10-21 Terry Chuang <tchuang@redhat.com>
+
+ * po/zh_TW.po: Updated translations.
+
+2008-10-21 Kiyoto Hashida <khashida@redhat.com>
+
+ * po/ja.po: Updated translations.
+
+2008-10-21 Francesco Valente <fvalen@redhat.com>
+
+ * po/it.po: Updated translations.
+
+2008-10-21 Peter van Egdom <p.van.egdom@gmail.com>
+
+ * po/nl.po: Updated translations.
+
+2008-10-20 Ani Peter <apeter@redhat.com>
+
+ * po/ml.po: Updated translations.
+
+2008-10-20 Pablo Martin-Gomez <pablo.martin-gomez@laposte.net>
+
+ * po/fr.po: Updated translations.
+
+2008-10-20 Runa Bhattacharjee <runab@redhat.com>
+
+ * po/bn_IN.po: Updated translations.
+
+2008-10-20 Shankar Prasad <svenkate@redhat.com>
+
+ * po/kn.po: Updated translations.
+
+2008-10-20 Leah Liu <lliu@redhat.com>
+
+ * po/zh_CN.po: Updated translations.
+
+2008-10-20 Ondrej Sulek <feonsu@gmail.com>
+
+ * po/LINGUAS: New language.
+ * po/sk.po: New translation to Slovak.
+
+2008-10-17 Tomas Mraz <t8m@centrum.cz>
+
+ * configure.in: Add modules/pam_tally2/Makefile.
+ * doc/sag/Linux-PAM_SAG.xml: Include pam_tally2.xml.
+ * doc/sag/pam_tally2.xml: New.
+ * libpam/pam_static_modules.h: Add pam_tally2 static struct.
+ * modules/Makefile.am: Add pam_tally2 directory.
+ * modules/pam_tally2/Makefile.am: New.
+ * modules/pam_tally2/README.xml: New.
+ * modules/pam_tally2/tallylog.h: New.
+ * modules/pam_tally2/pam_tally2.8.xml: New.
+ * modules/pam_tally2/pam_tally2.c: New.
+ * modules/pam_tally2/pam_tally2_app.c: New.
+ * modules/pam_tally2/tst-pam_tally2: New.
+ * po/POTFILES.in: Add pam_tally2 sources.
+
+2008-10-17 Xavier Queralt Mateu <xqueralt@gmail.com>
+
+ * po/ca.po: Updated translations.
+
+2008-10-15 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Save the old
+ euid to suid to be able to restore it.
+
+2008-10-15 Piotr Drąg <piotrdrag@gmail.com>
+
+ * po/pl.po: Updated translations.
+
+2008-10-13 Tomas Mraz <t8m@centrum.cz>
+
+ * po/LINGUAS: New languages.
+ * po/cs.po: Updated translations.
+
+2008-10-13 Amitakhya Phukan <aphukan@redhat.com>
+
+ * po/as.po: Updated translations.
+
+2008-10-13 Shankar Prasad <svenkate@redhat.com>
+
+ * po/kn.po: Updated translations.
+
+2008-10-13 Sandeep Sheshrao Shedmake <sshedmak@redhat.com>
+
+ * po/mr.po: New translation to Marathi.
+
+2008-10-13 Runa Bhattacharjee <runab@redhat.com>
+
+ * po/bn_IN.po: Updated translations.
+
+2008-10-13 Sharuzzaman Ahmat Raslan <sharuzzaman@gmail.com>
+
+ * po/ms.po: New translation to Malay.
+
+2008-10-10 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass):
+ Remove check for re-used passwords.
+ * modules/pam_cracklib/pam_cracklib.8.xml: Remove documentation
+ of re-used password check.
+
+ * configure.in: add modules/pam_pwhistory/Makefile.
+ * doc/sag/Linux-PAM_SAG.xml: Include pam_pwhistory.xml.
+ * doc/sag/pam_pwhistory.xml: New.
+ * libpam/pam_static_modules.h: Add pam_pwhistory data.
+ * modules/Makefile.am: Add pam_pwhistory directory.
+ * modules/pam_pwhistory/Makefile.am: New.
+ * modules/pam_pwhistory/README.xml: New.
+ * modules/pam_pwhistory/opasswd.c: New.
+ * modules/pam_pwhistory/opasswd.h: New.
+ * modules/pam_pwhistory/pam_pwhistory.8.xml: New.
+ * modules/pam_pwhistory/pam_pwhistory.c: New.
+ * modules/pam_pwhistory/tst-pam_pwhistory: New.
+ * xtests/Makefile.am: New.
+ * xtests/run-xtests.sh: New.
+ * xtests/tst-pam_pwhistory1.c: New.
+ * xtests/tst-pam_pwhistory1.pamd: New.
+ * xtests/tst-pam_pwhistory1.sh: New.
+ * po/POTFILES.in: Add modules/pam_pwhistory/.
+ * po/de.po: Update translations.
+
+2008-10-02 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/de.po: Update translations.
+
+2008-09-30 Manoj Kumar Giri <mgiri@redhat.com>
+
+ * po/or.po: Updated translations.
+
+2008-09-30 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
+
+ * po/pt_BR.po: Updated translations.
+
+2008-09-30 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_lastlog/pam_lastlog.8.xml: Document new options
+ noupdate and showfailed.
+ * modules/pam_lastlog/pam_lastlog.c(pam_parse): Recognize the new
+ options.
+ (last_login_read): New output parameter lltime. Do not display
+ the last login message if it would be empty.
+ (last_login_date): New output parameter lltime. Do not write the
+ last login info when LASTLOG_UPDATE is not set.
+ (last_login_failed): New function to display the last bad login
+ attempt from btmp.
+ (pam_sm_open_session): Obtain lltime from last_login_date() and
+ call last_login_failed() when appropriate.
+
+ * po/Linux-pam.pot: Updated strings to translate.
+ * po/*.po: Likewise.
+
+2008-09-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_echo/pam_echo.8.xml: Fix format error.
+
+2008-09-25 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_tally/pam_tally.c(get_tally): Fix syslog message.
+ (tally_check): Open faillog read only. Close file descriptor.
+ Fix typos in messages.
+
+2008-09-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_mail/pam_mail.c (report_mail): Fix logic of
+ "quiet" option (Patch from Andreas Henriksson <andreas@fatal.se>)
+
+ * modules/pam_mail/pam_mail.8.xml: Fix typo.
+
+2008-09-23 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_limits/limits.conf.5.xml: Comment that rss limit is
+ ignored.
+
+2008-09-19 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_cracklib/pam_cracklib.8.xml: Fix description
+ of the palindrome test. Document new options maxrepeat and
+ reject_username.
+ * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Parse
+ the maxrepeat and reject_username options.
+ (password_check): Call the new tests usercheck() and
+ consecutive().
+ (_pam_unix_approve_pass): Pass user name to the password_check().
+
+2008-09-16 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo.
+
+ * modules/pam_unix/pam_unix.8.xml: Fix typo.
+
+2008-09-03 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_exec/pam_exec.c: Expose authtok if requested,
+ provide environment variable containing service type.
+ * modules/pam_exec/pam_exec.8.xml: Document new option.
+
+2008-08-29 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_loginuid/pam_loginuid.c(set_loginuid): Uids
+ are unsigned.
+
+2008-08-18 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * Makefile.am (M4_FILES): Adjust list.
+
+ * modules/pam_access/pam_access.8.xml: Fix module service
+ vs. module type.
+ * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
+ * modules/pam_debug/pam_debug.8.xml: Likewise.
+ * modules/pam_deny/pam_deny.8.xml: Likewise.
+ * modules/pam_echo/pam_echo.8.xml: Likewise.
+ * modules/pam_env/pam_env.8.xml: Likewise.
+ * modules/pam_exec/pam_exec.8.xml: Likewise.
+ * modules/pam_faildelay/pam_faildelay.8.xml: Likewise.
+ * modules/pam_filter/pam_filter.8.xml: Likewise.
+ * modules/pam_ftp/pam_ftp.8.xml: Likewise.
+ * modules/pam_group/pam_group.8.xml: Likewise.
+ * modules/pam_issue/pam_issue.8.xml: Likewise.
+ * modules/pam_keyinit/pam_keyinit.8.xml: Likewise.
+ * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
+ * modules/pam_limits/pam_limits.8.xml: Likewise.
+ * modules/pam_listfile/pam_listfile.8.xml: Likewise.
+ * modules/pam_localuser/pam_localuser.8.xml: Likewise.
+ * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
+ * modules/pam_mail/pam_mail.8.xml: Likewise.
+ * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
+ * modules/pam_motd/pam_motd.8.xml: Likewise.
+ * modules/pam_namespace/pam_namespace.8.xml: Likewise.
+ * modules/pam_nologin/pam_nologin.8.xml: Likewise.
+ * modules/pam_permit/pam_permit.8.xml: Likewise.
+ * modules/pam_rhosts/pam_rhosts.8.xml: Likewise.
+ * modules/pam_rootok/pam_rootok.8.xml: Likewise.
+ * modules/pam_securetty/pam_securetty.8.xml: Likewise.
+ * modules/pam_selinux/pam_selinux.8.xml: Likewise.
+ * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
+ * modules/pam_shells/pam_shells.8.xml: Likewise.
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
+ * modules/pam_tally/pam_tally.8.xml: Likewise.
+ * modules/pam_time/pam_time.8.xml: Likewise.
+ * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
+ * modules/pam_umask/pam_umask.8.xml: Likewise.
+ * modules/pam_unix/pam_unix.8.xml: Likewise.
+ * modules/pam_userdb/pam_userdb.8.xml: Likewise.
+ * modules/pam_warn/pam_warn.8.xml: Likewise.
+ * modules/pam_wheel/pam_wheel.8.xml: Likewise.
+ * modules/pam_xauth/pam_xauth.8.xml: Likewise.
+
+2008-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Add version for gettext, add search path
+ for m4 directory, fix handling of --disable-* options.
+ Patches from Diego Pettenò <flameeyes@gmail.com>.
+
+ * configure.in: Run autoupdate on it.
+
+ * acincludde.m4: Rename to ...
+ * m4/jh_path_xml_catalog.m4: ... this.
+
+ * m4/*.m4: Remove all autoconf m4 files.
+
+2008-07-29 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_cracklib/pam_cracklib.8.xml: correct a typo,
+ "Only he" -> "Only the"
+
+2008-07-28 Steve Langasek <vorlon@debian.org>
+
+ * libpamc/test/regress/test.libpamc.c: use standard u_int8_t
+ type instead of __u8, as elsewhere.
+ Patch from Roger Leigh <rleigh@debian.org>.
+ * modules/pam_unix/passverify.c: make save_old_password()
+ thread-safe by using pam_modutil_getpwnam() instead of getpwnam()
+ * modules/pam_unix/passverify.c, modules/pam_unix/passverify.h,
+ modules/pam_unix/pam_unix_passwd.c: add pamh argument to
+ save_old_password()
+
+2008-07-27 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_*/pam_*.8.xml: fix up the references to pam.d,
+ which is in manpage section 5, not 8.
+ * modules/pam_env/environment, modules/pam_env/pam_env.8.xml:
+ spelling fix, seperate -> separate
+
+2008-07-26 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_env/pam_env.c: Fix module to skip over
+ non-alphanumeric variable names, and to handle the case when
+ asked to delete a non-existent variable.
+
+2008-07-13 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_mail/pam_mail.8.xml: Module supports session and
+ not account service (#1980773).
+
+2008-07-11 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Do
+ not close the pipe descriptor in borderline case (#2009766).
+ * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
+ Likewise.
+ * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
+ * modules/pam_unix/support.h: Define upper limit of fds we will
+ attempt to close.
+
+ * modules/pam_selinux/pam_selinux.c (config_context): Do not
+ ask for the level if use_current_range is set.
+ (context_from_env): New function to obtain the context from
+ PAM environment variables.
+ (pam_sm_open_session): Call context_from_env() if env_params option
+ is present. use_current_range now modifies behavior of the
+ context_from_env and config_context options.
+ * modules/pam_selinux/pam_selinux.8.xml: Describe the env_params
+ option. Adjust description of use_current_range option.
+
+2008-07-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_exec/pam_exec.c (call_exec): Move all variable
+ declaration to begin of a block (#1976310).
+
+ * xtests/tst-pam_group1.c (run_test): Move no_grps declaration
+ to begin of function (#1976310).
+
+ * modules/pam_securetty/pam_securetty.8.xml: Replace
+ PAM_IGNORE with PAM_USER_UNKNOWN (#1994330).
+
+ * modules/pam_tally/pam_tally.c: Add support for silent and
+ no_log_info options.
+ * modules/pam_tally/pam_tally.8.xml: Document silent and
+ no_log_info options.
+
+2008-07-08 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/passverify.c (verify_pwd_hash): Adjust debug
+ statement.
+
+2008-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/unix_chkpwd.c (main): Fix compiling without
+ audit support.
+
+ * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo in ucredit
+ description (reported by Wayne Pollock <pollock@acm.org>)
+
+2008-06-19 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
+ Detect configuration errors. Fail on incomplete condition.
+
+2008-05-20 Tomas Mraz <t8m@centrum.cz>
+
+ * configure.in: Work correctly with autoconf-2.62.
+
+2008-05-19 Tomas Mraz <t8m@centrum.cz>
+
+ * doc/man/pam_getenv.3.xml: Correct the pam_getenv documentation.
+
+ * doc/man/pam_prompt.3.xml: Add missing description.
+
+2008-05-14 Kjartan Maraas <kmaraas@gnome.org>
+
+ * po/nb.po: Updated translation.
+
+2008-05-14 Sulyok Péter <peti@sulyok.hu>
+
+ * po/hu.po: Updated translation.
+
+2008-05-14 Tomas Mraz <t8m@centrum.cz>
+
+ * libpam/pam_modutil_getgrgid.c: Replace hardcoded constant with
+ define PWD_LENGTH_SHIFT.
+ * libpam/pam_modutil_getgrnam.c: Likewise.
+ * libpam/pam_modutil_getpwnam.c: Likewise.
+ * libpam/pam_modutil_getpwuid.c: Likewise.
+ * libpam/pam_modutil_getspnam.c: Likewise.
+ * libpam/pam_modutil_private.h: Adjust values for PWD_ constants.
+
+ * modules/pam_unix/pam_unix_passwd.c(pam_sm_chauthtok): Unset authtok
+ item when password is not approved.
+ * modules/pam_unix/support.c(_unix_read_password): UNIX_USE_FIRST_PASS
+ is always set when UNIX_AUTHTOK is set, change order of conditions.
+
+2008-05-02 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_selinux/pam_selinux.c(query_response): Add handling
+ for NULL response.
+ (manual_context): Handle failed query_response() properly. Rename
+ variable responses to response which is more correct name.
+ (config_context): Likewise.
+ (pam_sm_open_session): Do not base decision on whether there is a tty.
+
+2008-04-22 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_selinux/pam_selinux.c(pam_sm_close_sesion): Fix
+ regression from the change from 2008-03-20. setexeccon() must be
+ called also with NULL prev_context.
+
+2008-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_access/access.conf.5.xml: Document changed behavior
+ of LOCAL keyword.
+ * modules/pam_access/pam_access.c: Add from_remote_host to
+ struct login_info to change behavior of LOCAL keyword: if
+ PAM_RHOST is not set, LOCAL will be true.
+
+2008-04-18 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_namespace/pam_namespace.c: New functions
+ unprotect_dirs(), cleanup_protect_data(), protect_mount(),
+ protect_dir() to protect directory by bind mount.
+ (cleanup_data): Renamed to cleanup_polydir_data().
+ (parse_create_params): Allow missing specification of mode
+ or owner.
+ (check_inst_parent): Call protect_dir() on the instance parent
+ directory. The directory is created when it doesn't exist.
+ (create_polydir): Protect and make the polydir by protect_dir(),
+ remove potential races.
+ (create_dirs): Renamed to create_instance(), remove call to
+ inst_init().
+ (ns_setup): Call protect_dir() on the polydir if it already exists.
+ Call inst_init() after the polydir is mounted.
+ (setup_namespace): Set the namespace protect data to be cleaned up
+ on pam_close_session()/pam_end().
+ (pam_sm_open_session): Initialize the protect_dirs.
+ (pam_sm_close_session): Cleanup namespace protect data.
+ * modules/pam_namespace/pam_namespace.h: Define struct for the
+ stack of protected dirs.
+ * modules/pam_namespace/pam_namespace.8.xml: Document when the
+ instance init script is called.
+ * modules/pam_namespace/namespace.conf.5.xml: Likewise.
+
+2008-04-17 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.c(myhostname): Removed function.
+ (user_match): Supply hostname of the machine to the netgroup_match().
+ Use hostname from the loginfo instead of calling myhostname().
+ (pam_sm_authenticate): Call gethostname() to fill hostname in the
+ loginfo.
+
+ * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try
+ to lock if euid != 0.
+
+2008-04-16 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/Makefile.am: Link unix_chkpwd with libaudit.
+ * modules/pam_unix/unix_chkpwd.c(_audit_log): New function for audit.
+ (main): Call _audit_log() when appropriate.
+
+ * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Recognize also
+ try_first_pass and use_first_pass options.
+ (pam_sm_chauthtok): Implement the new options.
+
+2008-04-08 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_xauth/pam_xauth.c(run_coprocess): Avoid multiple
+ calls to sysconf() (based on patch by Sami Farin).
+
+ * libpam/pam_item.c (TRY_SET): Do not set when destination
+ is identical to source.
+ (pam_set_item): Do not overwrite destination when it
+ is identical to source.
+
+2008-04-07 Miloš Komarčević <kmilos@gmail.com>
+
+ * po/sr.po: New file with translation.
+ * po/sr@latin.po: Likewise.
+ * po/LINGUAS: Add sr and sr@latin.
+
+2008-04-03 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 1.0.0
+
+ * configure.in: Set version number to 1.0.0.
+ * libpam/Makefile.am: Bump patchlevel of libpam.
+ * doc/adg/Linux-PAM_ADG.xml: Update version/date.
+ * doc/mwg/Linux-PAM_MWG.xml: Likewise.
+ * doc/sag/Linux-PAM_SAG.xml: Likewise.
+
+2008-03-31 Dan Walsh <dwalsh@redhat.com>
+
+ * modules/pam_sepermit/pam_sepermit.c(sepermit_lock): Mark lock fd to
+ be closed on exec.
+
+2008-03-25 Leah Liu <lliu@redhat.com>
+
+ * po/zh_CN.po: Updated translation.
+
+2008-03-20 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_namespace/pam_namespace.c(poly_name): Switch to USER
+ method only when appropriate.
+ (setup_namespace): Do not umount when not mounted with RUSER.
+
+ * modules/pam_selinux/pam_selinux.c(pam_sm_close_session): Call
+ freecontext() after the context is logged not before.
+
+2008-03-18 Canniot Thomas <thomas.canniot@mrtomlinux.org>
+
+ * po/fr.po: Updated translation.
+
+2008-03-13 Ankit Patel <ankit@redhat.com>
+
+ * po/gu.po: Updated translation.
+
+2008-03-05 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_cracklib/pam_cracklib.c(pam_sm_chauthtok): Avoid
+ unnecessary x_strdup() of resp.
+ * modules/pam_ftp/pam_ftp(pam_sm_authenticate): Call _pam_overwrite()
+ before dropping password resp.
+
+2008-03-03 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_selinux/pam_selinux.c: Do not translate syslog messages.
+ * po/Linux-PAM.pot: Update.
+
+ * libpam/pam_item.c(RESET): Rename to TRY_SET, handle strdup failure.
+ (pam_set_item): Use TRY_SET() also for PAM_AUTHTOK and PAM_OLDAUTHTOK.
+ Handle allocation failure for PAM_XAUTHDATA.
+ (pam_get_user): Return error when conversation returns NULL user.
+ Call pam_set_item() instead of RESET().
+
+2008-02-26 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/Makefile.am: Do not link to cracklib.
+ * modules/pam_unix/pam_unix_passwd.c(_pam_unix_approve_pass):
+ Do not call FascistCheck() from cracklib.
+
+2008-02-29 Fabian Affolter <fab@fedoraproject.org>
+
+ * po/de.po: Updated translation.
+
+2008-02-28 Piotr Drąg <piotrdrag@gmail.com>
+
+ * po/pl.po: Updated translation.
+
+2008-02-26 Tomas Mraz <t8m@centrum.cz>
+
+ * po/LINUGAS: New languages added.
+ * po/es.po: Updated translations.
+ * po/fr.po: Likewise.
+ * po/it.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/nl.po: Likewise.
+ * po/pl.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/ru.po: Likewise.
+ * po/zh_CN.po: Likewise.
+ * po/as.po: New file.
+ * po/gu.po: Likewise.
+ * po/hi.po: Likewise.
+ * po/kn.po: Likewise.
+ * po/ko.po: Likewise.
+ * po/ml.po: Likewise.
+ * po/or.po: Likewise.
+ * po/si.po: Likewise.
+ * po/ta.po: Likewise.
+
+2008-02-21 Tomas Mraz <t8m@centrum.cz>
+
+ * libpam/pam_audit.c (_pam_audit_writelog): Silence syslog
+ message on non-error return.
+
+ * modules/pam_unix/unix_chkpwd.c (main): Proceed as unprivileged
+ user when checking password of another user.
+ * modules/pam_unix/unix_update.c: Fix comment.
+
+2008-02-18 Dmitry V. Levin <ldv@altlinux.org>
+
+ * libpam/pam_handlers.c (_pam_assemble_line): Fix potential
+ buffer overflow.
+ * xtests/tst-pam_assemble_line1.pamd: New test for
+ _pam_assemble_line.
+ * xtests/tst-pam_assemble_line1.sh: New script for
+ tst-pam_assemble_line1.
+ * xtests/Makefile.am (NOSRCTESTS): Add tst-pam_assemble_line1.
+ (EXTRA_DIST): Add tst-pam_assemble_line1.pamd and
+ tst-pam_assemble_line1.sh
+
+ * modules/pam_exec/pam_exec.c (call_exec): Fix asprintf return
+ code check.
+
+2008-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.10.0
+
+ * configure.in: set version number.
+
+ * modules/pam_rhosts/Makefile.am: Remove pam_rhosts_auth.
+ * modules/pam_rhosts/pam_rhosts_auth.c: Removed.
+ * modules/pam_rhosts/tst-pam_rhosts_auth: Removed.
+
+ * modules/pam_namespace/Makefile.am (noinst_HEADERS): Add
+ pam_namespace.h.
+
+2008-02-13 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_namespace/Makefile.am: Add argv_parse files and namespace.d
+ dir.
+ * modules/pam_namespace/argv_parse.c: New file.
+ * modules/pam_namespace/argv_parse.h: New file.
+ * modules/pam_namespace/namespace.conf.5.xml: Document new features.
+ * modules/pam_namespace/pam_namespace.8.xml: Likewise.
+ * modules/pam_namespace/pam_namespace.h: Use SECURECONF_DIR define.
+ Define NAMESPACE_D_DIR and NAMESPACE_D_GLOB. Define new option flags
+ and polydir flags.
+ (polydir_s): Add rdir, replace exclusive with flags, add init_script,
+ owner, group, and mode.
+ (instance_data): Add ruser, gid, and ruid.
+ * modules/pam_namespace/pam_namespace.c: Remove now unused copy_ent().
+ (add_polydir_entry): Add the entry directly, no copy.
+ (del_polydir): New function.
+ (del_polydir_list): Call del_polydir().
+ (expand_variables, parse_create_params, parse_iscript_params,
+ parse_method): New functions.
+ (process_line): Call expand_variables() on polydir and instance prefix.
+ Call argv_parse() instead of strtok_r(). Allocate struct polydir_s on heap.
+ (parse_config_file): Parse .conf files from namespace.d dir after
+ namespace.conf.
+ (form_context): Call getcon() or get_default_context_with_level() when
+ appropriate flags are set.
+ (poly_name): Handle shared polydir flag.
+ (inst_init): Execute non-default init script when specified.
+ (create_polydir): New function.
+ (create_dirs): Remove the code which checks the polydir. Do not call
+ inst_init() when noinit flag is set.
+ (ns_setup): Check the polydir and eventually create it if the create flag
+ is set.
+ (setup_namespace): Use ruser uid from idata. Set the namespace polydir
+ pam data only when namespace was set up correctly. Unmount polydir
+ based on ruser.
+ (get_user_data): New function.
+ (pam_sm_open_session): Check for use_current_context and
+ use_default_context options. Call get_user_data().
+ (pam_sm_close_session): Call get_user_data().
+
+2008-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/de.po: Translate some more strings.
+
+2008-02-05 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/unix_update.c: Remove unused declarations.
+
+2008-02-04 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_static_modules.h: Add _pam_sepermit_modstruct.
+ * modules/pam_sepermit/pam_sepermit.c: Fix typo.
+ * modules/pam_sepermit/Makefile.am: Install config file only
+ if we build the module.
+
+ * README: Add --disable-pie to configure options for static library.
+
+ * doc/man/Makefile.am: Fix building outside of src directory.
+
+ * libpam/Makefile.am: Bump version number of libpam.
+
+ * modules/Makefile.am: Add pam_sepermit.
+
+ * doc/Makefile.am: Fix build out of source directory.
+
+ * po/POTFILES.in: Add pam_sepermit.c.
+
+ * modules/pam_exec/pam_exec.c: Set PAM environment variables and
+ add 'quiet' option.
+ * modules/pam_exec/pam_exec.8.xml: Document new behavior.
+ Patch from Julien Lecomte <julien@lecomte.at>.
+
+2008-02-01 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_namespace/namespace.conf.5.xml: Add documentation for
+ tmpfs and tmpdir polyinst and for ~ user list modifier.
+ * modules/pam_namespace/namespace.init: Add documentation for the
+ new init parameter. Add home directory initialization script.
+ * modules/pam_namespace/pam_namespace.8.xml: Document the new
+ init parameter of the namespace.init script.
+ * modules/pam_namespace/pam_namespace.c(copy_ent): Copy exclusive flag.
+ (cleanup_data): New function.
+ (process_line): Set exclusive flag. Add tmpfs and tmpdir methods.
+ (ns_override): Change behavior on the exclusive flag.
+ (poly_name): Process tmpfs and tmpdir methods.
+ (inst_init): Add flag for new directory initialization.
+ (create_dirs): Process the tmpdir method, add the new directory
+ flag.
+ (ns_setup): Remove unused code. Process the tmpfs method.
+ (cleanup_tmpdirs): New function.
+ (setup_namespace): Set data for proper cleanup. Cleanup the tmpdirs
+ on failures.
+ (pam_sm_close_session): Instead of parsing the config file again use
+ the previously set data for cleanup.
+ * modules/pam_namespace/pam_namespace.h: Add TMPFS and TMPDIR methods
+ and exclusive flag.
+
+2008-01-29 Tomas Mraz <t8m@centrum.cz>
+
+ * configure.in: Test for setkeycreatecon needs libselinux.
+ Add new module pam_sepermit.
+ * modules/Makefile.am: Add new module pam_sepermit.
+ * modules/pam_sepermit/.cvsignore: New file.
+ * modules/pam_sepermit/Makefile.am: Likewise.
+ * modules/pam_sepermit/README.xml: Likewise.
+ * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
+ * modules/pam_sepermit/pam_sepermit.c: Likewise.
+ * modules/pam_sepermit/sepermit.conf: Likewise.
+ * modules/pam_sepermit/tst-pam_sepermit: Likewise.
+ * doc/sag/pam_sepermit.xml: Likewise.
+
+ * doc/sag/pam_tty_audit.xml: Add pam_tty_audit to SAG.
+
+2008-01-29 Miloslav Trmac <mitr@redhat.com>
+
+ * modules/pam_tty_audit/README.xml: Add notes section.
+ * modules/pam_tty_audit/pam_tty_audit.8.xml: Describe patterns
+ support and open_only option. Add notes.
+ * modules/pam_tty_audit/pam_tty_audit.c(pam_sm_open_session): Add
+ support for pattern matching and the open_only option.
+
+2008-01-28 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_audit.c: Include pam_modutil_private.h.
+
+ * libpam/pam_item.c (pam_set_item): Fix compiler warning.
+
+ * libpam/pam_end.c (pam_end): Cast to correct pointer type.
+ * libpam/include/security/_pam_macros.h (_pam_overwrite_n): Use
+ unsigned int.
+
+ * modules/pam_unix/passverify.c: Fix compiling without SELinux
+ support.
+
+2008-01-24 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/bigcrypt.c (bigcrypt): Use crypt_r() when
+ available.
+ * modules/pam_unix/passverify.c (strip_hpux_aging): New function
+ to strip HP/UX aging info from password hash.
+ (verify_pwd_hash): Call strip_hpux_aging(), use crypt_r() when
+ available.
+
+2008-01-23 Tomas Mraz <t8m@centrum.cz>
+
+ * configure.in: Add test for crypt_r(). Add setting/disabling random
+ device support.
+
+ * modules/pam_unix/Makefile.am: Add unix_update.8 manpage generated from
+ XML, generate also unix_chkpwd.8 from XML.
+ * modules/pam_unix/pam_unix_acct.c: Add rounds parameter to _set_ctrl().
+ * modules/pam_unix/pam_unix_auth.c: Likewise.
+ * modules/pam_unix/pam_unix_sess.c: Likewise.
+ * modules/pam_unix/pam_unix_passwd.c: Likewise.
+ * modules/pam_unix/support.c(_set_ctrl): Likewise.
+ * modules/pam_unix/support.h: Likewise. Add UNIX_SHA256_PASS,
+ UNIX_SHA512_PASS, and UNIX_ALGO_ROUNDS ctrls.
+ (pam_sm_chauthtok): Refactor out new password encryption.
+ * modules/pam_unix/passverify.c(crypt_make_salt): New function.
+ (crypt_md5_wrapper): Call crypt_make_salt().
+ (create_password_hash): New function refactored out of
+ pam_sm_chauthtok(). Support for new password hashes.
+ * modules/pam_unix/passverify.h: Drop ascii_to_bin() and bin_to_ascii()
+ macros. Add prototype for create_password_hash().
+ * modules/pam_unix/unix_update.8.xml: New file.
+ * modules/pam_unix/unix_chkpwd.8.xml: Likewise.
+
+ * modules/pam_unix/Makefile.am: Add unix_update helper.
+ * modules/pam_unix/pam_unix_passwd.c: Move functions i64c(),
+ crypt_md5_wrapper(), save_old_password(), _update_passwd() and
+ _update_shadow() to passverify.c file. Rename _unix_run_shadow_binary()
+ to _unix_run_update_binary(), which also verifies old password and
+ does all writing.
+ (_do_setpass, pam_sm_chauthtok): lckpwdf()->lock_pwdf(), the same for unlock.
+ Call _unix_run_update_binary() appropriately.
+ _update_passwd()->unix_update_passwd(), the same for shadow.
+ * modules/pam_unix/passverify.c: Add new functions moved from
+ pam_unix_passwd.c and unix_chkpwd.c.
+ * modules/pam_unix/passverify.h: Likewise.
+ * modules/pam_unix/unix_chkpwd.c: Remove SELinux checks. Move
+ su_sighandler(), setup_signals(), getuidname() to passverify.c.
+ (main): Remove 'shadow' option. Refactor out read_passwords() and
+ call it. More strict checking how the binary is called.
+ * modules/pam_unix/unix_update.c: New helper binary - non-setuid,
+ called from SELinux confined apps only.
+
+ * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Return
+ status and daysleft instead of fake shadow entry.
+ (pam_sm_acct_mgmt): Call _unix_run_verify_binary() appropriately.
+ * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Call
+ get_account_info() and check_shadow_expiry().
+ * modules/pam_unix/support.h: Adjust _unix_run_verify_binary()
+ prototype.
+ * modules/pam_unix/support.c (_unix_run_helper_binary): Remove check
+ on selinux enabled/disabled.
+ * modules/pam_unix/unix_chkpwd.c (_verify_account): Rename to
+ _check_expiry(), now checks shadow expiry info.
+ (main): Remove check on selinux enabled/disabled. Check shadow
+ expiry through _check_expiry().
+
+ * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Call
+ get_account_info() and check_shadow_expiry().
+ * modules/pam_unix/passverify.c: Add get_account_info() to
+ obtain shadow and passwd entry. Add check_shadow_expiry() to
+ for shadow password expiry check.
+ (get_pwd_hash): Call get_account_info().
+ * modules/pam_unix/passverify.h: Add prototypes for get_account_info()
+ and check_shadow_expiry().
+
+2008-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/Makefile.am: Fix manual page dependencies,
+ add hack for bug in xsl stylestheets.
+
+2008-01-07 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/it.po: Fix typos.
+ * po/de.po: Few new translations.
+ * po/POTFILES.in: Add pam_tty_audit.c and passverify.c.
+ * doc/man/pam_xauth_data.3.xml: Added to CVS.
+ * doc/man/pam_xauth_data.3: Likewise.
+ * modules/pam_tty_audit/README: Likewise.
+ * modules/pam_tty_audit/pam_tty_audit.8: Likewise.
+ * po/sv.po: Update swedish translation [#1857531].
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix
+ cut & paste error [#1863490].
+
+2008-01-02 Petteri Räty <betelgeuse@gentoo.org>
+ * modules/pam_limits/limits.conf: document allowed values for
+ nice.
+ * modules/pam_limits/limits.conf.5.xml: Likewise.
+
+2007-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * README: Document how to run make check with static modules
+ (SF#1822779).
+
+2007-12-18 Peter Breitenlohner <peb@mppmu.mpg.de>
+ * README: Document that "make check" requires a file
+ /etc/pam.d/other (SF#1822764).
+
+2007-12-12 Eamon Walsh <ewalsh@tycho.nsa.gov>
+
+ * doc/man/pam_item_types_ext.inc.xml: More appropriate wording
+ for PAM_XDISPLAY doc.
+
+2007-12-07 Tomas Mraz <t8m@centrum.cz>
+
+ * po/cs.po: Updated translations.
+
+ * libpam/libpam.map: Add LIBPAM_MODUTIL_1.1 version.
+ * libpam/pam_audit.c: Add _pam_audit_open() and
+ pam_modutil_audit_write().
+ (_pam_auditlog): Call _pam_audit_open().
+ * libpam/include/security/pam_modutil.h: Add pam_modutil_audit_write().
+ * modules/pam_access/pam_access.8.xml: Add noaudit option.
+ Document auditing.
+ * modules/pam_access/pam_access.c: Move fs, sep, pam_access_debug, and
+ only_new_group_syntax variables to struct login_info. Add noaudit
+ member.
+ (_parse_args): Adjust for the move of variables and add support for
+ noaudit option.
+ (group_match): Add debug parameter.
+ (string_match): Likewise.
+ (network_netmask_match): Likewise.
+ (login_access): Adjust for the move of variables. Add nonall_match.
+ Add call to pam_modutil_audit_write().
+ (list_match): Adjust for the move of variables.
+ (user_match): Likewise.
+ (from_match): Likewise.
+ (pam_sm_authenticate): Call _parse_args() earlier.
+ * modules/pam_limits/pam_limits.8.xml: Add noaudit option.
+ Document auditing.
+ * modules/pam_limits/pam_limits.c (_pam_parse): Add noaudit option.
+ (setup_limits): Call pam_modutil_audit_write().
+ * modules/pam_time/pam_time.8.xml: Add debug and noaudit options.
+ Document auditing.
+ * modules/pam_time/pam_time.c: Add option parsing (_pam_parse()).
+ (check_account): Call _pam_parse(). Call pam_modutil_audit_write()
+ and pam_syslog() on login denials.
+
+2007-12-07 Luca Bruno <luca.br@uno.it>
+
+ * po/it.po: Updated translations.
+
+2007-12-06 Eamon Walsh <ewalsh@tycho.nsa.gov>
+
+ * libpam/include/security/_pam_macros.h: Add _pam_overwrite_n()
+ macro.
+ * libpam/include/security/_pam_types.h: Add PAM_XDISPLAY,
+ PAM_XAUTHDATA items, pam_xauth_data struct.
+ * libpam/pam_item.c (pam_set_item, pam_get_item): Handle
+ PAM_XDISPLAY and PAM_XAUTHDATA items.
+ * libpam/pam_end.c (pam_end): Destroy the new items.
+ * libpam/pam_private.h (pam_handle): Add data members for new
+ items. Add prototype for _pam_memdup.
+ * libpam/pam_misc.c: Add _pam_memdup.
+ * doc/man/Makefile.am: Add pam_xauth_data.3. Replace
+ pam_item_types.inc.xml with pam_item_types_std.inc.xml and
+ pam_item_types_ext.inc.xml.
+ * doc/man/pam_get_item.3.xml: Replace pam_item_types.inc.xml
+ with pam_item_types_std.inc.xml and pam_item_types_ext.inc.xml.
+ * doc/man/pam_set_item.3.xml: Likewise.
+ * doc/man/pam_item_types.inc.xml: Removed file.
+ * doc/man/pam_item_types_ext.inc.xml: New file.
+ * doc/man/pam_item_types_std.inc.xml: New file.
+
+2007-12-06 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_tty_audit/pam_tty_audit.8.xml: Fix example.
+
+2007-12-05 Miloslav Trmac <mitr@redhat.com>
+
+ * configure.in: Add test for audit_tty_status struct. Add
+ pam_tty_audit module.
+ * libpam/pam_static_modules.h: Add pam_tty_audit module.
+ * modules/pam_tty_audit/Makefile.am: New file.
+ * modules/pam_tty_audit/README.xml: Likewise.
+ * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
+ * modules/pam_tty_audit/pam_tty_audit.c: Likewise.
+
+2007-12-05 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/Makefile.am: Add passverify.h and passverify.c
+ as first part of pam_unix refactorization.
+ * modules/pam_unix/pam_unix/pam_unix_acct.c: Include passverify.h.
+ * modules/pam_unix/pam_unix_passwd.c: Likewise.
+ * modules/pam_unix/passverify.c: New file with common functions.
+ * modules/pam_unix/passverify.h: Prototypes for the common functions.
+ * modules/pam_unix/support.c: Include passverify.h, move
+ _unix_shadowed() to passverify.c.
+ (_unix_verify_password): Refactor out verify_pwd_hash() function.
+ * modules/pam_unix/support.h: Move _unix_shadowed() prototype to
+ passverify.h
+ * modules/pam_unix/unix_chkpwd.c: Use _unix_shadowed() and
+ verify_pwd_hash() from passverify.c.
+
+2007-11-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/Makefile.am (unix_chkpwd_LDADD): Don't link
+ unix_chkpwd unnecessary against libpam (#1822779).
+
+ * modules/pam_tally/pam_tally.c (tally_log): Map
+ pam_modutil_getpwnam to getpwnam if we don't compile
+ as module.
+ * modules/pam_tally/Makefile.am: Don't link pam_tally_app
+ against libpam (#1822779).
+
+2007-11-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/tst-pam_group1.c: Include stdlib.h
+ * xtests/tst-pam_succeed_if1.c: Likewise.
+ * xtests/tst-pam_limits1.c: Likewise.
+ * xtests/tst-pam_access1.c: Likewise.
+ * xtests/tst-pam_access2.c: Likewise.
+ * xtests/tst-pam_access3.c: Likewise.
+ * xtests/tst-pam_access4.c: Likewise.
+ * xtests/tst-pam_unix1.c: Likewise.
+ * xtests/tst-pam_unix2.c: Likewise.
+ * xtests/tst-pam_unix3.c: Likewise.
+ * xtests/tst-pam_cracklib1.c: Likewise.
+ * xtests/tst-pam_cracklib2.c: Likewise.
+
+ * libpam/pam_static_modules.h: Fix name of pam_namespace variable.
+
+2007-11-01 Peter Breitenlohner <peb@mppmu.mpg.de>
+
+ * doc/man/pam_conv.3.xml: Correct typo.
+
+2007-10-30 Peter Breitenlohner <peb@mppmu.mpg.de>
+
+ * modules/pam_rhosts/pam_rhosts_auth.c (__icheckhost): Correct
+ misplaced parenthesis.
+ * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Prevent use of
+ dngettext() when NLS is disabled.
+ * modules/pam_exec/pam_exec.c (call_exec): Avoid gcc warning.
+ * doc/specs/parse_y.y (set_label, new_counter): Break trigraphs to
+ avoid gcc warning.
+ * modules/pam_wheel/pam_wheel.c: Remove excessive initializer
+ elements.
+
+ * modules/pam_cracklib/pam_cracklib.8.xml: Correct typo.
+ * modules/pam_limits/limits.conf.5.xml: Likewise.
+ * modules/pam_listfile/pam_listfile.8.xml: Likewise.
+ * modules/pam_xauth/pam_xauth.8.xml: Likewise.
+
+ * modules/pam_deny/pam_deny.8.xml: Correct spelling.
+ * modules/pam_group/pam_group.8.xml: Likewise.
+ * modules/pam_permit/pam_permit.8.xml: Likewise.
+ * modules/pam_shells/pam_shells.8.xml: Likewise.
+ * modules/pam_time/pam_time.8.xml: Likewise.
+ * modules/pam_warn/pam_warn.8.xml: Likewise.
+
+ * tests/tst-dlopen.c: Return 77 in case of static modules, such that
+ all modules/pam_*/tst-pam_* tests yield SKIP instead of FAIL.
+ * libpam/Makefile.am (libpam_la_LIBADD): Use "$(shell ls ...)" instead
+ of "`ls ...`", to allow for static modules.
+ * libpam/pam_static_modules.h: Make pam_keyinit module depend on
+ HAVE_KEY_MANAGEMENT; correct name of pam_faildelay pam_module struct.
+ * modules/pam_faildelay/pam_faildelay.c: Correct name of pam_module
+ struct.
+
+2007-10-25 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_tally/pam_tally.c: fix the definition of OPT_AUDIT
+ to be octal instead of decimal, so that it works properly in a
+ bit field instead of forcing the "even_deny_root_account" and
+ "no_reset" options to on.
+ Patch from Corey Wright <undefined@pobox.com>.
+
+2007-10-19 Tomas Mraz <t8m@centrum.cz>
+
+ * xtests/tst-pam_access1.c: Use different name for user and group.
+ * xtests/tst-pam_access1.sh: Likewise.
+ * xtests/tst-pam_access2.c: Likewise.
+ * xtests/tst-pam_access2.sh: Likewise.
+ * xtests/tst-pam_access4.c: Likewise.
+ * xtests/tst-pam_access4.sh: Likewise.
+ * xtests/group.conf: Likewise.
+ * xtests/tst-pam_group1.c: Likewise.
+ * xtests/tst-pam_group1.sh: Likewise.
+
+ * libpam/pam_dispatch.c (_pam_dispatch_aux): Save states for substacks,
+ record substack level, skip over virtual substack modules, implement
+ evaluation of done, die, reset and jumps in substacks. Also fixes
+ too far jumps in substacks.
+ * libpam/pam_end.c (pam_end): Drop substack evaluation states.
+ * libpam/pam_handlers.c (_pam_parse_conf_file): Add substack level
+ parameter, instead of must_fail use handler_type needed for virtual
+ substack modules.
+ (_pam_load_conf_file): Add substack level parameter.
+ (_pam_init_handlers): Substack level parameter added to
+ _pam_parse_conf_file() calls.
+ (_pam_load_module): New function.
+ (_pam_add_handler): Refactor code into the _pam_load_module(). Add
+ support for virtual substack modules.
+ * libpam/pam_private.h: Rename must_fail to handler_type, add stack_level
+ to struct handler. Define handler type constants. Add struct
+ for substack evaluation states. Define constant for maximum
+ substack level. Add substack states pointer to former state struct.
+ * libpam/pam_start.c (pam_start): Initialize pointer to substack states.
+ * doc/man/pam.conf-syntax.xml: Document substack control.
+ * xtests/Makefile.am: Add new tests for substack evaluation.
+ * xtests/run_xtests.sh: Support multiple .pamd files in a test.
+ * xtests/tst-pam_authfail.pamd: New tests for substack evaluation.
+ * xtests/tst-pam_authsucceed.pamd: Likewise.
+ * xtests/tst-pam_substack1.pamd: Likewise.
+ * xtests/tst-pam_substack1a.pamd: Likewise.
+ * xtests/tst-pam_substack1.sh: Likewise.
+ * xtests/tst-pam_substack2.pamd: Likewise.
+ * xtests/tst-pam_substack2a.pamd: Likewise.
+ * xtests/tst-pam_substack2.sh: Likewise.
+ * xtests/tst-pam_substack3.pamd: Likewise.
+ * xtests/tst-pam_substack3a.pamd: Likewise.
+ * xtests/tst-pam_substack3.sh: Likewise.
+ * xtests/tst-pam_substack4.pamd: Likewise.
+ * xtests/tst-pam_substack4a.pamd: Likewise.
+ * xtests/tst-pam_substack4.sh: Likewise.
+ * xtests/tst-pam_substack5.pamd: Likewise.
+ * xtests/tst-pam_substack5a.pamd: Likewise.
+ * xtests/tst-pam_substack5.sh: Likewise.
+
+2007-10-18 Tomas Mraz <t8m@centrum.cz>
+
+ * xtests/tst-pam_dispatch4.c: Fix comment about the test.
+ * xtests/tst-pam_dispatch4.pamd: Improve the testcase.
+ * xtests/tst-pam_cracklib2.c: Make the testcase more robust.
+
+2007-10-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/Makefile.am: Add tst-pam_dispatch5 sources
+ * xtests/tst-pam_dispatch5.c: New test for jump too far.
+ * xtests/tst-pam_dispatch5.pamd: New test configuration.
+
+2007-10-09 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_tally/pam_tally.8.xml: Document audit option
+ correctly.
+
+2007-10-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.9.0
+
+ * configure.in: Increase vesion number.
+
+ * libpam/Makefile.am: Increase release number.
+ * libpam_misc/Makefile.am: Increase release number.
+
+ * po/*.po: Regenerate.
+
+2007-10-08 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_time/pam_time.c (is_same): Length of strings without
+ wildcard needs to be the same.
+ * modules/pam_group/pam_group.c (is_same): Likewise.
+
+2007-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/tst-pam_group1.c: New test case for user compare in pam_group.
+ * xtests/tst-pam_group1.sh: Script to run test case.
+ * xtests/tst-pam_group1.pamd: Config for test case.
+ * xtests/Makefile.am: Add tst-pam_group1 test case.
+ * xtests/run-xtests.sh: Save/restore group.conf.
+ * xtests/group.conf: New.
+
+ * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Don't
+ free arguments used for putenv().
+
+ * doc/man/pam_putenv.3.xml: Document that application has to free
+ the memory.
+
+2007-09-27 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist): Fix in
+ operator rhbz #295151.
+ * modules/pam_namespace/pam_namespace.c (poly_name): Do not try to
+ get context when SELinux is disabled.
+
+2007-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/tst-pam_succeed_if1.c: New test case for
+ https://bugzilla.redhat.com/show_bug.cgi?id=295151
+ * xtests/tst-pam_succeed_if1.sh: Script to run test case.
+ * xtests/tst-pam_succeed_if1.pamd: Config for test case.
+ * xtests/Makefile.am: Add tst-pam_succeed_if1 test case.
+
+ * xtests/run-xtests.sh: Add support to skip tests.
+ * xtests/tst-pam_limits1.c: Skip test if RLIMIT_NICE is not
+ defined.
+
+2007-09-03 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_limits/pam_limits.c: remove a number of unnecessary
+ string manipulations, including a strncpy() that was acting on
+ overlapping memory.
+
+ * libpam_misc/misc_conv.c: don't block SIGINT in misc_conv; it's
+ perfectly valid to allow the user to interrupt at a prompt. If
+ an application wants prompts to not be interruptable, the
+ application should take responsibility for blocking SIGINT.
+
+2007-09-02 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * examples/Makefile.am: Fix usage of LIBADD, LDADD and LDFLAGS.
+ * libpam/Makefile.am: Likewise.
+ * modules/pam_access/Makefile.am: Likewise.
+ * modules/pam_cracklib/Makefile.am: Likewise.
+ * modules/pam_debug/Makefile.am: Likewise.
+ * modules/pam_deny/Makefile.am: Likewise.
+ * modules/pam_echo/Makefile.am: Likewise.
+ * modules/pam_env/Makefile.am: Likewise.
+ * modules/pam_exec/Makefile.am: Likewise.
+ * modules/pam_faildelay/Makefile.am: Likewise.
+ * modules/pam_filter/Makefile.am: Likewise.
+ * modules/pam_filter/upperLOWER/Makefile.am: Likewise.
+ * modules/pam_ftp/Makefile.am: Likewise.
+ * modules/pam_group/Makefile.am: Likewise.
+ * modules/pam_issue/Makefile.am: Likewise.
+ * modules/pam_keyinit/Makefile.am: Likewise.
+ * modules/pam_lastlog/Makefile.am: Likewise.
+ * modules/pam_limits/Makefile.am: Likewise.
+ * modules/pam_listfile/Makefile.am: Likewise.
+ * modules/pam_localuser/Makefile.am: Likewise.
+ * modules/pam_loginuid/Makefile.am: Likewise.
+ * modules/pam_mail/Makefile.am: Likewise.
+ * modules/pam_mkhomedir/Makefile.am: Likewise.
+ * modules/pam_motd/Makefile.am: Likewise.
+ * modules/pam_namespace/Makefile.am: Likewise.
+ * modules/pam_nologin/Makefile.am: Likewise.
+ * modules/pam_permit/Makefile.am: Likewise.
+ * modules/pam_rhosts/Makefile.am: Likewise.
+ * modules/pam_rootok/Makefile.am: Likewise.
+ * modules/pam_securetty/Makefile.am: Likewise.
+ * modules/pam_selinux/Makefile.am: Likewise.
+ * modules/pam_shells/Makefile.am: Likewise.
+ * modules/pam_stress/Makefile.am: Likewise.
+ * modules/pam_succeed_if/Makefile.am: Likewise.
+ * modules/pam_tally/Makefile.am: Likewise.
+ * modules/pam_time/Makefile.am: Likewise.
+ * modules/pam_umask/Makefile.am: Likewise.
+ * modules/pam_unix/Makefile.am: Likewise.
+ * tests/Makefile.am: Likewise.
+
+2007-08-31 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_group/group.conf: don't use "games" as an example
+ group, on some distros this is a pre-existing group that it would
+ be a security hole to give users access to.
+
+2007-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_limits/limits.conf.5.xml: Document that maxlogins
+ is ignored for users with UID 0.
+
+2007-08-30 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_unix/support.c, modules/pam_unix/unix_chkpwd.c:
+ A wrong username doesn't need to be logged at LOG_ALERT;
+ LOG_WARNING should be sufficient.
+ Patch from Sam Hartman <hartmans@debian.org>.
+
+ * modules/pam_cracklib/pam_cracklib.c:
+ s/CRACKLIB_DICT/CRACKLIB_DICTS/, for consistency with existing
+ #define in pam_unix
+
+2007-08-29 Steve Langasek <vorlon@debian.org>
+
+ * libpam/pam_modutil_getgrgid.c, libpam/pam_modutil_getgrnam.c,
+ libpam/pam_modutil_getpwnam.c, libpam/pam_modutil_getpwuid.c,
+ libpam/pam_modutil_getspnam.c: don't use pthread mutexes in libpam
+ unnecessarily; this avoids linking problems on non-Linux
+ platforms.
+
+ * modules/pam_listfile/pam_listfile.c, modules/pam_listfile/README,
+ modules/pam_listfile/pam_listfile.8,
+ modules/pam_listfile/pam_listfile.8.xml: add a 'quiet' option to
+ avoid logging errors any time a user is refused service by this
+ module.
+
+2007-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_rhosts/pam_rhosts_auth.c: buflen needs to be size_t.
+ (__icheckhost): Cast to int32_t to fix limited range error.
+
+ * modules/pam_cracklib/pam_cracklib.c: Mark cracklib_dictpath
+ as const.
+
+2007-08-29 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_rhosts/pam_rhosts_auth.c: getline returns -1 at
+ EOF, not 0. Check accordingly to fix an infinite loop. Thanks
+ to Stephan Springl <springl-rhosts@bfw-online.de> for catching
+ this.
+
+2007-08-28 Steve Langasek <vorlon@debian.org>
+
+ * configure.in: call AC_CHECK_HEADERS instead of AC_CHECK_HEADER
+ for crack.h, so we get a HAVE_CRACK_H define.
+ * modules/pam_cracklib/pam_cracklib.c: don't copy around the
+ cracklib dictpath into a fixed-width buffer, when we can just
+ point at the existing strings; and allow users to override the
+ default cracklib path with -DCRACKLIB_DICT, required for
+ compatibility with cracklib 2.7.
+
+2007-08-27 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_limits/pam_limits.c: when building on non-Linux
+ systems, give a warning only, not an error; no one seems to
+ remember why this error was here in the first place, but leave
+ something in that might still grab the attention of non-Linux
+ users.
+ Patch from Michal Suchanek <hramrach_l@centrum.cz>.
+ * configure.in, modules/pam_rhosts/pam_rhosts_auth.c: check for
+ the presence of net/if.h before using, required for Hurd
+ compatibility.
+ Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
+ * modules/pam_limits/pam_limits.c: conditionalize the use of
+ RLIMIT_AS, which is not present on the Hurd.
+ Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
+ * modules/pam_rhosts/pam_rhosts_auth.c: use getline() instead of
+ a static buffer when available; fixes the build on systems
+ without MAXHOSTNAMELEN (i.e., the Hurd).
+ * modules/pam_xauth/pam_xauth.c: make sure PATH_MAX is defined
+ before using it.
+
+2007-08-26 Andrew Morgan <morgan@kernel.org>
+
+ * doc/man/pam.conf-syntax.xml
+ Minor fixes: '\[' -> '\]'.
+
+2007-08-25 Steve Langasek <vorlon@debian.org>
+
+ * doc/man/pam.conf-syntax.xml, doc/man/pam.conf.5:
+ Document "new" control options conv_again and incomplete, supported
+ in pam.d's extended syntax.
+ Patch from Ben Collins <bcollins@debian.org>.
+
+2007-08-15 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.c (list_match): Add explicit
+ sptr argument for strtok_r, otherwise the code is not portable.
+
+2007-08-13 Olivier Blin <blino@mandriva.com>
+
+ * doc/man/pam.3.xml: Fix typo.
+ * doc/man/pam.3: Likewise.
+ * doc/man/pam_end.3.xml: Likewise.
+ * doc/man/pam_end.3: Likewise.
+
+2007-07-18 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.8.1
+
+ * libpam/pam_audit.c: Include unistd.h for getuid().
+ * libpam/Makefile.am: Bump version number.
+
+2007-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_audit.c (_pam_audit_writelog): Don't return
+ error if application runs as normal user. Fixes regression
+ introduced with last change.
+
+2007-07-10 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Add --with-db-uniquename option to support
+ db libraries and functions with unique name extension.
+ Patch from Diego 'Flameeyes' Pettenò <flameeyes@gmail.com>.
+
+ * modules/pam_limits/pam_limits.c: Include locale.h.
+
+2007-07-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.8.0
+
+ * configure.in: Check for audit_log_acct_message instead of
+ audit_log_user_message.
+ * libpam/pam_audit.c: Use audit_log_acct_message.
+ Based on patch from Mark J Cox <mjc@redhat.com>.
+ * libpam/Makefile.am: Bump version number of libpam.
+
+ * modules/pam_umask/pam_umask.c (set_umask): mode_t is 32bit,
+ not 64bit.
+
+ * xtests/tst-pam_limits1.c: Fix printf arguments.
+
+ * po/*.po: Merge po files with latest code changes.
+
+2007-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_limits/pam_limits.c (process_limit): Check upper and
+ lower limit of nice value, fix off-by-one in conversation to rlim_t.
+ * xtests/Makefile.am: Add new pam_limits test case.
+ * xtests/limits.conf: New, config file for test case.
+ * xtests/pam_limits1.c: New, test case for RLIMIT_NICE.
+ * xtests/pam_limits1.sh: Likewise.
+ * xtests/pam_limits1.pamd: Likewise.
+
+2007-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r
+ result for recursive calls.
+ * xtests/Makefile.am: Add new pam_access test cases.
+ * xtests/pam_access1.c: New test case.
+ * xtests/pam_access2.c: Likewise.
+ * xtests/pam_access3.c: Likewise.
+ * xtests/pam_access4.c: Likewise.
+ * xtests/pam_access1.sh: Wrapper to create user accounts.
+ * xtests/pam_access2.sh: Likewise.
+ * xtests/pam_access3.sh: Likewise.
+ * xtests/pam_access4.sh: Likewise.
+ * xtests/pam_access1.pamd: PAM config file for pam_access tests.
+ * xtests/pam_access2.pamd: Likewise.
+ * xtests/pam_access3.pamd: Likewise.
+ * xtests/pam_access4.pamd: Likewise.
+ * xtests/access.conf: Config file for pam_access tests.
+ * xtests/run-tests.sh: Install access.conf into system.
+
+2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print
+ better error message if /proc/self/loginuid cannot be opened.
+
+ * modules/pam_limits/pam_limits.c (process_limit): Check for
+ variable overflow after multiplication [bnc#283001].
+
+ * modules/pam_access/pam_access.c: Add new syntax for groups
+ in access.conf to differentiate group names from account names.
+ Based on patch from Julien Lecomte <julien@famille-lecomte.net>,
+ solves feature request [#411390].
+ * modules/pam_access/access.conf: Add example for new group
+ syntax.
+ * modules/pam_access/access.conf.5.xml: Document new syntax.
+
+2007-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_cracklib/pam_cracklib.8.xml: Document new minclass
+ option.
+ * modules/pam_cracklib/pam_cracklib.c: Add support for minimum
+ character classes [#1688777]. Based on patch from Keith Schincke.
+
+ * xtests/tst-pam_cracklib2.c: New, test case for minclass option.
+ * xtests/tst-pam_cracklib2.pamd: New, PAM config file for test case.
+ * xtests/Makefile.am: Add new testcase.
+
+ * xtests/pam_cracklib.c: Fix comment what this application tests.
+
+ * configure.in: Use /lib64 on x86-64, ppc64, s390x, sparc64
+
+2007-06-15 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_selinux/pam_selinux.8.xml: Remove multiple option,
+ add select_context and use_current_range options.
+ * modules/pam_selinux/pam_selinux.c (send_audit_message): Added
+ function for auditing role/level changes.
+ (query_response): Add default response.
+ (select_context): Removed.
+ (manual_context): Query only role and level.
+ (mls_range_allowed): Added function for range check.
+ (config_context): Added function for role and level override.
+ (pam_sm_open_session): Remove multiple option, add select_context
+ and use_current_range_options. Use getseuserbyname to obtain
+ SELinux user and level. Audit role/level changes. Call setkeycreatecon
+ to assign key creation context. Don't fail on errors when SELinux
+ is not in enforcing mode.
+ * configure.in: Check for setkeycreatecon().
+
+ * modules/pam_namespace/README.xml: Avoid duplication of
+ documentation.
+ * modules/pam_namespace/namespace.conf: More real life example
+ from MLS support.
+ * modules/pam_namespace/namespace.conf.5.xml: Likewise plus
+ properly describe how instance directory names are formed.
+ * modules/pam_namespace/namespace.init: Preserve euid when
+ called from setuid apps (su, newrole).
+ * modules/pam_namespace/pam_namespace.8.xml: Added option
+ no_unmount_on_close.
+ * modules/pam_namespace/pam_namespace.c (process_line): Polyinst
+ methods are now user, level and context. Fix crash on unknown
+ override user in config file.
+ (ns_override): Add explicit uid parameter.
+ (form_context): Skip for user method. Implement level based
+ polyinstantiation.
+ (poly_name): Initialize contexts. Add level based polyinst,
+ remove 'both' metod. Use raw contexts for instance names,
+ truncate long instance names and add hash.
+ (ns_setup): Hashing moved to poly_name().
+ (setup_namespace): Handle correctly override users for
+ su (when unmnt_remnt is used).
+ (pam_sm_close_session): Added no_unmount_on_close option.
+ * modules/pam_namespace/pam_namespace.h: Added
+ no_unmount_on_close_option, level method, limit on instance
+ directory name length.
+
+2007-05-04 Thorsten Kukuk <kukuk@suse.de>
+
+ * xtests/run-xtests.sh: Use SRCDIR to find PAM config files.
+ * xtests/Makefile.am: Call run-xtests.sh with srcdir as first
+ argument.
+ Based on patch by Bernard Leak <thisisnotapipe@hotmail.com>.
+
+2007-04-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_limits/limits.conf: Address space limit is KB.
+ * modules/pam_limits/limits.conf.5.xml: Likewise.
+ Reported by Thomas Vander Stichele <thomas@apestaart.org>.
+
+ * modules/pam_mail/pam_mail.c (_do_mail): Remove duplicate
+ check for PAM_SILENT and don't bail out if it is set [#1706247].
+
+2007-03-29 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.c (login_access, list_match):
+ Replace strtok with strtok_r.
+ * modules/pam_cracklib/pam_cracklib.c (check_old_password):
+ Likewise.
+ * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate):
+ Likewise.
+ * modules/pam_unix/pam_unix_passwd.c (check_old_password,
+ save_old_password): Likewise.
+
+ * modules/pam_limits/Makefile.am: Define limits.d dir and install it.
+ * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing.
+ * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr.
+ (pam_parse): conf_file is now ptr.
+ (pam_sm_open_session): Add parsing files from limits.d subdir using
+ glob, change pl to pointer.
+
+2007-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/ar.po: New translation.
+ * po/ca.po: Likewise.
+ * po/da.po: Likewise.
+ * po/ru.po: Likewise.
+ * po/sv.po: Likewise.
+ * po/zu.po: Likewise.
+ * po/LINGUAS: Add ar, ca, da, ru, sv, zu
+
+ * po/hu.po: Update translation.
+
+2007-02-21 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Test for
+ allocation failure in bigcrypt().
+
+ * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Allow
+ modification of '*' password by root.
+
+2007-02-06 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Remove
+ debug syslog message when loginuid doesn't exist.
+
+2007-02-01 Tomas Mraz <t8m@centrum.cz>
+
+ * xtests/tst-pam_unix3.c: Fix typos in comments.
+
+ * modules/pam_unix/support.c (_unix_verify_password): Explicitly
+ disallow '!' in the beginning of password hash. Treat only
+ 13 bytes password hash specifically. (Suggested by Solar Designer.)
+ Fix a warning and test for allocation failure.
+ * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
+
+2007-01-31 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/Makefile.am: Add new pam_unix.so tests
+ * xtests/run-xtests.sh: Prefer shell scripts (wrapper)
+ over binaries.
+ * xtests/tst-pam_cracklib1.c: Fix typo.
+ * xtests/tst-pam_unix1.c: New, for sucurity fix.
+ * xtests/tst-pam_unix1.pamd: New.
+ * xtests/tst-pam_unix1.sh: New.
+ * xtests/tst-pam_unix2.c: New, for crypt checks.
+ * xtests/tst-pam_unix2.pamd: New.
+ * xtests/tst-pam_unix2.sh: New.
+ * xtests/tst-pam_unix3.c: New, for bigcrypt checks.
+ * xtests/tst-pam_unix3.pamd: New.
+ * xtests/tst-pam_unix3.sh: New.
+
+2007-01-23 Thorsten Kukuk <kukuk@suse.de>
+
+ * release 0.99.7.1
+
+ * configure.in: Set version number to 0.99.7.1
+
+2007-01-23 Thorsten Kukuk <kukuk@thukuk.de>
+ Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/support.c (_unix_verify_password): Always
+ compare full encrypted passwords (CVE-2007-0003).
+
+2007-01-23 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_loginuid/Makefile.am (AM_LDFLAGS): Add LIBAUDIT.
+
+ * modules/pam_selinux/Makefile.am (pam_selinux_check_LDFLAGS): Add
+ AM_LDFLAGS.
+ (pam_selinux_la_LDFLAGS): Likewise.
+
+2007-01-17 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release 0.99.7.0
+
+ * configure.in: Set version number to 0.99.7.0
+
+ * Makefile.am (M4_FILES): Replace GNU make extension by listing
+ all m4 files.
+
+2007-01-17 Tomas Mraz <t8m@centrum.cz>
+
+ * po/*.po: Updated strings to translate.
+ * po/Linux-PAM.pot: Likewise.
+
+2007-01-16 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam.conf-syntax.xml: Improve documentation about
+ sufficient keyword (Patch by Petteri Räty <betelgeuse@gentoo.org>)
+
+2006-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Forbid
+ only '+' and '-' as first characters for account names.
+ * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
+
+2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Fix ENOKEY check (specify errno.h as header
+ file to search in).
+
+ * configure.in: Add AM_PROG_CC_C_O.
+ * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS.
+ * modules/pam_tally/Makefile.am: Likewise.
+ * modules/pam_unix/Makefile.am: Likewise.
+
+ * modules/pam_stress/pam_stress.c (pam_sm_chauthtok): Fix
+ localisation of message printed to user.
+ * po/de.po: Adjust translation.
+
+2006-12-18 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Localize
+ message printed to user.
+
+ * modules/pam_unix/support.c (_unix_verify_password): Use strncmp
+ only for bigcrypt result.
+
+ * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Switch to new
+ egid first, euid next. Revert euid/egid to old euid/egid and not
+ ruid/rgid.
+ (pam_sm_open_session): Switch to new rgid first, ruid next.
+
+2006-12-13 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_localuser/pam_localuser.c: Add support for session
+ and chauthtok [SF#1606180].
+ * modules/pam_localuser/pam_localuser.8.xml: Document last change.
+
+ * libpam/pam_audit.c (_pam_audit_writelog): Print error message
+ only once.
+
+2006-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_audit.c (_pam_audit_writelog): Print error
+ message on failure to syslog.
+
+2006-12-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_umask/pam_umask.c: Use strtoul instead of strtol,
+ fix overflow detection.
+
+2006-12-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_mkhomedir/pam_mkhomedir.c (rec_mkdir): Fix
+ handling of left-most path component [SF#1591598].
+ (create_homedir): Mark user visible messages for translation.
+ * po/de.po: Adjust german translation for pam_mkhomedir.
+
+ * modules/pam_faildelay/pam_faildelay.c: If no argument is
+ given, try to read FAIL_DELAY from /etc/login.defs.
+ * modules/pam_faildelay/pam_faildelay.8.xml: Document usage
+ of /etc/login.defs.
+
+2006-12-04 Tomas Mraz <t8m@centrun.cz>
+
+ * po/jp.po: Fixed mistake in Password: message (from
+ Peng Huang <phuang@redhat.com>).
+
+2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/hu.po: Update hungarian translation (from
+ Kalman Kemenczy <kkemenczy@novell.com>).
+
+ * configure.in: Allow disabling support for cracklib, audit, libdb.
+
+ * modules/pam_faildelay/pam_faildelay.8.xml: Correct name of Author.
+
+ * configure.in: Remove --enable-docdir (obsolete by --docdir).
+ * doc/Makefile.am: Don't overwrite htmldir.
+ * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir.
+ * doc/mwg/Makefile.am: Likewise.
+ * doc/sag/Makefile.am: Likewise.
+ * doc/specs/Makefile.am: Use docdir.
+
+ * tests/tst-pam_set_data.c: New test cases for pam_set_data().
+ * tests/Makefile.am: Add pam_set_data test case.
+
+ * libpam/pam_data.c: Add NULL pointer check for module_data_name.
+ * libpam/Makefile.am: Bump revision of shared library.
+
+2006-11-08 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Add modules/pam_faildelay/Makefile.
+ * doc/sag/Linux-PAM_SAG.xml: Include pam_faildelay.xml.
+ * doc/sag/pam_faildelay.xml: New.
+ * libpam/pam_static_modules.h: Include static pam_faildelay data.
+ * modules/Makefile.am: Add pam_faildelay directory.
+ * modules/pam_faildelay/Makefile.am: New.
+ * modules/pam_faildelay/README: New, generated from XML file.
+ * modules/pam_faildelay/README.xml: New.
+ * modules/pam_faildelay/pam_faildelay.8: New, generated from xml.
+ * modules/pam_faildelay/pam_faildelay.8.xml: New.
+ * modules/pam_faildelay/pam_faildelay.c: New.
+ * modules/pam_faildelay/tst-pam_faildelay: New.
+
+ * po/POTFILES.in: Add pam_faildelay.c and pam_loginuid.c.
+
+2006-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_cracklib/pam_cracklib.c: PAM_DEBUG_ARG
+ is a bit mask and not a boolean value (Reported by
+ Jochen Voss <voss@seehuhn.de>).
+
+2006-10-26 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam.3.xml: Add pam_get_user function.
+
+ * modules/pam_motd/pam_motd.8.xml: Fix typo.
+
+2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_namespace/pam_namespace.c: Reserve space for
+ trailing zero.
+
+2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/support.c (_unix_verify_password): Try system
+ crypt() if we don't know the hash alogorithm.
+ * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
+
+2006-10-13 Tomas Mraz <t8m@centrum.cz>
+
+ * doc/mwg/Linux-PAM_MWG.xml: Add id[s] to section[s].
+ * doc/sag/pam_access.xml: Likewise.
+ * doc/sag/pam_echo.xml: Likewise.
+ * doc/sag/pam_env.xml: Likewise.
+ * doc/sag/pam_exec.xml: Likewise.
+ * doc/sag/pam_group.xml: Likewise.
+ * doc/sag/pam_limits.xml: Likewise.
+ * doc/sag/pam_namespace.xml: Likewise.
+ * doc/sag/pam_time.xml: Likewise.
+ * doc/sag/Linux-PAM_SAG.xml: Add id to book.
+ * doc/adg/Linux-PAM_ADG.xml: Add id to book.
+ * doc/mwg/Linux-PAM_MWG.xml: Add id to book.
+
+
+2006-10-07 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/hu.po: Updated hungarian translation (from
+ Kalman Kemenczy <kkemenczy@novell.com>)
+
+2006-09-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/adg/Makefile.am: Add manual pages as dependency.
+ * doc/mwg/Makefile.am: Likewise.
+ * doc/sag/Makefile.am: Likewise.
+ * doc/sag/Linux-PAM_SAG.xml: Include pam_unix.xml.
+ * doc/sag/pam_unix.xml: New.
+ * modules/pam_unix/Makefile.am: Generate pam_unix.8 manual page.
+ * modules/pam_unix/README.xml: New.
+ * modules/pam_unix/pam_unix.8.xml: New.
+ * modules/pam_unix/README: Regenerate from XML.
+ * modules/pam_unix/pam_unix.8: Generated from XML.
+
+2006-09-09 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_wheel/pam_wheel.8.xml: Fix typo.
+ * modules/pam_wheel/pam_wheel.8: Likewise.
+ * modules/pam_wheel/README: Likewise.
+
+2006-09-08 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/de.po: Fix typo.
+
+2006-09-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.6.3
+
+2006-09-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_loginuid/pam_loginuid.8.xml: Fix typo in
+ config name.
+
+2006-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_env/environment: New, dummy environment example
+ config file.
+
+ * modules/pam_namespace/Makefile.am: Don't install
+ manual page if we don't build module.
+
+ * m4/ld-as-needed.m4: Don't set LDFLAGS if check failed.
+ * m4/ld-O1: Likewise.
+
+2006-08-30 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.8.xml: All services supported.
+ * modules/pam_access/pam_access.c (pam_sm_open_session): New.
+ (pam_sm_close_session): New.
+ (pam_sm_chauthtok): New.
+
+ * modules/pam_access/pam_succeed_if.8.xml: All services supported.
+ * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return
+ PAM_IGNORE rather than success.
+ (pam_sm_open_session): New.
+ (pam_sm_close_session): New.
+ (pam_sm_chauthtok): New.
+
+2006-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/Makefile.am: Move shell code to execute tests from here ...
+ * xtests/run-xtests.sh: ... to here.
+ * xtests/*.c: Include config.h.
+ * tests/*.c: Likewise.
+
+ * modules/pam_namespace/pam_namespace.c: Use pam_modutil_getpwnam()
+ instead of getpwnam().
+
+2006-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/sag/pam_loginuid.xml: New.
+ * doc/sag/Linux-PAM_SAG.xml: Include pam_loginuid.xml.
+
+ * configure.in: Add modules/pam_loginuid/Makefile.
+ * modules/Makefile.am: Add pam_loginuid sub directory.
+
+ * libpam/pam_static_modules.h: Add pam_loginuid.
+
+ * modules/pam_loginuid/Makefile.am: New.
+ * modules/pam_loginuid/tst-pam_loginuid: New.
+ * modules/pam_loginuid/pam_loginuid.8.xml: New.
+ * modules/pam_loginuid/pam_loginuid.8: New, generated from XML source.
+ * modules/pam_loginuid/pam_loginuid.c: New.
+ * modules/pam_loginuid/README.xml: New.
+ * modules/pam_loginuid/README: New, generated from XML source.
+
+2006-08-29 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_exec/pam_exec.c (call_exec): Add required third
+ argument to open() call with O_CREAT flag set.
+
+2006-08-28 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Remove
+ duplicate code.
+
+2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.6.2
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_date): Create
+ lastlog file if it does not exist.
+
+ * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Check
+ for error from getting second token.
+ * xtests/Makefile.am: Add tst-pam_cracklib1
+ * xtests/tst-pam_cracklib1.c: New, check for pam_cracklib seg.fault.
+ * xtests/tst-pam_cracklib1.pamd: New, config for cracklib test.
+
+2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * xtests/tst-pam_dispatch4.c: New test.
+ * xtests/tst-pam_dispatch4.pamd: PAM config for new test.
+
+2006-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.6.1
+
+2006-08-09 David Howells <dhowells@redhat.com>
+
+ * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Set real uid
+ to user's before revoking.
+ (pam_sm_open_session): Remember the uid.
+
+2006-08-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_umask/pam_umask.c (setup_limits_from_gecos):
+ Add error handling.
+ * modules/pam_umask/pam_umask.8.xml: Document silent option.
+
+ * xtests/Makefile.am: Fix includes for bootstrapping.
+ Reported by Greg Schafer <gschafer@zip.com.au>.
+
+2006-08-05 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.6.0
+
+ * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
+ pam_modutil_getpwnam instead of getpwnam.
+
+ * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
+ svc variable to char pointer for snprintf.
+
+ * configure.in: Generate xtests/Makefile.
+ * Makefile.am (SUBDIRS): Add xtests.
+ * README: Document make check and make xtests.
+ * xtests/Makefile.am: New.
+ * xtests/tst-pam_dispatch1.pamd: New.
+ * xtests/tst-pam_dispatch2.pamd: New.
+ * xtests/tst-pam_dispatch3.pamd: New.
+ * xtests/tst-pam_dispatch1.c: New.
+ * xtests/tst-pam_dispatch2.c: New.
+ * xtests/tst-pam_dispatch3.c: New.
+
+2006-08-04 Ray Strode <rstrode@redhat.com>
+
+ * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
+ Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
+
+2006-08-03 David Howells <dhowells@redhat.com>
+
+ * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
+ (init_keyrings): Properly handle multiple invocations of the module.
+ (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
+
+2006-08-03 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
+ New function for list matching.
+ (evaluate_notinlist): Likewise.
+ (evaluate): Add service value match, list matching.
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
+ features.
+
+ * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
+ relabelling error when the tty device doesn't exist (ENOENT).
+
+2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
+ rationale about when this function should be used and when not.
+
+ * doc/index.html: Cleanup to look prettier.
+
+2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/Makefile.am: Bump patchlevel of libpam.
+ * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
+ or [return=bad] is used, don't return PAM_IGNORE. Based on
+ patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
+
+2006-07-28 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * ABOUT-NLS: Upgrade to gettext-0.15.
+ * config.rpath: Likewise.
+ * m4/gettext.m4: Upgrade to gettext-0.15.
+ * m4/inttypes-h.m4: New file, from gettext-0.15.
+ * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
+ * m4/lib-link.m4: Upgrade to gettext-0.15.
+ * m4/lib-prefix.m4: Upgrade to gettext-0.15.
+ * m4/lock.m4: New file, from gettext-0.15.
+ * m4/longdouble.m4: Upgrade to gettext-0.15.
+ * m4/nls.m4: Upgrade to gettext-0.15.
+ * m4/po.m4: Upgrade to gettext-0.15.
+ * m4/size_max.m4: Upgrade to gettext-0.15.
+ * m4/visibility.m4: New file, from gettext-0.15.
+ * po/Makefile.in.in: Upgrade to gettext-0.15.
+
+2006-07-24 David Quigley <dpquigl@tycho.nsa.gov>
+
+ * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
+ * modules/pam_namespace/pam_namespace.c: Move includes and
+ data structure definitions from here ...
+ * modules/pam_namespace/pam_namespace.h: ... here. New file.
+
+ * modules/pam_namespace/pam_namespace.c: Move large sections
+ of code into new functions.
+
+2006-07-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/adg/Makefile.am: Add uninstall and distclean rules.
+ * doc/mwg/Makefile.am: Likewise.
+ * doc/sag/Makefile.am: Likewise.
+
+2006-07-08 Daniel Richard G. <skunk@iskunk.org>
+
+ * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
+ * conf/pam_conv1/pam_conv.lex: Rename to ...
+ * conf/pam_conv1/pam_conv_l.l: ... this.
+ * conf/pam_conv1/pam_conv.y: Rename to ...
+ * conf/pam_conv1/pam_conv_y.y: ... this.
+ * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
+ calls.
+ * doc/Makefile.am: Fix rule to install index.html.
+ * doc/adg/Makefile.am: Fix test usage.
+ * doc/mwg/Makefile.am: Likewise.
+ * doc/sag/Makefile.am: Likewise.
+ * doc/specs/Makefile.am: Fix rules for lex and yacc files.
+ * specs/parse.lex: Rename to ...
+ * doc/specs/parse_l.l: ... this.
+ * doc/specs/parse.y: Rename to ...
+ * doc/specs/parse_y.y: ... this.
+ * libpam/pam_account.c: Fix #if vs. #ifdef.
+ * libpam/pam_audit.c: Likewise.
+ * libpam/pam_auth.c: Likewise.
+ * libpam/pam_password.c: Likewise.
+ * libpam/pam_private.h: Likewise.
+ * libpam/pam_session.c: Likewise.
+ * libpam/pam_start.c: Likewise.
+ * libpam/pam_static.c: Fix "empty sourcefile" warning.
+ * modules/pam_limits/pam_limits.c: Check for __linux, too.
+ * modules/pam_userdb/Makefile.am: Don't run test if no
+ libdb available.
+ * tests/tst-dlopen.c: Include config.h.
+
+2006-07-03 Dan Yefimov
+
+ * configure.in: Fixed have_key_syscalls test.
+
+ * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
+ match, removed AI_ADDRCONFIG flag.
+
+2006-06-30 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
+
+2006-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/Makefile.am (releasedocs): Fix directory layout.
+ * doc/adg/Makefile.am: Likewise.
+ * doc/mwg/Makefile.am: Likewise.
+ * doc/sag/Makefile.am: Likewise.
+
+2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/sag: System Administrator Guide as XML source.
+ * doc/sag/Makefile.am: New.
+ * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
+ * doc/sag/pam_*.xml: New, wrapper to include module documentation.
+
+ * doc/adg: Application Developers Guide as XML source.
+ * doc/adg/Makefile.am: New.
+ * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
+ * doc/adg/pam_*.xml: New, wrappers to include manual pages.
+
+ * doc/mwg: Application Developers Guide as XML source.
+ * doc/mwg/Makefile.am: New.
+ * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
+ * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
+
+ * doc/CREDITS: Removed.
+ * doc/NOTES: Removed.
+ * doc/pam_appl.sgml: Removed.
+ * doc/pam_modules.sgml: Removed.
+ * doc/pam_source.sgml: Removed.
+ * doc/figs/pam_orient.txt: Removed.
+ * doc/figs: Removed.
+
+ * configure.in: Remove checks for sgml2* progrs, add sag, adg
+ and mwg Makefiles.
+
+ * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
+ directories.
+ * doc/modules: Remove directory.
+ * doc/html: Remove directory.
+ * doc/ps: Remove directory.
+ * doc/pdf: Remove directory.
+ * doc/txts: Remove directory.
+ * doc/index.html: Moved from html directory to here.
+
+2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.5.0
+
+ * bump version number to 0.99.5.0
+
+ * modules/pam_rhosts/pam_rhosts.c: New module, replaces
+ pam_rhosts_auth.so.
+ * modules/pam_rhosts/pam_rhosts.8.xml: New.
+ * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
+ * modules/pam_rhosts/tst-pam_rhosts: New.
+ * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
+ manual page and README.
+ * modules/pam_rhosts/README.xml: New.
+ * modules/pam_rhosts/reADME: Regenerated from XML source.
+
+ * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
+ writers guide.
+ * doc/man/pam_sm_authenticate.3.xml: Likewise.
+ * doc/man/pam_sm_chauthtok.3.xml: Likewise.
+ * doc/man/pam_sm_close_session.3.xml: Likewise.
+ * doc/man/pam_sm_open_session.3.xml: Likewise.
+ * doc/man/pam_sm_setcred.3.xml: Likewise.
+
+ * po/POTFILES.in: Add new source files.
+
+ * libpam/pam_static_modules.h: Add new modules.
+
+ * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
+
+ * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
+ files and manual page.
+
+2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Allow disabling of SELinux support, check for
+ rootok_af.
+
+2006-06-27 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_namespace/pam_namespace.c: New module
+ originally written by Janak Desai.
+ * modules/pam_namespace/Makefile.am: New.
+ * modules/pam_namespace/README: New.
+ * modules/pam_namespace/md5.c: New.
+ * modules/pam_namespace/md5.h: New.
+ * modules/pam_namespace/namespace.conf: New.
+ * modules/pam_namespace/namespace.conf.5: New.
+ * modules/pam_namespace/namespace.conf.5.xml: New.
+ * modules/pam_namespace/namespace.init: New.
+ * modules/pam_namespace/pam_namespace.8: New.
+ * modules/pam_namespace/pam_namespace.8.xml: New.
+ * modules/pam_namespace/tst-pam_namespace: New.
+ * modules/Makefile.am: Added pam_namespace.
+ * configure.in: Added pam_namespace, test for unshare
+ library call.
+
+2006-06-27 David Howells <dhowells@redhat.com>
+
+ * modules/pam_keyinit/pam_keyinit.c: New module.
+ * modules/pam_keyinit/pam_keyinit.8: New.
+ * modules/pam_keyinit/pam_keyinit.8.xml: New.
+ * modules/pam_keyinit/README: New.
+ * modules/pam_keyinit/README.xml: New.
+ * modules/pam_keyinit/Makefile.am: New.
+ * modules/pam_keyinit/tst-pam_keyinit: New.
+ * modules/Makefile.am: Added pam_keyinit.
+ * configure.in: Added test for the key mgmt syscall.
+
+2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * m4/libprelude.m4: Sync with upstream.
+
+2006-06-27 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
+ signal() fails with SIG_ERR return
+ * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
+ Likewise.
+ * modules/pam_unix/support.c(_unix_run_helper_binary):
+ Likewise.
+
+2006-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/misc_conv.3.xml: New.
+ * doc/man/misc_conv.3: New.
+ * doc/man/pam_misc_paste_env.3.xml: New.
+ * doc/man/pam_misc_paste_env.3: New.
+ * doc/man/pam_misc_drop_env.3.xml: New.
+ * doc/man/pam_misc_drop_env.3: New.
+ * doc/man/pam_misc_setenv.3.xml: New.
+ * doc/man/pam_misc_setenv.3: New.
+ * doc/man/Makefile.am: Add new manual pages.
+
+ * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
+ in Applicatoin Developer Guide.
+ * doc/man/pam_authenticate.3.xml: Likewise
+ * doc/man/pam_chauthtok.3.xml: Likewise
+ * doc/man/pam_close_session.3.xml: Likewise
+ * doc/man/pam_conv.3.xml: Likewise
+ * doc/man/pam_end.3.xml: Likewise
+ * doc/man/pam_fail_delay.3.xml: Likewise
+ * doc/man/pam_getenv.3.xml: Likewise
+ * doc/man/pam_getenvlist.3.xml: Likewise
+ * doc/man/pam_open_session.3.xml: Likewise
+ * doc/man/pam_putenv.3.xml: Likewise
+ * doc/man/pam_setcred.3.xml: Likewise
+ * doc/man/pam_start.3.xml: Likewise
+ * doc/man/pam_strerror.3.xml: Likewise
+
+ * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
+ * doc/man/pam_authenticate.3: Likewise
+ * doc/man/pam_chauthtok.3: Likewise
+ * doc/man/pam_close_session.3: Likewise
+ * doc/man/pam_conv.3: Likewise
+ * doc/man/pam_end.3: Likewise
+ * doc/man/pam_fail_delay.3: Likewise
+ * doc/man/pam_getenv.3: Likewise
+ * doc/man/pam_getenvlist.3: Likewise
+ * doc/man/pam_open_session.3: Likewise
+ * doc/man/pam_putenv.3: Likewise
+ * doc/man/pam_setcred.3: Likewise
+ * doc/man/pam_sm_close_session.3: Likewise
+ * doc/man/pam_start.3: Likewise
+ * doc/man/pam_strerror.3: Likewise
+ * doc/man/pam_syslog.3: Likewise
+ * doc/man/PAM.8: Likewise
+
+2006-06-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_limits/pam_limits.c (setup_limits): Don't
+ reset priority for root.
+
+2006-06-23 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
+ * modules/pam_access/pam_access.8.xml: Likewise.
+ * modules/pam_deny/pam_deny.8.xml: Likewise.
+ * modules/pam_echo/pam_echo.8.xml: Likewise.
+ * modules/pam_env/pam_env.8.xml: Likewise.
+ * modules/pam_env/pam_env.conf.5.xml: Likewise.
+ * modules/pam_group/group.conf.5.xml: Likewise.
+ * modules/pam_group/pam_group.8.xml: Likewise.
+ * modules/pam_limits/limits.conf.5.xml: Likewise.
+ * modules/pam_listfile/pam_listfile.8.xml: Likewise.
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
+ * modules/pam_time/pam_time.8.xml: Likewise.
+ * modules/pam_time/time.conf.5.xml: Likewise.
+
+ * modules/pam_access/access.conf.5: Regenerate.
+ * modules/pam_access/pam_access.8: Likewise.
+ * modules/pam_deny/pam_deny.8: Likewise.
+ * modules/pam_echo/README: Likewise.
+ * modules/pam_echo/pam_echo.8: Likewise.
+ * modules/pam_env/pam_env.8: Likewise.
+ * modules/pam_env/pam_env.conf.5: Likewise.
+ * modules/pam_group/README: Likewise.
+ * modules/pam_group/group.conf.5: Likewise.
+ * modules/pam_group/pam_group.8: Likewise.
+ * modules/pam_limits/limits.conf.5: Likewise.
+ * modules/pam_listfile/README: Likewise.
+ * modules/pam_listfile/pam_listfile.8: Likewise.
+ * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
+ * modules/pam_time/pam_time.8: Likewise.
+ * modules/pam_time/time.conf.5: Likewise.
+
+ * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
+ and pam.conf-syntax.xml.
+ * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
+ * doc/man/pam.conf.5: Regenerated.
+ * doc/man/pam.conf-desc.xml: New.
+ * doc/man/pam.conf-dir.xml: New.
+ * doc/man/pam.conf-syntax.xml: New.
+
+2006-06-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
+ is not installed.
+
+ * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
+ * modules/pam_issue/pam_issue.8: Regenerate.
+
+2006-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Remove unused check for libcap.
+
+ * m4/ld-as-needed.m4: New.
+ * m4/ld-O1.m4: New.
+ * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
+ require docbook version 4.4.
+
+2006-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam.8.xml: Syntax cleanup.
+ * doc/pam/PAM.8: Regenerated from xml source.
+ * man/pam_sm_chauthtok.3: New.
+ * man/pam_sm_chauthtok.3.xml: New.
+ * man/pam_sm_close_session.3: New.
+ * man/pam_sm_close_session.3.xml: New.
+ * man/pam_sm_open_session.3: New.
+ * man/pam_sm_open_session.3.xml: New.
+ * man/pam_sm_authenticate.3: New.
+ * man/pam_sm_authenticate.3.xml: New.
+ * man/pam_sm_setcred.3: New.
+ * man/pam_sm_setcred.3.xml: New.
+ * man/Makefile.am: Add new pam_sm_* manual pages.
+
+ * specs/Makefile.am: Fix rule to generate draft.
+
+2006-06-18 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_tally/Makefile.am: Include Make.xml.rules.
+ * modules/pam_tally/pam_tally.8.xml: New.
+ * modules/pam_tally/pam_tally.8: New, generated from xml file.
+ * modules/pam_tally/README.xml: New.
+ * modules/pam_tally/README: Regenerated from xml file.
+
+ * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
+ * modules/pam_selinux/pam_selinux.8.xml: New.
+ * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
+ * modules/pam_selinux/README.xml: New.
+ * modules/pam_selinux/README: Regenerated from xml file.
+
+2006-06-17 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_debug/Makefile.am: Include Make.xml.rules.
+ * modules/pam_debug/pam_debug.8.xml: New.
+ * modules/pam_debug/pam_debug.8: New, generated from xml file.
+ * modules/pam_debug/README.xml: New.
+ * modules/pam_debug/README: Regenerated from xml file.
+
+ * examples/vpass.c: UID is unsigned on Linux.
+ * modules/pam_exec/pam_exec.c: Likewise.
+ * modules/pam_unix/pam_unix_acct.c: Likewise.
+ * modules/pam_unix/pam_unix_sess.c: Likewise.
+
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
+ * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
+ * modules/pam_succeed_if/README: Regenerated.
+
+ * modules/pam_limits/Makefile.am: Include Make.xml.rules.
+ * modules/pam_limits/limits.conf.5: New, generated from xml file.
+ * modules/pam_limits/limits.conf.5.xml: New.
+ * modules/pam_limits/pam_limits.8: New, generated from xml file.
+ * modules/pam_limits/pam_limits.8.xml: New.
+ * modules/pam_limits/README.xml: New.
+ * modules/pam_limits/README: Regenerated from README.xml.
+
+2006-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
+ are unsigned on Linux, don't truncate them.
+ (_do_setpass): err is of type clnt_stat, not int.
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
+ truncate UID for syslog output.
+
+ * modules/pam_time/pam_time.c: Replace type boolean with int.
+ * modules/pam_group/pam_group.c: Likewise.
+
+2006-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/bigcrypt.h: New.
+ * modules/pam_unix/Makefile.am: Add bigcrypt.h.
+ * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
+ * modules/pam_unix/support.c: Include bigcrypt.h, remove
+ own prototype.
+ * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
+ own prototype.
+ * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
+ own prototype.
+
+ * modules/pam_time/pam_time.c (logic_member): Remove unused
+ variable len.
+
+ * modules/pam_group/pam_group.c (logic_field): Accept
+ colon in tty name. [#1428276].
+ (logic_member): Remove unused variable len.
+ (check_account): Fix usage of err variable in debug code.
+
+ * modules/pam_time/pam_time.c (logic_field): Likewise.
+
+ * configure.in: Add special exceptions for icc: different
+ compiler warnings, no PIE support.
+
+2006-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
+
+ * configure.in: Remove --enable-memory-debug, add option
+ to disable prelude if installed.
+
+ * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
+ * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
+ * modules/pam_unix/unix_chkpwd.c: Likewise.
+ * libpam/include/security/_pam_types.h: Likewise.
+ * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
+ * libpam/pam_malloc.c: Remove file.
+ * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
+
+ * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
+ instead of strdup.
+
+ * libpam/pam_private.h: Remove _pam_strCMP.
+ * libpam/pam_misc.c: Likewise.
+ * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
+
+2006-06-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
+ for modules from main application.
+
+2006-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_time/Makefile.am: Include Make.xml.rules.
+ * modules/pam_time/time.conf.5: New, generated from xml file.
+ * modules/pam_time/time.conf.5.xml: New.
+ * modules/pam_time/pam_time.8: New, generated from xml file.
+ * modules/pam_time/pam_time.8.xml: New.
+ * modules/pam_time/README.xml: New.
+ * modules/pam_time/README: Regenerated from README.xml.
+
+ * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
+ * modules/pam_wheel/pam_wheel.8.xml: New.
+ * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
+ * modules/pam_wheel/README.xml: New.
+ * modules/pam_wheel/README: Regenerated from xml file.
+
+ * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
+ * modules/pam_xauth/pam_xauth.8.xml: New.
+ * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
+ * modules/pam_xauth/README.xml: New.
+ * modules/pam_xauth/README: Regenerated from xml file.
+
+ * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
+ * modules/pam_deny/pam_deny.8: Regenerate from xml file.
+ * modules/pam_deny/README: Likewise.
+
+ * modules/pam_warn/Makefile.am: Include Make.xml.rules.
+ * modules/pam_warn/pam_warn.8.xml: New.
+ * modules/pam_warn/pam_warn.8: New, generated from xml file.
+ * modules/pam_warn/README.xml: New.
+ * modules/pam_warn/README: Regenerated from xml file.
+
+ * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
+ * modules/pam_userdb/pam_userdb.8.xml: New.
+ * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
+ * modules/pam_userdb/README.xml: New.
+ * modules/pam_userdb/README: Regenerated from xml file.
+
+2006-06-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_shells/Makefile.am: Include Make.xml.rules.
+ * modules/pam_shells/pam_shells.8.xml: New.
+ * modules/pam_shells/pam_shells.8: New, generated from xml file.
+ * modules/pam_shells/README.xml: New.
+ * modules/pam_shells/README: Regenerated from xml file.
+
+ * libpam/include/security/pam_malloc.h: Add missing license
+ informations.
+
+ * libpam/include/security/pam_ext.h: Add brackets for C++.
+ * libpam/include/security/pam_modutil.h: Likewise.
+
+ * libpam/include/security/pam_modules.h: Document where to
+ find the copyright/license informations.
+
+ * libpam/include/security/pam_appl.h: Move _pam_compat.h
+ include inside of brackets.
+
+2006-06-04 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
+ * modules/pam_securetty/pam_securetty.8.xml: New.
+ * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
+ * modules/pam_securetty/README.xml: New.
+ * modules/pam_securetty/README: Regenerated from xml file.
+
+ * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
+ * modules/pam_rootok/pam_rootok.8.xml: New.
+ * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
+ * modules/pam_rootok/README.xml: New.
+ * modules/pam_rootok/README: Regenerated from xml file.
+
+ * modules/pam_permit/Makefile.am: Include Make.xml.rules.
+ * modules/pam_permit/pam_permit.8.xml: New.
+ * modules/pam_permit/pam_permit.8: New, generated from xml file.
+ * modules/pam_permit/README.xml: New.
+ * modules/pam_permit/README: Regenerated from xml file.
+
+ * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
+ * modules/pam_nologin/pam_nologin.8.xml: New.
+ * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
+ * modules/pam_nologin/README.xml: New.
+ * modules/pam_nologin/README: Regenerated from xml file.
+
+2006-06-03 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_motd/Makefile.am: Include Make.xml.rules.
+ * modules/pam_motd/pam_motd.8.xml: New.
+ * modules/pam_motd/pam_motd.8: New, generated from xml file.
+ * modules/pam_motd/README.xml: New.
+ * modules/pam_motd/README: New, generated from xml file.
+
+2006-06-02 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_mail/Makefile.am: Include Make.xml.rules.
+ * modules/pam_mail/pam_mail.8.xml: New.
+ * modules/pam_mail/pam_mail.8: New, generated from xml file.
+ * modules/pam_mail/README.xml: New.
+ * modules/pam_mail/README: Regenerated from xml file.
+
+ * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
+ * modules/pam_localuser/pam_localuser.8.xml: New.
+ * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
+ * modules/pam_localuser/README.xml: New.
+ * modules/pam_localuser/README: Regenerated from xml file.
+
+ * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
+ * doc/man/pam.3: Likewise.
+ * doc/man/pam.conf.5: Likewise.
+ * doc/man/pam_acct_mgmt.3: Likewise.
+ * doc/man/pam_authenticate.3: Likewise.
+ * doc/man/pam_chauthtok.3: Likewise.
+ * doc/man/pam_close_session.3: Likewise.
+ * doc/man/pam_conv.3: Likewise.
+ * doc/man/pam_end.3: Likewise.
+ * doc/man/pam_error.3: Likewise.
+ * doc/man/pam_fail_delay.3: Likewise.
+ * doc/man/pam_get_data.3: Likewise.
+ * doc/man/pam_get_item.3: Likewise.
+ * doc/man/pam_get_user.3: Likewise.
+ * doc/man/pam_getenv.3: Likewise.
+ * doc/man/pam_getenvlist.3: Likewise.
+ * doc/man/pam_info.3: Likewise.
+ * doc/man/pam_open_session.3: Likewise.
+ * doc/man/pam_prompt.3: Likewise.
+ * doc/man/pam_putenv.3: Likewise.
+ * doc/man/pam_set_data.3: Likewise.
+ * doc/man/pam_set_item.3: Likewise.
+ * doc/man/pam_setcred.3: Likewise.
+ * doc/man/pam_sm_acct_mgmt.3: Likewise.
+ * doc/man/pam_start.3: Likewise.
+ * doc/man/pam_strerror.3: Likewise.
+ * doc/man/pam_syslog.3: Likewise.
+ * modules/pam_access/access.conf.5: Likewise.
+ * modules/pam_access/pam_access.8: Likewise.
+ * modules/pam_cracklib/pam_cracklib.8: Likewise.
+ * modules/pam_deny/pam_deny.8: Likewise.
+ * modules/pam_echo/pam_echo.8: Likewise.
+ * modules/pam_env/pam_env.8: Likewise.
+ * modules/pam_env/pam_env.conf.5: Likewise.
+ * modules/pam_exec/pam_exec.8: Likewise.
+ * modules/pam_filter/pam_filter.8: Likewise.
+ * modules/pam_ftp/pam_ftp.8: Likewise.
+ * modules/pam_group/group.conf.5: Likewise.
+ * modules/pam_group/pam_group.8: Likewise.
+ * modules/pam_issue/pam_issue.8: Likewise.
+ * modules/pam_lastlog/pam_lastlog.8: Likewise.
+ * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
+ * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
+ * modules/pam_umask/pam_umask.8: Likewise.
+
+ * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
+ dngettext if available [#1427738].
+ * configure.in: Check for dngettext [#1427738].
+ * po/*.po: Update to dngettext usage.
+
+ * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
+ * modules/pam_listfile/pam_listfile.8.xml: New.
+ * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
+ * modules/pam_listfile/README.xml: New.
+ * modules/pam_listfile/README: Regenerated from xml file.
+
+2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
+ * modules/pam_lastlog/pam_lastlog.8.xml: New.
+ * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
+ * modules/pam_lastlog/README.xml: New.
+ * modules/pam_lastlog/README: Regenerated from xml file.
+
+ * modules/pam_group/Makefile.am: Include Make.xml.rules.
+ * modules/pam_group/group.conf.5.xml: New.
+ * modules/pam_group/group.conf.5: New, generated from xml file.
+ * modules/pam_group/pam_group.8.xml: New.
+ * modules/pam_group/pam_group.8: New, generated from xml file.
+ * modules/pam_group/README.xml: New.
+ * modules/pam_group/README: Regenerated from xml file.
+
+ * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
+ * modules/pam_ftp/pam_ftp.8.xml: New.
+ * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
+ * modules/pam_ftp/README.xml: New.
+ * modules/pam_ftp/README: Regenerated from xml file.
+
+ * modules/pam_issue/Makefile.am: Include Make.xml.rules.
+ * modules/pam_issue/pam_issue.8.xml: New.
+ * modules/pam_issue/pam_issue.8: New, generated from xml file.
+ * modules/pam_issue/README.xml: New.
+ * modules/pam_issue/README: Regenerated from xml file.
+
+ * modules/pam_filter/Makefile.am: Include Make.xml.rules.
+ * modules/pam_filter/pam_filter.8.xml: New.
+ * modules/pam_filter/pam_filter.8: New, generated from xml file.
+ * modules/pam_filter/README.xml: New.
+ * modules/pam_filter/README: Regenerated from xml file.
+
+2006-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
+ directory documentation.
+
+ * modules/pam_umask/Makefile.am: Include Make.xml.rules.
+ * modules/pam_umask/pam_umask.8.xml: New.
+ * modules/pam_umask/pam_umask.8: New, generated from xml file.
+ * modules/pam_umask/README.xml: New.
+ * modules/pam_umask/README: Regenerated from xml file.
+
+2006-05-29 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
+ * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
+ * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
+ * modules/pam_mkhomedir/README.xml: New.
+ * modules/pam_mkhomedir/README: Regenerated from xml file.
+
+2006-05-23 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
+ instead of read().
+
+2006-05-22 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
+ Fix memory leaks, [#1490956] found by Coverity.
+
+ * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
+ value of pam_get_user().
+ (tally_get_data): Check if oldtime is not NULL.
+ [#1489818] found by Coverity.
+
+ * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
+ ignore return value of stat(). [#1489808] found by Coverity.
+
+ * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
+ NULL pointer dereference. [#1489792] found by Coverity.
+
+ * libpam/Makefile.am: bump release number of libpam.so.
+ * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
+ [#1489804] found by Coverity.
+
+ * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
+ str, [#1489658] found by Coverity.
+
+ * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
+ a potential NULL pointer dereference.
+ (pam_sm_chauthtok): Remove dead code.
+ [#1489634] found by Coverity.
+
+2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Check for fseeko.
+ * modules/pam_tally/pam_tally.c: Use fseeko if available
+ (Based on patch by IBM).
+
+2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.4.0
+
+ * libpam/pam_strerror.c: Unify error messages.
+
+ * po/zh_TW.po: Adjust for last pam_strerror changes.
+ * po/zh_CN.po: Likewise.
+ * po/uk.po: Likewise.
+ * po/tr.po: Likewise.
+ * po/pt.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/pl.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/nl.po: Likewise.
+ * po/nb.po: Likewise.
+ * po/it.po: Likewise.
+ * po/hu.po: Likewise.
+ * po/fr.po: Likewise.
+ * po/fi.po: Likewise.
+ * po/es.po: Likewise.
+ * po/de.po: Likewise.
+ * po/cs.po: Likewise.
+
+ * doc/man/pam.3.xml: New.
+ * doc/man/pam.3. New, generated from XML file.
+
+ * doc/man/pam_sm_acct_mgmt.3.xml: New.
+ * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
+
+ * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
+ all manual pages.
+
+ * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
+
+2006-05-02 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
+ different strings for plural or not [#1427738]
+
+ * po/*.po: Adjust for pam_unix.so translation fix.
+
+ * modules/pam_tally/pam_tally.c: Always close file handle
+ in error case, don't close it depending on *TALLY value [#1478180]
+
+2006-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/fr.po: Updated.
+
+2006-04-11 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/km.po: Updated.
+
+2006-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/LINGUAS: Add uk.
+
+ * po/uk.po: New.
+ * po/cs.po: Updated.
+ * po/po/es.po: Updated.
+ * po/fi.po: Updated.
+ * po/fr.po: Updated.
+ * po/hu.po: Updated.
+ * po/it.po: Updated.
+ * po/ja.po: Updated.
+ * po/nb.po: Updated.
+ * po/pl.po: Updated.
+ * po/pt.po: Updated.
+ * po/pt_BR.po: Updated.
+ * po/zh_CN.po: Updated.
+ * po/zh_TW.po: Updated.
+
+2006-03-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Remove ALL_LINGUAS.
+ * po/LINGUAS: New.
+ * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
+
+2006-03-13 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_error.3.xml: New.
+ * doc/man/pam_error.3: New, generated from XML file.
+ * doc/man/pam_verror.3: New, generated from XML file.
+ * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
+
+ * modules/pam_lastlog/Makefile.am: Fix typo.
+
+ * modules/pam_lastlog/pam_lastlog.c: Move comment for
+ translators in right line.
+ * po/*.po: Update po files with comment for translator.
+
+2006-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/Makefile.am: Add new manual pages.
+
+ * doc/man/pam.conf.5.xml: Replace link with content
+ of PAM admin guide.
+ * doc/man/pam.conf.5: Regenerated from XML file.
+
+ * doc/man/pam_info.3.xml: New.
+ * doc/man/pam_info.3: New, generated from XML file.
+ * doc/man/pam_vinfo.3: New, generated from XML file.
+
+ * doc/man/pam_conv.3.xml: New.
+ * doc/man/pam_conv.3: New, generated from XML file.
+
+ * doc/man/pam_putenv.3.xml: New.
+ * doc/man/pam_putenv.3: New, generated from XML file.
+
+ * doc/man/pam_getenv.3.xml: New.
+ * doc/man/pam_getenv.3: New, generated from XML file.
+
+ * doc/man/pam_getenvlist.3.xml: New.
+ * doc/man/pam_getenvlist.3: New, generated from XML file.
+
+ * libpam/pam_item.c (pam_get_user): Check for valid pamh before
+ using it.
+
+ * configure.in: create tests/Makefile
+ * Makefile.am (SUBDIRS): Add tests
+ * tests/Makefile.am: New.
+ * tests/tst-dlopen.c: New.
+ * tests/tst-pam_acct_mgmt.c: New.
+ * tests/tst-pam_authenticate.c: New.
+ * tests/tst-pam_chauthtok.c: New.
+ * tests/tst-pam_close_session.c: New.
+ * tests/tst-pam_end.c: New.
+ * tests/tst-pam_fail_delay.c: New.
+ * tests/tst-pam_getenvlist.c: New.
+ * tests/tst-pam_get_item.c: New.
+ * tests/tst-pam_open_session.c: New.
+ * tests/tst-pam_setcred.c: New.
+ * tests/tst-pam_set_item.c: New.
+ * tests/tst-pam_start.c: New.
+ * tests/tst-pam_get_user.c: New.
+
+ * modules/pam_access/Makefile.am: Add rules for make check
+ * modules/pam_access/tst-pam_access: New
+ * modules/pam_cracklib/Makefile.am: Add rules for make check
+ * modules/pam_cracklib/tst-pam_cracklib: New
+ * modules/pam_debug/Makefile.am: Add rules for make check
+ * modules/pam_debug/tst-pam_debug: New
+ * modules/pam_deny/Makefile.am: Add rules for make check
+ * modules/pam_deny/tst-pam_deny: New
+ * modules/pam_echo/Makefile.am: Add rules for make check
+ * modules/pam_echo/tst-pam_echo: New
+ * modules/pam_env/Makefile.am: Add rules for make check
+ * modules/pam_env/tst-pam_env: New
+ * modules/pam_exec/Makefile.am: Add rules for make check
+ * modules/pam_exec/tst-pam_exec: New
+ * modules/pam_filter/Makefile.am: Add rules for make check
+ * modules/pam_filter/tst-pam_filter: New
+ * modules/pam_ftp/Makefile.am: Add rules for make check
+ * modules/pam_ftp/tst-pam_ftp: New
+ * modules/pam_group/Makefile.am: Add rules for make check
+ * modules/pam_group/tst-pam_group: New
+ * modules/pam_issue/Makefile.am: Add rules for make check
+ * modules/pam_issue/tst-pam_issue: New
+ * modules/pam_lastlog/Makefile.am: Add rules for make check
+ * modules/pam_lastlog/tst-pam_lastlog: New
+ * modules/pam_limits/Makefile.am: Add rules for make check
+ * modules/pam_limits/tst-pam_limits: New
+ * modules/pam_listfile/Makefile.am: Add rules for make check
+ * modules/pam_listfile/tst-pam_listfile: New
+ * modules/pam_localuser/Makefile.am: Add rules for make check
+ * modules/pam_localuser/tst-pam_localuser: New
+ * modules/pam_mail/Makefile.am: Add rules for make check
+ * modules/pam_mail/tst-pam_mail: New
+ * modules/pam_mkhomedir/Makefile.am: Add rules for make check
+ * modules/pam_mkhomedir/tst-pam_mkhomedir: New
+ * modules/pam_motd/Makefile.am: Add rules for make check
+ * modules/pam_motd/tst-pam_motd: New
+ * modules/pam_nologin/Makefile.am: Add rules for make check
+ * modules/pam_nologin/tst-pam_nologin: New
+ * modules/pam_permit/Makefile.am: Add rules for make check
+ * modules/pam_permit/tst-pam_permit: New
+ * modules/pam_rhosts/Makefile.am: Add rules for make check
+ * modules/pam_rhosts/tst-pam_rhosts: New
+ * modules/pam_rootok/Makefile.am: Add rules for make check
+ * modules/pam_rootok/tst-pam_rootok: New
+ * modules/pam_securetty/Makefile.am: Add rules for make check
+ * modules/pam_securetty/tst-pam_securetty: New
+ * modules/pam_selinux/Makefile.am: Add rules for make check
+ * modules/pam_selinux/tst-pam_selinux: New
+ * modules/pam_shells/Makefile.am: Add rules for make check
+ * modules/pam_shells/tst-pam_shells: New
+ * modules/pam_stress/Makefile.am: Add rules for make check
+ * modules/pam_stress/tst-pam_stress: New
+ * modules/pam_succeed_if/Makefile.am: Add rules for make check
+ * modules/pam_succeed_if/tst-pam_succeed_if: New
+ * modules/pam_tally/Makefile.am: Add rules for make check
+ * modules/pam_tally/tst-pam_tally: New
+ * modules/pam_time/Makefile.am: Add rules for make check
+ * modules/pam_time/tst-pam_time: New
+ * modules/pam_umask/Makefile.am: Add rules for make check
+ * modules/pam_umask/tst-pam_umask: New
+ * modules/pam_unix/Makefile.am: Add rules for make check
+ * modules/pam_unix/tst-pam_unix: New
+ * modules/pam_userdb/Makefile.am: Add rules for make check
+ * modules/pam_userdb/tst-pam_userdb: New
+ * modules/pam_warn/Makefile.am: Add rules for make check
+ * modules/pam_warn/tst-pam_warn: New
+ * modules/pam_wheel/Makefile.am: Add rules for make check
+ * modules/pam_wheel/tst-pam_wheel: New
+ * modules/pam_xauth/Makefile.am: Add rules for make check
+ * modules/pam_xauth/tst-pam_xauth: New
+
+2006-03-11 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/pam_fail_delay.3.xml: New.
+ * doc/man/pam_fail_delay.3: New, generated from xml.
+ * doc/man/pam_prompt.3.xml: New.
+ * doc/man/pam_prompt.3: New, generated from xml.
+ * doc/man/pam_syslog.3.xml: New.
+ * doc/man/pam_syslog.3: New, generated from xml.
+ * doc/man/pam_vprompt.3: New, generated from xml.
+ * doc/man/pam_vsyslog.3: New, generated from xml.
+
+2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/km.po: Update Khmer translation.
+
+2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
+ version from #1425487.
+ * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
+ * modules/pam_succeed_if/Makefile.am: Include XML rules.
+ * modules/pam_succeed_if/README.xml: New.
+ * modules/pam_succeed_if/README: Regenerated from xml.
+ * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
+ return values.
+
+2006-02-22 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Fix check for incomplete libaudit installations
+ (Patch from Ruediger Oertel <ro@suse.de>).
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
+ correct last_login field [#1427401].
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
+ format string for translation to allow reorder [#1428269].
+ * po/*.po: Update with last pam_lastlog change.
+
+
+2006-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/man/Makefile.am: Add new manual pages.
+ * doc/man/pam_end.3: Regenerated from xml file.
+ * doc/man/pam_end.3.xml: Document freeing of item data.
+ * doc/man/pam_get_user.3: New.
+ * doc/man/pam_get_user.3.xml: New.
+ * modules/pam_access/access.conf.5.xml: Fix typos.
+ * modules/pam_env/Makefile.am: Add new manual pages.
+ * modules/pam_env/README: Regenerate from xml file.
+ * modules/pam_env/README.xml: New.
+ * modules/pam_env/pam_env.8: New.
+ * modules/pam_env/pam_env.8.xml: New.
+ * modules/pam_env/pam_env.conf.5: New.
+ * modules/pam_env/pam_env.conf.5.xml New.
+
+2006-02-14 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/fi.po: Updated translations.
+ * po/pl.po: Likewise.
+ * po/km.po: New translation.
+ * configure.in: Add km as new language.
+
+2006-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_echo/pam_echo.8.xml: New.
+ * modules/pam_echo/pam_echo.8: Regenerated from xml file.
+ * modules/pam_echo/Makefile.am: Include Make.xml.rules.
+ * modules/pam_echo/pam_echo.c: Fix return value.
+
+ * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
+
+2006-02-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Add doc/man/Makefile.
+ * Make.xml.rules: Enable xincludes for manual pages.
+ * doc/Makefile.am (EXRA_DIST): Remove manual pages.
+ (SUBDIR): Add man subdirectory.
+ * doc/man/Makefile.am: New.
+ * doc/man/pam_acct_mgmt.3: New.
+ * doc/man/pam_acct_mgmt.3.xml: New.
+ * doc/man/pam_get_data.3: New.
+ * doc/man/pam_get_data.3.xml: New.
+ * doc/man/pam_set_data.3: New.
+ * doc/man/pam_set_data.3.xml: New.
+ * doc/man/pam.8.xml: New.
+ * doc/man/pam.8: Regenerated from xml file.
+ * doc/man/pam_authenticate.3.xml: New.
+ * doc/man/pam_authenticate.3: Regenerated from xml file.
+ * doc/man/pam_chauthtok.3.xml: New.
+ * doc/man/pam_chauthtok.3: Regenerated from xml file.
+ * doc/man/pam_close_session.3.xml: New.
+ * doc/man/pam_close_session.3: Regenerated from xml file.
+ * doc/man/pam_end.3.xml: New.
+ * doc/man/pam_end.3: Regenerated from xml file.
+ * doc/man/pam_fail_delay.3.xml: New.
+ * doc/man/pam_fail_delay.3: Regenerated from xml file.
+ * doc/man/pam_get_item.3.xml: New.
+ * doc/man/pam_get_item.3: Regenerated from xml file.
+ * doc/man/pam_item_types.inc.xml: New.
+ * doc/man/pam_open_session.3.xml: New.
+ * doc/man/pam_open_session.3: Regenerated from xml file.
+ * doc/man/pam_set_item.3.xml: New.
+ * doc/man/pam_set_item.3: Regenerated from xml file.
+ * doc/man/pam_setcred.3.xml: New.
+ * doc/man/pam_setcred.3: Regenerated from xml file.
+ * doc/man/pam_start.3.xml: New.
+ * doc/man/pam_start.3: Regenerated from xml file.
+ * doc/man/pam_strerror.3.xml: New.
+ * doc/man/pam_strerror.3: Regenerated from xml file.
+ * doc/man/template-man: Removed.
+
+2006-02-10 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Remove pam_pwdb support.
+ * modules/Makefile.am: remove pam_pwdb.
+ * modules/pam_pwdb: Remove complete directory.
+ * libpam/Makefile.am: Remove LIBPWDB references.
+ * libpam/pam_static_modules.h: Remove pam_pwdb references.
+ * doc/modules/pam_pwdb.sgml: Removed.
+ * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
+ * doc/pam_source.sgml: Remove references to libpwdb.
+ * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
+ * doc/modules/pam_group.sgml: Likewise.
+ * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
+ * doc/modules/pam_userdb.sgml: Likewise.
+ * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
+ with pam_unix.
+ * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
+ * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
+
+ * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
+ * modules/pam_cracklib/Makefile.am: Likewise.
+ * modules/pam_deny/Makefile.am: Likewise.
+ * modules/pam_exec/Makefile.am: Likewise.
+
+2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Check for text browser.
+ * Make.xml.rules: Add rule to generate README from README.xml.
+
+ * modules/pam_access/Makefile.am: Include Make.xml.rules.
+ * modules/pam_access/README: Regenerated from README.xml.
+ * modules/pam_access/README.xml: New.
+ * modules/pam_access/access.conf: Extended by new examples.
+ * modules/pam_access/access.conf.5: New, generated from xml file.
+ * modules/pam_access/access.conf.5.xml: New.
+ * modules/pam_access/pam_access.8: New, generated from xml file.
+ * modules/pam_access/pam_access.8.xml: New.
+ * modules/pam_access/pam_access.c: Add rules for IPv6 and
+ netmasks.
+ Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
+
+ * modules/pam_deny/Makefile.am: Include Make.xml.rules.
+ * modules/pam_deny/pam_deny.8.xml: New.
+ * modules/pam_deny/pam_deny.8: New, generated from xml file.
+ * modules/pam_deny/README.xml: New.
+ * modules/pam_deny/README: Regenerated from xml file.
+
+ * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
+ * modules/pam_cracklib/pam_cracklib.8.xml: New.
+ * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
+ * modules/pam_cracklib/README.xml: New.
+ * modules/pam_cracklib/README: Regenerated from xml file.
+
+ * modules/pam_exec/Makefile.am: Add rule to generate README.
+ * modules/pam_exec/README: Regenerated from xml file.
+ * modules/pam_exec/pam_exec.8: Regenerated from xml file.
+ * modules/pam_exec/pam_exec.8.xml: Syntax files.
+
+2006-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/nl.po: New.
+ * po/pt.po: Update translations.
+ * configure.in: Add nl as new language.
+
+2006-01-30 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
+ * modules/pam_exec/Makefile.am: Include Make.xml.rules.
+
+ * Make.xml.rules: New.
+
+ * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
+
+2006-01-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Prefer libdb over libndbm, fix check for
+ libcrack and remove not needed BACKUP_LIBS.
+
+2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
+
+ * po/de.po: Fix one translation.
+
+ * configure.in: Add modules/pam_exec.
+ * modules/Makefile.am: Add pam_exec subdirectory.
+ * modules/pam_exec/README: New.
+ * modules/pam_exec/Makefile.am: New.
+ * modules/pam_exec/pam_exec.8: New.
+ * modules/pam_exec/pam_exec.c: New.
+ * modules/pam_exec/pam_exec.8.xml: New.
+ * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
+ * po/*.po: Merge new pam_exec strings.
+
+ * libpam/pam_static_modules.h: New.
+ * Makefile.am: Reorder subdirectories for static modules.
+ * configure.in: Add --enable-static-modules option.
+ * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
+ necessary, add pam_static_modules.h, link against all PAM
+ module object files if STATIC_MODULES is defined.
+ * libpam/pam_static.c: Remove old _static_module* includes,
+ include pam_static_modules.h.
+
+ * configure.in: Add checks for xsltproc, xmllint and docbook
+ xsl stylesheet.
+ * m4/jh_path_xml_catalog.m4: New.
+
+2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_succeed_if/pam_succeed_if.c: Add support for
+ static modules.
+ * modules/pam_xauth/pam_xauth.c: Likewise.
+
+ * libpam/pam_static.c (_pam_open_static_handler): Add pamh
+ as argument.
+ * libpam/pam_private.h: Adjust prototype.
+ * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
+ _pam_open_static_handler call.
+
+ * configure.in: Don't define PAM_DYNAMIC.
+ * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
+ include pam_dynamic.h
+ * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
+ exclude functions if we compile with PAM_STATIC.
+ * libpam/pam_dynamic.h: Remove.
+ * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
+ * libpam/Makefile.am: Bump version number of libpam, remove
+ pam_dynamic.h.
+
+2006-01-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_listfile/pam_listfile.c: Add support for session
+ and password management.
+
+2006-01-19 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * doc/specs/Makefile.am (spec): Add padout to fix parallel
+ build (Reported by Andreas Haumer <andreas@xss.co.at>).
+
+2006-01-15 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
+ already defined.
+
+2006-01-13 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.3.0
+
+ * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
+ error.
+
+ * modules/pam_umask/pam_umask.c (search_key): Don't ignore
+ EOF/error return value from fgets().
+
+ * configure.in: Check for getline and getdelim
+
+ * po/fi.po: Add new translations.
+ * po/de.po: Likewise.
+ * po/es.po: Likewise.
+ * po/fr.po: Likewise.
+ * po/it.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/zh_CH.po: Likewise.
+ * po/zh_TW.po: Likewise.
+
+2006-01-13 Dmitry V. Levin <ldv@altlinux.org>
+
+ * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
+ call with %m specifier.
+
+2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * configure.in: Add check for -fpie/-pie
+ * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
+ upperLOWER with -fpie/-pie if supported.
+ * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
+ with -fpie/-pie if supported.
+
+2006-01-12 Steve Grubb <sgrubb@redhat.com>
+
+ * configure.in: Add check for audit library.
+ * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
+ (libpam_la_SOURCES): Add pam_audit.c.
+ * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
+ * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
+ * libpam/pam_password.c (pam_chauthtok): Likewise.
+ * libpam/pam_session.c (pam_open_session),
+ (pam_close_session): Likewise.
+ * libpam/pam_private.h: Add audit_state member to pam_handle,
+ declare _pam_auditlog and _pam_audit_end.
+ * libpam/pam_start.c (pam_start): Initialize audit_state.
+ * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
+ implementation.
+ * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
+ * NEWS: Note about added auditing.
+
+2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
+
+ * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
+ if we compile libpam itself.
+
+ * po/hu.po: Update with new translations.
+
+2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
+ instead of PAM_AUTHTOK_RECOVER_ERR.
+ * modules/pam_pwdb/support.-c: Likewise.
+ * modules/pam_unix/support.c: Likewise.
+ * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
+ * libpam/pam_strerror.c (pam_strerror): Likewise.
+
+ * libpam/include/security/_pam_compat.h: Define
+ PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
+
+ * libpam/include/security/_pam_types.h: Rename
+ PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
+
+2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/include/security/_pam_types.h: Remove nonnull attribute
+ from third paramter (item) of pam_get_item.
+ * libpam/Makefile.am: Bump version number of shared library.
+
+2005-12-21 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
+ (evaluate_notingroup): Simplified.
+ (evaluate_innetgr), (evaluate_notinnetgr): New functions.
+ (evaluate): Added calls to evaluate_(not)innetgr().
+ * modules/pam_succeed_if/README: Documented netgroup matching.
+ * NEWS: Mentioned the added netgroup matching support.
+
+2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
+ strftime instead of ctime.
+
+ * po/de.po: Fix typo.
+
+2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
+ Reported by Charles_H_Bedford@nbc.gov.
+
+ * modules/pam_time/pam_time.c (check_account): Implement
+ support for netgroups.
+
+ * modules/pam_time/time.conf: Document usage of netgroups.
+
+2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_group/pam_group.c (check_account): Implement
+ support for netgroups.
+
+ * modules/pam_group/group.conf: Add all documentation to this
+ example config file and don't reference to outdated configs.
+
+ * modules/pam_group/README: New.
+
+ * modules/pam_group/Makefile.am: Add README to EXTRADIST.
+
+2005-12-15 Thorsten Kukuk <kukuk@suse.de>
+
+ * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
+ error if user logins the first time.
+
+ * modules/pam_lastlog/README: New.
+
+ * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
+
+2005-12-14 Thorsten Kukuk <kukuk@suse.de>
+
+ * modules/pam_deny/pam_deny.c: Fix comment.
+
+ * doc/pam_appl.sgml: Fix typo.
+
+ Reported by Russell Bateman <russ@windofkeltia.com>
+
+2005-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.2.1
+
+ * po/de.po: Remove new fuzzy entry
+
+ * NEWS: Add 0.99.2.1 changes
+
+ * configure.in: bump version number to 0.99.2.1
+
+2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
+
+ Cleanup pam_syslog messages.
+
+ * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
+ * modules/pam_filter/pam_filter.c (set_filter): Append %m
+ specifier to pam_syslog messages where appropriate.
+ * modules/pam_group/pam_group.c (read_field): Likewise.
+ * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
+ (create_homedir): Do not use make_remark() wrapper, call
+ pam_info() directly. Call pam_syslog() right after failed
+ operation and append %m specifier to pam_syslog messages where
+ appropriate.
+ * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
+ sequence of malloc(), strcpy() and strcat() calls with asprintf().
+ Append %m specifier to pam_syslog messages where appropriate.
+ * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
+ Append %m specifier to pam_syslog messages where appropriate.
+ * modules/pam_shells/pam_shells.c (perform_check): Likewise.
+
+2005-12-12 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
+ * po/Linux-PAM.pot: Likewise.
+ * po/de.po: Likewise.
+ * po/es.po: Likewise.
+ * po/fi.po: Likewise.
+ * po/fr.po: Likewise.
+ * po/hu.po: Likewise.
+ * po/it.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/nb.po: Likewise.
+ * po/pa.po: Likewise.
+ * po/pl.po: Likewise.
+ * po/pt.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/zh_CN.po: Likewise.
+ * po/zh_TW.po: Likewise.
+ * po/de.po: Add new translation, fixed typo in string.
+
+2005-12-12 Mike Becher <Mike.Becher@lrz-muenchen.de>
+
+ * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
+
+2005-12-12 Thorsten Kukuk <kukuk@suse.de>
+
+ * modules/pam_mail/README: Document "quiet" and "standard"
+ options.
+
+2005-12-07 Thorsten Kukuk <kukuk@suse.de>
+
+ * modules/pam_mail/pam_mail.c: Modify assembling of output
+ for easier translation.
+
+ * po/de.po: Translate new pam_mail messages.
+
+
+2005-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * po/de.po: Add new translation, fix wrong format specifier.
+ * po/cs.po: Fix wrong format specifier.
+ * po/es.po: Likewise.
+ * po/fi.po: Likewise.
+ * po/fr.po: Likewise.
+ * po/hu.po: Likewise.
+ * po/it.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/nb.po: Likewise.
+ * po/pa.po: Likewise.
+ * po/pl.po: Likewise.
+ * po/pt.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/zh_CN.po: Likewise.
+ * po/zh_TW.po: Likewise.
+
+2005-11-24 Dmitry V. Levin <ldv@altlinux.org>
+
+ * config.h.in: Remove generated file.
+ * .cvsignore: Add config.h.in.
+
+ * configure.in: Do not check for strerror.
+ * libpam_misc/misc_conv.c (read_string): Replace strerror()
+ call with %m specifier.
+ * libpamc/pamc_converse.c (pamc_converse): Likewise.
+ * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
+ * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
+ Likewise.
+ * modules/pam_selinux/pam_selinux.c (security_label_tty):
+ Likewise.
+ (security_restorelabel_tty, security_label_tty): Append %m
+ specifier where appropriate.
+ * modules/pam_selinux/pam_selinux_check.c (main): Replace
+ strerror() call with %m specifier.
+ * modules/pam_unix/pam_unix_passwd.c (save_old_password,
+ _update_passwd, _update_shadow): Likewise.
+ * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
+ * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
+ * po/Linux-PAM.pot: Update strings from pam_selinux.
+ * po/cs.po: Likewise.
+ * po/de.po: Likewise.
+ * po/es.po: Likewise.
+ * po/fi.po: Likewise.
+ * po/fr.po: Likewise.
+ * po/hu.po: Likewise.
+ * po/it.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/nb.po: Likewise.
+ * po/pa.po: Likewise.
+ * po/pl.po: Likewise.
+ * po/pt.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/zh_CN.po: Likewise.
+ * po/zh_TW.po: Likewise.
+
+2005-11-23 Thorsten Kukuk <kukuk@suse.de>
+
+ * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
+ new variable to fix compiler warning.
+
+ * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
+ don't need to start with /dev/.
+
+2005-11-21 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release version 0.99.2.0
+
+ * libpam_misc/Makefile.am: Increase release number (for change
+ from 2005-11-09)
+
+ * NEWS: Adjust for 0.99.2.0
+
+2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
+ Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
+
+2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * libpam/pam_handlers.c: Replace code for all dlopen variants with
+ a generic wrapper.
+ * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
+ * libpam/pam_dynamic.h: Provide prototypes.
+ For Mac OS X support [#534205]
+
+2005-11-09 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
+ full path tty name.
+ * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
+ full path tty name. Allow unset tty.
+ (logic_member): Allow matching ':' in tty name.
+ * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
+ full path tty name. Allow unset tty.
+ (logic_member): Allow matching ':' in tty name.
+
+ * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
+ is not terminal.
+
+2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
+ correct variable names.
+
+2005-11-06 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_env/pam_env.c: don't treat a missing
+ /etc/environment as a fatal error when attempting to read it,
+ and try to read this file by default; this restores the behavior
+ from Linux-PAM 0.76.
+
+2005-11-02 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
+ by ohyajapn.
+
+ * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
+ logic when comparing dates to handle corner cases better [#1245888].
+
+2005-10-31 Thorsten Kukuk <kukuk@suse.de>
+
+ * modules/pam_filter/pam_filter.c: Use XCASE only if defined
+ [#624214]
+
+2005-10-27 Thorsten Kukuk <kukuk@suse.de>
+
+ * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
+
+2005-10-26 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
+ modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
+ modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
+ uid to 0 before executing the helper if SELinux is enabled.
+ * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
+ if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
+
+
+2005-10-20 Tomas Mraz <t8m@centrum.cz>
+
+ * configure.in: Added check for xauth binary and --with-xauth option.
+ * config.h.in: Added configurable PAM_PATH_XAUTH.
+ * modules/pam_xauth/README,
+ modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
+ * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
+ searching xauth binary on multiple places.
+ (run_coprocess): Don't use execvp as it can be a security risk.
+
+2005-10-04 Steve Langasek <vorlon@debian.org>
+
+ * libpam/include/security/pam_malloc.h,
+ libpam/include/security/pam_modules.h: Declare public header
+ files extern "C" so that they are C++-safe.
+
+2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
+ Steve Langasek <vorlon@debian.org>
+
+ Cleanup gratuitous use of strdup().
+ Fix "missing argument" checks.
+
+ * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
+ to conffile and envfile arguments. Do not use x_strdup() for
+ conffile and envfile initialization. Fix "missing argument"
+ checks.
+ (_parse_config_file): Take conffile argument of type "const char *"
+ instead of "char **". Do not free conffile.
+ (_parse_env_file): Take env_file argument of type "const char *"
+ instead of "char **". Do not free env_file.
+ (pam_sm_setcred): Add const qualifier to conf_file and env_file.
+ Pass conf_file and env_file to _parse_config_file() and
+ _parse_env_file() by value.
+ (pam_sm_open_session): Likewise.
+
+ * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
+ users argument. Do not use x_strdup() for users initialization.
+ (lookup): Add const qualifier to list argument.
+ (pam_sm_authenticate): Add const qualifier to users argument.
+
+ * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
+ to maildir argument. Do not use x_strdup() for maildir
+ initialization. Fix "missing argument" check.
+ (get_folder): Take path_mail argument of type "const char *"
+ instead of "char **". Do not free path_mail.
+ (_do_mail): Add const qualifier to path_mail argument.
+ Pass path_mail to get_folder() by value.
+
+ * modules/pam_motd/pam_motd.c: Include <syslog.h>.
+ (pam_sm_open_session): Add const qualifier to motd_path.
+ Do not use x_strdup() for motd_path initialization. Do not
+ free motd_path. Fix "missing argument" check. Add "unknown
+ option" warning.
+
+ * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
+ qualifier to database and cryptmode arguments. Fix "missing
+ argument" checks.
+ (pam_sm_authenticate): Add const qualifier to database and cryptmode.
+ (pam_sm_acct_mgmt): Likewise.
+
+2005-10-01 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
+
+2005-09-30 Steve Langasek <vorlon@debian.org>
+
+ * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
+ gratuitous use of strdup().
+
+2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
+
+ * release 0.99.1.0
+
+ * doc/specs/Makefile.am (install-data-local): Install
+ rfc and draft.
+ (all): Copy rfc if we build outside of source directory.
+
+2005-09-27 Thorsten Kukuk <kukuk@suse.de>
+
+ * NEWS: Document removal of pam_radius.
+ * autogen.sh: Make configure script executeable.
+
+ * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
+ (lex.yy.c): Fixed out of tree build.
+
+ * conv/pam_conv1/pam_conv.y: Fix main prototype.
+
+ * README: Adjust.
+
+ * po/POTFILES.in: Remove files not distributed by tar archive
+ and not containing strings for translation.
+
+2005-09-26 Tomas Mraz <t8m@centrum.cz>
+
+ * NEWS: Add a few missing entries from CHANGELOG.
+
+ * AUTHORS: Fixed entries for Toady and me.
+
+ * Makefile.am (M4_FILES): Fixed out of tree build.
+ * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
+ (spec, lex.yy.c): Fixed out of tree build.
+
+ * modules/pam_userdb/README: Document try_first_pass and
+ use_first_pass options, remove use_authtok option.
+
+
+2005-09-26 Dmitry V. Levin <ldv@altlinux.org>
+
+ * NEWS: Mention changes in pam_lastlog.
+
+2005-09-26 Thorsten Kukuk <kukuk@suse.de>
+
+ * NEWS: New file.
+ * autogen.sh: Don't generate NEWS file.
+ * CHANGELOG: Document it as obsolete.
+
+2005-09-26 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
+ _log_err() -> pam_syslog()
+ (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
+ * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
+ _log_err() -> pam_syslog()
+ * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
+ (getNISserver, _unix_run_shadow_binary, _update_passwd,
+ _update_shadow, _do_setpass, _pam_unix_approve_pass,
+ pam_sm_chauthtok): _log_err() -> pam_syslog()
+ * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
+ (pam_sm_open_session, pam_sm_close_session):
+ _log_err() -> pam_syslog()
+ * modules/pam_unix/support.c (_log_err, converse): removed
+ (_make_remark): use pam_prompt() instead of converse()
+ (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
+ _unix_verify_password, _unix_read_password):
+ _log_err() -> pam_syslog()
+ _cleanup(), _unix_cleanup(): Silence unused param warnings.
+ (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
+ _unix_run_helper_binary): Silence incorrect type warnings.
+ (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
+ instead of converse().
+ * modules/pam_unix/support.h (_log_err): removed
+ * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
+
+2005-09-26 Thorsten Kukuk <kukuk@suse.de>
+
+ * configure.in: Add doc/specs/Makefile.
+ * Makefile.am: Add releasedocs rule.
+ * doc/Makefile.am: Add specs subdir, remove files from specs
+ directory, add rfc86.0.txt to releasedocs.
+ * doc/specs/Makefile.am: New file.
+ * doc/specs/formatter/parse.y: move from here ...
+ * doc/specs/parse.y: ... here.
+ * doc/specs/formatter/parse.lex: move from here ...
+ * doc/specs/parse.lex: ... here.
+
+ * modules/pam_mail/pam_mail.c: Mark missing strings for translation
+ * po/Linux-PAM.pot: Add new strings from pam_mail
+ * po/cs.po: Likewise.
+ * po/de.po: Likewise.
+ * po/es.po: Likewise.
+ * po/fi.po: Likewise.
+ * po/fr.po: Likewise.
+ * po/hu.po: Likewise.
+ * po/it.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/nb.po: Likewise.
+ * po/pa.po: Likewise.
+ * po/pl.po: Likewise.
+ * po/pt.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/zh_CN.po: Likewise.
+ * po/zh_TW.po: Likewise.
+
+2005-09-23 Tomas Mraz <t8m@centrum.cz>
+
+ * modules/pam_access/pam_access.c (from_match): Support NULL from.
+ (string_match): Support NULL string, add NONE keyword matching it.
+ (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
+ * modules/pam_access/access.conf: NONE keyword description
+ * modules/pam_access/README: NONE keyword description
+
+2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
+ pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
+ text of log messages.
+ (pam_sm_open_session): Replace sequence of malloc(), strcpy()
+ and strcat() calls with asprintf(). Replace syslog() calls
+ with pam_syslog().
+
+ * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
+ instead of memcmp() for string comparison.
+
+2005-09-21 Dmitry V. Levin <ldv@altlinux.org>
+
+ * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
+ (parse_args): Add pam_handle_t* argument. Log unrecognized
+ options.
+ (perform_check): Log pam_get_user() and malloc() failures.
+ (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
+ Pass pam_handle_t* to parse_args().
+
+ * modules/pam_mail/pam_mail.c: Include <errno.h>.
+ Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
+ NO_MAIL_STANDARD_FORMAT macros.
+ (parse_args, get_folder): Cleanup error messages.
+ (get_folder): Fix leak of the path_mail variable in case of
+ pam_get_user() failure. Cleanup memory management.
+ (get_mail_status): Add pam_handle_t* argument. Fix leaks of
+ namelist variable. Cleanup memory management. Log memory
+ allocation failures. Remove 250-byte limit on Maildir pathname.
+ (report_mail): Mark text messages for translation.
+ (_do_mail): Cleanup memory management. Pass pam_handle_t*
+ to get_mail_status().
+
+ * po/Linux-PAM.pot: Update with new strings from pam_mail for
+ translation.
+ * po/cs.po: Likewise.
+ * po/de.po: Likewise.
+ * po/es.po: Likewise.
+ * po/fi.po: Likewise.
+ * po/fr.po: Likewise.
+ * po/hu.po: Likewise.
+ * po/it.po: Likewise.
+ * po/ja.po: Likewise.
+ * po/nb.po: Likewise.
+ * po/pa.po: Likewise.
+ * po/pl.po: Likewise.
+ * po/pt.po: Likewise.
+ * po/pt_BR.po: Likewise.
+ * po/zh_CN.po: Likewise.
+ * po/zh_TW.po: Likewise.
+
+2005-09-20 Thorsten Kukuk <kukuk@suse.de>
+
+ * configure.in: Add finish translation.
+ * po/fi.po: New.
+
+ * acinclude.m4: remove libprelude macros.
+ * m4/libprelude.m4: New.
+
+ * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
+
+ * libpamc/Makefile.am (EXTRA_DIST): Add License.
+
+See CHANGELOG for earlier changes.
diff --git a/Copyright b/Copyright
index 2f27a2ee..12ff8c53 100644
--- a/Copyright
+++ b/Copyright
@@ -38,4 +38,3 @@ TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
DAMAGE.
-------------------------------------------------------------------------
-
diff --git a/INSTALL b/INSTALL
index 56b077d6..7d1c323b 100644
--- a/INSTALL
+++ b/INSTALL
@@ -1,16 +1,25 @@
Installation Instructions
*************************
-Copyright (C) 1994, 1995, 1996, 1999, 2000, 2001, 2002, 2004, 2005 Free
-Software Foundation, Inc.
+Copyright (C) 1994, 1995, 1996, 1999, 2000, 2001, 2002, 2004, 2005,
+2006, 2007, 2008, 2009 Free Software Foundation, Inc.
-This file is free documentation; the Free Software Foundation gives
-unlimited permission to copy, distribute and modify it.
+ Copying and distribution of this file, with or without modification,
+are permitted in any medium without royalty provided the copyright
+notice and this notice are preserved. This file is offered as-is,
+without warranty of any kind.
Basic Installation
==================
-These are generic installation instructions.
+ Briefly, the shell commands `./configure; make; make install' should
+configure, build, and install this package. The following
+more-detailed instructions are generic; see the `README' file for
+instructions specific to this package. Some packages provide this
+`INSTALL' file but do not implement all of the features documented
+below. The lack of an optional feature in a given package is not
+necessarily a bug. More recommendations for GNU packages can be found
+in *note Makefile Conventions: (standards)Makefile Conventions.
The `configure' shell script attempts to guess correct values for
various system-dependent variables used during compilation. It uses
@@ -23,9 +32,9 @@ debugging `configure').
It can also use an optional file (typically called `config.cache'
and enabled with `--cache-file=config.cache' or simply `-C') that saves
-the results of its tests to speed up reconfiguring. (Caching is
+the results of its tests to speed up reconfiguring. Caching is
disabled by default to prevent problems with accidental use of stale
-cache files.)
+cache files.
If you need to do unusual things to compile the package, please try
to figure out how `configure' could check whether to do them, and mail
@@ -35,30 +44,37 @@ some point `config.cache' contains results you don't want to keep, you
may remove or edit it.
The file `configure.ac' (or `configure.in') is used to create
-`configure' by a program called `autoconf'. You only need
-`configure.ac' if you want to change it or regenerate `configure' using
-a newer version of `autoconf'.
+`configure' by a program called `autoconf'. You need `configure.ac' if
+you want to change it or regenerate `configure' using a newer version
+of `autoconf'.
-The simplest way to compile this package is:
+ The simplest way to compile this package is:
1. `cd' to the directory containing the package's source code and type
- `./configure' to configure the package for your system. If you're
- using `csh' on an old version of System V, you might need to type
- `sh ./configure' instead to prevent `csh' from trying to execute
- `configure' itself.
+ `./configure' to configure the package for your system.
- Running `configure' takes awhile. While running, it prints some
- messages telling which features it is checking for.
+ Running `configure' might take a while. While running, it prints
+ some messages telling which features it is checking for.
2. Type `make' to compile the package.
3. Optionally, type `make check' to run any self-tests that come with
- the package.
+ the package, generally using the just-built uninstalled binaries.
4. Type `make install' to install the programs and any data files and
- documentation.
-
- 5. You can remove the program binaries and object files from the
+ documentation. When installing into a prefix owned by root, it is
+ recommended that the package be configured and built as a regular
+ user, and only the `make install' phase executed with root
+ privileges.
+
+ 5. Optionally, type `make installcheck' to repeat any self-tests, but
+ this time using the binaries in their final installed location.
+ This target does not install anything. Running this target as a
+ regular user, particularly if the prior `make install' required
+ root privileges, verifies that the installation completed
+ correctly.
+
+ 6. You can remove the program binaries and object files from the
source code directory by typing `make clean'. To also remove the
files that `configure' created (so you can compile the package for
a different kind of computer), type `make distclean'. There is
@@ -67,65 +83,120 @@ The simplest way to compile this package is:
all sorts of other programs in order to regenerate files that came
with the distribution.
+ 7. Often, you can also type `make uninstall' to remove the installed
+ files again. In practice, not all packages have tested that
+ uninstallation works correctly, even though it is required by the
+ GNU Coding Standards.
+
+ 8. Some packages, particularly those that use Automake, provide `make
+ distcheck', which can by used by developers to test that all other
+ targets like `make install' and `make uninstall' work correctly.
+ This target is generally not run by end users.
+
Compilers and Options
=====================
-Some systems require unusual options for compilation or linking that the
-`configure' script does not know about. Run `./configure --help' for
-details on some of the pertinent environment variables.
+ Some systems require unusual options for compilation or linking that
+the `configure' script does not know about. Run `./configure --help'
+for details on some of the pertinent environment variables.
You can give `configure' initial values for configuration parameters
by setting variables in the command line or in the environment. Here
is an example:
- ./configure CC=c89 CFLAGS=-O2 LIBS=-lposix
+ ./configure CC=c99 CFLAGS=-g LIBS=-lposix
*Note Defining Variables::, for more details.
Compiling For Multiple Architectures
====================================
-You can compile the package for more than one kind of computer at the
+ You can compile the package for more than one kind of computer at the
same time, by placing the object files for each architecture in their
-own directory. To do this, you must use a version of `make' that
-supports the `VPATH' variable, such as GNU `make'. `cd' to the
+own directory. To do this, you can use GNU `make'. `cd' to the
directory where you want the object files and executables to go and run
the `configure' script. `configure' automatically checks for the
-source code in the directory that `configure' is in and in `..'.
+source code in the directory that `configure' is in and in `..'. This
+is known as a "VPATH" build.
+
+ With a non-GNU `make', it is safer to compile the package for one
+architecture at a time in the source code directory. After you have
+installed the package for one architecture, use `make distclean' before
+reconfiguring for another architecture.
- If you have to use a `make' that does not support the `VPATH'
-variable, you have to compile the package for one architecture at a
-time in the source code directory. After you have installed the
-package for one architecture, use `make distclean' before reconfiguring
-for another architecture.
+ On MacOS X 10.5 and later systems, you can create libraries and
+executables that work on multiple system types--known as "fat" or
+"universal" binaries--by specifying multiple `-arch' options to the
+compiler but only a single `-arch' option to the preprocessor. Like
+this:
+
+ ./configure CC="gcc -arch i386 -arch x86_64 -arch ppc -arch ppc64" \
+ CXX="g++ -arch i386 -arch x86_64 -arch ppc -arch ppc64" \
+ CPP="gcc -E" CXXCPP="g++ -E"
+
+ This is not guaranteed to produce working output in all cases, you
+may have to build one architecture at a time and combine the results
+using the `lipo' tool if you have problems.
Installation Names
==================
-By default, `make install' will install the package's files in
-`/usr/local/bin', `/usr/local/man', etc. You can specify an
-installation prefix other than `/usr/local' by giving `configure' the
-option `--prefix=PREFIX'.
+ By default, `make install' installs the package's commands under
+`/usr/local/bin', include files under `/usr/local/include', etc. You
+can specify an installation prefix other than `/usr/local' by giving
+`configure' the option `--prefix=PREFIX', where PREFIX must be an
+absolute file name.
You can specify separate installation prefixes for
architecture-specific files and architecture-independent files. If you
-give `configure' the option `--exec-prefix=PREFIX', the package will
-use PREFIX as the prefix for installing programs and libraries.
-Documentation and other data files will still use the regular prefix.
+pass the option `--exec-prefix=PREFIX' to `configure', the package uses
+PREFIX as the prefix for installing programs and libraries.
+Documentation and other data files still use the regular prefix.
In addition, if you use an unusual directory layout you can give
options like `--bindir=DIR' to specify different values for particular
kinds of files. Run `configure --help' for a list of the directories
-you can set and what kinds of files go in them.
+you can set and what kinds of files go in them. In general, the
+default for these options is expressed in terms of `${prefix}', so that
+specifying just `--prefix' will affect all of the other directory
+specifications that were not explicitly provided.
+
+ The most portable way to affect installation locations is to pass the
+correct locations to `configure'; however, many packages provide one or
+both of the following shortcuts of passing variable assignments to the
+`make install' command line to change installation locations without
+having to reconfigure or recompile.
+
+ The first method involves providing an override variable for each
+affected directory. For example, `make install
+prefix=/alternate/directory' will choose an alternate location for all
+directory configuration variables that were expressed in terms of
+`${prefix}'. Any directories that were specified during `configure',
+but not in terms of `${prefix}', must each be overridden at install
+time for the entire installation to be relocated. The approach of
+makefile variable overrides for each directory variable is required by
+the GNU Coding Standards, and ideally causes no recompilation.
+However, some platforms have known limitations with the semantics of
+shared libraries that end up requiring recompilation when using this
+method, particularly noticeable in packages that use GNU Libtool.
+
+ The second method involves providing the `DESTDIR' variable. For
+example, `make install DESTDIR=/alternate/directory' will prepend
+`/alternate/directory' before all installation names. The approach of
+`DESTDIR' overrides is not required by the GNU Coding Standards, and
+does not work on platforms that have drive letters. On the other hand,
+it does better at avoiding recompilation issues, and works well even
+when some directory options were not specified in terms of `${prefix}'
+at `configure' time.
+
+Optional Features
+=================
If the package supports it, you can cause programs to be installed
with an extra prefix or suffix on their names by giving `configure' the
option `--program-prefix=PREFIX' or `--program-suffix=SUFFIX'.
-Optional Features
-=================
-
-Some packages pay attention to `--enable-FEATURE' options to
+ Some packages pay attention to `--enable-FEATURE' options to
`configure', where FEATURE indicates an optional part of the package.
They may also pay attention to `--with-PACKAGE' options, where PACKAGE
is something like `gnu-as' or `x' (for the X Window System). The
@@ -137,14 +208,53 @@ find the X include and library files automatically, but if it doesn't,
you can use the `configure' options `--x-includes=DIR' and
`--x-libraries=DIR' to specify their locations.
+ Some packages offer the ability to configure how verbose the
+execution of `make' will be. For these packages, running `./configure
+--enable-silent-rules' sets the default to minimal output, which can be
+overridden with `make V=1'; while running `./configure
+--disable-silent-rules' sets the default to verbose, which can be
+overridden with `make V=0'.
+
+Particular systems
+==================
+
+ On HP-UX, the default C compiler is not ANSI C compatible. If GNU
+CC is not installed, it is recommended to use the following options in
+order to use an ANSI C compiler:
+
+ ./configure CC="cc -Ae -D_XOPEN_SOURCE=500"
+
+and if that doesn't work, install pre-built binaries of GCC for HP-UX.
+
+ On OSF/1 a.k.a. Tru64, some versions of the default C compiler cannot
+parse its `<wchar.h>' header file. The option `-nodtk' can be used as
+a workaround. If GNU CC is not installed, it is therefore recommended
+to try
+
+ ./configure CC="cc"
+
+and if that doesn't work, try
+
+ ./configure CC="cc -nodtk"
+
+ On Solaris, don't put `/usr/ucb' early in your `PATH'. This
+directory contains several dysfunctional programs; working variants of
+these programs are available in `/usr/bin'. So, if you need `/usr/ucb'
+in your `PATH', put it _after_ `/usr/bin'.
+
+ On Haiku, software installed for all users goes in `/boot/common',
+not `/usr/local'. It is recommended to use the following options:
+
+ ./configure --prefix=/boot/common
+
Specifying the System Type
==========================
-There may be some features `configure' cannot figure out automatically,
-but needs to determine by the type of machine the package will run on.
-Usually, assuming the package is built to be run on the _same_
-architectures, `configure' can figure that out, but if it prints a
-message saying it cannot guess the machine type, give it the
+ There may be some features `configure' cannot figure out
+automatically, but needs to determine by the type of machine the package
+will run on. Usually, assuming the package is built to be run on the
+_same_ architectures, `configure' can figure that out, but if it prints
+a message saying it cannot guess the machine type, give it the
`--build=TYPE' option. TYPE can either be a short name for the system
type, such as `sun4', or a canonical name which has the form:
@@ -152,14 +262,15 @@ type, such as `sun4', or a canonical name which has the form:
where SYSTEM can have one of these forms:
- OS KERNEL-OS
+ OS
+ KERNEL-OS
See the file `config.sub' for the possible values of each field. If
`config.sub' isn't included in this package, then this package doesn't
need to know the machine type.
If you are _building_ compiler tools for cross-compiling, you should
-use the `--target=TYPE' option to select the type of system they will
+use the option `--target=TYPE' to select the type of system they will
produce code for.
If you want to _use_ a cross compiler, that generates code for a
@@ -170,9 +281,9 @@ eventually be run) with `--host=TYPE'.
Sharing Defaults
================
-If you want to set default values for `configure' scripts to share, you
-can create a site shell script called `config.site' that gives default
-values for variables like `CC', `cache_file', and `prefix'.
+ If you want to set default values for `configure' scripts to share,
+you can create a site shell script called `config.site' that gives
+default values for variables like `CC', `cache_file', and `prefix'.
`configure' looks for `PREFIX/share/config.site' if it exists, then
`PREFIX/etc/config.site' if it exists. Or, you can set the
`CONFIG_SITE' environment variable to the location of the site script.
@@ -181,7 +292,7 @@ A warning: not all `configure' scripts look for a site script.
Defining Variables
==================
-Variables not defined in a site shell script can be set in the
+ Variables not defined in a site shell script can be set in the
environment passed to `configure'. However, some packages may run
configure again during the build, and the customized values of these
variables may be lost. In order to avoid this problem, you should set
@@ -190,21 +301,29 @@ them in the `configure' command line, using `VAR=value'. For example:
./configure CC=/usr/local2/bin/gcc
causes the specified `gcc' to be used as the C compiler (unless it is
-overridden in the site shell script). Here is a another example:
+overridden in the site shell script).
- /bin/bash ./configure CONFIG_SHELL=/bin/bash
+Unfortunately, this technique does not work for `CONFIG_SHELL' due to
+an Autoconf bug. Until the bug is fixed you can use this workaround:
-Here the `CONFIG_SHELL=/bin/bash' operand causes subsequent
-configuration-related scripts to be executed by `/bin/bash'.
+ CONFIG_SHELL=/bin/bash /bin/bash ./configure CONFIG_SHELL=/bin/bash
`configure' Invocation
======================
-`configure' recognizes the following options to control how it operates.
+ `configure' recognizes the following options to control how it
+operates.
`--help'
`-h'
- Print a summary of the options to `configure', and exit.
+ Print a summary of all of the options to `configure', and exit.
+
+`--help=short'
+`--help=recursive'
+ Print a summary of the options unique to this package's
+ `configure', and exit. The `short' variant lists options used
+ only in the top level, while the `recursive' variant lists options
+ also present in any nested packages.
`--version'
`-V'
@@ -231,6 +350,16 @@ configuration-related scripts to be executed by `/bin/bash'.
Look for the package's source code in directory DIR. Usually
`configure' can determine that directory automatically.
+`--prefix=DIR'
+ Use DIR as the installation prefix. *note Installation Names::
+ for more details, including other options available for fine-tuning
+ the installation locations.
+
+`--no-create'
+`-n'
+ Run the configure checks, but stop before creating any output
+ files.
+
`configure' also accepts some other, not widely useful, options. Run
`configure --help' for more details.
diff --git a/Make.xml.rules b/Make.xml.rules
index 6e9dccc9..bee30cda 100644
--- a/Make.xml.rules
+++ b/Make.xml.rules
@@ -22,4 +22,3 @@ README: README.xml
$(XSLTPROC) -o $(srcdir)/$@ --path $(srcdir) --xinclude --nonet http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl $<
#CLEANFILES += $(man_MANS) README
-
diff --git a/Makefile.am b/Makefile.am
index 69d09f63..3db4e37a 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -4,23 +4,11 @@
AUTOMAKE_OPTIONS = 1.9 gnu dist-bzip2 check-news
-if STATIC_MODULES
-SUBDIRS = modules libpam libpamc libpam_misc tests po conf doc examples xtests
-else
SUBDIRS = libpam tests libpamc libpam_misc modules po conf doc examples xtests
-endif
CLEANFILES = *~
-M4_FILES = m4/gettext.m4 m4/iconv.m4 m4/intlmacosx.m4 \
- m4/japhar_grep_cflags.m4 m4/jh_path_xml_catalog.m4 \
- m4/ld-as-needed.m4 m4/ld-no-undefined.m4 m4/ld-O1.m4 \
- m4/lib-ld.m4 m4/lib-link.m4 m4/lib-prefix.m4 \
- m4/libprelude.m4 m4/libtool.m4 m4/nls.m4 \
- m4/po.m4 m4/progtest.m4
-
-EXTRA_DIST = config.rpath mkinstalldirs pgp.keys.asc CHANGELOG \
- Copyright $(M4_FILES) Make.xml.rules
+EXTRA_DIST = pgp.keys.asc CHANGELOG ChangeLog-CVS Copyright Make.xml.rules
ACLOCAL_AMFLAGS = -I m4
@@ -42,3 +30,20 @@ xtests:
make -C xtests xtests
.PHONY: xtests
+
+gen_changelog_start_date = 2011-10-26
+gen-ChangeLog:
+ if test -d .git; then \
+ ( $(top_srcdir)/gitlog-to-changelog --append-dot \
+ --since=$(gen_changelog_start_date) && \
+ echo && echo && \
+ echo 'See ChangeLog-CVS for earlier changes.' \
+ ) > $(distdir)/ChangeLog.new && \
+ rm -f $(distdir)/ChangeLog && \
+ mv $(distdir)/ChangeLog.new $(distdir)/ChangeLog; \
+ fi
+
+dist-hook: gen-ChangeLog
+.PHONY: gen-ChangeLog
+
+export TAR_OPTIONS = --owner=0 --group=0 --numeric-owner --mode=go-w,go+rX
diff --git a/Makefile.in b/Makefile.in
index 83971663..f5253481 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -1,8 +1,9 @@
-# Makefile.in generated by automake 1.10.1 from Makefile.am.
+# Makefile.in generated by automake 1.11.1 from Makefile.am.
# @configure_input@
# Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002,
-# 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.
+# 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation,
+# Inc.
# This Makefile.in is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
@@ -19,8 +20,9 @@
#
VPATH = @srcdir@
pkgdatadir = $(datadir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
install_sh_DATA = $(install_sh) -c -m 644
install_sh_PROGRAM = $(install_sh) -c
@@ -39,11 +41,13 @@ subdir = .
DIST_COMMON = README $(am__configure_deps) $(srcdir)/Makefile.am \
$(srcdir)/Makefile.in $(srcdir)/config.h.in \
$(top_srcdir)/configure ABOUT-NLS AUTHORS COPYING ChangeLog \
- INSTALL NEWS compile config.guess config.rpath config.sub \
- depcomp install-sh ltmain.sh missing mkinstalldirs ylwrap
+ INSTALL NEWS build-aux/compile build-aux/config.guess \
+ build-aux/config.rpath build-aux/config.sub build-aux/depcomp \
+ build-aux/install-sh build-aux/ltmain.sh build-aux/missing \
+ build-aux/ylwrap
ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
am__aclocal_m4_deps = $(top_srcdir)/m4/gettext.m4 \
- $(top_srcdir)/m4/iconv.m4 $(top_srcdir)/m4/intlmacosx.m4 \
+ $(top_srcdir)/m4/iconv.m4 \
$(top_srcdir)/m4/japhar_grep_cflags.m4 \
$(top_srcdir)/m4/jh_path_xml_catalog.m4 \
$(top_srcdir)/m4/ld-O1.m4 $(top_srcdir)/m4/ld-as-needed.m4 \
@@ -58,9 +62,10 @@ am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
$(ACLOCAL_M4)
am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \
configure.lineno config.status.lineno
-mkinstalldirs = $(SHELL) $(top_srcdir)/mkinstalldirs
+mkinstalldirs = $(install_sh) -d
CONFIG_HEADER = config.h
CONFIG_CLEAN_FILES =
+CONFIG_CLEAN_VPATH_FILES =
SOURCES =
DIST_SOURCES =
RECURSIVE_TARGETS = all-recursive check-recursive dvi-recursive \
@@ -72,17 +77,44 @@ RECURSIVE_TARGETS = all-recursive check-recursive dvi-recursive \
ps-recursive uninstall-recursive
RECURSIVE_CLEAN_TARGETS = mostlyclean-recursive clean-recursive \
distclean-recursive maintainer-clean-recursive
+AM_RECURSIVE_TARGETS = $(RECURSIVE_TARGETS:-recursive=) \
+ $(RECURSIVE_CLEAN_TARGETS:-recursive=) tags TAGS ctags CTAGS \
+ distdir dist dist-all distcheck
ETAGS = etags
CTAGS = ctags
-DIST_SUBDIRS = libpam tests libpamc libpam_misc modules po conf doc \
- examples xtests
+DIST_SUBDIRS = $(SUBDIRS)
DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
distdir = $(PACKAGE)-$(VERSION)
top_distdir = $(distdir)
am__remove_distdir = \
- { test ! -d $(distdir) \
- || { find $(distdir) -type d ! -perm -200 -exec chmod u+w {} ';' \
- && rm -fr $(distdir); }; }
+ { test ! -d "$(distdir)" \
+ || { find "$(distdir)" -type d ! -perm -200 -exec chmod u+w {} ';' \
+ && rm -fr "$(distdir)"; }; }
+am__relativize = \
+ dir0=`pwd`; \
+ sed_first='s,^\([^/]*\)/.*$$,\1,'; \
+ sed_rest='s,^[^/]*/*,,'; \
+ sed_last='s,^.*/\([^/]*\)$$,\1,'; \
+ sed_butlast='s,/*[^/]*$$,,'; \
+ while test -n "$$dir1"; do \
+ first=`echo "$$dir1" | sed -e "$$sed_first"`; \
+ if test "$$first" != "."; then \
+ if test "$$first" = ".."; then \
+ dir2=`echo "$$dir0" | sed -e "$$sed_last"`/"$$dir2"; \
+ dir0=`echo "$$dir0" | sed -e "$$sed_butlast"`; \
+ else \
+ first2=`echo "$$dir2" | sed -e "$$sed_first"`; \
+ if test "$$first2" = "$$first"; then \
+ dir2=`echo "$$dir2" | sed -e "$$sed_rest"`; \
+ else \
+ dir2="../$$dir2"; \
+ fi; \
+ dir0="$$dir0"/"$$first"; \
+ fi; \
+ fi; \
+ dir1=`echo "$$dir1" | sed -e "$$sed_rest"`; \
+ done; \
+ reldir="$$dir2"
DIST_ARCHIVES = $(distdir).tar.gz $(distdir).tar.bz2
GZIP_ENV = --best
distuninstallcheck_listfiles = find . -type f -print
@@ -115,7 +147,6 @@ EGREP = @EGREP@
EXEEXT = @EXEEXT@
FGREP = @FGREP@
FO2PDF = @FO2PDF@
-GETTEXT_MACRO_VERSION = @GETTEXT_MACRO_VERSION@
GMSGFMT = @GMSGFMT@
GMSGFMT_015 = @GMSGFMT_015@
GREP = @GREP@
@@ -139,7 +170,6 @@ LIBDB = @LIBDB@
LIBDL = @LIBDL@
LIBICONV = @LIBICONV@
LIBINTL = @LIBINTL@
-LIBNSL = @LIBNSL@
LIBOBJS = @LIBOBJS@
LIBPRELUDE_CFLAGS = @LIBPRELUDE_CFLAGS@
LIBPRELUDE_CONFIG = @LIBPRELUDE_CONFIG@
@@ -161,6 +191,8 @@ MKDIR_P = @MKDIR_P@
MSGFMT = @MSGFMT@
MSGFMT_015 = @MSGFMT_015@
MSGMERGE = @MSGMERGE@
+NIS_CFLAGS = @NIS_CFLAGS@
+NIS_LIBS = @NIS_LIBS@
NM = @NM@
NMEDIT = @NMEDIT@
OBJDUMP = @OBJDUMP@
@@ -172,10 +204,12 @@ PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
PACKAGE_NAME = @PACKAGE_NAME@
PACKAGE_STRING = @PACKAGE_STRING@
PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
PACKAGE_VERSION = @PACKAGE_VERSION@
PATH_SEPARATOR = @PATH_SEPARATOR@
PIE_CFLAGS = @PIE_CFLAGS@
PIE_LDFLAGS = @PIE_LDFLAGS@
+PKG_CONFIG = @PKG_CONFIG@
POSUB = @POSUB@
RANLIB = @RANLIB@
SCONFIGDIR = @SCONFIGDIR@
@@ -188,7 +222,6 @@ USE_NLS = @USE_NLS@
VERSION = @VERSION@
XGETTEXT = @XGETTEXT@
XGETTEXT_015 = @XGETTEXT_015@
-XGETTEXT_EXTRA_OPTIONS = @XGETTEXT_EXTRA_OPTIONS@
XMLCATALOG = @XMLCATALOG@
XMLLINT = @XMLLINT@
XML_CATALOG_FILE = @XML_CATALOG_FILE@
@@ -230,6 +263,8 @@ install_sh = @install_sh@
libc_cv_fpie = @libc_cv_fpie@
libdir = @libdir@
libexecdir = @libexecdir@
+libtirpc_CFLAGS = @libtirpc_CFLAGS@
+libtirpc_LIBS = @libtirpc_LIBS@
localedir = @localedir@
localstatedir = @localstatedir@
lt_ECHO = @lt_ECHO@
@@ -253,20 +288,11 @@ top_build_prefix = @top_build_prefix@
top_builddir = @top_builddir@
top_srcdir = @top_srcdir@
AUTOMAKE_OPTIONS = 1.9 gnu dist-bzip2 check-news
-@STATIC_MODULES_FALSE@SUBDIRS = libpam tests libpamc libpam_misc modules po conf doc examples xtests
-@STATIC_MODULES_TRUE@SUBDIRS = modules libpam libpamc libpam_misc tests po conf doc examples xtests
+SUBDIRS = libpam tests libpamc libpam_misc modules po conf doc examples xtests
CLEANFILES = *~
-M4_FILES = m4/gettext.m4 m4/iconv.m4 m4/intlmacosx.m4 \
- m4/japhar_grep_cflags.m4 m4/jh_path_xml_catalog.m4 \
- m4/ld-as-needed.m4 m4/ld-no-undefined.m4 m4/ld-O1.m4 \
- m4/lib-ld.m4 m4/lib-link.m4 m4/lib-prefix.m4 \
- m4/libprelude.m4 m4/libtool.m4 m4/nls.m4 \
- m4/po.m4 m4/progtest.m4
-
-EXTRA_DIST = config.rpath mkinstalldirs pgp.keys.asc CHANGELOG \
- Copyright $(M4_FILES) Make.xml.rules
-
+EXTRA_DIST = pgp.keys.asc CHANGELOG ChangeLog-CVS Copyright Make.xml.rules
ACLOCAL_AMFLAGS = -I m4
+gen_changelog_start_date = 2011-10-26
all: config.h
$(MAKE) $(AM_MAKEFLAGS) all-recursive
@@ -277,15 +303,15 @@ $(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps)
@for dep in $?; do \
case '$(am__configure_deps)' in \
*$$dep*) \
- echo ' cd $(srcdir) && $(AUTOMAKE) --gnu '; \
- cd $(srcdir) && $(AUTOMAKE) --gnu \
+ echo ' cd $(srcdir) && $(AUTOMAKE) --gnu'; \
+ $(am__cd) $(srcdir) && $(AUTOMAKE) --gnu \
&& exit 0; \
exit 1;; \
esac; \
done; \
- echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu Makefile'; \
- cd $(top_srcdir) && \
- $(AUTOMAKE) --gnu Makefile
+ echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu Makefile'; \
+ $(am__cd) $(top_srcdir) && \
+ $(AUTOMAKE) --gnu Makefile
.PRECIOUS: Makefile
Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
@case '$?' in \
@@ -301,9 +327,10 @@ $(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENC
$(SHELL) ./config.status --recheck
$(top_srcdir)/configure: $(am__configure_deps)
- cd $(srcdir) && $(AUTOCONF)
+ $(am__cd) $(srcdir) && $(AUTOCONF)
$(ACLOCAL_M4): $(am__aclocal_m4_deps)
- cd $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS)
+ $(am__cd) $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS)
+$(am__aclocal_m4_deps):
config.h: stamp-h1
@if test ! -f $@; then \
@@ -315,7 +342,7 @@ stamp-h1: $(srcdir)/config.h.in $(top_builddir)/config.status
@rm -f stamp-h1
cd $(top_builddir) && $(SHELL) ./config.status config.h
$(srcdir)/config.h.in: $(am__configure_deps)
- cd $(top_srcdir) && $(AUTOHEADER)
+ ($(am__cd) $(top_srcdir) && $(AUTOHEADER))
rm -f stamp-h1
touch $@
@@ -329,7 +356,7 @@ clean-libtool:
-rm -rf .libs _libs
distclean-libtool:
- -rm -f libtool
+ -rm -f libtool config.lt
# This directory's subdirectories are mostly independent; you can cd
# into them and run `make' without going through this Makefile.
@@ -338,7 +365,7 @@ distclean-libtool:
# (which will cause the Makefiles to be regenerated when you run `make');
# (2) otherwise, pass the desired values on the `make' command line.
$(RECURSIVE_TARGETS):
- @failcom='exit 1'; \
+ @fail= failcom='exit 1'; \
for f in x $$MAKEFLAGS; do \
case $$f in \
*=* | --[!k]*);; \
@@ -355,7 +382,7 @@ $(RECURSIVE_TARGETS):
else \
local_target="$$target"; \
fi; \
- (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
+ ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
|| eval $$failcom; \
done; \
if test "$$dot_seen" = "no"; then \
@@ -363,7 +390,7 @@ $(RECURSIVE_TARGETS):
fi; test -z "$$fail"
$(RECURSIVE_CLEAN_TARGETS):
- @failcom='exit 1'; \
+ @fail= failcom='exit 1'; \
for f in x $$MAKEFLAGS; do \
case $$f in \
*=* | --[!k]*);; \
@@ -389,16 +416,16 @@ $(RECURSIVE_CLEAN_TARGETS):
else \
local_target="$$target"; \
fi; \
- (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
+ ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
|| eval $$failcom; \
done && test -z "$$fail"
tags-recursive:
list='$(SUBDIRS)'; for subdir in $$list; do \
- test "$$subdir" = . || (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) tags); \
+ test "$$subdir" = . || ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) tags); \
done
ctags-recursive:
list='$(SUBDIRS)'; for subdir in $$list; do \
- test "$$subdir" = . || (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) ctags); \
+ test "$$subdir" = . || ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) ctags); \
done
ID: $(HEADERS) $(SOURCES) $(LISP) $(TAGS_FILES)
@@ -406,14 +433,14 @@ ID: $(HEADERS) $(SOURCES) $(LISP) $(TAGS_FILES)
unique=`for i in $$list; do \
if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
done | \
- $(AWK) '{ files[$$0] = 1; nonemtpy = 1; } \
+ $(AWK) '{ files[$$0] = 1; nonempty = 1; } \
END { if (nonempty) { for (i in files) print i; }; }'`; \
mkid -fID $$unique
tags: TAGS
TAGS: tags-recursive $(HEADERS) $(SOURCES) config.h.in $(TAGS_DEPENDENCIES) \
$(TAGS_FILES) $(LISP)
- tags=; \
+ set x; \
here=`pwd`; \
if ($(ETAGS) --etags-include --version) >/dev/null 2>&1; then \
include_option=--etags-include; \
@@ -425,7 +452,7 @@ TAGS: tags-recursive $(HEADERS) $(SOURCES) config.h.in $(TAGS_DEPENDENCIES) \
list='$(SUBDIRS)'; for subdir in $$list; do \
if test "$$subdir" = .; then :; else \
test ! -f $$subdir/TAGS || \
- tags="$$tags $$include_option=$$here/$$subdir/TAGS"; \
+ set "$$@" "$$include_option=$$here/$$subdir/TAGS"; \
fi; \
done; \
list='$(SOURCES) $(HEADERS) config.h.in $(LISP) $(TAGS_FILES)'; \
@@ -434,29 +461,34 @@ TAGS: tags-recursive $(HEADERS) $(SOURCES) config.h.in $(TAGS_DEPENDENCIES) \
done | \
$(AWK) '{ files[$$0] = 1; nonempty = 1; } \
END { if (nonempty) { for (i in files) print i; }; }'`; \
- if test -z "$(ETAGS_ARGS)$$tags$$unique"; then :; else \
+ shift; \
+ if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
test -n "$$unique" || unique=$$empty_fix; \
- $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
- $$tags $$unique; \
+ if test $$# -gt 0; then \
+ $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+ "$$@" $$unique; \
+ else \
+ $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+ $$unique; \
+ fi; \
fi
ctags: CTAGS
CTAGS: ctags-recursive $(HEADERS) $(SOURCES) config.h.in $(TAGS_DEPENDENCIES) \
$(TAGS_FILES) $(LISP)
- tags=; \
list='$(SOURCES) $(HEADERS) config.h.in $(LISP) $(TAGS_FILES)'; \
unique=`for i in $$list; do \
if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
done | \
$(AWK) '{ files[$$0] = 1; nonempty = 1; } \
END { if (nonempty) { for (i in files) print i; }; }'`; \
- test -z "$(CTAGS_ARGS)$$tags$$unique" \
+ test -z "$(CTAGS_ARGS)$$unique" \
|| $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
- $$tags $$unique
+ $$unique
GTAGS:
here=`$(am__cd) $(top_builddir) && pwd` \
- && cd $(top_srcdir) \
- && gtags -i $(GTAGS_ARGS) $$here
+ && $(am__cd) $(top_srcdir) \
+ && gtags -i $(GTAGS_ARGS) "$$here"
distclean-tags:
-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
@@ -469,7 +501,7 @@ distdir: $(DISTFILES)
exit 1;; \
esac
$(am__remove_distdir)
- test -d $(distdir) || mkdir $(distdir)
+ test -d "$(distdir)" || mkdir "$(distdir)"
@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
list='$(DISTFILES)'; \
@@ -485,38 +517,58 @@ distdir: $(DISTFILES)
if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
if test -d $$d/$$file; then \
dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+ if test -d "$(distdir)/$$file"; then \
+ find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+ fi; \
if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
- cp -pR $(srcdir)/$$file $(distdir)$$dir || exit 1; \
+ cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+ find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
fi; \
- cp -pR $$d/$$file $(distdir)$$dir || exit 1; \
+ cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
else \
- test -f $(distdir)/$$file \
- || cp -p $$d/$$file $(distdir)/$$file \
+ test -f "$(distdir)/$$file" \
+ || cp -p $$d/$$file "$(distdir)/$$file" \
|| exit 1; \
fi; \
done
- list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
+ @list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
if test "$$subdir" = .; then :; else \
test -d "$(distdir)/$$subdir" \
|| $(MKDIR_P) "$(distdir)/$$subdir" \
|| exit 1; \
- distdir=`$(am__cd) $(distdir) && pwd`; \
- top_distdir=`$(am__cd) $(top_distdir) && pwd`; \
- (cd $$subdir && \
+ fi; \
+ done
+ @list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
+ if test "$$subdir" = .; then :; else \
+ dir1=$$subdir; dir2="$(distdir)/$$subdir"; \
+ $(am__relativize); \
+ new_distdir=$$reldir; \
+ dir1=$$subdir; dir2="$(top_distdir)"; \
+ $(am__relativize); \
+ new_top_distdir=$$reldir; \
+ echo " (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) top_distdir="$$new_top_distdir" distdir="$$new_distdir" \\"; \
+ echo " am__remove_distdir=: am__skip_length_check=: am__skip_mode_fix=: distdir)"; \
+ ($(am__cd) $$subdir && \
$(MAKE) $(AM_MAKEFLAGS) \
- top_distdir="$$top_distdir" \
- distdir="$$distdir/$$subdir" \
+ top_distdir="$$new_top_distdir" \
+ distdir="$$new_distdir" \
am__remove_distdir=: \
am__skip_length_check=: \
+ am__skip_mode_fix=: \
distdir) \
|| exit 1; \
fi; \
done
- -find $(distdir) -type d ! -perm -777 -exec chmod a+rwx {} \; -o \
+ $(MAKE) $(AM_MAKEFLAGS) \
+ top_distdir="$(top_distdir)" distdir="$(distdir)" \
+ dist-hook
+ -test -n "$(am__skip_mode_fix)" \
+ || find "$(distdir)" -type d ! -perm -755 \
+ -exec chmod u+rwx,go+rx {} \; -o \
! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \
! -type d ! -perm -400 -exec chmod a+r {} \; -o \
! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \
- || chmod -R a+r $(distdir)
+ || chmod -R a+r "$(distdir)"
dist-gzip: distdir
tardir=$(distdir) && $(am__tar) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).tar.gz
$(am__remove_distdir)
@@ -528,6 +580,10 @@ dist-lzma: distdir
tardir=$(distdir) && $(am__tar) | lzma -9 -c >$(distdir).tar.lzma
$(am__remove_distdir)
+dist-xz: distdir
+ tardir=$(distdir) && $(am__tar) | xz -c >$(distdir).tar.xz
+ $(am__remove_distdir)
+
dist-tarZ: distdir
tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z
$(am__remove_distdir)
@@ -552,15 +608,17 @@ dist dist-all: distdir
distcheck: dist
case '$(DIST_ARCHIVES)' in \
*.tar.gz*) \
- GZIP=$(GZIP_ENV) gunzip -c $(distdir).tar.gz | $(am__untar) ;;\
+ GZIP=$(GZIP_ENV) gzip -dc $(distdir).tar.gz | $(am__untar) ;;\
*.tar.bz2*) \
- bunzip2 -c $(distdir).tar.bz2 | $(am__untar) ;;\
+ bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\
*.tar.lzma*) \
- unlzma -c $(distdir).tar.lzma | $(am__untar) ;;\
+ lzma -dc $(distdir).tar.lzma | $(am__untar) ;;\
+ *.tar.xz*) \
+ xz -dc $(distdir).tar.xz | $(am__untar) ;;\
*.tar.Z*) \
uncompress -c $(distdir).tar.Z | $(am__untar) ;;\
*.shar.gz*) \
- GZIP=$(GZIP_ENV) gunzip -c $(distdir).shar.gz | unshar ;;\
+ GZIP=$(GZIP_ENV) gzip -dc $(distdir).shar.gz | unshar ;;\
*.zip*) \
unzip $(distdir).zip ;;\
esac
@@ -568,9 +626,11 @@ distcheck: dist
mkdir $(distdir)/_build
mkdir $(distdir)/_inst
chmod a-w $(distdir)
+ test -d $(distdir)/_build || exit 0; \
dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \
&& dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \
- && cd $(distdir)/_build \
+ && am__cwd=`pwd` \
+ && $(am__cd) $(distdir)/_build \
&& ../configure --srcdir=.. --prefix="$$dc_install_base" \
$(DISTCHECK_CONFIGURE_FLAGS) \
&& $(MAKE) $(AM_MAKEFLAGS) \
@@ -592,13 +652,15 @@ distcheck: dist
&& rm -rf "$$dc_destdir" \
&& $(MAKE) $(AM_MAKEFLAGS) dist \
&& rm -rf $(DIST_ARCHIVES) \
- && $(MAKE) $(AM_MAKEFLAGS) distcleancheck
+ && $(MAKE) $(AM_MAKEFLAGS) distcleancheck \
+ && cd "$$am__cwd" \
+ || exit 1
$(am__remove_distdir)
@(echo "$(distdir) archives ready for distribution: "; \
list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \
sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x'
distuninstallcheck:
- @cd $(distuninstallcheck_dir) \
+ @$(am__cd) '$(distuninstallcheck_dir)' \
&& test `$(distuninstallcheck_listfiles) | wc -l` -le 1 \
|| { echo "ERROR: files left after uninstall:" ; \
if test -n "$(DESTDIR)"; then \
@@ -641,6 +703,7 @@ clean-generic:
distclean-generic:
-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+ -test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
maintainer-clean-generic:
@echo "This command is intended for maintainers to use"
@@ -661,6 +724,8 @@ dvi-am:
html: html-recursive
+html-am:
+
info: info-recursive
info-am:
@@ -669,18 +734,28 @@ install-data-am:
install-dvi: install-dvi-recursive
+install-dvi-am:
+
install-exec-am:
install-html: install-html-recursive
+install-html-am:
+
install-info: install-info-recursive
+install-info-am:
+
install-man:
install-pdf: install-pdf-recursive
+install-pdf-am:
+
install-ps: install-ps-recursive
+install-ps-am:
+
installcheck-am:
maintainer-clean: maintainer-clean-recursive
@@ -703,24 +778,24 @@ ps-am:
uninstall-am:
-.MAKE: $(RECURSIVE_CLEAN_TARGETS) $(RECURSIVE_TARGETS) install-am \
- install-strip
+.MAKE: $(RECURSIVE_CLEAN_TARGETS) $(RECURSIVE_TARGETS) all \
+ ctags-recursive install-am install-strip tags-recursive
.PHONY: $(RECURSIVE_CLEAN_TARGETS) $(RECURSIVE_TARGETS) CTAGS GTAGS \
all all-am am--refresh check check-am clean clean-generic \
clean-libtool ctags ctags-recursive dist dist-all dist-bzip2 \
- dist-gzip dist-lzma dist-shar dist-tarZ dist-zip distcheck \
- distclean distclean-generic distclean-hdr distclean-libtool \
- distclean-tags distcleancheck distdir distuninstallcheck dvi \
- dvi-am html html-am info info-am install install-am \
- install-data install-data-am install-dvi install-dvi-am \
- install-exec install-exec-am install-html install-html-am \
- install-info install-info-am install-man install-pdf \
- install-pdf-am install-ps install-ps-am install-strip \
- installcheck installcheck-am installdirs installdirs-am \
- maintainer-clean maintainer-clean-generic mostlyclean \
- mostlyclean-generic mostlyclean-libtool pdf pdf-am ps ps-am \
- tags tags-recursive uninstall uninstall-am
+ dist-gzip dist-hook dist-lzma dist-shar dist-tarZ dist-xz \
+ dist-zip distcheck distclean distclean-generic distclean-hdr \
+ distclean-libtool distclean-tags distcleancheck distdir \
+ distuninstallcheck dvi dvi-am html html-am info info-am \
+ install install-am install-data install-data-am install-dvi \
+ install-dvi-am install-exec install-exec-am install-html \
+ install-html-am install-info install-info-am install-man \
+ install-pdf install-pdf-am install-ps install-ps-am \
+ install-strip installcheck installcheck-am installdirs \
+ installdirs-am maintainer-clean maintainer-clean-generic \
+ mostlyclean mostlyclean-generic mostlyclean-libtool pdf pdf-am \
+ ps ps-am tags tags-recursive uninstall uninstall-am
release: dist releasedocs
@@ -741,6 +816,22 @@ xtests:
make -C xtests xtests
.PHONY: xtests
+gen-ChangeLog:
+ if test -d .git; then \
+ ( $(top_srcdir)/gitlog-to-changelog --append-dot \
+ --since=$(gen_changelog_start_date) && \
+ echo && echo && \
+ echo 'See ChangeLog-CVS for earlier changes.' \
+ ) > $(distdir)/ChangeLog.new && \
+ rm -f $(distdir)/ChangeLog && \
+ mv $(distdir)/ChangeLog.new $(distdir)/ChangeLog; \
+ fi
+
+dist-hook: gen-ChangeLog
+.PHONY: gen-ChangeLog
+
+export TAR_OPTIONS = --owner=0 --group=0 --numeric-owner --mode=go-w,go+rX
+
# Tell versions [3.59,3.63) of GNU make to not export all variables.
# Otherwise a system limit (for SysV at least) may be exceeded.
.NOEXPORT:
diff --git a/NEWS b/NEWS
index 81f961f1..7be6c6bf 100644
--- a/NEWS
+++ b/NEWS
@@ -1,9 +1,30 @@
Linux-PAM NEWS -- history of user-visible changes.
+Release 1.1.8
+* pam_unix: bug fix for compiling with SELinux, fix crash at login time
+
+
+Release 1.1.7
+* Update translations
+* pam_exec: add stdout and type= options
+* pam_tty_audit: add options to control logging of passwords
+* pam_unix: Read defaults from /etc/login.defs
+* pam_userdb: Allow modern password hashes
+* pam_selinux/pam_tally2: Add tty and rhost to audit data
+* Lot of docu and code fixes
+
+
+Release 1.1.6
+* Update translations
+* pam_cracklib: Add more checks for weak passwords
+* pam_lastlog: Never lock out root
+* Lot of bug fixes and smaller enhancements
+
+
Release 1.1.5
* pam_env: Fix CVE-2011-3148 and CVE-2011-3149
* pam_access: Add hostname resolution cache
-* Documentation: Improvements/fixes
+* Documentation: Improvements/fixes
Release 1.1.4
diff --git a/README b/README
index 81159140..994dd95a 100644
--- a/README
+++ b/README
@@ -52,10 +52,6 @@ build a static libpam including all PAM modules, you have to call:
./configure --enable-static-modules --disable-pie
-In this case you cannot use pam_unix in the PAM config files instead you
-have to use pam_unix_acct, pam_unix_auth, pam_unix_passwd and
-pam_unix_session.
-
To run the build checks with static modules, you need to run the
following command: make -C test check && make check
diff --git a/aclocal.m4 b/aclocal.m4
index e47d1f01..a11d1d13 100644
--- a/aclocal.m4
+++ b/aclocal.m4
@@ -1,7 +1,7 @@
-# generated automatically by aclocal 1.10.1 -*- Autoconf -*-
+# generated automatically by aclocal 1.11.1 -*- Autoconf -*-
# Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004,
-# 2005, 2006, 2007, 2008 Free Software Foundation, Inc.
+# 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc.
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
@@ -13,13 +13,169 @@
m4_ifndef([AC_AUTOCONF_VERSION],
[m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-m4_if(AC_AUTOCONF_VERSION, [2.63],,
-[m4_warning([this file was generated for autoconf 2.63.
+m4_if(m4_defn([AC_AUTOCONF_VERSION]), [2.65],,
+[m4_warning([this file was generated for autoconf 2.65.
You have another version of autoconf. It may work, but is not guaranteed to.
If you have problems, you may need to regenerate the build system entirely.
To do so, use the procedure documented by the package, typically `autoreconf'.])])
-# Copyright (C) 2002, 2003, 2005, 2006, 2007 Free Software Foundation, Inc.
+# pkg.m4 - Macros to locate and utilise pkg-config. -*- Autoconf -*-
+#
+# Copyright © 2004 Scott James Remnant <scott@netsplit.com>.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+#
+# As a special exception to the GNU General Public License, if you
+# distribute this file as part of a program that contains a
+# configuration script generated by Autoconf, you may include it under
+# the same distribution terms that you use for the rest of that program.
+
+# PKG_PROG_PKG_CONFIG([MIN-VERSION])
+# ----------------------------------
+AC_DEFUN([PKG_PROG_PKG_CONFIG],
+[m4_pattern_forbid([^_?PKG_[A-Z_]+$])
+m4_pattern_allow([^PKG_CONFIG(_PATH)?$])
+AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility])dnl
+if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
+ AC_PATH_TOOL([PKG_CONFIG], [pkg-config])
+fi
+if test -n "$PKG_CONFIG"; then
+ _pkg_min_version=m4_default([$1], [0.9.0])
+ AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version])
+ if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
+ AC_MSG_RESULT([yes])
+ else
+ AC_MSG_RESULT([no])
+ PKG_CONFIG=""
+ fi
+
+fi[]dnl
+])# PKG_PROG_PKG_CONFIG
+
+# PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
+#
+# Check to see whether a particular set of modules exists. Similar
+# to PKG_CHECK_MODULES(), but does not set variables or print errors.
+#
+#
+# Similar to PKG_CHECK_MODULES, make sure that the first instance of
+# this or PKG_CHECK_MODULES is called, or make sure to call
+# PKG_CHECK_EXISTS manually
+# --------------------------------------------------------------
+AC_DEFUN([PKG_CHECK_EXISTS],
+[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
+if test -n "$PKG_CONFIG" && \
+ AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then
+ m4_ifval([$2], [$2], [:])
+m4_ifvaln([$3], [else
+ $3])dnl
+fi])
+
+
+# _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES])
+# ---------------------------------------------
+m4_define([_PKG_CONFIG],
+[if test -n "$$1"; then
+ pkg_cv_[]$1="$$1"
+ elif test -n "$PKG_CONFIG"; then
+ PKG_CHECK_EXISTS([$3],
+ [pkg_cv_[]$1=`$PKG_CONFIG --[]$2 "$3" 2>/dev/null`],
+ [pkg_failed=yes])
+ else
+ pkg_failed=untried
+fi[]dnl
+])# _PKG_CONFIG
+
+# _PKG_SHORT_ERRORS_SUPPORTED
+# -----------------------------
+AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED],
+[AC_REQUIRE([PKG_PROG_PKG_CONFIG])
+if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
+ _pkg_short_errors_supported=yes
+else
+ _pkg_short_errors_supported=no
+fi[]dnl
+])# _PKG_SHORT_ERRORS_SUPPORTED
+
+
+# PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
+# [ACTION-IF-NOT-FOUND])
+#
+#
+# Note that if there is a possibility the first call to
+# PKG_CHECK_MODULES might not happen, you should be sure to include an
+# explicit call to PKG_PROG_PKG_CONFIG in your configure.ac
+#
+#
+# --------------------------------------------------------------
+AC_DEFUN([PKG_CHECK_MODULES],
+[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
+AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl
+AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl
+
+pkg_failed=no
+AC_MSG_CHECKING([for $1])
+
+_PKG_CONFIG([$1][_CFLAGS], [cflags], [$2])
+_PKG_CONFIG([$1][_LIBS], [libs], [$2])
+
+m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS
+and $1[]_LIBS to avoid the need to call pkg-config.
+See the pkg-config man page for more details.])
+
+if test $pkg_failed = yes; then
+ _PKG_SHORT_ERRORS_SUPPORTED
+ if test $_pkg_short_errors_supported = yes; then
+ $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors "$2" 2>&1`
+ else
+ $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors "$2" 2>&1`
+ fi
+ # Put the nasty error message in config.log where it belongs
+ echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD
+
+ ifelse([$4], , [AC_MSG_ERROR(dnl
+[Package requirements ($2) were not met:
+
+$$1_PKG_ERRORS
+
+Consider adjusting the PKG_CONFIG_PATH environment variable if you
+installed software in a non-standard prefix.
+
+_PKG_TEXT
+])],
+ [AC_MSG_RESULT([no])
+ $4])
+elif test $pkg_failed = untried; then
+ ifelse([$4], , [AC_MSG_FAILURE(dnl
+[The pkg-config script could not be found or is too old. Make sure it
+is in your PATH or set the PKG_CONFIG environment variable to the full
+path to pkg-config.
+
+_PKG_TEXT
+
+To get pkg-config, see <http://pkg-config.freedesktop.org/>.])],
+ [$4])
+else
+ $1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS
+ $1[]_LIBS=$pkg_cv_[]$1[]_LIBS
+ AC_MSG_RESULT([yes])
+ ifelse([$3], , :, [$3])
+fi[]dnl
+])# PKG_CHECK_MODULES
+
+# Copyright (C) 2002, 2003, 2005, 2006, 2007, 2008 Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
@@ -31,10 +187,10 @@ To do so, use the procedure documented by the package, typically `autoreconf'.])
# generated from the m4 files accompanying Automake X.Y.
# (This private macro should not be called outside this file.)
AC_DEFUN([AM_AUTOMAKE_VERSION],
-[am__api_version='1.10'
+[am__api_version='1.11'
dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to
dnl require some minimum version. Point them to the right macro.
-m4_if([$1], [1.10.1], [],
+m4_if([$1], [1.11.1], [],
[AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl
])
@@ -48,12 +204,12 @@ m4_define([_AM_AUTOCONF_VERSION], [])
# AM_SET_CURRENT_AUTOMAKE_VERSION
# -------------------------------
# Call AM_AUTOMAKE_VERSION and AM_AUTOMAKE_VERSION so they can be traced.
-# This function is AC_REQUIREd by AC_INIT_AUTOMAKE.
+# This function is AC_REQUIREd by AM_INIT_AUTOMAKE.
AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION],
-[AM_AUTOMAKE_VERSION([1.10.1])dnl
+[AM_AUTOMAKE_VERSION([1.11.1])dnl
m4_ifndef([AC_AUTOCONF_VERSION],
[m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-_AM_AUTOCONF_VERSION(AC_AUTOCONF_VERSION)])
+_AM_AUTOCONF_VERSION(m4_defn([AC_AUTOCONF_VERSION]))])
# AM_AUX_DIR_EXPAND -*- Autoconf -*-
@@ -110,14 +266,14 @@ am_aux_dir=`cd $ac_aux_dir && pwd`
# AM_CONDITIONAL -*- Autoconf -*-
-# Copyright (C) 1997, 2000, 2001, 2003, 2004, 2005, 2006
+# Copyright (C) 1997, 2000, 2001, 2003, 2004, 2005, 2006, 2008
# Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 8
+# serial 9
# AM_CONDITIONAL(NAME, SHELL-CONDITION)
# -------------------------------------
@@ -130,6 +286,7 @@ AC_SUBST([$1_TRUE])dnl
AC_SUBST([$1_FALSE])dnl
_AM_SUBST_NOTMAKE([$1_TRUE])dnl
_AM_SUBST_NOTMAKE([$1_FALSE])dnl
+m4_define([_AM_COND_VALUE_$1], [$2])dnl
if $2; then
$1_TRUE=
$1_FALSE='#'
@@ -143,14 +300,14 @@ AC_CONFIG_COMMANDS_PRE(
Usually this means the macro was only invoked conditionally.]])
fi])])
-# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006
+# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2009
# Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 9
+# serial 10
# There are a few dirty hacks below to avoid letting `AC_PROG_CC' be
# written in clear, in which case automake, when reading aclocal.m4,
@@ -207,6 +364,16 @@ AC_CACHE_CHECK([dependency style of $depcc],
if test "$am_compiler_list" = ""; then
am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp`
fi
+ am__universal=false
+ m4_case([$1], [CC],
+ [case " $depcc " in #(
+ *\ -arch\ *\ -arch\ *) am__universal=true ;;
+ esac],
+ [CXX],
+ [case " $depcc " in #(
+ *\ -arch\ *\ -arch\ *) am__universal=true ;;
+ esac])
+
for depmode in $am_compiler_list; do
# Setup a source with many dependencies, because some compilers
# like to wrap large dependency lists on column 80 (with \), and
@@ -224,7 +391,17 @@ AC_CACHE_CHECK([dependency style of $depcc],
done
echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
+ # We check with `-c' and `-o' for the sake of the "dashmstdout"
+ # mode. It turns out that the SunPro C++ compiler does not properly
+ # handle `-M -o', and we need to detect this. Also, some Intel
+ # versions had trouble with output in subdirs
+ am__obj=sub/conftest.${OBJEXT-o}
+ am__minus_obj="-o $am__obj"
case $depmode in
+ gcc)
+ # This depmode causes a compiler race in universal mode.
+ test "$am__universal" = false || continue
+ ;;
nosideeffect)
# after this tag, mechanisms are not by side-effect, so they'll
# only be used when explicitly requested
@@ -234,19 +411,23 @@ AC_CACHE_CHECK([dependency style of $depcc],
break
fi
;;
+ msvisualcpp | msvcmsys)
+ # This compiler won't grok `-c -o', but also, the minuso test has
+ # not run yet. These depmodes are late enough in the game, and
+ # so weak that their functioning should not be impacted.
+ am__obj=conftest.${OBJEXT-o}
+ am__minus_obj=
+ ;;
none) break ;;
esac
- # We check with `-c' and `-o' for the sake of the "dashmstdout"
- # mode. It turns out that the SunPro C++ compiler does not properly
- # handle `-M -o', and we need to detect this.
if depmode=$depmode \
- source=sub/conftest.c object=sub/conftest.${OBJEXT-o} \
+ source=sub/conftest.c object=$am__obj \
depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
- $SHELL ./depcomp $depcc -c -o sub/conftest.${OBJEXT-o} sub/conftest.c \
+ $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
>/dev/null 2>conftest.err &&
grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
- grep sub/conftest.${OBJEXT-o} sub/conftest.Po > /dev/null 2>&1 &&
+ grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
${MAKE-make} -s -f confmf > /dev/null 2>&1; then
# icc doesn't choke on unknown options, it will just issue warnings
# or remarks (even with -Werror). So we grep stderr for any message
@@ -303,57 +484,68 @@ _AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl
# Generate code to set up dependency tracking. -*- Autoconf -*-
-# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005
+# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2008
# Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-#serial 3
+#serial 5
# _AM_OUTPUT_DEPENDENCY_COMMANDS
# ------------------------------
AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS],
-[for mf in $CONFIG_FILES; do
- # Strip MF so we end up with the name of the file.
- mf=`echo "$mf" | sed -e 's/:.*$//'`
- # Check whether this is an Automake generated Makefile or not.
- # We used to match only the files named `Makefile.in', but
- # some people rename them; so instead we look at the file content.
- # Grep'ing the first line is not enough: some people post-process
- # each Makefile.in and add a new line on top of each file to say so.
- # Grep'ing the whole file is not good either: AIX grep has a line
- # limit of 2048, but all sed's we know have understand at least 4000.
- if sed -n 's,^#.*generated by automake.*,X,p' "$mf" | grep X >/dev/null 2>&1; then
- dirpart=`AS_DIRNAME("$mf")`
- else
- continue
- fi
- # Extract the definition of DEPDIR, am__include, and am__quote
- # from the Makefile without running `make'.
- DEPDIR=`sed -n 's/^DEPDIR = //p' < "$mf"`
- test -z "$DEPDIR" && continue
- am__include=`sed -n 's/^am__include = //p' < "$mf"`
- test -z "am__include" && continue
- am__quote=`sed -n 's/^am__quote = //p' < "$mf"`
- # When using ansi2knr, U may be empty or an underscore; expand it
- U=`sed -n 's/^U = //p' < "$mf"`
- # Find all dependency output files, they are included files with
- # $(DEPDIR) in their names. We invoke sed twice because it is the
- # simplest approach to changing $(DEPDIR) to its actual value in the
- # expansion.
- for file in `sed -n "
- s/^$am__include $am__quote\(.*(DEPDIR).*\)$am__quote"'$/\1/p' <"$mf" | \
- sed -e 's/\$(DEPDIR)/'"$DEPDIR"'/g' -e 's/\$U/'"$U"'/g'`; do
- # Make sure the directory exists.
- test -f "$dirpart/$file" && continue
- fdir=`AS_DIRNAME(["$file"])`
- AS_MKDIR_P([$dirpart/$fdir])
- # echo "creating $dirpart/$file"
- echo '# dummy' > "$dirpart/$file"
+[{
+ # Autoconf 2.62 quotes --file arguments for eval, but not when files
+ # are listed without --file. Let's play safe and only enable the eval
+ # if we detect the quoting.
+ case $CONFIG_FILES in
+ *\'*) eval set x "$CONFIG_FILES" ;;
+ *) set x $CONFIG_FILES ;;
+ esac
+ shift
+ for mf
+ do
+ # Strip MF so we end up with the name of the file.
+ mf=`echo "$mf" | sed -e 's/:.*$//'`
+ # Check whether this is an Automake generated Makefile or not.
+ # We used to match only the files named `Makefile.in', but
+ # some people rename them; so instead we look at the file content.
+ # Grep'ing the first line is not enough: some people post-process
+ # each Makefile.in and add a new line on top of each file to say so.
+ # Grep'ing the whole file is not good either: AIX grep has a line
+ # limit of 2048, but all sed's we know have understand at least 4000.
+ if sed -n 's,^#.*generated by automake.*,X,p' "$mf" | grep X >/dev/null 2>&1; then
+ dirpart=`AS_DIRNAME("$mf")`
+ else
+ continue
+ fi
+ # Extract the definition of DEPDIR, am__include, and am__quote
+ # from the Makefile without running `make'.
+ DEPDIR=`sed -n 's/^DEPDIR = //p' < "$mf"`
+ test -z "$DEPDIR" && continue
+ am__include=`sed -n 's/^am__include = //p' < "$mf"`
+ test -z "am__include" && continue
+ am__quote=`sed -n 's/^am__quote = //p' < "$mf"`
+ # When using ansi2knr, U may be empty or an underscore; expand it
+ U=`sed -n 's/^U = //p' < "$mf"`
+ # Find all dependency output files, they are included files with
+ # $(DEPDIR) in their names. We invoke sed twice because it is the
+ # simplest approach to changing $(DEPDIR) to its actual value in the
+ # expansion.
+ for file in `sed -n "
+ s/^$am__include $am__quote\(.*(DEPDIR).*\)$am__quote"'$/\1/p' <"$mf" | \
+ sed -e 's/\$(DEPDIR)/'"$DEPDIR"'/g' -e 's/\$U/'"$U"'/g'`; do
+ # Make sure the directory exists.
+ test -f "$dirpart/$file" && continue
+ fdir=`AS_DIRNAME(["$file"])`
+ AS_MKDIR_P([$dirpart/$fdir])
+ # echo "creating $dirpart/$file"
+ echo '# dummy' > "$dirpart/$file"
+ done
done
-done
+}
])# _AM_OUTPUT_DEPENDENCY_COMMANDS
@@ -373,13 +565,13 @@ AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS],
# Do all the work for Automake. -*- Autoconf -*-
# Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004,
-# 2005, 2006, 2008 Free Software Foundation, Inc.
+# 2005, 2006, 2008, 2009 Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 13
+# serial 16
# This macro actually does too much. Some checks are only needed if
# your package does certain things. But this isn't really a big deal.
@@ -396,7 +588,7 @@ AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS],
# arguments mandatory, and then we can depend on a new Autoconf
# release and drop the old call support.
AC_DEFUN([AM_INIT_AUTOMAKE],
-[AC_PREREQ([2.60])dnl
+[AC_PREREQ([2.62])dnl
dnl Autoconf wants to disallow AM_ names. We explicitly allow
dnl the ones we care about.
m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl
@@ -447,8 +639,8 @@ AM_MISSING_PROG(AUTOCONF, autoconf)
AM_MISSING_PROG(AUTOMAKE, automake-${am__api_version})
AM_MISSING_PROG(AUTOHEADER, autoheader)
AM_MISSING_PROG(MAKEINFO, makeinfo)
-AM_PROG_INSTALL_SH
-AM_PROG_INSTALL_STRIP
+AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
+AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl
AC_REQUIRE([AM_PROG_MKDIR_P])dnl
# We need awk for the "check" target. The system "awk" is bad on
# some platforms.
@@ -456,24 +648,37 @@ AC_REQUIRE([AC_PROG_AWK])dnl
AC_REQUIRE([AC_PROG_MAKE_SET])dnl
AC_REQUIRE([AM_SET_LEADING_DOT])dnl
_AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])],
- [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
- [_AM_PROG_TAR([v7])])])
+ [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
+ [_AM_PROG_TAR([v7])])])
_AM_IF_OPTION([no-dependencies],,
[AC_PROVIDE_IFELSE([AC_PROG_CC],
- [_AM_DEPENDENCIES(CC)],
- [define([AC_PROG_CC],
- defn([AC_PROG_CC])[_AM_DEPENDENCIES(CC)])])dnl
+ [_AM_DEPENDENCIES(CC)],
+ [define([AC_PROG_CC],
+ defn([AC_PROG_CC])[_AM_DEPENDENCIES(CC)])])dnl
AC_PROVIDE_IFELSE([AC_PROG_CXX],
- [_AM_DEPENDENCIES(CXX)],
- [define([AC_PROG_CXX],
- defn([AC_PROG_CXX])[_AM_DEPENDENCIES(CXX)])])dnl
+ [_AM_DEPENDENCIES(CXX)],
+ [define([AC_PROG_CXX],
+ defn([AC_PROG_CXX])[_AM_DEPENDENCIES(CXX)])])dnl
AC_PROVIDE_IFELSE([AC_PROG_OBJC],
- [_AM_DEPENDENCIES(OBJC)],
- [define([AC_PROG_OBJC],
- defn([AC_PROG_OBJC])[_AM_DEPENDENCIES(OBJC)])])dnl
+ [_AM_DEPENDENCIES(OBJC)],
+ [define([AC_PROG_OBJC],
+ defn([AC_PROG_OBJC])[_AM_DEPENDENCIES(OBJC)])])dnl
])
+_AM_IF_OPTION([silent-rules], [AC_REQUIRE([AM_SILENT_RULES])])dnl
+dnl The `parallel-tests' driver may need to know about EXEEXT, so add the
+dnl `am__EXEEXT' conditional if _AM_COMPILER_EXEEXT was seen. This macro
+dnl is hooked onto _AC_COMPILER_EXEEXT early, see below.
+AC_CONFIG_COMMANDS_PRE(dnl
+[m4_provide_if([_AM_COMPILER_EXEEXT],
+ [AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])])])dnl
])
+dnl Hook into `_AC_COMPILER_EXEEXT' early to learn its expansion. Do not
+dnl add the conditional right here, as _AC_COMPILER_EXEEXT may be further
+dnl mangled by Autoconf and run in a shell conditional statement.
+m4_define([_AC_COMPILER_EXEEXT],
+m4_defn([_AC_COMPILER_EXEEXT])[m4_provide([_AM_COMPILER_EXEEXT])])
+
# When config.status generates a header, we must update the stamp-h file.
# This file resides in the same directory as the config header
@@ -496,7 +701,7 @@ for _am_header in $config_headers :; do
done
echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count])
-# Copyright (C) 2001, 2003, 2005 Free Software Foundation, Inc.
+# Copyright (C) 2001, 2003, 2005, 2008 Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
@@ -507,7 +712,14 @@ echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_co
# Define $install_sh.
AC_DEFUN([AM_PROG_INSTALL_SH],
[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-install_sh=${install_sh-"\$(SHELL) $am_aux_dir/install-sh"}
+if test x"${install_sh}" != xset; then
+ case $am_aux_dir in
+ *\ * | *\ *)
+ install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
+ *)
+ install_sh="\${SHELL} $am_aux_dir/install-sh"
+ esac
+fi
AC_SUBST(install_sh)])
# Copyright (C) 2003, 2005 Free Software Foundation, Inc.
@@ -554,13 +766,13 @@ fi])
# Check to see how 'make' treats includes. -*- Autoconf -*-
-# Copyright (C) 2001, 2002, 2003, 2005 Free Software Foundation, Inc.
+# Copyright (C) 2001, 2002, 2003, 2005, 2009 Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 3
+# serial 4
# AM_MAKE_INCLUDE()
# -----------------
@@ -569,7 +781,7 @@ AC_DEFUN([AM_MAKE_INCLUDE],
[am_make=${MAKE-make}
cat > confinc << 'END'
am__doit:
- @echo done
+ @echo this is the am__doit target
.PHONY: am__doit
END
# If we don't find an include directive, just comment out the code.
@@ -579,24 +791,24 @@ am__quote=
_am_result=none
# First try GNU make style include.
echo "include confinc" > confmf
-# We grep out `Entering directory' and `Leaving directory'
-# messages which can occur if `w' ends up in MAKEFLAGS.
-# In particular we don't look at `^make:' because GNU make might
-# be invoked under some other name (usually "gmake"), in which
-# case it prints its new name instead of `make'.
-if test "`$am_make -s -f confmf 2> /dev/null | grep -v 'ing directory'`" = "done"; then
- am__include=include
- am__quote=
- _am_result=GNU
-fi
+# Ignore all kinds of additional output from `make'.
+case `$am_make -s -f confmf 2> /dev/null` in #(
+*the\ am__doit\ target*)
+ am__include=include
+ am__quote=
+ _am_result=GNU
+ ;;
+esac
# Now try BSD make style include.
if test "$am__include" = "#"; then
echo '.include "confinc"' > confmf
- if test "`$am_make -s -f confmf 2> /dev/null`" = "done"; then
- am__include=.include
- am__quote="\""
- _am_result=BSD
- fi
+ case `$am_make -s -f confmf 2> /dev/null` in #(
+ *the\ am__doit\ target*)
+ am__include=.include
+ am__quote="\""
+ _am_result=BSD
+ ;;
+ esac
fi
AC_SUBST([am__include])
AC_SUBST([am__quote])
@@ -604,14 +816,14 @@ AC_MSG_RESULT([$_am_result])
rm -f confinc confmf
])
-# Copyright (C) 1999, 2000, 2001, 2003, 2004, 2005
+# Copyright (C) 1999, 2000, 2001, 2003, 2004, 2005, 2008
# Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 5
+# serial 6
# AM_PROG_CC_C_O
# --------------
@@ -623,8 +835,9 @@ AC_REQUIRE_AUX_FILE([compile])dnl
# FIXME: we rely on the cache variable name because
# there is no other way.
set dummy $CC
-ac_cc=`echo $[2] | sed ['s/[^a-zA-Z0-9_]/_/g;s/^[0-9]/_/']`
-if eval "test \"`echo '$ac_cv_prog_cc_'${ac_cc}_c_o`\" != yes"; then
+am_cc=`echo $[2] | sed ['s/[^a-zA-Z0-9_]/_/g;s/^[0-9]/_/']`
+eval am_t=\$ac_cv_prog_cc_${am_cc}_c_o
+if test "$am_t" != yes; then
# Losing compiler, so override with the script.
# FIXME: It is wrong to rewrite CC.
# But if we don't then we get into trouble of one sort or another.
@@ -640,14 +853,14 @@ m4_define([AC_PROG_CC],
# Fake the existence of programs that GNU maintainers use. -*- Autoconf -*-
-# Copyright (C) 1997, 1999, 2000, 2001, 2003, 2004, 2005
+# Copyright (C) 1997, 1999, 2000, 2001, 2003, 2004, 2005, 2008
# Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 5
+# serial 6
# AM_MISSING_PROG(NAME, PROGRAM)
# ------------------------------
@@ -664,7 +877,14 @@ AC_SUBST($1)])
AC_DEFUN([AM_MISSING_HAS_RUN],
[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
AC_REQUIRE_AUX_FILE([missing])dnl
-test x"${MISSING+set}" = xset || MISSING="\${SHELL} $am_aux_dir/missing"
+if test x"${MISSING+set}" != xset; then
+ case $am_aux_dir in
+ *\ * | *\ *)
+ MISSING="\${SHELL} \"$am_aux_dir/missing\"" ;;
+ *)
+ MISSING="\${SHELL} $am_aux_dir/missing" ;;
+ esac
+fi
# Use eval to expand $SHELL
if eval "$MISSING --run true"; then
am_missing_run="$MISSING --run "
@@ -702,13 +922,13 @@ esac
# Helper functions for option handling. -*- Autoconf -*-
-# Copyright (C) 2001, 2002, 2003, 2005 Free Software Foundation, Inc.
+# Copyright (C) 2001, 2002, 2003, 2005, 2008 Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 3
+# serial 4
# _AM_MANGLE_OPTION(NAME)
# -----------------------
@@ -725,7 +945,7 @@ AC_DEFUN([_AM_SET_OPTION],
# ----------------------------------
# OPTIONS is a space-separated list of Automake options.
AC_DEFUN([_AM_SET_OPTIONS],
-[AC_FOREACH([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])])
+[m4_foreach_w([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])])
# _AM_IF_OPTION(OPTION, IF-SET, [IF-NOT-SET])
# -------------------------------------------
@@ -735,14 +955,14 @@ AC_DEFUN([_AM_IF_OPTION],
# Check to make sure that the build environment is sane. -*- Autoconf -*-
-# Copyright (C) 1996, 1997, 2000, 2001, 2003, 2005
+# Copyright (C) 1996, 1997, 2000, 2001, 2003, 2005, 2008
# Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
-# serial 4
+# serial 5
# AM_SANITY_CHECK
# ---------------
@@ -751,16 +971,29 @@ AC_DEFUN([AM_SANITY_CHECK],
# Just in case
sleep 1
echo timestamp > conftest.file
+# Reject unsafe characters in $srcdir or the absolute working directory
+# name. Accept space and tab only in the latter.
+am_lf='
+'
+case `pwd` in
+ *[[\\\"\#\$\&\'\`$am_lf]]*)
+ AC_MSG_ERROR([unsafe absolute working directory name]);;
+esac
+case $srcdir in
+ *[[\\\"\#\$\&\'\`$am_lf\ \ ]]*)
+ AC_MSG_ERROR([unsafe srcdir value: `$srcdir']);;
+esac
+
# Do `set' in a subshell so we don't clobber the current shell's
# arguments. Must try -L first in case configure is actually a
# symlink; some systems play weird games with the mod time of symlinks
# (eg FreeBSD returns the mod time of the symlink's containing
# directory).
if (
- set X `ls -Lt $srcdir/configure conftest.file 2> /dev/null`
+ set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
if test "$[*]" = "X"; then
# -L didn't work.
- set X `ls -t $srcdir/configure conftest.file`
+ set X `ls -t "$srcdir/configure" conftest.file`
fi
rm -f conftest.file
if test "$[*]" != "X $srcdir/configure conftest.file" \
@@ -813,18 +1046,25 @@ fi
INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
AC_SUBST([INSTALL_STRIP_PROGRAM])])
-# Copyright (C) 2006 Free Software Foundation, Inc.
+# Copyright (C) 2006, 2008 Free Software Foundation, Inc.
#
# This file is free software; the Free Software Foundation
# gives unlimited permission to copy and/or distribute it,
# with or without modifications, as long as this notice is preserved.
+# serial 2
+
# _AM_SUBST_NOTMAKE(VARIABLE)
# ---------------------------
# Prevent Automake from outputting VARIABLE = @VARIABLE@ in Makefile.in.
# This macro is traced by Automake.
AC_DEFUN([_AM_SUBST_NOTMAKE])
+# AM_SUBST_NOTMAKE(VARIABLE)
+# ---------------------------
+# Public sister of _AM_SUBST_NOTMAKE.
+AC_DEFUN([AM_SUBST_NOTMAKE], [_AM_SUBST_NOTMAKE($@)])
+
# Check how to create a tarball. -*- Autoconf -*-
# Copyright (C) 2004, 2005 Free Software Foundation, Inc.
@@ -923,7 +1163,6 @@ AC_SUBST([am__untar])
m4_include([m4/gettext.m4])
m4_include([m4/iconv.m4])
-m4_include([m4/intlmacosx.m4])
m4_include([m4/japhar_grep_cflags.m4])
m4_include([m4/jh_path_xml_catalog.m4])
m4_include([m4/ld-O1.m4])
diff --git a/compile b/build-aux/compile
index 1b1d2321..c0096a7b 100755
--- a/compile
+++ b/build-aux/compile
@@ -1,9 +1,10 @@
#! /bin/sh
# Wrapper for compilers which do not understand `-c -o'.
-scriptversion=2005-05-14.22
+scriptversion=2009-10-06.20; # UTC
-# Copyright (C) 1999, 2000, 2003, 2004, 2005 Free Software Foundation, Inc.
+# Copyright (C) 1999, 2000, 2003, 2004, 2005, 2009 Free Software
+# Foundation, Inc.
# Written by Tom Tromey <tromey@cygnus.com>.
#
# This program is free software; you can redistribute it and/or modify
@@ -17,8 +18,7 @@ scriptversion=2005-05-14.22
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
# As a special exception to the GNU General Public License, if you
# distribute this file as part of a program that contains a
@@ -103,13 +103,13 @@ if test -z "$ofile" || test -z "$cfile"; then
fi
# Name of file we expect compiler to create.
-cofile=`echo "$cfile" | sed -e 's|^.*/||' -e 's/\.c$/.o/'`
+cofile=`echo "$cfile" | sed 's|^.*[\\/]||; s|^[a-zA-Z]:||; s/\.c$/.o/'`
# Create the lock directory.
-# Note: use `[/.-]' here to ensure that we don't use the same name
+# Note: use `[/\\:.-]' here to ensure that we don't use the same name
# that we are using for the .o file. Also, base the name on the expected
# object file name, since that is what matters with a parallel build.
-lockdir=`echo "$cofile" | sed -e 's|[/.-]|_|g'`.d
+lockdir=`echo "$cofile" | sed -e 's|[/\\:.-]|_|g'`.d
while true; do
if mkdir "$lockdir" >/dev/null 2>&1; then
break
@@ -124,9 +124,9 @@ trap "rmdir '$lockdir'; exit 1" 1 2 15
ret=$?
if test -f "$cofile"; then
- mv "$cofile" "$ofile"
+ test "$cofile" = "$ofile" || mv "$cofile" "$ofile"
elif test -f "${cofile}bj"; then
- mv "${cofile}bj" "$ofile"
+ test "${cofile}bj" = "$ofile" || mv "${cofile}bj" "$ofile"
fi
rmdir "$lockdir"
@@ -138,5 +138,6 @@ exit $ret
# eval: (add-hook 'write-file-hooks 'time-stamp)
# time-stamp-start: "scriptversion="
# time-stamp-format: "%:y-%02m-%02d.%02H"
-# time-stamp-end: "$"
+# time-stamp-time-zone: "UTC"
+# time-stamp-end: "; # UTC"
# End:
diff --git a/config.guess b/build-aux/config.guess
index e6b5d5b8..666c5ad9 100755
--- a/config.guess
+++ b/build-aux/config.guess
@@ -1,10 +1,10 @@
#! /bin/sh
# Attempt to guess a canonical system name.
# Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999,
-# 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008
+# 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009
# Free Software Foundation, Inc.
-timestamp='2008-01-08'
+timestamp='2009-11-20'
# This file is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
@@ -27,16 +27,16 @@ timestamp='2008-01-08'
# the same distribution terms that you use for the rest of that program.
-# Originally written by Per Bothner <per@bothner.com>.
-# Please send patches to <config-patches@gnu.org>. Submit a context
-# diff and a properly formatted ChangeLog entry.
+# Originally written by Per Bothner. Please send patches (context
+# diff format) to <config-patches@gnu.org> and include a ChangeLog
+# entry.
#
# This script attempts to guess a canonical system name similar to
# config.sub. If it succeeds, it prints the system name on stdout, and
# exits with 0. Otherwise, it exits with 1.
#
-# The plan is that this can be called by configure scripts if you
-# don't specify an explicit build system type.
+# You can get the latest version of this script from:
+# http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess;hb=HEAD
me=`echo "$0" | sed -e 's,.*/,,'`
@@ -180,7 +180,7 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
arm*|i386|m68k|ns32k|sh3*|sparc|vax)
eval $set_cc_for_build
if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \
- | grep __ELF__ >/dev/null
+ | grep -q __ELF__
then
# Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout).
# Return netbsd for either. FIX?
@@ -213,19 +213,19 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
exit ;;
*:OpenBSD:*:*)
UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'`
- echo ${UNAME_MACHINE_ARCH}-unknown-openbsd${UNAME_RELEASE}
+ echo ${UNAME_MACHINE_ARCH}-${VENDOR}-openbsd${UNAME_RELEASE}
exit ;;
*:ekkoBSD:*:*)
- echo ${UNAME_MACHINE}-unknown-ekkobsd${UNAME_RELEASE}
+ echo ${UNAME_MACHINE}-${VENDOR}-ekkobsd${UNAME_RELEASE}
exit ;;
*:SolidBSD:*:*)
- echo ${UNAME_MACHINE}-unknown-solidbsd${UNAME_RELEASE}
+ echo ${UNAME_MACHINE}-${VENDOR}-solidbsd${UNAME_RELEASE}
exit ;;
macppc:MirBSD:*:*)
- echo powerpc-unknown-mirbsd${UNAME_RELEASE}
+ echo powerpc-${VENDOR}-mirbsd${UNAME_RELEASE}
exit ;;
*:MirBSD:*:*)
- echo ${UNAME_MACHINE}-unknown-mirbsd${UNAME_RELEASE}
+ echo ${UNAME_MACHINE}-${VENDOR}-mirbsd${UNAME_RELEASE}
exit ;;
alpha:OSF1:*:*)
case $UNAME_RELEASE in
@@ -290,13 +290,13 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
echo alpha-dec-winnt3.5
exit ;;
Amiga*:UNIX_System_V:4.0:*)
- echo m68k-unknown-sysv4
+ echo m68k-${VENDOR}-sysv4
exit ;;
*:[Aa]miga[Oo][Ss]:*:*)
- echo ${UNAME_MACHINE}-unknown-amigaos
+ echo ${UNAME_MACHINE}-${VENDOR}-amigaos
exit ;;
*:[Mm]orph[Oo][Ss]:*:*)
- echo ${UNAME_MACHINE}-unknown-morphos
+ echo ${UNAME_MACHINE}-${VENDOR}-morphos
exit ;;
*:OS/390:*:*)
echo i370-ibm-openedition
@@ -311,7 +311,7 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
echo arm-acorn-riscix${UNAME_RELEASE}
exit ;;
arm:riscos:*:*|arm:RISCOS:*:*)
- echo arm-unknown-riscos
+ echo arm-${VENDOR}-riscos
exit ;;
SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*)
echo hppa1.1-hitachi-hiuxmpp
@@ -334,14 +334,33 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
case `/usr/bin/uname -p` in
sparc) echo sparc-icl-nx7; exit ;;
esac ;;
+ s390x:SunOS:*:*)
+ echo ${UNAME_MACHINE}-ibm-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+ exit ;;
sun4H:SunOS:5.*:*)
echo sparc-hal-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
exit ;;
sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*)
echo sparc-sun-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
exit ;;
+ i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*)
+ echo i386-pc-auroraux${UNAME_RELEASE}
+ exit ;;
i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*)
- echo i386-pc-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+ eval $set_cc_for_build
+ SUN_ARCH="i386"
+ # If there is a compiler, see if it is configured for 64-bit objects.
+ # Note that the Sun cc does not turn __LP64__ into 1 like gcc does.
+ # This test works for both compilers.
+ if [ "$CC_FOR_BUILD" != 'no_compiler_found' ]; then
+ if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \
+ (CCOPTS= $CC_FOR_BUILD -E - 2>/dev/null) | \
+ grep IS_64BIT_ARCH >/dev/null
+ then
+ SUN_ARCH="x86_64"
+ fi
+ fi
+ echo ${SUN_ARCH}-pc-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
exit ;;
sun4*:SunOS:6*:*)
# According to config.sub, this is the proper way to canonicalize
@@ -400,7 +419,7 @@ case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
echo m68k-hades-mint${UNAME_RELEASE}
exit ;;
*:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*)
- echo m68k-unknown-mint${UNAME_RELEASE}
+ echo m68k-${VENDOR}-mint${UNAME_RELEASE}
exit ;;
m68k:machten:*:*)
echo m68k-apple-machten${UNAME_RELEASE}
@@ -650,7 +669,7 @@ EOF
# => hppa64-hp-hpux11.23
if echo __LP64__ | (CCOPTS= $CC_FOR_BUILD -E - 2>/dev/null) |
- grep __LP64__ >/dev/null
+ grep -q __LP64__
then
HP_ARCH="hppa2.0w"
else
@@ -711,9 +730,9 @@ EOF
exit ;;
i*86:OSF1:*:*)
if [ -x /usr/sbin/sysversion ] ; then
- echo ${UNAME_MACHINE}-unknown-osf1mk
+ echo ${UNAME_MACHINE}-${VENDOR}-osf1mk
else
- echo ${UNAME_MACHINE}-unknown-osf1
+ echo ${UNAME_MACHINE}-${VENDOR}-osf1
fi
exit ;;
parisc*:Lites*:*:*)
@@ -773,19 +792,19 @@ EOF
echo ${UNAME_MACHINE}-pc-bsdi${UNAME_RELEASE}
exit ;;
sparc*:BSD/OS:*:*)
- echo sparc-unknown-bsdi${UNAME_RELEASE}
+ echo sparc-${VENDOR}-bsdi${UNAME_RELEASE}
exit ;;
*:BSD/OS:*:*)
- echo ${UNAME_MACHINE}-unknown-bsdi${UNAME_RELEASE}
+ echo ${UNAME_MACHINE}-${VENDOR}-bsdi${UNAME_RELEASE}
exit ;;
*:FreeBSD:*:*)
case ${UNAME_MACHINE} in
pc98)
- echo i386-unknown-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
+ echo i386-${VENDOR}-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
amd64)
- echo x86_64-unknown-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
+ echo x86_64-${VENDOR}-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
*)
- echo ${UNAME_MACHINE}-unknown-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
+ echo ${UNAME_MACHINE}-${VENDOR}-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
esac
exit ;;
i*:CYGWIN*:*)
@@ -801,21 +820,24 @@ EOF
i*:PW*:*)
echo ${UNAME_MACHINE}-pc-pw32
exit ;;
- *:Interix*:[3456]*)
+ *:Interix*:*)
case ${UNAME_MACHINE} in
x86)
echo i586-pc-interix${UNAME_RELEASE}
exit ;;
- EM64T | authenticamd)
- echo x86_64-unknown-interix${UNAME_RELEASE}
+ authenticamd | genuineintel | EM64T)
+ echo x86_64-${VENDOR}-interix${UNAME_RELEASE}
exit ;;
IA64)
- echo ia64-unknown-interix${UNAME_RELEASE}
+ echo ia64-${VENDOR}-interix${UNAME_RELEASE}
exit ;;
esac ;;
[345]86:Windows_95:* | [345]86:Windows_98:* | [345]86:Windows_NT:*)
echo i${UNAME_MACHINE}-pc-mks
exit ;;
+ 8664:Windows_NT:*)
+ echo x86_64-pc-mks
+ exit ;;
i*:Windows_NT*:* | Pentium*:Windows_NT*:*)
# How do we know it's Interix rather than the generic POSIX subsystem?
# It also conflicts with pre-2.0 versions of AT&T UWIN. Should we
@@ -826,25 +848,39 @@ EOF
echo ${UNAME_MACHINE}-pc-uwin
exit ;;
amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*)
- echo x86_64-unknown-cygwin
+ echo x86_64-${VENDOR}-cygwin
exit ;;
p*:CYGWIN*:*)
- echo powerpcle-unknown-cygwin
+ echo powerpcle-${VENDOR}-cygwin
exit ;;
prep*:SunOS:5.*:*)
- echo powerpcle-unknown-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+ echo powerpcle-${VENDOR}-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
exit ;;
*:GNU:*:*)
# the GNU system
- echo `echo ${UNAME_MACHINE}|sed -e 's,[-/].*$,,'`-unknown-gnu`echo ${UNAME_RELEASE}|sed -e 's,/.*$,,'`
+ echo `echo ${UNAME_MACHINE}|sed -e 's,[-/].*$,,'`-${VENDOR}-gnu`echo ${UNAME_RELEASE}|sed -e 's,/.*$,,'`
exit ;;
*:GNU/*:*:*)
# other systems with GNU libc and userland
- echo ${UNAME_MACHINE}-unknown-`echo ${UNAME_SYSTEM} | sed 's,^[^/]*/,,' | tr '[A-Z]' '[a-z]'``echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`-gnu
+ echo ${UNAME_MACHINE}-${VENDOR}-`echo ${UNAME_SYSTEM} | sed 's,^[^/]*/,,' | tr '[A-Z]' '[a-z]'``echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`-gnu
exit ;;
i*86:Minix:*:*)
echo ${UNAME_MACHINE}-pc-minix
exit ;;
+ alpha:Linux:*:*)
+ case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' < /proc/cpuinfo` in
+ EV5) UNAME_MACHINE=alphaev5 ;;
+ EV56) UNAME_MACHINE=alphaev56 ;;
+ PCA56) UNAME_MACHINE=alphapca56 ;;
+ PCA57) UNAME_MACHINE=alphapca56 ;;
+ EV6) UNAME_MACHINE=alphaev6 ;;
+ EV67) UNAME_MACHINE=alphaev67 ;;
+ EV68*) UNAME_MACHINE=alphaev68 ;;
+ esac
+ objdump --private-headers /bin/sh | grep -q ld.so.1
+ if test "$?" = 0 ; then LIBC="libc1" ; else LIBC="" ; fi
+ echo ${UNAME_MACHINE}-${VENDOR}-linux-gnu${LIBC}
+ exit ;;
arm*:Linux:*:*)
eval $set_cc_for_build
if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \
@@ -867,6 +903,17 @@ EOF
frv:Linux:*:*)
echo frv-${VENDOR}-linux-gnu
exit ;;
+ i*86:Linux:*:*)
+ LIBC=gnu
+ eval $set_cc_for_build
+ sed 's/^ //' << EOF >$dummy.c
+ #ifdef __dietlibc__
+ LIBC=dietlibc
+ #endif
+EOF
+ eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep '^LIBC'`
+ echo "${UNAME_MACHINE}-${VENDOR}-linux-${LIBC}"
+ exit ;;
ia64:Linux:*:*)
echo ${UNAME_MACHINE}-${VENDOR}-linux-gnu
exit ;;
@@ -876,74 +923,33 @@ EOF
m68*:Linux:*:*)
echo ${UNAME_MACHINE}-${VENDOR}-linux-gnu
exit ;;
- mips:Linux:*:*)
- eval $set_cc_for_build
- sed 's/^ //' << EOF >$dummy.c
- #undef CPU
- #undef mips
- #undef mipsel
- #if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL)
- CPU=mipsel
- #else
- #if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB)
- CPU=mips
- #else
- CPU=
- #endif
- #endif
-EOF
- eval "`$CC_FOR_BUILD -E $dummy.c 2>/dev/null | sed -n '
- /^CPU/{
- s: ::g
- p
- }'`"
- test x"${CPU}" != x && { echo "${CPU}-${VENDOR}-linux-gnu"; exit; }
- ;;
- mips64:Linux:*:*)
+ mips:Linux:*:* | mips64:Linux:*:*)
eval $set_cc_for_build
sed 's/^ //' << EOF >$dummy.c
#undef CPU
- #undef mips64
- #undef mips64el
+ #undef ${UNAME_MACHINE}
+ #undef ${UNAME_MACHINE}el
#if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL)
- CPU=mips64el
+ CPU=${UNAME_MACHINE}el
#else
#if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB)
- CPU=mips64
+ CPU=${UNAME_MACHINE}
#else
CPU=
#endif
#endif
EOF
- eval "`$CC_FOR_BUILD -E $dummy.c 2>/dev/null | sed -n '
- /^CPU/{
- s: ::g
- p
- }'`"
+ eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep '^CPU'`
test x"${CPU}" != x && { echo "${CPU}-${VENDOR}-linux-gnu"; exit; }
;;
or32:Linux:*:*)
echo or32-${VENDOR}-linux-gnu
exit ;;
- ppc:Linux:*:*)
- echo powerpc-${VENDOR}-linux-gnu
- exit ;;
- ppc64:Linux:*:*)
- echo powerpc64-${VENDOR}-linux-gnu
+ padre:Linux:*:*)
+ echo sparc-${VENDOR}-linux-gnu
exit ;;
- alpha:Linux:*:*)
- case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' < /proc/cpuinfo` in
- EV5) UNAME_MACHINE=alphaev5 ;;
- EV56) UNAME_MACHINE=alphaev56 ;;
- PCA56) UNAME_MACHINE=alphapca56 ;;
- PCA57) UNAME_MACHINE=alphapca56 ;;
- EV6) UNAME_MACHINE=alphaev6 ;;
- EV67) UNAME_MACHINE=alphaev67 ;;
- EV68*) UNAME_MACHINE=alphaev68 ;;
- esac
- objdump --private-headers /bin/sh | grep ld.so.1 >/dev/null
- if test "$?" = 0 ; then LIBC="libc1" ; else LIBC="" ; fi
- echo ${UNAME_MACHINE}-${VENDOR}-linux-gnu${LIBC}
+ parisc64:Linux:*:* | hppa64:Linux:*:*)
+ echo hppa64-${VENDOR}-linux-gnu
exit ;;
parisc:Linux:*:* | hppa:Linux:*:*)
# Look for CPU level
@@ -953,8 +959,11 @@ EOF
*) echo hppa-${VENDOR}-linux-gnu ;;
esac
exit ;;
- parisc64:Linux:*:* | hppa64:Linux:*:*)
- echo hppa64-${VENDOR}-linux-gnu
+ ppc64:Linux:*:*)
+ echo powerpc64-${VENDOR}-linux-gnu
+ exit ;;
+ ppc:Linux:*:*)
+ echo powerpc-${VENDOR}-linux-gnu
exit ;;
s390:Linux:*:* | s390x:Linux:*:*)
echo ${UNAME_MACHINE}-ibm-linux
@@ -977,69 +986,6 @@ EOF
xtensa*:Linux:*:*)
echo ${UNAME_MACHINE}-${VENDOR}-linux-gnu
exit ;;
- i*86:Linux:*:*)
- # The BFD linker knows what the default object file format is, so
- # first see if it will tell us. cd to the root directory to prevent
- # problems with other programs or directories called `ld' in the path.
- # Set LC_ALL=C to ensure ld outputs messages in English.
- ld_supported_targets=`cd /; LC_ALL=C ld --help 2>&1 \
- | sed -ne '/supported targets:/!d
- s/[ ][ ]*/ /g
- s/.*supported targets: *//
- s/ .*//
- p'`
- case "$ld_supported_targets" in
- elf32-i386)
- TENTATIVE="${UNAME_MACHINE}-${VENDOR}-linux-gnu"
- ;;
- a.out-i386-linux)
- echo "${UNAME_MACHINE}-${VENDOR}-linux-gnuaout"
- exit ;;
- coff-i386)
- echo "${UNAME_MACHINE}-${VENDOR}-linux-gnucoff"
- exit ;;
- "")
- # Either a pre-BFD a.out linker (linux-gnuoldld) or
- # one that does not give us useful --help.
- echo "${UNAME_MACHINE}-${VENDOR}-linux-gnuoldld"
- exit ;;
- esac
- # Determine whether the default compiler is a.out or elf
- eval $set_cc_for_build
- sed 's/^ //' << EOF >$dummy.c
- #include <features.h>
- #ifdef __ELF__
- # ifdef __GLIBC__
- # if __GLIBC__ >= 2
- LIBC=gnu
- # else
- LIBC=gnulibc1
- # endif
- # else
- LIBC=gnulibc1
- # endif
- #else
- #if defined(__INTEL_COMPILER) || defined(__PGI) || defined(__SUNPRO_C) || defined(__SUNPRO_CC)
- LIBC=gnu
- #else
- LIBC=gnuaout
- #endif
- #endif
- #ifdef __dietlibc__
- LIBC=dietlibc
- #endif
-EOF
- eval "`$CC_FOR_BUILD -E $dummy.c 2>/dev/null | sed -n '
- /^LIBC/{
- s: ::g
- p
- }'`"
- test x"${LIBC}" != x && {
- echo "${UNAME_MACHINE}-${VENDOR}-linux-${LIBC}"
- exit
- }
- test x"${TENTATIVE}" != x && { echo "${TENTATIVE}"; exit; }
- ;;
i*86:DYNIX/ptx:4*:*)
# ptx 4.0 does uname -s correctly, with DYNIX/ptx in there.
# earlier versions are messed up and put the nodename in both
@@ -1060,16 +1006,16 @@ EOF
echo ${UNAME_MACHINE}-pc-os2-emx
exit ;;
i*86:XTS-300:*:STOP)
- echo ${UNAME_MACHINE}-unknown-stop
+ echo ${UNAME_MACHINE}-${VENDOR}-stop
exit ;;
i*86:atheos:*:*)
- echo ${UNAME_MACHINE}-unknown-atheos
+ echo ${UNAME_MACHINE}-${VENDOR}-atheos
exit ;;
i*86:syllable:*:*)
echo ${UNAME_MACHINE}-pc-syllable
exit ;;
- i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.0*:*)
- echo i386-unknown-lynxos${UNAME_RELEASE}
+ i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*)
+ echo i386-${VENDOR}-lynxos${UNAME_RELEASE}
exit ;;
i*86:*DOS:*:*)
echo ${UNAME_MACHINE}-pc-msdosdjgpp
@@ -1089,7 +1035,7 @@ EOF
*Pentium) UNAME_MACHINE=i586 ;;
*Pent*|*Celeron) UNAME_MACHINE=i686 ;;
esac
- echo ${UNAME_MACHINE}-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION}
+ echo ${UNAME_MACHINE}-${VENDOR}-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION}
exit ;;
i*86:*:3.2:*)
if test -f /usr/options/cb.name; then
@@ -1112,8 +1058,11 @@ EOF
pc:*:*:*)
# Left here for compatibility:
# uname -m prints for DJGPP always 'pc', but it prints nothing about
- # the processor, so we play safe by assuming i386.
- echo i386-pc-msdosdjgpp
+ # the processor, so we play safe by assuming i586.
+ # Note: whatever this is, it MUST be the same as what config.sub
+ # prints for the "djgpp" host, or else GDB configury will decide that
+ # this is a cross-build.
+ echo i586-pc-msdosdjgpp
exit ;;
Intel:Mach:3*:*)
echo i386-pc-mach3
@@ -1125,7 +1074,7 @@ EOF
if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then
echo i860-stardent-sysv${UNAME_RELEASE} # Stardent Vistra i860-SVR4
else # Add other i860-SVR4 vendors below as they are discovered.
- echo i860-unknown-sysv${UNAME_RELEASE} # Unknown i860-SVR4
+ echo i860-${VENDOR}-sysv${UNAME_RELEASE} # Unknown i860-SVR4
fi
exit ;;
mini*:CTIX:SYS*5:*)
@@ -1151,20 +1100,30 @@ EOF
3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*)
/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
&& { echo i486-ncr-sysv4; exit; } ;;
+ NCR*:*:4.2:* | MPRAS*:*:4.2:*)
+ OS_REL='.3'
+ test -r /etc/.relid \
+ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
+ /bin/uname -p 2>/dev/null | grep 86 >/dev/null \
+ && { echo i486-ncr-sysv4.3${OS_REL}; exit; }
+ /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
+ && { echo i586-ncr-sysv4.3${OS_REL}; exit; }
+ /bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \
+ && { echo i586-ncr-sysv4.3${OS_REL}; exit; } ;;
m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*)
- echo m68k-unknown-lynxos${UNAME_RELEASE}
+ echo m68k-${VENDOR}-lynxos${UNAME_RELEASE}
exit ;;
mc68030:UNIX_System_V:4.*:*)
echo m68k-atari-sysv4
exit ;;
TSUNAMI:LynxOS:2.*:*)
- echo sparc-unknown-lynxos${UNAME_RELEASE}
+ echo sparc-${VENDOR}-lynxos${UNAME_RELEASE}
exit ;;
rs6000:LynxOS:2.*:*)
- echo rs6000-unknown-lynxos${UNAME_RELEASE}
+ echo rs6000-${VENDOR}-lynxos${UNAME_RELEASE}
exit ;;
- PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.0*:*)
- echo powerpc-unknown-lynxos${UNAME_RELEASE}
+ PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*)
+ echo powerpc-${VENDOR}-lynxos${UNAME_RELEASE}
exit ;;
SM[BE]S:UNIX_SV:*:*)
echo mips-dde-sysv${UNAME_RELEASE}
@@ -1214,7 +1173,7 @@ EOF
if [ -d /usr/nec ]; then
echo mips-nec-sysv${UNAME_RELEASE}
else
- echo mips-unknown-sysv${UNAME_RELEASE}
+ echo mips-${VENDOR}-sysv${UNAME_RELEASE}
fi
exit ;;
BeBox:BeOS:*:*) # BeOS running on hardware made by Be, PPC only.
@@ -1226,6 +1185,9 @@ EOF
BePC:BeOS:*:*) # BeOS running on Intel PC compatible.
echo i586-pc-beos
exit ;;
+ BePC:Haiku:*:*) # Haiku running on Intel PC compatible.
+ echo i586-pc-haiku
+ exit ;;
SX-4:SUPER-UX:*:*)
echo sx4-nec-superux${UNAME_RELEASE}
exit ;;
@@ -1253,6 +1215,16 @@ EOF
*:Darwin:*:*)
UNAME_PROCESSOR=`uname -p` || UNAME_PROCESSOR=unknown
case $UNAME_PROCESSOR in
+ i386)
+ eval $set_cc_for_build
+ if [ "$CC_FOR_BUILD" != 'no_compiler_found' ]; then
+ if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \
+ (CCOPTS= $CC_FOR_BUILD -E - 2>/dev/null) | \
+ grep IS_64BIT_ARCH >/dev/null
+ then
+ UNAME_PROCESSOR="x86_64"
+ fi
+ fi ;;
unknown) UNAME_PROCESSOR=powerpc ;;
esac
echo ${UNAME_PROCESSOR}-apple-darwin${UNAME_RELEASE}
@@ -1292,13 +1264,13 @@ EOF
else
UNAME_MACHINE="$cputype"
fi
- echo ${UNAME_MACHINE}-unknown-plan9
+ echo ${UNAME_MACHINE}-${VENDOR}-plan9
exit ;;
*:TOPS-10:*:*)
- echo pdp10-unknown-tops10
+ echo pdp10-${VENDOR}-tops10
exit ;;
*:TENEX:*:*)
- echo pdp10-unknown-tenex
+ echo pdp10-${VENDOR}-tenex
exit ;;
KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*)
echo pdp10-dec-tops20
@@ -1307,16 +1279,16 @@ EOF
echo pdp10-xkl-tops20
exit ;;
*:TOPS-20:*:*)
- echo pdp10-unknown-tops20
+ echo pdp10-${VENDOR}-tops20
exit ;;
*:ITS:*:*)
- echo pdp10-unknown-its
+ echo pdp10-${VENDOR}-its
exit ;;
SEI:*:*:SEIUX)
echo mips-sei-seiux${UNAME_RELEASE}
exit ;;
*:DragonFly:*:*)
- echo ${UNAME_MACHINE}-unknown-dragonfly`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`
+ echo ${UNAME_MACHINE}-${VENDOR}-dragonfly`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`
exit ;;
*:*VMS:*:*)
UNAME_MACHINE=`(uname -p) 2>/dev/null`
@@ -1334,6 +1306,9 @@ EOF
i*86:rdos:*:*)
echo ${UNAME_MACHINE}-pc-rdos
exit ;;
+ i*86:AROS:*:*)
+ echo ${UNAME_MACHINE}-pc-aros
+ exit ;;
esac
#echo '(No uname command or uname output not recognized.)' 1>&2
@@ -1494,9 +1469,9 @@ This script, last modified $timestamp, has failed to recognize
the operating system you are using. It is advised that you
download the most up to date version of the config scripts from
- http://savannah.gnu.org/cgi-bin/viewcvs/*checkout*/config/config/config.guess
+ http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess;hb=HEAD
and
- http://savannah.gnu.org/cgi-bin/viewcvs/*checkout*/config/config/config.sub
+ http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub;hb=HEAD
If the version you run ($0) is already up to date, please
send the following data and any information you think might be
diff --git a/config.rpath b/build-aux/config.rpath
index c492a93b..c492a93b 100755
--- a/config.rpath
+++ b/