summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Fix order of librariesThorsten Kukuk2011-06-24
|
* Add release to ChangeLogThorsten Kukuk2011-06-21
|
* 2011-06-22 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-06-21
| | | | | | | | | * release version 1.1.4 * configure.in: Bump version number. * NEWS: Document changes since 1.1.3 * libpam/Makefile.am: Bump release number of shared library * po/de.po: Translate new string.
* Merge branch 'master' of ssh://git.fedorahosted.org/git/linux-pam into ↵Thorsten Kukuk2011-06-21
|\ | | | | | | new_version
| * 2011-06-21 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-06-21
| | | | | | | | | | | | | | | | * modules/pam_limits/pam_limits.c: Add set_all option, read limits from PID one if no limit is specified and set_all is set. * modules/pam_limits/pam_limits.8.xml: Document set_all option. Based on Patch by Kees Cook.
* | Bump version to 1.1.4Thorsten Kukuk2011-06-21
|/
* Initialize the fake_item from item.Tomas Mraz2011-06-15
|
* Avoid memleaks and fd leak in error paths.Tomas Mraz2011-06-15
|
* Do not crash when remember, minlen, or rounds options are used with wrong ↵Tomas Mraz2011-06-15
| | | | module type.
* Cleanups of pam_pwhistory code. Make opasswd entry parsing more robust.Tomas Mraz2011-06-15
| | | | | | | | | * modules/pam_pwhistory/opasswd.c (check_old_password): Do not needlessly call strdupa(). (save_old_password): Avoid memleaks in error paths. Avoid memleak of buf. Make the opasswd entry parsing more robust. * modules/pam_pwhistory/pam_pwhistory.8.xml: Document the special meaning of remember=0.
* Avoid leaking memory and dir handle on realloc failure.Tomas Mraz2011-06-15
|
* Fix typoThorsten Kukuk2011-06-14
|
* 2011-06-14 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-06-14
| | | | | | | | | | * configure.in: Check for libtirpc bye default. * libpam/Makefile.am: Add support for libtirpc. * modules/pam_access/Makefile.am: Likewise. * modules/pam_unix/Makefile.am: Likewise. * modules/pam_unix/pam_unix_passwd.c: Change ifdefs for new libtirpc support. * modules/pam_unix/yppasswd_xdr.c: Only compile if we have rpc/rpc.h.
* Test also whether the tty is in the /sys/class/tty/console/active file.Tomas Mraz2011-06-13
|
* Detect the shared / mount and enable private mounts based on that.Tomas Mraz2011-06-07
|
* Define the MS_PRIVATE and MS_REC flags if they are not in sys/mount.h.Tomas Mraz2011-06-06
|
* Rewrite of the field parsing in pam_group and pam_time.Tomas Mraz2011-06-06
|
* Vietnamese translation added.Tomas Mraz2011-06-06
|
* po: add Vietnamese translationNguyễn Thái Ngọc Duy2011-06-06
| | | | Signed-off-by: Nguyễn Thái Ngọc Duy <pclouds@gmail.com>
* Check for return value of pam_get_item() in pam_echo module.Tomas Mraz2011-06-02
|
* Guard for pam_get_user() error in pam_filter module.Tomas Mraz2011-06-02
|
* Guards for memory allocation errors in pam_cracklib module.Tomas Mraz2011-06-02
|
* Add support for the mount_private option to pam_namespace.Tomas Mraz2011-06-02
|
* 2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-05-30
| | | | | | | | | | | * modules/pam_timestamp/pam_timestamp.c (main): Remove unsused variable pretval. * modules/pam_stress/pam_stress.c (converse): **message is const. (stress_get_password): pmsg is const. (pam_sm_chauthtok): Likewise. * libpam/pam_item.c (pam_get_user): Make pmsg const and remove casts.
* 2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-05-30
| | | | | * modules/pam_env/pam_env.c (_pam_parse): Implement debug option. Based on patch by Tomas Mraz.
* 2011-05-24 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-05-24
| | | | | | * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): quiet option has no argument, print no missing file if quiet is set [sf#3194930].
* 2011-05-04 Thorsten Kukuk <kukuk@thkukuk.de>kukuk2011-05-04
| | | | | * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Don't abort with error if btmp file does not exist.
* Clear the whole MD5 context.Tomas Mraz2011-03-21
|
* Relevant BUGIDs:Tomas Mraz2011-03-18
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2011-03-18 Tomas Mraz <tm@t8m.info> * modules/pam_namespace/md5.c (MD5Final): Clear the whole ctx. * modules/pam_namespace/pam_namespace.c (del_polydir): Guard for NULL poly. (protect_dir): Guard for -1 passing to close(). (ns_setup): Likewise. (pam_sm_open_session): Correctly test for SELinux enabled flag.
* Relevant BUGIDs:Tomas Mraz2011-03-17
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2011-03-17 Tomas Mraz <tm@t8m.info> * modules/pam_selinux/pam_selinux.c (config_context): Fix leak of type. (manual_context): Likewise. (context_from_env): Remove extraneous auditing in success case. * modules/pam_unix/support.c (_unix_run_helper_binary): Remove extra close() call.
* Relevant BUGIDs:Tomas Mraz2011-02-22
| | | | | | | | | | | Purpose of commit: docfix Commit summary: --------------- 2011-02-22 Tomas Mraz <tm@t8m.info> * modules/pam_nologin/pam_nologin.8.xml: Add missing space. * modules/pam_limits/limits.conf.5.xml: Fix typo.
* Relevant BUGIDs:Tomas Mraz2010-12-21
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-12-21 Tomas Mraz <tm@t8m.info> * modules/pam_selinux/pam_selinux.c (mls_range_allowed): Unhardcode values for security class and av permission bit.
* Relevant BUGIDs:Tomas Mraz2010-12-14
| | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2010-12-14 Tomas Mraz <tm@t8m.info> * modules/pam_limits/pam_limits.c (parse_uid_range): New function to parse the range of uids or gids. (parse_config_file): Call parse_uid_range() and if uid/gid range is identified, setup the limits if the range matches. New parameters containing user's uid and primary gid. (pam_sm_open_session): Pass the user's uid and primary gid to parse_config_file(). * modules/pam_limits/limits.conf.5.xml: Document the uid/gid ranges.
* Relevant BUGIDs:Tomas Mraz2010-12-14
| | | | | | | | | | Purpose of commit: translations Commit summary: --------------- 2010-12-14 Bahadır Kandemir <bahadir@pardus.org.tr> * po/tr.po: Updated translations.
* Relevant BUGIDs:Tomas Mraz2010-11-25
| | | | | | | | | | | Purpose of commit: docfix Commit summary: --------------- 2010-11-25 Tomas Mraz <tm@t8m.info> * modules/pam_securetty/pam_securetty.8.xml: Improve documentation of the kernel console feature and the noconsole option.
* Relevant BUGIDs:Thorsten Kukuk2010-11-24
| | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2010-11-24 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_securetty/pam_securetty.c: Parse console= kernel option, add noconsole option. * modules/pam_securetty/pam_securetty.8.xml: Document new behavior for serial console. Patch from Lennart Poettering.
* Relevant BUGIDs:Tomas Mraz2010-11-24
| | | | | | | | | | Purpose of commit: docfix Commit summary: --------------- 2010-11-24 Tomas Mraz <tm@t8m.info> * modules/pam_limits/limits.conf.5.xml: Document the %group syntax.
* Relevant BUGIDs:Tomas Mraz2010-11-18
| | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2010-11-18 Tomas Mraz <tm@t8m.info> * modules/pam_limits/pam_limits.c (pam_parse,pam_sm_open_session): Drop obsolete and broken option change_uid. * modules/pam_limits/pam_limits.8.xml: Likewise.
* Relevant BUGIDs:Tomas Mraz2010-11-16
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-11-16 Tomas Mraz <tm@t8m.info> * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Remove dead and duplicate code. Return PAM_INCOMPLETE instead of PAM_CONV_AGAIN.
* Relevant BUGIDs:Tomas Mraz2010-11-11
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-11-11 Tomas Mraz <tm@t8m.info> * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Fix potential use after free in case SELinux is misconfigured. * modules/pam_namespace/pam_namespace.c (process_line): Fix memory leak when parsing empty config file lines.
* Relevant BUGIDs:Thorsten Kukuk2010-10-28
| | | | | | | | | | | | | | | | | Purpose of commit: release Commit summary: --------------- 2010-10-28 Thorsten Kukuk <kukuk@thkukuk.de> * release version 1.1.3 * configure.in: Increase version to 1.1.3 * NEWS: document visible changes * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
* Relevant BUGIDs:Thorsten Kukuk2010-10-27
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-27 Thorsten Kukuk <kukuk@thkukuk.de> * doc/adg/Makefile.am: Use UTF-8 for html docu. * doc/mwg/Makefile.am: Likewise. * doc/sag/Makefile.am: Likewise. kernel.org webserver is using UTF-8
* Relevant BUGIDs:Tomas Mraz2010-10-22
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-22 Tomas Mraz <tm@t8m.info> * modules/pam_namespace/pam_namespace.c (inst_init): Use execle() to execute the init script with clean environment. (CVE-2010-3853) (cleanup_tmpdirs): Likewise for executing rm.
* Relevant BUGIDs:Dmitry V. Levin2010-10-21
| | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2010-10-21 Dmitry V. Levin <ldv@altlinux.org> * modules/pam_mkhomedir/mkhomedir_helper.c (rec_mkdir): Remove. (create_homedir): Use mkdir() instead of rec_mkdir(). (make_parent_dirs): New function. (main): Use make_parent_dirs() to create parent directories only for the home directory itself.
* Relevant BUGIDs:Thorsten Kukuk2010-10-21
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-21 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/support.c (_unix_getpwnam): Don't allocate unneeded buffer for uid/gid [sf#3059572].
* Relevant BUGIDs:Thorsten Kukuk2010-10-20
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-20 Thorsten Kukuk <kukuk@thkukuk.de> * doc/man/pam_get_authtok.3.xml: Fix xml code.
* Relevant BUGIDs:Thorsten Kukuk2010-10-20
| | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-20 Thorsten Kukuk <kukuk@thkukuk.de> * doc/man/Makefile.am: Fix build dependencys of pam_get_authtok.3. * xtests/Makefile.am: Only build xtests if we run xtests.
* Relevant BUGIDs:Thorsten Kukuk2010-10-20
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-20 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Check for libdb with symbol versions, too. Patch from Diego Elio Pettenò.
* Relevant BUGIDs:Thorsten Kukuk2010-10-20
| | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-20 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_mkhomedir/mkhomedir_helper.c (rec_mkdir): Create parent directories always with mode 0755. (create_homedir): Create main directory with mode 0700 at first.
* Relevant BUGIDs:Dmitry V. Levin2010-10-19
| | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2010-10-19 Dmitry V. Levin <ldv@altlinux.org> * modules/pam_selinux/pam_selinux.c (verbose_message): Remove. (pam_sm_open_session): Call send_text() instead of verbose_message().