summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* modules/pam_access: fix compilation warningDmitry V. Levin2020-03-19
| | | | | | | | | | | | | Fix the following compilation warning reported by gcc when HAVE_LIBAUDIT is not set: modules/pam_access/pam_access.c: In function ‘login_access’: modules/pam_access/pam_access.c:338:13: warning: variable ‘nonall_match’ set but not used [-Wunused-but-set-variable] 338 | int nonall_match = NO; | ^~~~~~~~~~~~ * modules/pam_access/pam_access.c (login_access): Enclose nonall_match variable with HAVE_LIBAUDIT #ifdef's.
* conf/pam_conv1: fix clang compilation warningsDmitry V. Levin2020-03-19
| | | | | | | | | | | | | | | | | Fix the following compilation warnings reported by clang: pam_conv_y.y:12:23: warning: unused variable 'bisonid' [-Wunused-const-variable] static const char bisonid[]= ^ pam_conv_l.l:12:23: warning: unused variable 'lexid' [-Wunused-const-variable] static const char lexid[]= ^ These static variables lost their meaning after repository conversion from cvs to git and can be safely removed. * conf/pam_conv1/pam_conv_l.l (lexid): Remove. * conf/pam_conv1/pam_conv_y.y (bisonid): Remove.
* modules/pam_timestamp: fix clang compilation warningDmitry V. Levin2020-03-18
| | | | | | | | | | | modules/pam_timestamp/pam_timestamp.c:807:17: warning: logical not is only applied to the left hand side of this comparison [-Wlogical-not-parentheses] } else if (!timestamp_good(st.st... ^ * modules/pam_timestamp/pam_timestamp.c (main): Change timestamp_good return code check to a more traditional form.
* github: check for whitespace errors on push and pull requestsDmitry V. Levin2020-03-18
| | | | * .github/workflows/whitespace-errors-check.yml: New file.
* modules/pam_timestamp: fix EXTRA_DISTDmitry V. Levin2020-03-18
| | | | | * modules/pam_timestamp/Makefile.am (EXTRA_DIST): Replace "$(man_MANS)" with "$(MANS)" as the former is conditional on HAVE_DOC.
* modules/pam_namespace: fix EXTRA_DISTDmitry V. Levin2020-03-18
| | | | | | * modules/pam_namespace/Makefile.am (EXTRA_DIST): Replace "$(MAN5) $(MAN8)" with "$(MANS)" as the former is conditional on HAVE_DOC.
* pam_usertype: exclude man-page generation when configured with --disable-docChristian Göttsche2020-03-17
| | | | | | | * modules/pam_usertype/Makefile.am (man_MANS): Make conditional on HAVE_DOC. Resolves: https://github.com/linux-pam/linux-pam/pull/193
* pam_namespace: ignore pam_namespace_helper in gitChristian Göttsche2020-03-17
| | | | | | * modules/pam_namespace/.gitignore: New file. Resolves: https://github.com/linux-pam/linux-pam/pull/192
* Update translation filesWeblate2020-03-13
| | | | | | | Updated by "Update PO files to match POT (msgmerge)" hook in Weblate. Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/
* Translated using Weblate (Slovak)Ondrej Sulek2020-03-13
| | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/sk/
* Translated using Weblate (Ukrainian)Yuri Chornoivan2020-03-13
| | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/uk/
* Translated using Weblate (Portuguese (Brazil))Dmitry V. Levin2020-03-13
| | | | | | | | | | | | | | | | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/pt_BR/ Translated using Weblate (Portuguese) Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/pt/ Translated using Weblate (German) Currently translated at 91.4% (107 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/de/
* Adjust README with instructions for package prerequsitiesTomas Mraz2020-03-13
| | | | Also remove obsolete static modules instructions
* pam_get_authtok: fix i18n of default promptsDmitry V. Levin2020-03-11
| | | | | | | | | | | | | | | Change formatting of default prompts, making them translatable to those languages that use a different word order. From non-i18n perspective this change is essentially a no-op. * libpam/pam_get_authtok.c (PROMPTCURRENT): Replace with PROMPT_CURRENT_ARG and PROMPT_CURRENT_NOARG. (PROMPT1): Replace with PROMPT_NEW_ARG and PROMPT_NEW_NOARG. (PROMPT2): Replace with PROMPT_RETYPE_ARG and PROMPT_RETYPE_NOARG. (pam_get_authtok_internal, pam_get_authtok_verify): Use new macros. * po/Linux-PAM.pot: Regenerated. Resolves: https://github.com/linux-pam/linux-pam/issues/29
* pam_selinux: check unknown object classes or permissions in current policyikerexxe2020-03-11
| | | | | | Explanation: check whether unknown object classes or permissions are allowed or denied in the current policy Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1680961
* Update translation filesWeblate2020-03-07
| | | | | | | Updated by "Update PO files to match POT (msgmerge)" hook in Weblate. Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/
* Translated using Weblate (Italian)Milo Casagrande2020-03-07
| | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/it/
* Translated using Weblate (Zulu)Dmitry V. Levin2020-03-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently translated at 63.2% (74 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/zu/ Translated using Weblate (Chinese (Traditional)) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/zh_TW/ Translated using Weblate (Chinese (Simplified)) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/zh_CN/ Translated using Weblate (Tamil) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/ta/ Translated using Weblate (Sinhala) Currently translated at 65.8% (77 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/si/ Translated using Weblate (Russian) Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/ru/ Translated using Weblate (Portuguese (Brazil)) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/pt_BR/ Translated using Weblate (Kazakh) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/kk/ Translated using Weblate (Japanese) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/ja/ Translated using Weblate (Hungarian) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/hu/ Translated using Weblate (Hindi) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/hi/ Translated using Weblate (Spanish) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/es/ Translated using Weblate (German) Currently translated at 81.1% (95 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/de/
* Translated using Weblate (Turkish)Oğuz Ersen2020-03-07
| | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/tr/
* Translated using Weblate (Dutch)Geert Warrink2020-03-07
| | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/nl/
* Translated using Weblate (French)Julien Humbert2020-03-07
| | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/fr/
* Translated using Weblate (Polish)Piotr Drąg2020-03-07
| | | | | | | | | | | | | | Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/pl/ Translated using Weblate (Polish) Currently translated at 100.0% (117 of 117 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/pl/
* Add missing file to EXTRA_DISTTomas Mraz2020-03-06
| | | | * tests/Makefile.am: Add confdir to EXTRA_DIST.
* New API call pam_start_confdir()Tomas Mraz2020-03-06
| | | | To load PAM stack configurations from specified directory
* Fix remaining references to sourceforge.netDmitry V. Levin2020-03-05
| | | | | | | | | | | Linux-PAM moved to github long time ago, update the remaining bug tracking references to point to github issues tracker. * README: Refer to https://github.com/linux-pam/linux-pam/issues instead of sourceforge.net. * po/Makevars: Refer to https://github.com/linux-pam/linux-pam/issues instead of http://sourceforge.net/projects/pam . * po/Linux-PAM.pot: Regenerated.
* pam_unix: fix --disable-nis compilation warningsDmitry V. Levin2020-03-05
| | | | | | | | | | | | | | | | When the build is configured using --disable-nis option, gcc complains: pam_unix_passwd.c: In function '_do_setpass': pam_unix_passwd.c:398:8: warning: unused variable 'master' [-Wunused-variable] support.c: In function '_unix_getpwnam': support.c:305:21: warning: parameter 'nis' set but not used [-Wunused-but-set-parameter] * modules/pam_unix/pam_unix_passwd.c (_do_setpass): Move the definition of "master" variable to [HAVE_NIS]. * modules/pam_unix/support.c (_unix_getpwnam) [!(HAVE_YP_GET_DEFAULT_DOMAIN && HAVE_YP_BIND && HAVE_YP_MATCH && HAVE_YP_UNBIND)]: Do not assign the unused parameter but mark it as used.
* Sort NEWS entriesDmitry V. Levin2020-03-05
| | | | * NEWS (1.4.0): Sort module-related news entries.
* Fix whitespace issuesDmitry V. Levin2020-03-05
| | | | | | | | | | | | | | Remove trailing whitespace introduced by commit f9c9c72121eada731e010ab3620762bcf63db08f. Remove blank lines at EOF introduced by commit 65d6735c5949ec233df9813f734e918a93fa36cf. This makes the project free of warnings reported by git diff --check 4b825dc642cb6eb9a060e54bf8d69288fbee4904 HEAD * doc/custom-html.xsl: Remove blank line at EOF. * doc/custom-man.xsl: Likewise. * modules/pam_motd/pam_motd.c: Remove trailing whitespace.
* Adding package dependency hints to READMEed@s5h.net2020-03-04
|
* Use cached 'crypt' library result correctlyMark Wutzke2020-03-04
| | | | | | | | | | | | Configure script incorrectly used a non-cached variable (ac_lib) in the cached code path. This results in no -lcrypt being defined resulting in link errors on a re-build. Update configure.ac to use ac_cv_search_crypt (via ac_res) to setup the correct library arguments. Signed-off-by: Mark Wutzke <mark.wutzke@alliedtelesis.co.nz> Signed-off-by: Chris Packham <chris.packham@alliedtelesis.co.nz>
* Prepare for the 1.4.0 releaseTomas Mraz2020-03-03
|
* Updated LINGUAS to remove completely untranslated languages.Tomas Mraz2020-03-03
| | | | Updated pot and po files
* Translated using Weblate (Czech)Tomáš Mráz2020-03-03
| | | | | | | Currently translated at 100.0% (116 of 116 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/cs/
* Translated using Weblate (Turkish)Oğuz Ersen2020-03-03
| | | | | | | Currently translated at 100.0% (121 of 121 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/tr/
* Translated using Weblate (French)Julien Humbert2020-03-03
| | | | | | | Currently translated at 100.0% (121 of 121 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/fr/
* Translated using Weblate (Polish)Piotr Drąg2020-03-03
| | | | | | | | | | | | | | Currently translated at 100.0% (121 of 121 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/pl/ Translated using Weblate (Polish) Currently translated at 100.0% (121 of 121 strings) Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/pl/
* Deleted translation using Weblate (Cornish)Jean-Baptiste Holcroft2020-03-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Deleted translation using Weblate (German (Low)) Deleted translation using Weblate (Angika) Deleted translation using Weblate (English (United Kingdom)) Deleted translation using Weblate (Asturian) Deleted translation using Weblate (bal (generated)) Deleted translation using Weblate (Bodo) Deleted translation using Weblate (Breton) Deleted translation using Weblate (Cornish) Deleted translation using Weblate (Cornish) Deleted translation using Weblate (ilo (generated)) Deleted translation using Weblate (Maithili) Deleted translation using Weblate (Pedi) Deleted translation using Weblate (Tibetan) Deleted translation using Weblate (Twi) Deleted translation using Weblate (wba (generated))
* Update translation filesWeblate2020-03-03
| | | | | | | Updated by "Update PO files to match POT (msgmerge)" hook in Weblate. Translation: linux-pam/master Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/
* pam_tty_audit: if kernel audit is disabled return PAM_IGNOREIker Pedrosa2020-02-27
| | | | | | If kernel audit is disabled the socket open will return EPROTONOSUPPORT. Return PAM_IGNORE from pam_tty_audit and log a warning in this situation so login is not blocked by the module.
* pam_modutil_sanitize_helper_fds: fix SIGPIPE effect of PAM_MODUTIL_PIPE_FDDmitry V. Levin2020-02-26
| | | | | | | | | | | | | | | | When pam_modutil_sanitize_helper_fds() is invoked with PAM_MODUTIL_PIPE_FD to provide a dummy pipe descriptor for stdout or stderr, it closes the read end of the newly created dummy pipe. The negative side effect of this approach is that any write to such descriptor triggers a SIGPIPE. Avoid this by closing the write end of the dummy pipe and using its read end as a dummy pipe descriptor for output. Any read from such descriptor returns 0, and any write just fails with EBADF, which should work better with unprepared writers. * libpam/pam_modutil_sanitize.c (redirect_out_pipe): Remove. (redirect_out): Call redirect_in_pipe instead of redirect_out_pipe. Fixes: b0ec5d1e ("Introduce pam_modutil_sanitize_helper_fds")
* libpamc: Use ISO C99 uintX_t types instead of u_intX_tTBK2020-02-26
| | | | u_intX_t is a glibcism this fixes the issue of compiling against musl libc.
* pam_group, pam_time: Fix regression in documentation from last change.Tomas Mraz2020-02-25
| | | | | * modules/pam_group/group.conf.5.xml: Replace bare & with &amp;. * modules/pam_time/time.conf.5.xml: Likewise.
* pam_limits: Document the unwanted effect of set_all with systemdTomas Mraz2020-02-24
|
* misc_conv: Use PAM_MAX_RESP_SIZE to limit the length of the inputTomas Mraz2020-02-24
|
* pam_group, pam_time: Fix logical error with multiple ! operatorsTomas Mraz2020-02-24
| | | | | | | | * modules/pam_group/group.conf.5.xml: Document what logic list means. * modules/pam_time/time.conf.5.xml: Likewise. * modules/pam_group/pam_group.c (logic_field): Clear the not operator for the further operations. * modules/pam_time/pam_time.c (logic_field): Likewise.
* pam_shells: Recognize /bin/sh as the default shell.Tomas Mraz2020-02-24
| | | | | | If the shell is empty in /etc/passwd entry it means /bin/sh. * modules/pam_shells/pam_shells.c (perform_check): Use /bin/sh as default shell.
* pam_env: Change the default to not read the user .pam_environment fileTomas Mraz2020-02-24
| | | | | * modules/pam_env/pam_env.8.xml: Document the change. * modules/pam_env/pam_env.c: Set DEFAULT_USER_READ_ENVFILE to 0.
* pam_env: code cleanupsTomas Mraz2020-02-24
| | | | | | | | | Raise BUF_SIZE to 8192 bytes. * modules/pam_env/pam_env.c (_parse_env_file): Ignore lines starting with '='. (_assemble_line): Detect long lines and binary files. (_check_var): Avoid overwriting global variable. (_expand_arg): Avoid repeated strlen calls.
* pam_namespace: secure tmp-inst directoriesTopi Miettinen2020-02-18
| | | | | | | | | | | | | | | When using polyinstantiation for /tmp and/or /var/tmp, pam_namespace creates subdirectories with fixed name tmp-inst. These paths should be secured as early as possible to avoid that somehow these directories could created and controlled by for example a malicious user or service. Ship a systemd service, which creates the directories early in boot sequence with correct permissions and ownership. Closes #111. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
* Fix warnings from the recent PR mergesTomas Mraz2020-02-18
| | | | | * modules/pam_succeed_if/pam_succeed_if.c: Fix const issues. * modules/pam_usertype/pam_usertype.c: Avoid maybe used uninitialized warning.