summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Relevant BUGIDs: noneThorsten Kukuk2006-01-12
| | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Add check for -fpie/-pie * modules/pam_filter/upperLOWER/Makefile.am: Compile/link upperLOWER with -fpie/-pie if supported. * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd with -fpie/-pie if supported.
* Relevant BUGIDs:Tomas Mraz2006-01-12
| | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-01-12 Steve Grubb <sgrubb@redhat.com> * configure.in: Add check for audit library. * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT. (libpam_la_SOURCES): Add pam_audit.c. * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call. * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise. * libpam/pam_password.c (pam_chauthtok): Likewise. * libpam/pam_session.c (pam_open_session), (pam_close_session): Likewise. * libpam/pam_private.h: Add audit_state member to pam_handle, declare _pam_auditlog and _pam_audit_end. * libpam/pam_start.c (pam_start): Initialize audit_state. * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end implementation. * libpam/pam_end.c (pam_end): Add _pam_audit_end() call. * NEWS: Note about added auditing.
* Relevant BUGIDs: noneThorsten Kukuk2006-01-11
| | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de> * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE. * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL if we compile libpam itself. And update all po files with new line numbers in PAM modules ...
* Relevant BUGIDs: noneThorsten Kukuk2006-01-11
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Update hungarian translation
* Relevant BUGIDs:Thorsten Kukuk2006-01-09
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Update norwegian translation
* Relevant BUGIDs:Thorsten Kukuk2006-01-08
| | | | | | | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR instead of PAM_AUTHTOK_RECOVER_ERR. * modules/pam_pwdb/support.-c: Likewise. * modules/pam_unix/support.c: Likewise. * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise. * libpam/pam_strerror.c (pam_strerror): Likewise. * libpam/include/security/_pam_compat.h: Define PAM_AUTHTOK_RECOVER_ERR for backward compatibility. * libpam/include/security/_pam_types.h: Rename PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
* Relevant BUGIDs: noneThorsten Kukuk2006-01-05
| | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- item of pam_get_item() is allowed to be NULL and the behavior is documented, so we have to allow it. 2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de> * libpam/include/security/_pam_types.h: Remove nonnull attribute from third paramter (item) of pam_get_item. * libpam/Makefile.am: Bump version number of shared library.
* Relevant BUGIDs:Tomas Mraz2005-12-21
| | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup), (evaluate_notingroup): Simplified. (evaluate_innetgr), (evaluate_notinnetgr): New functions. (evaluate): Added calls to evaluate_(not)innetgr(). * modules/pam_succeed_if/README: Documented netgroup matching. * NEWS: Mentioned the added netgroup matching support.
* Relevant BUGIDs:Thorsten Kukuk2005-12-20
| | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use strftime instead of ctime.
* Relevant BUGIDs:Thorsten Kukuk2005-12-20
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix typo in translation
* Relevant BUGIDs:Thorsten Kukuk2005-12-19
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Solaris does not have LOG_AUTHPRIV: 2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de> * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris. Reported by Charles_H_Bedford@nbc.gov.
* Relevant BUGIDs:Thorsten Kukuk2005-12-19
| | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_time/pam_time.c (check_account): Implement support for netgroups. * modules/pam_time/time.conf: Document usage of netgroups.
* Relevant BUGIDs: noneThorsten Kukuk2005-12-16
| | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_group/pam_group.c (check_account): Implement support for netgroups. * modules/pam_group/group.conf: Add all documentation to this example config file and don't reference to outdated configs. * modules/pam_group/README: New. * modules/pam_group/Makefile.am: Add README to EXTRADIST.
* Relevant BUGIDs: noneThorsten Kukuk2005-12-16
| | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2005-12-15 Thorsten Kukuk <kukuk@suse.de> * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an error if user logins the first time. * modules/pam_lastlog/README: New. * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
* Relevant BUGIDs:Thorsten Kukuk2005-12-14
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix wrong comment.
* Relevant BUGIDs:Thorsten Kukuk2005-12-14
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2005-12-14 Thorsten Kukuk <kukuk@suse.de> * doc/pam_appl.sgml: Fix typo (Reported by Russell Bateman <russ@windofkeltia.com>)
* Relevant BUGIDs: noneThorsten Kukuk2005-12-12
| | | | | | | | | Purpose of commit: release Commit summary: --------------- release version 0.99.2.1
* Relevant BUGIDs:Tomas Mraz2005-12-12
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fixed typo in string.
* Relevant BUGIDs: noneDmitry V. Levin2005-12-12
| | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2005-12-12 Dmitry V. Levin <ldv@altlinux.org> Cleanup pam_syslog messages. * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning. * modules/pam_filter/pam_filter.c (set_filter): Append %m specifier to pam_syslog messages where appropriate. * modules/pam_group/pam_group.c (read_field): Likewise. * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove. (create_homedir): Do not use make_remark() wrapper, call pam_info() directly. Call pam_syslog() right after failed operation and append %m specifier to pam_syslog messages where appropriate. * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace sequence of malloc(), strcpy() and strcat() calls with asprintf(). Append %m specifier to pam_syslog messages where appropriate. * modules/pam_securetty/pam_securetty.c (securetty_perform_check): Append %m specifier to pam_syslog messages where appropriate. * modules/pam_shells/pam_shells.c (perform_check): Likewise.
* Relevant BUGIDs:Tomas Mraz2005-12-12
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fixed typo in string. Updated czech translation.
* Relevant BUGIDs:Tomas Mraz2005-12-12
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix PS, PDF, TXT and HTML install (by Mike Becher).
* Relevant BUGIDs: noneThorsten Kukuk2005-12-12
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2005-12-12 Thorsten Kukuk <kukuk@suse.de> * modules/pam_mail/README: Document "quiet" and "standard" options.
* Relevant BUGIDs: noneThorsten Kukuk2005-12-07
| | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2005-12-07 Thorsten Kukuk <kukuk@suse.de> * modules/pam_mail/pam_mail.c: Modify assembling of output for easier translation. * po/de.po: Translate new pam_mail messages.
* Relevant BUGIDs:Thorsten Kukuk2005-11-24
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix wrong format specifier (%s instead of %m)
* Relevant BUGIDs: noneDmitry V. Levin2005-11-24
| | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2005-11-24 Dmitry V. Levin <ldv@altlinux.org> * config.h.in: Remove generated file. * .cvsignore: Add config.h.in.
* Relevant BUGIDs: noneDmitry V. Levin2005-11-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2005-11-24 Dmitry V. Levin <ldv@altlinux.org> * configure.in: Do not check for strerror. * libpam_misc/misc_conv.c (read_string): Replace strerror() call with %m specifier. * libpamc/pamc_converse.c (pamc_converse): Likewise. * modules/pam_echo/pam_echo.c (pam_echo): Likewise. * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate): Likewise. * modules/pam_selinux/pam_selinux.c (security_label_tty): Likewise. (security_restorelabel_tty, security_label_tty): Append %m specifier where appropriate. * modules/pam_selinux/pam_selinux_check.c (main): Replace strerror() call with %m specifier. * modules/pam_unix/pam_unix_passwd.c (save_old_password, _update_passwd, _update_shadow): Likewise. * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise. * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise. * po/Linux-PAM.pot: Update strings from pam_selinux. * po/cs.po: Likewise. * po/de.po: Likewise. * po/es.po: Likewise. * po/fi.po: Likewise. * po/fr.po: Likewise. * po/hu.po: Likewise. * po/it.po: Likewise. * po/ja.po: Likewise. * po/nb.po: Likewise. * po/pa.po: Likewise. * po/pl.po: Likewise. * po/pt.po: Likewise. * po/pt_BR.po: Likewise. * po/zh_CN.po: Likewise. * po/zh_TW.po: Likewise.
* Relevant BUGIDs: noneThorsten Kukuk2005-11-23
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2005-11-23 Thorsten Kukuk <kukuk@suse.de> * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce new variable to fix compiler warning. * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY don't need to start with /dev/.
* Relevant BUGIDs: noneThorsten Kukuk2005-11-21
| | | | | | | | | Purpose of commit: release Commit summary: --------------- Prepare for 0.99.2.0 release
* Relevant BUGIDs: noneThorsten Kukuk2005-11-18
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Update NEWS file, checkin regenerated po files
* Relevant BUGIDs:Thorsten Kukuk2005-11-18
| | | | | | | | | Purpose of commit: Commit summary: --------------- submit missing files from last checkin
* Relevant BUGIDs: 534205Thorsten Kukuk2005-11-18
| | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de> * libpam/pam_handlers.c: Replace code for all dlopen variants with a generic wrapper. * libpam/pam_dynamic.c: Implement generic wrapper for dlopen. * libpam/pam_dynamic.h: Provide prototypes. For Mac OS X support [#534205]
* Relevant BUGIDs: 604380Thorsten Kukuk2005-11-17
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix compatibility with Solaris if compiled on Solaris: 2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de> * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting. Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
* Relevant BUGIDs: 562730, 435990Tomas Mraz2005-11-09
| | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly full path tty name. * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly full path tty name. Allow unset tty. (logic_member): Allow matching ':' in tty name. * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly full path tty name. Allow unset tty. (logic_member): Allow matching ':' in tty name. * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin is not terminal.
* Relevant BUGIDs:Thorsten Kukuk2005-11-07
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use correct variable names. And adjust .cvsignore files for libtool generated files.
* Relevant BUGIDs: Debian bugs #330458, #330852Steve Langasek2005-11-06
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- don't treat a missing /etc/environment as a fatal error when attempting to read it, and try to read this file by default; this restores the behavior from Linux-PAM 0.76.
* Relevant BUGIDs: 1245888Tomas Mraz2005-11-02
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the logic when comparing dates to handle corner cases better [#1245888].
* Relevant BUGIDs: 1224807Tomas Mraz2005-11-02
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix a typo - strlen of a wrong variable.
* Relevant BUGIDs: 624214Thorsten Kukuk2005-11-02
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2005-10-31 Thorsten Kukuk <kukuk@suse.de> * modules/pam_filter/pam_filter.c: Use XCASE only if defined [#624214]
* Relevant BUGIDs: 1197444Thorsten Kukuk2005-10-27
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- doc/man/pam.8: Fix wording for authentication chapter
* Relevant BUGIDs: Red Hat bz 168180Tomas Mraz2005-10-26
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2005-10-26 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary), modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary), modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real uid to 0 before executing the helper if SELinux is enabled. * modules/pam_unix/unix_chkpwd.c (main): Disable user check only if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
* Relevant BUGIDs: Red Hat bz 171164Tomas Mraz2005-10-20
| | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2005-10-20 Tomas Mraz <t8m@centrum.cz> * configure.in: Added check for xauth binary and --with-xauth option. * config.h.in: Added configurable PAM_PATH_XAUTH. * modules/pam_xauth/README, modules/pam_xauth/pam_xauth.8: Document where xauth is looked for. * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement searching xauth binary on multiple places. (run_coprocess): Don't use execvp as it can be a security risk.
* Relevant BUGIDs: Debian bug #53653Steve Langasek2005-10-04
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Declare public header files extern "C" so that they are C++-safe.
* 2005-10-02 Dmitry V. Levin <ldv@altlinux.org>Dmitry V. Levin2005-10-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Steve Langasek <vorlon@debian.org> Cleanup gratuitous use of strdup(). Fix "missing argument" checks. * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier to conffile and envfile arguments. Do not use x_strdup() for conffile and envfile initialization. Fix "missing argument" checks. (_parse_config_file): Take conffile argument of type "const char *" instead of "char **". Do not free conffile. (_parse_env_file): Take env_file argument of type "const char *" instead of "char **". Do not free env_file. (pam_sm_setcred): Add const qualifier to conf_file and env_file. Pass conf_file and env_file to _parse_config_file() and _parse_env_file() by value. (pam_sm_open_session): Likewise. * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to users argument. Do not use x_strdup() for users initialization. (lookup): Add const qualifier to list argument. (pam_sm_authenticate): Add const qualifier to users argument. * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier to maildir argument. Do not use x_strdup() for maildir initialization. Fix "missing argument" check. (get_folder): Take path_mail argument of type "const char *" instead of "char **". Do not free path_mail. (_do_mail): Add const qualifier to path_mail argument. Pass path_mail to get_folder() by value. * modules/pam_motd/pam_motd.c: Include <syslog.h>. (pam_sm_open_session): Add const qualifier to motd_path. Do not use x_strdup() for motd_path initialization. Do not free motd_path. Fix "missing argument" check. Add "unknown option" warning. * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const qualifier to database and cryptmode arguments. Fix "missing argument" checks. (pam_sm_authenticate): Add const qualifier to database and cryptmode. (pam_sm_acct_mgmt): Likewise.
* Relevant BUGIDs:Steve Langasek2005-10-02
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- spelling fix in log message (s/acces/access/)
* Relevant BUGIDs: noneSteve Langasek2005-09-30
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix memory leak due to gratuitous use of strdup().
* Relevant BUGIDs: noneThorsten Kukuk2005-09-27
| | | | | | | | | Purpose of commit: Commit summary: bugfix --------------- Move release date for 0.99.1.0
* Relevant BUGIDs:Thorsten Kukuk2005-09-27
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- More .cvsignore fixes
* Relevant BUGIDs: noneThorsten Kukuk2005-09-27
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Install draft and rfc, fix make dist outside source dir. 2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de> * doc/specs/Makefile.am (install-data-local): Install rfc and draft. (all): Copy rfc if we build outside of source directory.
* Relevant BUGIDs: noneThorsten Kukuk2005-09-27
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Add more missing .cvsignore files to CVS
* Relevant BUGIDs:Thorsten Kukuk2005-09-27
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- commit forgotten .cvsignore files
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-23 17:19:46 +0000