summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| | * Relevant BUGIDs: rhbz#433459Tomas Mraz2008-02-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-02-21 Tomas Mraz <t8m@centrum.cz> * libpam/pam_audit.c (_pam_audit_writelog): Silence syslog message on non-error return. * modules/pam_unix/unix_chkpwd.c (main): Proceed as unprivileged user when checking password of another user. * modules/pam_unix/unix_update.c: Fix comment.
| | * Relevant BUGIDs:Dmitry V. Levin2008-02-18
| | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Rename tst-pam_assemble_line to tst-pam_assemble_line1
| | * Relevant BUGIDs:Dmitry V. Levin2008-02-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-02-18 Dmitry V. Levin <ldv@altlinux.org> * xtests/Makefile.am (EXTRA_DIST): Add tst-pam_assemble_line.pamd and tst-pam_assemble_line.sh
| | * Relevant BUGIDs:Dmitry V. Levin2008-02-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-02-18 Dmitry V. Levin <ldv@altlinux.org> * libpam/pam_handlers.c (_pam_assemble_line): Fix potential buffer overflow. * xtests/tst-pam_assemble_line.pamd: New test for _pam_assemble_line. * xtests/tst-pam_assemble_line.sh: New script for tst-pam_assemble_line. * xtests/Makefile.am (NOSRCTESTS): Add tst-pam_assemble_line.
| | * Relevant BUGIDs:Dmitry V. Levin2008-02-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-02-18 Dmitry V. Levin <ldv@altlinux.org> * modules/pam_exec/pam_exec.c (call_exec): Fix asprintf return code check.
* | | don't use _unix_blankpasswd() when trying to decide whether to pass theSteve Langasek2019-01-03
| | | | | | | | | | | | | | | 'nullok' option to the helper, because _unix_blankpasswd() will itself call in to the helper... instead, check directly for a secure tty.
* | | document a bug closure (bug #382987)Steve Langasek2019-01-03
| | |
* | | language tweakSteve Langasek2019-01-03
| | |
* | | pam_rhosts_auth is dropped upstream; add a compat symlink to pam_rhostsSteve Langasek2019-01-03
| | | | | | | | | | | | to support upgrades for a release, and give a warning in NEWS.Debian.
* | | Fix the libpam0g-dev examples directory to not include a gratuitousSteve Langasek2019-01-03
| | | | | | | | | | | | .cvsignore file.
* | | committed to CVSSteve Langasek2019-01-03
| | |
* | | update the unix_chkpwd override to match the current permsSteve Langasek2019-01-03
| | |
* | | fix up the patch so that pamh isn't undefined...Steve Langasek2019-01-03
| | |
* | | fix patch names so it's clear these are all for pam_unixSteve Langasek2019-01-03
| | |
* | | New patch pam_unix_fix_sgid_shadow_auth.patch, fixing an upstreamSteve Langasek2019-01-03
| | | | | | | | | | | | | | | | | | | | | | | | regression which prevents sgid shadow apps from being able to authenticate any more because the module forces use of the helper and the helper won't allow authentication of arbitrary users. This change does mean we're going to be noisier for the time being in an SELinux environment, which should be addressed but is not a regression on Debian.
* | | not actually done on work time; use the right email addressSteve Langasek2019-01-03
| | |
* | | new symbol in libpam.so.0, pam_modutil_audit_write; shlibs bump, andSteve Langasek2019-01-03
| | | | | | | | | | | | do another round of service restarts on upgrade.
* | | New patch no_helper_for_nis+.patch, which restores the behavior of doingSteve Langasek2019-01-03
| | | | | | | | | | | | | | | in-process NIS+ account checking instead of unconditionally passing it off to the unix_chkpwd helper; if it wasn't broke, don't fix it.
* | | New patch setreuid_juggling.patch: restore the 0.99.9.0 behavior wrt uidSteve Langasek2019-01-03
| | | | | | | | | | | | | | | changes for NIS+, since I know the old behavior was right and don't believe anyone has tested the new code.
* | | debian/watch: upstream has hit 1.0, so we're no longer in a "pre"Steve Langasek2019-01-03
| | | | | | | | | | | | directory. Fix up the regex for uscan.
* | | move the getpwnam patch to the beginning of the series, since it should beSteve Langasek2019-01-03
| | | | | | | | | | | | committed upstream soon
* | | New patch thread-safe_save_old_password.patch, to make sure all ourSteve Langasek2019-01-03
| | | | | | | | | | | | getpwnam() use in pam_unix is thread-safe (fixes an upstream regression)
* | | whack-a-mole: fix a syntax error missed when hand-applying the patchSteve Langasek2019-01-03
| | |
* | | s/name/user/, now that this code is in a different functionSteve Langasek2019-01-03
| | |
* | | another fix-up for a hand-merged patchSteve Langasek2019-01-03
| | |
* | | fix up a typo when hand-applying the patchSteve Langasek2019-01-03
| | |
* | | add a couple of new Makefiles to the autotools patchSteve Langasek2019-01-03
| | |
* | | refresh more patches for new upstream versionSteve Langasek2019-01-03
| | |
* | | no_pthread_mutexes, limits_wrong_strncpy, misc_conv_allow_sigint.patch,Steve Langasek2019-01-03
| | | | | | | | | | | | and pam_tally_audit.patch, which have been merged upstream.
* | | refresh more patches for new upstream versionSteve Langasek2019-01-03
| | |
* | | Drop patch 049_pam_unix_sane_locking, which upon review is not needed;Steve Langasek2019-01-03
| | | | | | | | | | | | | | | it reduces the length of time we hold the lock, but at the expense of being able to enforce minimum times between password changes.
* | | refresh patches for new upstream versionSteve Langasek2019-01-03
| | |
* | | document another Ubuntu bg closureSteve Langasek2019-01-03
| | |
* | | New patch do_not_check_nis_accidentally: respect the 'nis' optionSteve Langasek2019-01-03
| | | | | | | | | | | | | | | | | | (set or unset) when looking up the user's password entry for password changes. Thanks to Quentin Godfroy <godfroy@clipper.ens.fr> for the patch. Closes: #469635.
* | | 026_pam_unix_passwd_unknown_user: drop a redundant, and broken, check forSteve Langasek2019-01-03
| | | | | | | | | | | | | | | the NSS source of our user; this was preventing password changes for NIS users, which otherwise should have worked. Closes: #203222.
* | | refresh patches for new upstream versionSteve Langasek2019-01-03
| | |
* | | refresh patch 007_modules_pam_unix for new upstream version; partiallySteve Langasek2019-01-03
| | | | | | | | | | | | | | | superseded upstream, as stripping of hpux-style expiry information from password fields is now supported.
* | | pam_unix now supports SHA-256 and SHA-512 password hashes.Steve Langasek2019-01-03
| | | | | | | | | | | | Closes: #484249, LP: #245786.
* | | drop a file dropped upstreamSteve Langasek2019-01-03
| | |
* | | revert rhosts_int32_not_bool.patch; doesn't matter now, pam_rhosts_auth hasSteve Langasek2019-01-03
| | | | | | | | | | | | been dropped upstream
* | | Install the new unix_update helper into libpam-modules.Steve Langasek2019-01-03
| | |
* | | The password-changing helper functionality for SELinux systems has beenSteve Langasek2019-01-03
| | | | | | | | | | | | | | | | | | split out into a separate unix_update binary, so at long last we can change unix_chkpwd to be sgid shadow instead of suid root. Closes: #155583.
* | | bump the upstream version numberSteve Langasek2019-01-03
| | |
* | | license updates for new upstream versionSteve Langasek2019-01-03
| | |
* | | merge upstream version 0.99.10.0Steve Langasek2019-01-03
|\| |
| * | New upstream version 0.99.10.0Steve Langasek2019-01-03
| |\|
| | * Relevant BUGIDs:Thorsten Kukuk2008-02-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: prepare release Commit summary: --------------- Missing pieces for a 0.99.10.0 release 2008-02-13 Thorsten Kukuk <kukuk@thkukuk.de> * release version 0.99.10.0 * configure.in: set version number.
| | * Relevant BUGIDs:Thorsten Kukuk2008-02-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-02-13 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_rhosts/Makefile.am: Remove pam_rhosts_auth. * modules/pam_rhosts/pam_rhosts_auth.c: Removed. * modules/pam_rhosts/tst-pam_rhosts_auth: Removed. * modules/pam_namespace/Makefile.am (noinst_HEADERS): Add pam_namespace.h.
| | * Relevant BUGIDs:Tomas Mraz2008-02-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix, new feature Commit summary: --------------- 2008-02-13 Tomas Mraz <t8m@centrum.cz> * modules/pam_namespace/Makefile.am: Add argv_parse files and namespace.d dir. * modules/pam_namespace/argv_parse.c: New file. * modules/pam_namespace/argv_parse.h: New file. * modules/pam_namespace/namespace.conf.5.xml: Document new features. * modules/pam_namespace/pam_namespace.8.xml: Likewise. * modules/pam_namespace/pam_namespace.h: Use SECURECONF_DIR define. Define NAMESPACE_D_DIR and NAMESPACE_D_GLOB. Define new option flags and polydir flags. (polydir_s): Add rdir, replace exclusive with flags, add init_script, owner, group, and mode. (instance_data): Add ruser, gid, and ruid. * modules/pam_namespace/pam_namespace.c: Remove now unused copy_ent(). (add_polydir_entry): Add the entry directly, no copy. (del_polydir): New function. (del_polydir_list): Call del_polydir(). (expand_variables, parse_create_params, parse_iscript_params, parse_method): New functions. (process_line): Call expand_variables() on polydir and instance prefix. Call argv_parse() instead of strtok_r(). Allocate struct polydir_s on heap. (parse_config_file): Parse .conf files from namespace.d dir after namespace.conf. (form_context): Call getcon() or get_default_context_with_level() when appropriate flags are set. (poly_name): Handle shared polydir flag. (inst_init): Execute non-default init script when specified. (create_polydir): New function. (create_dirs): Remove the code which checks the polydir. Do not call inst_init() when noinit flag is set. (ns_setup): Check the polydir and eventually create it if the create flag is set. (setup_namespace): Use ruser uid from idata. Set the namespace polydir pam data only when namespace was set up correctly. Unmount polydir based on ruser. (get_user_data): New function. (pam_sm_open_session): Check for use_current_context and use_default_context options. Call get_user_data(). (pam_sm_close_session): Call get_user_data().
| | * Relevant BUGIDs:Thorsten Kukuk2008-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2008-02-04 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_exec/pam_exec.c: Set PAM environment variables and add 'quiet' option. * modules/pam_exec/pam_exec.8.xml: Document new behavior. Patch from Julien Lecomte <julien@lecomte.at>.
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-25 12:18:07 +0000