summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* Relevant BUGIDs:Thorsten Kukuk2007-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-06-25 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r result for recursive calls. * xtests/Makefile.am: Add new pam_access test cases. * xtests/pam_access1.c: New test case. * xtests/pam_access2.c: Likewise. * xtests/pam_access3.c: Likewise. * xtests/pam_access4.c: Likewise. * xtests/pam_access1.sh: Wrapper to create user accounts. * xtests/pam_access2.sh: Likewise. * xtests/pam_access3.sh: Likewise. * xtests/pam_access4.sh: Likewise. * xtests/pam_access1.pamd: PAM config file for pam_access tests. * xtests/pam_access2.pamd: Likewise. * xtests/pam_access3.pamd: Likewise. * xtests/pam_access4.pamd: Likewise. * xtests/access.conf: Config file for pam_access tests. * xtests/run-tests.sh: Install access.conf into system.
* Relevant BUGIDs:Thorsten Kukuk2007-06-22
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print better error message if /proc/self/loginuid cannot be opened. * modules/pam_limits/pam_limits.c (process_limit): Check for variable overflow after multiplication [bnc#283001].
* Relevant BUGIDs: 411390Thorsten Kukuk2007-06-22
| | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_access/pam_access.c: Add new syntax for groups in access.conf to differentiate group names from account names. Based on patch from Julien Lecomte <julien@famille-lecomte.net>, solves feature request [#411390]. * modules/pam_access/access.conf: Add example for new group syntax. * modules/pam_access/access.conf.5.xml: Document new syntax.
* Relevant BUGIDs: 1688777Thorsten Kukuk2007-06-20
| | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new features Commit summary: --------------- 2007-06-20 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_cracklib/pam_cracklib.8.xml: Document new minclass option. * modules/pam_cracklib/pam_cracklib.c: Add support for minimum character classes [#1688777]. Based on patch from Keith Schincke. * xtests/tst-pam_cracklib2.c: New, test case for minclass option. * xtests/tst-pam_cracklib2.pamd: New, PAM config file for test case. * xtests/Makefile.am: Add new testcase. * xtests/pam_cracklib.c: Fix comment what this application tests. * configure.in: Use /lib64 on x86-64, ppc64, s390x, sparc64
* Relevant BUGIDs:Tomas Mraz2007-06-15
| | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-06-15 Tomas Mraz <t8m@centrum.cz> * configure.in: Check for setkeycreatecon().
* Relevant BUGIDs:Tomas Mraz2007-06-15
| | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2007-06-15 Tomas Mraz <t8m@centrum.cz> * modules/pam_selinux/pam_selinux.8.xml: Remove multiple option, add select_context and use_current_range options. * modules/pam_selinux/pam_selinux.c (send_audit_message): Added function for auditing role/level changes. (query_response): Add default response. (select_context): Removed. (manual_context): Query only role and level. (mls_range_allowed): Added function for range check. (config_context): Added function for role and level override. (pam_sm_open_session): Remove multiple option, add select_context and use_current_range_options. Use getseuserbyname to obtain SELinux user and level. Audit role/level changes. Call setkeycreatecon to assign key creation context. Don't fail on errors when SELinux is not in enforcing mode.
* Relevant BUGIDs:Tomas Mraz2007-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix, new feature Commit summary: --------------- 2007-06-15 Tomas Mraz <t8m@centrum.cz> * modules/pam_namespace/README.xml: Avoid duplication of documentation. * modules/pam_namespace/namespace.conf: More real life example from MLS support. * modules/pam_namespace/namespace.conf.5.xml: Likewise plus properly describe how instance directory names are formed. * modules/pam_namespace/namespace.init: Preserve euid when called from setuid apps (su, newrole). * modules/pam_namespace/pam_namespace.8.xml: Added option no_unmount_on_close. * modules/pam_namespace/pam_namespace.c (process_line): Polyinst methods are now user, level and context. Fix crash on unknown override user in config file. (ns_override): Add explicit uid parameter. (form_context): Skip for user method. Implement level based polyinstantiation. (poly_name): Initialize contexts. Add level based polyinst, remove 'both' metod. Use raw contexts for instance names, truncate long instance names and add hash. (ns_setup): Hashing moved to poly_name(). (setup_namespace): Handle correctly override users for su (when unmnt_remnt is used). (pam_sm_close_session): Added no_unmount_on_close option. * modules/pam_namespace/pam_namespace.h: Added no_unmount_on_close_option, level method, limit on instance directory name length.
* Relevant BUGIDs:Thorsten Kukuk2007-05-04
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-05-04 Thorsten Kukuk <kukuk@suse.de> * xtests/run-xtests.sh: Use SRCDIR to find PAM config files. * xtests/Makefile.am:Call run-xtests.sh with srcdir as first argument. Based on patch by Bernard Leak <thisisnotapipe@hotmail.com>.
* Relevant BUGIDs:Thorsten Kukuk2007-04-30
| | | | | | | | | | | | | Purpose of commit: documentation fix Commit summary: --------------- 2007-04-30 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_limits/limits.conf: Address space limit is KB. * modules/pam_limits/limits.conf.5.xml: Likewise. Reported by Thomas Vander Stichele <thomas@apestaart.org>.
* Relevant BUGIDs: 1706247Thorsten Kukuk2007-04-30
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-04-30 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_mail/pam_mail.c (_do_mail): Remove duplicate check for PAM_SILENT and don't bail out if it is set [#1706247].
* Relevant BUGIDs:Thorsten Kukuk2007-04-06
| | | | | | | | | Purpose of commit: Commit summary: --------------- Fix typos in ChangeLog
* Relevant BUGIDs:Tomas Mraz2007-03-29
| | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- * modules/pam_limits/Makefile.am: Define limits.d dir and install it. * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing. * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr. (pam_parse): conf_file is now ptr. (pam_sm_open_session): Add parsing files from limits.d subdir using glob, change pl to pointer.
* Relevant BUGIDs:Tomas Mraz2007-03-29
| | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2007-03-29 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.c (login_access, list_match): Replace strtok with strtok_r. * modules/pam_cracklib/pam_cracklib.c (check_old_password): Likewise. * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate): Likewise. * modules/pam_unix/pam_unix_passwd.c (check_old_password, save_old_password): Likewise.
* Relevant BUGIDs:Thorsten Kukuk2007-03-12
| | | | | | | | | | | | | | | | | | | Purpose of commit: translations Commit summary: --------------- 2007-03-12 Thorsten Kukuk <kukuk@thkukuk.de> * po/ar.po: New translation. * po/ca.po: Likewise. * po/da.po: Likewise. * po/ru.po: Likewise. * po/sv.po: Likewise. * po/zu.po: Likewise. * po/LINGUAS: Add ar, ca, da, ru, sv, zu * po/hu.po: Update translation.
* Relevant BUGIDs:Tomas Mraz2007-02-21
| | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2007-02-21 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Test for allocation failure in bigcrypt(). * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Allow modification of '*' password by root.
* Relevant BUGIDs:Tomas Mraz2007-02-06
| | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2007-02-06 Tomas Mraz <t8m@centrum.cz> * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Remove debug syslog message when loginuid doesn't exist.
* Relevant BUGIDs:Tomas Mraz2007-02-01
| | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-02-01 Tomas Mraz <t8m@centrum.cz> * xtests/tst-pam_unix3.c: Fix typos in comments. * modules/pam_unix/support.c (_unix_verify_password): Explicitly disallow '!' in the beginning of password hash. Treat only 13 bytes password hash specifically. (Suggested by Solar Designer.) Fix a warning and test for allocation failure. * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
* Relevant BUGIDs:Thorsten Kukuk2007-01-31
| | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2007-01-31 Thorsten Kukuk <kukuk@thkukuk.de> * xtests/Makefile.am: Add new pam_unix.so tests * xtests/run-xtests.sh: Prefer shell scripts (wrapper) over binaries. * xtests/tst-pam_cracklib1.c: Fix typo. * xtests/tst-pam_unix1.c: New, for sucurity fix. * xtests/tst-pam_unix1.pamd: New. * xtests/tst-pam_unix1.sh: New. * xtests/tst-pam_unix2.c: New, for crypt checks. * xtests/tst-pam_unix2.pamd: New. * xtests/tst-pam_unix2.sh: New. * xtests/tst-pam_unix3.c: New, for bigcrypt checks. * xtests/tst-pam_unix3.pamd: New. * xtests/tst-pam_unix3.sh: New.
* Relevant BUGIDs:Thorsten Kukuk2007-01-23
| | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-01-23 Thorsten Kukuk <kukuk@suse.de> * release 0.99.7.1 * configure.in: Set version number to 0.99.7.1 2007-01-23 Thorsten Kukuk <kukuk@thukuk.de> Tomas Mraz <t2m@centrum.cz> * modules/pam_unix/support.c (_unix_verify_password): Always compare full encrypted passwords.
* Relevant BUGIDs:Tomas Mraz2007-01-23
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-01-23 Tomas Mraz <t8m@centrum.cz> * modules/pam_loginuid/Makefile.am (AM_LDFLAGS): Add LIBAUDIT. * modules/pam_selinux/Makefile.am (pam_selinux_check_LDFLAGS): Add AM_LDFLAGS. (pam_selinux_la_LDFLAGS): Likewise.
* Relevant BUGIDs:Thorsten Kukuk2007-01-17
| | | | | | | | | | | | | | | | Purpose of commit: release Commit summary: --------------- 2007-01-17 Thorsten Kukuk <kukuk@thkukuk.de> * release 0.99.7.0 * configure.in: Set version number to 0.99.7.0 * Makefile.am (M4_FILES): Replace GNU make extension by listing all m4 files.
* Relevant BUGIDs:Tomas Mraz2007-01-17
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-07-17 Tomas Mraz <t8m@centrum.cz> * po/*.po: Updated strings to translate. * po/Linux-PAM.pot: Likewise.
* Relevant BUGIDs:Thorsten Kukuk2007-01-16
| | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2007-07-16 Thorsten Kukuk <kukuk@thkukuk.de> * doc/man/pam.conf-syntax.xml: Improve documentation about sufficient keyword (Patch by Petteri Räty <betelgeuse@gentoo.org>)
* Relevant BUGIDs:Thorsten Kukuk2006-12-20
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Don't be more restrictive than useradd for account names: 2006-12-20 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Forbid only '+' and '-' as first characters for account names. * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
* Relevant BUGIDs:Tomas Mraz2006-12-18
| | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-18 Tomas Mraz <t8m@centrum.cz> * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Switch to new egid first, euid next. Revert euid/egid to old euid/egid and not ruid/rgid. (pam_sm_open_session): Switch to new rgid first, ruid next.
* Relevant BUGIDs:Tomas Mraz2006-12-18
| | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Truncated passwords in shadow do not make sense for other variants than bigcrypt. 2006-12-18 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/support.c (_unix_verify_password): Use strncmp only for bigcrypt result.
* Relevant BUGIDs:Thorsten Kukuk2006-12-18
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Fix ENOKEY check (specify errno.h as header file to search in).
* Relevant BUGIDs:Thorsten Kukuk2006-12-18
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Add AM_PROG_CC_C_O. * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS. * modules/pam_tally/Makefile.am: Likewise. * modules/pam_unix/Makefile.am: Likewise.
* Relevant BUGIDs:Thorsten Kukuk2006-12-18
| | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- automake 1.10 ignores AM_LDFLAGS if object specific LDFLAGS are used, too. 2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Add AM_PROG_CC_C_O. * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS. * modules/pam_tally/Makefile.am: Likewise. * modules/pam_unix/Makefile.am: Likewise.
* Relevant BUGIDs:Thorsten Kukuk2006-12-18
| | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_stress/pam_stress.c (pam_sm_chauthtok): Fix localisation of message printed to user. * po/de.po: Adjust translation.
* Relevant BUGIDs:Tomas Mraz2006-12-18
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-18 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Localize message printed to user.
* Relevant BUGIDs: 1606180Thorsten Kukuk2006-12-13
| | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-12-13 Thorsten Kukuk <kukuk@suse.de> * modules/pam_localuser/pam_localuser.c: Add support for session and chauthtok [SF#1606180]. * modules/pam_localuser/pam_localuser.8.xml: Document last change. * libpam/pam_audit.c (_pam_audit_writelog): Print error message only once.
* Relevant BUGIDs:Thorsten Kukuk2006-12-12
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-12 Thorsten Kukuk <kukuk@thkukuk.de> * libpam/pam_audit.c (_pam_audit_writelog): Print error message on failure to syslog.
* Relevant BUGIDs:Thorsten Kukuk2006-12-10
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-09 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_umask/pam_umask.c: Use strtoul instead of strtol, fix overflow detection.
* Relevant BUGIDs:Thorsten Kukuk2006-12-07
| | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-12-06 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_faildelay/pam_faildelay.c: If no argument is given, try to read FAIL_DELAY from /etc/login.defs. * modules/pam_faildelay/pam_faildelay.8.xml: Document usage of /etc/login.defs.
* Relevant BUGIDs: 1591598Thorsten Kukuk2006-12-06
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-06 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_mkhomedir/pam_mkhomedir.c (rec_mkdir): Fix handling of left-most path component [SF#1591598]. (create_homedir): Mark user visible messages for translation. * po/de.po: Adjust german translation for pam_mkhomedir.
* Relevant BUGIDs: rhbz #211438Tomas Mraz2006-12-04
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-12-04 Tomas Mraz <t8m@centrun.cz> * po/jp.po: Fixed mistake in Password: message (from Peng Huang <phuang@redhat.com>).
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de> * po/hu.po: Update hungarian translation (from Kalman Kemenczy <kkemenczy@novell.com>).
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Allow disabling support for cracklib, audit, libdb.
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Add new test case to .cvsignore file
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_faildelay/pam_faildelay.8.xml: Correct name of Author.
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Remove --enable-docdir (obsolete by --docdir). * doc/Makefile.am: Don't overwrite htmldir. * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir. * doc/mwg/Makefile.am: Likewise. * doc/sag/Makefile.am: Likewise. * doc/specs/Makefile.am: Use docdir.
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Remove --enable-docdir (obsolete by --docdir). * doc/Makefile.am: Don't overwrite htmldir. * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir. * doc/mwg/Makefile.am: Likewise. * doc/sag/Makefile.am: Likewise. * doc/specs/Makefile.am: Use docdir.
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- fix last checkin for "make distcheck"
* Relevant BUGIDs:Thorsten Kukuk2006-11-28
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de> * tests/tst-pam_set_data.c: New test cases for pam_set_data(). * tests/Makefile.am: Add pam_set_data test case. * libpam/pam_data.c: Add NULL pointer check for module_data_name. * libpam/Makefile.am: Bump revision of shared library.
* Relevant BUGIDs:Thorsten Kukuk2006-11-08
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- * po/POTFILES.in: Add pam_faildelay.c and pam_loginuid.c.
* Relevant BUGIDs:Thorsten Kukuk2006-11-08
| | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-11-08 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Add modules/pam_faildelay/Makefile. * doc/sag/Linux-PAM_SAG.xml: Include pam_faildelay.xml. * doc/sag/pam_faildelay.xml: New. * libpam/pam_static_modules.h: Include static pam_faildelay data. * modules/Makefile.am: Add pam_faildelay directory. * modules/pam_faildelay/Makefile.am: New. * modules/pam_faildelay/README: New, generated from XML file. * modules/pam_faildelay/README.xml: New. * modules/pam_faildelay/pam_faildelay.8: New, generated from xml. * modules/pam_faildelay/pam_faildelay.8.xml: New. * modules/pam_faildelay/pam_faildelay.c: New. * modules/pam_faildelay/tst-pam_faildelay: New.
* Relevant BUGIDs:Thorsten Kukuk2006-11-07
| | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-11-07 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_cracklib/pam_cracklib.c: PAM_DEBUG_ARG is a bit mask and not a boolean value (Reported by Jochen Voss <voss@seehuhn.de>).
* Relevant BUGIDs:Thorsten Kukuk2006-10-26
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-10-26 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_motd/pam_motd.8.xml: Fix typo.
* Relevant BUGIDs:Thorsten Kukuk2006-10-26
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-10-26 Thorsten Kukuk <kukuk@thkukuk.de> * doc/man/pam.3.xml: Add pam_get_user function.