summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| | * Relevant BUGIDs:Thorsten Kukuk2008-07-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2008-07-09 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_tally/pam_tally.c: Add support for silent and no_log_info options. * modules/pam_tally/pam_tally.8.xml: Document silent and no_log_info options.
| | * Relevant BUGIDs:Thorsten Kukuk2008-07-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-07-08 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/passverify.c (verify_pwd_hash): Adjust debug statement.
| | * Relevant BUGIDs:Thorsten Kukuk2008-06-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-06-22 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/unix_chkpwd.c (main): Fix compiling without audit support. * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo in ucredit description (reported by Wayne Pollock <pollock@acm.org>)
| | * Relevant BUGIDs:Tomas Mraz2008-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-06-19 Tomas Mraz <t8m@centrum.cz> * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate): Detect configuration errors. Fail on incomplete condition.
| | * Relevant BUGIDs:Tomas Mraz2008-05-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-05-20 Tomas Mraz <t8m@centrum.cz> * configure.in: Work correctly with autoconf-2.62.
| | * Relevant BUGIDs:Tomas Mraz2008-05-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-05-19 Tomas Mraz <t8m@centrum.cz> * doc/man/pam_getenv.3.xml: Correct the pam_getenv documentation. * doc/man/pam_prompt.3.xml: Add missing description.
| | * Relevant BUGIDs:Tomas Mraz2008-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: translation Commit summary: --------------- 2008-05-14 Kjartan Maraas <kmaraas@gnome.org> * po/nb.po: Updated translation. 2008-05-14 Sulyok Péter <peti@sulyok.hu> * po/hu.po: Updated translation.
| | * Relevant BUGIDs:Tomas Mraz2008-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-05-14 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/pam_unix_passwd.c(pam_sm_chauthtok): Unset authtok item when password is not approved. * modules/pam_unix/support.c(_unix_read_password): UNIX_USE_FIRST_PASS is always set when UNIX_AUTHTOK is set, change order of conditions.
| | * Relevant BUGIDs:Tomas Mraz2008-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-05-14 Tomas Mraz <t8m@centrum.cz> * libpam/pam_modutil_getgrgid.c: Replace hardcoded constant with define PWD_LENGTH_SHIFT. * libpam/pam_modutil_getgrnam.c: Likewise. * libpam/pam_modutil_getpwnam.c: Likewise. * libpam/pam_modutil_getpwuid.c: Likewise. * libpam/pam_modutil_getspnam.c: Likewise. * libpam/pam_modutil_private.h: Adjust values for PWD_ constants.
| | * Relevant BUGIDs:Tomas Mraz2008-05-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2008-05-02 Tomas Mraz <t8m@centrum.cz> * modules/pam_selinux/pam_selinux.c(query_response): Add handling for NULL response. (manual_context): Handle failed query_response() properly. Rename variable responses to response which is more correct name. (config_context): Likewise. (pam_sm_open_session): Do not base decision on whether there is a tty.
| | * Relevant BUGIDs: rhbz#443667Tomas Mraz2008-04-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-04-22 Tomas Mraz <t8m@centrum.cz> * modules/pam_selinux/pam_selinux.c(pam_sm_close_sesion): Fix regression from the change from 2008-03-20. setexeccon() must be called also with NULL prev_context.
| | * Relevant BUGIDs:Thorsten Kukuk2008-04-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-04-21 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_access/access.conf.5.xml: Document changed behavior of LOCAL keyword. * modules/pam_access/pam_access.c: Add from_remote_host to struct login_info to change behavior of LOCAL keyword: if PAM_RHOST is not set, LOCAL will be true.
| | * Relevant BUGIDs:Tomas Mraz2008-04-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2008-04-18 Tomas Mraz <t8m@centrum.cz> * modules/pam_namespace/pam_namespace.c: New functions unprotect_dirs(), cleanup_protect_data(), protect_mount(), protect_dir() to protect directory by bind mount. (cleanup_data): Renamed to cleanup_polydir_data(). (parse_create_params): Allow missing specification of mode or owner. (check_inst_parent): Call protect_dir() on the instance parent directory. The directory is created when it doesn't exist. (create_polydir): Protect and make the polydir by protect_dir(), remove potential races. (create_dirs): Renamed to create_instance(), remove call to inst_init(). (ns_setup): Call protect_dir() on the polydir if it already exists. Call inst_init() after the polydir is mounted. (setup_namespace): Set the namespace protect data to be cleaned up on pam_close_session()/pam_end(). (pam_sm_open_session): Initialize the protect_dirs. (pam_sm_close_session): Cleanup namespace protect data. * modules/pam_namespace/pam_namespace.h: Define struct for the stack of protected dirs. * modules/pam_namespace/pam_namespace.8.xml: Document when the instance init script is called. * modules/pam_namespace/namespace.conf.5.xml: Likewise.
| | * Relevant BUGIDs:Tomas Mraz2008-04-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-04-17 Tomas Mraz <t8m@centrum.cz> * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try to lock if euid != 0.
| | * Relevant BUGIDs:Tomas Mraz2008-04-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-04-17 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.c(myhostname): Removed function. (user_match): Supply hostname of the machine to the netgroup_match(). Use hostname from the loginfo instead of calling myhostname(). (pam_sm_authenticate): Call gethostname() to fill hostname in the loginfo.
| | * Relevant BUGIDs:Tomas Mraz2008-04-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2008-04-16 Tomas Mraz <t8m@centrum.cz> * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Recognize also try_first_pass and use_first_pass options. (pam_sm_chauthtok): Implement the new options.
| | * Relevant BUGIDs:Tomas Mraz2008-04-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2008-04-16 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/Makefile.am: Link unix_chkpwd with libaudit. * modules/pam_unix/unix_chkpwd.c(_audit_log): New function for audit. (main): Call _audit_log() when appropriate.
| | * Relevant BUGIDs:Tomas Mraz2008-04-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-04-08 Tomas Mraz <t8m@centrum.cz> * libpam/pam_item.c (TRY_SET): Do not set when destination is identical to source. (pam_set_item): Do not overwrite destination when it is identical to source.
| | * Relevant BUGIDs:Tomas Mraz2008-04-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2008-04-08 Tomas Mraz <t8m@centrum.cz> * modules/pam_xauth/pam_xauth.c(run_coprocess): Avoid multiple calls to sysconf() (based on patch by Sami Farin).
* | | releasing version 1.0.1-11Steve Langasek2019-01-08
| | |
* | | further Portuguese debconf revisionSteve Langasek2019-01-08
| | |
* | | Russian, thanks to Yuri Kozlov <yuray@komyakino.ru> (closes: #541094)Steve Langasek2019-01-08
| | |
* | | Portuguese, thanks to Américo Monteiro <a_monteiro@netcabo.pt>Steve Langasek2019-01-08
| | | | | | | | | | | | (closes: #541108)
* | | * Updated debconf translations:Steve Langasek2019-01-08
| | | | | | | | | | | | - Swedish, thanks to Martin Bagge <brother@bsnet.se> (closes: #541399)
* | | debian/libpam-runtime.templates: correctly tag the URL as aSteve Langasek2019-01-08
| | | | | | | | | | | | non-translatable string.
* | | Clean up the PAM mini-policy, which hasn't been touched in a number ofSteve Langasek2019-01-08
| | | | | | | | | | | | years and was looking a bit crufty
* | | s/lenny/squeeze/Steve Langasek2019-01-08
| | |
* | | consistent capitalizationSteve Langasek2019-01-08
| | |
* | | drop references to pam_stack, which is long deadSteve Langasek2019-01-08
| | |
* | | proofread / reflow the mini-policySteve Langasek2019-01-08
| | |
* | | document common-session-noninteractive in the Debian PAM policySteve Langasek2019-01-08
| | |
* | | add a comment to the md5sum so we know what version it's fromSteve Langasek2019-01-08
| | |
* | | debian/local/pam-auth-update: prune md5sums for unsupported upgradeSteve Langasek2019-01-08
| | | | | | | | | | | | paths (intrepid pre-release -> karmic/lenny)
* | | debian/local/common-session-noninteractive{,.md5sums},Steve Langasek2019-01-08
| | | | | | | | | | | | | | | | | | | | | debian/local/pam-auth-update: split out a session-noninteractive include file, so that we can at last distinguish between interactive and non-interactive PAM sessions at a policy level. Closes: #169930, LP: #287715.
* | | debian/local/common-{auth,account,session,password}.md5sums: documentSteve Langasek2019-01-08
| | | | | | | | | | | | the known md5sums for the new managed files.
* | | debian/libpam-runtime.postinst: bump the --force version check toSteve Langasek2019-01-08
| | | | | | | | | | | | | | | | | | 1.0.1-11, to allow for a new common-session-noninteractive config file; and include md5sum checking logic that will work the same with old unmanaged and new managed /etc/pam.d/common-* files.
* | | releasing version 1.0.1-10Steve Langasek2019-01-08
| | |
* | | set correct changelog urgency for security fixSteve Langasek2019-01-08
| | |
* | | use the error template type, not the obsolete note typeSteve Langasek2019-01-08
| | |
* | | Tweak the language in the new debconf template to my own tastes (hopefullySteve Langasek2019-01-08
| | | | | | | | | | | | | | | | | | this won't require too many round-trips between me and Sam ;), and call debconf-updatepo to make this template available for translation.
* | | Fix the config error *first* to limit the window of exposure as much asSteve Langasek2019-01-08
| | | | | | | | | | | | | | | possible, /then/ display the debconf error which may block the upgrade.
* | | Per discussion with Steve, move security note fromSam Hartman2019-01-08
| | | | | | | | | | | | | | | libpam-runtime.config to postinst.
* | | Load the confmodule in postinst so the config script runsSam Hartman2019-01-08
| | |
* | | On upgrades from 1.0.1-5 through 1.0.1-10 raise an alarm if we detectSam Hartman2019-01-08
| | | | | | | | | | | | | | | no profiles enabled.
* | | Straw man template for the note indicating system compromise.Sam Hartman2019-01-08
| | | | | | | | | | | | | | | Currently this is not tied into the debconf machinery
* | | Merge Steve's pam-auth-update changes with my cve patchSam Hartman2019-01-08
|\ \ \
| * | | When no profiles are chosen in pam-auth-update, throw an error messageSteve Langasek2019-01-08
| | | | | | | | | | | | | | | | | | | | and prompt again instead of letting the user end up with an insecure system. This introduces a new debconf template. Closes: #519927.
* | | | cve-2009-0887-libpam-pam_misc.patch: avoid integer signedness problemSam Hartman2019-01-08
|/ / / | | | | | | | | | (CVE-2009-0887) (Closes: #520115)
* | | Merge debian sid branchSam Hartman2019-01-08
|\ \ \
| * | | get the patch name into the changelog entrySteve Langasek2019-01-08
| | | |
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-30 15:56:55 +0000