summaryrefslogtreecommitdiff
path: root/modules/pam_limits/pam_limits.c
Commit message (Collapse)AuthorAge
* Relevant BUGIDs:Tomas Mraz2007-12-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature and cleanup Commit summary: --------------- 2007-12-07 Tomas Mraz <t8m@centrum.cz> * libpam/libpam.map: Add LIBPAM_MODUTIL_1.1 version. * libpam/pam_audit.c: Add _pam_audit_open() and pam_modutil_audit_write(). (_pam_auditlog): Call _pam_audit_open(). * libpam/include/security/pam_modutil.h: Add pam_modutil_audit_write(). * modules/pam_access/pam_access.8.xml: Add noaudit option. Document auditing. * modules/pam_access/pam_access.c: Move fs, sep, pam_access_debug, and only_new_group_syntax variables to struct login_info. Add noaudit member. (_parse_args): Adjust for the move of variables and add support for noaudit option. (group_match): Add debug parameter. (string_match): Likewise. (network_netmask_match): Likewise. (login_access): Adjust for the move of variables. Add nonall_match. Add call to pam_modutil_audit_write(). (list_match): Adjust for the move of variables. (user_match): Likewise. (from_match): Likewise. (pam_sm_authenticate): Call _parse_args() earlier. * modules/pam_limits/pam_limits.8.xml: Add noaudit option. Document auditing. * modules/pam_limits/pam_limits.c (_pam_parse): Add noaudit option. (setup_limits): Call pam_modutil_audit_write(). * modules/pam_time/pam_time.8.xml: Add debug and noaudit options. Document auditing. * modules/pam_time/pam_time.c: Add option parsing (_pam_parse()). (check_account): Call _pam_parse(). Call pam_modutil_audit_write() and pam_syslog() on login denials.
* Relevant BUGIDs: Debian bug #331278Steve Langasek2007-09-03
| | | | | | | | | | | | Purpose of commit: bugfix/cleanup Commit summary: --------------- 2007-09-03 Steve Langasek <vorlon@debian.org> * modules/pam_limits/pam_limits.c: remove a number of unnecessary string manipulations, including a strncpy() that was acting on overlapping memory.
* Relevant BUGIDs: Debian bugs #76119, #165066Steve Langasek2007-08-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: portability Commit summary: --------------- 2007-08-27 Steve Langasek <vorlon@debian.org> * modules/pam_limits/pam_limits.c: when building on non-Linux systems, give a warning only, not an error; no one seems to remember why this error was here in the first place, but leave something in that might still grab the attention of non-Linux users. Patch from Michal Suchanek <hramrach_l@centrum.cz>. * configure.in, modules/pam_rhosts/pam_rhosts_auth.c: check for the presence of net/if.h before using, required for Hurd compatibility. Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>. * modules/pam_limits/pam_limits.c: conditionalize the use of RLIMIT_AS, which is not present on the Hurd. Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>. * modules/pam_rhosts/pam_rhosts_auth.c: use getline() instead of a static buffer when available; fixes the build on systems without MAXHOSTNAMELEN (i.e., the Hurd). * modules/pam_xauth/pam_xauth.c: make sure PATH_MAX is defined before using it.
* Relevant BUGIDs:Thorsten Kukuk2007-07-10
| | | | | | | | | | | | | | | Purpose of commit: bugfix/new feature Commit summary: --------------- 2007-07-10 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Add --with-db-uniquename option to support db libraries and functions with unique name extension. Patch from Diego 'Flameeyes' Pettenò <flameeyes@gmail.com>. * modules/pam_limits/pam_limits.c: Include locale.h.
* Relevant BUGIDs:Thorsten Kukuk2007-06-26
| | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-06-26 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_limits/pam_limits.c (process_limit): Check upper and lower limit of nice value, fix off-by-one in conversation to rlim_t. * xtests/Makefile.am: Add new pam_limits test case. * xtests/limits.conf: New, config file for test case. * xtests/pam_limits1.c: New, test case for RLIMIT_NICE. * xtests/pam_limits1.sh: Likewise. * xtests/pam_limits1.pamd: Likewise.
* Relevant BUGIDs:Thorsten Kukuk2007-06-22
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print better error message if /proc/self/loginuid cannot be opened. * modules/pam_limits/pam_limits.c (process_limit): Check for variable overflow after multiplication [bnc#283001].
* Relevant BUGIDs:Tomas Mraz2007-03-29
| | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- * modules/pam_limits/Makefile.am: Define limits.d dir and install it. * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing. * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr. (pam_parse): conf_file is now ptr. (pam_sm_open_session): Add parsing files from limits.d subdir using glob, change pl to pointer.
* Relevant BUGIDs:Thorsten Kukuk2006-08-05
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2006-08-05 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use pam_modutil_getpwnam instead of getpwnam.
* Relevant BUGIDs:Thorsten Kukuk2006-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfixes Commit summary: --------------- 2006-07-24 Thorsten Kukuk <kukuk@thkukuk.de> * doc/adg/Makefile.am: Add uninstall and distclean rules. * doc/mwg/Makefile.am: Likewise. * doc/sag/Makefile.am: Likewise. 2006-07-08 Daniel Richard G. <skunk@iskunk.org> * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files. * conf/pam_conv1/pam_conv.lex: Rename to ... * conf/pam_conv1/pam_conv_l.l: ... this. * conf/pam_conv1/pam_conv.y: Rename to ... * conf/pam_conv1/pam_conv_y.y: ... this. * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE() calls. * doc/Makefile.am: Fix rule to install index.html. * doc/adg/Makefile.am: Fix test usage. * doc/mwg/Makefile.am: Likewise. * doc/sag/Makefile.am: Likewise. * doc/specs/Makefile.am: Fix rules for lex and yacc files. * specs/parse.lex: Rename to ... * doc/specs/parse_l.l: ... this. * doc/specs/parse.y: Rename to ... * doc/specs/parse_y.y: ... this. * libpam/pam_account.c: Fix #if vs. #ifdef. * libpam/pam_audit.c: Likewise. * libpam/pam_auth.c: Likewise. * libpam/pam_password.c: Likewise. * libpam/pam_private.h: Likewise. * libpam/pam_session.c: Likewise. * libpam/pam_start.c: Likewise. * libpam/pam_static.c: Fix "empty sourcefile" warning. * modules/pam_limits/pam_limits.c: Check for __linux, too. * modules/pam_userdb/Makefile.am: Don't run test if no libdb available. * tests/tst-dlopen.c: Include config.h.
* Relevant BUGIDs:Thorsten Kukuk2006-06-23
| | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Bring implementation in sync with documentation: 2006-06-24 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_limits/pam_limits.c (setup_limits): Don't reset priority for root.
* Relevant BUGIDs:Thorsten Kukuk2006-06-17
| | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-06-17 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_limits/Makefile.am: Include Make.xml.rules. * modules/pam_limits/limits.conf.5: New, generated from xml file. * modules/pam_limits/limits.conf.5.xml: New. * modules/pam_limits/pam_limits.8: New, generated from xml file. * modules/pam_limits/pam_limits.8.xml: New. * modules/pam_limits/README.xml: New. * modules/pam_limits/README: Regenerated from README.xml.
* Relevant BUGIDs:Tomas Mraz2005-09-21
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- Moved functions from pammodutil to libpam.
* Relevant BUGIDs:Thorsten Kukuk2005-09-20
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- cleanup from ldv (forgot to commit...)
* Relevant BUGIDs: Red Hat bz 168790Tomas Mraz2005-09-20
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_limits: Fix regression from RLIMIT_NICE support (wrong limit values for other limits are applied) patch by Anton Guda
* Relevant BUGIDs: noneThorsten Kukuk2005-09-05
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Use pam_syslog instead of _pam_log
* Relevant BUGIDs: noneThorsten Kukuk2005-08-23
| | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Change major version number back to "0". Add more patches from ALT-Linux/OWL:
* Relevant BUGIDs: noneThorsten Kukuk2005-08-16
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Big "automake/autoconf/libtool" commit
* Relevant BUGIDs: noneThorsten Kukuk2005-07-20
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Rename _pam_aconf.h to config.h.
* Relevant BUGIDs: mail reportThorsten Kukuk2005-07-06
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Don't lowercase login names. Using uppercase login names is a bad idea, but people are doing it.
* Relevant BUGIDs:Tomas Mraz2005-07-04
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Improve the RLIMIT_NICE support so the input values are in the nice range -20..19
* Relevant BUGIDs:Tomas Mraz2005-06-22
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- pam_limits: Support new limits in linux 2.6.12
* Relevant BUGIDs: Novell #81690Thorsten Kukuk2005-06-07
| | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- If the process priority is not specified in the limits.conf file, pam_limits should not reset the current one to zero.
* Relevant BUGIDs: 945449Tomas Mraz2005-05-16
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Correct support of unlimited limits, use the right type for rlimit value.
* Relevant BUGIDs: mailThorsten Kukuk2005-02-21
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- The following reported by mail was fixed: "I've been in trouble using the '%group' feature in the limits.conf file. There are priorities when settings the limits and the order is as enumerated here. The problem is that the initial value is LIMITS_DEF_NONE, so neither LIMITS_DEF_ALL nor LIMITS_DEF_ALLGROUP can ever be set."
* Relevant BUGIDs: Red Hat bz 131190Tomas Mraz2005-01-07
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- Support new limits of Linux kernel 2.6
* Relevant BUGIDs:Tomas Mraz2004-11-04
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Make limiting logins for users in a group actually work
* Relevant BUGIDs:Tomas Mraz2004-11-04
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Revert the change in previous pam_limits.c commit it's already compensated by count=1 assignment
* Relevant BUGIDs:Thorsten Kukuk2004-10-06
| | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: Last part of fixes from Red Hat
* Relevant BUGIDs:Thorsten Kukuk2004-09-24
| | | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: 440107: Add various patches from Linux Distibutors to make PAM modules reentrant.
* Relevant BUGIDs:Thorsten Kukuk2004-09-24
| | | | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: Fix lot of compiler warnings new feature: add broken_shadow option to pam_unix (patch from Linux distributions)
* Relevant BUGIDs:Thorsten Kukuk2004-09-22
| | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: Add rest of Steve Grubb's resource leak and other fixes
* Relevant BUGIDs: 533664Jan Rekorajski2002-05-09
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all)
* Relevant BUGIDs: 533668Jan Rekorajski2002-05-07
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- put not so interesting log messages under debug arg
* Relevant BUGIDs: 533664Jan Rekorajski2002-05-07
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- keep well know behaviour of maxlogins default ('*') limit
* Relevant BUGIDs: 530428Jan Rekorajski2002-03-15
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_limits didn't the priority value specified in config.
* Relevant BUGIDs: 493294Andrew G. Morgan2002-01-19
| | | | | | | | | | | | Purpose of commit: bugfix and document Commit summary: --------------- The login limit counting seemed to have its math incorrect. The default has been changed to the sane one, and a new module argument has been added "utmp_early" that returns the module to its old behavior. Thanks to Berend De Schouwe for getting to the bottom of this issue.
* Relevant BUGIDs: 476990Andrew G. Morgan2001-11-11
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- support -ve process priorities (and include superuser in this feature)
* Relevant BUGIDs: 436061Andrew G. Morgan2001-06-27
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Harald Welte poured over the Red Hat version and submitted the outstanding diff.
* Relevant BUGIDs: 424060Andrew G. Morgan2001-06-24
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- latest attempt to deal with the number of rlimits supported by Linux. (Last attempt was the fix for Bug 219554 (ne 119554).
* Relevant BUGIDs: 404953Andrew G. Morgan2001-03-29
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- The syntax "<domain> -" was not recognized.
* Relevant BUGIDs: 124062Jan Rekorajski2000-12-01
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- add change_uid option to pam_limits, and set real uid only if this option is present
* Relevant BUGIDs: 123972Jan Rekorajski2000-11-30
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- set real uid to the user for who we set limits
* Relevant BUGIDs: 117450Andrew G. Morgan2000-11-26
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- removed static variables from pam_limits.
* Relevant BUGIDs: 119554Andrew G. Morgan2000-11-25
| | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- The pam_limits module did not allow support for a changed number of limits recognized by the kernel. Bug identified and resolved by Adam J. Richter of Yggdrasil.
* Relevant BUGIDs: task 15788, bugs 108297, 117476, 117474Andrew G. Morgan2000-11-19
| | | | | | | | | | | | | | Purpose of commit: autoconf support for Linux-PAM Commit summary: --------------- This is a merge of the autoconf support that was developed against a 0-72 branch. [Note, because CVS has some issues, this is actually only 95% of the actual commit. The other files were actually committed when the preparation branch Linux-PAM-0-73pre-autoconf was updated. Hopefully, this will complete the merge.]
* Initial revisionAndrew G. Morgan2000-06-20
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-25 09:57:51 +0000