granicus.if.org Git - linux-pam/blob - ChangeLog

   1 2007-08-25  Steve Langasek  <vorlon@debian.org>
   2
   3         * doc/man/pam.conf-syntax.xml, doc/man/pam.conf.5:
   4         Document "new" control options conv_again and incomplete, supported
   5         in pam.d's extended syntax.
   6         Patch from Ben Collins <bcollins@debian.org>.
   7
   8 2007-08-15  Tomas Mraz  <t8m@centrum.cz>
   9
  10         * modules/pam_access/pam_access.c (list_match): Add explicit
  11         sptr argument for strtok_r, otherwise the code is not portable.
  12
  13 2007-08-13  Olivier Blin <blino@mandriva.com>
  14
  15         * doc/man/pam.3.xml: Fix typo.
  16         * doc/man/pam.3: Likewise.
  17         * doc/man/pam_end.3.xml: Likewise.
  18         * doc/man/pam_end.3: Likewise.
  19
  20 2007-07-18  Thorsten Kukuk  <kukuk@thkukuk.de>
  21
  22         * release version 0.99.8.1
  23
  24         * libpam/pam_audit.c: Include unistd.h for getuid().
  25         * libpam/Makefile.am: Bump version number.
  26
  27 2007-07-12  Thorsten Kukuk  <kukuk@thkukuk.de>
  28
  29         * libpam/pam_audit.c (_pam_audit_writelog): Don't return
  30         error if application runs as normal user. Fixes regression
  31         introduced with last change.
  32
  33 2007-07-10  Thorsten Kukuk  <kukuk@thkukuk.de>
  34
  35         * configure.in: Add --with-db-uniquename option to support
  36         db libraries and functions with unique name extension.
  37         Patch from Diego 'Flameeyes' Pettenò <flameeyes@gmail.com>.
  38
  39         * modules/pam_limits/pam_limits.c: Include locale.h.
  40
  41 2007-07-06  Thorsten Kukuk  <kukuk@thkukuk.de>
  42
  43         * release version 0.99.8.0
  44
  45         * configure.in: Check for audit_log_acct_message instead of
  46         audit_log_user_message.
  47         * libpam/pam_audit.c: Use audit_log_acct_message.
  48         Based on patch from Mark J Cox <mjc@redhat.com>.
  49         * libpam/Makefile.am: Bump version number of libpam.
  50
  51         * modules/pam_umask/pam_umask.c (set_umask): mode_t is 32bit,
  52         not 64bit.
  53
  54         * xtests/tst-pam_limits1.c: Fix printf arguments.
  55
  56         * po/*.po: Merge po files with latest code changes.
  57
  58 2007-06-26  Thorsten Kukuk  <kukuk@thkukuk.de>
  59
  60         * modules/pam_limits/pam_limits.c (process_limit): Check upper and
  61         lower limit of nice value, fix off-by-one in conversation to rlim_t.
  62         * xtests/Makefile.am: Add new pam_limits test case.
  63         * xtests/limits.conf: New, config file for test case.
  64         * xtests/pam_limits1.c: New, test case for RLIMIT_NICE.
  65         * xtests/pam_limits1.sh: Likewise.
  66         * xtests/pam_limits1.pamd: Likewise.
  67
  68 2007-06-25  Thorsten Kukuk  <kukuk@thkukuk.de>
  69
  70         * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r
  71         result for recursive calls.
  72         * xtests/Makefile.am: Add new pam_access test cases.
  73         * xtests/pam_access1.c: New test case.
  74         * xtests/pam_access2.c: Likewise.
  75         * xtests/pam_access3.c: Likewise.
  76         * xtests/pam_access4.c: Likewise.
  77         * xtests/pam_access1.sh: Wrapper to create user accounts.
  78         * xtests/pam_access2.sh: Likewise.
  79         * xtests/pam_access3.sh: Likewise.
  80         * xtests/pam_access4.sh: Likewise.
  81         * xtests/pam_access1.pamd: PAM config file for pam_access tests.
  82         * xtests/pam_access2.pamd: Likewise.
  83         * xtests/pam_access3.pamd: Likewise.
  84         * xtests/pam_access4.pamd: Likewise.
  85         * xtests/access.conf: Config file for pam_access tests.
  86         * xtests/run-tests.sh: Install access.conf into system.
  87
  88 2007-06-22  Thorsten Kukuk  <kukuk@thkukuk.de>
  89
  90         * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print
  91         better error message if /proc/self/loginuid cannot be opened.
  92
  93         * modules/pam_limits/pam_limits.c (process_limit): Check for
  94         variable overflow after multiplication [bnc#283001].
  95
  96         * modules/pam_access/pam_access.c: Add new syntax for groups
  97         in access.conf to differentiate group names from account names.
  98         Based on patch from Julien Lecomte <julien@famille-lecomte.net>,
  99         solves feature request [#411390].
 100         * modules/pam_access/access.conf: Add example for new group
 101         syntax.
 102         * modules/pam_access/access.conf.5.xml: Document new syntax.
 103
 104 2007-06-20  Thorsten Kukuk  <kukuk@thkukuk.de>
 105
 106         * modules/pam_cracklib/pam_cracklib.8.xml: Document new minclass
 107         option.
 108         * modules/pam_cracklib/pam_cracklib.c: Add support for minimum
 109         character classes [#1688777]. Based on patch from Keith Schincke.
 110
 111         * xtests/tst-pam_cracklib2.c: New, test case for minclass option.
 112         * xtests/tst-pam_cracklib2.pamd: New, PAM config file for test case.
 113         * xtests/Makefile.am: Add new testcase.
 114
 115         * xtests/pam_cracklib.c: Fix comment what this application tests.
 116
 117         * configure.in: Use /lib64 on x86-64, ppc64, s390x, sparc64
 118
 119 2007-06-15  Tomas Mraz  <t8m@centrum.cz>
 120
 121         * modules/pam_selinux/pam_selinux.8.xml: Remove multiple option,
 122         add select_context and use_current_range options.
 123         * modules/pam_selinux/pam_selinux.c (send_audit_message): Added
 124         function for auditing role/level changes.
 125         (query_response): Add default response.
 126         (select_context): Removed.
 127         (manual_context): Query only role and level.
 128         (mls_range_allowed): Added function for range check.
 129         (config_context): Added function for role and level override.
 130         (pam_sm_open_session): Remove multiple option, add select_context
 131         and use_current_range_options. Use getseuserbyname to obtain
 132         SELinux user and level. Audit role/level changes. Call setkeycreatecon
 133         to assign key creation context. Don't fail on errors when SELinux
 134         is not in enforcing mode.
 135         * configure.in: Check for setkeycreatecon().
 136
 137         * modules/pam_namespace/README.xml: Avoid duplication of
 138         documentation.
 139         * modules/pam_namespace/namespace.conf: More real life example
 140         from MLS support.
 141         * modules/pam_namespace/namespace.conf.5.xml: Likewise plus
 142         properly describe how instance directory names are formed.
 143         * modules/pam_namespace/namespace.init: Preserve euid when
 144         called from setuid apps (su, newrole).
 145         * modules/pam_namespace/pam_namespace.8.xml: Added option
 146         no_unmount_on_close.
 147         * modules/pam_namespace/pam_namespace.c (process_line): Polyinst
 148         methods are now user, level and context. Fix crash on unknown
 149         override user in config file.
 150         (ns_override): Add explicit uid parameter.
 151         (form_context): Skip for user method. Implement level based
 152         polyinstantiation.
 153         (poly_name): Initialize contexts. Add level based polyinst,
 154         remove 'both' metod. Use raw contexts for instance names,
 155         truncate long instance names and add hash.
 156         (ns_setup): Hashing moved to poly_name().
 157         (setup_namespace): Handle correctly override users for
 158         su (when unmnt_remnt is used).
 159         (pam_sm_close_session): Added no_unmount_on_close option.
 160         * modules/pam_namespace/pam_namespace.h: Added
 161         no_unmount_on_close_option, level method, limit on instance
 162         directory name length.
 163
 164 2007-05-04  Thorsten Kukuk  <kukuk@suse.de>
 165
 166         * xtests/run-xtests.sh: Use SRCDIR to find PAM config files.
 167         * xtests/Makefile.am: Call run-xtests.sh with srcdir as first
 168         argument.
 169         Based on patch by Bernard Leak <thisisnotapipe@hotmail.com>.
 170
 171 2007-04-30  Thorsten Kukuk  <kukuk@thkukuk.de>
 172
 173         * modules/pam_limits/limits.conf: Address space limit is KB.
 174         * modules/pam_limits/limits.conf.5.xml: Likewise.
 175         Reported by Thomas Vander Stichele <thomas@apestaart.org>.
 176
 177         * modules/pam_mail/pam_mail.c (_do_mail): Remove duplicate
 178         check for PAM_SILENT and don't bail out if it is set [#1706247].
 179
 180 2007-03-29  Tomas Mraz  <t8m@centrum.cz>
 181
 182         * modules/pam_access/pam_access.c (login_access, list_match):
 183         Replace strtok with strtok_r.
 184         * modules/pam_cracklib/pam_cracklib.c (check_old_password):
 185         Likewise.
 186         * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate):
 187         Likewise.
 188         * modules/pam_unix/pam_unix_passwd.c (check_old_password,
 189         save_old_password): Likewise.
 190
 191         * modules/pam_limits/Makefile.am: Define limits.d dir and install it.
 192         * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing.
 193         * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr.
 194         (pam_parse): conf_file is now ptr.
 195         (pam_sm_open_session): Add parsing files from limits.d subdir using
 196         glob, change pl to pointer.
 197
 198 2007-03-12  Thorsten Kukuk  <kukuk@thkukuk.de>
 199
 200         * po/ar.po: New translation.
 201         * po/ca.po: Likewise.
 202         * po/da.po: Likewise.
 203         * po/ru.po: Likewise.
 204         * po/sv.po: Likewise.
 205         * po/zu.po: Likewise.
 206         * po/LINGUAS: Add ar, ca, da, ru, sv, zu
 207
 208         * po/hu.po: Update translation.
 209
 210 2007-02-21  Tomas Mraz  <t8m@centrum.cz>
 211
 212         * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Test for
 213         allocation failure in bigcrypt().
 214
 215         * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Allow
 216         modification of '*' password by root.
 217
 218 2007-02-06  Tomas Mraz  <t8m@centrum.cz>
 219
 220         * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Remove
 221         debug syslog message when loginuid doesn't exist.
 222
 223 2007-02-01  Tomas Mraz  <t8m@centrum.cz>
 224
 225         * xtests/tst-pam_unix3.c: Fix typos in comments.
 226
 227         * modules/pam_unix/support.c (_unix_verify_password): Explicitly
 228         disallow '!' in the beginning of password hash. Treat only
 229         13 bytes password hash specifically. (Suggested by Solar Designer.)
 230         Fix a warning and test for allocation failure.
 231         * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
 232
 233 2007-01-31  Thorsten Kukuk  <kukuk@thkukuk.de>
 234
 235         * xtests/Makefile.am: Add new pam_unix.so tests
 236         * xtests/run-xtests.sh: Prefer shell scripts (wrapper)
 237         over binaries.
 238         * xtests/tst-pam_cracklib1.c: Fix typo.
 239         * xtests/tst-pam_unix1.c: New, for sucurity fix.
 240         * xtests/tst-pam_unix1.pamd: New.
 241         * xtests/tst-pam_unix1.sh: New.
 242         * xtests/tst-pam_unix2.c: New, for crypt checks.
 243         * xtests/tst-pam_unix2.pamd: New.
 244         * xtests/tst-pam_unix2.sh: New.
 245         * xtests/tst-pam_unix3.c: New, for bigcrypt checks.
 246         * xtests/tst-pam_unix3.pamd: New.
 247         * xtests/tst-pam_unix3.sh: New.
 248
 249 2007-01-23  Thorsten Kukuk  <kukuk@suse.de>
 250
 251         * release 0.99.7.1
 252
 253         * configure.in: Set version number to 0.99.7.1
 254
 255 2007-01-23  Thorsten Kukuk  <kukuk@thukuk.de>
 256             Tomas Mraz  <t8m@centrum.cz>
 257
 258         * modules/pam_unix/support.c (_unix_verify_password): Always
 259         compare full encrypted passwords (CVE-2007-0003).
 260
 261 2007-01-23  Tomas Mraz  <t8m@centrum.cz>
 262
 263         * modules/pam_loginuid/Makefile.am (AM_LDFLAGS): Add LIBAUDIT.
 264
 265         * modules/pam_selinux/Makefile.am (pam_selinux_check_LDFLAGS): Add
 266         AM_LDFLAGS.
 267         (pam_selinux_la_LDFLAGS): Likewise.
 268
 269 2007-01-17  Thorsten Kukuk  <kukuk@thkukuk.de>
 270
 271         * release 0.99.7.0
 272
 273         * configure.in: Set version number to 0.99.7.0
 274
 275         * Makefile.am (M4_FILES): Replace GNU make extension by listing
 276         all m4 files.
 277
 278 2007-01-17  Tomas Mraz  <t8m@centrum.cz>
 279
 280         * po/*.po: Updated strings to translate.
 281         * po/Linux-PAM.pot: Likewise.
 282
 283 2007-01-16  Thorsten Kukuk  <kukuk@thkukuk.de>
 284
 285         * doc/man/pam.conf-syntax.xml: Improve documentation about
 286         sufficient keyword (Patch by Petteri Räty <betelgeuse@gentoo.org>)
 287
 288 2006-12-20  Thorsten Kukuk  <kukuk@thkukuk.de>
 289
 290         * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Forbid
 291         only '+' and '-' as first characters for account names.
 292         * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
 293
 294 2006-12-18  Thorsten Kukuk  <kukuk@thkukuk.de>
 295
 296         * configure.in: Fix ENOKEY check (specify errno.h as header
 297         file to search in).
 298
 299         * configure.in: Add AM_PROG_CC_C_O.
 300         * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS.
 301         * modules/pam_tally/Makefile.am: Likewise.
 302         * modules/pam_unix/Makefile.am: Likewise.
 303
 304         * modules/pam_stress/pam_stress.c (pam_sm_chauthtok): Fix
 305         localisation of message printed to user.
 306         * po/de.po: Adjust translation.
 307
 308 2006-12-18  Tomas Mraz  <t8m@centrum.cz>
 309
 310         * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Localize
 311         message printed to user.
 312
 313         * modules/pam_unix/support.c (_unix_verify_password): Use strncmp
 314         only for bigcrypt result.
 315
 316         * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Switch to new
 317         egid first, euid next. Revert euid/egid to old euid/egid and not
 318         ruid/rgid.
 319         (pam_sm_open_session): Switch to new rgid first, ruid next.
 320
 321 2006-12-13  Thorsten Kukuk  <kukuk@thkukuk.de>
 322
 323         * modules/pam_localuser/pam_localuser.c: Add support for session
 324         and chauthtok [SF#1606180].
 325         * modules/pam_localuser/pam_localuser.8.xml: Document last change.
 326
 327         * libpam/pam_audit.c (_pam_audit_writelog): Print error message
 328         only once.
 329
 330 2006-12-12  Thorsten Kukuk  <kukuk@thkukuk.de>
 331
 332         * libpam/pam_audit.c (_pam_audit_writelog): Print error
 333         message on failure to syslog.
 334
 335 2006-12-09  Thorsten Kukuk  <kukuk@thkukuk.de>
 336
 337         * modules/pam_umask/pam_umask.c: Use strtoul instead of strtol,
 338         fix overflow detection.
 339
 340 2006-12-06  Thorsten Kukuk  <kukuk@thkukuk.de>
 341
 342         * modules/pam_mkhomedir/pam_mkhomedir.c (rec_mkdir): Fix
 343         handling of left-most path component [SF#1591598].
 344         (create_homedir): Mark user visible messages for translation.
 345         * po/de.po: Adjust german translation for pam_mkhomedir.
 346
 347         * modules/pam_faildelay/pam_faildelay.c: If no argument is
 348         given, try to read FAIL_DELAY from /etc/login.defs.
 349         * modules/pam_faildelay/pam_faildelay.8.xml: Document usage
 350         of /etc/login.defs.
 351
 352 2006-12-04  Tomas Mraz <t8m@centrun.cz>
 353
 354         * po/jp.po: Fixed mistake in Password: message (from
 355         Peng Huang <phuang@redhat.com>).
 356
 357 2006-11-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 358
 359         * po/hu.po: Update hungarian translation (from
 360         Kalman Kemenczy <kkemenczy@novell.com>).
 361
 362         * configure.in: Allow disabling support for cracklib, audit, libdb.
 363
 364         * modules/pam_faildelay/pam_faildelay.8.xml: Correct name of Author.
 365
 366         * configure.in: Remove --enable-docdir (obsolete by --docdir).
 367         * doc/Makefile.am: Don't overwrite htmldir.
 368         * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir.
 369         * doc/mwg/Makefile.am: Likewise.
 370         * doc/sag/Makefile.am: Likewise.
 371         * doc/specs/Makefile.am: Use docdir.
 372
 373         * tests/tst-pam_set_data.c: New test cases for pam_set_data().
 374         * tests/Makefile.am: Add pam_set_data test case.
 375
 376         * libpam/pam_data.c: Add NULL pointer check for module_data_name.
 377         * libpam/Makefile.am: Bump revision of shared library.
 378
 379 2006-11-08  Thorsten Kukuk  <kukuk@thkukuk.de>
 380
 381         * configure.in: Add modules/pam_faildelay/Makefile.
 382         * doc/sag/Linux-PAM_SAG.xml: Include pam_faildelay.xml.
 383         * doc/sag/pam_faildelay.xml: New.
 384         * libpam/pam_static_modules.h: Include static pam_faildelay data.
 385         * modules/Makefile.am: Add pam_faildelay directory.
 386         * modules/pam_faildelay/Makefile.am: New.
 387         * modules/pam_faildelay/README: New, generated from XML file.
 388         * modules/pam_faildelay/README.xml: New.
 389         * modules/pam_faildelay/pam_faildelay.8: New, generated from xml.
 390         * modules/pam_faildelay/pam_faildelay.8.xml: New.
 391         * modules/pam_faildelay/pam_faildelay.c: New.
 392         * modules/pam_faildelay/tst-pam_faildelay: New.
 393
 394         * po/POTFILES.in: Add pam_faildelay.c and pam_loginuid.c.
 395
 396 2006-11-07  Thorsten Kukuk  <kukuk@thkukuk.de>
 397
 398         * modules/pam_cracklib/pam_cracklib.c: PAM_DEBUG_ARG
 399         is a bit mask and not a boolean value (Reported by
 400         Jochen Voss <voss@seehuhn.de>).
 401
 402 2006-10-26  Thorsten Kukuk  <kukuk@thkukuk.de>
 403
 404         * doc/man/pam.3.xml: Add pam_get_user function.
 405
 406         * modules/pam_motd/pam_motd.8.xml: Fix typo.
 407
 408 2006-10-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 409
 410         * modules/pam_namespace/pam_namespace.c: Reserve space for
 411         trailing zero.
 412
 413 2006-10-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 414
 415         * modules/pam_unix/support.c (_unix_verify_password): Try system
 416         crypt() if we don't know the hash alogorithm.
 417         * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
 418
 419 2006-10-13  Tomas Mraz <t8m@centrum.cz>
 420
 421         * doc/mwg/Linux-PAM_MWG.xml: Add id[s] to section[s].
 422         * doc/sag/pam_access.xml: Likewise.
 423         * doc/sag/pam_echo.xml: Likewise.
 424         * doc/sag/pam_env.xml: Likewise.
 425         * doc/sag/pam_exec.xml: Likewise.
 426         * doc/sag/pam_group.xml: Likewise.
 427         * doc/sag/pam_limits.xml: Likewise.
 428         * doc/sag/pam_namespace.xml: Likewise.
 429         * doc/sag/pam_time.xml: Likewise.
 430         * doc/sag/Linux-PAM_SAG.xml: Add id to book.
 431         * doc/adg/Linux-PAM_ADG.xml: Add id to book.
 432         * doc/mwg/Linux-PAM_MWG.xml: Add id to book.
 433
 434
 435 2006-10-07  Thorsten Kukuk  <kukuk@thkukuk.de>
 436
 437         * po/hu.po: Updated hungarian translation (from
 438         Kalman Kemenczy <kkemenczy@novell.com>)
 439
 440 2006-09-20  Thorsten Kukuk  <kukuk@thkukuk.de>
 441
 442         * doc/adg/Makefile.am: Add manual pages as dependency.
 443         * doc/mwg/Makefile.am: Likewise.
 444         * doc/sag/Makefile.am: Likewise.
 445         * doc/sag/Linux-PAM_SAG.xml: Include pam_unix.xml.
 446         * doc/sag/pam_unix.xml: New.
 447         * modules/pam_unix/Makefile.am: Generate pam_unix.8 manual page.
 448         * modules/pam_unix/README.xml: New.
 449         * modules/pam_unix/pam_unix.8.xml: New.
 450         * modules/pam_unix/README: Regenerate from XML.
 451         * modules/pam_unix/pam_unix.8: Generated from XML.
 452
 453 2006-09-09  Dmitry V. Levin  <ldv@altlinux.org>
 454
 455         * modules/pam_wheel/pam_wheel.8.xml: Fix typo.
 456         * modules/pam_wheel/pam_wheel.8: Likewise.
 457         * modules/pam_wheel/README: Likewise.
 458
 459 2006-09-08  Thorsten Kukuk  <kukuk@thkukuk.de>
 460
 461         * po/de.po: Fix typo.
 462
 463 2006-09-06  Thorsten Kukuk  <kukuk@thkukuk.de>
 464
 465         * release version 0.99.6.3
 466
 467 2006-09-01  Thorsten Kukuk  <kukuk@thkukuk.de>
 468
 469         * modules/pam_loginuid/pam_loginuid.8.xml: Fix typo in
 470         config name.
 471
 472 2006-08-31  Thorsten Kukuk  <kukuk@thkukuk.de>
 473
 474         * modules/pam_env/environment: New, dummy environment example
 475         config file.
 476
 477         * modules/pam_namespace/Makefile.am: Don't install
 478         manual page if we don't build module.
 479
 480         * m4/ld-as-needed.m4: Don't set LDFLAGS if check failed.
 481         * m4/ld-O1: Likewise.
 482
 483 2006-08-30  Tomas Mraz  <t8m@centrum.cz>
 484
 485         * modules/pam_access/pam_access.8.xml: All services supported.
 486         * modules/pam_access/pam_access.c (pam_sm_open_session): New.
 487         (pam_sm_close_session): New.
 488         (pam_sm_chauthtok): New.
 489
 490         * modules/pam_access/pam_succeed_if.8.xml: All services supported.
 491         * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return
 492         PAM_IGNORE rather than success.
 493         (pam_sm_open_session): New.
 494         (pam_sm_close_session): New.
 495         (pam_sm_chauthtok): New.
 496
 497 2006-08-30  Thorsten Kukuk  <kukuk@thkukuk.de>
 498
 499         * xtests/Makefile.am: Move shell code to execute tests from here ...
 500         * xtests/run-xtests.sh: ... to here.
 501         * xtests/*.c: Include config.h.
 502         * tests/*.c: Likewise.
 503
 504         * modules/pam_namespace/pam_namespace.c: Use pam_modutil_getpwnam()
 505         instead of getpwnam().
 506
 507 2006-08-29  Thorsten Kukuk  <kukuk@thkukuk.de>
 508
 509         * doc/sag/pam_loginuid.xml: New.
 510         * doc/sag/Linux-PAM_SAG.xml: Include pam_loginuid.xml.
 511
 512         * configure.in: Add modules/pam_loginuid/Makefile.
 513         * modules/Makefile.am: Add pam_loginuid sub directory.
 514
 515         * libpam/pam_static_modules.h: Add pam_loginuid.
 516
 517         * modules/pam_loginuid/Makefile.am: New.
 518         * modules/pam_loginuid/tst-pam_loginuid: New.
 519         * modules/pam_loginuid/pam_loginuid.8.xml: New.
 520         * modules/pam_loginuid/pam_loginuid.8: New, generated from XML source.
 521         * modules/pam_loginuid/pam_loginuid.c: New.
 522         * modules/pam_loginuid/README.xml: New.
 523         * modules/pam_loginuid/README: New, generated from XML source.
 524
 525 2006-08-29  Dmitry V. Levin  <ldv@altlinux.org>
 526
 527         * modules/pam_exec/pam_exec.c (call_exec): Add required third
 528         argument to open() call with O_CREAT flag set.
 529
 530 2006-08-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 531
 532         * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Remove
 533         duplicate code.
 534
 535 2006-08-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 536
 537         * release version 0.99.6.2
 538
 539         * modules/pam_lastlog/pam_lastlog.c (last_login_date): Create
 540         lastlog file if it does not exist.
 541
 542         * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Check
 543         for error from getting second token.
 544         * xtests/Makefile.am: Add tst-pam_cracklib1
 545         * xtests/tst-pam_cracklib1.c: New, check for pam_cracklib seg.fault.
 546         * xtests/tst-pam_cracklib1.pamd: New, config for cracklib test.
 547
 548 2006-08-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 549
 550         * xtests/tst-pam_dispatch4.c: New test.
 551         * xtests/tst-pam_dispatch4.pamd: PAM config for new test.
 552
 553 2006-08-09  Thorsten Kukuk  <kukuk@thkukuk.de>
 554
 555         * release version 0.99.6.1
 556
 557 2006-08-09  David Howells  <dhowells@redhat.com>
 558
 559         * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Set real uid
 560         to user's before revoking.
 561         (pam_sm_open_session): Remember the uid.
 562
 563 2006-08-06  Thorsten Kukuk  <kukuk@thkukuk.de>
 564
 565         * modules/pam_umask/pam_umask.c (setup_limits_from_gecos):
 566         Add error handling.
 567         * modules/pam_umask/pam_umask.8.xml: Document silent option.
 568
 569         * xtests/Makefile.am: Fix includes for bootstrapping.
 570         Reported by Greg Schafer <gschafer@zip.com.au>.
 571
 572 2006-08-05  Thorsten Kukuk  <kukuk@thkukuk.de>
 573
 574         * release version 0.99.6.0
 575
 576         * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
 577         pam_modutil_getpwnam instead of getpwnam.
 578
 579         * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
 580         svc variable to char pointer for snprintf.
 581
 582         * configure.in: Generate xtests/Makefile.
 583         * Makefile.am (SUBDIRS): Add xtests.
 584         * README: Document make check and make xtests.
 585         * xtests/Makefile.am: New.
 586         * xtests/tst-pam_dispatch1.pamd: New.
 587         * xtests/tst-pam_dispatch2.pamd: New.
 588         * xtests/tst-pam_dispatch3.pamd: New.
 589         * xtests/tst-pam_dispatch1.c: New.
 590         * xtests/tst-pam_dispatch2.c: New.
 591         * xtests/tst-pam_dispatch3.c: New.
 592
 593 2006-08-04 Ray Strode  <rstrode@redhat.com>
 594
 595         * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
 596         Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
 597
 598 2006-08-03  David Howells  <dhowells@redhat.com>
 599
 600         * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
 601         (init_keyrings): Properly handle multiple invocations of the module.
 602         (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
 603
 604 2006-08-03  Tomas Mraz  <t8m@centrum.cz>
 605
 606         * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
 607         New function for list matching.
 608         (evaluate_notinlist): Likewise.
 609         (evaluate): Add service value match, list matching.
 610         * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
 611         features.
 612
 613         * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
 614         relabelling error when the tty device doesn't exist (ENOENT).
 615
 616 2006-08-01  Thorsten Kukuk  <kukuk@thkukuk.de>
 617
 618         * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
 619         rationale about when this function should be used and when not.
 620
 621         * doc/index.html: Cleanup to look prettier.
 622
 623 2006-08-01  Thorsten Kukuk  <kukuk@thkukuk.de>
 624
 625         * libpam/Makefile.am: Bump patchlevel of libpam.
 626         * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
 627         or [return=bad] is used, don't return PAM_IGNORE. Based on
 628         patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
 629
 630 2006-07-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 631
 632         * ABOUT-NLS: Upgrade to gettext-0.15.
 633         * config.rpath: Likewise.
 634         * m4/gettext.m4: Upgrade to gettext-0.15.
 635         * m4/inttypes-h.m4: New file, from gettext-0.15.
 636         * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
 637         * m4/lib-link.m4: Upgrade to gettext-0.15.
 638         * m4/lib-prefix.m4: Upgrade to gettext-0.15.
 639         * m4/lock.m4: New file, from gettext-0.15.
 640         * m4/longdouble.m4: Upgrade to gettext-0.15.
 641         * m4/nls.m4: Upgrade to gettext-0.15.
 642         * m4/po.m4: Upgrade to gettext-0.15.
 643         * m4/size_max.m4: Upgrade to gettext-0.15.
 644         * m4/visibility.m4: New file, from gettext-0.15.
 645         * po/Makefile.in.in: Upgrade to gettext-0.15.
 646
 647 2006-07-24  David Quigley   <dpquigl@tycho.nsa.gov>
 648
 649         * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
 650         * modules/pam_namespace/pam_namespace.c: Move includes and
 651         data structure definitions from here ...
 652         * modules/pam_namespace/pam_namespace.h: ... here. New file.
 653
 654         * modules/pam_namespace/pam_namespace.c: Move large sections
 655         of code into new functions.
 656
 657 2006-07-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 658
 659         * doc/adg/Makefile.am: Add uninstall and distclean rules.
 660         * doc/mwg/Makefile.am: Likewise.
 661         * doc/sag/Makefile.am: Likewise.
 662
 663 2006-07-08  Daniel Richard G.  <skunk@iskunk.org>
 664
 665         * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
 666         * conf/pam_conv1/pam_conv.lex: Rename to ...
 667         * conf/pam_conv1/pam_conv_l.l: ... this.
 668         * conf/pam_conv1/pam_conv.y: Rename to ...
 669         * conf/pam_conv1/pam_conv_y.y: ... this.
 670         * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
 671         calls.
 672         * doc/Makefile.am: Fix rule to install index.html.
 673         * doc/adg/Makefile.am: Fix test usage.
 674         * doc/mwg/Makefile.am: Likewise.
 675         * doc/sag/Makefile.am: Likewise.
 676         * doc/specs/Makefile.am: Fix rules for lex and yacc files.
 677         * specs/parse.lex: Rename to ...
 678         * doc/specs/parse_l.l: ... this.
 679         * doc/specs/parse.y: Rename to ...
 680         * doc/specs/parse_y.y: ... this.
 681         * libpam/pam_account.c: Fix #if vs. #ifdef.
 682         * libpam/pam_audit.c: Likewise.
 683         * libpam/pam_auth.c: Likewise.
 684         * libpam/pam_password.c: Likewise.
 685         * libpam/pam_private.h: Likewise.
 686         * libpam/pam_session.c: Likewise.
 687         * libpam/pam_start.c: Likewise.
 688         * libpam/pam_static.c: Fix "empty sourcefile" warning.
 689         * modules/pam_limits/pam_limits.c: Check for __linux, too.
 690         * modules/pam_userdb/Makefile.am: Don't run test if no
 691         libdb available.
 692         * tests/tst-dlopen.c: Include config.h.
 693
 694 2006-07-03  Dan Yefimov  <dan@D00M.lightwave.net.ru>
 695
 696         * configure.in: Fixed have_key_syscalls test.
 697
 698         * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
 699         match, removed AI_ADDRCONFIG flag.
 700
 701 2006-06-30  Tomas Mraz  <t8m@centrum.cz>
 702
 703         * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
 704
 705 2006-06-29  Thorsten Kukuk  <kukuk@thkukuk.de>
 706
 707         * doc/Makefile.am (releasedocs): Fix directory layout.
 708         * doc/adg/Makefile.am: Likewise.
 709         * doc/mwg/Makefile.am: Likewise.
 710         * doc/sag/Makefile.am: Likewise.
 711
 712 2006-06-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 713
 714         * doc/sag: System Administrator Guide as XML source.
 715         * doc/sag/Makefile.am: New.
 716         * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
 717         * doc/sag/pam_*.xml: New, wrapper to include module documentation.
 718
 719         * doc/adg: Application Developers Guide as XML source.
 720         * doc/adg/Makefile.am: New.
 721         * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
 722         * doc/adg/pam_*.xml: New, wrappers to include manual pages.
 723
 724         * doc/mwg: Application Developers Guide as XML source.
 725         * doc/mwg/Makefile.am: New.
 726         * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
 727         * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
 728
 729         * doc/CREDITS: Removed.
 730         * doc/NOTES: Removed.
 731         * doc/pam_appl.sgml: Removed.
 732         * doc/pam_modules.sgml: Removed.
 733         * doc/pam_source.sgml: Removed.
 734         * doc/figs/pam_orient.txt: Removed.
 735         * doc/figs: Removed.
 736
 737         * configure.in: Remove checks for sgml2* progrs, add sag, adg
 738         and mwg Makefiles.
 739
 740         * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
 741         directories.
 742         * doc/modules: Remove directory.
 743         * doc/html: Remove directory.
 744         * doc/ps: Remove directory.
 745         * doc/pdf: Remove directory.
 746         * doc/txts: Remove directory.
 747         * doc/index.html: Moved from html directory to here.
 748
 749 2006-06-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 750
 751         * release version 0.99.5.0
 752
 753         * bump version number to 0.99.5.0
 754
 755         * modules/pam_rhosts/pam_rhosts.c: New module, replaces
 756         pam_rhosts_auth.so.
 757         * modules/pam_rhosts/pam_rhosts.8.xml: New.
 758         * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
 759         * modules/pam_rhosts/tst-pam_rhosts: New.
 760         * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
 761         manual page and README.
 762         * modules/pam_rhosts/README.xml: New.
 763         * modules/pam_rhosts/reADME: Regenerated from XML source.
 764
 765         * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
 766         writers guide.
 767         * doc/man/pam_sm_authenticate.3.xml: Likewise.
 768         * doc/man/pam_sm_chauthtok.3.xml: Likewise.
 769         * doc/man/pam_sm_close_session.3.xml: Likewise.
 770         * doc/man/pam_sm_open_session.3.xml: Likewise.
 771         * doc/man/pam_sm_setcred.3.xml: Likewise.
 772
 773         * po/POTFILES.in: Add new source files.
 774
 775         * libpam/pam_static_modules.h: Add new modules.
 776
 777         * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
 778
 779         * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
 780         files and manual page.
 781
 782 2006-06-27  Thorsten Kukuk <kukuk@thkukuk.de>
 783
 784         * configure.in: Allow disabling of SELinux support, check for
 785         rootok_af.
 786
 787 2006-06-27  Tomas Mraz <t8m@centrum.cz>
 788
 789         * modules/pam_namespace/pam_namespace.c: New module
 790         originally written by Janak Desai.
 791         * modules/pam_namespace/Makefile.am: New.
 792         * modules/pam_namespace/README: New.
 793         * modules/pam_namespace/md5.c: New.
 794         * modules/pam_namespace/md5.h: New.
 795         * modules/pam_namespace/namespace.conf: New.
 796         * modules/pam_namespace/namespace.conf.5: New.
 797         * modules/pam_namespace/namespace.conf.5.xml: New.
 798         * modules/pam_namespace/namespace.init: New.
 799         * modules/pam_namespace/pam_namespace.8: New.
 800         * modules/pam_namespace/pam_namespace.8.xml: New.
 801         * modules/pam_namespace/tst-pam_namespace: New.
 802         * modules/Makefile.am: Added pam_namespace.
 803         * configure.in: Added pam_namespace, test for unshare
 804         library call.
 805
 806 2006-06-27  David Howells <dhowells@redhat.com>
 807
 808         * modules/pam_keyinit/pam_keyinit.c: New module.
 809         * modules/pam_keyinit/pam_keyinit.8: New.
 810         * modules/pam_keyinit/pam_keyinit.8.xml: New.
 811         * modules/pam_keyinit/README: New.
 812         * modules/pam_keyinit/README.xml: New.
 813         * modules/pam_keyinit/Makefile.am: New.
 814         * modules/pam_keyinit/tst-pam_keyinit: New.
 815         * modules/Makefile.am: Added pam_keyinit.
 816         * configure.in: Added test for the key mgmt syscall.
 817
 818 2006-06-27  Thorsten Kukuk <kukuk@thkukuk.de>
 819
 820         * m4/libprelude.m4: Sync with upstream.
 821
 822 2006-06-27  Tomas Mraz <t8m@centrum.cz>
 823
 824         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
 825         signal() fails with SIG_ERR return
 826         * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
 827         Likewise.
 828         * modules/pam_unix/support.c(_unix_run_helper_binary):
 829         Likewise.
 830
 831 2006-06-25  Thorsten Kukuk  <kukuk@thkukuk.de>
 832
 833         * doc/man/misc_conv.3.xml: New.
 834         * doc/man/misc_conv.3: New.
 835         * doc/man/pam_misc_paste_env.3.xml: New.
 836         * doc/man/pam_misc_paste_env.3: New.
 837         * doc/man/pam_misc_drop_env.3.xml: New.
 838         * doc/man/pam_misc_drop_env.3: New.
 839         * doc/man/pam_misc_setenv.3.xml: New.
 840         * doc/man/pam_misc_setenv.3: New.
 841         * doc/man/Makefile.am: Add new manual pages.
 842
 843         * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
 844         in Applicatoin Developer Guide.
 845         * doc/man/pam_authenticate.3.xml: Likewise
 846         * doc/man/pam_chauthtok.3.xml: Likewise
 847         * doc/man/pam_close_session.3.xml: Likewise
 848         * doc/man/pam_conv.3.xml: Likewise
 849         * doc/man/pam_end.3.xml: Likewise
 850         * doc/man/pam_fail_delay.3.xml: Likewise
 851         * doc/man/pam_getenv.3.xml: Likewise
 852         * doc/man/pam_getenvlist.3.xml: Likewise
 853         * doc/man/pam_open_session.3.xml: Likewise
 854         * doc/man/pam_putenv.3.xml: Likewise
 855         * doc/man/pam_setcred.3.xml: Likewise
 856         * doc/man/pam_start.3.xml: Likewise
 857         * doc/man/pam_strerror.3.xml: Likewise
 858
 859         * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
 860         * doc/man/pam_authenticate.3: Likewise
 861         * doc/man/pam_chauthtok.3: Likewise
 862         * doc/man/pam_close_session.3: Likewise
 863         * doc/man/pam_conv.3: Likewise
 864         * doc/man/pam_end.3: Likewise
 865         * doc/man/pam_fail_delay.3: Likewise
 866         * doc/man/pam_getenv.3: Likewise
 867         * doc/man/pam_getenvlist.3: Likewise
 868         * doc/man/pam_open_session.3: Likewise
 869         * doc/man/pam_putenv.3: Likewise
 870         * doc/man/pam_setcred.3: Likewise
 871         * doc/man/pam_sm_close_session.3: Likewise
 872         * doc/man/pam_start.3: Likewise
 873         * doc/man/pam_strerror.3: Likewise
 874         * doc/man/pam_syslog.3: Likewise
 875         * doc/man/PAM.8: Likewise
 876
 877 2006-06-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 878
 879         * modules/pam_limits/pam_limits.c (setup_limits): Don't
 880         reset priority for root.
 881
 882 2006-06-23  Thorsten Kukuk  <kukuk@thkukuk.de>
 883
 884         * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
 885         * modules/pam_access/pam_access.8.xml: Likewise.
 886         * modules/pam_deny/pam_deny.8.xml: Likewise.
 887         * modules/pam_echo/pam_echo.8.xml: Likewise.
 888         * modules/pam_env/pam_env.8.xml: Likewise.
 889         * modules/pam_env/pam_env.conf.5.xml: Likewise.
 890         * modules/pam_group/group.conf.5.xml: Likewise.
 891         * modules/pam_group/pam_group.8.xml: Likewise.
 892         * modules/pam_limits/limits.conf.5.xml: Likewise.
 893         * modules/pam_listfile/pam_listfile.8.xml: Likewise.
 894         * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
 895         * modules/pam_time/pam_time.8.xml: Likewise.
 896         * modules/pam_time/time.conf.5.xml: Likewise.
 897
 898         * modules/pam_access/access.conf.5: Regenerate.
 899         * modules/pam_access/pam_access.8: Likewise.
 900         * modules/pam_deny/pam_deny.8: Likewise.
 901         * modules/pam_echo/README: Likewise.
 902         * modules/pam_echo/pam_echo.8: Likewise.
 903         * modules/pam_env/pam_env.8: Likewise.
 904         * modules/pam_env/pam_env.conf.5: Likewise.
 905         * modules/pam_group/README: Likewise.
 906         * modules/pam_group/group.conf.5: Likewise.
 907         * modules/pam_group/pam_group.8: Likewise.
 908         * modules/pam_limits/limits.conf.5: Likewise.
 909         * modules/pam_listfile/README: Likewise.
 910         * modules/pam_listfile/pam_listfile.8: Likewise.
 911         * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
 912         * modules/pam_time/pam_time.8: Likewise.
 913         * modules/pam_time/time.conf.5: Likewise.
 914
 915         * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
 916         and pam.conf-syntax.xml.
 917         * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
 918         * doc/man/pam.conf.5: Regenerated.
 919         * doc/man/pam.conf-desc.xml: New.
 920         * doc/man/pam.conf-dir.xml: New.
 921         * doc/man/pam.conf-syntax.xml: New.
 922
 923 2006-06-21  Thorsten Kukuk  <kukuk@thkukuk.de>
 924
 925         * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
 926         is not installed.
 927
 928         * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
 929         * modules/pam_issue/pam_issue.8: Regenerate.
 930
 931 2006-06-20  Thorsten Kukuk  <kukuk@thkukuk.de>
 932
 933         * configure.in: Remove unused check for libcap.
 934
 935         * m4/ld-as-needed.m4: New.
 936         * m4/ld-O1.m4: New.
 937         * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
 938         require docbook version 4.4.
 939
 940 2006-06-19  Thorsten Kukuk  <kukuk@thkukuk.de>
 941
 942         * doc/man/pam.8.xml: Syntax cleanup.
 943         * doc/pam/PAM.8: Regenerated from xml source.
 944         * man/pam_sm_chauthtok.3: New.
 945         * man/pam_sm_chauthtok.3.xml: New.
 946         * man/pam_sm_close_session.3: New.
 947         * man/pam_sm_close_session.3.xml: New.
 948         * man/pam_sm_open_session.3: New.
 949         * man/pam_sm_open_session.3.xml: New.
 950         * man/pam_sm_authenticate.3: New.
 951         * man/pam_sm_authenticate.3.xml: New.
 952         * man/pam_sm_setcred.3: New.
 953         * man/pam_sm_setcred.3.xml: New.
 954         * man/Makefile.am: Add new pam_sm_* manual pages.
 955
 956         * specs/Makefile.am: Fix rule to generate draft.
 957
 958 2006-06-18  Thorsten Kukuk  <kukuk@thkukuk.de>
 959
 960         * modules/pam_tally/Makefile.am: Include Make.xml.rules.
 961         * modules/pam_tally/pam_tally.8.xml: New.
 962         * modules/pam_tally/pam_tally.8: New, generated from xml file.
 963         * modules/pam_tally/README.xml: New.
 964         * modules/pam_tally/README: Regenerated from xml file.
 965
 966         * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
 967         * modules/pam_selinux/pam_selinux.8.xml: New.
 968         * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
 969         * modules/pam_selinux/README.xml: New.
 970         * modules/pam_selinux/README: Regenerated from xml file.
 971
 972 2006-06-17  Thorsten Kukuk  <kukuk@thkukuk.de>
 973
 974         * modules/pam_debug/Makefile.am: Include Make.xml.rules.
 975         * modules/pam_debug/pam_debug.8.xml: New.
 976         * modules/pam_debug/pam_debug.8: New, generated from xml file.
 977         * modules/pam_debug/README.xml: New.
 978         * modules/pam_debug/README: Regenerated from xml file.
 979
 980         * examples/vpass.c: UID is unsigned on Linux.
 981         * modules/pam_exec/pam_exec.c: Likewise.
 982         * modules/pam_unix/pam_unix_acct.c: Likewise.
 983         * modules/pam_unix/pam_unix_sess.c: Likewise.
 984
 985         * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
 986         * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
 987         * modules/pam_succeed_if/README: Regenerated.
 988
 989         * modules/pam_limits/Makefile.am: Include Make.xml.rules.
 990         * modules/pam_limits/limits.conf.5: New, generated from xml file.
 991         * modules/pam_limits/limits.conf.5.xml: New.
 992         * modules/pam_limits/pam_limits.8: New, generated from xml file.
 993         * modules/pam_limits/pam_limits.8.xml: New.
 994         * modules/pam_limits/README.xml: New.
 995         * modules/pam_limits/README: Regenerated from README.xml.
 996
 997 2006-06-16  Thorsten Kukuk  <kukuk@thkukuk.de>
 998
 999         * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
1000         are unsigned on Linux, don't truncate them.
1001         (_do_setpass): err is of type clnt_stat, not int.
1002
1003         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
1004         truncate UID for syslog output.
1005
1006         * modules/pam_time/pam_time.c: Replace type boolean with int.
1007         * modules/pam_group/pam_group.c: Likewise.
1008
1009 2006-06-15  Thorsten Kukuk  <kukuk@thkukuk.de>
1010
1011         * modules/pam_unix/bigcrypt.h: New.
1012         * modules/pam_unix/Makefile.am: Add bigcrypt.h.
1013         * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
1014         * modules/pam_unix/support.c: Include bigcrypt.h, remove
1015         own prototype.
1016         * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
1017         own prototype.
1018         * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
1019         own prototype.
1020
1021         * modules/pam_time/pam_time.c (logic_member): Remove unused
1022         variable len.
1023
1024         * modules/pam_group/pam_group.c (logic_field): Accept
1025         colon in tty name. [#1428276].
1026         (logic_member): Remove unused variable len.
1027         (check_account): Fix usage of err variable in debug code.
1028
1029         * modules/pam_time/pam_time.c (logic_field): Likewise.
1030
1031         * configure.in: Add special exceptions for icc: different
1032         compiler warnings, no PIE support.
1033
1034 2006-06-14  Thorsten Kukuk  <kukuk@thkukuk.de>
1035
1036         * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
1037
1038         * configure.in: Remove --enable-memory-debug, add option
1039         to disable prelude if installed.
1040
1041         * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
1042         * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
1043         * modules/pam_unix/unix_chkpwd.c: Likewise.
1044         * libpam/include/security/_pam_types.h: Likewise.
1045         * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
1046         * libpam/pam_malloc.c: Remove file.
1047         * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
1048
1049         * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
1050         instead of strdup.
1051
1052         * libpam/pam_private.h: Remove _pam_strCMP.
1053         * libpam/pam_misc.c: Likewise.
1054         * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
1055
1056 2006-06-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1057
1058         * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
1059         for modules from main application.
1060
1061 2006-06-09  Thorsten Kukuk  <kukuk@thkukuk.de>
1062
1063         * modules/pam_time/Makefile.am: Include Make.xml.rules.
1064         * modules/pam_time/time.conf.5: New, generated from xml file.
1065         * modules/pam_time/time.conf.5.xml: New.
1066         * modules/pam_time/pam_time.8: New, generated from xml file.
1067         * modules/pam_time/pam_time.8.xml: New.
1068         * modules/pam_time/README.xml: New.
1069         * modules/pam_time/README: Regenerated from README.xml.
1070
1071         * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
1072         * modules/pam_wheel/pam_wheel.8.xml: New.
1073         * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
1074         * modules/pam_wheel/README.xml: New.
1075         * modules/pam_wheel/README: Regenerated from xml file.
1076
1077         * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
1078         * modules/pam_xauth/pam_xauth.8.xml: New.
1079         * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
1080         * modules/pam_xauth/README.xml: New.
1081         * modules/pam_xauth/README: Regenerated from xml file.
1082
1083         * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
1084         * modules/pam_deny/pam_deny.8: Regenerate from xml file.
1085         * modules/pam_deny/README: Likewise.
1086
1087         * modules/pam_warn/Makefile.am: Include Make.xml.rules.
1088         * modules/pam_warn/pam_warn.8.xml: New.
1089         * modules/pam_warn/pam_warn.8: New, generated from xml file.
1090         * modules/pam_warn/README.xml: New.
1091         * modules/pam_warn/README: Regenerated from xml file.
1092
1093         * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
1094         * modules/pam_userdb/pam_userdb.8.xml: New.
1095         * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
1096         * modules/pam_userdb/README.xml: New.
1097         * modules/pam_userdb/README: Regenerated from xml file.
1098
1099 2006-06-06  Thorsten Kukuk  <kukuk@thkukuk.de>
1100
1101         * modules/pam_shells/Makefile.am: Include Make.xml.rules.
1102         * modules/pam_shells/pam_shells.8.xml: New.
1103         * modules/pam_shells/pam_shells.8: New, generated from xml file.
1104         * modules/pam_shells/README.xml: New.
1105         * modules/pam_shells/README: Regenerated from xml file.
1106
1107         * libpam/include/security/pam_malloc.h: Add missing license
1108         informations.
1109
1110         * libpam/include/security/pam_ext.h: Add brackets for C++.
1111         * libpam/include/security/pam_modutil.h: Likewise.
1112
1113         * libpam/include/security/pam_modules.h: Document where to
1114         find the copyright/license informations.
1115
1116         * libpam/include/security/pam_appl.h: Move _pam_compat.h
1117         include inside of brackets.
1118
1119 2006-06-04  Thorsten Kukuk  <kukuk@thkukuk.de>
1120
1121         * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
1122         * modules/pam_securetty/pam_securetty.8.xml: New.
1123         * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
1124         * modules/pam_securetty/README.xml: New.
1125         * modules/pam_securetty/README: Regenerated from xml file.
1126
1127         * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
1128         * modules/pam_rootok/pam_rootok.8.xml: New.
1129         * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
1130         * modules/pam_rootok/README.xml: New.
1131         * modules/pam_rootok/README: Regenerated from xml file.
1132
1133         * modules/pam_permit/Makefile.am: Include Make.xml.rules.
1134         * modules/pam_permit/pam_permit.8.xml: New.
1135         * modules/pam_permit/pam_permit.8: New, generated from xml file.
1136         * modules/pam_permit/README.xml: New.
1137         * modules/pam_permit/README: Regenerated from xml file.
1138
1139         * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
1140         * modules/pam_nologin/pam_nologin.8.xml: New.
1141         * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
1142         * modules/pam_nologin/README.xml: New.
1143         * modules/pam_nologin/README: Regenerated from xml file.
1144
1145 2006-06-03  Thorsten Kukuk  <kukuk@thkukuk.de>
1146
1147         * modules/pam_motd/Makefile.am: Include Make.xml.rules.
1148         * modules/pam_motd/pam_motd.8.xml: New.
1149         * modules/pam_motd/pam_motd.8: New, generated from xml file.
1150         * modules/pam_motd/README.xml: New.
1151         * modules/pam_motd/README: New, generated from xml file.
1152
1153 2006-06-02  Thorsten Kukuk  <kukuk@thkukuk.de>
1154
1155         * modules/pam_mail/Makefile.am: Include Make.xml.rules.
1156         * modules/pam_mail/pam_mail.8.xml: New.
1157         * modules/pam_mail/pam_mail.8: New, generated from xml file.
1158         * modules/pam_mail/README.xml: New.
1159         * modules/pam_mail/README: Regenerated from xml file.
1160
1161         * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
1162         * modules/pam_localuser/pam_localuser.8.xml: New.
1163         * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
1164         * modules/pam_localuser/README.xml: New.
1165         * modules/pam_localuser/README: Regenerated from xml file.
1166
1167         * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
1168         * doc/man/pam.3: Likewise.
1169         * doc/man/pam.conf.5: Likewise.
1170         * doc/man/pam_acct_mgmt.3: Likewise.
1171         * doc/man/pam_authenticate.3: Likewise.
1172         * doc/man/pam_chauthtok.3: Likewise.
1173         * doc/man/pam_close_session.3: Likewise.
1174         * doc/man/pam_conv.3: Likewise.
1175         * doc/man/pam_end.3: Likewise.
1176         * doc/man/pam_error.3: Likewise.
1177         * doc/man/pam_fail_delay.3: Likewise.
1178         * doc/man/pam_get_data.3: Likewise.
1179         * doc/man/pam_get_item.3: Likewise.
1180         * doc/man/pam_get_user.3: Likewise.
1181         * doc/man/pam_getenv.3: Likewise.
1182         * doc/man/pam_getenvlist.3: Likewise.
1183         * doc/man/pam_info.3: Likewise.
1184         * doc/man/pam_open_session.3: Likewise.
1185         * doc/man/pam_prompt.3: Likewise.
1186         * doc/man/pam_putenv.3: Likewise.
1187         * doc/man/pam_set_data.3: Likewise.
1188         * doc/man/pam_set_item.3: Likewise.
1189         * doc/man/pam_setcred.3: Likewise.
1190         * doc/man/pam_sm_acct_mgmt.3: Likewise.
1191         * doc/man/pam_start.3: Likewise.
1192         * doc/man/pam_strerror.3: Likewise.
1193         * doc/man/pam_syslog.3: Likewise.
1194         * modules/pam_access/access.conf.5: Likewise.
1195         * modules/pam_access/pam_access.8: Likewise.
1196         * modules/pam_cracklib/pam_cracklib.8: Likewise.
1197         * modules/pam_deny/pam_deny.8: Likewise.
1198         * modules/pam_echo/pam_echo.8: Likewise.
1199         * modules/pam_env/pam_env.8: Likewise.
1200         * modules/pam_env/pam_env.conf.5: Likewise.
1201         * modules/pam_exec/pam_exec.8: Likewise.
1202         * modules/pam_filter/pam_filter.8: Likewise.
1203         * modules/pam_ftp/pam_ftp.8: Likewise.
1204         * modules/pam_group/group.conf.5: Likewise.
1205         * modules/pam_group/pam_group.8: Likewise.
1206         * modules/pam_issue/pam_issue.8: Likewise.
1207         * modules/pam_lastlog/pam_lastlog.8: Likewise.
1208         * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
1209         * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
1210         * modules/pam_umask/pam_umask.8: Likewise.
1211
1212         * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
1213         dngettext if available [#1427738].
1214         * configure.in: Check for dngettext [#1427738].
1215         * po/*.po: Update to dngettext usage.
1216
1217         * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
1218         * modules/pam_listfile/pam_listfile.8.xml: New.
1219         * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
1220         * modules/pam_listfile/README.xml: New.
1221         * modules/pam_listfile/README: Regenerated from xml file.
1222
1223 2006-06-01  Thorsten Kukuk  <kukuk@thkukuk.de>
1224
1225         * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
1226         * modules/pam_lastlog/pam_lastlog.8.xml: New.
1227         * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
1228         * modules/pam_lastlog/README.xml: New.
1229         * modules/pam_lastlog/README: Regenerated from xml file.
1230
1231         * modules/pam_group/Makefile.am: Include Make.xml.rules.
1232         * modules/pam_group/group.conf.5.xml: New.
1233         * modules/pam_group/group.conf.5: New, generated from xml file.
1234         * modules/pam_group/pam_group.8.xml: New.
1235         * modules/pam_group/pam_group.8: New, generated from xml file.
1236         * modules/pam_group/README.xml: New.
1237         * modules/pam_group/README: Regenerated from xml file.
1238
1239         * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
1240         * modules/pam_ftp/pam_ftp.8.xml: New.
1241         * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
1242         * modules/pam_ftp/README.xml: New.
1243         * modules/pam_ftp/README: Regenerated from xml file.
1244
1245         * modules/pam_issue/Makefile.am: Include Make.xml.rules.
1246         * modules/pam_issue/pam_issue.8.xml: New.
1247         * modules/pam_issue/pam_issue.8: New, generated from xml file.
1248         * modules/pam_issue/README.xml: New.
1249         * modules/pam_issue/README: Regenerated from xml file.
1250
1251         * modules/pam_filter/Makefile.am: Include Make.xml.rules.
1252         * modules/pam_filter/pam_filter.8.xml: New.
1253         * modules/pam_filter/pam_filter.8: New, generated from xml file.
1254         * modules/pam_filter/README.xml: New.
1255         * modules/pam_filter/README: Regenerated from xml file.
1256
1257 2006-05-30  Thorsten Kukuk  <kukuk@thkukuk.de>
1258
1259         * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
1260         directory documentation.
1261
1262         * modules/pam_umask/Makefile.am: Include Make.xml.rules.
1263         * modules/pam_umask/pam_umask.8.xml: New.
1264         * modules/pam_umask/pam_umask.8: New, generated from xml file.
1265         * modules/pam_umask/README.xml: New.
1266         * modules/pam_umask/README: Regenerated from xml file.
1267
1268 2006-05-29  Thorsten Kukuk  <kukuk@thkukuk.de>
1269
1270         * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
1271         * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
1272         * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
1273         * modules/pam_mkhomedir/README.xml: New.
1274         * modules/pam_mkhomedir/README: Regenerated from xml file.
1275
1276 2006-05-23  Thorsten Kukuk  <kukuk@thkukuk.de>
1277
1278         * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
1279         instead of read().
1280
1281 2006-05-22  Thorsten Kukuk  <kukuk@thkukuk.de>
1282
1283         * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
1284         Fix memory leaks, [#1490956] found by Coverity.
1285
1286         * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
1287         value of pam_get_user().
1288         (tally_get_data): Check if oldtime is not NULL.
1289         [#1489818] found by Coverity.
1290
1291         * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
1292         ignore return value of stat(). [#1489808] found by Coverity.
1293
1294         * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
1295         NULL pointer dereference. [#1489792] found by Coverity.
1296
1297         * libpam/Makefile.am: bump release number of libpam.so.
1298         * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
1299         [#1489804] found by Coverity.
1300
1301         * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
1302         str, [#1489658] found by Coverity.
1303
1304         * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
1305         a potential NULL pointer dereference.
1306         (pam_sm_chauthtok): Remove dead code.
1307         [#1489634] found by Coverity.
1308
1309 2006-05-04  Thorsten Kukuk  <kukuk@thkukuk.de>
1310
1311         * configure.in: Check for fseeko.
1312         * modules/pam_tally/pam_tally.c: Use fseeko if available
1313         (Based on patch by IBM).
1314
1315 2006-05-04  Thorsten Kukuk  <kukuk@thkukuk.de>
1316
1317         * release version 0.99.4.0
1318
1319         * libpam/pam_strerror.c: Unify error messages.
1320
1321         * po/zh_TW.po: Adjust for last pam_strerror changes.
1322         * po/zh_CN.po: Likewise.
1323         * po/uk.po: Likewise.
1324         * po/tr.po: Likewise.
1325         * po/pt.po: Likewise.
1326         * po/pt_BR.po: Likewise.
1327         * po/pl.po: Likewise.
1328         * po/ja.po: Likewise.
1329         * po/nl.po: Likewise.
1330         * po/nb.po: Likewise.
1331         * po/it.po: Likewise.
1332         * po/hu.po: Likewise.
1333         * po/fr.po: Likewise.
1334         * po/fi.po: Likewise.
1335         * po/es.po: Likewise.
1336         * po/de.po: Likewise.
1337         * po/cs.po: Likewise.
1338
1339         * doc/man/pam.3.xml: New.
1340         * doc/man/pam.3. New, generated from XML file.
1341
1342         * doc/man/pam_sm_acct_mgmt.3.xml: New.
1343         * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
1344
1345         * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
1346         all manual pages.
1347
1348         * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
1349
1350 2006-05-02  Thorsten Kukuk  <kukuk@thkukuk.de>
1351
1352         * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
1353         different strings for plural or not [#1427738]
1354
1355         * po/*.po: Adjust for pam_unix.so translation fix.
1356
1357         * modules/pam_tally/pam_tally.c: Always close file handle
1358         in error case, don't close it depending on *TALLY value [#1478180]
1359
1360 2006-04-21  Thorsten Kukuk  <kukuk@thkukuk.de>
1361
1362         * po/fr.po: Updated.
1363
1364 2006-04-11  Thorsten Kukuk  <kukuk@thkukuk.de>
1365
1366         * po/km.po: Updated.
1367
1368 2006-03-27  Thorsten Kukuk  <kukuk@thkukuk.de>
1369
1370         * po/LINGUAS: Add uk.
1371
1372         * po/uk.po: New.
1373         * po/cs.po: Updated.
1374         * po/po/es.po: Updated.
1375         * po/fi.po: Updated.
1376         * po/fr.po: Updated.
1377         * po/hu.po: Updated.
1378         * po/it.po: Updated.
1379         * po/ja.po: Updated.
1380         * po/nb.po: Updated.
1381         * po/pl.po: Updated.
1382         * po/pt.po: Updated.
1383         * po/pt_BR.po: Updated.
1384         * po/zh_CN.po: Updated.
1385         * po/zh_TW.po: Updated.
1386
1387 2006-03-21  Thorsten Kukuk  <kukuk@thkukuk.de>
1388
1389         * configure.in: Remove ALL_LINGUAS.
1390         * po/LINGUAS: New.
1391         * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
1392
1393 2006-03-13  Thorsten Kukuk  <kukuk@thkukuk.de>
1394
1395         * doc/man/pam_error.3.xml: New.
1396         * doc/man/pam_error.3: New, generated from XML file.
1397         * doc/man/pam_verror.3: New, generated from XML file.
1398         * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
1399
1400         * modules/pam_lastlog/Makefile.am: Fix typo.
1401
1402         * modules/pam_lastlog/pam_lastlog.c: Move comment for
1403         translators in right line.
1404         * po/*.po: Update po files with comment for translator.
1405
1406 2006-03-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1407
1408         * doc/man/Makefile.am: Add new manual pages.
1409
1410         * doc/man/pam.conf.5.xml: Replace link with content
1411         of PAM admin guide.
1412         * doc/man/pam.conf.5: Regenerated from XML file.
1413
1414         * doc/man/pam_info.3.xml: New.
1415         * doc/man/pam_info.3: New, generated from XML file.
1416         * doc/man/pam_vinfo.3: New, generated from XML file.
1417
1418         * doc/man/pam_conv.3.xml: New.
1419         * doc/man/pam_conv.3: New, generated from XML file.
1420
1421         * doc/man/pam_putenv.3.xml: New.
1422         * doc/man/pam_putenv.3: New, generated from XML file.
1423
1424         * doc/man/pam_getenv.3.xml: New.
1425         * doc/man/pam_getenv.3: New, generated from XML file.
1426
1427         * doc/man/pam_getenvlist.3.xml: New.
1428         * doc/man/pam_getenvlist.3: New, generated from XML file.
1429
1430         * libpam/pam_item.c (pam_get_user): Check for valid pamh before
1431         using it.
1432
1433         * configure.in: create tests/Makefile
1434         * Makefile.am (SUBDIRS): Add tests
1435         * tests/Makefile.am: New.
1436         * tests/tst-dlopen.c: New.
1437         * tests/tst-pam_acct_mgmt.c: New.
1438         * tests/tst-pam_authenticate.c: New.
1439         * tests/tst-pam_chauthtok.c: New.
1440         * tests/tst-pam_close_session.c: New.
1441         * tests/tst-pam_end.c: New.
1442         * tests/tst-pam_fail_delay.c: New.
1443         * tests/tst-pam_getenvlist.c: New.
1444         * tests/tst-pam_get_item.c: New.
1445         * tests/tst-pam_open_session.c: New.
1446         * tests/tst-pam_setcred.c: New.
1447         * tests/tst-pam_set_item.c: New.
1448         * tests/tst-pam_start.c: New.
1449         * tests/tst-pam_get_user.c: New.
1450
1451         * modules/pam_access/Makefile.am: Add rules for make check
1452         * modules/pam_access/tst-pam_access: New
1453         * modules/pam_cracklib/Makefile.am: Add rules for make check
1454         * modules/pam_cracklib/tst-pam_cracklib: New
1455         * modules/pam_debug/Makefile.am: Add rules for make check
1456         * modules/pam_debug/tst-pam_debug: New
1457         * modules/pam_deny/Makefile.am: Add rules for make check
1458         * modules/pam_deny/tst-pam_deny: New
1459         * modules/pam_echo/Makefile.am: Add rules for make check
1460         * modules/pam_echo/tst-pam_echo: New
1461         * modules/pam_env/Makefile.am: Add rules for make check
1462         * modules/pam_env/tst-pam_env: New
1463         * modules/pam_exec/Makefile.am: Add rules for make check
1464         * modules/pam_exec/tst-pam_exec: New
1465         * modules/pam_filter/Makefile.am: Add rules for make check
1466         * modules/pam_filter/tst-pam_filter: New
1467         * modules/pam_ftp/Makefile.am: Add rules for make check
1468         * modules/pam_ftp/tst-pam_ftp: New
1469         * modules/pam_group/Makefile.am: Add rules for make check
1470         * modules/pam_group/tst-pam_group: New
1471         * modules/pam_issue/Makefile.am: Add rules for make check
1472         * modules/pam_issue/tst-pam_issue: New
1473         * modules/pam_lastlog/Makefile.am: Add rules for make check
1474         * modules/pam_lastlog/tst-pam_lastlog: New
1475         * modules/pam_limits/Makefile.am: Add rules for make check
1476         * modules/pam_limits/tst-pam_limits: New
1477         * modules/pam_listfile/Makefile.am: Add rules for make check
1478         * modules/pam_listfile/tst-pam_listfile: New
1479         * modules/pam_localuser/Makefile.am: Add rules for make check
1480         * modules/pam_localuser/tst-pam_localuser: New
1481         * modules/pam_mail/Makefile.am: Add rules for make check
1482         * modules/pam_mail/tst-pam_mail: New
1483         * modules/pam_mkhomedir/Makefile.am: Add rules for make check
1484         * modules/pam_mkhomedir/tst-pam_mkhomedir: New
1485         * modules/pam_motd/Makefile.am: Add rules for make check
1486         * modules/pam_motd/tst-pam_motd: New
1487         * modules/pam_nologin/Makefile.am: Add rules for make check
1488         * modules/pam_nologin/tst-pam_nologin: New
1489         * modules/pam_permit/Makefile.am: Add rules for make check
1490         * modules/pam_permit/tst-pam_permit: New
1491         * modules/pam_rhosts/Makefile.am: Add rules for make check
1492         * modules/pam_rhosts/tst-pam_rhosts: New
1493         * modules/pam_rootok/Makefile.am: Add rules for make check
1494         * modules/pam_rootok/tst-pam_rootok: New
1495         * modules/pam_securetty/Makefile.am: Add rules for make check
1496         * modules/pam_securetty/tst-pam_securetty: New
1497         * modules/pam_selinux/Makefile.am: Add rules for make check
1498         * modules/pam_selinux/tst-pam_selinux: New
1499         * modules/pam_shells/Makefile.am: Add rules for make check
1500         * modules/pam_shells/tst-pam_shells: New
1501         * modules/pam_stress/Makefile.am: Add rules for make check
1502         * modules/pam_stress/tst-pam_stress: New
1503         * modules/pam_succeed_if/Makefile.am: Add rules for make check
1504         * modules/pam_succeed_if/tst-pam_succeed_if: New
1505         * modules/pam_tally/Makefile.am: Add rules for make check
1506         * modules/pam_tally/tst-pam_tally: New
1507         * modules/pam_time/Makefile.am: Add rules for make check
1508         * modules/pam_time/tst-pam_time: New
1509         * modules/pam_umask/Makefile.am: Add rules for make check
1510         * modules/pam_umask/tst-pam_umask: New
1511         * modules/pam_unix/Makefile.am: Add rules for make check
1512         * modules/pam_unix/tst-pam_unix: New
1513         * modules/pam_userdb/Makefile.am: Add rules for make check
1514         * modules/pam_userdb/tst-pam_userdb: New
1515         * modules/pam_warn/Makefile.am: Add rules for make check
1516         * modules/pam_warn/tst-pam_warn: New
1517         * modules/pam_wheel/Makefile.am: Add rules for make check
1518         * modules/pam_wheel/tst-pam_wheel: New
1519         * modules/pam_xauth/Makefile.am: Add rules for make check
1520         * modules/pam_xauth/tst-pam_xauth: New
1521
1522 2006-03-11  Thorsten Kukuk  <kukuk@thkukuk.de>
1523
1524         * doc/man/pam_fail_delay.3.xml: New.
1525         * doc/man/pam_fail_delay.3: New, generated from xml.
1526         * doc/man/pam_prompt.3.xml: New.
1527         * doc/man/pam_prompt.3: New, generated from xml.
1528         * doc/man/pam_syslog.3.xml: New.
1529         * doc/man/pam_syslog.3: New, generated from xml.
1530         * doc/man/pam_vprompt.3: New, generated from xml.
1531         * doc/man/pam_vsyslog.3: New, generated from xml.
1532
1533 2006-02-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1534
1535         * po/km.po: Update Khmer translation.
1536
1537 2006-02-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1538
1539         * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
1540         version from #1425487.
1541         * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
1542         * modules/pam_succeed_if/Makefile.am: Include XML rules.
1543         * modules/pam_succeed_if/README.xml: New.
1544         * modules/pam_succeed_if/README: Regenerated from xml.
1545         * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
1546         return values.
1547
1548 2006-02-22  Thorsten Kukuk  <kukuk@thkukuk.de>
1549
1550         * configure.in: Fix check for incomplete libaudit installations
1551         (Patch from Ruediger Oertel <ro@suse.de>).
1552
1553         * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
1554         correct last_login field [#1427401].
1555
1556         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
1557         format string for translation to allow reorder [#1428269].
1558         * po/*.po: Update with last pam_lastlog change.
1559
1560
1561 2006-02-17  Thorsten Kukuk  <kukuk@thkukuk.de>
1562
1563         * doc/man/Makefile.am: Add new manual pages.
1564         * doc/man/pam_end.3: Regenerated from xml file.
1565         * doc/man/pam_end.3.xml: Document freeing of item data.
1566         * doc/man/pam_get_user.3: New.
1567         * doc/man/pam_get_user.3.xml: New.
1568         * modules/pam_access/access.conf.5.xml: Fix typos.
1569         * modules/pam_env/Makefile.am: Add new manual pages.
1570         * modules/pam_env/README: Regenerate from xml file.
1571         * modules/pam_env/README.xml: New.
1572         * modules/pam_env/pam_env.8: New.
1573         * modules/pam_env/pam_env.8.xml: New.
1574         * modules/pam_env/pam_env.conf.5: New.
1575         * modules/pam_env/pam_env.conf.5.xml New.
1576
1577 2006-02-14  Thorsten Kukuk  <kukuk@thkukuk.de>
1578
1579         * po/fi.po: Updated translations.
1580         * po/pl.po: Likewise.
1581         * po/km.po: New translation.
1582         * configure.in: Add km as new language.
1583
1584 2006-02-13  Thorsten Kukuk  <kukuk@thkukuk.de>
1585
1586         * modules/pam_echo/pam_echo.8.xml: New.
1587         * modules/pam_echo/pam_echo.8: Regenerated from xml file.
1588         * modules/pam_echo/Makefile.am: Include Make.xml.rules.
1589         * modules/pam_echo/pam_echo.c: Fix return value.
1590
1591         * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
1592
1593 2006-02-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1594
1595         * configure.in: Add doc/man/Makefile.
1596         * Make.xml.rules: Enable xincludes for manual pages.
1597         * doc/Makefile.am (EXRA_DIST): Remove manual pages.
1598         (SUBDIR): Add man subdirectory.
1599         * doc/man/Makefile.am: New.
1600         * doc/man/pam_acct_mgmt.3: New.
1601         * doc/man/pam_acct_mgmt.3.xml: New.
1602         * doc/man/pam_get_data.3: New.
1603         * doc/man/pam_get_data.3.xml: New.
1604         * doc/man/pam_set_data.3: New.
1605         * doc/man/pam_set_data.3.xml: New.
1606         * doc/man/pam.8.xml: New.
1607         * doc/man/pam.8: Regenerated from xml file.
1608         * doc/man/pam_authenticate.3.xml: New.
1609         * doc/man/pam_authenticate.3: Regenerated from xml file.
1610         * doc/man/pam_chauthtok.3.xml: New.
1611         * doc/man/pam_chauthtok.3: Regenerated from xml file.
1612         * doc/man/pam_close_session.3.xml: New.
1613         * doc/man/pam_close_session.3: Regenerated from xml file.
1614         * doc/man/pam_end.3.xml: New.
1615         * doc/man/pam_end.3: Regenerated from xml file.
1616         * doc/man/pam_fail_delay.3.xml: New.
1617         * doc/man/pam_fail_delay.3: Regenerated from xml file.
1618         * doc/man/pam_get_item.3.xml: New.
1619         * doc/man/pam_get_item.3: Regenerated from xml file.
1620         * doc/man/pam_item_types.inc.xml: New.
1621         * doc/man/pam_open_session.3.xml: New.
1622         * doc/man/pam_open_session.3: Regenerated from xml file.
1623         * doc/man/pam_set_item.3.xml: New.
1624         * doc/man/pam_set_item.3: Regenerated from xml file.
1625         * doc/man/pam_setcred.3.xml: New.
1626         * doc/man/pam_setcred.3: Regenerated from xml file.
1627         * doc/man/pam_start.3.xml: New.
1628         * doc/man/pam_start.3: Regenerated from xml file.
1629         * doc/man/pam_strerror.3.xml: New.
1630         * doc/man/pam_strerror.3: Regenerated from xml file.
1631         * doc/man/template-man: Removed.
1632
1633 2006-02-10  Thorsten Kukuk  <kukuk@thkukuk.de>
1634
1635         * configure.in: Remove pam_pwdb support.
1636         * modules/Makefile.am: remove pam_pwdb.
1637         * modules/pam_pwdb: Remove complete directory.
1638         * libpam/Makefile.am: Remove LIBPWDB references.
1639         * libpam/pam_static_modules.h: Remove pam_pwdb references.
1640         * doc/modules/pam_pwdb.sgml: Removed.
1641         * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
1642         * doc/pam_source.sgml: Remove references to libpwdb.
1643         * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
1644         * doc/modules/pam_group.sgml: Likewise.
1645         * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
1646         * doc/modules/pam_userdb.sgml: Likewise.
1647         * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
1648         with pam_unix.
1649         * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
1650         * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
1651
1652         * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
1653         * modules/pam_cracklib/Makefile.am: Likewise.
1654         * modules/pam_deny/Makefile.am: Likewise.
1655         * modules/pam_exec/Makefile.am: Likewise.
1656
1657 2006-02-07  Thorsten Kukuk  <kukuk@thkukuk.de>
1658
1659         * configure.in: Check for text browser.
1660         * Make.xml.rules: Add rule to generate README from README.xml.
1661
1662         * modules/pam_access/Makefile.am: Include Make.xml.rules.
1663         * modules/pam_access/README: Regenerated from README.xml.
1664         * modules/pam_access/README.xml: New.
1665         * modules/pam_access/access.conf: Extended by new examples.
1666         * modules/pam_access/access.conf.5: New, generated from xml file.
1667         * modules/pam_access/access.conf.5.xml: New.
1668         * modules/pam_access/pam_access.8: New, generated from xml file.
1669         * modules/pam_access/pam_access.8.xml: New.
1670         * modules/pam_access/pam_access.c: Add rules for IPv6 and
1671         netmasks.
1672         Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
1673
1674         * modules/pam_deny/Makefile.am: Include Make.xml.rules.
1675         * modules/pam_deny/pam_deny.8.xml: New.
1676         * modules/pam_deny/pam_deny.8: New, generated from xml file.
1677         * modules/pam_deny/README.xml: New.
1678         * modules/pam_deny/README: Regenerated from xml file.
1679
1680         * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
1681         * modules/pam_cracklib/pam_cracklib.8.xml: New.
1682         * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
1683         * modules/pam_cracklib/README.xml: New.
1684         * modules/pam_cracklib/README: Regenerated from xml file.
1685
1686         * modules/pam_exec/Makefile.am: Add rule to generate README.
1687         * modules/pam_exec/README: Regenerated from xml file.
1688         * modules/pam_exec/pam_exec.8: Regenerated from xml file.
1689         * modules/pam_exec/pam_exec.8.xml: Syntax files.
1690
1691 2006-02-06  Thorsten Kukuk  <kukuk@thkukuk.de>
1692
1693         * po/nl.po: New.
1694         * po/pt.po: Update translations.
1695         * configure.in: Add nl as new language.
1696
1697 2006-01-30  Thorsten Kukuk  <kukuk@thkukuk.de>
1698
1699         * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
1700         * modules/pam_exec/Makefile.am: Include Make.xml.rules.
1701
1702         * Make.xml.rules: New.
1703
1704         * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
1705
1706 2006-01-27  Thorsten Kukuk  <kukuk@thkukuk.de>
1707
1708         * configure.in: Prefer libdb over libndbm, fix check for
1709         libcrack and remove not needed BACKUP_LIBS.
1710
1711 2006-01-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1712
1713         * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
1714
1715         * po/de.po: Fix one translation.
1716
1717         * configure.in: Add modules/pam_exec.
1718         * modules/Makefile.am: Add pam_exec subdirectory.
1719         * modules/pam_exec/README: New.
1720         * modules/pam_exec/Makefile.am: New.
1721         * modules/pam_exec/pam_exec.8: New.
1722         * modules/pam_exec/pam_exec.c: New.
1723         * modules/pam_exec/pam_exec.8.xml: New.
1724         * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
1725         * po/*.po: Merge new pam_exec strings.
1726
1727         * libpam/pam_static_modules.h: New.
1728         * Makefile.am: Reorder subdirectories for static modules.
1729         * configure.in: Add --enable-static-modules option.
1730         * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
1731         necessary, add pam_static_modules.h, link against all PAM
1732         module object files if STATIC_MODULES is defined.
1733         * libpam/pam_static.c: Remove old _static_module* includes,
1734         include pam_static_modules.h.
1735
1736         * configure.in: Add checks for xsltproc, xmllint and docbook
1737         xsl stylesheet.
1738         * m4/jh_path_xml_catalog.m4: New.
1739
1740 2006-01-22  Thorsten Kukuk  <kukuk@thkukuk.de>
1741
1742         * modules/pam_succeed_if/pam_succeed_if.c: Add support for
1743         static modules.
1744         * modules/pam_xauth/pam_xauth.c: Likewise.
1745
1746         * libpam/pam_static.c (_pam_open_static_handler): Add pamh
1747         as argument.
1748         * libpam/pam_private.h: Adjust prototype.
1749         * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
1750         _pam_open_static_handler call.
1751
1752         * configure.in: Don't define PAM_DYNAMIC.
1753         * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
1754         include pam_dynamic.h
1755         * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
1756         exclude functions if we compile with PAM_STATIC.
1757         * libpam/pam_dynamic.h: Remove.
1758         * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
1759         * libpam/Makefile.am: Bump version number of libpam, remove
1760         pam_dynamic.h.
1761
1762 2006-01-21  Thorsten Kukuk  <kukuk@thkukuk.de>
1763
1764         * modules/pam_listfile/pam_listfile.c: Add support for session
1765         and password management.
1766
1767 2006-01-19  Thorsten Kukuk  <kukuk@thkukuk.de>
1768
1769         * doc/specs/Makefile.am (spec): Add padout to fix parallel
1770         build (Reported by Andreas Haumer <andreas@xss.co.at>).
1771
1772 2006-01-15  Thorsten Kukuk  <kukuk@thkukuk.de>
1773
1774         * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
1775         already defined.
1776
1777 2006-01-13  Thorsten Kukuk  <kukuk@thkukuk.de>
1778
1779         * release version 0.99.3.0
1780
1781         * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
1782         error.
1783
1784         * modules/pam_umask/pam_umask.c (search_key): Don't ignore
1785         EOF/error return value from fgets().
1786
1787         * configure.in: Check for getline and getdelim
1788
1789         * po/fi.po: Add new translations.
1790         * po/de.po: Likewise.
1791         * po/es.po: Likewise.
1792         * po/fr.po: Likewise.
1793         * po/it.po: Likewise.
1794         * po/ja.po: Likewise.
1795         * po/pt_BR.po: Likewise.
1796         * po/zh_CH.po: Likewise.
1797         * po/zh_TW.po: Likewise.
1798
1799 2006-01-13  Dmitry V. Levin  <ldv@altlinux.org>
1800
1801         * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
1802         call with %m specifier.
1803
1804 2006-01-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1805
1806         * configure.in: Add check for -fpie/-pie
1807         * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
1808         upperLOWER with -fpie/-pie if supported.
1809         * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
1810         with -fpie/-pie if supported.
1811
1812 2006-01-12  Steve Grubb  <sgrubb@redhat.com>
1813
1814         * configure.in: Add check for audit library.
1815         * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
1816         (libpam_la_SOURCES): Add pam_audit.c.
1817         * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
1818         * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
1819         * libpam/pam_password.c (pam_chauthtok):  Likewise.
1820         * libpam/pam_session.c (pam_open_session),
1821         (pam_close_session): Likewise.
1822         * libpam/pam_private.h: Add audit_state member to pam_handle,
1823         declare _pam_auditlog and _pam_audit_end.
1824         * libpam/pam_start.c (pam_start): Initialize audit_state.
1825         * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
1826         implementation.
1827         * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
1828         * NEWS: Note about added auditing.
1829
1830 2006-01-11  Thorsten Kukuk  <kukuk@thkukuk.de>
1831
1832         * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
1833
1834         * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
1835         if we compile libpam itself.
1836
1837         * po/hu.po: Update with new translations.
1838
1839 2006-01-08  Thorsten Kukuk  <kukuk@thkukuk.de>
1840
1841         * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
1842         instead of PAM_AUTHTOK_RECOVER_ERR.
1843         * modules/pam_pwdb/support.-c: Likewise.
1844         * modules/pam_unix/support.c: Likewise.
1845         * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
1846         * libpam/pam_strerror.c (pam_strerror): Likewise.
1847
1848         * libpam/include/security/_pam_compat.h: Define
1849         PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
1850
1851         * libpam/include/security/_pam_types.h: Rename
1852         PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
1853
1854 2006-01-05  Thorsten Kukuk  <kukuk@thkukuk.de>
1855
1856         * libpam/include/security/_pam_types.h: Remove nonnull attribute
1857         from third paramter (item) of pam_get_item.
1858         * libpam/Makefile.am: Bump version number of shared library.
1859
1860 2005-12-21  Tomas Mraz <t8m@centrum.cz>
1861
1862         * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
1863         (evaluate_notingroup): Simplified.
1864         (evaluate_innetgr), (evaluate_notinnetgr): New functions.
1865         (evaluate): Added calls to evaluate_(not)innetgr().
1866         * modules/pam_succeed_if/README: Documented netgroup matching.
1867         * NEWS: Mentioned the added netgroup matching support.
1868
1869 2005-12-20  Thorsten Kukuk  <kukuk@thkukuk.de>
1870
1871         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
1872         strftime instead of ctime.
1873
1874         * po/de.po: Fix typo.
1875
1876 2005-12-19  Thorsten Kukuk  <kukuk@thkukuk.de>
1877
1878         * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
1879         Reported by Charles_H_Bedford@nbc.gov.
1880
1881         * modules/pam_time/pam_time.c (check_account): Implement
1882         support for netgroups.
1883
1884         * modules/pam_time/time.conf: Document usage of netgroups.
1885
1886 2005-12-16  Thorsten Kukuk  <kukuk@thkukuk.de>
1887
1888         * modules/pam_group/pam_group.c (check_account): Implement
1889         support for netgroups.
1890
1891         * modules/pam_group/group.conf: Add all documentation to this
1892         example config file and don't reference to outdated configs.
1893
1894         * modules/pam_group/README: New.
1895
1896         * modules/pam_group/Makefile.am: Add README to EXTRADIST.
1897
1898 2005-12-15  Thorsten Kukuk  <kukuk@suse.de>
1899
1900         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
1901         error if user logins the first time.
1902
1903         * modules/pam_lastlog/README: New.
1904
1905         * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
1906
1907 2005-12-14  Thorsten Kukuk  <kukuk@suse.de>
1908
1909         * modules/pam_deny/pam_deny.c: Fix comment.
1910
1911         * doc/pam_appl.sgml: Fix typo.
1912
1913         Reported by Russell Bateman <russ@windofkeltia.com>
1914
1915 2005-12-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1916
1917         * release version 0.99.2.1
1918
1919         * po/de.po: Remove new fuzzy entry
1920
1921         * NEWS: Add 0.99.2.1 changes
1922
1923         * configure.in: bump version number to 0.99.2.1
1924
1925 2005-12-12  Dmitry V. Levin  <ldv@altlinux.org>
1926
1927         Cleanup pam_syslog messages.
1928
1929         * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
1930         * modules/pam_filter/pam_filter.c (set_filter): Append %m
1931         specifier to pam_syslog messages where appropriate.
1932         * modules/pam_group/pam_group.c (read_field): Likewise.
1933         * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
1934         (create_homedir): Do not use make_remark() wrapper, call
1935         pam_info() directly.  Call pam_syslog() right after failed
1936         operation and append %m specifier to pam_syslog messages where
1937         appropriate.
1938         * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
1939         sequence of malloc(), strcpy() and strcat() calls with asprintf().
1940         Append %m specifier to pam_syslog messages where appropriate.
1941         * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
1942         Append %m specifier to pam_syslog messages where appropriate.
1943         * modules/pam_shells/pam_shells.c (perform_check): Likewise.
1944
1945 2005-12-12  Tomas Mraz  <t8m@centrum.cz>
1946
1947         * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
1948         * po/Linux-PAM.pot: Likewise.
1949         * po/de.po: Likewise.
1950         * po/es.po: Likewise.
1951         * po/fi.po: Likewise.
1952         * po/fr.po: Likewise.
1953         * po/hu.po: Likewise.
1954         * po/it.po: Likewise.
1955         * po/ja.po: Likewise.
1956         * po/nb.po: Likewise.
1957         * po/pa.po: Likewise.
1958         * po/pl.po: Likewise.
1959         * po/pt.po: Likewise.
1960         * po/pt_BR.po: Likewise.
1961         * po/zh_CN.po: Likewise.
1962         * po/zh_TW.po: Likewise.
1963         * po/de.po: Add new translation, fixed typo in string.
1964
1965 2005-12-12  Mike Becher  <Mike.Becher@lrz-muenchen.de>
1966
1967         * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
1968
1969 2005-12-12  Thorsten Kukuk  <kukuk@suse.de>
1970
1971         * modules/pam_mail/README: Document "quiet" and "standard"
1972         options.
1973
1974 2005-12-07  Thorsten Kukuk  <kukuk@suse.de>
1975
1976         * modules/pam_mail/pam_mail.c: Modify assembling of output
1977         for easier translation.
1978
1979         * po/de.po: Translate new pam_mail messages.
1980
1981
1982 2005-11-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1983
1984         * po/de.po: Add new translation, fix wrong format specifier.
1985         * po/cs.po: Fix wrong format specifier.
1986         * po/es.po: Likewise.
1987         * po/fi.po: Likewise.
1988         * po/fr.po: Likewise.
1989         * po/hu.po: Likewise.
1990         * po/it.po: Likewise.
1991         * po/ja.po: Likewise.
1992         * po/nb.po: Likewise.
1993         * po/pa.po: Likewise.
1994         * po/pl.po: Likewise.
1995         * po/pt.po: Likewise.
1996         * po/pt_BR.po: Likewise.
1997         * po/zh_CN.po: Likewise.
1998         * po/zh_TW.po: Likewise.
1999
2000 2005-11-24  Dmitry V. Levin  <ldv@altlinux.org>
2001
2002         * config.h.in: Remove generated file.
2003         * .cvsignore: Add config.h.in.
2004
2005         * configure.in: Do not check for strerror.
2006         * libpam_misc/misc_conv.c (read_string): Replace strerror()
2007         call with %m specifier.
2008         * libpamc/pamc_converse.c (pamc_converse): Likewise.
2009         * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
2010         * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
2011         Likewise.
2012         * modules/pam_selinux/pam_selinux.c (security_label_tty):
2013         Likewise.
2014         (security_restorelabel_tty, security_label_tty): Append %m
2015         specifier where appropriate.
2016         * modules/pam_selinux/pam_selinux_check.c (main): Replace
2017         strerror() call with %m specifier.
2018         * modules/pam_unix/pam_unix_passwd.c (save_old_password,
2019         _update_passwd, _update_shadow): Likewise.
2020         * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
2021         * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
2022         * po/Linux-PAM.pot: Update strings from pam_selinux.
2023         * po/cs.po: Likewise.
2024         * po/de.po: Likewise.
2025         * po/es.po: Likewise.
2026         * po/fi.po: Likewise.
2027         * po/fr.po: Likewise.
2028         * po/hu.po: Likewise.
2029         * po/it.po: Likewise.
2030         * po/ja.po: Likewise.
2031         * po/nb.po: Likewise.
2032         * po/pa.po: Likewise.
2033         * po/pl.po: Likewise.
2034         * po/pt.po: Likewise.
2035         * po/pt_BR.po: Likewise.
2036         * po/zh_CN.po: Likewise.
2037         * po/zh_TW.po: Likewise.
2038
2039 2005-11-23  Thorsten Kukuk  <kukuk@suse.de>
2040
2041         * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
2042         new variable to fix compiler warning.
2043
2044         * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
2045         don't need to start with /dev/.
2046
2047 2005-11-21  Thorsten Kukuk  <kukuk@thkukuk.de>
2048
2049         * release version 0.99.2.0
2050
2051         * libpam_misc/Makefile.am: Increase release number (for change
2052         from 2005-11-09)
2053
2054         * NEWS: Adjust for 0.99.2.0
2055
2056 2005-11-17  Thorsten Kukuk  <kukuk@thkukuk.de>
2057
2058         * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
2059         Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
2060
2061 2005-11-16  Thorsten Kukuk  <kukuk@thkukuk.de>
2062
2063         * libpam/pam_handlers.c: Replace code for all dlopen variants with
2064         a generic wrapper.
2065         * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
2066         * libpam/pam_dynamic.h: Provide prototypes.
2067         For Mac OS X support [#534205]
2068
2069 2005-11-09  Tomas Mraz <t8m@centrum.cz>
2070
2071         * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
2072         full path tty name.
2073         * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
2074         full path tty name. Allow unset tty.
2075         (logic_member): Allow matching ':' in tty name.
2076         * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
2077         full path tty name. Allow unset tty.
2078         (logic_member): Allow matching ':' in tty name.
2079
2080         * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
2081         is not terminal.
2082
2083 2005-11-07  Thorsten Kukuk  <kukuk@thkukuk.de>
2084
2085         * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
2086         correct variable names.
2087
2088 2005-11-06  Steve Langasek <vorlon@debian.org>
2089
2090         * modules/pam_env/pam_env.c: don't treat a missing
2091         /etc/environment as a fatal error when attempting to read it,
2092         and try to read this file by default; this restores the behavior
2093         from Linux-PAM 0.76.
2094
2095 2005-11-02  Tomas Mraz <t8m@centrum.cz>
2096
2097         * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
2098         by ohyajapn.
2099
2100         * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
2101         logic when comparing dates to handle corner cases better [#1245888].
2102
2103 2005-10-31  Thorsten Kukuk  <kukuk@suse.de>
2104
2105         * modules/pam_filter/pam_filter.c: Use XCASE only if defined
2106         [#624214]
2107
2108 2005-10-27  Thorsten Kukuk  <kukuk@suse.de>
2109
2110         * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
2111
2112 2005-10-26  Tomas Mraz  <t8m@centrum.cz>
2113
2114         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
2115         modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
2116         modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
2117         uid to 0 before executing the helper if SELinux is enabled.
2118         * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
2119         if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
2120
2121
2122 2005-10-20  Tomas Mraz  <t8m@centrum.cz>
2123
2124         * configure.in: Added check for xauth binary and --with-xauth option.
2125         * config.h.in: Added configurable PAM_PATH_XAUTH.
2126         * modules/pam_xauth/README,
2127         modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
2128         * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
2129         searching xauth binary on multiple places.
2130         (run_coprocess): Don't use execvp as it can be a security risk.
2131
2132 2005-10-04  Steve Langasek  <vorlon@debian.org>
2133
2134         * libpam/include/security/pam_malloc.h,
2135         libpam/include/security/pam_modules.h: Declare public header
2136         files extern "C" so that they are C++-safe.
2137
2138 2005-10-02  Dmitry V. Levin  <ldv@altlinux.org>
2139             Steve Langasek  <vorlon@debian.org>
2140
2141         Cleanup gratuitous use of strdup().
2142         Fix "missing argument" checks.
2143
2144         * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
2145         to conffile and envfile arguments.  Do not use x_strdup() for
2146         conffile and envfile initialization.  Fix "missing argument"
2147         checks.
2148         (_parse_config_file): Take conffile argument of type "const char *"
2149         instead of "char **".  Do not free conffile.
2150         (_parse_env_file): Take env_file argument of type "const char *"
2151         instead of "char **".  Do not free env_file.
2152         (pam_sm_setcred): Add const qualifier to conf_file and env_file.
2153         Pass conf_file and env_file to _parse_config_file() and
2154         _parse_env_file() by value.
2155         (pam_sm_open_session): Likewise.
2156
2157         * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
2158         users argument.  Do not use x_strdup() for users initialization.
2159         (lookup):  Add const qualifier to list argument.
2160         (pam_sm_authenticate): Add const qualifier to users argument.
2161
2162         * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
2163         to maildir argument.  Do not use x_strdup() for maildir
2164         initialization.  Fix "missing argument" check.
2165         (get_folder): Take path_mail argument of type "const char *"
2166         instead of "char **".  Do not free path_mail.
2167         (_do_mail): Add const qualifier to path_mail argument.
2168         Pass path_mail to get_folder() by value.
2169
2170         * modules/pam_motd/pam_motd.c: Include <syslog.h>.
2171         (pam_sm_open_session): Add const qualifier to motd_path.
2172         Do not use x_strdup() for motd_path initialization.  Do not
2173         free motd_path.  Fix "missing argument" check.  Add "unknown
2174         option" warning.
2175
2176         * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
2177         qualifier to database and cryptmode arguments.  Fix "missing
2178         argument" checks.
2179         (pam_sm_authenticate): Add const qualifier to database and cryptmode.
2180         (pam_sm_acct_mgmt): Likewise.
2181
2182 2005-10-01  Steve Langasek  <vorlon@debian.org>
2183
2184         * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
2185
2186 2005-09-30  Steve Langasek  <vorlon@debian.org>
2187
2188         * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
2189         gratuitous use of strdup().
2190
2191 2005-09-27  Thorsten Kukuk  <kukuk@thkukuk.de>
2192
2193         * release 0.99.1.0
2194
2195         * doc/specs/Makefile.am (install-data-local): Install
2196         rfc and draft.
2197         (all): Copy rfc if we build outside of source directory.
2198
2199 2005-09-27  Thorsten Kukuk  <kukuk@suse.de>
2200
2201         * NEWS: Document removal of pam_radius.
2202         * autogen.sh: Make configure script executeable.
2203
2204         * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
2205         (lex.yy.c): Fixed out of tree build.
2206
2207         * conv/pam_conv1/pam_conv.y: Fix main prototype.
2208
2209         * README: Adjust.
2210
2211         * po/POTFILES.in: Remove files not distributed by tar archive
2212         and not containing strings for translation.
2213
2214 2005-09-26  Tomas Mraz  <t8m@centrum.cz>
2215
2216         * NEWS: Add a few missing entries from CHANGELOG.
2217
2218         * AUTHORS: Fixed entries for Toady and me.
2219
2220         * Makefile.am (M4_FILES): Fixed out of tree build.
2221         * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
2222         (spec, lex.yy.c): Fixed out of tree build.
2223
2224         * modules/pam_userdb/README: Document try_first_pass and
2225         use_first_pass options, remove use_authtok option.
2226
2227
2228 2005-09-26  Dmitry V. Levin  <ldv@altlinux.org>
2229
2230         * NEWS: Mention changes in pam_lastlog.
2231
2232 2005-09-26  Thorsten Kukuk  <kukuk@suse.de>
2233
2234         * NEWS: New file.
2235         * autogen.sh: Don't generate NEWS file.
2236         * CHANGELOG: Document it as obsolete.
2237
2238 2005-09-26  Tomas Mraz  <t8m@centrum.cz>
2239
2240         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
2241         _log_err() -> pam_syslog()
2242         (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
2243         * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
2244         _log_err() -> pam_syslog()
2245         * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
2246         (getNISserver, _unix_run_shadow_binary, _update_passwd,
2247         _update_shadow, _do_setpass, _pam_unix_approve_pass,
2248         pam_sm_chauthtok): _log_err() -> pam_syslog()
2249         * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
2250         (pam_sm_open_session, pam_sm_close_session):
2251         _log_err() -> pam_syslog()
2252         * modules/pam_unix/support.c (_log_err, converse): removed
2253         (_make_remark): use pam_prompt() instead of converse()
2254         (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
2255         _unix_verify_password, _unix_read_password):
2256         _log_err() -> pam_syslog()
2257         _cleanup(), _unix_cleanup(): Silence unused param warnings.
2258         (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
2259         _unix_run_helper_binary): Silence incorrect type warnings.
2260         (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
2261         instead of converse().
2262         * modules/pam_unix/support.h (_log_err): removed
2263         * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
2264
2265 2005-09-26  Thorsten Kukuk  <kukuk@suse.de>
2266
2267         * configure.in: Add doc/specs/Makefile.
2268         * Makefile.am: Add releasedocs rule.
2269         * doc/Makefile.am: Add specs subdir, remove files from specs
2270         directory, add rfc86.0.txt to releasedocs.
2271         * doc/specs/Makefile.am: New file.
2272         * doc/specs/formatter/parse.y: move from here ...
2273         * doc/specs/parse.y: ... here.
2274         * doc/specs/formatter/parse.lex: move from here ...
2275         * doc/specs/parse.lex: ... here.
2276
2277         * modules/pam_mail/pam_mail.c: Mark missing strings for translation
2278         * po/Linux-PAM.pot: Add new strings from pam_mail
2279         * po/cs.po: Likewise.
2280         * po/de.po: Likewise.
2281         * po/es.po: Likewise.
2282         * po/fi.po: Likewise.
2283         * po/fr.po: Likewise.
2284         * po/hu.po: Likewise.
2285         * po/it.po: Likewise.
2286         * po/ja.po: Likewise.
2287         * po/nb.po: Likewise.
2288         * po/pa.po: Likewise.
2289         * po/pl.po: Likewise.
2290         * po/pt.po: Likewise.
2291         * po/pt_BR.po: Likewise.
2292         * po/zh_CN.po: Likewise.
2293         * po/zh_TW.po: Likewise.
2294
2295 2005-09-23  Tomas Mraz  <t8m@centrum.cz>
2296
2297         * modules/pam_access/pam_access.c (from_match): Support NULL from.
2298         (string_match): Support NULL string, add NONE keyword matching it.
2299         (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
2300         * modules/pam_access/access.conf: NONE keyword description
2301         * modules/pam_access/README: NONE keyword description
2302
2303 2005-09-22  Dmitry V. Levin  <ldv@altlinux.org>
2304
2305         * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
2306         pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
2307         text of log messages.
2308         (pam_sm_open_session): Replace sequence of malloc(), strcpy()
2309         and strcat() calls with asprintf().  Replace syslog() calls
2310         with pam_syslog().
2311
2312         * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
2313         instead of memcmp() for string comparison.
2314
2315 2005-09-21  Dmitry V. Levin  <ldv@altlinux.org>
2316
2317         * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
2318         (parse_args): Add pam_handle_t* argument.  Log unrecognized
2319         options.
2320         (perform_check): Log pam_get_user() and malloc() failures.
2321         (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
2322         Pass pam_handle_t* to parse_args().
2323
2324         * modules/pam_mail/pam_mail.c: Include <errno.h>.
2325         Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
2326         NO_MAIL_STANDARD_FORMAT macros.
2327         (parse_args, get_folder): Cleanup error messages.
2328         (get_folder): Fix leak of the path_mail variable in case of
2329         pam_get_user() failure.  Cleanup memory management.
2330         (get_mail_status): Add pam_handle_t* argument.  Fix leaks of
2331         namelist variable.  Cleanup memory management.  Log memory
2332         allocation failures.  Remove 250-byte limit on Maildir pathname.
2333         (report_mail): Mark text messages for translation.
2334         (_do_mail): Cleanup memory management.  Pass pam_handle_t*
2335         to get_mail_status().
2336
2337         * po/Linux-PAM.pot: Update with new strings from pam_mail for
2338         translation.
2339         * po/cs.po: Likewise.
2340         * po/de.po: Likewise.
2341         * po/es.po: Likewise.
2342         * po/fi.po: Likewise.
2343         * po/fr.po: Likewise.
2344         * po/hu.po: Likewise.
2345         * po/it.po: Likewise.
2346         * po/ja.po: Likewise.
2347         * po/nb.po: Likewise.
2348         * po/pa.po: Likewise.
2349         * po/pl.po: Likewise.
2350         * po/pt.po: Likewise.
2351         * po/pt_BR.po: Likewise.
2352         * po/zh_CN.po: Likewise.
2353         * po/zh_TW.po: Likewise.
2354
2355 2005-09-20  Thorsten Kukuk  <kukuk@suse.de>
2356
2357         * configure.in: Add finish translation.
2358         * po/fi.po: New.
2359
2360         * acinclude.m4: remove libprelude macros.
2361         * m4/libprelude.m4: New.
2362
2363         * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
2364
2365         * libpamc/Makefile.am (EXTRA_DIST): Add License.
2366
2367 See CHANGELOG for earlier changes.