1 2006-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
3 * configure.in: create tests/Makefile
4 * Makefile.am (SUBDIRS): Add tests
5 * tests/Makefile.am: New
7 * tests/tst-pam_acct_mgmt.c
8 * tests/tst-pam_authenticate.c
9 * tests/tst-pam_chauthtok.c
10 * tests/tst-pam_close_session.c
12 * tests/tst-pam_fail_delay.c
13 * tests/tst-pam_getenvlist.c
14 * tests/tst-pam_get_item.c
15 * tests/tst-pam_open_session.c
16 * tests/tst-pam_setcred.c
17 * tests/tst-pam_set_item.c
18 * tests/tst-pam_start.c
20 * modules/pam_access/Makefile.am: Add rules for make check
21 * modules/pam_access/tst-pam_access: New
22 * modules/pam_cracklib/Makefile.am: Add rules for make check
23 * modules/pam_cracklib/tst-pam_cracklib: New
24 * modules/pam_debug/Makefile.am: Add rules for make check
25 * modules/pam_debug/tst-pam_debug: New
26 * modules/pam_deny/Makefile.am: Add rules for make check
27 * modules/pam_deny/tst-pam_deny: New
28 * modules/pam_echo/Makefile.am: Add rules for make check
29 * modules/pam_echo/tst-pam_echo: New
30 * modules/pam_env/Makefile.am: Add rules for make check
31 * modules/pam_env/tst-pam_env: New
32 * modules/pam_exec/Makefile.am: Add rules for make check
33 * modules/pam_exec/tst-pam_exec: New
34 * modules/pam_filter/Makefile.am: Add rules for make check
35 * modules/pam_filter/tst-pam_filter: New
36 * modules/pam_ftp/Makefile.am: Add rules for make check
37 * modules/pam_ftp/tst-pam_ftp: New
38 * modules/pam_group/Makefile.am: Add rules for make check
39 * modules/pam_group/tst-pam_group: New
40 * modules/pam_issue/Makefile.am: Add rules for make check
41 * modules/pam_issue/tst-pam_issue: New
42 * modules/pam_lastlog/Makefile.am: Add rules for make check
43 * modules/pam_lastlog/tst-pam_lastlog: New
44 * modules/pam_limits/Makefile.am: Add rules for make check
45 * modules/pam_limits/tst-pam_limits: New
46 * modules/pam_listfile/Makefile.am: Add rules for make check
47 * modules/pam_listfile/tst-pam_listfile: New
48 * modules/pam_localuser/Makefile.am: Add rules for make check
49 * modules/pam_localuser/tst-pam_localuser: New
50 * modules/pam_mail/Makefile.am: Add rules for make check
51 * modules/pam_mail/tst-pam_mail: New
52 * modules/pam_mkhomedir/Makefile.am: Add rules for make check
53 * modules/pam_mkhomedir/tst-pam_mkhomedir: New
54 * modules/pam_motd/Makefile.am: Add rules for make check
55 * modules/pam_motd/tst-pam_motd: New
56 * modules/pam_nologin/Makefile.am: Add rules for make check
57 * modules/pam_nologin/tst-pam_nologin: New
58 * modules/pam_permit/Makefile.am: Add rules for make check
59 * modules/pam_permit/tst-pam_permit: New
60 * modules/pam_rhosts/Makefile.am: Add rules for make check
61 * modules/pam_rhosts/tst-pam_rhosts: New
62 * modules/pam_rootok/Makefile.am: Add rules for make check
63 * modules/pam_rootok/tst-pam_rootok: New
64 * modules/pam_securetty/Makefile.am: Add rules for make check
65 * modules/pam_securetty/tst-pam_securetty: New
66 * modules/pam_selinux/Makefile.am: Add rules for make check
67 * modules/pam_selinux/tst-pam_selinux: New
68 * modules/pam_shells/Makefile.am: Add rules for make check
69 * modules/pam_shells/tst-pam_shells: New
70 * modules/pam_stress/Makefile.am: Add rules for make check
71 * modules/pam_stress/tst-pam_stress: New
72 * modules/pam_succeed_if/Makefile.am: Add rules for make check
73 * modules/pam_succeed_if/tst-pam_succeed_if: New
74 * modules/pam_tally/Makefile.am: Add rules for make check
75 * modules/pam_tally/tst-pam_tally: New
76 * modules/pam_time/Makefile.am: Add rules for make check
77 * modules/pam_time/tst-pam_time: New
78 * modules/pam_umask/Makefile.am: Add rules for make check
79 * modules/pam_umask/tst-pam_umask: New
80 * modules/pam_unix/Makefile.am: Add rules for make check
81 * modules/pam_unix/tst-pam_unix: New
82 * modules/pam_userdb/Makefile.am: Add rules for make check
83 * modules/pam_userdb/tst-pam_userdb: New
84 * modules/pam_warn/Makefile.am: Add rules for make check
85 * modules/pam_warn/tst-pam_warn: New
86 * modules/pam_wheel/Makefile.am: Add rules for make check
87 * modules/pam_wheel/tst-pam_wheel: New
88 * modules/pam_xauth/Makefile.am: Add rules for make check
89 * modules/pam_xauth/tst-pam_xauth: New
91 2006-03-11 Thorsten Kukuk <kukuk@thkukuk.de>
93 * doc/man/pam_fail_delay.3.xml: New.
94 * doc/man/pam_fail_delay.3: New, generated from xml.
95 * doc/man/pam_prompt.3.xml: New.
96 * doc/man/pam_prompt.3: New, generated from xml.
97 * doc/man/pam_syslog.3.xml: New.
98 * doc/man/pam_syslog.3: New, generated from xml.
99 * doc/man/pam_vprompt.3: New, generated from xml.
100 * doc/man/pam_vsyslog.3: New, generated from xml.
102 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
104 * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
105 version from #1425487.
106 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
107 * modules/pam_succeed_if/Makefile.am: Include XML rules.
108 * modules/pam_succeed_if/README.xml: New.
109 * modules/pam_succeed_if/README: Regenerated from xml.
110 * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
113 2006-02-22 Thorsten Kukuk <kukuk@thkukuk.de>
115 * configure.in: Fix check for incomplete libaudit installations
116 (Patch from Ruediger Oertel <ro@suse.de>).
118 * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
119 correct last_login field [#1427401].
121 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
122 format string for translation to allow reorder [#1428269].
123 * po/*.po: Update with last pam_lastlog change.
126 2006-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
128 * doc/man/Makefile.am: Add new manual pages.
129 * doc/man/pam_end.3: Regenerated from xml file.
130 * doc/man/pam_end.3.xml: Document freeing of item data.
131 * doc/man/pam_get_user.3: New.
132 * doc/man/pam_get_user.3.xml: New.
133 * modules/pam_access/access.conf.5.xml: Fix typos.
134 * modules/pam_env/Makefile.am: Add new manual pages.
135 * modules/pam_env/README: Regenerate from xml file.
136 * modules/pam_env/README.xml: New.
137 * modules/pam_env/pam_env.8: New.
138 * modules/pam_env/pam_env.8.xml: New.
139 * modules/pam_env/pam_env.conf.5: New.
140 * modules/pam_env/pam_env.conf.5.xml New.
142 2006-02-14 Thorsten Kukuk <kukuk@thkukuk.de>
144 * po/fi.po: Updated translations.
145 * po/pl.po: Likewise.
146 * po/km.po: New translation.
147 * configure.in: Add km as new language.
149 2006-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
151 * modules/pam_echo/pam_echo.8.xml: New.
152 * modules/pam_echo/pam_echo.8: Regenerated from xml file.
153 * modules/pam_echo/Makefile.am: Include Make.xml.rules.
154 * modules/pam_echo/pam_echo.c: Fix return value.
156 * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
158 2006-02-12 Thorsten Kukuk <kukuk@thkukuk.de>
160 * configure.in: Add doc/man/Makefile.
161 * Make.xml.rules: Enable xincludes for manual pages.
162 * doc/Makefile.am (EXRA_DIST): Remove manual pages.
163 (SUBDIR): Add man subdirectory.
164 * doc/man/Makefile.am: New.
165 * doc/man/pam_acct_mgmt.3: New.
166 * doc/man/pam_acct_mgmt.3.xml: New.
167 * doc/man/pam_get_data.3: New.
168 * doc/man/pam_get_data.3.xml: New.
169 * doc/man/pam_set_data.3: New.
170 * doc/man/pam_set_data.3.xml: New.
171 * doc/man/pam.8.xml: New.
172 * doc/man/pam.8: Regenerated from xml file.
173 * doc/man/pam_authenticate.3.xml: New.
174 * doc/man/pam_authenticate.3: Regenerated from xml file.
175 * doc/man/pam_chauthtok.3.xml: New.
176 * doc/man/pam_chauthtok.3: Regenerated from xml file.
177 * doc/man/pam_close_session.3.xml: New.
178 * doc/man/pam_close_session.3: Regenerated from xml file.
179 * doc/man/pam_end.3.xml: New.
180 * doc/man/pam_end.3: Regenerated from xml file.
181 * doc/man/pam_fail_delay.3.xml: New.
182 * doc/man/pam_fail_delay.3: Regenerated from xml file.
183 * doc/man/pam_get_item.3.xml: New.
184 * doc/man/pam_get_item.3: Regenerated from xml file.
185 * doc/man/pam_item_types.inc.xml: New.
186 * doc/man/pam_open_session.3.xml: New.
187 * doc/man/pam_open_session.3: Regenerated from xml file.
188 * doc/man/pam_set_item.3.xml: New.
189 * doc/man/pam_set_item.3: Regenerated from xml file.
190 * doc/man/pam_setcred.3.xml: New.
191 * doc/man/pam_setcred.3: Regenerated from xml file.
192 * doc/man/pam_start.3.xml: New.
193 * doc/man/pam_start.3: Regenerated from xml file.
194 * doc/man/pam_strerror.3.xml: New.
195 * doc/man/pam_strerror.3: Regenerated from xml file.
196 * doc/man/template-man: Removed.
198 2006-02-10 Thorsten Kukuk <kukuk@thkukuk.de>
200 * configure.in: Remove pam_pwdb support.
201 * modules/Makefile.am: remove pam_pwdb.
202 * modules/pam_pwdb: Remove complete directory.
203 * libpam/Makefile.am: Remove LIBPWDB references.
204 * libpam/pam_static_modules.h: Remove pam_pwdb references.
205 * doc/modules/pam_pwdb.sgml: Removed.
206 * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
207 * doc/pam_source.sgml: Remove references to libpwdb.
208 * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
209 * doc/modules/pam_group.sgml: Likewise.
210 * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
211 * doc/modules/pam_userdb.sgml: Likewise.
212 * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
214 * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
215 * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
217 * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
218 * modules/pam_cracklib/Makefile.am: Likewise.
219 * modules/pam_deny/Makefile.am: Likewise.
220 * modules/pam_exec/Makefile.am: Likewise.
222 2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
224 * configure.in: Check for text browser.
225 * Make.xml.rules: Add rule to generate README from README.xml.
227 * modules/pam_access/Makefile.am: Include Make.xml.rules.
228 * modules/pam_access/README: Regenerated from README.xml.
229 * modules/pam_access/README.xml: New.
230 * modules/pam_access/access.conf: Extended by new examples.
231 * modules/pam_access/access.conf.5: New, generated from xml file.
232 * modules/pam_access/access.conf.5.xml: New.
233 * modules/pam_access/pam_access.8: New, generated from xml file.
234 * modules/pam_access/pam_access.8.xml: New.
235 * modules/pam_access/pam_access.c: Add rules for IPv6 and
237 Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
239 * modules/pam_deny/Makefile.am: Include Make.xml.rules.
240 * modules/pam_deny/pam_deny.8.xml: New.
241 * modules/pam_deny/pam_deny.8: New, generated from xml file.
242 * modules/pam_deny/README.xml: New.
243 * modules/pam_deny/README: Regenerated from xml file.
245 * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
246 * modules/pam_cracklib/pam_cracklib.8.xml: New.
247 * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
248 * modules/pam_cracklib/README.xml: New.
249 * modules/pam_cracklib/README: Regenerated from xml file.
251 * modules/pam_exec/Makefile.am: Add rule to generate README.
252 * modules/pam_exec/README: Regenerated from xml file.
253 * modules/pam_exec/pam_exec.8: Regenerated from xml file.
254 * modules/pam_exec/pam_exec.8.xml: Syntax files.
256 2006-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
259 * po/pt.po: Update translations.
260 * configure.in: Add nl as new language.
262 2006-01-30 Thorsten Kukuk <kukuk@thkukuk.de>
264 * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
265 * modules/pam_exec/Makefile.am: Include Make.xml.rules.
267 * Make.xml.rules: New.
269 * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
271 2006-01-27 Thorsten Kukuk <kukuk@thkukuk.de>
273 * configure.in: Prefer libdb over libndbm, fix check for
274 libcrack and remove not needed BACKUP_LIBS.
276 2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
278 * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
280 * po/de.po: Fix one translation.
282 * configure.in: Add modules/pam_exec.
283 * modules/Makefile.am: Add pam_exec subdirectory.
284 * modules/pam_exec/README: New.
285 * modules/pam_exec/Makefile.am: New.
286 * modules/pam_exec/pam_exec.8: New.
287 * modules/pam_exec/pam_exec.c: New.
288 * modules/pam_exec/pam_exec.8.xml: New.
289 * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
290 * po/*.po: Merge new pam_exec strings.
292 * libpam/pam_static_modules.h: New.
293 * Makefile.am: Reorder subdirectories for static modules.
294 * configure.in: Add --enable-static-modules option.
295 * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
296 necessary, add pam_static_modules.h, link against all PAM
297 module object files if STATIC_MODULES is defined.
298 * libpam/pam_static.c: Remove old _static_module* includes,
299 include pam_static_modules.h.
301 * configure.in: Add checks for xsltproc, xmllint and docbook
303 * m4/jh_path_xml_catalog.m4: New.
305 2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
307 * modules/pam_succeed_if/pam_succeed_if.c: Add support for
309 * modules/pam_xauth/pam_xauth.c: Likewise.
311 * libpam/pam_static.c (_pam_open_static_handler): Add pamh
313 * libpam/pam_private.h: Adjust prototype.
314 * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
315 _pam_open_static_handler call.
317 * configure.in: Don't define PAM_DYNAMIC.
318 * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
319 include pam_dynamic.h
320 * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
321 exclude functions if we compile with PAM_STATIC.
322 * libpam/pam_dynamic.h: Remove.
323 * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
324 * libpam/Makefile.am: Bump version number of libpam, remove
327 2006-01-21 Thorsten Kukuk <kukuk@thkukuk.de>
329 * modules/pam_listfile/pam_listfile.c: Add support for session
330 and password management.
332 2006-01-19 Thorsten Kukuk <kukuk@suse.de>
334 * doc/specs/Makefile.am (spec): Add padout to fix parallel
335 build (Reported by Andreas Haumer <andreas@xss.co.at>).
337 2006-01-15 Thorsten Kukuk <kukuk@thkukuk.de>
339 * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
342 2006-01-13 Thorsten Kukuk <kukuk@thkukuk.de>
344 * release version 0.99.3.0
346 * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
349 * modules/pam_umask/pam_umask.c (search_key): Don't ignore
350 EOF/error return value from fgets().
352 * configure.in: Check for getline and getdelim
354 * po/fi.po: Add new translations.
355 * po/de.po: Likewise.
356 * po/es.po: Likewise.
357 * po/fr.po: Likewise.
358 * po/it.po: Likewise.
359 * po/ja.po: Likewise.
360 * po/pt_BR.po: Likewise.
361 * po/zh_CH.po: Likewise.
362 * po/zh_TW.po: Likewise.
364 2006-01-13 Dmitry V. Levin <ldv@altlinux.org>
366 * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
367 call with %m specifier.
369 2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
371 * configure.in: Add check for -fpie/-pie
372 * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
373 upperLOWER with -fpie/-pie if supported.
374 * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
375 with -fpie/-pie if supported.
377 2006-01-12 Steve Grubb <sgrubb@redhat.com>
379 * configure.in: Add check for audit library.
380 * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
381 (libpam_la_SOURCES): Add pam_audit.c.
382 * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
383 * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
384 * libpam/pam_password.c (pam_chauthtok): Likewise.
385 * libpam/pam_session.c (pam_open_session),
386 (pam_close_session): Likewise.
387 * libpam/pam_private.h: Add audit_state member to pam_handle,
388 declare _pam_auditlog and _pam_audit_end.
389 * libpam/pam_start.c (pam_start): Initialize audit_state.
390 * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
392 * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
393 * NEWS: Note about added auditing.
395 2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de>
397 * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
399 * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
400 if we compile libpam itself.
402 * po/hu.po: Update with new translations.
404 2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
406 * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
407 instead of PAM_AUTHTOK_RECOVER_ERR.
408 * modules/pam_pwdb/support.-c: Likewise.
409 * modules/pam_unix/support.c: Likewise.
410 * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
411 * libpam/pam_strerror.c (pam_strerror): Likewise.
413 * libpam/include/security/_pam_compat.h: Define
414 PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
416 * libpam/include/security/_pam_types.h: Rename
417 PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
419 2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
421 * libpam/include/security/_pam_types.h: Remove nonnull attribute
422 from third paramter (item) of pam_get_item.
423 * libpam/Makefile.am: Bump version number of shared library.
425 2005-12-21 Tomas Mraz <t8m@centrum.cz>
427 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
428 (evaluate_notingroup): Simplified.
429 (evaluate_innetgr), (evaluate_notinnetgr): New functions.
430 (evaluate): Added calls to evaluate_(not)innetgr().
431 * modules/pam_succeed_if/README: Documented netgroup matching.
432 * NEWS: Mentioned the added netgroup matching support.
434 2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
436 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
437 strftime instead of ctime.
439 * po/de.po: Fix typo.
441 2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de>
443 * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
444 Reported by Charles_H_Bedford@nbc.gov.
446 * modules/pam_time/pam_time.c (check_account): Implement
447 support for netgroups.
449 * modules/pam_time/time.conf: Document usage of netgroups.
451 2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
453 * modules/pam_group/pam_group.c (check_account): Implement
454 support for netgroups.
456 * modules/pam_group/group.conf: Add all documentation to this
457 example config file and don't reference to outdated configs.
459 * modules/pam_group/README: New.
461 * modules/pam_group/Makefile.am: Add README to EXTRADIST.
463 2005-12-15 Thorsten Kukuk <kukuk@suse.de>
465 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
466 error if user logins the first time.
468 * modules/pam_lastlog/README: New.
470 * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
472 2005-12-14 Thorsten Kukuk <kukuk@suse.de>
474 * modules/pam_deny/pam_deny.c: Fix comment.
476 * doc/pam_appl.sgml: Fix typo.
478 Reported by Russell Bateman <russ@windofkeltia.com>
480 2005-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
482 * release version 0.99.2.1
484 * po/de.po: Remove new fuzzy entry
486 * NEWS: Add 0.99.2.1 changes
488 * configure.in: bump version number to 0.99.2.1
490 2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
492 Cleanup pam_syslog messages.
494 * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
495 * modules/pam_filter/pam_filter.c (set_filter): Append %m
496 specifier to pam_syslog messages where appropriate.
497 * modules/pam_group/pam_group.c (read_field): Likewise.
498 * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
499 (create_homedir): Do not use make_remark() wrapper, call
500 pam_info() directly. Call pam_syslog() right after failed
501 operation and append %m specifier to pam_syslog messages where
503 * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
504 sequence of malloc(), strcpy() and strcat() calls with asprintf().
505 Append %m specifier to pam_syslog messages where appropriate.
506 * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
507 Append %m specifier to pam_syslog messages where appropriate.
508 * modules/pam_shells/pam_shells.c (perform_check): Likewise.
510 2005-12-12 Tomas Mraz <t8m@centrum.cz>
512 * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
513 * po/Linux-PAM.pot: Likewise.
514 * po/de.po: Likewise.
515 * po/es.po: Likewise.
516 * po/fi.po: Likewise.
517 * po/fr.po: Likewise.
518 * po/hu.po: Likewise.
519 * po/it.po: Likewise.
520 * po/ja.po: Likewise.
521 * po/nb.po: Likewise.
522 * po/pa.po: Likewise.
523 * po/pl.po: Likewise.
524 * po/pt.po: Likewise.
525 * po/pt_BR.po: Likewise.
526 * po/zh_CN.po: Likewise.
527 * po/zh_TW.po: Likewise.
528 * po/de.po: Add new translation, fixed typo in string.
530 2005-12-12 Mike Becher <Mike.Becher@lrz-muenchen.de>
532 * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
534 2005-12-12 Thorsten Kukuk <kukuk@suse.de>
536 * modules/pam_mail/README: Document "quiet" and "standard"
539 2005-12-07 Thorsten Kukuk <kukuk@suse.de>
541 * modules/pam_mail/pam_mail.c: Modify assembling of output
542 for easier translation.
544 * po/de.po: Translate new pam_mail messages.
547 2005-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
549 * po/de.po: Add new translation, fix wrong format specifier.
550 * po/cs.po: Fix wrong format specifier.
551 * po/es.po: Likewise.
552 * po/fi.po: Likewise.
553 * po/fr.po: Likewise.
554 * po/hu.po: Likewise.
555 * po/it.po: Likewise.
556 * po/ja.po: Likewise.
557 * po/nb.po: Likewise.
558 * po/pa.po: Likewise.
559 * po/pl.po: Likewise.
560 * po/pt.po: Likewise.
561 * po/pt_BR.po: Likewise.
562 * po/zh_CN.po: Likewise.
563 * po/zh_TW.po: Likewise.
565 2005-11-24 Dmitry V. Levin <ldv@altlinux.org>
567 * config.h.in: Remove generated file.
568 * .cvsignore: Add config.h.in.
570 * configure.in: Do not check for strerror.
571 * libpam_misc/misc_conv.c (read_string): Replace strerror()
572 call with %m specifier.
573 * libpamc/pamc_converse.c (pamc_converse): Likewise.
574 * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
575 * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
577 * modules/pam_selinux/pam_selinux.c (security_label_tty):
579 (security_restorelabel_tty, security_label_tty): Append %m
580 specifier where appropriate.
581 * modules/pam_selinux/pam_selinux_check.c (main): Replace
582 strerror() call with %m specifier.
583 * modules/pam_unix/pam_unix_passwd.c (save_old_password,
584 _update_passwd, _update_shadow): Likewise.
585 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
586 * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
587 * po/Linux-PAM.pot: Update strings from pam_selinux.
588 * po/cs.po: Likewise.
589 * po/de.po: Likewise.
590 * po/es.po: Likewise.
591 * po/fi.po: Likewise.
592 * po/fr.po: Likewise.
593 * po/hu.po: Likewise.
594 * po/it.po: Likewise.
595 * po/ja.po: Likewise.
596 * po/nb.po: Likewise.
597 * po/pa.po: Likewise.
598 * po/pl.po: Likewise.
599 * po/pt.po: Likewise.
600 * po/pt_BR.po: Likewise.
601 * po/zh_CN.po: Likewise.
602 * po/zh_TW.po: Likewise.
604 2005-11-23 Thorsten Kukuk <kukuk@suse.de>
606 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
607 new variable to fix compiler warning.
609 * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
610 don't need to start with /dev/.
612 2005-11-21 Thorsten Kukuk <kukuk@thkukuk.de>
614 * release version 0.99.2.0
616 * libpam_misc/Makefile.am: Increase release number (for change
619 * NEWS: Adjust for 0.99.2.0
621 2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de>
623 * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
624 Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
626 2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
628 * libpam/pam_handlers.c: Replace code for all dlopen variants with
630 * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
631 * libpam/pam_dynamic.h: Provide prototypes.
632 For Mac OS X support [#534205]
634 2005-11-09 Tomas Mraz <t8m@centrum.cz>
636 * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
638 * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
639 full path tty name. Allow unset tty.
640 (logic_member): Allow matching ':' in tty name.
641 * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
642 full path tty name. Allow unset tty.
643 (logic_member): Allow matching ':' in tty name.
645 * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
648 2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
650 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
651 correct variable names.
653 2005-11-06 Steve Langasek <vorlon@debian.org>
655 * modules/pam_env/pam_env.c: don't treat a missing
656 /etc/environment as a fatal error when attempting to read it,
657 and try to read this file by default; this restores the behavior
660 2005-11-02 Tomas Mraz <t8m@centrum.cz>
662 * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
665 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
666 logic when comparing dates to handle corner cases better [#1245888].
668 2005-10-31 Thorsten Kukuk <kukuk@suse.de>
670 * modules/pam_filter/pam_filter.c: Use XCASE only if defined
673 2005-10-27 Thorsten Kukuk <kukuk@suse.de>
675 * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
677 2005-10-26 Tomas Mraz <t8m@centrum.cz>
679 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
680 modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
681 modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
682 uid to 0 before executing the helper if SELinux is enabled.
683 * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
684 if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
687 2005-10-20 Tomas Mraz <t8m@centrum.cz>
689 * configure.in: Added check for xauth binary and --with-xauth option.
690 * config.h.in: Added configurable PAM_PATH_XAUTH.
691 * modules/pam_xauth/README,
692 modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
693 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
694 searching xauth binary on multiple places.
695 (run_coprocess): Don't use execvp as it can be a security risk.
697 2005-10-04 Steve Langasek <vorlon@debian.org>
699 * libpam/include/security/pam_malloc.h,
700 libpam/include/security/pam_modules.h: Declare public header
701 files extern "C" so that they are C++-safe.
703 2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
704 Steve Langasek <vorlon@debian.org>
706 Cleanup gratuitous use of strdup().
707 Fix "missing argument" checks.
709 * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
710 to conffile and envfile arguments. Do not use x_strdup() for
711 conffile and envfile initialization. Fix "missing argument"
713 (_parse_config_file): Take conffile argument of type "const char *"
714 instead of "char **". Do not free conffile.
715 (_parse_env_file): Take env_file argument of type "const char *"
716 instead of "char **". Do not free env_file.
717 (pam_sm_setcred): Add const qualifier to conf_file and env_file.
718 Pass conf_file and env_file to _parse_config_file() and
719 _parse_env_file() by value.
720 (pam_sm_open_session): Likewise.
722 * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
723 users argument. Do not use x_strdup() for users initialization.
724 (lookup): Add const qualifier to list argument.
725 (pam_sm_authenticate): Add const qualifier to users argument.
727 * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
728 to maildir argument. Do not use x_strdup() for maildir
729 initialization. Fix "missing argument" check.
730 (get_folder): Take path_mail argument of type "const char *"
731 instead of "char **". Do not free path_mail.
732 (_do_mail): Add const qualifier to path_mail argument.
733 Pass path_mail to get_folder() by value.
735 * modules/pam_motd/pam_motd.c: Include <syslog.h>.
736 (pam_sm_open_session): Add const qualifier to motd_path.
737 Do not use x_strdup() for motd_path initialization. Do not
738 free motd_path. Fix "missing argument" check. Add "unknown
741 * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
742 qualifier to database and cryptmode arguments. Fix "missing
744 (pam_sm_authenticate): Add const qualifier to database and cryptmode.
745 (pam_sm_acct_mgmt): Likewise.
747 2005-10-01 Steve Langasek <vorlon@debian.org>
749 * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
751 2005-09-30 Steve Langasek <vorlon@debian.org>
753 * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
754 gratuitous use of strdup().
756 2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
760 * doc/specs/Makefile.am (install-data-local): Install
762 (all): Copy rfc if we build outside of source directory.
764 2005-09-27 Thorsten Kukuk <kukuk@suse.de>
766 * NEWS: Document removal of pam_radius.
767 * autogen.sh: Make configure script executeable.
769 * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
770 (lex.yy.c): Fixed out of tree build.
772 * conv/pam_conv1/pam_conv.y: Fix main prototype.
776 * po/POTFILES.in: Remove files not distributed by tar archive
777 and not containing strings for translation.
779 2005-09-26 Tomas Mraz <t8m@centrum.cz>
781 * NEWS: Add a few missing entries from CHANGELOG.
783 * AUTHORS: Fixed entries for Toady and me.
785 * Makefile.am (M4_FILES): Fixed out of tree build.
786 * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
787 (spec, lex.yy.c): Fixed out of tree build.
789 * modules/pam_userdb/README: Document try_first_pass and
790 use_first_pass options, remove use_authtok option.
793 2005-09-26 Dmitry V. Levin <ldv@altlinux.org>
795 * NEWS: Mention changes in pam_lastlog.
797 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
800 * autogen.sh: Don't generate NEWS file.
801 * CHANGELOG: Document it as obsolete.
803 2005-09-26 Tomas Mraz <t8m@centrum.cz>
805 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
806 _log_err() -> pam_syslog()
807 (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
808 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
809 _log_err() -> pam_syslog()
810 * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
811 (getNISserver, _unix_run_shadow_binary, _update_passwd,
812 _update_shadow, _do_setpass, _pam_unix_approve_pass,
813 pam_sm_chauthtok): _log_err() -> pam_syslog()
814 * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
815 (pam_sm_open_session, pam_sm_close_session):
816 _log_err() -> pam_syslog()
817 * modules/pam_unix/support.c (_log_err, converse): removed
818 (_make_remark): use pam_prompt() instead of converse()
819 (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
820 _unix_verify_password, _unix_read_password):
821 _log_err() -> pam_syslog()
822 _cleanup(), _unix_cleanup(): Silence unused param warnings.
823 (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
824 _unix_run_helper_binary): Silence incorrect type warnings.
825 (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
826 instead of converse().
827 * modules/pam_unix/support.h (_log_err): removed
828 * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
830 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
832 * configure.in: Add doc/specs/Makefile.
833 * Makefile.am: Add releasedocs rule.
834 * doc/Makefile.am: Add specs subdir, remove files from specs
835 directory, add rfc86.0.txt to releasedocs.
836 * doc/specs/Makefile.am: New file.
837 * doc/specs/formatter/parse.y: move from here ...
838 * doc/specs/parse.y: ... here.
839 * doc/specs/formatter/parse.lex: move from here ...
840 * doc/specs/parse.lex: ... here.
842 * modules/pam_mail/pam_mail.c: Mark missing strings for translation
843 * po/Linux-PAM.pot: Add new strings from pam_mail
844 * po/cs.po: Likewise.
845 * po/de.po: Likewise.
846 * po/es.po: Likewise.
847 * po/fi.po: Likewise.
848 * po/fr.po: Likewise.
849 * po/hu.po: Likewise.
850 * po/it.po: Likewise.
851 * po/ja.po: Likewise.
852 * po/nb.po: Likewise.
853 * po/pa.po: Likewise.
854 * po/pl.po: Likewise.
855 * po/pt.po: Likewise.
856 * po/pt_BR.po: Likewise.
857 * po/zh_CN.po: Likewise.
858 * po/zh_TW.po: Likewise.
860 2005-09-23 Tomas Mraz <t8m@centrum.cz>
862 * modules/pam_access/pam_access.c (from_match): Support NULL from.
863 (string_match): Support NULL string, add NONE keyword matching it.
864 (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
865 * modules/pam_access/access.conf: NONE keyword description
866 * modules/pam_access/README: NONE keyword description
868 2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
870 * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
871 pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
872 text of log messages.
873 (pam_sm_open_session): Replace sequence of malloc(), strcpy()
874 and strcat() calls with asprintf(). Replace syslog() calls
877 * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
878 instead of memcmp() for string comparison.
880 2005-09-21 Dmitry V. Levin <ldv@altlinux.org>
882 * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
883 (parse_args): Add pam_handle_t* argument. Log unrecognized
885 (perform_check): Log pam_get_user() and malloc() failures.
886 (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
887 Pass pam_handle_t* to parse_args().
889 * modules/pam_mail/pam_mail.c: Include <errno.h>.
890 Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
891 NO_MAIL_STANDARD_FORMAT macros.
892 (parse_args, get_folder): Cleanup error messages.
893 (get_folder): Fix leak of the path_mail variable in case of
894 pam_get_user() failure. Cleanup memory management.
895 (get_mail_status): Add pam_handle_t* argument. Fix leaks of
896 namelist variable. Cleanup memory management. Log memory
897 allocation failures. Remove 250-byte limit on Maildir pathname.
898 (report_mail): Mark text messages for translation.
899 (_do_mail): Cleanup memory management. Pass pam_handle_t*
900 to get_mail_status().
902 * po/Linux-PAM.pot: Update with new strings from pam_mail for
904 * po/cs.po: Likewise.
905 * po/de.po: Likewise.
906 * po/es.po: Likewise.
907 * po/fi.po: Likewise.
908 * po/fr.po: Likewise.
909 * po/hu.po: Likewise.
910 * po/it.po: Likewise.
911 * po/ja.po: Likewise.
912 * po/nb.po: Likewise.
913 * po/pa.po: Likewise.
914 * po/pl.po: Likewise.
915 * po/pt.po: Likewise.
916 * po/pt_BR.po: Likewise.
917 * po/zh_CN.po: Likewise.
918 * po/zh_TW.po: Likewise.
920 2005-09-20 Thorsten Kukuk <kukuk@suse.de>
922 * configure.in: Add finish translation.
925 * acinclude.m4: remove libprelude macros.
926 * m4/libprelude.m4: New.
928 * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
930 * libpamc/Makefile.am (EXTRA_DIST): Add License.
932 See CHANGELOG for earlier changes.