1 2009-04-06 R.E. van der Luit <nippur@fedoraproject.org>
3 * po/nl.po: Updated translations.
5 2009-04-06 Terry Chuang <tchuang@redhat.com>
7 * po/zh_TW.po: Updated translations.
9 2009-04-03 Shankar Prasad <svenkate@redhat.com>
11 * po/kn.po: Updated translations.
13 2009-04-03 Manoj Kumar Giri <mgiri@redhat.com>
15 * po/or.po: Updated translations.
17 2009-04-03 Miloš Komarčević <kmilos@gmail.com>
19 * po/sr.po: Updated translations.
20 * po/sr@latin.po: Updated translations.
22 2009-04-03 Leah Liu <lliu@redhat.com>
24 * po/zh_CN.po: Updated translations.
26 2009-04-03 Dmitry V. Levin <ldv@altlinux.org>
28 * libpamc/pamc_load.c (__pamc_exec_agent): Replace call to exit(3)
29 in child process with call to _exit(2).
30 * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Likewise.
31 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
33 * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
35 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
36 * modules/pam_xauth/pam_xauth.c (run_coprocess): Likewise.
37 * modules/pam_exec/pam_exec.c (call_exec): Replace all calls to
38 exit(3) in child process with calls to _exit(2).
39 * modules/pam_filter/pam_filter.c (set_filter): Likewise.
40 * modules/pam_namespace/pam_namespace.c (inst_init,
41 cleanup_tmpdirs): Likewise.
43 2009-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
45 * modules/pam_unix/support.c (_unix_run_helper_binary): Don't
46 ignore return value of write().
48 * libpamc/include/security/pam_client.h (PAM_BP_ASSERT): Honour
50 * modules/pam_timestamp/pam_timestamp.c: don't ignore return
51 values of lchown and fchown.
53 2009-03-25 Thorsten Kukuk <kukuk@thkukuk.de>
55 * modules/pam_mkhomedir/pam_mkhomedir.c: Make option handling
57 (_pam_parse): Fix umask option.
59 * modules/pam_unix/passverify.c: Fix typo.
61 * modules/pam_issue/pam_issue.c: Fix compiler warning.
62 * modules/pam_ftp/pam_ftp.c: Likewise.
64 2009-03-25 Pavol Šimo <palo.simo@gmail.com>
66 * po/sk.po: Updated translations.
68 2009-03-24 Sulyok Péter <peti@sulyok.hu>
70 * po/hu.po: Updated translations.
72 2009-03-24 Domingo Becker <domingobecker@gmail.com>
74 * po/es.po: Updated translations.
76 2009-03-24 Diego Búrigo Zacarão <diegobz@projetofedora.org>
78 * po/pt_BR.po: Updated translations.
80 2009-03-24 Piotr Drąg <piotrdrag@gmail.com>
82 * po/pl.po: Updated translations.
84 2009-03-24 Tomas Mraz <t8m@centrum.cz>
86 * modules/pam_unix/passverify.c(save_old_password): Call fflush() and
88 (unix_update_passwd, unix_update_shadow): Likewise.
89 * modules/pam_pwhistory/opasswd.c(save_old_password): Likewise.
91 * po/cs.po: Updated translations.
93 2009-03-09 Thorsten Kukuk <kukuk@thkukuk.de>
95 * release version 1.0.91
97 * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
98 * xtests/Makefile.am: Add tst-pam_unix4.pamd, tst-pam_unix4.sh
101 2009-03-03 Dmitry V. Levin <ldv@altlinux.org>
103 * tests/tst-pam_mkargv.c (main): Fix for non-64bit architectures.
105 2009-03-03 Tomas Mraz <t8m@centrum.cz>
107 * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Test
108 for abnormal exit of the helper binary.
109 * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary): Likewise.
110 * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
111 * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Likewise.
113 2009-02-27 Tomas Mraz <t8m@centrum.cz>
115 * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Replace
116 signal() with sigaction().
117 * modules/pam_namespace/pam_namespace.c(inst_init, cleanup_tmpdirs):
119 * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Likewise.
120 * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary):
122 * modules/pam_unix/passverify.c(su_sighandler): Likewise.
123 * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
125 * modules/pam_tally2/Makefile.am: Link the pam_tally2 app to libpam
126 for auxiliary functions.
127 * modules/pam_tally2/pam_tally2.8.xml: Drop non-existing no_reset
128 option. Document new serialize option.
129 * modules/pam_tally2/pam_tally2.c: Add support for the new serialize
131 (_cleanup, tally_set_data, tally_get_data): Add tally file handle to
132 tally PAM data. Needed for fcntl() locking.
133 (get_tally): Use low level file access instead of stdio buffered FILE.
134 If serialize option is used lock the tally file access.
135 (set_tally, tally_bump, tally_reset): Use low level file access instead
136 of stdio buffered FILE. Close the file handle only when it is not owned
138 (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt): Pass the tally
139 file handle to tally_set_data(). Get it from tally_get_data().
140 (main): Use low level file access instead of stdio buffered FILE.
142 2009-02-26 Tomas Mraz <t8m@centrum.cz>
144 * xtests/Makefile.am: Add tst-pam_unix4.
145 * xtests/tst-pam_unix4.c: New test for password change
146 and shadow min days limit.
147 * xtests/tst-pam_unix4.pamd: Likewise.
148 * xtests/tst-pam_unix4.sh: Likewise.
150 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Ignore
151 PAM_AUTHTOK_ERR on shadow verification.
152 * modules/pam_unix/passverify.c (check_shadow_expiry): Return
153 PAM_AUTHTOK_ERR if sp_min limit for password change is defied.
155 2009-02-26 Timur Birsh <taem@linukz.org>
157 * po/LINGUAS: New Kazakh translation.
158 * po/kk.po: New Kazakh translation.
160 2009-02-25 Thorsten Kukuk <kukuk@thkukuk.de>
162 * libpam/pam_misc.c (_pam_StrTok): Use unsigned char
163 instead of int. Reported by Marcus Granado.
164 * tests/Makefile.am (TESTS): Add tst-pam_mkargv.
165 * tests/tst-pam_mkargv.c (main): Test case for
168 * po/de.po: Update fuzzy translations.
170 2009-02-25 Tomas Mraz <t8m@centrum.cz>
172 * xtests/access.conf: Add a line for name resolution test case.
173 * xtests/tst-pam_access4.c (main): Set PAM_RHOST for testing the LOCAL
174 keyword. Add a test case for name resolution.
176 * modules/pam_access/pam_access.c (from_match): Move name resolution
177 to network_netmask_match().
178 (network_netmask_match): Do a name resolution of the origin only if
179 matching against a real network/netmask.
181 2009-02-25 Fabian Affolter <fabian@bernewireless.net>
183 * po/de.po: Updated translations.
185 2009-02-25 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
187 * po/pt_BR.po: Updated translations.
189 2009-02-25 Domingo Becker <domingobecker@gmail.com>
191 * po/es.po: Updated translations.
193 2009-02-20 Thorsten Kukuk <kukuk@thkukuk.de>
195 * modules/pam_limits/limits.conf.5.xml: Document that the kernel
196 can refuse values out of range for the local system.
197 * modules/pam_limits/pam_limits.c (setup_limits): Log if setrlimit
200 2009-02-18 Thorsten Kukuk <kukuk@thkukuk.de>
202 * libpam/pam_password.c (pam_chauthtok): Make sure applications
203 don't set internal flags.
205 2009-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
207 * doc/man/pam_sm_chauthtok.3.xml: Document that sufficient
208 can break the PRELIM_CHECK chain.
210 * libpam/pam_dispatch.c: Don't freeze chain for chauthtok
211 [bugzilla.novell.com#470337]
213 2009-02-11 Daniel Nylander <po@danielnylander.se>
215 * po/sv.po: Updated translations.
217 2009-01-29 Thorsten Kukuk <kukuk@thkukuk.de>
219 * doc/man/pam_sm_setcred.3.xml: Document PAM_ESTABLISH_CRED.
221 2009-01-19 Tomas Mraz <t8m@centrum.cz>
223 * modules/pam_mkhomedir/Makefile.am: Add mkhomedir_helper.
224 * modules/pam_mkhomedir/mkhomedir_helper.8.xml: New file. Manual page
225 for mkhomedir_helper.
226 * modules/pam_mkhomedir/mkhomedir_helper.c: New file. Source
227 for mkhomedir_helper. Most of the code moved from pam_mkhomedir.c.
228 * modules/pam_mkhomedir/pam_mkhomedir.c (_pam_parse): Do not convert umask
230 (rec_mkdir): Moved to mkhomedir_helper.c.
231 (create_homedir): Just exec the helper.
232 (pam_sm_open_session): Improve logging.
234 2009-01-19 Daniel Cabrera <h.daniel.cabrera@gmail.com>
236 * po/es.po: Updated translations.
238 2009-01-14 Thorsten Kukuk <kukuk@thkukuk.de>
240 * po/de.po: Updated translations.
242 2009-01-07 Piotr Drąg <piotrdrag@gmail.com>
244 * po/pl.po: Updated translations.
246 2008-12-23 Piotr Drąg <piotrdrag@gmail.com>
248 * po/pl.po: Updated translations.
250 2008-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
252 * modules/pam_pwhistory/pam_pwhistory.c (parse_option): Rename
253 type= option to authtok_type= (because of pam_get_authtok).
254 * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
256 2008-12-17 Tomas Mraz <t8m@centrum.cz>
258 * modules/pam_tty_audit/pam_tty_audit.c (pam_sm_open_session): Do
259 not abort on unknown option. Avoid double free of old_status.
260 (pam_sm_close_session): Use LOG_DEBUG for restored status message.
262 * configure.in: Test for getseuser().
263 * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Call getseuser()
264 instead of getseuserbyname() if the function is available.
266 2008-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
268 * release version 1.0.90
270 * libpam_misc/Makefile.am: Increase version number of shared library.
271 * libpamc/Makefile.am: Likewise.
273 2008-12-12 Tomas Mraz <t8m@centrum.cz>
275 * modules/pam_tally2/pam_tally2.c (get_tally): Test for EACCES
277 * modules/pam_tally2/pam_tally2.8.xml: Fix documentation.
279 2008-12-10 Thorsten Kukuk <kukuk@thkukuk.de>
281 * doc/man/pam_item_types_ext.inc.xml: Document PAM_AUTHTOK_TYPE.
282 * libpam/pam_end.c (pam_end): Free authtok_type.
283 * tests/tst-pam_get_item.c: Add PAM_AUTHTOK_TYPE
285 * tests/tst-pam_set_item.c: Likewise.
286 * libpam/pam_start.c (pam_start): Initialize xdisplay,
287 xauth and authtok_type.
288 * libpam/pam_get_authtok.c (pam_get_authtok): Rename "type"
290 * modules/pam_cracklib/pam_cracklib.8.xml: Replace "type=" with
292 * doc/man/pam_get_authtok.3.xml: Document authtok_type argument.
293 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Set
294 type= argument as PAM_AUTHTOK_TYPE item.
295 * libpam/pam_get_authtok.c (pam_get_authtok): If no type
296 argument given, use PAM_AUTHTOK_TYPE item.
297 * libpam/pam_item.c (pam_get_item): Fetch PAM_AUTHTOK_TYPE item.
298 (pam_set_item): Store PAM_AUTHTOK_TYPE item.
299 * libpam/pam_private.h: Add authtok_type to pam_handle.
300 * libpam/include/security/_pam_types.h (PAM_AUTHTOK_TYPE): New.
302 2008-12-03 Thorsten Kukuk <kukuk@thkukuk.de>
304 * modules/pam_access/access.conf.5.xml: Replace
305 2001:4ca0 with 2001:db8:: [bug#2356400].
307 * doc/man/Makefile.am: Add pam_get_authtok.3.xml.
308 * doc/man/pam_get_authtok.3.xml: New.
309 * libpam/Makefile.am: Add pam_get_authtok.c.
310 * libpam/libpam.map: Export pam_get_authtok.
311 * libpam/pam_get_authtok.c: New.
312 * libpam/pam_private.h: Add mod_argc and mod_argv to pam_handle.
313 * libpam_include/security/pam_ext.h: Add pam_get_authtok
315 * modules/pam_cracklib/pam_cracklib.c: Use pam_get_authtok.
316 * modules/pam_pwhistory/pam_pwhistory.c: Likewise.
317 * po/POTFILES.in: Add libpam/pam_get_authtok.c.
318 * xtests/tst-pam_cracklib1.c: Adjust error codes.
320 * modules/pam_timestamp/Makefile.am: Remove hmactest.c from
323 * po/*.po: Regenerated.
325 2008-12-02 Michael Calmer <mc@suse.de>
327 * modules/pam_limits/limits.conf.5.xml: Document valid values
328 for limits (bnc#448314).
330 2008-12-02 Thorsten Kukuk <kukuk@thkukuk.de>
332 * modules/pam_env/pam_env.c: Add support for user specific
333 environment file. Based on a patch from Ubuntu.
334 * modules/pam_env/pam_env.8.xml: Document new options.
336 2008-12-02 Olivier Fourdan <ofourdan@redhat.com>
338 * modules/pam_filter/pam_filter.c (master): Use /dev/ptmx
339 instead of the old BSD pseudoterminal API.
340 (set_filter): Call grantpt(), unlockpt() and ptsname(). Do not
341 close pseudoterminal handle in filter child.
342 * modules/pam_filter/upperLOWER/upperLOWER.c (main): Use
343 regular read() instead of pam_modutil_read() to allow for
346 2008-12-02 Tomas Mraz <t8m@centrum.cz>
348 * modules/pam_timestamp/Makefile.am: Add hmacfile to tests.
349 * modules/pam_timestamp/hmacfile.c: Do not try the short key
352 2008-12-01 Tomas Mraz <t8m@centrum.cz>
354 * modules/pam_unix/support.h: Fix masks for cipher algorithm
357 2008-12-01 Thorsten Kukuk <kukuk@thkukuk.de>
359 * modules/pam_unix/pam_unix.8.xml: Document blowfish option.
361 * configure.in: Check for crypt_gensalt_rn.
362 * modules/pam_unix/pam_unix_passwd.c: Pass pamh to
363 create_password_hash function.
364 * modules/pam_unix/passverify.c (create_password_hash): Add
366 * modules/pam_unix/passverify.h: Adjust create_password_hash
368 * modules/pam_unix/support.c: Add support for blowfish option.
369 * modules/pam_unix/support.h: Add defines for blowfish option.
370 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
372 2008-12-01 Tomas Mraz <t8m@centrum.cz>
374 * modules/pam_access/pam_access.8.xml: Fix description of nodefgroup
377 * modules/pam_group/pam_group.c (is_same): Fix check for correct
380 2008-11-29 Thorsten Kukuk <kukuk@thkukuk.de>
382 * configure.in: Check for xcrypt.h, fix typo in libaudit check.
383 * modules/pam_cracklib/pam_cracklib.c: Include xcrypt.h if
385 * modules/pam_unix/bigcrypt.c: Likewise.
386 * modules/pam_unix/passverify.c: Likewise.
387 * modules/pam_userdb/pam_userdb.c: Likewise.
388 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
390 * doc/man/pam_getenv.3.xml: Document that application should
391 not free return value.
393 * doc/man/pam.3.xml: Add Note about thread-safeness of libpam
396 2008-11-28 Tomas Mraz <t8m@centrum.cz>
398 * modules/pam_unix/unix_update.c (set_password): Allow root to change
399 passwords without verification of the old ones.
401 * modules/pam_tally2/pam_tally2.c (tally_check): Fix info format
402 to be the same as in pam_tally.
404 * configure.in: Add modules/pam_timestamp/Makefile.
405 * doc/sag/Linux-PAM_SAG.xml: Include pam_timestamp.xml.
406 * doc/sag/pam_timestamp.xml: New.
407 * libpam/pam_static_modules.h: Add pam_timestamp static struct.
408 * modules/Makefile.am: Add pam_timestamp directory.
409 * modules/pam_timestamp/Makefile.am: New.
410 * modules/pam_timestamp/README.xml: New.
411 * modules/pam_timestamp/hmacsha1.h: New.
412 * modules/pam_timestamp/sha1.h: New.
413 * modules/pam_timestamp/pam_timestamp.8.xml: New.
414 * modules/pam_timestamp/pam_timestamp_check.8.xml: New.
415 * modules/pam_timestamp/pam_timestamp.c: New.
416 * modules/pam_timestamp/pam_timestamp_check.c: New.
417 * modules/pam_timestamp/hmacfile.c: New.
418 * modules/pam_timestamp/hmacsha1.c: New.
419 * modules/pam_timestamp/sha1.c: New.
420 * modules/pam_timestamp/tst-pam_timestamp: New.
421 * po/POTFILES.in: Add pam_timestamp sources.
422 * po/*.po: Regenerate.
423 * po/cs.po: Updated translations.
425 2008-11-25 Thorsten Kukuk <kukuk@thkukuk.de>
427 * modules/pam_pwhistory/opasswd.c (save_old_password): Fix typo.
429 * modules/pam_time/pam_time.c (is_same): Fix check
430 of correct string length (debian bug #326407).
432 2008-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
434 * xtests/Makefile.am: Add pam_time1 tests.
435 * xtests/tst-pam_time1.c: New test case.
436 * xtests/tst-pam_time1.pamd: New.
437 * xtests/time.conf: New.
438 * xtests/run-xtests.sh: Copy time.conf.
440 2008-11-24 Tomas Mraz <t8m@centrum.cz>
442 * libpam/pam_handlers.c (_pam_parse_conf_file): '-' at
443 beginning of type token marks silent module.
444 (_pam_load_module): Add handler_type parameter. Do not log
445 module load error if module is silent.
446 (_pam_add_handler): Pass handler_type to _pam_load_module().
447 * libpam/pam_private.h: Add PAM_HT_SILENT_MODULE.
448 * doc/man/pam.conf-syntax.xml: Document the '-' at beginning
451 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Fix leaks
453 * modules/pam_env/pam_env.c (_parse_env_file): Remove superfluous
455 * modules/pam_group/pam_group.c (check_account): Fix leak
457 * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): Fix leak
459 * modules/pam_securetty/pam_securetty.c (securetty_perform_check): Remove
460 superfluous condition.
461 * modules/pam_stress/pam_stress.c (stress_get_password,pam_sm_authenticate):
462 Remove superfluous conditions.
463 (pam_sm_chauthtok): Fix mistaken && for &.
464 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Remove
465 superfluous condition.
466 All the problems fixed in this commit were found by Steve Grubb.
468 2008-11-20 Tomas Mraz <t8m@centrum.cz>
470 * modules/pam_sepermit/pam_sepermit.c (sepermit_match): Do not
471 call sepermit_lock() if sense is deny. Do not crash on NULL seuser
473 (pam_sm_authenticate): Try to call getseuserbyname() even if
476 2008-11-19 Thorsten Kukuk <kukuk@thkukuk.de>
478 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session):
479 Preserve XAUTHLOCALHOSTNAME environment variable.
481 * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Finish
482 implementation of type=STRING option.
484 * modules/pam_pwhistory/pam_pwhistory.8.xml: Document
485 "type=STRING" option.
487 2008-10-27 Thorsten Kukuk <kukuk@thkukuk.de>
489 * doc/man/pam_setcred.3.xml: Document when credentials
491 * po/ja.po: Fix syntax error.
492 * po/de.po: Update translations.
493 * po/*.po: Regenerate with pam_tally2 added.
495 2008-10-23 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
497 * po/pt_BR.po: Updated translations.
499 2008-10-23 Krishna Babu K <kkrothap@redhat.com>
501 * po/LINGUAS: New language.
502 * po/te.po: New translation to Telugu.
504 2008-10-23 Manoj Kumar Giri <mgiri@redhat.com>
506 * po/or.po: Updated translations.
508 2008-10-21 Amitakhya Phukan <aphukan@redhat.com>
510 * po/as.po: Updated translations.
512 2008-10-21 Ondrej Sulek <feonsu@gmail.com>
514 * po/sk.po: Updated translations.
516 2008-10-21 Terry Chuang <tchuang@redhat.com>
518 * po/zh_TW.po: Updated translations.
520 2008-10-21 Kiyoto Hashida <khashida@redhat.com>
522 * po/ja.po: Updated translations.
524 2008-10-21 Francesco Valente <fvalen@redhat.com>
526 * po/it.po: Updated translations.
528 2008-10-21 Peter van Egdom <p.van.egdom@gmail.com>
530 * po/nl.po: Updated translations.
532 2008-10-20 Ani Peter <apeter@redhat.com>
534 * po/ml.po: Updated translations.
536 2008-10-20 Pablo Martin-Gomez <pablo.martin-gomez@laposte.net>
538 * po/fr.po: Updated translations.
540 2008-10-20 Runa Bhattacharjee <runab@redhat.com>
542 * po/bn_IN.po: Updated translations.
544 2008-10-20 Shankar Prasad <svenkate@redhat.com>
546 * po/kn.po: Updated translations.
548 2008-10-20 Leah Liu <lliu@redhat.com>
550 * po/zh_CN.po: Updated translations.
552 2008-10-20 Ondrej Sulek <feonsu@gmail.com>
554 * po/LINGUAS: New language.
555 * po/sk.po: New translation to Slovak.
557 2008-10-17 Tomas Mraz <t8m@centrum.cz>
559 * configure.in: Add modules/pam_tally2/Makefile.
560 * doc/sag/Linux-PAM_SAG.xml: Include pam_tally2.xml.
561 * doc/sag/pam_tally2.xml: New.
562 * libpam/pam_static_modules.h: Add pam_tally2 static struct.
563 * modules/Makefile.am: Add pam_tally2 directory.
564 * modules/pam_tally2/Makefile.am: New.
565 * modules/pam_tally2/README.xml: New.
566 * modules/pam_tally2/tallylog.h: New.
567 * modules/pam_tally2/pam_tally2.8.xml: New.
568 * modules/pam_tally2/pam_tally2.c: New.
569 * modules/pam_tally2/pam_tally2_app.c: New.
570 * modules/pam_tally2/tst-pam_tally2: New.
571 * po/POTFILES.in: Add pam_tally2 sources.
573 2008-10-17 Xavier Queralt Mateu <xqueralt@gmail.com>
575 * po/ca.po: Updated translations.
577 2008-10-15 Tomas Mraz <t8m@centrum.cz>
579 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Save the old
580 euid to suid to be able to restore it.
582 2008-10-15 Piotr Drąg <piotrdrag@gmail.com>
584 * po/pl.po: Updated translations.
586 2008-10-13 Tomas Mraz <t8m@centrum.cz>
588 * po/LINGUAS: New languages.
589 * po/cs.po: Updated translations.
591 2008-10-13 Amitakhya Phukan <aphukan@redhat.com>
593 * po/as.po: Updated translations.
595 2008-10-13 Shankar Prasad <svenkate@redhat.com>
597 * po/kn.po: Updated translations.
599 2008-10-13 Sandeep Sheshrao Shedmake <sshedmak@redhat.com>
601 * po/mr.po: New translation to Marathi.
603 2008-10-13 Runa Bhattacharjee <runab@redhat.com>
605 * po/bn_IN.po: Updated translations.
607 2008-10-13 Sharuzzaman Ahmat Raslan <sharuzzaman@gmail.com>
609 * po/ms.po: New translation to Malay.
611 2008-10-10 Thorsten Kukuk <kukuk@thkukuk.de>
613 * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass):
614 Remove check for re-used passwords.
615 * modules/pam_cracklib/pam_cracklib.8.xml: Remove documentation
616 of re-used password check.
618 * configure.in: add modules/pam_pwhistory/Makefile.
619 * doc/sag/Linux-PAM_SAG.xml: Include pam_pwhistory.xml.
620 * doc/sag/pam_pwhistory.xml: New.
621 * libpam/pam_static_modules.h: Add pam_pwhistory data.
622 * modules/Makefile.am: Add pam_pwhistory directory.
623 * modules/pam_pwhistory/Makefile.am: New.
624 * modules/pam_pwhistory/README.xml: New.
625 * modules/pam_pwhistory/opasswd.c: New.
626 * modules/pam_pwhistory/opasswd.h: New.
627 * modules/pam_pwhistory/pam_pwhistory.8.xml: New.
628 * modules/pam_pwhistory/pam_pwhistory.c: New.
629 * modules/pam_pwhistory/tst-pam_pwhistory: New.
630 * xtests/Makefile.am: New.
631 * xtests/run-xtests.sh: New.
632 * xtests/tst-pam_pwhistory1.c: New.
633 * xtests/tst-pam_pwhistory1.pamd: New.
634 * xtests/tst-pam_pwhistory1.sh: New.
635 * po/POTFILES.in: Add modules/pam_pwhistory/.
636 * po/de.po: Update translations.
638 2008-10-02 Thorsten Kukuk <kukuk@thkukuk.de>
640 * po/de.po: Update translations.
642 2008-09-30 Manoj Kumar Giri <mgiri@redhat.com>
644 * po/or.po: Updated translations.
646 2008-09-30 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
648 * po/pt_BR.po: Updated translations.
650 2008-09-30 Tomas Mraz <t8m@centrum.cz>
652 * modules/pam_lastlog/pam_lastlog.8.xml: Document new options
653 noupdate and showfailed.
654 * modules/pam_lastlog/pam_lastlog.c(pam_parse): Recognize the new
656 (last_login_read): New output parameter lltime. Do not display
657 the last login message if it would be empty.
658 (last_login_date): New output parameter lltime. Do not write the
659 last login info when LASTLOG_UPDATE is not set.
660 (last_login_failed): New function to display the last bad login
662 (pam_sm_open_session): Obtain lltime from last_login_date() and
663 call last_login_failed() when appropriate.
665 * po/Linux-pam.pot: Updated strings to translate.
668 2008-09-29 Thorsten Kukuk <kukuk@thkukuk.de>
670 * modules/pam_echo/pam_echo.8.xml: Fix format error.
672 2008-09-25 Tomas Mraz <t8m@centrum.cz>
674 * modules/pam_tally/pam_tally.c(get_tally): Fix syslog message.
675 (tally_check): Open faillog read only. Close file descriptor.
676 Fix typos in messages.
678 2008-09-25 Thorsten Kukuk <kukuk@thkukuk.de>
680 * modules/pam_mail/pam_mail.c (report_mail): Fix logic of
681 "quiet" option (Patch from Andreas Henriksson <andreas@fatal.se>)
683 * modules/pam_mail/pam_mail.8.xml: Fix typo.
685 2008-09-23 Tomas Mraz <t8m@centrum.cz>
687 * modules/pam_limits/limits.conf.5.xml: Comment that rss limit is
690 2008-09-19 Tomas Mraz <t8m@centrum.cz>
692 * modules/pam_cracklib/pam_cracklib.8.xml: Fix description
693 of the palindrome test. Document new options maxrepeat and
695 * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Parse
696 the maxrepeat and reject_username options.
697 (password_check): Call the new tests usercheck() and
699 (_pam_unix_approve_pass): Pass user name to the password_check().
701 2008-09-16 Thorsten Kukuk <kukuk@thkukuk.de>
703 * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo.
705 * modules/pam_unix/pam_unix.8.xml: Fix typo.
707 2008-09-03 Thorsten Kukuk <kukuk@thkukuk.de>
709 * modules/pam_exec/pam_exec.c: Expose authtok if requested,
710 provide environment variable containing service type.
711 * modules/pam_exec/pam_exec.8.xml: Document new option.
713 2008-08-29 Tomas Mraz <t8m@centrum.cz>
715 * modules/pam_loginuid/pam_loginuid.c(set_loginuid): Uids
718 2008-08-18 Thorsten Kukuk <kukuk@thkukuk.de>
720 * Makefile.am (M4_FILES): Adjust list.
722 * modules/pam_access/pam_access.8.xml: Fix module service
724 * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
725 * modules/pam_debug/pam_debug.8.xml: Likewise.
726 * modules/pam_deny/pam_deny.8.xml: Likewise.
727 * modules/pam_echo/pam_echo.8.xml: Likewise.
728 * modules/pam_env/pam_env.8.xml: Likewise.
729 * modules/pam_exec/pam_exec.8.xml: Likewise.
730 * modules/pam_faildelay/pam_faildelay.8.xml: Likewise.
731 * modules/pam_filter/pam_filter.8.xml: Likewise.
732 * modules/pam_ftp/pam_ftp.8.xml: Likewise.
733 * modules/pam_group/pam_group.8.xml: Likewise.
734 * modules/pam_issue/pam_issue.8.xml: Likewise.
735 * modules/pam_keyinit/pam_keyinit.8.xml: Likewise.
736 * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
737 * modules/pam_limits/pam_limits.8.xml: Likewise.
738 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
739 * modules/pam_localuser/pam_localuser.8.xml: Likewise.
740 * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
741 * modules/pam_mail/pam_mail.8.xml: Likewise.
742 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
743 * modules/pam_motd/pam_motd.8.xml: Likewise.
744 * modules/pam_namespace/pam_namespace.8.xml: Likewise.
745 * modules/pam_nologin/pam_nologin.8.xml: Likewise.
746 * modules/pam_permit/pam_permit.8.xml: Likewise.
747 * modules/pam_rhosts/pam_rhosts.8.xml: Likewise.
748 * modules/pam_rootok/pam_rootok.8.xml: Likewise.
749 * modules/pam_securetty/pam_securetty.8.xml: Likewise.
750 * modules/pam_selinux/pam_selinux.8.xml: Likewise.
751 * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
752 * modules/pam_shells/pam_shells.8.xml: Likewise.
753 * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
754 * modules/pam_tally/pam_tally.8.xml: Likewise.
755 * modules/pam_time/pam_time.8.xml: Likewise.
756 * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
757 * modules/pam_umask/pam_umask.8.xml: Likewise.
758 * modules/pam_unix/pam_unix.8.xml: Likewise.
759 * modules/pam_userdb/pam_userdb.8.xml: Likewise.
760 * modules/pam_warn/pam_warn.8.xml: Likewise.
761 * modules/pam_wheel/pam_wheel.8.xml: Likewise.
762 * modules/pam_xauth/pam_xauth.8.xml: Likewise.
764 2008-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
766 * configure.in: Add version for gettext, add search path
767 for m4 directory, fix handling of --disable-* options.
768 Patches from Diego Pettenò <flameeyes@gmail.com>.
770 * configure.in: Run autoupdate on it.
772 * acincludde.m4: Rename to ...
773 * m4/jh_path_xml_catalog.m4: ... this.
775 * m4/*.m4: Remove all autoconf m4 files.
777 2008-07-29 Steve Langasek <vorlon@debian.org>
779 * modules/pam_cracklib/pam_cracklib.8.xml: correct a typo,
780 "Only he" -> "Only the"
782 2008-07-28 Steve Langasek <vorlon@debian.org>
784 * libpamc/test/regress/test.libpamc.c: use standard u_int8_t
785 type instead of __u8, as elsewhere.
786 Patch from Roger Leigh <rleigh@debian.org>.
787 * modules/pam_unix/passverify.c: make save_old_password()
788 thread-safe by using pam_modutil_getpwnam() instead of getpwnam()
789 * modules/pam_unix/passverify.c, modules/pam_unix/passverify.h,
790 modules/pam_unix/pam_unix_passwd.c: add pamh argument to
793 2008-07-27 Steve Langasek <vorlon@debian.org>
795 * modules/pam_*/pam_*.8.xml: fix up the references to pam.d,
796 which is in manpage section 5, not 8.
797 * modules/pam_env/environment, modules/pam_env/pam_env.8.xml:
798 spelling fix, seperate -> separate
800 2008-07-26 Steve Langasek <vorlon@debian.org>
802 * modules/pam_env/pam_env.c: Fix module to skip over
803 non-alphanumeric variable names, and to handle the case when
804 asked to delete a non-existent variable.
806 2008-07-13 Tomas Mraz <t8m@centrum.cz>
808 * modules/pam_mail/pam_mail.8.xml: Module supports session and
809 not account service (#1980773).
811 2008-07-11 Tomas Mraz <t8m@centrum.cz>
813 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Do
814 not close the pipe descriptor in borderline case (#2009766).
815 * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
817 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
818 * modules/pam_unix/support.h: Define upper limit of fds we will
821 * modules/pam_selinux/pam_selinux.c (config_context): Do not
822 ask for the level if use_current_range is set.
823 (context_from_env): New function to obtain the context from
824 PAM environment variables.
825 (pam_sm_open_session): Call context_from_env() if env_params option
826 is present. use_current_range now modifies behavior of the
827 context_from_env and config_context options.
828 * modules/pam_selinux/pam_selinux.8.xml: Describe the env_params
829 option. Adjust description of use_current_range option.
831 2008-07-09 Thorsten Kukuk <kukuk@thkukuk.de>
833 * modules/pam_exec/pam_exec.c (call_exec): Move all variable
834 declaration to begin of a block (#1976310).
836 * xtests/tst-pam_group1.c (run_test): Move no_grps declaration
837 to begin of function (#1976310).
839 * modules/pam_securetty/pam_securetty.8.xml: Replace
840 PAM_IGNORE with PAM_USER_UNKNOWN (#1994330).
842 * modules/pam_tally/pam_tally.c: Add support for silent and
844 * modules/pam_tally/pam_tally.8.xml: Document silent and
847 2008-07-08 Thorsten Kukuk <kukuk@thkukuk.de>
849 * modules/pam_unix/passverify.c (verify_pwd_hash): Adjust debug
852 2008-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
854 * modules/pam_unix/unix_chkpwd.c (main): Fix compiling without
857 * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo in ucredit
858 description (reported by Wayne Pollock <pollock@acm.org>)
860 2008-06-19 Tomas Mraz <t8m@centrum.cz>
862 * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
863 Detect configuration errors. Fail on incomplete condition.
865 2008-05-20 Tomas Mraz <t8m@centrum.cz>
867 * configure.in: Work correctly with autoconf-2.62.
869 2008-05-19 Tomas Mraz <t8m@centrum.cz>
871 * doc/man/pam_getenv.3.xml: Correct the pam_getenv documentation.
873 * doc/man/pam_prompt.3.xml: Add missing description.
875 2008-05-14 Kjartan Maraas <kmaraas@gnome.org>
877 * po/nb.po: Updated translation.
879 2008-05-14 Sulyok Péter <peti@sulyok.hu>
881 * po/hu.po: Updated translation.
883 2008-05-14 Tomas Mraz <t8m@centrum.cz>
885 * libpam/pam_modutil_getgrgid.c: Replace hardcoded constant with
886 define PWD_LENGTH_SHIFT.
887 * libpam/pam_modutil_getgrnam.c: Likewise.
888 * libpam/pam_modutil_getpwnam.c: Likewise.
889 * libpam/pam_modutil_getpwuid.c: Likewise.
890 * libpam/pam_modutil_getspnam.c: Likewise.
891 * libpam/pam_modutil_private.h: Adjust values for PWD_ constants.
893 * modules/pam_unix/pam_unix_passwd.c(pam_sm_chauthtok): Unset authtok
894 item when password is not approved.
895 * modules/pam_unix/support.c(_unix_read_password): UNIX_USE_FIRST_PASS
896 is always set when UNIX_AUTHTOK is set, change order of conditions.
898 2008-05-02 Tomas Mraz <t8m@centrum.cz>
900 * modules/pam_selinux/pam_selinux.c(query_response): Add handling
902 (manual_context): Handle failed query_response() properly. Rename
903 variable responses to response which is more correct name.
904 (config_context): Likewise.
905 (pam_sm_open_session): Do not base decision on whether there is a tty.
907 2008-04-22 Tomas Mraz <t8m@centrum.cz>
909 * modules/pam_selinux/pam_selinux.c(pam_sm_close_sesion): Fix
910 regression from the change from 2008-03-20. setexeccon() must be
911 called also with NULL prev_context.
913 2008-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
915 * modules/pam_access/access.conf.5.xml: Document changed behavior
917 * modules/pam_access/pam_access.c: Add from_remote_host to
918 struct login_info to change behavior of LOCAL keyword: if
919 PAM_RHOST is not set, LOCAL will be true.
921 2008-04-18 Tomas Mraz <t8m@centrum.cz>
923 * modules/pam_namespace/pam_namespace.c: New functions
924 unprotect_dirs(), cleanup_protect_data(), protect_mount(),
925 protect_dir() to protect directory by bind mount.
926 (cleanup_data): Renamed to cleanup_polydir_data().
927 (parse_create_params): Allow missing specification of mode
929 (check_inst_parent): Call protect_dir() on the instance parent
930 directory. The directory is created when it doesn't exist.
931 (create_polydir): Protect and make the polydir by protect_dir(),
932 remove potential races.
933 (create_dirs): Renamed to create_instance(), remove call to
935 (ns_setup): Call protect_dir() on the polydir if it already exists.
936 Call inst_init() after the polydir is mounted.
937 (setup_namespace): Set the namespace protect data to be cleaned up
938 on pam_close_session()/pam_end().
939 (pam_sm_open_session): Initialize the protect_dirs.
940 (pam_sm_close_session): Cleanup namespace protect data.
941 * modules/pam_namespace/pam_namespace.h: Define struct for the
942 stack of protected dirs.
943 * modules/pam_namespace/pam_namespace.8.xml: Document when the
944 instance init script is called.
945 * modules/pam_namespace/namespace.conf.5.xml: Likewise.
947 2008-04-17 Tomas Mraz <t8m@centrum.cz>
949 * modules/pam_access/pam_access.c(myhostname): Removed function.
950 (user_match): Supply hostname of the machine to the netgroup_match().
951 Use hostname from the loginfo instead of calling myhostname().
952 (pam_sm_authenticate): Call gethostname() to fill hostname in the
955 * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try
956 to lock if euid != 0.
958 2008-04-16 Tomas Mraz <t8m@centrum.cz>
960 * modules/pam_unix/Makefile.am: Link unix_chkpwd with libaudit.
961 * modules/pam_unix/unix_chkpwd.c(_audit_log): New function for audit.
962 (main): Call _audit_log() when appropriate.
964 * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Recognize also
965 try_first_pass and use_first_pass options.
966 (pam_sm_chauthtok): Implement the new options.
968 2008-04-08 Tomas Mraz <t8m@centrum.cz>
970 * modules/pam_xauth/pam_xauth.c(run_coprocess): Avoid multiple
971 calls to sysconf() (based on patch by Sami Farin).
973 * libpam/pam_item.c (TRY_SET): Do not set when destination
974 is identical to source.
975 (pam_set_item): Do not overwrite destination when it
976 is identical to source.
978 2008-04-07 Miloš Komarčević <kmilos@gmail.com>
980 * po/sr.po: New file with translation.
981 * po/sr@latin.po: Likewise.
982 * po/LINGUAS: Add sr and sr@latin.
984 2008-04-03 Thorsten Kukuk <kukuk@thkukuk.de>
986 * release version 1.0.0
988 * configure.in: Set version number to 1.0.0.
989 * libpam/Makefile.am: Bump patchlevel of libpam.
990 * doc/adg/Linux-PAM_ADG.xml: Update version/date.
991 * doc/mwg/Linux-PAM_MWG.xml: Likewise.
992 * doc/sag/Linux-PAM_SAG.xml: Likewise.
994 2008-03-31 Dan Walsh <dwalsh@redhat.com>
996 * modules/pam_sepermit/pam_sepermit.c(sepermit_lock): Mark lock fd to
999 2008-03-25 Leah Liu <lliu@redhat.com>
1001 * po/zh_CN.po: Updated translation.
1003 2008-03-20 Tomas Mraz <t8m@centrum.cz>
1005 * modules/pam_namespace/pam_namespace.c(poly_name): Switch to USER
1006 method only when appropriate.
1007 (setup_namespace): Do not umount when not mounted with RUSER.
1009 * modules/pam_selinux/pam_selinux.c(pam_sm_close_session): Call
1010 freecontext() after the context is logged not before.
1012 2008-03-18 Canniot Thomas <thomas.canniot@mrtomlinux.org>
1014 * po/fr.po: Updated translation.
1016 2008-03-13 Ankit Patel <ankit@redhat.com>
1018 * po/gu.po: Updated translation.
1020 2008-03-05 Tomas Mraz <t8m@centrum.cz>
1022 * modules/pam_cracklib/pam_cracklib.c(pam_sm_chauthtok): Avoid
1023 unnecessary x_strdup() of resp.
1024 * modules/pam_ftp/pam_ftp(pam_sm_authenticate): Call _pam_overwrite()
1025 before dropping password resp.
1027 2008-03-03 Tomas Mraz <t8m@centrum.cz>
1029 * modules/pam_selinux/pam_selinux.c: Do not translate syslog messages.
1030 * po/Linux-PAM.pot: Update.
1032 * libpam/pam_item.c(RESET): Rename to TRY_SET, handle strdup failure.
1033 (pam_set_item): Use TRY_SET() also for PAM_AUTHTOK and PAM_OLDAUTHTOK.
1034 Handle allocation failure for PAM_XAUTHDATA.
1035 (pam_get_user): Return error when conversation returns NULL user.
1036 Call pam_set_item() instead of RESET().
1038 2008-02-26 Tomas Mraz <t8m@centrum.cz>
1040 * modules/pam_unix/Makefile.am: Do not link to cracklib.
1041 * modules/pam_unix/pam_unix_passwd.c(_pam_unix_approve_pass):
1042 Do not call FascistCheck() from cracklib.
1044 2008-02-29 Fabian Affolter <fab@fedoraproject.org>
1046 * po/de.po: Updated translation.
1048 2008-02-28 Piotr Drąg <piotrdrag@gmail.com>
1050 * po/pl.po: Updated translation.
1052 2008-02-26 Tomas Mraz <t8m@centrum.cz>
1054 * po/LINUGAS: New languages added.
1055 * po/es.po: Updated translations.
1056 * po/fr.po: Likewise.
1057 * po/it.po: Likewise.
1058 * po/ja.po: Likewise.
1059 * po/nl.po: Likewise.
1060 * po/pl.po: Likewise.
1061 * po/pt_BR.po: Likewise.
1062 * po/ru.po: Likewise.
1063 * po/zh_CN.po: Likewise.
1064 * po/as.po: New file.
1065 * po/gu.po: Likewise.
1066 * po/hi.po: Likewise.
1067 * po/kn.po: Likewise.
1068 * po/ko.po: Likewise.
1069 * po/ml.po: Likewise.
1070 * po/or.po: Likewise.
1071 * po/si.po: Likewise.
1072 * po/ta.po: Likewise.
1074 2008-02-21 Tomas Mraz <t8m@centrum.cz>
1076 * libpam/pam_audit.c (_pam_audit_writelog): Silence syslog
1077 message on non-error return.
1079 * modules/pam_unix/unix_chkpwd.c (main): Proceed as unprivileged
1080 user when checking password of another user.
1081 * modules/pam_unix/unix_update.c: Fix comment.
1083 2008-02-18 Dmitry V. Levin <ldv@altlinux.org>
1085 * libpam/pam_handlers.c (_pam_assemble_line): Fix potential
1087 * xtests/tst-pam_assemble_line1.pamd: New test for
1089 * xtests/tst-pam_assemble_line1.sh: New script for
1090 tst-pam_assemble_line1.
1091 * xtests/Makefile.am (NOSRCTESTS): Add tst-pam_assemble_line1.
1092 (EXTRA_DIST): Add tst-pam_assemble_line1.pamd and
1093 tst-pam_assemble_line1.sh
1095 * modules/pam_exec/pam_exec.c (call_exec): Fix asprintf return
1098 2008-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
1100 * release version 0.99.10.0
1102 * configure.in: set version number.
1104 * modules/pam_rhosts/Makefile.am: Remove pam_rhosts_auth.
1105 * modules/pam_rhosts/pam_rhosts_auth.c: Removed.
1106 * modules/pam_rhosts/tst-pam_rhosts_auth: Removed.
1108 * modules/pam_namespace/Makefile.am (noinst_HEADERS): Add
1111 2008-02-13 Tomas Mraz <t8m@centrum.cz>
1113 * modules/pam_namespace/Makefile.am: Add argv_parse files and namespace.d
1115 * modules/pam_namespace/argv_parse.c: New file.
1116 * modules/pam_namespace/argv_parse.h: New file.
1117 * modules/pam_namespace/namespace.conf.5.xml: Document new features.
1118 * modules/pam_namespace/pam_namespace.8.xml: Likewise.
1119 * modules/pam_namespace/pam_namespace.h: Use SECURECONF_DIR define.
1120 Define NAMESPACE_D_DIR and NAMESPACE_D_GLOB. Define new option flags
1122 (polydir_s): Add rdir, replace exclusive with flags, add init_script,
1123 owner, group, and mode.
1124 (instance_data): Add ruser, gid, and ruid.
1125 * modules/pam_namespace/pam_namespace.c: Remove now unused copy_ent().
1126 (add_polydir_entry): Add the entry directly, no copy.
1127 (del_polydir): New function.
1128 (del_polydir_list): Call del_polydir().
1129 (expand_variables, parse_create_params, parse_iscript_params,
1130 parse_method): New functions.
1131 (process_line): Call expand_variables() on polydir and instance prefix.
1132 Call argv_parse() instead of strtok_r(). Allocate struct polydir_s on heap.
1133 (parse_config_file): Parse .conf files from namespace.d dir after
1135 (form_context): Call getcon() or get_default_context_with_level() when
1136 appropriate flags are set.
1137 (poly_name): Handle shared polydir flag.
1138 (inst_init): Execute non-default init script when specified.
1139 (create_polydir): New function.
1140 (create_dirs): Remove the code which checks the polydir. Do not call
1141 inst_init() when noinit flag is set.
1142 (ns_setup): Check the polydir and eventually create it if the create flag
1144 (setup_namespace): Use ruser uid from idata. Set the namespace polydir
1145 pam data only when namespace was set up correctly. Unmount polydir
1147 (get_user_data): New function.
1148 (pam_sm_open_session): Check for use_current_context and
1149 use_default_context options. Call get_user_data().
1150 (pam_sm_close_session): Call get_user_data().
1152 2008-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
1154 * po/de.po: Translate some more strings.
1156 2008-02-05 Thorsten Kukuk <kukuk@thkukuk.de>
1158 * modules/pam_unix/unix_update.c: Remove unused declarations.
1160 2008-02-04 Thorsten Kukuk <kukuk@thkukuk.de>
1162 * libpam/pam_static_modules.h: Add _pam_sepermit_modstruct.
1163 * modules/pam_sepermit/pam_sepermit.c: Fix typo.
1164 * modules/pam_sepermit/Makefile.am: Install config file only
1165 if we build the module.
1167 * README: Add --disable-pie to configure options for static library.
1169 * doc/man/Makefile.am: Fix building outside of src directory.
1171 * libpam/Makefile.am: Bump version number of libpam.
1173 * modules/Makefile.am: Add pam_sepermit.
1175 * doc/Makefile.am: Fix build out of source directory.
1177 * po/POTFILES.in: Add pam_sepermit.c.
1179 * modules/pam_exec/pam_exec.c: Set PAM environment variables and
1181 * modules/pam_exec/pam_exec.8.xml: Document new behavior.
1182 Patch from Julien Lecomte <julien@lecomte.at>.
1184 2008-02-01 Tomas Mraz <t8m@centrum.cz>
1186 * modules/pam_namespace/namespace.conf.5.xml: Add documentation for
1187 tmpfs and tmpdir polyinst and for ~ user list modifier.
1188 * modules/pam_namespace/namespace.init: Add documentation for the
1189 new init parameter. Add home directory initialization script.
1190 * modules/pam_namespace/pam_namespace.8.xml: Document the new
1191 init parameter of the namespace.init script.
1192 * modules/pam_namespace/pam_namespace.c(copy_ent): Copy exclusive flag.
1193 (cleanup_data): New function.
1194 (process_line): Set exclusive flag. Add tmpfs and tmpdir methods.
1195 (ns_override): Change behavior on the exclusive flag.
1196 (poly_name): Process tmpfs and tmpdir methods.
1197 (inst_init): Add flag for new directory initialization.
1198 (create_dirs): Process the tmpdir method, add the new directory
1200 (ns_setup): Remove unused code. Process the tmpfs method.
1201 (cleanup_tmpdirs): New function.
1202 (setup_namespace): Set data for proper cleanup. Cleanup the tmpdirs
1204 (pam_sm_close_session): Instead of parsing the config file again use
1205 the previously set data for cleanup.
1206 * modules/pam_namespace/pam_namespace.h: Add TMPFS and TMPDIR methods
1209 2008-01-29 Tomas Mraz <t8m@centrum.cz>
1211 * configure.in: Test for setkeycreatecon needs libselinux.
1212 Add new module pam_sepermit.
1213 * modules/Makefile.am: Add new module pam_sepermit.
1214 * modules/pam_sepermit/.cvsignore: New file.
1215 * modules/pam_sepermit/Makefile.am: Likewise.
1216 * modules/pam_sepermit/README.xml: Likewise.
1217 * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
1218 * modules/pam_sepermit/pam_sepermit.c: Likewise.
1219 * modules/pam_sepermit/sepermit.conf: Likewise.
1220 * modules/pam_sepermit/tst-pam_sepermit: Likewise.
1221 * doc/sag/pam_sepermit.xml: Likewise.
1223 * doc/sag/pam_tty_audit.xml: Add pam_tty_audit to SAG.
1225 2008-01-29 Miloslav Trmac <mitr@redhat.com>
1227 * modules/pam_tty_audit/README.xml: Add notes section.
1228 * modules/pam_tty_audit/pam_tty_audit.8.xml: Describe patterns
1229 support and open_only option. Add notes.
1230 * modules/pam_tty_audit/pam_tty_audit.c(pam_sm_open_session): Add
1231 support for pattern matching and the open_only option.
1233 2008-01-28 Thorsten Kukuk <kukuk@thkukuk.de>
1235 * libpam/pam_audit.c: Include pam_modutil_private.h.
1237 * libpam/pam_item.c (pam_set_item): Fix compiler warning.
1239 * libpam/pam_end.c (pam_end): Cast to correct pointer type.
1240 * libpam/include/security/_pam_macros.h (_pam_overwrite_n): Use
1243 * modules/pam_unix/passverify.c: Fix compiling without SELinux
1246 2008-01-24 Tomas Mraz <t8m@centrum.cz>
1248 * modules/pam_unix/bigcrypt.c (bigcrypt): Use crypt_r() when
1250 * modules/pam_unix/passverify.c (strip_hpux_aging): New function
1251 to strip HP/UX aging info from password hash.
1252 (verify_pwd_hash): Call strip_hpux_aging(), use crypt_r() when
1255 2008-01-23 Tomas Mraz <t8m@centrum.cz>
1257 * configure.in: Add test for crypt_r(). Add setting/disabling random
1260 * modules/pam_unix/Makefile.am: Add unix_update.8 manpage generated from
1261 XML, generate also unix_chkpwd.8 from XML.
1262 * modules/pam_unix/pam_unix_acct.c: Add rounds parameter to _set_ctrl().
1263 * modules/pam_unix/pam_unix_auth.c: Likewise.
1264 * modules/pam_unix/pam_unix_sess.c: Likewise.
1265 * modules/pam_unix/pam_unix_passwd.c: Likewise.
1266 * modules/pam_unix/support.c(_set_ctrl): Likewise.
1267 * modules/pam_unix/support.h: Likewise. Add UNIX_SHA256_PASS,
1268 UNIX_SHA512_PASS, and UNIX_ALGO_ROUNDS ctrls.
1269 (pam_sm_chauthtok): Refactor out new password encryption.
1270 * modules/pam_unix/passverify.c(crypt_make_salt): New function.
1271 (crypt_md5_wrapper): Call crypt_make_salt().
1272 (create_password_hash): New function refactored out of
1273 pam_sm_chauthtok(). Support for new password hashes.
1274 * modules/pam_unix/passverify.h: Drop ascii_to_bin() and bin_to_ascii()
1275 macros. Add prototype for create_password_hash().
1276 * modules/pam_unix/unix_update.8.xml: New file.
1277 * modules/pam_unix/unix_chkpwd.8.xml: Likewise.
1279 * modules/pam_unix/Makefile.am: Add unix_update helper.
1280 * modules/pam_unix/pam_unix_passwd.c: Move functions i64c(),
1281 crypt_md5_wrapper(), save_old_password(), _update_passwd() and
1282 _update_shadow() to passverify.c file. Rename _unix_run_shadow_binary()
1283 to _unix_run_update_binary(), which also verifies old password and
1285 (_do_setpass, pam_sm_chauthtok): lckpwdf()->lock_pwdf(), the same for unlock.
1286 Call _unix_run_update_binary() appropriately.
1287 _update_passwd()->unix_update_passwd(), the same for shadow.
1288 * modules/pam_unix/passverify.c: Add new functions moved from
1289 pam_unix_passwd.c and unix_chkpwd.c.
1290 * modules/pam_unix/passverify.h: Likewise.
1291 * modules/pam_unix/unix_chkpwd.c: Remove SELinux checks. Move
1292 su_sighandler(), setup_signals(), getuidname() to passverify.c.
1293 (main): Remove 'shadow' option. Refactor out read_passwords() and
1294 call it. More strict checking how the binary is called.
1295 * modules/pam_unix/unix_update.c: New helper binary - non-setuid,
1296 called from SELinux confined apps only.
1298 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Return
1299 status and daysleft instead of fake shadow entry.
1300 (pam_sm_acct_mgmt): Call _unix_run_verify_binary() appropriately.
1301 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Call
1302 get_account_info() and check_shadow_expiry().
1303 * modules/pam_unix/support.h: Adjust _unix_run_verify_binary()
1305 * modules/pam_unix/support.c (_unix_run_helper_binary): Remove check
1306 on selinux enabled/disabled.
1307 * modules/pam_unix/unix_chkpwd.c (_verify_account): Rename to
1308 _check_expiry(), now checks shadow expiry info.
1309 (main): Remove check on selinux enabled/disabled. Check shadow
1310 expiry through _check_expiry().
1312 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Call
1313 get_account_info() and check_shadow_expiry().
1314 * modules/pam_unix/passverify.c: Add get_account_info() to
1315 obtain shadow and passwd entry. Add check_shadow_expiry() to
1316 for shadow password expiry check.
1317 (get_pwd_hash): Call get_account_info().
1318 * modules/pam_unix/passverify.h: Add prototypes for get_account_info()
1319 and check_shadow_expiry().
1321 2008-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
1323 * doc/man/Makefile.am: Fix manual page dependencies,
1324 add hack for bug in xsl stylestheets.
1326 2008-01-07 Thorsten Kukuk <kukuk@thkukuk.de>
1328 * po/it.po: Fix typos.
1329 * po/de.po: Few new translations.
1330 * po/POTFILES.in: Add pam_tty_audit.c and passverify.c.
1331 * doc/man/pam_xauth_data.3.xml: Added to CVS.
1332 * doc/man/pam_xauth_data.3: Likewise.
1333 * modules/pam_tty_audit/README: Likewise.
1334 * modules/pam_tty_audit/pam_tty_audit.8: Likewise.
1335 * po/sv.po: Update swedish translation [#1857531].
1336 * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix
1337 cut & paste error [#1863490].
1339 2008-01-02 Petteri Räty <betelgeuse@gentoo.org>
1340 * modules/pam_limits/limits.conf: document allowed values for
1342 * modules/pam_limits/limits.conf.5.xml: Likewise.
1344 2007-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
1346 * README: Document how to run make check with static modules
1349 2007-12-18 Peter Breitenlohner <peb@mppmu.mpg.de>
1350 * README: Document that "make check" requires a file
1351 /etc/pam.d/other (SF#1822764).
1353 2007-12-12 Eamon Walsh <ewalsh@tycho.nsa.gov>
1355 * doc/man/pam_item_types_ext.inc.xml: More appropriate wording
1356 for PAM_XDISPLAY doc.
1358 2007-12-07 Tomas Mraz <t8m@centrum.cz>
1360 * po/cs.po: Updated translations.
1362 * libpam/libpam.map: Add LIBPAM_MODUTIL_1.1 version.
1363 * libpam/pam_audit.c: Add _pam_audit_open() and
1364 pam_modutil_audit_write().
1365 (_pam_auditlog): Call _pam_audit_open().
1366 * libpam/include/security/pam_modutil.h: Add pam_modutil_audit_write().
1367 * modules/pam_access/pam_access.8.xml: Add noaudit option.
1369 * modules/pam_access/pam_access.c: Move fs, sep, pam_access_debug, and
1370 only_new_group_syntax variables to struct login_info. Add noaudit
1372 (_parse_args): Adjust for the move of variables and add support for
1374 (group_match): Add debug parameter.
1375 (string_match): Likewise.
1376 (network_netmask_match): Likewise.
1377 (login_access): Adjust for the move of variables. Add nonall_match.
1378 Add call to pam_modutil_audit_write().
1379 (list_match): Adjust for the move of variables.
1380 (user_match): Likewise.
1381 (from_match): Likewise.
1382 (pam_sm_authenticate): Call _parse_args() earlier.
1383 * modules/pam_limits/pam_limits.8.xml: Add noaudit option.
1385 * modules/pam_limits/pam_limits.c (_pam_parse): Add noaudit option.
1386 (setup_limits): Call pam_modutil_audit_write().
1387 * modules/pam_time/pam_time.8.xml: Add debug and noaudit options.
1389 * modules/pam_time/pam_time.c: Add option parsing (_pam_parse()).
1390 (check_account): Call _pam_parse(). Call pam_modutil_audit_write()
1391 and pam_syslog() on login denials.
1393 2007-12-07 Luca Bruno <luca.br@uno.it>
1395 * po/it.po: Updated translations.
1397 2007-12-06 Eamon Walsh <ewalsh@tycho.nsa.gov>
1399 * libpam/include/security/_pam_macros.h: Add _pam_overwrite_n()
1401 * libpam/include/security/_pam_types.h: Add PAM_XDISPLAY,
1402 PAM_XAUTHDATA items, pam_xauth_data struct.
1403 * libpam/pam_item.c (pam_set_item, pam_get_item): Handle
1404 PAM_XDISPLAY and PAM_XAUTHDATA items.
1405 * libpam/pam_end.c (pam_end): Destroy the new items.
1406 * libpam/pam_private.h (pam_handle): Add data members for new
1407 items. Add prototype for _pam_memdup.
1408 * libpam/pam_misc.c: Add _pam_memdup.
1409 * doc/man/Makefile.am: Add pam_xauth_data.3. Replace
1410 pam_item_types.inc.xml with pam_item_types_std.inc.xml and
1411 pam_item_types_ext.inc.xml.
1412 * doc/man/pam_get_item.3.xml: Replace pam_item_types.inc.xml
1413 with pam_item_types_std.inc.xml and pam_item_types_ext.inc.xml.
1414 * doc/man/pam_set_item.3.xml: Likewise.
1415 * doc/man/pam_item_types.inc.xml: Removed file.
1416 * doc/man/pam_item_types_ext.inc.xml: New file.
1417 * doc/man/pam_item_types_std.inc.xml: New file.
1419 2007-12-06 Tomas Mraz <t8m@centrum.cz>
1421 * modules/pam_tty_audit/pam_tty_audit.8.xml: Fix example.
1423 2007-12-05 Miloslav Trmac <mitr@redhat.com>
1425 * configure.in: Add test for audit_tty_status struct. Add
1426 pam_tty_audit module.
1427 * libpam/pam_static_modules.h: Add pam_tty_audit module.
1428 * modules/pam_tty_audit/Makefile.am: New file.
1429 * modules/pam_tty_audit/README.xml: Likewise.
1430 * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
1431 * modules/pam_tty_audit/pam_tty_audit.c: Likewise.
1433 2007-12-05 Tomas Mraz <t8m@centrum.cz>
1435 * modules/pam_unix/Makefile.am: Add passverify.h and passverify.c
1436 as first part of pam_unix refactorization.
1437 * modules/pam_unix/pam_unix/pam_unix_acct.c: Include passverify.h.
1438 * modules/pam_unix/pam_unix_passwd.c: Likewise.
1439 * modules/pam_unix/passverify.c: New file with common functions.
1440 * modules/pam_unix/passverify.h: Prototypes for the common functions.
1441 * modules/pam_unix/support.c: Include passverify.h, move
1442 _unix_shadowed() to passverify.c.
1443 (_unix_verify_password): Refactor out verify_pwd_hash() function.
1444 * modules/pam_unix/support.h: Move _unix_shadowed() prototype to
1446 * modules/pam_unix/unix_chkpwd.c: Use _unix_shadowed() and
1447 verify_pwd_hash() from passverify.c.
1449 2007-11-20 Thorsten Kukuk <kukuk@thkukuk.de>
1451 * modules/pam_unix/Makefile.am (unix_chkpwd_LDADD): Don't link
1452 unix_chkpwd unnecessary against libpam (#1822779).
1454 * modules/pam_tally/pam_tally.c (tally_log): Map
1455 pam_modutil_getpwnam to getpwnam if we don't compile
1457 * modules/pam_tally/Makefile.am: Don't link pam_tally_app
1458 against libpam (#1822779).
1460 2007-11-06 Thorsten Kukuk <kukuk@thkukuk.de>
1462 * xtests/tst-pam_group1.c: Include stdlib.h
1463 * xtests/tst-pam_succeed_if1.c: Likewise.
1464 * xtests/tst-pam_limits1.c: Likewise.
1465 * xtests/tst-pam_access1.c: Likewise.
1466 * xtests/tst-pam_access2.c: Likewise.
1467 * xtests/tst-pam_access3.c: Likewise.
1468 * xtests/tst-pam_access4.c: Likewise.
1469 * xtests/tst-pam_unix1.c: Likewise.
1470 * xtests/tst-pam_unix2.c: Likewise.
1471 * xtests/tst-pam_unix3.c: Likewise.
1472 * xtests/tst-pam_cracklib1.c: Likewise.
1473 * xtests/tst-pam_cracklib2.c: Likewise.
1475 * libpam/pam_static_modules.h: Fix name of pam_namespace variable.
1477 2007-11-01 Peter Breitenlohner <peb@mppmu.mpg.de>
1479 * doc/man/pam_conv.3.xml: Correct typo.
1481 2007-10-30 Peter Breitenlohner <peb@mppmu.mpg.de>
1483 * modules/pam_rhosts/pam_rhosts_auth.c (__icheckhost): Correct
1484 misplaced parenthesis.
1485 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Prevent use of
1486 dngettext() when NLS is disabled.
1487 * modules/pam_exec/pam_exec.c (call_exec): Avoid gcc warning.
1488 * doc/specs/parse_y.y (set_label, new_counter): Break trigraphs to
1490 * modules/pam_wheel/pam_wheel.c: Remove excessive initializer
1493 * modules/pam_cracklib/pam_cracklib.8.xml: Correct typo.
1494 * modules/pam_limits/limits.conf.5.xml: Likewise.
1495 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
1496 * modules/pam_xauth/pam_xauth.8.xml: Likewise.
1498 * modules/pam_deny/pam_deny.8.xml: Correct spelling.
1499 * modules/pam_group/pam_group.8.xml: Likewise.
1500 * modules/pam_permit/pam_permit.8.xml: Likewise.
1501 * modules/pam_shells/pam_shells.8.xml: Likewise.
1502 * modules/pam_time/pam_time.8.xml: Likewise.
1503 * modules/pam_warn/pam_warn.8.xml: Likewise.
1505 * tests/tst-dlopen.c: Return 77 in case of static modules, such that
1506 all modules/pam_*/tst-pam_* tests yield SKIP instead of FAIL.
1507 * libpam/Makefile.am (libpam_la_LIBADD): Use "$(shell ls ...)" instead
1508 of "`ls ...`", to allow for static modules.
1509 * libpam/pam_static_modules.h: Make pam_keyinit module depend on
1510 HAVE_KEY_MANAGEMENT; correct name of pam_faildelay pam_module struct.
1511 * modules/pam_faildelay/pam_faildelay.c: Correct name of pam_module
1514 2007-10-25 Steve Langasek <vorlon@debian.org>
1516 * modules/pam_tally/pam_tally.c: fix the definition of OPT_AUDIT
1517 to be octal instead of decimal, so that it works properly in a
1518 bit field instead of forcing the "even_deny_root_account" and
1519 "no_reset" options to on.
1520 Patch from Corey Wright <undefined@pobox.com>.
1522 2007-10-19 Tomas Mraz <t8m@centrum.cz>
1524 * xtests/tst-pam_access1.c: Use different name for user and group.
1525 * xtests/tst-pam_access1.sh: Likewise.
1526 * xtests/tst-pam_access2.c: Likewise.
1527 * xtests/tst-pam_access2.sh: Likewise.
1528 * xtests/tst-pam_access4.c: Likewise.
1529 * xtests/tst-pam_access4.sh: Likewise.
1530 * xtests/group.conf: Likewise.
1531 * xtests/tst-pam_group1.c: Likewise.
1532 * xtests/tst-pam_group1.sh: Likewise.
1534 * libpam/pam_dispatch.c (_pam_dispatch_aux): Save states for substacks,
1535 record substack level, skip over virtual substack modules, implement
1536 evaluation of done, die, reset and jumps in substacks. Also fixes
1537 too far jumps in substacks.
1538 * libpam/pam_end.c (pam_end): Drop substack evaluation states.
1539 * libpam/pam_handlers.c (_pam_parse_conf_file): Add substack level
1540 parameter, instead of must_fail use handler_type needed for virtual
1542 (_pam_load_conf_file): Add substack level parameter.
1543 (_pam_init_handlers): Substack level parameter added to
1544 _pam_parse_conf_file() calls.
1545 (_pam_load_module): New function.
1546 (_pam_add_handler): Refactor code into the _pam_load_module(). Add
1547 support for virtual substack modules.
1548 * libpam/pam_private.h: Rename must_fail to handler_type, add stack_level
1549 to struct handler. Define handler type constants. Add struct
1550 for substack evaluation states. Define constant for maximum
1551 substack level. Add substack states pointer to former state struct.
1552 * libpam/pam_start.c (pam_start): Initialize pointer to substack states.
1553 * doc/man/pam.conf-syntax.xml: Document substack control.
1554 * xtests/Makefile.am: Add new tests for substack evaluation.
1555 * xtests/run_xtests.sh: Support multiple .pamd files in a test.
1556 * xtests/tst-pam_authfail.pamd: New tests for substack evaluation.
1557 * xtests/tst-pam_authsucceed.pamd: Likewise.
1558 * xtests/tst-pam_substack1.pamd: Likewise.
1559 * xtests/tst-pam_substack1a.pamd: Likewise.
1560 * xtests/tst-pam_substack1.sh: Likewise.
1561 * xtests/tst-pam_substack2.pamd: Likewise.
1562 * xtests/tst-pam_substack2a.pamd: Likewise.
1563 * xtests/tst-pam_substack2.sh: Likewise.
1564 * xtests/tst-pam_substack3.pamd: Likewise.
1565 * xtests/tst-pam_substack3a.pamd: Likewise.
1566 * xtests/tst-pam_substack3.sh: Likewise.
1567 * xtests/tst-pam_substack4.pamd: Likewise.
1568 * xtests/tst-pam_substack4a.pamd: Likewise.
1569 * xtests/tst-pam_substack4.sh: Likewise.
1570 * xtests/tst-pam_substack5.pamd: Likewise.
1571 * xtests/tst-pam_substack5a.pamd: Likewise.
1572 * xtests/tst-pam_substack5.sh: Likewise.
1574 2007-10-18 Tomas Mraz <t8m@centrum.cz>
1576 * xtests/tst-pam_dispatch4.c: Fix comment about the test.
1577 * xtests/tst-pam_dispatch4.pamd: Improve the testcase.
1578 * xtests/tst-pam_cracklib2.c: Make the testcase more robust.
1580 2007-10-12 Thorsten Kukuk <kukuk@thkukuk.de>
1582 * xtests/Makefile.am: Add tst-pam_dispatch5 sources
1583 * xtests/tst-pam_dispatch5.c: New test for jump too far.
1584 * xtests/tst-pam_dispatch5.pamd: New test configuration.
1586 2007-10-09 Tomas Mraz <t8m@centrum.cz>
1588 * modules/pam_tally/pam_tally.8.xml: Document audit option
1591 2007-10-09 Thorsten Kukuk <kukuk@thkukuk.de>
1593 * release version 0.99.9.0
1595 * configure.in: Increase vesion number.
1597 * libpam/Makefile.am: Increase release number.
1598 * libpam_misc/Makefile.am: Increase release number.
1600 * po/*.po: Regenerate.
1602 2007-10-08 Thorsten Kukuk <kukuk@thkukuk.de>
1604 * modules/pam_time/pam_time.c (is_same): Length of strings without
1605 wildcard needs to be the same.
1606 * modules/pam_group/pam_group.c (is_same): Likewise.
1608 2007-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
1610 * xtests/tst-pam_group1.c: New test case for user compare in pam_group.
1611 * xtests/tst-pam_group1.sh: Script to run test case.
1612 * xtests/tst-pam_group1.pamd: Config for test case.
1613 * xtests/Makefile.am: Add tst-pam_group1 test case.
1614 * xtests/run-xtests.sh: Save/restore group.conf.
1615 * xtests/group.conf: New.
1617 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Don't
1618 free arguments used for putenv().
1620 * doc/man/pam_putenv.3.xml: Document that application has to free
1623 2007-09-27 Tomas Mraz <t8m@centrum.cz>
1625 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist): Fix in
1626 operator rhbz #295151.
1627 * modules/pam_namespace/pam_namespace.c (poly_name): Do not try to
1628 get context when SELinux is disabled.
1630 2007-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
1632 * xtests/tst-pam_succeed_if1.c: New test case for
1633 https://bugzilla.redhat.com/show_bug.cgi?id=295151
1634 * xtests/tst-pam_succeed_if1.sh: Script to run test case.
1635 * xtests/tst-pam_succeed_if1.pamd: Config for test case.
1636 * xtests/Makefile.am: Add tst-pam_succeed_if1 test case.
1638 * xtests/run-xtests.sh: Add support to skip tests.
1639 * xtests/tst-pam_limits1.c: Skip test if RLIMIT_NICE is not
1642 2007-09-03 Steve Langasek <vorlon@debian.org>
1644 * modules/pam_limits/pam_limits.c: remove a number of unnecessary
1645 string manipulations, including a strncpy() that was acting on
1648 * libpam_misc/misc_conv.c: don't block SIGINT in misc_conv; it's
1649 perfectly valid to allow the user to interrupt at a prompt. If
1650 an application wants prompts to not be interruptable, the
1651 application should take responsibility for blocking SIGINT.
1653 2007-09-02 Thorsten Kukuk <kukuk@thkukuk.de>
1655 * examples/Makefile.am: Fix usage of LIBADD, LDADD and LDFLAGS.
1656 * libpam/Makefile.am: Likewise.
1657 * modules/pam_access/Makefile.am: Likewise.
1658 * modules/pam_cracklib/Makefile.am: Likewise.
1659 * modules/pam_debug/Makefile.am: Likewise.
1660 * modules/pam_deny/Makefile.am: Likewise.
1661 * modules/pam_echo/Makefile.am: Likewise.
1662 * modules/pam_env/Makefile.am: Likewise.
1663 * modules/pam_exec/Makefile.am: Likewise.
1664 * modules/pam_faildelay/Makefile.am: Likewise.
1665 * modules/pam_filter/Makefile.am: Likewise.
1666 * modules/pam_filter/upperLOWER/Makefile.am: Likewise.
1667 * modules/pam_ftp/Makefile.am: Likewise.
1668 * modules/pam_group/Makefile.am: Likewise.
1669 * modules/pam_issue/Makefile.am: Likewise.
1670 * modules/pam_keyinit/Makefile.am: Likewise.
1671 * modules/pam_lastlog/Makefile.am: Likewise.
1672 * modules/pam_limits/Makefile.am: Likewise.
1673 * modules/pam_listfile/Makefile.am: Likewise.
1674 * modules/pam_localuser/Makefile.am: Likewise.
1675 * modules/pam_loginuid/Makefile.am: Likewise.
1676 * modules/pam_mail/Makefile.am: Likewise.
1677 * modules/pam_mkhomedir/Makefile.am: Likewise.
1678 * modules/pam_motd/Makefile.am: Likewise.
1679 * modules/pam_namespace/Makefile.am: Likewise.
1680 * modules/pam_nologin/Makefile.am: Likewise.
1681 * modules/pam_permit/Makefile.am: Likewise.
1682 * modules/pam_rhosts/Makefile.am: Likewise.
1683 * modules/pam_rootok/Makefile.am: Likewise.
1684 * modules/pam_securetty/Makefile.am: Likewise.
1685 * modules/pam_selinux/Makefile.am: Likewise.
1686 * modules/pam_shells/Makefile.am: Likewise.
1687 * modules/pam_stress/Makefile.am: Likewise.
1688 * modules/pam_succeed_if/Makefile.am: Likewise.
1689 * modules/pam_tally/Makefile.am: Likewise.
1690 * modules/pam_time/Makefile.am: Likewise.
1691 * modules/pam_umask/Makefile.am: Likewise.
1692 * modules/pam_unix/Makefile.am: Likewise.
1693 * tests/Makefile.am: Likewise.
1695 2007-08-31 Steve Langasek <vorlon@debian.org>
1697 * modules/pam_group/group.conf: don't use "games" as an example
1698 group, on some distros this is a pre-existing group that it would
1699 be a security hole to give users access to.
1701 2007-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
1703 * modules/pam_limits/limits.conf.5.xml: Document that maxlogins
1704 is ignored for users with UID 0.
1706 2007-08-30 Steve Langasek <vorlon@debian.org>
1708 * modules/pam_unix/support.c, modules/pam_unix/unix_chkpwd.c:
1709 A wrong username doesn't need to be logged at LOG_ALERT;
1710 LOG_WARNING should be sufficient.
1711 Patch from Sam Hartman <hartmans@debian.org>.
1713 * modules/pam_cracklib/pam_cracklib.c:
1714 s/CRACKLIB_DICT/CRACKLIB_DICTS/, for consistency with existing
1717 2007-08-29 Steve Langasek <vorlon@debian.org>
1719 * libpam/pam_modutil_getgrgid.c, libpam/pam_modutil_getgrnam.c,
1720 libpam/pam_modutil_getpwnam.c, libpam/pam_modutil_getpwuid.c,
1721 libpam/pam_modutil_getspnam.c: don't use pthread mutexes in libpam
1722 unnecessarily; this avoids linking problems on non-Linux
1725 * modules/pam_listfile/pam_listfile.c, modules/pam_listfile/README,
1726 modules/pam_listfile/pam_listfile.8,
1727 modules/pam_listfile/pam_listfile.8.xml: add a 'quiet' option to
1728 avoid logging errors any time a user is refused service by this
1731 2007-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
1733 * modules/pam_rhosts/pam_rhosts_auth.c: buflen needs to be size_t.
1734 (__icheckhost): Cast to int32_t to fix limited range error.
1736 * modules/pam_cracklib/pam_cracklib.c: Mark cracklib_dictpath
1739 2007-08-29 Steve Langasek <vorlon@debian.org>
1741 * modules/pam_rhosts/pam_rhosts_auth.c: getline returns -1 at
1742 EOF, not 0. Check accordingly to fix an infinite loop. Thanks
1743 to Stephan Springl <springl-rhosts@bfw-online.de> for catching
1746 2007-08-28 Steve Langasek <vorlon@debian.org>
1748 * configure.in: call AC_CHECK_HEADERS instead of AC_CHECK_HEADER
1749 for crack.h, so we get a HAVE_CRACK_H define.
1750 * modules/pam_cracklib/pam_cracklib.c: don't copy around the
1751 cracklib dictpath into a fixed-width buffer, when we can just
1752 point at the existing strings; and allow users to override the
1753 default cracklib path with -DCRACKLIB_DICT, required for
1754 compatibility with cracklib 2.7.
1756 2007-08-27 Steve Langasek <vorlon@debian.org>
1758 * modules/pam_limits/pam_limits.c: when building on non-Linux
1759 systems, give a warning only, not an error; no one seems to
1760 remember why this error was here in the first place, but leave
1761 something in that might still grab the attention of non-Linux
1763 Patch from Michal Suchanek <hramrach_l@centrum.cz>.
1764 * configure.in, modules/pam_rhosts/pam_rhosts_auth.c: check for
1765 the presence of net/if.h before using, required for Hurd
1767 Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
1768 * modules/pam_limits/pam_limits.c: conditionalize the use of
1769 RLIMIT_AS, which is not present on the Hurd.
1770 Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
1771 * modules/pam_rhosts/pam_rhosts_auth.c: use getline() instead of
1772 a static buffer when available; fixes the build on systems
1773 without MAXHOSTNAMELEN (i.e., the Hurd).
1774 * modules/pam_xauth/pam_xauth.c: make sure PATH_MAX is defined
1777 2007-08-26 Andrew Morgan <morgan@kernel.org>
1779 * doc/man/pam.conf-syntax.xml
1780 Minor fixes: '\[' -> '\]'.
1782 2007-08-25 Steve Langasek <vorlon@debian.org>
1784 * doc/man/pam.conf-syntax.xml, doc/man/pam.conf.5:
1785 Document "new" control options conv_again and incomplete, supported
1786 in pam.d's extended syntax.
1787 Patch from Ben Collins <bcollins@debian.org>.
1789 2007-08-15 Tomas Mraz <t8m@centrum.cz>
1791 * modules/pam_access/pam_access.c (list_match): Add explicit
1792 sptr argument for strtok_r, otherwise the code is not portable.
1794 2007-08-13 Olivier Blin <blino@mandriva.com>
1796 * doc/man/pam.3.xml: Fix typo.
1797 * doc/man/pam.3: Likewise.
1798 * doc/man/pam_end.3.xml: Likewise.
1799 * doc/man/pam_end.3: Likewise.
1801 2007-07-18 Thorsten Kukuk <kukuk@thkukuk.de>
1803 * release version 0.99.8.1
1805 * libpam/pam_audit.c: Include unistd.h for getuid().
1806 * libpam/Makefile.am: Bump version number.
1808 2007-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
1810 * libpam/pam_audit.c (_pam_audit_writelog): Don't return
1811 error if application runs as normal user. Fixes regression
1812 introduced with last change.
1814 2007-07-10 Thorsten Kukuk <kukuk@thkukuk.de>
1816 * configure.in: Add --with-db-uniquename option to support
1817 db libraries and functions with unique name extension.
1818 Patch from Diego 'Flameeyes' Pettenò <flameeyes@gmail.com>.
1820 * modules/pam_limits/pam_limits.c: Include locale.h.
1822 2007-07-06 Thorsten Kukuk <kukuk@thkukuk.de>
1824 * release version 0.99.8.0
1826 * configure.in: Check for audit_log_acct_message instead of
1827 audit_log_user_message.
1828 * libpam/pam_audit.c: Use audit_log_acct_message.
1829 Based on patch from Mark J Cox <mjc@redhat.com>.
1830 * libpam/Makefile.am: Bump version number of libpam.
1832 * modules/pam_umask/pam_umask.c (set_umask): mode_t is 32bit,
1835 * xtests/tst-pam_limits1.c: Fix printf arguments.
1837 * po/*.po: Merge po files with latest code changes.
1839 2007-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
1841 * modules/pam_limits/pam_limits.c (process_limit): Check upper and
1842 lower limit of nice value, fix off-by-one in conversation to rlim_t.
1843 * xtests/Makefile.am: Add new pam_limits test case.
1844 * xtests/limits.conf: New, config file for test case.
1845 * xtests/pam_limits1.c: New, test case for RLIMIT_NICE.
1846 * xtests/pam_limits1.sh: Likewise.
1847 * xtests/pam_limits1.pamd: Likewise.
1849 2007-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
1851 * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r
1852 result for recursive calls.
1853 * xtests/Makefile.am: Add new pam_access test cases.
1854 * xtests/pam_access1.c: New test case.
1855 * xtests/pam_access2.c: Likewise.
1856 * xtests/pam_access3.c: Likewise.
1857 * xtests/pam_access4.c: Likewise.
1858 * xtests/pam_access1.sh: Wrapper to create user accounts.
1859 * xtests/pam_access2.sh: Likewise.
1860 * xtests/pam_access3.sh: Likewise.
1861 * xtests/pam_access4.sh: Likewise.
1862 * xtests/pam_access1.pamd: PAM config file for pam_access tests.
1863 * xtests/pam_access2.pamd: Likewise.
1864 * xtests/pam_access3.pamd: Likewise.
1865 * xtests/pam_access4.pamd: Likewise.
1866 * xtests/access.conf: Config file for pam_access tests.
1867 * xtests/run-tests.sh: Install access.conf into system.
1869 2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
1871 * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print
1872 better error message if /proc/self/loginuid cannot be opened.
1874 * modules/pam_limits/pam_limits.c (process_limit): Check for
1875 variable overflow after multiplication [bnc#283001].
1877 * modules/pam_access/pam_access.c: Add new syntax for groups
1878 in access.conf to differentiate group names from account names.
1879 Based on patch from Julien Lecomte <julien@famille-lecomte.net>,
1880 solves feature request [#411390].
1881 * modules/pam_access/access.conf: Add example for new group
1883 * modules/pam_access/access.conf.5.xml: Document new syntax.
1885 2007-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
1887 * modules/pam_cracklib/pam_cracklib.8.xml: Document new minclass
1889 * modules/pam_cracklib/pam_cracklib.c: Add support for minimum
1890 character classes [#1688777]. Based on patch from Keith Schincke.
1892 * xtests/tst-pam_cracklib2.c: New, test case for minclass option.
1893 * xtests/tst-pam_cracklib2.pamd: New, PAM config file for test case.
1894 * xtests/Makefile.am: Add new testcase.
1896 * xtests/pam_cracklib.c: Fix comment what this application tests.
1898 * configure.in: Use /lib64 on x86-64, ppc64, s390x, sparc64
1900 2007-06-15 Tomas Mraz <t8m@centrum.cz>
1902 * modules/pam_selinux/pam_selinux.8.xml: Remove multiple option,
1903 add select_context and use_current_range options.
1904 * modules/pam_selinux/pam_selinux.c (send_audit_message): Added
1905 function for auditing role/level changes.
1906 (query_response): Add default response.
1907 (select_context): Removed.
1908 (manual_context): Query only role and level.
1909 (mls_range_allowed): Added function for range check.
1910 (config_context): Added function for role and level override.
1911 (pam_sm_open_session): Remove multiple option, add select_context
1912 and use_current_range_options. Use getseuserbyname to obtain
1913 SELinux user and level. Audit role/level changes. Call setkeycreatecon
1914 to assign key creation context. Don't fail on errors when SELinux
1915 is not in enforcing mode.
1916 * configure.in: Check for setkeycreatecon().
1918 * modules/pam_namespace/README.xml: Avoid duplication of
1920 * modules/pam_namespace/namespace.conf: More real life example
1922 * modules/pam_namespace/namespace.conf.5.xml: Likewise plus
1923 properly describe how instance directory names are formed.
1924 * modules/pam_namespace/namespace.init: Preserve euid when
1925 called from setuid apps (su, newrole).
1926 * modules/pam_namespace/pam_namespace.8.xml: Added option
1927 no_unmount_on_close.
1928 * modules/pam_namespace/pam_namespace.c (process_line): Polyinst
1929 methods are now user, level and context. Fix crash on unknown
1930 override user in config file.
1931 (ns_override): Add explicit uid parameter.
1932 (form_context): Skip for user method. Implement level based
1934 (poly_name): Initialize contexts. Add level based polyinst,
1935 remove 'both' metod. Use raw contexts for instance names,
1936 truncate long instance names and add hash.
1937 (ns_setup): Hashing moved to poly_name().
1938 (setup_namespace): Handle correctly override users for
1939 su (when unmnt_remnt is used).
1940 (pam_sm_close_session): Added no_unmount_on_close option.
1941 * modules/pam_namespace/pam_namespace.h: Added
1942 no_unmount_on_close_option, level method, limit on instance
1943 directory name length.
1945 2007-05-04 Thorsten Kukuk <kukuk@suse.de>
1947 * xtests/run-xtests.sh: Use SRCDIR to find PAM config files.
1948 * xtests/Makefile.am: Call run-xtests.sh with srcdir as first
1950 Based on patch by Bernard Leak <thisisnotapipe@hotmail.com>.
1952 2007-04-30 Thorsten Kukuk <kukuk@thkukuk.de>
1954 * modules/pam_limits/limits.conf: Address space limit is KB.
1955 * modules/pam_limits/limits.conf.5.xml: Likewise.
1956 Reported by Thomas Vander Stichele <thomas@apestaart.org>.
1958 * modules/pam_mail/pam_mail.c (_do_mail): Remove duplicate
1959 check for PAM_SILENT and don't bail out if it is set [#1706247].
1961 2007-03-29 Tomas Mraz <t8m@centrum.cz>
1963 * modules/pam_access/pam_access.c (login_access, list_match):
1964 Replace strtok with strtok_r.
1965 * modules/pam_cracklib/pam_cracklib.c (check_old_password):
1967 * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate):
1969 * modules/pam_unix/pam_unix_passwd.c (check_old_password,
1970 save_old_password): Likewise.
1972 * modules/pam_limits/Makefile.am: Define limits.d dir and install it.
1973 * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing.
1974 * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr.
1975 (pam_parse): conf_file is now ptr.
1976 (pam_sm_open_session): Add parsing files from limits.d subdir using
1977 glob, change pl to pointer.
1979 2007-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
1981 * po/ar.po: New translation.
1982 * po/ca.po: Likewise.
1983 * po/da.po: Likewise.
1984 * po/ru.po: Likewise.
1985 * po/sv.po: Likewise.
1986 * po/zu.po: Likewise.
1987 * po/LINGUAS: Add ar, ca, da, ru, sv, zu
1989 * po/hu.po: Update translation.
1991 2007-02-21 Tomas Mraz <t8m@centrum.cz>
1993 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Test for
1994 allocation failure in bigcrypt().
1996 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Allow
1997 modification of '*' password by root.
1999 2007-02-06 Tomas Mraz <t8m@centrum.cz>
2001 * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Remove
2002 debug syslog message when loginuid doesn't exist.
2004 2007-02-01 Tomas Mraz <t8m@centrum.cz>
2006 * xtests/tst-pam_unix3.c: Fix typos in comments.
2008 * modules/pam_unix/support.c (_unix_verify_password): Explicitly
2009 disallow '!' in the beginning of password hash. Treat only
2010 13 bytes password hash specifically. (Suggested by Solar Designer.)
2011 Fix a warning and test for allocation failure.
2012 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
2014 2007-01-31 Thorsten Kukuk <kukuk@thkukuk.de>
2016 * xtests/Makefile.am: Add new pam_unix.so tests
2017 * xtests/run-xtests.sh: Prefer shell scripts (wrapper)
2019 * xtests/tst-pam_cracklib1.c: Fix typo.
2020 * xtests/tst-pam_unix1.c: New, for sucurity fix.
2021 * xtests/tst-pam_unix1.pamd: New.
2022 * xtests/tst-pam_unix1.sh: New.
2023 * xtests/tst-pam_unix2.c: New, for crypt checks.
2024 * xtests/tst-pam_unix2.pamd: New.
2025 * xtests/tst-pam_unix2.sh: New.
2026 * xtests/tst-pam_unix3.c: New, for bigcrypt checks.
2027 * xtests/tst-pam_unix3.pamd: New.
2028 * xtests/tst-pam_unix3.sh: New.
2030 2007-01-23 Thorsten Kukuk <kukuk@suse.de>
2034 * configure.in: Set version number to 0.99.7.1
2036 2007-01-23 Thorsten Kukuk <kukuk@thukuk.de>
2037 Tomas Mraz <t8m@centrum.cz>
2039 * modules/pam_unix/support.c (_unix_verify_password): Always
2040 compare full encrypted passwords (CVE-2007-0003).
2042 2007-01-23 Tomas Mraz <t8m@centrum.cz>
2044 * modules/pam_loginuid/Makefile.am (AM_LDFLAGS): Add LIBAUDIT.
2046 * modules/pam_selinux/Makefile.am (pam_selinux_check_LDFLAGS): Add
2048 (pam_selinux_la_LDFLAGS): Likewise.
2050 2007-01-17 Thorsten Kukuk <kukuk@thkukuk.de>
2054 * configure.in: Set version number to 0.99.7.0
2056 * Makefile.am (M4_FILES): Replace GNU make extension by listing
2059 2007-01-17 Tomas Mraz <t8m@centrum.cz>
2061 * po/*.po: Updated strings to translate.
2062 * po/Linux-PAM.pot: Likewise.
2064 2007-01-16 Thorsten Kukuk <kukuk@thkukuk.de>
2066 * doc/man/pam.conf-syntax.xml: Improve documentation about
2067 sufficient keyword (Patch by Petteri Räty <betelgeuse@gentoo.org>)
2069 2006-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
2071 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Forbid
2072 only '+' and '-' as first characters for account names.
2073 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
2075 2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
2077 * configure.in: Fix ENOKEY check (specify errno.h as header
2080 * configure.in: Add AM_PROG_CC_C_O.
2081 * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS.
2082 * modules/pam_tally/Makefile.am: Likewise.
2083 * modules/pam_unix/Makefile.am: Likewise.
2085 * modules/pam_stress/pam_stress.c (pam_sm_chauthtok): Fix
2086 localisation of message printed to user.
2087 * po/de.po: Adjust translation.
2089 2006-12-18 Tomas Mraz <t8m@centrum.cz>
2091 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Localize
2092 message printed to user.
2094 * modules/pam_unix/support.c (_unix_verify_password): Use strncmp
2095 only for bigcrypt result.
2097 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Switch to new
2098 egid first, euid next. Revert euid/egid to old euid/egid and not
2100 (pam_sm_open_session): Switch to new rgid first, ruid next.
2102 2006-12-13 Thorsten Kukuk <kukuk@thkukuk.de>
2104 * modules/pam_localuser/pam_localuser.c: Add support for session
2105 and chauthtok [SF#1606180].
2106 * modules/pam_localuser/pam_localuser.8.xml: Document last change.
2108 * libpam/pam_audit.c (_pam_audit_writelog): Print error message
2111 2006-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
2113 * libpam/pam_audit.c (_pam_audit_writelog): Print error
2114 message on failure to syslog.
2116 2006-12-09 Thorsten Kukuk <kukuk@thkukuk.de>
2118 * modules/pam_umask/pam_umask.c: Use strtoul instead of strtol,
2119 fix overflow detection.
2121 2006-12-06 Thorsten Kukuk <kukuk@thkukuk.de>
2123 * modules/pam_mkhomedir/pam_mkhomedir.c (rec_mkdir): Fix
2124 handling of left-most path component [SF#1591598].
2125 (create_homedir): Mark user visible messages for translation.
2126 * po/de.po: Adjust german translation for pam_mkhomedir.
2128 * modules/pam_faildelay/pam_faildelay.c: If no argument is
2129 given, try to read FAIL_DELAY from /etc/login.defs.
2130 * modules/pam_faildelay/pam_faildelay.8.xml: Document usage
2133 2006-12-04 Tomas Mraz <t8m@centrun.cz>
2135 * po/jp.po: Fixed mistake in Password: message (from
2136 Peng Huang <phuang@redhat.com>).
2138 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de>
2140 * po/hu.po: Update hungarian translation (from
2141 Kalman Kemenczy <kkemenczy@novell.com>).
2143 * configure.in: Allow disabling support for cracklib, audit, libdb.
2145 * modules/pam_faildelay/pam_faildelay.8.xml: Correct name of Author.
2147 * configure.in: Remove --enable-docdir (obsolete by --docdir).
2148 * doc/Makefile.am: Don't overwrite htmldir.
2149 * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir.
2150 * doc/mwg/Makefile.am: Likewise.
2151 * doc/sag/Makefile.am: Likewise.
2152 * doc/specs/Makefile.am: Use docdir.
2154 * tests/tst-pam_set_data.c: New test cases for pam_set_data().
2155 * tests/Makefile.am: Add pam_set_data test case.
2157 * libpam/pam_data.c: Add NULL pointer check for module_data_name.
2158 * libpam/Makefile.am: Bump revision of shared library.
2160 2006-11-08 Thorsten Kukuk <kukuk@thkukuk.de>
2162 * configure.in: Add modules/pam_faildelay/Makefile.
2163 * doc/sag/Linux-PAM_SAG.xml: Include pam_faildelay.xml.
2164 * doc/sag/pam_faildelay.xml: New.
2165 * libpam/pam_static_modules.h: Include static pam_faildelay data.
2166 * modules/Makefile.am: Add pam_faildelay directory.
2167 * modules/pam_faildelay/Makefile.am: New.
2168 * modules/pam_faildelay/README: New, generated from XML file.
2169 * modules/pam_faildelay/README.xml: New.
2170 * modules/pam_faildelay/pam_faildelay.8: New, generated from xml.
2171 * modules/pam_faildelay/pam_faildelay.8.xml: New.
2172 * modules/pam_faildelay/pam_faildelay.c: New.
2173 * modules/pam_faildelay/tst-pam_faildelay: New.
2175 * po/POTFILES.in: Add pam_faildelay.c and pam_loginuid.c.
2177 2006-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
2179 * modules/pam_cracklib/pam_cracklib.c: PAM_DEBUG_ARG
2180 is a bit mask and not a boolean value (Reported by
2181 Jochen Voss <voss@seehuhn.de>).
2183 2006-10-26 Thorsten Kukuk <kukuk@thkukuk.de>
2185 * doc/man/pam.3.xml: Add pam_get_user function.
2187 * modules/pam_motd/pam_motd.8.xml: Fix typo.
2189 2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
2191 * modules/pam_namespace/pam_namespace.c: Reserve space for
2194 2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
2196 * modules/pam_unix/support.c (_unix_verify_password): Try system
2197 crypt() if we don't know the hash alogorithm.
2198 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
2200 2006-10-13 Tomas Mraz <t8m@centrum.cz>
2202 * doc/mwg/Linux-PAM_MWG.xml: Add id[s] to section[s].
2203 * doc/sag/pam_access.xml: Likewise.
2204 * doc/sag/pam_echo.xml: Likewise.
2205 * doc/sag/pam_env.xml: Likewise.
2206 * doc/sag/pam_exec.xml: Likewise.
2207 * doc/sag/pam_group.xml: Likewise.
2208 * doc/sag/pam_limits.xml: Likewise.
2209 * doc/sag/pam_namespace.xml: Likewise.
2210 * doc/sag/pam_time.xml: Likewise.
2211 * doc/sag/Linux-PAM_SAG.xml: Add id to book.
2212 * doc/adg/Linux-PAM_ADG.xml: Add id to book.
2213 * doc/mwg/Linux-PAM_MWG.xml: Add id to book.
2216 2006-10-07 Thorsten Kukuk <kukuk@thkukuk.de>
2218 * po/hu.po: Updated hungarian translation (from
2219 Kalman Kemenczy <kkemenczy@novell.com>)
2221 2006-09-20 Thorsten Kukuk <kukuk@thkukuk.de>
2223 * doc/adg/Makefile.am: Add manual pages as dependency.
2224 * doc/mwg/Makefile.am: Likewise.
2225 * doc/sag/Makefile.am: Likewise.
2226 * doc/sag/Linux-PAM_SAG.xml: Include pam_unix.xml.
2227 * doc/sag/pam_unix.xml: New.
2228 * modules/pam_unix/Makefile.am: Generate pam_unix.8 manual page.
2229 * modules/pam_unix/README.xml: New.
2230 * modules/pam_unix/pam_unix.8.xml: New.
2231 * modules/pam_unix/README: Regenerate from XML.
2232 * modules/pam_unix/pam_unix.8: Generated from XML.
2234 2006-09-09 Dmitry V. Levin <ldv@altlinux.org>
2236 * modules/pam_wheel/pam_wheel.8.xml: Fix typo.
2237 * modules/pam_wheel/pam_wheel.8: Likewise.
2238 * modules/pam_wheel/README: Likewise.
2240 2006-09-08 Thorsten Kukuk <kukuk@thkukuk.de>
2242 * po/de.po: Fix typo.
2244 2006-09-06 Thorsten Kukuk <kukuk@thkukuk.de>
2246 * release version 0.99.6.3
2248 2006-09-01 Thorsten Kukuk <kukuk@thkukuk.de>
2250 * modules/pam_loginuid/pam_loginuid.8.xml: Fix typo in
2253 2006-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
2255 * modules/pam_env/environment: New, dummy environment example
2258 * modules/pam_namespace/Makefile.am: Don't install
2259 manual page if we don't build module.
2261 * m4/ld-as-needed.m4: Don't set LDFLAGS if check failed.
2262 * m4/ld-O1: Likewise.
2264 2006-08-30 Tomas Mraz <t8m@centrum.cz>
2266 * modules/pam_access/pam_access.8.xml: All services supported.
2267 * modules/pam_access/pam_access.c (pam_sm_open_session): New.
2268 (pam_sm_close_session): New.
2269 (pam_sm_chauthtok): New.
2271 * modules/pam_access/pam_succeed_if.8.xml: All services supported.
2272 * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return
2273 PAM_IGNORE rather than success.
2274 (pam_sm_open_session): New.
2275 (pam_sm_close_session): New.
2276 (pam_sm_chauthtok): New.
2278 2006-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
2280 * xtests/Makefile.am: Move shell code to execute tests from here ...
2281 * xtests/run-xtests.sh: ... to here.
2282 * xtests/*.c: Include config.h.
2283 * tests/*.c: Likewise.
2285 * modules/pam_namespace/pam_namespace.c: Use pam_modutil_getpwnam()
2286 instead of getpwnam().
2288 2006-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
2290 * doc/sag/pam_loginuid.xml: New.
2291 * doc/sag/Linux-PAM_SAG.xml: Include pam_loginuid.xml.
2293 * configure.in: Add modules/pam_loginuid/Makefile.
2294 * modules/Makefile.am: Add pam_loginuid sub directory.
2296 * libpam/pam_static_modules.h: Add pam_loginuid.
2298 * modules/pam_loginuid/Makefile.am: New.
2299 * modules/pam_loginuid/tst-pam_loginuid: New.
2300 * modules/pam_loginuid/pam_loginuid.8.xml: New.
2301 * modules/pam_loginuid/pam_loginuid.8: New, generated from XML source.
2302 * modules/pam_loginuid/pam_loginuid.c: New.
2303 * modules/pam_loginuid/README.xml: New.
2304 * modules/pam_loginuid/README: New, generated from XML source.
2306 2006-08-29 Dmitry V. Levin <ldv@altlinux.org>
2308 * modules/pam_exec/pam_exec.c (call_exec): Add required third
2309 argument to open() call with O_CREAT flag set.
2311 2006-08-28 Thorsten Kukuk <kukuk@thkukuk.de>
2313 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Remove
2316 2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
2318 * release version 0.99.6.2
2320 * modules/pam_lastlog/pam_lastlog.c (last_login_date): Create
2321 lastlog file if it does not exist.
2323 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Check
2324 for error from getting second token.
2325 * xtests/Makefile.am: Add tst-pam_cracklib1
2326 * xtests/tst-pam_cracklib1.c: New, check for pam_cracklib seg.fault.
2327 * xtests/tst-pam_cracklib1.pamd: New, config for cracklib test.
2329 2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
2331 * xtests/tst-pam_dispatch4.c: New test.
2332 * xtests/tst-pam_dispatch4.pamd: PAM config for new test.
2334 2006-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
2336 * release version 0.99.6.1
2338 2006-08-09 David Howells <dhowells@redhat.com>
2340 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Set real uid
2341 to user's before revoking.
2342 (pam_sm_open_session): Remember the uid.
2344 2006-08-06 Thorsten Kukuk <kukuk@thkukuk.de>
2346 * modules/pam_umask/pam_umask.c (setup_limits_from_gecos):
2348 * modules/pam_umask/pam_umask.8.xml: Document silent option.
2350 * xtests/Makefile.am: Fix includes for bootstrapping.
2351 Reported by Greg Schafer <gschafer@zip.com.au>.
2353 2006-08-05 Thorsten Kukuk <kukuk@thkukuk.de>
2355 * release version 0.99.6.0
2357 * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
2358 pam_modutil_getpwnam instead of getpwnam.
2360 * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
2361 svc variable to char pointer for snprintf.
2363 * configure.in: Generate xtests/Makefile.
2364 * Makefile.am (SUBDIRS): Add xtests.
2365 * README: Document make check and make xtests.
2366 * xtests/Makefile.am: New.
2367 * xtests/tst-pam_dispatch1.pamd: New.
2368 * xtests/tst-pam_dispatch2.pamd: New.
2369 * xtests/tst-pam_dispatch3.pamd: New.
2370 * xtests/tst-pam_dispatch1.c: New.
2371 * xtests/tst-pam_dispatch2.c: New.
2372 * xtests/tst-pam_dispatch3.c: New.
2374 2006-08-04 Ray Strode <rstrode@redhat.com>
2376 * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
2377 Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
2379 2006-08-03 David Howells <dhowells@redhat.com>
2381 * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
2382 (init_keyrings): Properly handle multiple invocations of the module.
2383 (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
2385 2006-08-03 Tomas Mraz <t8m@centrum.cz>
2387 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
2388 New function for list matching.
2389 (evaluate_notinlist): Likewise.
2390 (evaluate): Add service value match, list matching.
2391 * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
2394 * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
2395 relabelling error when the tty device doesn't exist (ENOENT).
2397 2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
2399 * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
2400 rationale about when this function should be used and when not.
2402 * doc/index.html: Cleanup to look prettier.
2404 2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
2406 * libpam/Makefile.am: Bump patchlevel of libpam.
2407 * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
2408 or [return=bad] is used, don't return PAM_IGNORE. Based on
2409 patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
2411 2006-07-28 Thorsten Kukuk <kukuk@thkukuk.de>
2413 * ABOUT-NLS: Upgrade to gettext-0.15.
2414 * config.rpath: Likewise.
2415 * m4/gettext.m4: Upgrade to gettext-0.15.
2416 * m4/inttypes-h.m4: New file, from gettext-0.15.
2417 * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
2418 * m4/lib-link.m4: Upgrade to gettext-0.15.
2419 * m4/lib-prefix.m4: Upgrade to gettext-0.15.
2420 * m4/lock.m4: New file, from gettext-0.15.
2421 * m4/longdouble.m4: Upgrade to gettext-0.15.
2422 * m4/nls.m4: Upgrade to gettext-0.15.
2423 * m4/po.m4: Upgrade to gettext-0.15.
2424 * m4/size_max.m4: Upgrade to gettext-0.15.
2425 * m4/visibility.m4: New file, from gettext-0.15.
2426 * po/Makefile.in.in: Upgrade to gettext-0.15.
2428 2006-07-24 David Quigley <dpquigl@tycho.nsa.gov>
2430 * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
2431 * modules/pam_namespace/pam_namespace.c: Move includes and
2432 data structure definitions from here ...
2433 * modules/pam_namespace/pam_namespace.h: ... here. New file.
2435 * modules/pam_namespace/pam_namespace.c: Move large sections
2436 of code into new functions.
2438 2006-07-24 Thorsten Kukuk <kukuk@thkukuk.de>
2440 * doc/adg/Makefile.am: Add uninstall and distclean rules.
2441 * doc/mwg/Makefile.am: Likewise.
2442 * doc/sag/Makefile.am: Likewise.
2444 2006-07-08 Daniel Richard G. <skunk@iskunk.org>
2446 * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
2447 * conf/pam_conv1/pam_conv.lex: Rename to ...
2448 * conf/pam_conv1/pam_conv_l.l: ... this.
2449 * conf/pam_conv1/pam_conv.y: Rename to ...
2450 * conf/pam_conv1/pam_conv_y.y: ... this.
2451 * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
2453 * doc/Makefile.am: Fix rule to install index.html.
2454 * doc/adg/Makefile.am: Fix test usage.
2455 * doc/mwg/Makefile.am: Likewise.
2456 * doc/sag/Makefile.am: Likewise.
2457 * doc/specs/Makefile.am: Fix rules for lex and yacc files.
2458 * specs/parse.lex: Rename to ...
2459 * doc/specs/parse_l.l: ... this.
2460 * doc/specs/parse.y: Rename to ...
2461 * doc/specs/parse_y.y: ... this.
2462 * libpam/pam_account.c: Fix #if vs. #ifdef.
2463 * libpam/pam_audit.c: Likewise.
2464 * libpam/pam_auth.c: Likewise.
2465 * libpam/pam_password.c: Likewise.
2466 * libpam/pam_private.h: Likewise.
2467 * libpam/pam_session.c: Likewise.
2468 * libpam/pam_start.c: Likewise.
2469 * libpam/pam_static.c: Fix "empty sourcefile" warning.
2470 * modules/pam_limits/pam_limits.c: Check for __linux, too.
2471 * modules/pam_userdb/Makefile.am: Don't run test if no
2473 * tests/tst-dlopen.c: Include config.h.
2475 2006-07-03 Dan Yefimov
2477 * configure.in: Fixed have_key_syscalls test.
2479 * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
2480 match, removed AI_ADDRCONFIG flag.
2482 2006-06-30 Tomas Mraz <t8m@centrum.cz>
2484 * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
2486 2006-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
2488 * doc/Makefile.am (releasedocs): Fix directory layout.
2489 * doc/adg/Makefile.am: Likewise.
2490 * doc/mwg/Makefile.am: Likewise.
2491 * doc/sag/Makefile.am: Likewise.
2493 2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
2495 * doc/sag: System Administrator Guide as XML source.
2496 * doc/sag/Makefile.am: New.
2497 * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
2498 * doc/sag/pam_*.xml: New, wrapper to include module documentation.
2500 * doc/adg: Application Developers Guide as XML source.
2501 * doc/adg/Makefile.am: New.
2502 * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
2503 * doc/adg/pam_*.xml: New, wrappers to include manual pages.
2505 * doc/mwg: Application Developers Guide as XML source.
2506 * doc/mwg/Makefile.am: New.
2507 * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
2508 * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
2510 * doc/CREDITS: Removed.
2511 * doc/NOTES: Removed.
2512 * doc/pam_appl.sgml: Removed.
2513 * doc/pam_modules.sgml: Removed.
2514 * doc/pam_source.sgml: Removed.
2515 * doc/figs/pam_orient.txt: Removed.
2516 * doc/figs: Removed.
2518 * configure.in: Remove checks for sgml2* progrs, add sag, adg
2521 * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
2523 * doc/modules: Remove directory.
2524 * doc/html: Remove directory.
2525 * doc/ps: Remove directory.
2526 * doc/pdf: Remove directory.
2527 * doc/txts: Remove directory.
2528 * doc/index.html: Moved from html directory to here.
2530 2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
2532 * release version 0.99.5.0
2534 * bump version number to 0.99.5.0
2536 * modules/pam_rhosts/pam_rhosts.c: New module, replaces
2538 * modules/pam_rhosts/pam_rhosts.8.xml: New.
2539 * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
2540 * modules/pam_rhosts/tst-pam_rhosts: New.
2541 * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
2542 manual page and README.
2543 * modules/pam_rhosts/README.xml: New.
2544 * modules/pam_rhosts/reADME: Regenerated from XML source.
2546 * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
2548 * doc/man/pam_sm_authenticate.3.xml: Likewise.
2549 * doc/man/pam_sm_chauthtok.3.xml: Likewise.
2550 * doc/man/pam_sm_close_session.3.xml: Likewise.
2551 * doc/man/pam_sm_open_session.3.xml: Likewise.
2552 * doc/man/pam_sm_setcred.3.xml: Likewise.
2554 * po/POTFILES.in: Add new source files.
2556 * libpam/pam_static_modules.h: Add new modules.
2558 * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
2560 * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
2561 files and manual page.
2563 2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
2565 * configure.in: Allow disabling of SELinux support, check for
2568 2006-06-27 Tomas Mraz <t8m@centrum.cz>
2570 * modules/pam_namespace/pam_namespace.c: New module
2571 originally written by Janak Desai.
2572 * modules/pam_namespace/Makefile.am: New.
2573 * modules/pam_namespace/README: New.
2574 * modules/pam_namespace/md5.c: New.
2575 * modules/pam_namespace/md5.h: New.
2576 * modules/pam_namespace/namespace.conf: New.
2577 * modules/pam_namespace/namespace.conf.5: New.
2578 * modules/pam_namespace/namespace.conf.5.xml: New.
2579 * modules/pam_namespace/namespace.init: New.
2580 * modules/pam_namespace/pam_namespace.8: New.
2581 * modules/pam_namespace/pam_namespace.8.xml: New.
2582 * modules/pam_namespace/tst-pam_namespace: New.
2583 * modules/Makefile.am: Added pam_namespace.
2584 * configure.in: Added pam_namespace, test for unshare
2587 2006-06-27 David Howells <dhowells@redhat.com>
2589 * modules/pam_keyinit/pam_keyinit.c: New module.
2590 * modules/pam_keyinit/pam_keyinit.8: New.
2591 * modules/pam_keyinit/pam_keyinit.8.xml: New.
2592 * modules/pam_keyinit/README: New.
2593 * modules/pam_keyinit/README.xml: New.
2594 * modules/pam_keyinit/Makefile.am: New.
2595 * modules/pam_keyinit/tst-pam_keyinit: New.
2596 * modules/Makefile.am: Added pam_keyinit.
2597 * configure.in: Added test for the key mgmt syscall.
2599 2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
2601 * m4/libprelude.m4: Sync with upstream.
2603 2006-06-27 Tomas Mraz <t8m@centrum.cz>
2605 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
2606 signal() fails with SIG_ERR return
2607 * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
2609 * modules/pam_unix/support.c(_unix_run_helper_binary):
2612 2006-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
2614 * doc/man/misc_conv.3.xml: New.
2615 * doc/man/misc_conv.3: New.
2616 * doc/man/pam_misc_paste_env.3.xml: New.
2617 * doc/man/pam_misc_paste_env.3: New.
2618 * doc/man/pam_misc_drop_env.3.xml: New.
2619 * doc/man/pam_misc_drop_env.3: New.
2620 * doc/man/pam_misc_setenv.3.xml: New.
2621 * doc/man/pam_misc_setenv.3: New.
2622 * doc/man/Makefile.am: Add new manual pages.
2624 * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
2625 in Applicatoin Developer Guide.
2626 * doc/man/pam_authenticate.3.xml: Likewise
2627 * doc/man/pam_chauthtok.3.xml: Likewise
2628 * doc/man/pam_close_session.3.xml: Likewise
2629 * doc/man/pam_conv.3.xml: Likewise
2630 * doc/man/pam_end.3.xml: Likewise
2631 * doc/man/pam_fail_delay.3.xml: Likewise
2632 * doc/man/pam_getenv.3.xml: Likewise
2633 * doc/man/pam_getenvlist.3.xml: Likewise
2634 * doc/man/pam_open_session.3.xml: Likewise
2635 * doc/man/pam_putenv.3.xml: Likewise
2636 * doc/man/pam_setcred.3.xml: Likewise
2637 * doc/man/pam_start.3.xml: Likewise
2638 * doc/man/pam_strerror.3.xml: Likewise
2640 * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
2641 * doc/man/pam_authenticate.3: Likewise
2642 * doc/man/pam_chauthtok.3: Likewise
2643 * doc/man/pam_close_session.3: Likewise
2644 * doc/man/pam_conv.3: Likewise
2645 * doc/man/pam_end.3: Likewise
2646 * doc/man/pam_fail_delay.3: Likewise
2647 * doc/man/pam_getenv.3: Likewise
2648 * doc/man/pam_getenvlist.3: Likewise
2649 * doc/man/pam_open_session.3: Likewise
2650 * doc/man/pam_putenv.3: Likewise
2651 * doc/man/pam_setcred.3: Likewise
2652 * doc/man/pam_sm_close_session.3: Likewise
2653 * doc/man/pam_start.3: Likewise
2654 * doc/man/pam_strerror.3: Likewise
2655 * doc/man/pam_syslog.3: Likewise
2656 * doc/man/PAM.8: Likewise
2658 2006-06-24 Thorsten Kukuk <kukuk@thkukuk.de>
2660 * modules/pam_limits/pam_limits.c (setup_limits): Don't
2661 reset priority for root.
2663 2006-06-23 Thorsten Kukuk <kukuk@thkukuk.de>
2665 * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
2666 * modules/pam_access/pam_access.8.xml: Likewise.
2667 * modules/pam_deny/pam_deny.8.xml: Likewise.
2668 * modules/pam_echo/pam_echo.8.xml: Likewise.
2669 * modules/pam_env/pam_env.8.xml: Likewise.
2670 * modules/pam_env/pam_env.conf.5.xml: Likewise.
2671 * modules/pam_group/group.conf.5.xml: Likewise.
2672 * modules/pam_group/pam_group.8.xml: Likewise.
2673 * modules/pam_limits/limits.conf.5.xml: Likewise.
2674 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
2675 * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
2676 * modules/pam_time/pam_time.8.xml: Likewise.
2677 * modules/pam_time/time.conf.5.xml: Likewise.
2679 * modules/pam_access/access.conf.5: Regenerate.
2680 * modules/pam_access/pam_access.8: Likewise.
2681 * modules/pam_deny/pam_deny.8: Likewise.
2682 * modules/pam_echo/README: Likewise.
2683 * modules/pam_echo/pam_echo.8: Likewise.
2684 * modules/pam_env/pam_env.8: Likewise.
2685 * modules/pam_env/pam_env.conf.5: Likewise.
2686 * modules/pam_group/README: Likewise.
2687 * modules/pam_group/group.conf.5: Likewise.
2688 * modules/pam_group/pam_group.8: Likewise.
2689 * modules/pam_limits/limits.conf.5: Likewise.
2690 * modules/pam_listfile/README: Likewise.
2691 * modules/pam_listfile/pam_listfile.8: Likewise.
2692 * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
2693 * modules/pam_time/pam_time.8: Likewise.
2694 * modules/pam_time/time.conf.5: Likewise.
2696 * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
2697 and pam.conf-syntax.xml.
2698 * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
2699 * doc/man/pam.conf.5: Regenerated.
2700 * doc/man/pam.conf-desc.xml: New.
2701 * doc/man/pam.conf-dir.xml: New.
2702 * doc/man/pam.conf-syntax.xml: New.
2704 2006-06-21 Thorsten Kukuk <kukuk@thkukuk.de>
2706 * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
2709 * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
2710 * modules/pam_issue/pam_issue.8: Regenerate.
2712 2006-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
2714 * configure.in: Remove unused check for libcap.
2716 * m4/ld-as-needed.m4: New.
2718 * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
2719 require docbook version 4.4.
2721 2006-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
2723 * doc/man/pam.8.xml: Syntax cleanup.
2724 * doc/pam/PAM.8: Regenerated from xml source.
2725 * man/pam_sm_chauthtok.3: New.
2726 * man/pam_sm_chauthtok.3.xml: New.
2727 * man/pam_sm_close_session.3: New.
2728 * man/pam_sm_close_session.3.xml: New.
2729 * man/pam_sm_open_session.3: New.
2730 * man/pam_sm_open_session.3.xml: New.
2731 * man/pam_sm_authenticate.3: New.
2732 * man/pam_sm_authenticate.3.xml: New.
2733 * man/pam_sm_setcred.3: New.
2734 * man/pam_sm_setcred.3.xml: New.
2735 * man/Makefile.am: Add new pam_sm_* manual pages.
2737 * specs/Makefile.am: Fix rule to generate draft.
2739 2006-06-18 Thorsten Kukuk <kukuk@thkukuk.de>
2741 * modules/pam_tally/Makefile.am: Include Make.xml.rules.
2742 * modules/pam_tally/pam_tally.8.xml: New.
2743 * modules/pam_tally/pam_tally.8: New, generated from xml file.
2744 * modules/pam_tally/README.xml: New.
2745 * modules/pam_tally/README: Regenerated from xml file.
2747 * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
2748 * modules/pam_selinux/pam_selinux.8.xml: New.
2749 * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
2750 * modules/pam_selinux/README.xml: New.
2751 * modules/pam_selinux/README: Regenerated from xml file.
2753 2006-06-17 Thorsten Kukuk <kukuk@thkukuk.de>
2755 * modules/pam_debug/Makefile.am: Include Make.xml.rules.
2756 * modules/pam_debug/pam_debug.8.xml: New.
2757 * modules/pam_debug/pam_debug.8: New, generated from xml file.
2758 * modules/pam_debug/README.xml: New.
2759 * modules/pam_debug/README: Regenerated from xml file.
2761 * examples/vpass.c: UID is unsigned on Linux.
2762 * modules/pam_exec/pam_exec.c: Likewise.
2763 * modules/pam_unix/pam_unix_acct.c: Likewise.
2764 * modules/pam_unix/pam_unix_sess.c: Likewise.
2766 * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
2767 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
2768 * modules/pam_succeed_if/README: Regenerated.
2770 * modules/pam_limits/Makefile.am: Include Make.xml.rules.
2771 * modules/pam_limits/limits.conf.5: New, generated from xml file.
2772 * modules/pam_limits/limits.conf.5.xml: New.
2773 * modules/pam_limits/pam_limits.8: New, generated from xml file.
2774 * modules/pam_limits/pam_limits.8.xml: New.
2775 * modules/pam_limits/README.xml: New.
2776 * modules/pam_limits/README: Regenerated from README.xml.
2778 2006-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
2780 * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
2781 are unsigned on Linux, don't truncate them.
2782 (_do_setpass): err is of type clnt_stat, not int.
2784 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
2785 truncate UID for syslog output.
2787 * modules/pam_time/pam_time.c: Replace type boolean with int.
2788 * modules/pam_group/pam_group.c: Likewise.
2790 2006-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
2792 * modules/pam_unix/bigcrypt.h: New.
2793 * modules/pam_unix/Makefile.am: Add bigcrypt.h.
2794 * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
2795 * modules/pam_unix/support.c: Include bigcrypt.h, remove
2797 * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
2799 * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
2802 * modules/pam_time/pam_time.c (logic_member): Remove unused
2805 * modules/pam_group/pam_group.c (logic_field): Accept
2806 colon in tty name. [#1428276].
2807 (logic_member): Remove unused variable len.
2808 (check_account): Fix usage of err variable in debug code.
2810 * modules/pam_time/pam_time.c (logic_field): Likewise.
2812 * configure.in: Add special exceptions for icc: different
2813 compiler warnings, no PIE support.
2815 2006-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
2817 * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
2819 * configure.in: Remove --enable-memory-debug, add option
2820 to disable prelude if installed.
2822 * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
2823 * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
2824 * modules/pam_unix/unix_chkpwd.c: Likewise.
2825 * libpam/include/security/_pam_types.h: Likewise.
2826 * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
2827 * libpam/pam_malloc.c: Remove file.
2828 * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
2830 * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
2833 * libpam/pam_private.h: Remove _pam_strCMP.
2834 * libpam/pam_misc.c: Likewise.
2835 * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
2837 2006-06-12 Thorsten Kukuk <kukuk@thkukuk.de>
2839 * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
2840 for modules from main application.
2842 2006-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
2844 * modules/pam_time/Makefile.am: Include Make.xml.rules.
2845 * modules/pam_time/time.conf.5: New, generated from xml file.
2846 * modules/pam_time/time.conf.5.xml: New.
2847 * modules/pam_time/pam_time.8: New, generated from xml file.
2848 * modules/pam_time/pam_time.8.xml: New.
2849 * modules/pam_time/README.xml: New.
2850 * modules/pam_time/README: Regenerated from README.xml.
2852 * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
2853 * modules/pam_wheel/pam_wheel.8.xml: New.
2854 * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
2855 * modules/pam_wheel/README.xml: New.
2856 * modules/pam_wheel/README: Regenerated from xml file.
2858 * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
2859 * modules/pam_xauth/pam_xauth.8.xml: New.
2860 * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
2861 * modules/pam_xauth/README.xml: New.
2862 * modules/pam_xauth/README: Regenerated from xml file.
2864 * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
2865 * modules/pam_deny/pam_deny.8: Regenerate from xml file.
2866 * modules/pam_deny/README: Likewise.
2868 * modules/pam_warn/Makefile.am: Include Make.xml.rules.
2869 * modules/pam_warn/pam_warn.8.xml: New.
2870 * modules/pam_warn/pam_warn.8: New, generated from xml file.
2871 * modules/pam_warn/README.xml: New.
2872 * modules/pam_warn/README: Regenerated from xml file.
2874 * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
2875 * modules/pam_userdb/pam_userdb.8.xml: New.
2876 * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
2877 * modules/pam_userdb/README.xml: New.
2878 * modules/pam_userdb/README: Regenerated from xml file.
2880 2006-06-06 Thorsten Kukuk <kukuk@thkukuk.de>
2882 * modules/pam_shells/Makefile.am: Include Make.xml.rules.
2883 * modules/pam_shells/pam_shells.8.xml: New.
2884 * modules/pam_shells/pam_shells.8: New, generated from xml file.
2885 * modules/pam_shells/README.xml: New.
2886 * modules/pam_shells/README: Regenerated from xml file.
2888 * libpam/include/security/pam_malloc.h: Add missing license
2891 * libpam/include/security/pam_ext.h: Add brackets for C++.
2892 * libpam/include/security/pam_modutil.h: Likewise.
2894 * libpam/include/security/pam_modules.h: Document where to
2895 find the copyright/license informations.
2897 * libpam/include/security/pam_appl.h: Move _pam_compat.h
2898 include inside of brackets.
2900 2006-06-04 Thorsten Kukuk <kukuk@thkukuk.de>
2902 * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
2903 * modules/pam_securetty/pam_securetty.8.xml: New.
2904 * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
2905 * modules/pam_securetty/README.xml: New.
2906 * modules/pam_securetty/README: Regenerated from xml file.
2908 * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
2909 * modules/pam_rootok/pam_rootok.8.xml: New.
2910 * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
2911 * modules/pam_rootok/README.xml: New.
2912 * modules/pam_rootok/README: Regenerated from xml file.
2914 * modules/pam_permit/Makefile.am: Include Make.xml.rules.
2915 * modules/pam_permit/pam_permit.8.xml: New.
2916 * modules/pam_permit/pam_permit.8: New, generated from xml file.
2917 * modules/pam_permit/README.xml: New.
2918 * modules/pam_permit/README: Regenerated from xml file.
2920 * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
2921 * modules/pam_nologin/pam_nologin.8.xml: New.
2922 * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
2923 * modules/pam_nologin/README.xml: New.
2924 * modules/pam_nologin/README: Regenerated from xml file.
2926 2006-06-03 Thorsten Kukuk <kukuk@thkukuk.de>
2928 * modules/pam_motd/Makefile.am: Include Make.xml.rules.
2929 * modules/pam_motd/pam_motd.8.xml: New.
2930 * modules/pam_motd/pam_motd.8: New, generated from xml file.
2931 * modules/pam_motd/README.xml: New.
2932 * modules/pam_motd/README: New, generated from xml file.
2934 2006-06-02 Thorsten Kukuk <kukuk@thkukuk.de>
2936 * modules/pam_mail/Makefile.am: Include Make.xml.rules.
2937 * modules/pam_mail/pam_mail.8.xml: New.
2938 * modules/pam_mail/pam_mail.8: New, generated from xml file.
2939 * modules/pam_mail/README.xml: New.
2940 * modules/pam_mail/README: Regenerated from xml file.
2942 * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
2943 * modules/pam_localuser/pam_localuser.8.xml: New.
2944 * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
2945 * modules/pam_localuser/README.xml: New.
2946 * modules/pam_localuser/README: Regenerated from xml file.
2948 * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
2949 * doc/man/pam.3: Likewise.
2950 * doc/man/pam.conf.5: Likewise.
2951 * doc/man/pam_acct_mgmt.3: Likewise.
2952 * doc/man/pam_authenticate.3: Likewise.
2953 * doc/man/pam_chauthtok.3: Likewise.
2954 * doc/man/pam_close_session.3: Likewise.
2955 * doc/man/pam_conv.3: Likewise.
2956 * doc/man/pam_end.3: Likewise.
2957 * doc/man/pam_error.3: Likewise.
2958 * doc/man/pam_fail_delay.3: Likewise.
2959 * doc/man/pam_get_data.3: Likewise.
2960 * doc/man/pam_get_item.3: Likewise.
2961 * doc/man/pam_get_user.3: Likewise.
2962 * doc/man/pam_getenv.3: Likewise.
2963 * doc/man/pam_getenvlist.3: Likewise.
2964 * doc/man/pam_info.3: Likewise.
2965 * doc/man/pam_open_session.3: Likewise.
2966 * doc/man/pam_prompt.3: Likewise.
2967 * doc/man/pam_putenv.3: Likewise.
2968 * doc/man/pam_set_data.3: Likewise.
2969 * doc/man/pam_set_item.3: Likewise.
2970 * doc/man/pam_setcred.3: Likewise.
2971 * doc/man/pam_sm_acct_mgmt.3: Likewise.
2972 * doc/man/pam_start.3: Likewise.
2973 * doc/man/pam_strerror.3: Likewise.
2974 * doc/man/pam_syslog.3: Likewise.
2975 * modules/pam_access/access.conf.5: Likewise.
2976 * modules/pam_access/pam_access.8: Likewise.
2977 * modules/pam_cracklib/pam_cracklib.8: Likewise.
2978 * modules/pam_deny/pam_deny.8: Likewise.
2979 * modules/pam_echo/pam_echo.8: Likewise.
2980 * modules/pam_env/pam_env.8: Likewise.
2981 * modules/pam_env/pam_env.conf.5: Likewise.
2982 * modules/pam_exec/pam_exec.8: Likewise.
2983 * modules/pam_filter/pam_filter.8: Likewise.
2984 * modules/pam_ftp/pam_ftp.8: Likewise.
2985 * modules/pam_group/group.conf.5: Likewise.
2986 * modules/pam_group/pam_group.8: Likewise.
2987 * modules/pam_issue/pam_issue.8: Likewise.
2988 * modules/pam_lastlog/pam_lastlog.8: Likewise.
2989 * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
2990 * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
2991 * modules/pam_umask/pam_umask.8: Likewise.
2993 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
2994 dngettext if available [#1427738].
2995 * configure.in: Check for dngettext [#1427738].
2996 * po/*.po: Update to dngettext usage.
2998 * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
2999 * modules/pam_listfile/pam_listfile.8.xml: New.
3000 * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
3001 * modules/pam_listfile/README.xml: New.
3002 * modules/pam_listfile/README: Regenerated from xml file.
3004 2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
3006 * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
3007 * modules/pam_lastlog/pam_lastlog.8.xml: New.
3008 * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
3009 * modules/pam_lastlog/README.xml: New.
3010 * modules/pam_lastlog/README: Regenerated from xml file.
3012 * modules/pam_group/Makefile.am: Include Make.xml.rules.
3013 * modules/pam_group/group.conf.5.xml: New.
3014 * modules/pam_group/group.conf.5: New, generated from xml file.
3015 * modules/pam_group/pam_group.8.xml: New.
3016 * modules/pam_group/pam_group.8: New, generated from xml file.
3017 * modules/pam_group/README.xml: New.
3018 * modules/pam_group/README: Regenerated from xml file.
3020 * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
3021 * modules/pam_ftp/pam_ftp.8.xml: New.
3022 * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
3023 * modules/pam_ftp/README.xml: New.
3024 * modules/pam_ftp/README: Regenerated from xml file.
3026 * modules/pam_issue/Makefile.am: Include Make.xml.rules.
3027 * modules/pam_issue/pam_issue.8.xml: New.
3028 * modules/pam_issue/pam_issue.8: New, generated from xml file.
3029 * modules/pam_issue/README.xml: New.
3030 * modules/pam_issue/README: Regenerated from xml file.
3032 * modules/pam_filter/Makefile.am: Include Make.xml.rules.
3033 * modules/pam_filter/pam_filter.8.xml: New.
3034 * modules/pam_filter/pam_filter.8: New, generated from xml file.
3035 * modules/pam_filter/README.xml: New.
3036 * modules/pam_filter/README: Regenerated from xml file.
3038 2006-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
3040 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
3041 directory documentation.
3043 * modules/pam_umask/Makefile.am: Include Make.xml.rules.
3044 * modules/pam_umask/pam_umask.8.xml: New.
3045 * modules/pam_umask/pam_umask.8: New, generated from xml file.
3046 * modules/pam_umask/README.xml: New.
3047 * modules/pam_umask/README: Regenerated from xml file.
3049 2006-05-29 Thorsten Kukuk <kukuk@thkukuk.de>
3051 * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
3052 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
3053 * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
3054 * modules/pam_mkhomedir/README.xml: New.
3055 * modules/pam_mkhomedir/README: Regenerated from xml file.
3057 2006-05-23 Thorsten Kukuk <kukuk@thkukuk.de>
3059 * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
3062 2006-05-22 Thorsten Kukuk <kukuk@thkukuk.de>
3064 * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
3065 Fix memory leaks, [#1490956] found by Coverity.
3067 * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
3068 value of pam_get_user().
3069 (tally_get_data): Check if oldtime is not NULL.
3070 [#1489818] found by Coverity.
3072 * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
3073 ignore return value of stat(). [#1489808] found by Coverity.
3075 * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
3076 NULL pointer dereference. [#1489792] found by Coverity.
3078 * libpam/Makefile.am: bump release number of libpam.so.
3079 * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
3080 [#1489804] found by Coverity.
3082 * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
3083 str, [#1489658] found by Coverity.
3085 * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
3086 a potential NULL pointer dereference.
3087 (pam_sm_chauthtok): Remove dead code.
3088 [#1489634] found by Coverity.
3090 2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
3092 * configure.in: Check for fseeko.
3093 * modules/pam_tally/pam_tally.c: Use fseeko if available
3094 (Based on patch by IBM).
3096 2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
3098 * release version 0.99.4.0
3100 * libpam/pam_strerror.c: Unify error messages.
3102 * po/zh_TW.po: Adjust for last pam_strerror changes.
3103 * po/zh_CN.po: Likewise.
3104 * po/uk.po: Likewise.
3105 * po/tr.po: Likewise.
3106 * po/pt.po: Likewise.
3107 * po/pt_BR.po: Likewise.
3108 * po/pl.po: Likewise.
3109 * po/ja.po: Likewise.
3110 * po/nl.po: Likewise.
3111 * po/nb.po: Likewise.
3112 * po/it.po: Likewise.
3113 * po/hu.po: Likewise.
3114 * po/fr.po: Likewise.
3115 * po/fi.po: Likewise.
3116 * po/es.po: Likewise.
3117 * po/de.po: Likewise.
3118 * po/cs.po: Likewise.
3120 * doc/man/pam.3.xml: New.
3121 * doc/man/pam.3. New, generated from XML file.
3123 * doc/man/pam_sm_acct_mgmt.3.xml: New.
3124 * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
3126 * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
3129 * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
3131 2006-05-02 Thorsten Kukuk <kukuk@thkukuk.de>
3133 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
3134 different strings for plural or not [#1427738]
3136 * po/*.po: Adjust for pam_unix.so translation fix.
3138 * modules/pam_tally/pam_tally.c: Always close file handle
3139 in error case, don't close it depending on *TALLY value [#1478180]
3141 2006-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
3143 * po/fr.po: Updated.
3145 2006-04-11 Thorsten Kukuk <kukuk@thkukuk.de>
3147 * po/km.po: Updated.
3149 2006-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
3151 * po/LINGUAS: Add uk.
3154 * po/cs.po: Updated.
3155 * po/po/es.po: Updated.
3156 * po/fi.po: Updated.
3157 * po/fr.po: Updated.
3158 * po/hu.po: Updated.
3159 * po/it.po: Updated.
3160 * po/ja.po: Updated.
3161 * po/nb.po: Updated.
3162 * po/pl.po: Updated.
3163 * po/pt.po: Updated.
3164 * po/pt_BR.po: Updated.
3165 * po/zh_CN.po: Updated.
3166 * po/zh_TW.po: Updated.
3168 2006-03-21 Thorsten Kukuk <kukuk@thkukuk.de>
3170 * configure.in: Remove ALL_LINGUAS.
3172 * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
3174 2006-03-13 Thorsten Kukuk <kukuk@thkukuk.de>
3176 * doc/man/pam_error.3.xml: New.
3177 * doc/man/pam_error.3: New, generated from XML file.
3178 * doc/man/pam_verror.3: New, generated from XML file.
3179 * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
3181 * modules/pam_lastlog/Makefile.am: Fix typo.
3183 * modules/pam_lastlog/pam_lastlog.c: Move comment for
3184 translators in right line.
3185 * po/*.po: Update po files with comment for translator.
3187 2006-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
3189 * doc/man/Makefile.am: Add new manual pages.
3191 * doc/man/pam.conf.5.xml: Replace link with content
3193 * doc/man/pam.conf.5: Regenerated from XML file.
3195 * doc/man/pam_info.3.xml: New.
3196 * doc/man/pam_info.3: New, generated from XML file.
3197 * doc/man/pam_vinfo.3: New, generated from XML file.
3199 * doc/man/pam_conv.3.xml: New.
3200 * doc/man/pam_conv.3: New, generated from XML file.
3202 * doc/man/pam_putenv.3.xml: New.
3203 * doc/man/pam_putenv.3: New, generated from XML file.
3205 * doc/man/pam_getenv.3.xml: New.
3206 * doc/man/pam_getenv.3: New, generated from XML file.
3208 * doc/man/pam_getenvlist.3.xml: New.
3209 * doc/man/pam_getenvlist.3: New, generated from XML file.
3211 * libpam/pam_item.c (pam_get_user): Check for valid pamh before
3214 * configure.in: create tests/Makefile
3215 * Makefile.am (SUBDIRS): Add tests
3216 * tests/Makefile.am: New.
3217 * tests/tst-dlopen.c: New.
3218 * tests/tst-pam_acct_mgmt.c: New.
3219 * tests/tst-pam_authenticate.c: New.
3220 * tests/tst-pam_chauthtok.c: New.
3221 * tests/tst-pam_close_session.c: New.
3222 * tests/tst-pam_end.c: New.
3223 * tests/tst-pam_fail_delay.c: New.
3224 * tests/tst-pam_getenvlist.c: New.
3225 * tests/tst-pam_get_item.c: New.
3226 * tests/tst-pam_open_session.c: New.
3227 * tests/tst-pam_setcred.c: New.
3228 * tests/tst-pam_set_item.c: New.
3229 * tests/tst-pam_start.c: New.
3230 * tests/tst-pam_get_user.c: New.
3232 * modules/pam_access/Makefile.am: Add rules for make check
3233 * modules/pam_access/tst-pam_access: New
3234 * modules/pam_cracklib/Makefile.am: Add rules for make check
3235 * modules/pam_cracklib/tst-pam_cracklib: New
3236 * modules/pam_debug/Makefile.am: Add rules for make check
3237 * modules/pam_debug/tst-pam_debug: New
3238 * modules/pam_deny/Makefile.am: Add rules for make check
3239 * modules/pam_deny/tst-pam_deny: New
3240 * modules/pam_echo/Makefile.am: Add rules for make check
3241 * modules/pam_echo/tst-pam_echo: New
3242 * modules/pam_env/Makefile.am: Add rules for make check
3243 * modules/pam_env/tst-pam_env: New
3244 * modules/pam_exec/Makefile.am: Add rules for make check
3245 * modules/pam_exec/tst-pam_exec: New
3246 * modules/pam_filter/Makefile.am: Add rules for make check
3247 * modules/pam_filter/tst-pam_filter: New
3248 * modules/pam_ftp/Makefile.am: Add rules for make check
3249 * modules/pam_ftp/tst-pam_ftp: New
3250 * modules/pam_group/Makefile.am: Add rules for make check
3251 * modules/pam_group/tst-pam_group: New
3252 * modules/pam_issue/Makefile.am: Add rules for make check
3253 * modules/pam_issue/tst-pam_issue: New
3254 * modules/pam_lastlog/Makefile.am: Add rules for make check
3255 * modules/pam_lastlog/tst-pam_lastlog: New
3256 * modules/pam_limits/Makefile.am: Add rules for make check
3257 * modules/pam_limits/tst-pam_limits: New
3258 * modules/pam_listfile/Makefile.am: Add rules for make check
3259 * modules/pam_listfile/tst-pam_listfile: New
3260 * modules/pam_localuser/Makefile.am: Add rules for make check
3261 * modules/pam_localuser/tst-pam_localuser: New
3262 * modules/pam_mail/Makefile.am: Add rules for make check
3263 * modules/pam_mail/tst-pam_mail: New
3264 * modules/pam_mkhomedir/Makefile.am: Add rules for make check
3265 * modules/pam_mkhomedir/tst-pam_mkhomedir: New
3266 * modules/pam_motd/Makefile.am: Add rules for make check
3267 * modules/pam_motd/tst-pam_motd: New
3268 * modules/pam_nologin/Makefile.am: Add rules for make check
3269 * modules/pam_nologin/tst-pam_nologin: New
3270 * modules/pam_permit/Makefile.am: Add rules for make check
3271 * modules/pam_permit/tst-pam_permit: New
3272 * modules/pam_rhosts/Makefile.am: Add rules for make check
3273 * modules/pam_rhosts/tst-pam_rhosts: New
3274 * modules/pam_rootok/Makefile.am: Add rules for make check
3275 * modules/pam_rootok/tst-pam_rootok: New
3276 * modules/pam_securetty/Makefile.am: Add rules for make check
3277 * modules/pam_securetty/tst-pam_securetty: New
3278 * modules/pam_selinux/Makefile.am: Add rules for make check
3279 * modules/pam_selinux/tst-pam_selinux: New
3280 * modules/pam_shells/Makefile.am: Add rules for make check
3281 * modules/pam_shells/tst-pam_shells: New
3282 * modules/pam_stress/Makefile.am: Add rules for make check
3283 * modules/pam_stress/tst-pam_stress: New
3284 * modules/pam_succeed_if/Makefile.am: Add rules for make check
3285 * modules/pam_succeed_if/tst-pam_succeed_if: New
3286 * modules/pam_tally/Makefile.am: Add rules for make check
3287 * modules/pam_tally/tst-pam_tally: New
3288 * modules/pam_time/Makefile.am: Add rules for make check
3289 * modules/pam_time/tst-pam_time: New
3290 * modules/pam_umask/Makefile.am: Add rules for make check
3291 * modules/pam_umask/tst-pam_umask: New
3292 * modules/pam_unix/Makefile.am: Add rules for make check
3293 * modules/pam_unix/tst-pam_unix: New
3294 * modules/pam_userdb/Makefile.am: Add rules for make check
3295 * modules/pam_userdb/tst-pam_userdb: New
3296 * modules/pam_warn/Makefile.am: Add rules for make check
3297 * modules/pam_warn/tst-pam_warn: New
3298 * modules/pam_wheel/Makefile.am: Add rules for make check
3299 * modules/pam_wheel/tst-pam_wheel: New
3300 * modules/pam_xauth/Makefile.am: Add rules for make check
3301 * modules/pam_xauth/tst-pam_xauth: New
3303 2006-03-11 Thorsten Kukuk <kukuk@thkukuk.de>
3305 * doc/man/pam_fail_delay.3.xml: New.
3306 * doc/man/pam_fail_delay.3: New, generated from xml.
3307 * doc/man/pam_prompt.3.xml: New.
3308 * doc/man/pam_prompt.3: New, generated from xml.
3309 * doc/man/pam_syslog.3.xml: New.
3310 * doc/man/pam_syslog.3: New, generated from xml.
3311 * doc/man/pam_vprompt.3: New, generated from xml.
3312 * doc/man/pam_vsyslog.3: New, generated from xml.
3314 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
3316 * po/km.po: Update Khmer translation.
3318 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
3320 * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
3321 version from #1425487.
3322 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
3323 * modules/pam_succeed_if/Makefile.am: Include XML rules.
3324 * modules/pam_succeed_if/README.xml: New.
3325 * modules/pam_succeed_if/README: Regenerated from xml.
3326 * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
3329 2006-02-22 Thorsten Kukuk <kukuk@thkukuk.de>
3331 * configure.in: Fix check for incomplete libaudit installations
3332 (Patch from Ruediger Oertel <ro@suse.de>).
3334 * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
3335 correct last_login field [#1427401].
3337 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
3338 format string for translation to allow reorder [#1428269].
3339 * po/*.po: Update with last pam_lastlog change.
3342 2006-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
3344 * doc/man/Makefile.am: Add new manual pages.
3345 * doc/man/pam_end.3: Regenerated from xml file.
3346 * doc/man/pam_end.3.xml: Document freeing of item data.
3347 * doc/man/pam_get_user.3: New.
3348 * doc/man/pam_get_user.3.xml: New.
3349 * modules/pam_access/access.conf.5.xml: Fix typos.
3350 * modules/pam_env/Makefile.am: Add new manual pages.
3351 * modules/pam_env/README: Regenerate from xml file.
3352 * modules/pam_env/README.xml: New.
3353 * modules/pam_env/pam_env.8: New.
3354 * modules/pam_env/pam_env.8.xml: New.
3355 * modules/pam_env/pam_env.conf.5: New.
3356 * modules/pam_env/pam_env.conf.5.xml New.
3358 2006-02-14 Thorsten Kukuk <kukuk@thkukuk.de>
3360 * po/fi.po: Updated translations.
3361 * po/pl.po: Likewise.
3362 * po/km.po: New translation.
3363 * configure.in: Add km as new language.
3365 2006-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
3367 * modules/pam_echo/pam_echo.8.xml: New.
3368 * modules/pam_echo/pam_echo.8: Regenerated from xml file.
3369 * modules/pam_echo/Makefile.am: Include Make.xml.rules.
3370 * modules/pam_echo/pam_echo.c: Fix return value.
3372 * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
3374 2006-02-12 Thorsten Kukuk <kukuk@thkukuk.de>
3376 * configure.in: Add doc/man/Makefile.
3377 * Make.xml.rules: Enable xincludes for manual pages.
3378 * doc/Makefile.am (EXRA_DIST): Remove manual pages.
3379 (SUBDIR): Add man subdirectory.
3380 * doc/man/Makefile.am: New.
3381 * doc/man/pam_acct_mgmt.3: New.
3382 * doc/man/pam_acct_mgmt.3.xml: New.
3383 * doc/man/pam_get_data.3: New.
3384 * doc/man/pam_get_data.3.xml: New.
3385 * doc/man/pam_set_data.3: New.
3386 * doc/man/pam_set_data.3.xml: New.
3387 * doc/man/pam.8.xml: New.
3388 * doc/man/pam.8: Regenerated from xml file.
3389 * doc/man/pam_authenticate.3.xml: New.
3390 * doc/man/pam_authenticate.3: Regenerated from xml file.
3391 * doc/man/pam_chauthtok.3.xml: New.
3392 * doc/man/pam_chauthtok.3: Regenerated from xml file.
3393 * doc/man/pam_close_session.3.xml: New.
3394 * doc/man/pam_close_session.3: Regenerated from xml file.
3395 * doc/man/pam_end.3.xml: New.
3396 * doc/man/pam_end.3: Regenerated from xml file.
3397 * doc/man/pam_fail_delay.3.xml: New.
3398 * doc/man/pam_fail_delay.3: Regenerated from xml file.
3399 * doc/man/pam_get_item.3.xml: New.
3400 * doc/man/pam_get_item.3: Regenerated from xml file.
3401 * doc/man/pam_item_types.inc.xml: New.
3402 * doc/man/pam_open_session.3.xml: New.
3403 * doc/man/pam_open_session.3: Regenerated from xml file.
3404 * doc/man/pam_set_item.3.xml: New.
3405 * doc/man/pam_set_item.3: Regenerated from xml file.
3406 * doc/man/pam_setcred.3.xml: New.
3407 * doc/man/pam_setcred.3: Regenerated from xml file.
3408 * doc/man/pam_start.3.xml: New.
3409 * doc/man/pam_start.3: Regenerated from xml file.
3410 * doc/man/pam_strerror.3.xml: New.
3411 * doc/man/pam_strerror.3: Regenerated from xml file.
3412 * doc/man/template-man: Removed.
3414 2006-02-10 Thorsten Kukuk <kukuk@thkukuk.de>
3416 * configure.in: Remove pam_pwdb support.
3417 * modules/Makefile.am: remove pam_pwdb.
3418 * modules/pam_pwdb: Remove complete directory.
3419 * libpam/Makefile.am: Remove LIBPWDB references.
3420 * libpam/pam_static_modules.h: Remove pam_pwdb references.
3421 * doc/modules/pam_pwdb.sgml: Removed.
3422 * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
3423 * doc/pam_source.sgml: Remove references to libpwdb.
3424 * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
3425 * doc/modules/pam_group.sgml: Likewise.
3426 * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
3427 * doc/modules/pam_userdb.sgml: Likewise.
3428 * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
3430 * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
3431 * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
3433 * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
3434 * modules/pam_cracklib/Makefile.am: Likewise.
3435 * modules/pam_deny/Makefile.am: Likewise.
3436 * modules/pam_exec/Makefile.am: Likewise.
3438 2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
3440 * configure.in: Check for text browser.
3441 * Make.xml.rules: Add rule to generate README from README.xml.
3443 * modules/pam_access/Makefile.am: Include Make.xml.rules.
3444 * modules/pam_access/README: Regenerated from README.xml.
3445 * modules/pam_access/README.xml: New.
3446 * modules/pam_access/access.conf: Extended by new examples.
3447 * modules/pam_access/access.conf.5: New, generated from xml file.
3448 * modules/pam_access/access.conf.5.xml: New.
3449 * modules/pam_access/pam_access.8: New, generated from xml file.
3450 * modules/pam_access/pam_access.8.xml: New.
3451 * modules/pam_access/pam_access.c: Add rules for IPv6 and
3453 Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
3455 * modules/pam_deny/Makefile.am: Include Make.xml.rules.
3456 * modules/pam_deny/pam_deny.8.xml: New.
3457 * modules/pam_deny/pam_deny.8: New, generated from xml file.
3458 * modules/pam_deny/README.xml: New.
3459 * modules/pam_deny/README: Regenerated from xml file.
3461 * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
3462 * modules/pam_cracklib/pam_cracklib.8.xml: New.
3463 * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
3464 * modules/pam_cracklib/README.xml: New.
3465 * modules/pam_cracklib/README: Regenerated from xml file.
3467 * modules/pam_exec/Makefile.am: Add rule to generate README.
3468 * modules/pam_exec/README: Regenerated from xml file.
3469 * modules/pam_exec/pam_exec.8: Regenerated from xml file.
3470 * modules/pam_exec/pam_exec.8.xml: Syntax files.
3472 2006-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
3475 * po/pt.po: Update translations.
3476 * configure.in: Add nl as new language.
3478 2006-01-30 Thorsten Kukuk <kukuk@thkukuk.de>
3480 * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
3481 * modules/pam_exec/Makefile.am: Include Make.xml.rules.
3483 * Make.xml.rules: New.
3485 * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
3487 2006-01-27 Thorsten Kukuk <kukuk@thkukuk.de>
3489 * configure.in: Prefer libdb over libndbm, fix check for
3490 libcrack and remove not needed BACKUP_LIBS.
3492 2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
3494 * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
3496 * po/de.po: Fix one translation.
3498 * configure.in: Add modules/pam_exec.
3499 * modules/Makefile.am: Add pam_exec subdirectory.
3500 * modules/pam_exec/README: New.
3501 * modules/pam_exec/Makefile.am: New.
3502 * modules/pam_exec/pam_exec.8: New.
3503 * modules/pam_exec/pam_exec.c: New.
3504 * modules/pam_exec/pam_exec.8.xml: New.
3505 * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
3506 * po/*.po: Merge new pam_exec strings.
3508 * libpam/pam_static_modules.h: New.
3509 * Makefile.am: Reorder subdirectories for static modules.
3510 * configure.in: Add --enable-static-modules option.
3511 * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
3512 necessary, add pam_static_modules.h, link against all PAM
3513 module object files if STATIC_MODULES is defined.
3514 * libpam/pam_static.c: Remove old _static_module* includes,
3515 include pam_static_modules.h.
3517 * configure.in: Add checks for xsltproc, xmllint and docbook
3519 * m4/jh_path_xml_catalog.m4: New.
3521 2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
3523 * modules/pam_succeed_if/pam_succeed_if.c: Add support for
3525 * modules/pam_xauth/pam_xauth.c: Likewise.
3527 * libpam/pam_static.c (_pam_open_static_handler): Add pamh
3529 * libpam/pam_private.h: Adjust prototype.
3530 * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
3531 _pam_open_static_handler call.
3533 * configure.in: Don't define PAM_DYNAMIC.
3534 * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
3535 include pam_dynamic.h
3536 * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
3537 exclude functions if we compile with PAM_STATIC.
3538 * libpam/pam_dynamic.h: Remove.
3539 * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
3540 * libpam/Makefile.am: Bump version number of libpam, remove
3543 2006-01-21 Thorsten Kukuk <kukuk@thkukuk.de>
3545 * modules/pam_listfile/pam_listfile.c: Add support for session
3546 and password management.
3548 2006-01-19 Thorsten Kukuk <kukuk@thkukuk.de>
3550 * doc/specs/Makefile.am (spec): Add padout to fix parallel
3551 build (Reported by Andreas Haumer <andreas@xss.co.at>).
3553 2006-01-15 Thorsten Kukuk <kukuk@thkukuk.de>
3555 * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
3558 2006-01-13 Thorsten Kukuk <kukuk@thkukuk.de>
3560 * release version 0.99.3.0
3562 * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
3565 * modules/pam_umask/pam_umask.c (search_key): Don't ignore
3566 EOF/error return value from fgets().
3568 * configure.in: Check for getline and getdelim
3570 * po/fi.po: Add new translations.
3571 * po/de.po: Likewise.
3572 * po/es.po: Likewise.
3573 * po/fr.po: Likewise.
3574 * po/it.po: Likewise.
3575 * po/ja.po: Likewise.
3576 * po/pt_BR.po: Likewise.
3577 * po/zh_CH.po: Likewise.
3578 * po/zh_TW.po: Likewise.
3580 2006-01-13 Dmitry V. Levin <ldv@altlinux.org>
3582 * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
3583 call with %m specifier.
3585 2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
3587 * configure.in: Add check for -fpie/-pie
3588 * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
3589 upperLOWER with -fpie/-pie if supported.
3590 * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
3591 with -fpie/-pie if supported.
3593 2006-01-12 Steve Grubb <sgrubb@redhat.com>
3595 * configure.in: Add check for audit library.
3596 * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
3597 (libpam_la_SOURCES): Add pam_audit.c.
3598 * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
3599 * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
3600 * libpam/pam_password.c (pam_chauthtok): Likewise.
3601 * libpam/pam_session.c (pam_open_session),
3602 (pam_close_session): Likewise.
3603 * libpam/pam_private.h: Add audit_state member to pam_handle,
3604 declare _pam_auditlog and _pam_audit_end.
3605 * libpam/pam_start.c (pam_start): Initialize audit_state.
3606 * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
3608 * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
3609 * NEWS: Note about added auditing.
3611 2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de>
3613 * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
3615 * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
3616 if we compile libpam itself.
3618 * po/hu.po: Update with new translations.
3620 2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
3622 * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
3623 instead of PAM_AUTHTOK_RECOVER_ERR.
3624 * modules/pam_pwdb/support.-c: Likewise.
3625 * modules/pam_unix/support.c: Likewise.
3626 * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
3627 * libpam/pam_strerror.c (pam_strerror): Likewise.
3629 * libpam/include/security/_pam_compat.h: Define
3630 PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
3632 * libpam/include/security/_pam_types.h: Rename
3633 PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
3635 2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
3637 * libpam/include/security/_pam_types.h: Remove nonnull attribute
3638 from third paramter (item) of pam_get_item.
3639 * libpam/Makefile.am: Bump version number of shared library.
3641 2005-12-21 Tomas Mraz <t8m@centrum.cz>
3643 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
3644 (evaluate_notingroup): Simplified.
3645 (evaluate_innetgr), (evaluate_notinnetgr): New functions.
3646 (evaluate): Added calls to evaluate_(not)innetgr().
3647 * modules/pam_succeed_if/README: Documented netgroup matching.
3648 * NEWS: Mentioned the added netgroup matching support.
3650 2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
3652 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
3653 strftime instead of ctime.
3655 * po/de.po: Fix typo.
3657 2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de>
3659 * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
3660 Reported by Charles_H_Bedford@nbc.gov.
3662 * modules/pam_time/pam_time.c (check_account): Implement
3663 support for netgroups.
3665 * modules/pam_time/time.conf: Document usage of netgroups.
3667 2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
3669 * modules/pam_group/pam_group.c (check_account): Implement
3670 support for netgroups.
3672 * modules/pam_group/group.conf: Add all documentation to this
3673 example config file and don't reference to outdated configs.
3675 * modules/pam_group/README: New.
3677 * modules/pam_group/Makefile.am: Add README to EXTRADIST.
3679 2005-12-15 Thorsten Kukuk <kukuk@suse.de>
3681 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
3682 error if user logins the first time.
3684 * modules/pam_lastlog/README: New.
3686 * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
3688 2005-12-14 Thorsten Kukuk <kukuk@suse.de>
3690 * modules/pam_deny/pam_deny.c: Fix comment.
3692 * doc/pam_appl.sgml: Fix typo.
3694 Reported by Russell Bateman <russ@windofkeltia.com>
3696 2005-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
3698 * release version 0.99.2.1
3700 * po/de.po: Remove new fuzzy entry
3702 * NEWS: Add 0.99.2.1 changes
3704 * configure.in: bump version number to 0.99.2.1
3706 2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
3708 Cleanup pam_syslog messages.
3710 * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
3711 * modules/pam_filter/pam_filter.c (set_filter): Append %m
3712 specifier to pam_syslog messages where appropriate.
3713 * modules/pam_group/pam_group.c (read_field): Likewise.
3714 * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
3715 (create_homedir): Do not use make_remark() wrapper, call
3716 pam_info() directly. Call pam_syslog() right after failed
3717 operation and append %m specifier to pam_syslog messages where
3719 * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
3720 sequence of malloc(), strcpy() and strcat() calls with asprintf().
3721 Append %m specifier to pam_syslog messages where appropriate.
3722 * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
3723 Append %m specifier to pam_syslog messages where appropriate.
3724 * modules/pam_shells/pam_shells.c (perform_check): Likewise.
3726 2005-12-12 Tomas Mraz <t8m@centrum.cz>
3728 * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
3729 * po/Linux-PAM.pot: Likewise.
3730 * po/de.po: Likewise.
3731 * po/es.po: Likewise.
3732 * po/fi.po: Likewise.
3733 * po/fr.po: Likewise.
3734 * po/hu.po: Likewise.
3735 * po/it.po: Likewise.
3736 * po/ja.po: Likewise.
3737 * po/nb.po: Likewise.
3738 * po/pa.po: Likewise.
3739 * po/pl.po: Likewise.
3740 * po/pt.po: Likewise.
3741 * po/pt_BR.po: Likewise.
3742 * po/zh_CN.po: Likewise.
3743 * po/zh_TW.po: Likewise.
3744 * po/de.po: Add new translation, fixed typo in string.
3746 2005-12-12 Mike Becher <Mike.Becher@lrz-muenchen.de>
3748 * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
3750 2005-12-12 Thorsten Kukuk <kukuk@suse.de>
3752 * modules/pam_mail/README: Document "quiet" and "standard"
3755 2005-12-07 Thorsten Kukuk <kukuk@suse.de>
3757 * modules/pam_mail/pam_mail.c: Modify assembling of output
3758 for easier translation.
3760 * po/de.po: Translate new pam_mail messages.
3763 2005-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
3765 * po/de.po: Add new translation, fix wrong format specifier.
3766 * po/cs.po: Fix wrong format specifier.
3767 * po/es.po: Likewise.
3768 * po/fi.po: Likewise.
3769 * po/fr.po: Likewise.
3770 * po/hu.po: Likewise.
3771 * po/it.po: Likewise.
3772 * po/ja.po: Likewise.
3773 * po/nb.po: Likewise.
3774 * po/pa.po: Likewise.
3775 * po/pl.po: Likewise.
3776 * po/pt.po: Likewise.
3777 * po/pt_BR.po: Likewise.
3778 * po/zh_CN.po: Likewise.
3779 * po/zh_TW.po: Likewise.
3781 2005-11-24 Dmitry V. Levin <ldv@altlinux.org>
3783 * config.h.in: Remove generated file.
3784 * .cvsignore: Add config.h.in.
3786 * configure.in: Do not check for strerror.
3787 * libpam_misc/misc_conv.c (read_string): Replace strerror()
3788 call with %m specifier.
3789 * libpamc/pamc_converse.c (pamc_converse): Likewise.
3790 * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
3791 * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
3793 * modules/pam_selinux/pam_selinux.c (security_label_tty):
3795 (security_restorelabel_tty, security_label_tty): Append %m
3796 specifier where appropriate.
3797 * modules/pam_selinux/pam_selinux_check.c (main): Replace
3798 strerror() call with %m specifier.
3799 * modules/pam_unix/pam_unix_passwd.c (save_old_password,
3800 _update_passwd, _update_shadow): Likewise.
3801 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
3802 * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
3803 * po/Linux-PAM.pot: Update strings from pam_selinux.
3804 * po/cs.po: Likewise.
3805 * po/de.po: Likewise.
3806 * po/es.po: Likewise.
3807 * po/fi.po: Likewise.
3808 * po/fr.po: Likewise.
3809 * po/hu.po: Likewise.
3810 * po/it.po: Likewise.
3811 * po/ja.po: Likewise.
3812 * po/nb.po: Likewise.
3813 * po/pa.po: Likewise.
3814 * po/pl.po: Likewise.
3815 * po/pt.po: Likewise.
3816 * po/pt_BR.po: Likewise.
3817 * po/zh_CN.po: Likewise.
3818 * po/zh_TW.po: Likewise.
3820 2005-11-23 Thorsten Kukuk <kukuk@suse.de>
3822 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
3823 new variable to fix compiler warning.
3825 * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
3826 don't need to start with /dev/.
3828 2005-11-21 Thorsten Kukuk <kukuk@thkukuk.de>
3830 * release version 0.99.2.0
3832 * libpam_misc/Makefile.am: Increase release number (for change
3835 * NEWS: Adjust for 0.99.2.0
3837 2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de>
3839 * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
3840 Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
3842 2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
3844 * libpam/pam_handlers.c: Replace code for all dlopen variants with
3846 * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
3847 * libpam/pam_dynamic.h: Provide prototypes.
3848 For Mac OS X support [#534205]
3850 2005-11-09 Tomas Mraz <t8m@centrum.cz>
3852 * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
3854 * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
3855 full path tty name. Allow unset tty.
3856 (logic_member): Allow matching ':' in tty name.
3857 * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
3858 full path tty name. Allow unset tty.
3859 (logic_member): Allow matching ':' in tty name.
3861 * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
3864 2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
3866 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
3867 correct variable names.
3869 2005-11-06 Steve Langasek <vorlon@debian.org>
3871 * modules/pam_env/pam_env.c: don't treat a missing
3872 /etc/environment as a fatal error when attempting to read it,
3873 and try to read this file by default; this restores the behavior
3874 from Linux-PAM 0.76.
3876 2005-11-02 Tomas Mraz <t8m@centrum.cz>
3878 * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
3881 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
3882 logic when comparing dates to handle corner cases better [#1245888].
3884 2005-10-31 Thorsten Kukuk <kukuk@suse.de>
3886 * modules/pam_filter/pam_filter.c: Use XCASE only if defined
3889 2005-10-27 Thorsten Kukuk <kukuk@suse.de>
3891 * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
3893 2005-10-26 Tomas Mraz <t8m@centrum.cz>
3895 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
3896 modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
3897 modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
3898 uid to 0 before executing the helper if SELinux is enabled.
3899 * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
3900 if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
3903 2005-10-20 Tomas Mraz <t8m@centrum.cz>
3905 * configure.in: Added check for xauth binary and --with-xauth option.
3906 * config.h.in: Added configurable PAM_PATH_XAUTH.
3907 * modules/pam_xauth/README,
3908 modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
3909 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
3910 searching xauth binary on multiple places.
3911 (run_coprocess): Don't use execvp as it can be a security risk.
3913 2005-10-04 Steve Langasek <vorlon@debian.org>
3915 * libpam/include/security/pam_malloc.h,
3916 libpam/include/security/pam_modules.h: Declare public header
3917 files extern "C" so that they are C++-safe.
3919 2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
3920 Steve Langasek <vorlon@debian.org>
3922 Cleanup gratuitous use of strdup().
3923 Fix "missing argument" checks.
3925 * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
3926 to conffile and envfile arguments. Do not use x_strdup() for
3927 conffile and envfile initialization. Fix "missing argument"
3929 (_parse_config_file): Take conffile argument of type "const char *"
3930 instead of "char **". Do not free conffile.
3931 (_parse_env_file): Take env_file argument of type "const char *"
3932 instead of "char **". Do not free env_file.
3933 (pam_sm_setcred): Add const qualifier to conf_file and env_file.
3934 Pass conf_file and env_file to _parse_config_file() and
3935 _parse_env_file() by value.
3936 (pam_sm_open_session): Likewise.
3938 * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
3939 users argument. Do not use x_strdup() for users initialization.
3940 (lookup): Add const qualifier to list argument.
3941 (pam_sm_authenticate): Add const qualifier to users argument.
3943 * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
3944 to maildir argument. Do not use x_strdup() for maildir
3945 initialization. Fix "missing argument" check.
3946 (get_folder): Take path_mail argument of type "const char *"
3947 instead of "char **". Do not free path_mail.
3948 (_do_mail): Add const qualifier to path_mail argument.
3949 Pass path_mail to get_folder() by value.
3951 * modules/pam_motd/pam_motd.c: Include <syslog.h>.
3952 (pam_sm_open_session): Add const qualifier to motd_path.
3953 Do not use x_strdup() for motd_path initialization. Do not
3954 free motd_path. Fix "missing argument" check. Add "unknown
3957 * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
3958 qualifier to database and cryptmode arguments. Fix "missing
3960 (pam_sm_authenticate): Add const qualifier to database and cryptmode.
3961 (pam_sm_acct_mgmt): Likewise.
3963 2005-10-01 Steve Langasek <vorlon@debian.org>
3965 * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
3967 2005-09-30 Steve Langasek <vorlon@debian.org>
3969 * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
3970 gratuitous use of strdup().
3972 2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
3976 * doc/specs/Makefile.am (install-data-local): Install
3978 (all): Copy rfc if we build outside of source directory.
3980 2005-09-27 Thorsten Kukuk <kukuk@suse.de>
3982 * NEWS: Document removal of pam_radius.
3983 * autogen.sh: Make configure script executeable.
3985 * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
3986 (lex.yy.c): Fixed out of tree build.
3988 * conv/pam_conv1/pam_conv.y: Fix main prototype.
3992 * po/POTFILES.in: Remove files not distributed by tar archive
3993 and not containing strings for translation.
3995 2005-09-26 Tomas Mraz <t8m@centrum.cz>
3997 * NEWS: Add a few missing entries from CHANGELOG.
3999 * AUTHORS: Fixed entries for Toady and me.
4001 * Makefile.am (M4_FILES): Fixed out of tree build.
4002 * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
4003 (spec, lex.yy.c): Fixed out of tree build.
4005 * modules/pam_userdb/README: Document try_first_pass and
4006 use_first_pass options, remove use_authtok option.
4009 2005-09-26 Dmitry V. Levin <ldv@altlinux.org>
4011 * NEWS: Mention changes in pam_lastlog.
4013 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
4016 * autogen.sh: Don't generate NEWS file.
4017 * CHANGELOG: Document it as obsolete.
4019 2005-09-26 Tomas Mraz <t8m@centrum.cz>
4021 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
4022 _log_err() -> pam_syslog()
4023 (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
4024 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
4025 _log_err() -> pam_syslog()
4026 * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
4027 (getNISserver, _unix_run_shadow_binary, _update_passwd,
4028 _update_shadow, _do_setpass, _pam_unix_approve_pass,
4029 pam_sm_chauthtok): _log_err() -> pam_syslog()
4030 * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
4031 (pam_sm_open_session, pam_sm_close_session):
4032 _log_err() -> pam_syslog()
4033 * modules/pam_unix/support.c (_log_err, converse): removed
4034 (_make_remark): use pam_prompt() instead of converse()
4035 (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
4036 _unix_verify_password, _unix_read_password):
4037 _log_err() -> pam_syslog()
4038 _cleanup(), _unix_cleanup(): Silence unused param warnings.
4039 (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
4040 _unix_run_helper_binary): Silence incorrect type warnings.
4041 (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
4042 instead of converse().
4043 * modules/pam_unix/support.h (_log_err): removed
4044 * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
4046 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
4048 * configure.in: Add doc/specs/Makefile.
4049 * Makefile.am: Add releasedocs rule.
4050 * doc/Makefile.am: Add specs subdir, remove files from specs
4051 directory, add rfc86.0.txt to releasedocs.
4052 * doc/specs/Makefile.am: New file.
4053 * doc/specs/formatter/parse.y: move from here ...
4054 * doc/specs/parse.y: ... here.
4055 * doc/specs/formatter/parse.lex: move from here ...
4056 * doc/specs/parse.lex: ... here.
4058 * modules/pam_mail/pam_mail.c: Mark missing strings for translation
4059 * po/Linux-PAM.pot: Add new strings from pam_mail
4060 * po/cs.po: Likewise.
4061 * po/de.po: Likewise.
4062 * po/es.po: Likewise.
4063 * po/fi.po: Likewise.
4064 * po/fr.po: Likewise.
4065 * po/hu.po: Likewise.
4066 * po/it.po: Likewise.
4067 * po/ja.po: Likewise.
4068 * po/nb.po: Likewise.
4069 * po/pa.po: Likewise.
4070 * po/pl.po: Likewise.
4071 * po/pt.po: Likewise.
4072 * po/pt_BR.po: Likewise.
4073 * po/zh_CN.po: Likewise.
4074 * po/zh_TW.po: Likewise.
4076 2005-09-23 Tomas Mraz <t8m@centrum.cz>
4078 * modules/pam_access/pam_access.c (from_match): Support NULL from.
4079 (string_match): Support NULL string, add NONE keyword matching it.
4080 (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
4081 * modules/pam_access/access.conf: NONE keyword description
4082 * modules/pam_access/README: NONE keyword description
4084 2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
4086 * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
4087 pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
4088 text of log messages.
4089 (pam_sm_open_session): Replace sequence of malloc(), strcpy()
4090 and strcat() calls with asprintf(). Replace syslog() calls
4093 * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
4094 instead of memcmp() for string comparison.
4096 2005-09-21 Dmitry V. Levin <ldv@altlinux.org>
4098 * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
4099 (parse_args): Add pam_handle_t* argument. Log unrecognized
4101 (perform_check): Log pam_get_user() and malloc() failures.
4102 (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
4103 Pass pam_handle_t* to parse_args().
4105 * modules/pam_mail/pam_mail.c: Include <errno.h>.
4106 Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
4107 NO_MAIL_STANDARD_FORMAT macros.
4108 (parse_args, get_folder): Cleanup error messages.
4109 (get_folder): Fix leak of the path_mail variable in case of
4110 pam_get_user() failure. Cleanup memory management.
4111 (get_mail_status): Add pam_handle_t* argument. Fix leaks of
4112 namelist variable. Cleanup memory management. Log memory
4113 allocation failures. Remove 250-byte limit on Maildir pathname.
4114 (report_mail): Mark text messages for translation.
4115 (_do_mail): Cleanup memory management. Pass pam_handle_t*
4116 to get_mail_status().
4118 * po/Linux-PAM.pot: Update with new strings from pam_mail for
4120 * po/cs.po: Likewise.
4121 * po/de.po: Likewise.
4122 * po/es.po: Likewise.
4123 * po/fi.po: Likewise.
4124 * po/fr.po: Likewise.
4125 * po/hu.po: Likewise.
4126 * po/it.po: Likewise.
4127 * po/ja.po: Likewise.
4128 * po/nb.po: Likewise.
4129 * po/pa.po: Likewise.
4130 * po/pl.po: Likewise.
4131 * po/pt.po: Likewise.
4132 * po/pt_BR.po: Likewise.
4133 * po/zh_CN.po: Likewise.
4134 * po/zh_TW.po: Likewise.
4136 2005-09-20 Thorsten Kukuk <kukuk@suse.de>
4138 * configure.in: Add finish translation.
4141 * acinclude.m4: remove libprelude macros.
4142 * m4/libprelude.m4: New.
4144 * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
4146 * libpamc/Makefile.am (EXTRA_DIST): Add License.
4148 See CHANGELOG for earlier changes.