1 2006-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
3 * modules/pam_group/pam_group.c (logic_field): Accept
4 colon in tty name. [#1428276].
5 (logic_member): Remove unused variable len.
6 (check_account): Fix usage of err variable in debug code.
8 * modules/pam_time/pam_time.c (logic_field): Likewise.
10 * configure.in: Add special exceptions for icc: different
11 compiler warnings, no PIE support.
13 2006-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
15 * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
17 * configure.in: Remove --enable-memory-debug, add option
18 to disable prelude if installed.
20 * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
21 * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
22 * modules/pam_unix/unix_chkpwd.c: Likewise.
23 * libpam/include/security/_pam_types.h: Likewise.
24 * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
25 * libpam/pam_malloc.c: Remove file.
26 * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
28 * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
31 * libpam/pam_private.h: Remove _pam_strCMP.
32 * libpam/pam_misc.c: Likewise.
33 * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
35 2006-06-12 Thorsten Kukuk <kukuk@thkukuk.de>
37 * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
38 for modules from main application.
40 2006-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
42 * modules/pam_time/Makefile.am: Include Make.xml.rules.
43 * modules/pam_time/time.conf.5: New, generated from xml file.
44 * modules/pam_time/time.conf.5.xml: New.
45 * modules/pam_time/pam_time.8: New, generated from xml file.
46 * modules/pam_time/pam_time.8.xml: New.
47 * modules/pam_time/README.xml: New.
48 * modules/pam_time/README: Regenerated from README.xml.
50 * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
51 * modules/pam_wheel/pam_wheel.8.xml: New.
52 * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
53 * modules/pam_wheel/README.xml: New.
54 * modules/pam_wheel/README: Regenerated from xml file.
56 * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
57 * modules/pam_xauth/pam_xauth.8.xml: New.
58 * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
59 * modules/pam_xauth/README.xml: New.
60 * modules/pam_xauth/README: Regenerated from xml file.
62 * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
63 * modules/pam_deny/pam_deny.8: Regenerate from xml file.
64 * modules/pam_deny/README: Likewise.
66 * modules/pam_warn/Makefile.am: Include Make.xml.rules.
67 * modules/pam_warn/pam_warn.8.xml: New.
68 * modules/pam_warn/pam_warn.8: New, generated from xml file.
69 * modules/pam_warn/README.xml: New.
70 * modules/pam_warn/README: Regenerated from xml file.
72 * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
73 * modules/pam_userdb/pam_userdb.8.xml: New.
74 * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
75 * modules/pam_userdb/README.xml: New.
76 * modules/pam_userdb/README: Regenerated from xml file.
78 2006-06-06 Thorsten Kukuk <kukuk@thkukuk.de>
80 * modules/pam_shells/Makefile.am: Include Make.xml.rules.
81 * modules/pam_shells/pam_shells.8.xml: New.
82 * modules/pam_shells/pam_shells.8: New, generated from xml file.
83 * modules/pam_shells/README.xml: New.
84 * modules/pam_shells/README: Regenerated from xml file.
86 * libpam/include/security/pam_malloc.h: Add missing license
89 * libpam/include/security/pam_ext.h: Add brackets for C++.
90 * libpam/include/security/pam_modutil.h: Likewise.
92 * libpam/include/security/pam_modules.h: Document where to
93 find the copyright/license informations.
95 * libpam/include/security/pam_appl.h: Move _pam_compat.h
96 include inside of brackets.
98 2006-06-04 Thorsten Kukuk <kukuk@thkukuk.de>
100 * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
101 * modules/pam_securetty/pam_securetty.8.xml: New.
102 * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
103 * modules/pam_securetty/README.xml: New.
104 * modules/pam_securetty/README: Regenerated from xml file.
106 * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
107 * modules/pam_rootok/pam_rootok.8.xml: New.
108 * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
109 * modules/pam_rootok/README.xml: New.
110 * modules/pam_rootok/README: Regenerated from xml file.
112 * modules/pam_permit/Makefile.am: Include Make.xml.rules.
113 * modules/pam_permit/pam_permit.8.xml: New.
114 * modules/pam_permit/pam_permit.8: New, generated from xml file.
115 * modules/pam_permit/README.xml: New.
116 * modules/pam_permit/README: Regenerated from xml file.
118 * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
119 * modules/pam_nologin/pam_nologin.8.xml: New.
120 * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
121 * modules/pam_nologin/README.xml: New.
122 * modules/pam_nologin/README: Regenerated from xml file.
124 2006-06-03 Thorsten Kukuk <kukuk@thkukuk.de>
126 * modules/pam_motd/Makefile.am: Include Make.xml.rules.
127 * modules/pam_motd/pam_motd.8.xml: New.
128 * modules/pam_motd/pam_motd.8: New, generated from xml file.
129 * modules/pam_motd/README.xml: New.
130 * modules/pam_motd/README: New, generated from xml file.
132 2006-06-02 Thorsten Kukuk <kukuk@thkukuk.de>
134 * modules/pam_mail/Makefile.am: Include Make.xml.rules.
135 * modules/pam_mail/pam_mail.8.xml: New.
136 * modules/pam_mail/pam_mail.8: New, generated from xml file.
137 * modules/pam_mail/README.xml: New.
138 * modules/pam_mail/README: Regenerated from xml file.
140 * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
141 * modules/pam_localuser/pam_localuser.8.xml: New.
142 * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
143 * modules/pam_localuser/README.xml: New.
144 * modules/pam_localuser/README: Regenerated from xml file.
146 * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
147 * doc/man/pam.3: Likewise.
148 * doc/man/pam.conf.5: Likewise.
149 * doc/man/pam_acct_mgmt.3: Likewise.
150 * doc/man/pam_authenticate.3: Likewise.
151 * doc/man/pam_chauthtok.3: Likewise.
152 * doc/man/pam_close_session.3: Likewise.
153 * doc/man/pam_conv.3: Likewise.
154 * doc/man/pam_end.3: Likewise.
155 * doc/man/pam_error.3: Likewise.
156 * doc/man/pam_fail_delay.3: Likewise.
157 * doc/man/pam_get_data.3: Likewise.
158 * doc/man/pam_get_item.3: Likewise.
159 * doc/man/pam_get_user.3: Likewise.
160 * doc/man/pam_getenv.3: Likewise.
161 * doc/man/pam_getenvlist.3: Likewise.
162 * doc/man/pam_info.3: Likewise.
163 * doc/man/pam_open_session.3: Likewise.
164 * doc/man/pam_prompt.3: Likewise.
165 * doc/man/pam_putenv.3: Likewise.
166 * doc/man/pam_set_data.3: Likewise.
167 * doc/man/pam_set_item.3: Likewise.
168 * doc/man/pam_setcred.3: Likewise.
169 * doc/man/pam_sm_acct_mgmt.3: Likewise.
170 * doc/man/pam_start.3: Likewise.
171 * doc/man/pam_strerror.3: Likewise.
172 * doc/man/pam_syslog.3: Likewise.
173 * modules/pam_access/access.conf.5: Likewise.
174 * modules/pam_access/pam_access.8: Likewise.
175 * modules/pam_cracklib/pam_cracklib.8: Likewise.
176 * modules/pam_deny/pam_deny.8: Likewise.
177 * modules/pam_echo/pam_echo.8: Likewise.
178 * modules/pam_env/pam_env.8: Likewise.
179 * modules/pam_env/pam_env.conf.5: Likewise.
180 * modules/pam_exec/pam_exec.8: Likewise.
181 * modules/pam_filter/pam_filter.8: Likewise.
182 * modules/pam_ftp/pam_ftp.8: Likewise.
183 * modules/pam_group/group.conf.5: Likewise.
184 * modules/pam_group/pam_group.8: Likewise.
185 * modules/pam_issue/pam_issue.8: Likewise.
186 * modules/pam_lastlog/pam_lastlog.8: Likewise.
187 * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
188 * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
189 * modules/pam_umask/pam_umask.8: Likewise.
191 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
192 dngettext if available [#1427738].
193 * configure.in: Check for dngettext [#1427738].
194 * po/*.po: Update to dngettext usage.
196 * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
197 * modules/pam_listfile/pam_listfile.8.xml: New.
198 * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
199 * modules/pam_listfile/README.xml: New.
200 * modules/pam_listfile/README: Regenerated from xml file.
202 2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
204 * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
205 * modules/pam_lastlog/pam_lastlog.8.xml: New.
206 * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
207 * modules/pam_lastlog/README.xml: New.
208 * modules/pam_lastlog/README: Regenerated from xml file.
210 * modules/pam_group/Makefile.am: Include Make.xml.rules.
211 * modules/pam_group/group.conf.5.xml: New.
212 * modules/pam_group/group.conf.5: New, generated from xml file.
213 * modules/pam_group/pam_group.8.xml: New.
214 * modules/pam_group/pam_group.8: New, generated from xml file.
215 * modules/pam_group/README.xml: New.
216 * modules/pam_group/README: Regenerated from xml file.
218 * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
219 * modules/pam_ftp/pam_ftp.8.xml: New.
220 * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
221 * modules/pam_ftp/README.xml: New.
222 * modules/pam_ftp/README: Regenerated from xml file.
224 * modules/pam_issue/Makefile.am: Include Make.xml.rules.
225 * modules/pam_issue/pam_issue.8.xml: New.
226 * modules/pam_issue/pam_issue.8: New, generated from xml file.
227 * modules/pam_issue/README.xml: New.
228 * modules/pam_issue/README: Regenerated from xml file.
230 * modules/pam_filter/Makefile.am: Include Make.xml.rules.
231 * modules/pam_filter/pam_filter.8.xml: New.
232 * modules/pam_filter/pam_filter.8: New, generated from xml file.
233 * modules/pam_filter/README.xml: New.
234 * modules/pam_filter/README: Regenerated from xml file.
236 2006-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
238 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
239 directory documentation.
241 * modules/pam_umask/Makefile.am: Include Make.xml.rules.
242 * modules/pam_umask/pam_umask.8.xml: New.
243 * modules/pam_umask/pam_umask.8: New, generated from xml file.
244 * modules/pam_umask/README.xml: New.
245 * modules/pam_umask/README: Regenerated from xml file.
247 2006-05-29 Thorsten Kukuk <kukuk@thkukuk.de>
249 * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
250 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
251 * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
252 * modules/pam_mkhomedir/README.xml: New.
253 * modules/pam_mkhomedir/README: Regenerated from xml file.
255 2006-05-23 Thorsten Kukuk <kukuk@thkukuk.de>
257 * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
260 2006-05-22 Thorsten Kukuk <kukuk@thkukuk.de>
262 * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
263 Fix memory leaks, [#1490956] found by Coverity.
265 * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
266 value of pam_get_user().
267 (tally_get_data): Check if oldtime is not NULL.
268 [#1489818] found by Coverity.
270 * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
271 ignore return value of stat(). [#1489808] found by Coverity.
273 * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
274 NULL pointer dereference. [#1489792] found by Coverity.
276 * libpam/Makefile.am: bump release number of libpam.so.
277 * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
278 [#1489804] found by Coverity.
280 * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
281 str, [#1489658] found by Coverity.
283 * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
284 a potential NULL pointer dereference.
285 (pam_sm_chauthtok): Remove dead code.
286 [#1489634] found by Coverity.
288 2006-05-04 Thorsten Kukuk <kukuk@suse.de>
290 * configure.in: Check for fseeko.
291 * modules/pam_tally/pam_tally.c: Use fseeko if available
292 (Based on patch by IBM).
294 2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
296 * release version 0.99.4.0
298 * libpam/pam_strerror.c: Unify error messages.
300 * po/zh_TW.po: Adjust for last pam_strerror changes.
301 * po/zh_CN.po: Likewise.
302 * po/uk.po: Likewise.
303 * po/tr.po: Likewise.
304 * po/pt.po: Likewise.
305 * po/pt_BR.po: Likewise.
306 * po/pl.po: Likewise.
307 * po/ja.po: Likewise.
308 * po/nl.po: Likewise.
309 * po/nb.po: Likewise.
310 * po/it.po: Likewise.
311 * po/hu.po: Likewise.
312 * po/fr.po: Likewise.
313 * po/fi.po: Likewise.
314 * po/es.po: Likewise.
315 * po/de.po: Likewise.
316 * po/cs.po: Likewise.
318 * doc/man/pam.3.xml: New.
319 * doc/man/pam.3. New, generated from XML file.
321 * doc/man/pam_sm_acct_mgmt.3.xml: New.
322 * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
324 * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
327 * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
329 2006-05-02 Thorsten Kukuk <kukuk@thkukuk.de>
331 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
332 different strings for plural or not [#1427738]
334 * po/*.po: Adjust for pam_unix.so translation fix.
336 * modules/pam_tally/pam_tally.c: Always close file handle
337 in error case, don't close it depending on *TALLY value [#1478180]
339 2006-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
343 2006-04-11 Thorsten Kukuk <kukuk@thkukuk.de>
347 2006-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
349 * po/LINGUAS: Add uk.
353 * po/po/es.po: Updated.
362 * po/pt_BR.po: Updated.
363 * po/zh_CN.po: Updated.
364 * po/zh_TW.po: Updated.
366 2006-03-21 Thorsten Kukuk <kukuk@thkukuk.de>
368 * configure.in: Remove ALL_LINGUAS.
370 * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
372 2006-03-13 Thorsten Kukuk <kukuk@thkukuk.de>
374 * doc/man/pam_error.3.xml: New.
375 * doc/man/pam_error.3: New, generated from XML file.
376 * doc/man/pam_verror.3: New, generated from XML file.
377 * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
379 * modules/pam_lastlog/Makefile.am: Fix typo.
381 * modules/pam_lastlog/pam_lastlog.c: Move comment for
382 translators in right line.
383 * po/*.po: Update po files with comment for translator.
385 2006-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
387 * doc/man/Makefile.am: Add new manual pages.
389 * doc/man/pam.conf.5.xml: Replace link with content
391 * doc/man/pam.conf.5: Regenerated from XML file.
393 * doc/man/pam_info.3.xml: New.
394 * doc/man/pam_info.3: New, generated from XML file.
395 * doc/man/pam_vinfo.3: New, generated from XML file.
397 * doc/man/pam_conv.3.xml: New.
398 * doc/man/pam_conv.3: New, generated from XML file.
400 * doc/man/pam_putenv.3.xml: New.
401 * doc/man/pam_putenv.3: New, generated from XML file.
403 * doc/man/pam_getenv.3.xml: New.
404 * doc/man/pam_getenv.3: New, generated from XML file.
406 * doc/man/pam_getenvlist.3.xml: New.
407 * doc/man/pam_getenvlist.3: New, generated from XML file.
409 * libpam/pam_item.c (pam_get_user): Check for valid pamh before
412 * configure.in: create tests/Makefile
413 * Makefile.am (SUBDIRS): Add tests
414 * tests/Makefile.am: New.
415 * tests/tst-dlopen.c: New.
416 * tests/tst-pam_acct_mgmt.c: New.
417 * tests/tst-pam_authenticate.c: New.
418 * tests/tst-pam_chauthtok.c: New.
419 * tests/tst-pam_close_session.c: New.
420 * tests/tst-pam_end.c: New.
421 * tests/tst-pam_fail_delay.c: New.
422 * tests/tst-pam_getenvlist.c: New.
423 * tests/tst-pam_get_item.c: New.
424 * tests/tst-pam_open_session.c: New.
425 * tests/tst-pam_setcred.c: New.
426 * tests/tst-pam_set_item.c: New.
427 * tests/tst-pam_start.c: New.
428 * tests/tst-pam_get_user.c: New.
430 * modules/pam_access/Makefile.am: Add rules for make check
431 * modules/pam_access/tst-pam_access: New
432 * modules/pam_cracklib/Makefile.am: Add rules for make check
433 * modules/pam_cracklib/tst-pam_cracklib: New
434 * modules/pam_debug/Makefile.am: Add rules for make check
435 * modules/pam_debug/tst-pam_debug: New
436 * modules/pam_deny/Makefile.am: Add rules for make check
437 * modules/pam_deny/tst-pam_deny: New
438 * modules/pam_echo/Makefile.am: Add rules for make check
439 * modules/pam_echo/tst-pam_echo: New
440 * modules/pam_env/Makefile.am: Add rules for make check
441 * modules/pam_env/tst-pam_env: New
442 * modules/pam_exec/Makefile.am: Add rules for make check
443 * modules/pam_exec/tst-pam_exec: New
444 * modules/pam_filter/Makefile.am: Add rules for make check
445 * modules/pam_filter/tst-pam_filter: New
446 * modules/pam_ftp/Makefile.am: Add rules for make check
447 * modules/pam_ftp/tst-pam_ftp: New
448 * modules/pam_group/Makefile.am: Add rules for make check
449 * modules/pam_group/tst-pam_group: New
450 * modules/pam_issue/Makefile.am: Add rules for make check
451 * modules/pam_issue/tst-pam_issue: New
452 * modules/pam_lastlog/Makefile.am: Add rules for make check
453 * modules/pam_lastlog/tst-pam_lastlog: New
454 * modules/pam_limits/Makefile.am: Add rules for make check
455 * modules/pam_limits/tst-pam_limits: New
456 * modules/pam_listfile/Makefile.am: Add rules for make check
457 * modules/pam_listfile/tst-pam_listfile: New
458 * modules/pam_localuser/Makefile.am: Add rules for make check
459 * modules/pam_localuser/tst-pam_localuser: New
460 * modules/pam_mail/Makefile.am: Add rules for make check
461 * modules/pam_mail/tst-pam_mail: New
462 * modules/pam_mkhomedir/Makefile.am: Add rules for make check
463 * modules/pam_mkhomedir/tst-pam_mkhomedir: New
464 * modules/pam_motd/Makefile.am: Add rules for make check
465 * modules/pam_motd/tst-pam_motd: New
466 * modules/pam_nologin/Makefile.am: Add rules for make check
467 * modules/pam_nologin/tst-pam_nologin: New
468 * modules/pam_permit/Makefile.am: Add rules for make check
469 * modules/pam_permit/tst-pam_permit: New
470 * modules/pam_rhosts/Makefile.am: Add rules for make check
471 * modules/pam_rhosts/tst-pam_rhosts: New
472 * modules/pam_rootok/Makefile.am: Add rules for make check
473 * modules/pam_rootok/tst-pam_rootok: New
474 * modules/pam_securetty/Makefile.am: Add rules for make check
475 * modules/pam_securetty/tst-pam_securetty: New
476 * modules/pam_selinux/Makefile.am: Add rules for make check
477 * modules/pam_selinux/tst-pam_selinux: New
478 * modules/pam_shells/Makefile.am: Add rules for make check
479 * modules/pam_shells/tst-pam_shells: New
480 * modules/pam_stress/Makefile.am: Add rules for make check
481 * modules/pam_stress/tst-pam_stress: New
482 * modules/pam_succeed_if/Makefile.am: Add rules for make check
483 * modules/pam_succeed_if/tst-pam_succeed_if: New
484 * modules/pam_tally/Makefile.am: Add rules for make check
485 * modules/pam_tally/tst-pam_tally: New
486 * modules/pam_time/Makefile.am: Add rules for make check
487 * modules/pam_time/tst-pam_time: New
488 * modules/pam_umask/Makefile.am: Add rules for make check
489 * modules/pam_umask/tst-pam_umask: New
490 * modules/pam_unix/Makefile.am: Add rules for make check
491 * modules/pam_unix/tst-pam_unix: New
492 * modules/pam_userdb/Makefile.am: Add rules for make check
493 * modules/pam_userdb/tst-pam_userdb: New
494 * modules/pam_warn/Makefile.am: Add rules for make check
495 * modules/pam_warn/tst-pam_warn: New
496 * modules/pam_wheel/Makefile.am: Add rules for make check
497 * modules/pam_wheel/tst-pam_wheel: New
498 * modules/pam_xauth/Makefile.am: Add rules for make check
499 * modules/pam_xauth/tst-pam_xauth: New
501 2006-03-11 Thorsten Kukuk <kukuk@thkukuk.de>
503 * doc/man/pam_fail_delay.3.xml: New.
504 * doc/man/pam_fail_delay.3: New, generated from xml.
505 * doc/man/pam_prompt.3.xml: New.
506 * doc/man/pam_prompt.3: New, generated from xml.
507 * doc/man/pam_syslog.3.xml: New.
508 * doc/man/pam_syslog.3: New, generated from xml.
509 * doc/man/pam_vprompt.3: New, generated from xml.
510 * doc/man/pam_vsyslog.3: New, generated from xml.
512 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
514 * po/km.po: Update Khmer translation.
516 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
518 * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
519 version from #1425487.
520 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
521 * modules/pam_succeed_if/Makefile.am: Include XML rules.
522 * modules/pam_succeed_if/README.xml: New.
523 * modules/pam_succeed_if/README: Regenerated from xml.
524 * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
527 2006-02-22 Thorsten Kukuk <kukuk@thkukuk.de>
529 * configure.in: Fix check for incomplete libaudit installations
530 (Patch from Ruediger Oertel <ro@suse.de>).
532 * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
533 correct last_login field [#1427401].
535 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
536 format string for translation to allow reorder [#1428269].
537 * po/*.po: Update with last pam_lastlog change.
540 2006-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
542 * doc/man/Makefile.am: Add new manual pages.
543 * doc/man/pam_end.3: Regenerated from xml file.
544 * doc/man/pam_end.3.xml: Document freeing of item data.
545 * doc/man/pam_get_user.3: New.
546 * doc/man/pam_get_user.3.xml: New.
547 * modules/pam_access/access.conf.5.xml: Fix typos.
548 * modules/pam_env/Makefile.am: Add new manual pages.
549 * modules/pam_env/README: Regenerate from xml file.
550 * modules/pam_env/README.xml: New.
551 * modules/pam_env/pam_env.8: New.
552 * modules/pam_env/pam_env.8.xml: New.
553 * modules/pam_env/pam_env.conf.5: New.
554 * modules/pam_env/pam_env.conf.5.xml New.
556 2006-02-14 Thorsten Kukuk <kukuk@thkukuk.de>
558 * po/fi.po: Updated translations.
559 * po/pl.po: Likewise.
560 * po/km.po: New translation.
561 * configure.in: Add km as new language.
563 2006-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
565 * modules/pam_echo/pam_echo.8.xml: New.
566 * modules/pam_echo/pam_echo.8: Regenerated from xml file.
567 * modules/pam_echo/Makefile.am: Include Make.xml.rules.
568 * modules/pam_echo/pam_echo.c: Fix return value.
570 * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
572 2006-02-12 Thorsten Kukuk <kukuk@thkukuk.de>
574 * configure.in: Add doc/man/Makefile.
575 * Make.xml.rules: Enable xincludes for manual pages.
576 * doc/Makefile.am (EXRA_DIST): Remove manual pages.
577 (SUBDIR): Add man subdirectory.
578 * doc/man/Makefile.am: New.
579 * doc/man/pam_acct_mgmt.3: New.
580 * doc/man/pam_acct_mgmt.3.xml: New.
581 * doc/man/pam_get_data.3: New.
582 * doc/man/pam_get_data.3.xml: New.
583 * doc/man/pam_set_data.3: New.
584 * doc/man/pam_set_data.3.xml: New.
585 * doc/man/pam.8.xml: New.
586 * doc/man/pam.8: Regenerated from xml file.
587 * doc/man/pam_authenticate.3.xml: New.
588 * doc/man/pam_authenticate.3: Regenerated from xml file.
589 * doc/man/pam_chauthtok.3.xml: New.
590 * doc/man/pam_chauthtok.3: Regenerated from xml file.
591 * doc/man/pam_close_session.3.xml: New.
592 * doc/man/pam_close_session.3: Regenerated from xml file.
593 * doc/man/pam_end.3.xml: New.
594 * doc/man/pam_end.3: Regenerated from xml file.
595 * doc/man/pam_fail_delay.3.xml: New.
596 * doc/man/pam_fail_delay.3: Regenerated from xml file.
597 * doc/man/pam_get_item.3.xml: New.
598 * doc/man/pam_get_item.3: Regenerated from xml file.
599 * doc/man/pam_item_types.inc.xml: New.
600 * doc/man/pam_open_session.3.xml: New.
601 * doc/man/pam_open_session.3: Regenerated from xml file.
602 * doc/man/pam_set_item.3.xml: New.
603 * doc/man/pam_set_item.3: Regenerated from xml file.
604 * doc/man/pam_setcred.3.xml: New.
605 * doc/man/pam_setcred.3: Regenerated from xml file.
606 * doc/man/pam_start.3.xml: New.
607 * doc/man/pam_start.3: Regenerated from xml file.
608 * doc/man/pam_strerror.3.xml: New.
609 * doc/man/pam_strerror.3: Regenerated from xml file.
610 * doc/man/template-man: Removed.
612 2006-02-10 Thorsten Kukuk <kukuk@thkukuk.de>
614 * configure.in: Remove pam_pwdb support.
615 * modules/Makefile.am: remove pam_pwdb.
616 * modules/pam_pwdb: Remove complete directory.
617 * libpam/Makefile.am: Remove LIBPWDB references.
618 * libpam/pam_static_modules.h: Remove pam_pwdb references.
619 * doc/modules/pam_pwdb.sgml: Removed.
620 * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
621 * doc/pam_source.sgml: Remove references to libpwdb.
622 * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
623 * doc/modules/pam_group.sgml: Likewise.
624 * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
625 * doc/modules/pam_userdb.sgml: Likewise.
626 * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
628 * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
629 * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
631 * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
632 * modules/pam_cracklib/Makefile.am: Likewise.
633 * modules/pam_deny/Makefile.am: Likewise.
634 * modules/pam_exec/Makefile.am: Likewise.
636 2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
638 * configure.in: Check for text browser.
639 * Make.xml.rules: Add rule to generate README from README.xml.
641 * modules/pam_access/Makefile.am: Include Make.xml.rules.
642 * modules/pam_access/README: Regenerated from README.xml.
643 * modules/pam_access/README.xml: New.
644 * modules/pam_access/access.conf: Extended by new examples.
645 * modules/pam_access/access.conf.5: New, generated from xml file.
646 * modules/pam_access/access.conf.5.xml: New.
647 * modules/pam_access/pam_access.8: New, generated from xml file.
648 * modules/pam_access/pam_access.8.xml: New.
649 * modules/pam_access/pam_access.c: Add rules for IPv6 and
651 Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
653 * modules/pam_deny/Makefile.am: Include Make.xml.rules.
654 * modules/pam_deny/pam_deny.8.xml: New.
655 * modules/pam_deny/pam_deny.8: New, generated from xml file.
656 * modules/pam_deny/README.xml: New.
657 * modules/pam_deny/README: Regenerated from xml file.
659 * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
660 * modules/pam_cracklib/pam_cracklib.8.xml: New.
661 * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
662 * modules/pam_cracklib/README.xml: New.
663 * modules/pam_cracklib/README: Regenerated from xml file.
665 * modules/pam_exec/Makefile.am: Add rule to generate README.
666 * modules/pam_exec/README: Regenerated from xml file.
667 * modules/pam_exec/pam_exec.8: Regenerated from xml file.
668 * modules/pam_exec/pam_exec.8.xml: Syntax files.
670 2006-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
673 * po/pt.po: Update translations.
674 * configure.in: Add nl as new language.
676 2006-01-30 Thorsten Kukuk <kukuk@thkukuk.de>
678 * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
679 * modules/pam_exec/Makefile.am: Include Make.xml.rules.
681 * Make.xml.rules: New.
683 * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
685 2006-01-27 Thorsten Kukuk <kukuk@thkukuk.de>
687 * configure.in: Prefer libdb over libndbm, fix check for
688 libcrack and remove not needed BACKUP_LIBS.
690 2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
692 * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
694 * po/de.po: Fix one translation.
696 * configure.in: Add modules/pam_exec.
697 * modules/Makefile.am: Add pam_exec subdirectory.
698 * modules/pam_exec/README: New.
699 * modules/pam_exec/Makefile.am: New.
700 * modules/pam_exec/pam_exec.8: New.
701 * modules/pam_exec/pam_exec.c: New.
702 * modules/pam_exec/pam_exec.8.xml: New.
703 * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
704 * po/*.po: Merge new pam_exec strings.
706 * libpam/pam_static_modules.h: New.
707 * Makefile.am: Reorder subdirectories for static modules.
708 * configure.in: Add --enable-static-modules option.
709 * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
710 necessary, add pam_static_modules.h, link against all PAM
711 module object files if STATIC_MODULES is defined.
712 * libpam/pam_static.c: Remove old _static_module* includes,
713 include pam_static_modules.h.
715 * configure.in: Add checks for xsltproc, xmllint and docbook
717 * m4/jh_path_xml_catalog.m4: New.
719 2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
721 * modules/pam_succeed_if/pam_succeed_if.c: Add support for
723 * modules/pam_xauth/pam_xauth.c: Likewise.
725 * libpam/pam_static.c (_pam_open_static_handler): Add pamh
727 * libpam/pam_private.h: Adjust prototype.
728 * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
729 _pam_open_static_handler call.
731 * configure.in: Don't define PAM_DYNAMIC.
732 * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
733 include pam_dynamic.h
734 * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
735 exclude functions if we compile with PAM_STATIC.
736 * libpam/pam_dynamic.h: Remove.
737 * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
738 * libpam/Makefile.am: Bump version number of libpam, remove
741 2006-01-21 Thorsten Kukuk <kukuk@thkukuk.de>
743 * modules/pam_listfile/pam_listfile.c: Add support for session
744 and password management.
746 2006-01-19 Thorsten Kukuk <kukuk@suse.de>
748 * doc/specs/Makefile.am (spec): Add padout to fix parallel
749 build (Reported by Andreas Haumer <andreas@xss.co.at>).
751 2006-01-15 Thorsten Kukuk <kukuk@thkukuk.de>
753 * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
756 2006-01-13 Thorsten Kukuk <kukuk@thkukuk.de>
758 * release version 0.99.3.0
760 * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
763 * modules/pam_umask/pam_umask.c (search_key): Don't ignore
764 EOF/error return value from fgets().
766 * configure.in: Check for getline and getdelim
768 * po/fi.po: Add new translations.
769 * po/de.po: Likewise.
770 * po/es.po: Likewise.
771 * po/fr.po: Likewise.
772 * po/it.po: Likewise.
773 * po/ja.po: Likewise.
774 * po/pt_BR.po: Likewise.
775 * po/zh_CH.po: Likewise.
776 * po/zh_TW.po: Likewise.
778 2006-01-13 Dmitry V. Levin <ldv@altlinux.org>
780 * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
781 call with %m specifier.
783 2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
785 * configure.in: Add check for -fpie/-pie
786 * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
787 upperLOWER with -fpie/-pie if supported.
788 * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
789 with -fpie/-pie if supported.
791 2006-01-12 Steve Grubb <sgrubb@redhat.com>
793 * configure.in: Add check for audit library.
794 * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
795 (libpam_la_SOURCES): Add pam_audit.c.
796 * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
797 * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
798 * libpam/pam_password.c (pam_chauthtok): Likewise.
799 * libpam/pam_session.c (pam_open_session),
800 (pam_close_session): Likewise.
801 * libpam/pam_private.h: Add audit_state member to pam_handle,
802 declare _pam_auditlog and _pam_audit_end.
803 * libpam/pam_start.c (pam_start): Initialize audit_state.
804 * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
806 * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
807 * NEWS: Note about added auditing.
809 2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de>
811 * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
813 * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
814 if we compile libpam itself.
816 * po/hu.po: Update with new translations.
818 2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
820 * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
821 instead of PAM_AUTHTOK_RECOVER_ERR.
822 * modules/pam_pwdb/support.-c: Likewise.
823 * modules/pam_unix/support.c: Likewise.
824 * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
825 * libpam/pam_strerror.c (pam_strerror): Likewise.
827 * libpam/include/security/_pam_compat.h: Define
828 PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
830 * libpam/include/security/_pam_types.h: Rename
831 PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
833 2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
835 * libpam/include/security/_pam_types.h: Remove nonnull attribute
836 from third paramter (item) of pam_get_item.
837 * libpam/Makefile.am: Bump version number of shared library.
839 2005-12-21 Tomas Mraz <t8m@centrum.cz>
841 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
842 (evaluate_notingroup): Simplified.
843 (evaluate_innetgr), (evaluate_notinnetgr): New functions.
844 (evaluate): Added calls to evaluate_(not)innetgr().
845 * modules/pam_succeed_if/README: Documented netgroup matching.
846 * NEWS: Mentioned the added netgroup matching support.
848 2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
850 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
851 strftime instead of ctime.
853 * po/de.po: Fix typo.
855 2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de>
857 * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
858 Reported by Charles_H_Bedford@nbc.gov.
860 * modules/pam_time/pam_time.c (check_account): Implement
861 support for netgroups.
863 * modules/pam_time/time.conf: Document usage of netgroups.
865 2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
867 * modules/pam_group/pam_group.c (check_account): Implement
868 support for netgroups.
870 * modules/pam_group/group.conf: Add all documentation to this
871 example config file and don't reference to outdated configs.
873 * modules/pam_group/README: New.
875 * modules/pam_group/Makefile.am: Add README to EXTRADIST.
877 2005-12-15 Thorsten Kukuk <kukuk@suse.de>
879 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
880 error if user logins the first time.
882 * modules/pam_lastlog/README: New.
884 * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
886 2005-12-14 Thorsten Kukuk <kukuk@suse.de>
888 * modules/pam_deny/pam_deny.c: Fix comment.
890 * doc/pam_appl.sgml: Fix typo.
892 Reported by Russell Bateman <russ@windofkeltia.com>
894 2005-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
896 * release version 0.99.2.1
898 * po/de.po: Remove new fuzzy entry
900 * NEWS: Add 0.99.2.1 changes
902 * configure.in: bump version number to 0.99.2.1
904 2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
906 Cleanup pam_syslog messages.
908 * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
909 * modules/pam_filter/pam_filter.c (set_filter): Append %m
910 specifier to pam_syslog messages where appropriate.
911 * modules/pam_group/pam_group.c (read_field): Likewise.
912 * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
913 (create_homedir): Do not use make_remark() wrapper, call
914 pam_info() directly. Call pam_syslog() right after failed
915 operation and append %m specifier to pam_syslog messages where
917 * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
918 sequence of malloc(), strcpy() and strcat() calls with asprintf().
919 Append %m specifier to pam_syslog messages where appropriate.
920 * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
921 Append %m specifier to pam_syslog messages where appropriate.
922 * modules/pam_shells/pam_shells.c (perform_check): Likewise.
924 2005-12-12 Tomas Mraz <t8m@centrum.cz>
926 * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
927 * po/Linux-PAM.pot: Likewise.
928 * po/de.po: Likewise.
929 * po/es.po: Likewise.
930 * po/fi.po: Likewise.
931 * po/fr.po: Likewise.
932 * po/hu.po: Likewise.
933 * po/it.po: Likewise.
934 * po/ja.po: Likewise.
935 * po/nb.po: Likewise.
936 * po/pa.po: Likewise.
937 * po/pl.po: Likewise.
938 * po/pt.po: Likewise.
939 * po/pt_BR.po: Likewise.
940 * po/zh_CN.po: Likewise.
941 * po/zh_TW.po: Likewise.
942 * po/de.po: Add new translation, fixed typo in string.
944 2005-12-12 Mike Becher <Mike.Becher@lrz-muenchen.de>
946 * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
948 2005-12-12 Thorsten Kukuk <kukuk@suse.de>
950 * modules/pam_mail/README: Document "quiet" and "standard"
953 2005-12-07 Thorsten Kukuk <kukuk@suse.de>
955 * modules/pam_mail/pam_mail.c: Modify assembling of output
956 for easier translation.
958 * po/de.po: Translate new pam_mail messages.
961 2005-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
963 * po/de.po: Add new translation, fix wrong format specifier.
964 * po/cs.po: Fix wrong format specifier.
965 * po/es.po: Likewise.
966 * po/fi.po: Likewise.
967 * po/fr.po: Likewise.
968 * po/hu.po: Likewise.
969 * po/it.po: Likewise.
970 * po/ja.po: Likewise.
971 * po/nb.po: Likewise.
972 * po/pa.po: Likewise.
973 * po/pl.po: Likewise.
974 * po/pt.po: Likewise.
975 * po/pt_BR.po: Likewise.
976 * po/zh_CN.po: Likewise.
977 * po/zh_TW.po: Likewise.
979 2005-11-24 Dmitry V. Levin <ldv@altlinux.org>
981 * config.h.in: Remove generated file.
982 * .cvsignore: Add config.h.in.
984 * configure.in: Do not check for strerror.
985 * libpam_misc/misc_conv.c (read_string): Replace strerror()
986 call with %m specifier.
987 * libpamc/pamc_converse.c (pamc_converse): Likewise.
988 * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
989 * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
991 * modules/pam_selinux/pam_selinux.c (security_label_tty):
993 (security_restorelabel_tty, security_label_tty): Append %m
994 specifier where appropriate.
995 * modules/pam_selinux/pam_selinux_check.c (main): Replace
996 strerror() call with %m specifier.
997 * modules/pam_unix/pam_unix_passwd.c (save_old_password,
998 _update_passwd, _update_shadow): Likewise.
999 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
1000 * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
1001 * po/Linux-PAM.pot: Update strings from pam_selinux.
1002 * po/cs.po: Likewise.
1003 * po/de.po: Likewise.
1004 * po/es.po: Likewise.
1005 * po/fi.po: Likewise.
1006 * po/fr.po: Likewise.
1007 * po/hu.po: Likewise.
1008 * po/it.po: Likewise.
1009 * po/ja.po: Likewise.
1010 * po/nb.po: Likewise.
1011 * po/pa.po: Likewise.
1012 * po/pl.po: Likewise.
1013 * po/pt.po: Likewise.
1014 * po/pt_BR.po: Likewise.
1015 * po/zh_CN.po: Likewise.
1016 * po/zh_TW.po: Likewise.
1018 2005-11-23 Thorsten Kukuk <kukuk@suse.de>
1020 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
1021 new variable to fix compiler warning.
1023 * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
1024 don't need to start with /dev/.
1026 2005-11-21 Thorsten Kukuk <kukuk@thkukuk.de>
1028 * release version 0.99.2.0
1030 * libpam_misc/Makefile.am: Increase release number (for change
1033 * NEWS: Adjust for 0.99.2.0
1035 2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de>
1037 * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
1038 Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
1040 2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
1042 * libpam/pam_handlers.c: Replace code for all dlopen variants with
1044 * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
1045 * libpam/pam_dynamic.h: Provide prototypes.
1046 For Mac OS X support [#534205]
1048 2005-11-09 Tomas Mraz <t8m@centrum.cz>
1050 * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
1052 * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
1053 full path tty name. Allow unset tty.
1054 (logic_member): Allow matching ':' in tty name.
1055 * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
1056 full path tty name. Allow unset tty.
1057 (logic_member): Allow matching ':' in tty name.
1059 * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
1062 2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
1064 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
1065 correct variable names.
1067 2005-11-06 Steve Langasek <vorlon@debian.org>
1069 * modules/pam_env/pam_env.c: don't treat a missing
1070 /etc/environment as a fatal error when attempting to read it,
1071 and try to read this file by default; this restores the behavior
1072 from Linux-PAM 0.76.
1074 2005-11-02 Tomas Mraz <t8m@centrum.cz>
1076 * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
1079 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
1080 logic when comparing dates to handle corner cases better [#1245888].
1082 2005-10-31 Thorsten Kukuk <kukuk@suse.de>
1084 * modules/pam_filter/pam_filter.c: Use XCASE only if defined
1087 2005-10-27 Thorsten Kukuk <kukuk@suse.de>
1089 * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
1091 2005-10-26 Tomas Mraz <t8m@centrum.cz>
1093 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
1094 modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
1095 modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
1096 uid to 0 before executing the helper if SELinux is enabled.
1097 * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
1098 if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
1101 2005-10-20 Tomas Mraz <t8m@centrum.cz>
1103 * configure.in: Added check for xauth binary and --with-xauth option.
1104 * config.h.in: Added configurable PAM_PATH_XAUTH.
1105 * modules/pam_xauth/README,
1106 modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
1107 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
1108 searching xauth binary on multiple places.
1109 (run_coprocess): Don't use execvp as it can be a security risk.
1111 2005-10-04 Steve Langasek <vorlon@debian.org>
1113 * libpam/include/security/pam_malloc.h,
1114 libpam/include/security/pam_modules.h: Declare public header
1115 files extern "C" so that they are C++-safe.
1117 2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
1118 Steve Langasek <vorlon@debian.org>
1120 Cleanup gratuitous use of strdup().
1121 Fix "missing argument" checks.
1123 * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
1124 to conffile and envfile arguments. Do not use x_strdup() for
1125 conffile and envfile initialization. Fix "missing argument"
1127 (_parse_config_file): Take conffile argument of type "const char *"
1128 instead of "char **". Do not free conffile.
1129 (_parse_env_file): Take env_file argument of type "const char *"
1130 instead of "char **". Do not free env_file.
1131 (pam_sm_setcred): Add const qualifier to conf_file and env_file.
1132 Pass conf_file and env_file to _parse_config_file() and
1133 _parse_env_file() by value.
1134 (pam_sm_open_session): Likewise.
1136 * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
1137 users argument. Do not use x_strdup() for users initialization.
1138 (lookup): Add const qualifier to list argument.
1139 (pam_sm_authenticate): Add const qualifier to users argument.
1141 * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
1142 to maildir argument. Do not use x_strdup() for maildir
1143 initialization. Fix "missing argument" check.
1144 (get_folder): Take path_mail argument of type "const char *"
1145 instead of "char **". Do not free path_mail.
1146 (_do_mail): Add const qualifier to path_mail argument.
1147 Pass path_mail to get_folder() by value.
1149 * modules/pam_motd/pam_motd.c: Include <syslog.h>.
1150 (pam_sm_open_session): Add const qualifier to motd_path.
1151 Do not use x_strdup() for motd_path initialization. Do not
1152 free motd_path. Fix "missing argument" check. Add "unknown
1155 * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
1156 qualifier to database and cryptmode arguments. Fix "missing
1158 (pam_sm_authenticate): Add const qualifier to database and cryptmode.
1159 (pam_sm_acct_mgmt): Likewise.
1161 2005-10-01 Steve Langasek <vorlon@debian.org>
1163 * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
1165 2005-09-30 Steve Langasek <vorlon@debian.org>
1167 * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
1168 gratuitous use of strdup().
1170 2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
1174 * doc/specs/Makefile.am (install-data-local): Install
1176 (all): Copy rfc if we build outside of source directory.
1178 2005-09-27 Thorsten Kukuk <kukuk@suse.de>
1180 * NEWS: Document removal of pam_radius.
1181 * autogen.sh: Make configure script executeable.
1183 * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
1184 (lex.yy.c): Fixed out of tree build.
1186 * conv/pam_conv1/pam_conv.y: Fix main prototype.
1190 * po/POTFILES.in: Remove files not distributed by tar archive
1191 and not containing strings for translation.
1193 2005-09-26 Tomas Mraz <t8m@centrum.cz>
1195 * NEWS: Add a few missing entries from CHANGELOG.
1197 * AUTHORS: Fixed entries for Toady and me.
1199 * Makefile.am (M4_FILES): Fixed out of tree build.
1200 * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
1201 (spec, lex.yy.c): Fixed out of tree build.
1203 * modules/pam_userdb/README: Document try_first_pass and
1204 use_first_pass options, remove use_authtok option.
1207 2005-09-26 Dmitry V. Levin <ldv@altlinux.org>
1209 * NEWS: Mention changes in pam_lastlog.
1211 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
1214 * autogen.sh: Don't generate NEWS file.
1215 * CHANGELOG: Document it as obsolete.
1217 2005-09-26 Tomas Mraz <t8m@centrum.cz>
1219 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
1220 _log_err() -> pam_syslog()
1221 (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
1222 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
1223 _log_err() -> pam_syslog()
1224 * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
1225 (getNISserver, _unix_run_shadow_binary, _update_passwd,
1226 _update_shadow, _do_setpass, _pam_unix_approve_pass,
1227 pam_sm_chauthtok): _log_err() -> pam_syslog()
1228 * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
1229 (pam_sm_open_session, pam_sm_close_session):
1230 _log_err() -> pam_syslog()
1231 * modules/pam_unix/support.c (_log_err, converse): removed
1232 (_make_remark): use pam_prompt() instead of converse()
1233 (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
1234 _unix_verify_password, _unix_read_password):
1235 _log_err() -> pam_syslog()
1236 _cleanup(), _unix_cleanup(): Silence unused param warnings.
1237 (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
1238 _unix_run_helper_binary): Silence incorrect type warnings.
1239 (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
1240 instead of converse().
1241 * modules/pam_unix/support.h (_log_err): removed
1242 * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
1244 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
1246 * configure.in: Add doc/specs/Makefile.
1247 * Makefile.am: Add releasedocs rule.
1248 * doc/Makefile.am: Add specs subdir, remove files from specs
1249 directory, add rfc86.0.txt to releasedocs.
1250 * doc/specs/Makefile.am: New file.
1251 * doc/specs/formatter/parse.y: move from here ...
1252 * doc/specs/parse.y: ... here.
1253 * doc/specs/formatter/parse.lex: move from here ...
1254 * doc/specs/parse.lex: ... here.
1256 * modules/pam_mail/pam_mail.c: Mark missing strings for translation
1257 * po/Linux-PAM.pot: Add new strings from pam_mail
1258 * po/cs.po: Likewise.
1259 * po/de.po: Likewise.
1260 * po/es.po: Likewise.
1261 * po/fi.po: Likewise.
1262 * po/fr.po: Likewise.
1263 * po/hu.po: Likewise.
1264 * po/it.po: Likewise.
1265 * po/ja.po: Likewise.
1266 * po/nb.po: Likewise.
1267 * po/pa.po: Likewise.
1268 * po/pl.po: Likewise.
1269 * po/pt.po: Likewise.
1270 * po/pt_BR.po: Likewise.
1271 * po/zh_CN.po: Likewise.
1272 * po/zh_TW.po: Likewise.
1274 2005-09-23 Tomas Mraz <t8m@centrum.cz>
1276 * modules/pam_access/pam_access.c (from_match): Support NULL from.
1277 (string_match): Support NULL string, add NONE keyword matching it.
1278 (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
1279 * modules/pam_access/access.conf: NONE keyword description
1280 * modules/pam_access/README: NONE keyword description
1282 2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
1284 * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
1285 pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
1286 text of log messages.
1287 (pam_sm_open_session): Replace sequence of malloc(), strcpy()
1288 and strcat() calls with asprintf(). Replace syslog() calls
1291 * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
1292 instead of memcmp() for string comparison.
1294 2005-09-21 Dmitry V. Levin <ldv@altlinux.org>
1296 * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
1297 (parse_args): Add pam_handle_t* argument. Log unrecognized
1299 (perform_check): Log pam_get_user() and malloc() failures.
1300 (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
1301 Pass pam_handle_t* to parse_args().
1303 * modules/pam_mail/pam_mail.c: Include <errno.h>.
1304 Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
1305 NO_MAIL_STANDARD_FORMAT macros.
1306 (parse_args, get_folder): Cleanup error messages.
1307 (get_folder): Fix leak of the path_mail variable in case of
1308 pam_get_user() failure. Cleanup memory management.
1309 (get_mail_status): Add pam_handle_t* argument. Fix leaks of
1310 namelist variable. Cleanup memory management. Log memory
1311 allocation failures. Remove 250-byte limit on Maildir pathname.
1312 (report_mail): Mark text messages for translation.
1313 (_do_mail): Cleanup memory management. Pass pam_handle_t*
1314 to get_mail_status().
1316 * po/Linux-PAM.pot: Update with new strings from pam_mail for
1318 * po/cs.po: Likewise.
1319 * po/de.po: Likewise.
1320 * po/es.po: Likewise.
1321 * po/fi.po: Likewise.
1322 * po/fr.po: Likewise.
1323 * po/hu.po: Likewise.
1324 * po/it.po: Likewise.
1325 * po/ja.po: Likewise.
1326 * po/nb.po: Likewise.
1327 * po/pa.po: Likewise.
1328 * po/pl.po: Likewise.
1329 * po/pt.po: Likewise.
1330 * po/pt_BR.po: Likewise.
1331 * po/zh_CN.po: Likewise.
1332 * po/zh_TW.po: Likewise.
1334 2005-09-20 Thorsten Kukuk <kukuk@suse.de>
1336 * configure.in: Add finish translation.
1339 * acinclude.m4: remove libprelude macros.
1340 * m4/libprelude.m4: New.
1342 * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
1344 * libpamc/Makefile.am (EXTRA_DIST): Add License.
1346 See CHANGELOG for earlier changes.