1 2010-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
3 * modules/pam_umask/pam_umask.8.xml: Remove comparisation of
4 gid and uid for usergroups.
5 * modules/pam_umask/pam_umask.c (setup_limits_from_gecos): Likewise.
8 * configure.in: Don't check for libxcrypt if no xcrypt.h exists,
9 fix typo introduced with 1.1.1.
10 Reported by Diego Elio “Flameeyes” Pettenò.
12 2010-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
14 * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Call
15 setfsuid to be allowed to remove temporary files (#3010705).
16 (pam_sm_open_session): Call fchown with correct permissions.
18 2010-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
20 * modules/pam_tty_audit/Makefile.am (TESTS): Add tst-pam_tty_audit.
21 * modules/pam_tty_audit/tst-pam_tty_audit: New.
23 2010-06-07 Steve Langasek <vorlon@debian.org>
25 * modules/pam_tty_audit/Makefile.am: If we don't have the libraries
26 required for building pam_tty_audit, we shouldn't install the manpage
29 2010-05-27 Thorsten Kukuk <kukuk@thkukuk.de>
31 * modules/pam_userdb/pam_userdb.c: Define HAVE_DBM
32 for BerkDB 5.0 support. Patch by Diego Elio Pettenò.
34 2010-04-15 Thorsten Kukuk <kukuk@thkukuk.de>
36 * modules/pam_exec/pam_exec.8.xml: Fix example.
38 2010-04-13 Thorsten Kukuk <kukuk@thkukuk.de>
40 * modules/pam_pwhistory/opasswd.c: Fix compilation if
41 cyprt_r() is not available.
42 * configure.in: check for getutent_r.
43 * modules/pam_timestamp/pam_timestamp.c: Use getutent()
44 if getutent_r() does not exist.
45 Patch from Diego Elio “Flameeyes” Pettenò.
47 2010-04-12 Thorsten Kukuk <kukuk@thkukuk.de>
49 * doc/man/pam.conf-syntax.xml: Better documentation of
50 "actionN". Patch from Michal Soltys <soltys@ziu.info>.
52 2010-04-06 Thorsten Kukuk <kukuk@thkukuk.de>
54 * modules/pam_rootok/pam_rootok.c: Add support for acct_mgmt
56 * modules/pam_rootok/pam_rootok.8.xml: Document new module
59 2010-03-29 Thorsten Kukuk <kukuk@thkukuk.de>
61 * po/ar.po: Add missing Plural-Forms entry to header.
63 2010-03-25 Daniel Nylander <po@danielnylander.se>
65 * po/sv.po: Updated translations.
67 2010-03-24 Ani Peter <anipeter@fedoraproject.org>
69 * po/ml.po: Updated translations.
71 2010-03-08 Yuri Chornoivan <yurchor@ukr.net>
73 * po/uk.po: Updated translations.
75 2010-02-09 Tomas Mraz <t8m@centrum.cz>
77 * libpam/pam_get_authtok.c (pam_get_authtok_internal): Fix
78 regression in the new password prompt.
80 2010-01-04 Elad <el.il@doom.co.il>
82 * po/he.po: New translation to Hebrew.
83 * po/LINGUAS: Add Hebrew to the list.
85 2009-12-16 Thorsten Kukuk <kukuk@suse.de>
87 * release version 1.1.1
89 * NEWS: Adjust for 1.1.1
90 * configure.in: Likewise.
91 * doc/adg/Linux-PAM_ADG.xml: Likewise.
92 * doc/mwg/Linux-PAM_MWG.xml: Likewise.
93 * doc/sag/Linux-PAM_SAG.xml: Likewise.
94 * po/*.po: Regenerated.
96 2009-12-08 Thorsten Kukuk <kukuk@thkukuk.de>
98 * configure.in: Rename DEBUG to PAM_DEBUG.
99 * libpam/pam_env.c: Likewise
100 * libpam/pam_handlers.c: Likewise
101 * libpam/pam_miscc.c: Likewise
102 * libpam/pam_password.c: Likewise
103 * libpam/include/security/_pam_macros.h: Likewise
104 * libpamc/test/modules/pam_secret.c: Likewise
105 * modules/pam_group/pam_group.c: Likewise
106 * modules/pam_listfile/pam_listfile.c: Likewise
107 * modules/pam_unix/pam_unix_auth.c: Likewise
108 * modules/pam_unix/pam_unix_passwd.c: Likewise
110 2009-12-08 Tomas Mraz <t8m@centrum.cz>
112 * modules/pam_unix/passverify.c(unix_update_shadow): Create a shadow
113 entry if not present in the file.
115 * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Remove
116 unused function and variable.
118 2009-11-19 Tomas Mraz <t8m@centrum.cz>
120 * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return
121 PAM_AUTH_ERR from the module if sepermit_lock() fails.
123 2009-11-18 Tomas Mraz <t8m@centrum.cz>
125 * modules/pam_access/pam_access.c(user_match): Revert the netgroup
126 match to the original behavior, add new syntax for adding the local
128 * modules/pam_access/access.conf.5.xml: Document the new syntax
129 for adding the local hostname to the netgroup match.
131 2009-11-10 Thorsten Kukuk <kukuk@suse.de>
133 * doc/man/pam_get_authtok.3.xml: Document pam_get_authtok_noverify
134 and pam_get_authtok_verify.
136 * libpam/Makefile.am (libpam_la_LDFLAGS): Bump revesion of libpam.
138 * libpam/pam_get_authtok.c (pam_get_authtok_internal): Renamed
139 from pam_get_authtok, add flags argument, always check return
142 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Use
143 pam_get_authtok_noverify and pam_get_authtok_verify.
145 * libpam/include/security/pam_ext.h: Add prototypes for
146 pam_get_authtok_noverify and pam_get_authtok_verify.
148 * libpam/libpam.map: Add new pam_get_authtok_* functions.
150 2009-11-02 Ani Peter <anipeter@fedoraproject.org>
152 * po/ml.po: Updated translations.
154 2009-11-02 Tomas Mraz <t8m@centrum.cz>
156 * modules/pam_sepermit/Makefile.am: Add sepermit.conf(5) manual page.
157 * modules/pam_sepermit/pam_sepermit.8.xml: Add reference to
158 sepermit.conf(5). Drop some redundant text.
159 * modules/pam_sepermit/sepermit.conf.5.xml: New file.
161 * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Implement the ignore
162 option in sepermit.conf.
164 2009-10-29 Tomas Mraz <t8m@centrum.cz>
166 * modules/pam_xauth/Makefile.am: Link with libselinux.
167 * modules/pam_xauth/pam_xauth.c(pam_sm_open_session): Call
168 setfscreatecon() if selinux is enabled to create the .xauth file
169 with the right label. Original idea by Dan Walsh.
171 2009-10-08 Tomas Mraz <t8m@centrum.cz>
173 * modules/pam_tty_audit/pam_tty_audit.8.xml: Add notice about aureport
174 add SEE ALSO section.
176 2009-10-06 Tomas Mraz <t8m@centrum.cz>
178 * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Just
179 call pam_modutil_user_in_group_nam_nam() instead of reimplementation
182 2009-10-05 Kris Thomsen <lakristho@gmail.com>
184 * po/da.po: Updated translations.
186 2009-09-29 Piotr Drąg <piotrdrag@gmail.com>
188 * po/pl.po: Updated translations.
190 2009-09-21 Yulia Poyarkova <yulia.poyarkova@redhat.com>
192 * po/ru.po: Updated translations.
194 2009-09-17 Kiyoto Hashida <khashida@redhat.com>
196 * po/ja.po: Updated translations.
198 2009-09-17 Eunju Kim <eukim@redhat.com>
200 * po/ko.po: Updated translations.
202 2009-09-17 Yulia Poyarkova <yulia.poyarkova@redhat.com>
204 * po/ru.po: Updated translations.
206 2009-09-10 Steve Langasek <vorlon@debian.org>
208 * modules/pam_securetty/pam_securetty.c: pam_securetty should not
209 return PAM_USER_UNKNOWN when the tty is secure, regardless of what
210 was entered as a username.
211 Patch from Nicolas François <nicolas.francois@centraliens.net>.
213 2009-08-31 Steve Langasek <vorlon@debian.org>
215 * modules/pam_namespace/namespace.init: make this portable to POSIX
216 awk, instead of using GNU awk extensions.
218 2009-08-25 Steve Langasek <vorlon@debian.org>
220 * modules/pam_sepermit/pam_sepermit.8.xml: fix up one reference
221 to pam.d(8) left behind because I've forgotten how CVS works
222 * po/es.po: fix missing whitespace in password prompts.
224 2009-08-24 Steve Langasek <vorlon@debian.org>
226 * doc/pam_get_authtok.3.xml: grammar fix.
227 * doc/adg/Linux-PAM-ADG.xml: Likewise.
228 * doc/mwg/Linux-PAM_MWG.xml: Likewise.
229 * doc/man/pam_setcred.3.xml: fix a typo.
231 2009-07-21 Thorsten Kukuk <kukuk@thkukuk.de>
233 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Delete
234 new token if it does not match strength criteria.
236 2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
238 * modules/pam_unix/yppasswd_xdr.c: Remove unnecessary header files.
240 * modules/pam_unix/support.c (_unix_getpwnam): Only compile in NIS
241 support if all necessary functions exist.
243 * modules/pam_unix/pam_unix_passwd.c (getNISserver): Add debug
244 option, handle correct if OS has no NIS support.
246 * modules/pam_access/pam_access.c (netgroup_match): Check if
247 yp_get_default_domain and innetgr are available at compile time.
249 * configure.in: Check for functions: innetgr, getdomainname
250 check for headers: rpcsvc/ypclnt.h, rpcsvc/yp_prot.h.
252 2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
254 * modules/pam_unix/pam_unix.8.xml: Fix blowfish description.
255 Reported by Diego E. “Flameeyes” Pettenò.
257 2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
259 * modules/pam_namespace/Makefile.am: Fix make maintainer-clean,
260 fix docu dependencies.
262 * modules/pam_xauth/Makefile.am: Fix make maintainer-clean.
263 * modules/pam_access/Makefile.am: Likewise.
264 * modules/pam_debug/Makefile.am: Likewise.
265 * modules/pam_deny/Makefile.am: Likewise.
266 * modules/pam_echo/Makefile.am: Likewise.
267 * modules/pam_env/Makefile.am: Likewise.
268 * modules/pam_faildelay/Makefile.am: Likewise.
269 * modules/pam_ftp/Makefile.am: Likewise.
270 * modules/pam_group/Makefile.am: Likewise.
271 * modules/pam_issue/Makefile.am: Likewise.
272 * modules/pam_keyinit/Makefile.am: Likewise.
273 * modules/pam_lastlog/Makefile.am: Likewise.
274 * modules/pam_limits/Makefile.am: Likewise.
275 * modules/pam_listfile/Makefile.am: Likewise.
276 * modules/pam_localuser/Makefile.am: Likewise.
277 * modules/pam_loginuid/Makefile.am: Likewise.
278 * modules/pam_mail/Makefile.am: Likewise.
279 * modules/pam_mkhomedir/Makefile.am: Likewise.
280 * modules/pam_motd/Makefile.am: Likewise.
281 * modules/pam_nologin/Makefile.am: Likewise.
282 * modules/pam_pwhistory/Makefile.am: Likewise.
283 * modules/pam_rhosts/Makefile.am: Likewise.
284 * modules/pam_rootok/Makefile.am: Likewise.
285 * modules/pam_securetty/Makefile.am: Likewise.
286 * modules/pam_shells/Makefile.am: Likewise.
287 * modules/pam_succeed_if/Makefile.am: Likewise.
288 * modules/pam_tally2/Makefile.am: Likewise.
289 * modules/pam_tally/Makefile.am: Likewise.
290 * modules/pam_time/Makefile.am: Likewise.
291 * modules/pam_timestamp/Makefile.am: Likewise.
292 * modules/pam_tty_audit/Makefile.am: Likewise.
293 * modules/pam_umask/Makefile.am: Likewise.
294 * modules/pam_unix/Makefile.am: Likewise.
295 * modules/pam_warn/Makefile.am: Likewise.
296 * modules/pam_wheel/Makefile.am: Likewise.
297 * modules/pam_filter/Makefile.am: Likewise.
299 * configure.in: Make regeneration of docu configureable,
300 rename enable_man to enable_docu.
302 * modules/pam_env/pam_env.c (_pam_parse): Fix typo in debug
305 * modules/pam_cracklib/Makefile.am: Don't install docu if
306 module is disabled for building.
307 * modules/pam_userdb/Makefile.am: Likewise.
309 * modules/pam_unix/pam_unix_passwd.c: Remove dead SELinux
312 * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Fix
313 usage of wrong variable [bug#2809661].
315 2009-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
317 * configure.in: Rename crypt_gensalt_rn to crypt_gensalt_r
318 * modules/pam_unix/passverify.c: Likewise.
320 2009-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
322 * release version 1.1.0
324 2009-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
326 * doc/sag/Linux-PAM_SAG.xml: Fix typos.
327 * doc/adg/Linux-PAM_ADG.xml: Likewise.
328 * doc/mwg/Linux-PAM_MWG.xml: Likewise.
330 2009-06-08 Rajesh Ranjan <rajesh672@gmail.com>
332 * po/hi.po: Updated translations.
334 2009-06-01 Jaswinder Singh <jsingh@redhat.com>
336 * po/pa.po: Updated translations.
338 2009-06-01 Tomáš Mráz <t8m@centrum.cz>
340 * modules/pam_pwhistory/opasswd.c (save_old_password): Don't
341 call fclose() on NULL descriptor. Found by Steve Grubb.
343 2009-06-01 Ville Skyttä <ville.skytta@iki.fi>
345 * modules/pam_limits/pam_limits.8.xml: Only *.conf
346 files are parsed. Spelling fixes.
347 * modules/pam_access/pam_access.8.xml: Spelling fixes.
348 * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
349 * modules/pam_echo/pam_echo.8.xml: Likewise.
350 * modules/pam_env/pam_env.8.xml: Likewise.
351 * modules/pam_exec/pam_exec.8.xml: Likewise.
352 * modules/pam_filter/pam_filter.8.xml: Likewise.
353 * modules/pam_ftp/pam_ftp.8.xml: Likewise.
354 * modules/pam_group/pam_group.8.xml: Likewise.
355 * modules/pam_issue/pam_issue.8.xml: Likewise.
356 * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
357 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
358 * modules/pam_localuser/pam_localuser.8.xml: Likewise.
359 * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
360 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
361 * modules/pam_motd/pam_motd.8.xml: Likewise.
362 * modules/pam_namespace/pam_namespace.8.xml: Likewise.
363 * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
364 * modules/pam_selinux/pam_selinux.8.xml: Likewise.
365 * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
366 * modules/pam_tally/pam_tally.8.xml: Likewise.
367 * modules/pam_tally2/pam_tally2.8.xml: Likewise.
368 * modules/pam_time/pam_time.8.xml: Likewise.
369 * modules/pam_timestamp/pam_timestamp.8.xml: Likewise.
370 * modules/pam_timestamp/pam_timestamp_check.8.xml: Likewise.
371 * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
372 * modules/pam_umask/pam_umask.8.xml: Likewise.
373 * modules/pam_unix/pam_unix.8.xml: Likewise.
374 * modules/pam_xauth/pam_xauth.8.xml: Likewise.
376 2009-05-28 Jaswinder Singh <jsingh@redhat.com>
378 * po/pa.po: Updated translations.
380 2009-05-21 Albert Carabasa Giribet <albertc@asic.udl.cat>
382 * po/ca.po: Updated translations.
384 2009-05-11 Ani Peter <anipeter@fedoraproject.org>
386 * po/ml.po: Updated translations.
388 2009-05-11 Charles-Antoine Couret <cacouret@wanadoo.fr>
390 * po/fr.po: Updated translations.
392 2009-05-11 Tomáš Mráz <t8m@centrum.cz>
394 * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary): Remove
395 unnecessary setuid() call.
397 2009-05-05 Thorsten Kukuk <kukuk@thkukuk.de>
399 * release version 1.0.92
400 * libpamc/Makefile.am (libpamc_la_LDFLAGS): Increase revesion.
401 * configure.in: Increase version to 1.0.92.
403 2009-04-20 Mario Santagiuliana <mario@marionline.it>
405 * po/it.po: Updated translations.
407 2009-04-17 Fabian Affolter <fab@fedoraproject.org>
409 * po/de.po: Updated translations.
411 2009-04-16 Tomáš Mráz <t8m@centrum.cz>
413 * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Add user
414 parameter. Use user instead of pwd->pw_name in comparsions.
415 (pam_sm_authenticate): Pass the original user to evaluate().
417 2009-04-14 Amitakhya Phukan <aphukan@fedoraproject.org>
419 * po/as.po: Updated translations.
421 2009-04-14 Runa Bhattacharjee <runab@fedoraproject.org>
423 * po/bn_IN.po: Updated translations.
425 2009-04-14 Sweta Kothari <swkothar@redhat.com>
427 * po/gu.po: Updated translations.
429 2009-04-14 Sandeep Shedmake <sandeep.shedmake@gmail.com>
431 * po/mr.po: Updated translations.
433 2009-04-14 Rui Gouveia <rui.gouveia@globaltek.pt>
435 * po/pt.po: Updated translations.
437 2009-04-14 I. Felix <ifelix@redhat.com>
439 * po/ta.po: Updated translations.
441 2009-04-14 Krishna Babu K <kkrothap@redhat.com>
443 * po/te.po: Updated translations.
445 2009-04-09 Thorsten Kukuk <kukuk@thkukuk.de>
447 * modules/pam_unix/yppasswd.h: Update license to GPLv2 or later
448 on request of Olaf Kirch (Author).
449 * modules/pam_unix/yppasswd_xdr.c: Likewise.
451 2009-04-06 R.E. van der Luit <nippur@fedoraproject.org>
453 * po/nl.po: Updated translations.
455 2009-04-06 Terry Chuang <tchuang@redhat.com>
457 * po/zh_TW.po: Updated translations.
459 2009-04-03 Shankar Prasad <svenkate@redhat.com>
461 * po/kn.po: Updated translations.
463 2009-04-03 Manoj Kumar Giri <mgiri@redhat.com>
465 * po/or.po: Updated translations.
467 2009-04-03 Miloš Komarčević <kmilos@gmail.com>
469 * po/sr.po: Updated translations.
470 * po/sr@latin.po: Updated translations.
472 2009-04-03 Leah Liu <lliu@redhat.com>
474 * po/zh_CN.po: Updated translations.
476 2009-04-03 Dmitry V. Levin <ldv@altlinux.org>
478 * libpamc/pamc_load.c (__pamc_exec_agent): Replace call to exit(3)
479 in child process with call to _exit(2).
480 * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Likewise.
481 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
483 * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
485 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
486 * modules/pam_xauth/pam_xauth.c (run_coprocess): Likewise.
487 * modules/pam_exec/pam_exec.c (call_exec): Replace all calls to
488 exit(3) in child process with calls to _exit(2).
489 * modules/pam_filter/pam_filter.c (set_filter): Likewise.
490 * modules/pam_namespace/pam_namespace.c (inst_init,
491 cleanup_tmpdirs): Likewise.
493 2009-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
495 * modules/pam_unix/support.c (_unix_run_helper_binary): Don't
496 ignore return value of write().
498 * libpamc/include/security/pam_client.h (PAM_BP_ASSERT): Honour
500 * modules/pam_timestamp/pam_timestamp.c: don't ignore return
501 values of lchown and fchown.
503 2009-03-25 Thorsten Kukuk <kukuk@thkukuk.de>
505 * modules/pam_mkhomedir/pam_mkhomedir.c: Make option handling
507 (_pam_parse): Fix umask option.
509 * modules/pam_unix/passverify.c: Fix typo.
511 * modules/pam_issue/pam_issue.c: Fix compiler warning.
512 * modules/pam_ftp/pam_ftp.c: Likewise.
514 2009-03-25 Pavol Šimo <palo.simo@gmail.com>
516 * po/sk.po: Updated translations.
518 2009-03-24 Sulyok Péter <peti@sulyok.hu>
520 * po/hu.po: Updated translations.
522 2009-03-24 Domingo Becker <domingobecker@gmail.com>
524 * po/es.po: Updated translations.
526 2009-03-24 Diego Búrigo Zacarão <diegobz@projetofedora.org>
528 * po/pt_BR.po: Updated translations.
530 2009-03-24 Piotr Drąg <piotrdrag@gmail.com>
532 * po/pl.po: Updated translations.
534 2009-03-24 Tomas Mraz <t8m@centrum.cz>
536 * modules/pam_unix/passverify.c(save_old_password): Call fflush() and
538 (unix_update_passwd, unix_update_shadow): Likewise.
539 * modules/pam_pwhistory/opasswd.c(save_old_password): Likewise.
541 * po/cs.po: Updated translations.
543 2009-03-09 Thorsten Kukuk <kukuk@thkukuk.de>
545 * release version 1.0.91
547 * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
548 * xtests/Makefile.am: Add tst-pam_unix4.pamd, tst-pam_unix4.sh
551 2009-03-03 Dmitry V. Levin <ldv@altlinux.org>
553 * tests/tst-pam_mkargv.c (main): Fix for non-64bit architectures.
555 2009-03-03 Tomas Mraz <t8m@centrum.cz>
557 * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Test
558 for abnormal exit of the helper binary.
559 * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary): Likewise.
560 * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
561 * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Likewise.
563 2009-02-27 Tomas Mraz <t8m@centrum.cz>
565 * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Replace
566 signal() with sigaction().
567 * modules/pam_namespace/pam_namespace.c(inst_init, cleanup_tmpdirs):
569 * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Likewise.
570 * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary):
572 * modules/pam_unix/passverify.c(su_sighandler): Likewise.
573 * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
575 * modules/pam_tally2/Makefile.am: Link the pam_tally2 app to libpam
576 for auxiliary functions.
577 * modules/pam_tally2/pam_tally2.8.xml: Drop non-existing no_reset
578 option. Document new serialize option.
579 * modules/pam_tally2/pam_tally2.c: Add support for the new serialize
581 (_cleanup, tally_set_data, tally_get_data): Add tally file handle to
582 tally PAM data. Needed for fcntl() locking.
583 (get_tally): Use low level file access instead of stdio buffered FILE.
584 If serialize option is used lock the tally file access.
585 (set_tally, tally_bump, tally_reset): Use low level file access instead
586 of stdio buffered FILE. Close the file handle only when it is not owned
588 (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt): Pass the tally
589 file handle to tally_set_data(). Get it from tally_get_data().
590 (main): Use low level file access instead of stdio buffered FILE.
592 2009-02-26 Tomas Mraz <t8m@centrum.cz>
594 * xtests/Makefile.am: Add tst-pam_unix4.
595 * xtests/tst-pam_unix4.c: New test for password change
596 and shadow min days limit.
597 * xtests/tst-pam_unix4.pamd: Likewise.
598 * xtests/tst-pam_unix4.sh: Likewise.
600 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Ignore
601 PAM_AUTHTOK_ERR on shadow verification.
602 * modules/pam_unix/passverify.c (check_shadow_expiry): Return
603 PAM_AUTHTOK_ERR if sp_min limit for password change is defied.
605 2009-02-26 Timur Birsh <taem@linukz.org>
607 * po/LINGUAS: New Kazakh translation.
608 * po/kk.po: New Kazakh translation.
610 2009-02-25 Thorsten Kukuk <kukuk@thkukuk.de>
612 * libpam/pam_misc.c (_pam_StrTok): Use unsigned char
613 instead of int. Reported by Marcus Granado.
614 * tests/Makefile.am (TESTS): Add tst-pam_mkargv.
615 * tests/tst-pam_mkargv.c (main): Test case for
618 * po/de.po: Update fuzzy translations.
620 2009-02-25 Tomas Mraz <t8m@centrum.cz>
622 * xtests/access.conf: Add a line for name resolution test case.
623 * xtests/tst-pam_access4.c (main): Set PAM_RHOST for testing the LOCAL
624 keyword. Add a test case for name resolution.
626 * modules/pam_access/pam_access.c (from_match): Move name resolution
627 to network_netmask_match().
628 (network_netmask_match): Do a name resolution of the origin only if
629 matching against a real network/netmask.
631 2009-02-25 Fabian Affolter <fabian@bernewireless.net>
633 * po/de.po: Updated translations.
635 2009-02-25 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
637 * po/pt_BR.po: Updated translations.
639 2009-02-25 Domingo Becker <domingobecker@gmail.com>
641 * po/es.po: Updated translations.
643 2009-02-20 Thorsten Kukuk <kukuk@thkukuk.de>
645 * modules/pam_limits/limits.conf.5.xml: Document that the kernel
646 can refuse values out of range for the local system.
647 * modules/pam_limits/pam_limits.c (setup_limits): Log if setrlimit
650 2009-02-18 Thorsten Kukuk <kukuk@thkukuk.de>
652 * libpam/pam_password.c (pam_chauthtok): Make sure applications
653 don't set internal flags.
655 2009-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
657 * doc/man/pam_sm_chauthtok.3.xml: Document that sufficient
658 can break the PRELIM_CHECK chain.
660 * libpam/pam_dispatch.c: Don't freeze chain for chauthtok
661 [bugzilla.novell.com#470337]
663 2009-02-11 Daniel Nylander <po@danielnylander.se>
665 * po/sv.po: Updated translations.
667 2009-01-29 Thorsten Kukuk <kukuk@thkukuk.de>
669 * doc/man/pam_sm_setcred.3.xml: Document PAM_ESTABLISH_CRED.
671 2009-01-19 Tomas Mraz <t8m@centrum.cz>
673 * modules/pam_mkhomedir/Makefile.am: Add mkhomedir_helper.
674 * modules/pam_mkhomedir/mkhomedir_helper.8.xml: New file. Manual page
675 for mkhomedir_helper.
676 * modules/pam_mkhomedir/mkhomedir_helper.c: New file. Source
677 for mkhomedir_helper. Most of the code moved from pam_mkhomedir.c.
678 * modules/pam_mkhomedir/pam_mkhomedir.c (_pam_parse): Do not convert umask
680 (rec_mkdir): Moved to mkhomedir_helper.c.
681 (create_homedir): Just exec the helper.
682 (pam_sm_open_session): Improve logging.
684 2009-01-19 Daniel Cabrera <h.daniel.cabrera@gmail.com>
686 * po/es.po: Updated translations.
688 2009-01-14 Thorsten Kukuk <kukuk@thkukuk.de>
690 * po/de.po: Updated translations.
692 2009-01-07 Piotr Drąg <piotrdrag@gmail.com>
694 * po/pl.po: Updated translations.
696 2008-12-23 Piotr Drąg <piotrdrag@gmail.com>
698 * po/pl.po: Updated translations.
700 2008-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
702 * modules/pam_pwhistory/pam_pwhistory.c (parse_option): Rename
703 type= option to authtok_type= (because of pam_get_authtok).
704 * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
706 2008-12-17 Tomas Mraz <t8m@centrum.cz>
708 * modules/pam_tty_audit/pam_tty_audit.c (pam_sm_open_session): Do
709 not abort on unknown option. Avoid double free of old_status.
710 (pam_sm_close_session): Use LOG_DEBUG for restored status message.
712 * configure.in: Test for getseuser().
713 * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Call getseuser()
714 instead of getseuserbyname() if the function is available.
716 2008-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
718 * release version 1.0.90
720 * libpam_misc/Makefile.am: Increase version number of shared library.
721 * libpamc/Makefile.am: Likewise.
723 2008-12-12 Tomas Mraz <t8m@centrum.cz>
725 * modules/pam_tally2/pam_tally2.c (get_tally): Test for EACCES
727 * modules/pam_tally2/pam_tally2.8.xml: Fix documentation.
729 2008-12-10 Thorsten Kukuk <kukuk@thkukuk.de>
731 * doc/man/pam_item_types_ext.inc.xml: Document PAM_AUTHTOK_TYPE.
732 * libpam/pam_end.c (pam_end): Free authtok_type.
733 * tests/tst-pam_get_item.c: Add PAM_AUTHTOK_TYPE
735 * tests/tst-pam_set_item.c: Likewise.
736 * libpam/pam_start.c (pam_start): Initialize xdisplay,
737 xauth and authtok_type.
738 * libpam/pam_get_authtok.c (pam_get_authtok): Rename "type"
740 * modules/pam_cracklib/pam_cracklib.8.xml: Replace "type=" with
742 * doc/man/pam_get_authtok.3.xml: Document authtok_type argument.
743 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Set
744 type= argument as PAM_AUTHTOK_TYPE item.
745 * libpam/pam_get_authtok.c (pam_get_authtok): If no type
746 argument given, use PAM_AUTHTOK_TYPE item.
747 * libpam/pam_item.c (pam_get_item): Fetch PAM_AUTHTOK_TYPE item.
748 (pam_set_item): Store PAM_AUTHTOK_TYPE item.
749 * libpam/pam_private.h: Add authtok_type to pam_handle.
750 * libpam/include/security/_pam_types.h (PAM_AUTHTOK_TYPE): New.
752 2008-12-03 Thorsten Kukuk <kukuk@thkukuk.de>
754 * modules/pam_access/access.conf.5.xml: Replace
755 2001:4ca0 with 2001:db8:: [bug#2356400].
757 * doc/man/Makefile.am: Add pam_get_authtok.3.xml.
758 * doc/man/pam_get_authtok.3.xml: New.
759 * libpam/Makefile.am: Add pam_get_authtok.c.
760 * libpam/libpam.map: Export pam_get_authtok.
761 * libpam/pam_get_authtok.c: New.
762 * libpam/pam_private.h: Add mod_argc and mod_argv to pam_handle.
763 * libpam_include/security/pam_ext.h: Add pam_get_authtok
765 * modules/pam_cracklib/pam_cracklib.c: Use pam_get_authtok.
766 * modules/pam_pwhistory/pam_pwhistory.c: Likewise.
767 * po/POTFILES.in: Add libpam/pam_get_authtok.c.
768 * xtests/tst-pam_cracklib1.c: Adjust error codes.
770 * modules/pam_timestamp/Makefile.am: Remove hmactest.c from
773 * po/*.po: Regenerated.
775 2008-12-02 Michael Calmer <mc@suse.de>
777 * modules/pam_limits/limits.conf.5.xml: Document valid values
778 for limits (bnc#448314).
780 2008-12-02 Thorsten Kukuk <kukuk@thkukuk.de>
782 * modules/pam_env/pam_env.c: Add support for user specific
783 environment file. Based on a patch from Ubuntu.
784 * modules/pam_env/pam_env.8.xml: Document new options.
786 2008-12-02 Olivier Fourdan <ofourdan@redhat.com>
788 * modules/pam_filter/pam_filter.c (master): Use /dev/ptmx
789 instead of the old BSD pseudoterminal API.
790 (set_filter): Call grantpt(), unlockpt() and ptsname(). Do not
791 close pseudoterminal handle in filter child.
792 * modules/pam_filter/upperLOWER/upperLOWER.c (main): Use
793 regular read() instead of pam_modutil_read() to allow for
796 2008-12-02 Tomas Mraz <t8m@centrum.cz>
798 * modules/pam_timestamp/Makefile.am: Add hmacfile to tests.
799 * modules/pam_timestamp/hmacfile.c: Do not try the short key
802 2008-12-01 Tomas Mraz <t8m@centrum.cz>
804 * modules/pam_unix/support.h: Fix masks for cipher algorithm
807 2008-12-01 Thorsten Kukuk <kukuk@thkukuk.de>
809 * modules/pam_unix/pam_unix.8.xml: Document blowfish option.
811 * configure.in: Check for crypt_gensalt_rn.
812 * modules/pam_unix/pam_unix_passwd.c: Pass pamh to
813 create_password_hash function.
814 * modules/pam_unix/passverify.c (create_password_hash): Add
816 * modules/pam_unix/passverify.h: Adjust create_password_hash
818 * modules/pam_unix/support.c: Add support for blowfish option.
819 * modules/pam_unix/support.h: Add defines for blowfish option.
820 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
822 2008-12-01 Tomas Mraz <t8m@centrum.cz>
824 * modules/pam_access/pam_access.8.xml: Fix description of nodefgroup
827 * modules/pam_group/pam_group.c (is_same): Fix check for correct
830 2008-11-29 Thorsten Kukuk <kukuk@thkukuk.de>
832 * configure.in: Check for xcrypt.h, fix typo in libaudit check.
833 * modules/pam_cracklib/pam_cracklib.c: Include xcrypt.h if
835 * modules/pam_unix/bigcrypt.c: Likewise.
836 * modules/pam_unix/passverify.c: Likewise.
837 * modules/pam_userdb/pam_userdb.c: Likewise.
838 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
840 * doc/man/pam_getenv.3.xml: Document that application should
841 not free return value.
843 * doc/man/pam.3.xml: Add Note about thread-safeness of libpam
846 2008-11-28 Tomas Mraz <t8m@centrum.cz>
848 * modules/pam_unix/unix_update.c (set_password): Allow root to change
849 passwords without verification of the old ones.
851 * modules/pam_tally2/pam_tally2.c (tally_check): Fix info format
852 to be the same as in pam_tally.
854 * configure.in: Add modules/pam_timestamp/Makefile.
855 * doc/sag/Linux-PAM_SAG.xml: Include pam_timestamp.xml.
856 * doc/sag/pam_timestamp.xml: New.
857 * libpam/pam_static_modules.h: Add pam_timestamp static struct.
858 * modules/Makefile.am: Add pam_timestamp directory.
859 * modules/pam_timestamp/Makefile.am: New.
860 * modules/pam_timestamp/README.xml: New.
861 * modules/pam_timestamp/hmacsha1.h: New.
862 * modules/pam_timestamp/sha1.h: New.
863 * modules/pam_timestamp/pam_timestamp.8.xml: New.
864 * modules/pam_timestamp/pam_timestamp_check.8.xml: New.
865 * modules/pam_timestamp/pam_timestamp.c: New.
866 * modules/pam_timestamp/pam_timestamp_check.c: New.
867 * modules/pam_timestamp/hmacfile.c: New.
868 * modules/pam_timestamp/hmacsha1.c: New.
869 * modules/pam_timestamp/sha1.c: New.
870 * modules/pam_timestamp/tst-pam_timestamp: New.
871 * po/POTFILES.in: Add pam_timestamp sources.
872 * po/*.po: Regenerate.
873 * po/cs.po: Updated translations.
875 2008-11-25 Thorsten Kukuk <kukuk@thkukuk.de>
877 * modules/pam_pwhistory/opasswd.c (save_old_password): Fix typo.
879 * modules/pam_time/pam_time.c (is_same): Fix check
880 of correct string length (debian bug #326407).
882 2008-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
884 * xtests/Makefile.am: Add pam_time1 tests.
885 * xtests/tst-pam_time1.c: New test case.
886 * xtests/tst-pam_time1.pamd: New.
887 * xtests/time.conf: New.
888 * xtests/run-xtests.sh: Copy time.conf.
890 2008-11-24 Tomas Mraz <t8m@centrum.cz>
892 * libpam/pam_handlers.c (_pam_parse_conf_file): '-' at
893 beginning of type token marks silent module.
894 (_pam_load_module): Add handler_type parameter. Do not log
895 module load error if module is silent.
896 (_pam_add_handler): Pass handler_type to _pam_load_module().
897 * libpam/pam_private.h: Add PAM_HT_SILENT_MODULE.
898 * doc/man/pam.conf-syntax.xml: Document the '-' at beginning
901 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Fix leaks
903 * modules/pam_env/pam_env.c (_parse_env_file): Remove superfluous
905 * modules/pam_group/pam_group.c (check_account): Fix leak
907 * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): Fix leak
909 * modules/pam_securetty/pam_securetty.c (securetty_perform_check): Remove
910 superfluous condition.
911 * modules/pam_stress/pam_stress.c (stress_get_password,pam_sm_authenticate):
912 Remove superfluous conditions.
913 (pam_sm_chauthtok): Fix mistaken && for &.
914 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Remove
915 superfluous condition.
916 All the problems fixed in this commit were found by Steve Grubb.
918 2008-11-20 Tomas Mraz <t8m@centrum.cz>
920 * modules/pam_sepermit/pam_sepermit.c (sepermit_match): Do not
921 call sepermit_lock() if sense is deny. Do not crash on NULL seuser
923 (pam_sm_authenticate): Try to call getseuserbyname() even if
926 2008-11-19 Thorsten Kukuk <kukuk@thkukuk.de>
928 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session):
929 Preserve XAUTHLOCALHOSTNAME environment variable.
931 * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Finish
932 implementation of type=STRING option.
934 * modules/pam_pwhistory/pam_pwhistory.8.xml: Document
935 "type=STRING" option.
937 2008-10-27 Thorsten Kukuk <kukuk@thkukuk.de>
939 * doc/man/pam_setcred.3.xml: Document when credentials
941 * po/ja.po: Fix syntax error.
942 * po/de.po: Update translations.
943 * po/*.po: Regenerate with pam_tally2 added.
945 2008-10-23 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
947 * po/pt_BR.po: Updated translations.
949 2008-10-23 Krishna Babu K <kkrothap@redhat.com>
951 * po/LINGUAS: New language.
952 * po/te.po: New translation to Telugu.
954 2008-10-23 Manoj Kumar Giri <mgiri@redhat.com>
956 * po/or.po: Updated translations.
958 2008-10-21 Amitakhya Phukan <aphukan@redhat.com>
960 * po/as.po: Updated translations.
962 2008-10-21 Ondrej Sulek <feonsu@gmail.com>
964 * po/sk.po: Updated translations.
966 2008-10-21 Terry Chuang <tchuang@redhat.com>
968 * po/zh_TW.po: Updated translations.
970 2008-10-21 Kiyoto Hashida <khashida@redhat.com>
972 * po/ja.po: Updated translations.
974 2008-10-21 Francesco Valente <fvalen@redhat.com>
976 * po/it.po: Updated translations.
978 2008-10-21 Peter van Egdom <p.van.egdom@gmail.com>
980 * po/nl.po: Updated translations.
982 2008-10-20 Ani Peter <apeter@redhat.com>
984 * po/ml.po: Updated translations.
986 2008-10-20 Pablo Martin-Gomez <pablo.martin-gomez@laposte.net>
988 * po/fr.po: Updated translations.
990 2008-10-20 Runa Bhattacharjee <runab@redhat.com>
992 * po/bn_IN.po: Updated translations.
994 2008-10-20 Shankar Prasad <svenkate@redhat.com>
996 * po/kn.po: Updated translations.
998 2008-10-20 Leah Liu <lliu@redhat.com>
1000 * po/zh_CN.po: Updated translations.
1002 2008-10-20 Ondrej Sulek <feonsu@gmail.com>
1004 * po/LINGUAS: New language.
1005 * po/sk.po: New translation to Slovak.
1007 2008-10-17 Tomas Mraz <t8m@centrum.cz>
1009 * configure.in: Add modules/pam_tally2/Makefile.
1010 * doc/sag/Linux-PAM_SAG.xml: Include pam_tally2.xml.
1011 * doc/sag/pam_tally2.xml: New.
1012 * libpam/pam_static_modules.h: Add pam_tally2 static struct.
1013 * modules/Makefile.am: Add pam_tally2 directory.
1014 * modules/pam_tally2/Makefile.am: New.
1015 * modules/pam_tally2/README.xml: New.
1016 * modules/pam_tally2/tallylog.h: New.
1017 * modules/pam_tally2/pam_tally2.8.xml: New.
1018 * modules/pam_tally2/pam_tally2.c: New.
1019 * modules/pam_tally2/pam_tally2_app.c: New.
1020 * modules/pam_tally2/tst-pam_tally2: New.
1021 * po/POTFILES.in: Add pam_tally2 sources.
1023 2008-10-17 Xavier Queralt Mateu <xqueralt@gmail.com>
1025 * po/ca.po: Updated translations.
1027 2008-10-15 Tomas Mraz <t8m@centrum.cz>
1029 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Save the old
1030 euid to suid to be able to restore it.
1032 2008-10-15 Piotr Drąg <piotrdrag@gmail.com>
1034 * po/pl.po: Updated translations.
1036 2008-10-13 Tomas Mraz <t8m@centrum.cz>
1038 * po/LINGUAS: New languages.
1039 * po/cs.po: Updated translations.
1041 2008-10-13 Amitakhya Phukan <aphukan@redhat.com>
1043 * po/as.po: Updated translations.
1045 2008-10-13 Shankar Prasad <svenkate@redhat.com>
1047 * po/kn.po: Updated translations.
1049 2008-10-13 Sandeep Sheshrao Shedmake <sshedmak@redhat.com>
1051 * po/mr.po: New translation to Marathi.
1053 2008-10-13 Runa Bhattacharjee <runab@redhat.com>
1055 * po/bn_IN.po: Updated translations.
1057 2008-10-13 Sharuzzaman Ahmat Raslan <sharuzzaman@gmail.com>
1059 * po/ms.po: New translation to Malay.
1061 2008-10-10 Thorsten Kukuk <kukuk@thkukuk.de>
1063 * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass):
1064 Remove check for re-used passwords.
1065 * modules/pam_cracklib/pam_cracklib.8.xml: Remove documentation
1066 of re-used password check.
1068 * configure.in: add modules/pam_pwhistory/Makefile.
1069 * doc/sag/Linux-PAM_SAG.xml: Include pam_pwhistory.xml.
1070 * doc/sag/pam_pwhistory.xml: New.
1071 * libpam/pam_static_modules.h: Add pam_pwhistory data.
1072 * modules/Makefile.am: Add pam_pwhistory directory.
1073 * modules/pam_pwhistory/Makefile.am: New.
1074 * modules/pam_pwhistory/README.xml: New.
1075 * modules/pam_pwhistory/opasswd.c: New.
1076 * modules/pam_pwhistory/opasswd.h: New.
1077 * modules/pam_pwhistory/pam_pwhistory.8.xml: New.
1078 * modules/pam_pwhistory/pam_pwhistory.c: New.
1079 * modules/pam_pwhistory/tst-pam_pwhistory: New.
1080 * xtests/Makefile.am: New.
1081 * xtests/run-xtests.sh: New.
1082 * xtests/tst-pam_pwhistory1.c: New.
1083 * xtests/tst-pam_pwhistory1.pamd: New.
1084 * xtests/tst-pam_pwhistory1.sh: New.
1085 * po/POTFILES.in: Add modules/pam_pwhistory/.
1086 * po/de.po: Update translations.
1088 2008-10-02 Thorsten Kukuk <kukuk@thkukuk.de>
1090 * po/de.po: Update translations.
1092 2008-09-30 Manoj Kumar Giri <mgiri@redhat.com>
1094 * po/or.po: Updated translations.
1096 2008-09-30 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
1098 * po/pt_BR.po: Updated translations.
1100 2008-09-30 Tomas Mraz <t8m@centrum.cz>
1102 * modules/pam_lastlog/pam_lastlog.8.xml: Document new options
1103 noupdate and showfailed.
1104 * modules/pam_lastlog/pam_lastlog.c(pam_parse): Recognize the new
1106 (last_login_read): New output parameter lltime. Do not display
1107 the last login message if it would be empty.
1108 (last_login_date): New output parameter lltime. Do not write the
1109 last login info when LASTLOG_UPDATE is not set.
1110 (last_login_failed): New function to display the last bad login
1112 (pam_sm_open_session): Obtain lltime from last_login_date() and
1113 call last_login_failed() when appropriate.
1115 * po/Linux-pam.pot: Updated strings to translate.
1116 * po/*.po: Likewise.
1118 2008-09-29 Thorsten Kukuk <kukuk@thkukuk.de>
1120 * modules/pam_echo/pam_echo.8.xml: Fix format error.
1122 2008-09-25 Tomas Mraz <t8m@centrum.cz>
1124 * modules/pam_tally/pam_tally.c(get_tally): Fix syslog message.
1125 (tally_check): Open faillog read only. Close file descriptor.
1126 Fix typos in messages.
1128 2008-09-25 Thorsten Kukuk <kukuk@thkukuk.de>
1130 * modules/pam_mail/pam_mail.c (report_mail): Fix logic of
1131 "quiet" option (Patch from Andreas Henriksson <andreas@fatal.se>)
1133 * modules/pam_mail/pam_mail.8.xml: Fix typo.
1135 2008-09-23 Tomas Mraz <t8m@centrum.cz>
1137 * modules/pam_limits/limits.conf.5.xml: Comment that rss limit is
1140 2008-09-19 Tomas Mraz <t8m@centrum.cz>
1142 * modules/pam_cracklib/pam_cracklib.8.xml: Fix description
1143 of the palindrome test. Document new options maxrepeat and
1145 * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Parse
1146 the maxrepeat and reject_username options.
1147 (password_check): Call the new tests usercheck() and
1149 (_pam_unix_approve_pass): Pass user name to the password_check().
1151 2008-09-16 Thorsten Kukuk <kukuk@thkukuk.de>
1153 * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo.
1155 * modules/pam_unix/pam_unix.8.xml: Fix typo.
1157 2008-09-03 Thorsten Kukuk <kukuk@thkukuk.de>
1159 * modules/pam_exec/pam_exec.c: Expose authtok if requested,
1160 provide environment variable containing service type.
1161 * modules/pam_exec/pam_exec.8.xml: Document new option.
1163 2008-08-29 Tomas Mraz <t8m@centrum.cz>
1165 * modules/pam_loginuid/pam_loginuid.c(set_loginuid): Uids
1168 2008-08-18 Thorsten Kukuk <kukuk@thkukuk.de>
1170 * Makefile.am (M4_FILES): Adjust list.
1172 * modules/pam_access/pam_access.8.xml: Fix module service
1174 * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
1175 * modules/pam_debug/pam_debug.8.xml: Likewise.
1176 * modules/pam_deny/pam_deny.8.xml: Likewise.
1177 * modules/pam_echo/pam_echo.8.xml: Likewise.
1178 * modules/pam_env/pam_env.8.xml: Likewise.
1179 * modules/pam_exec/pam_exec.8.xml: Likewise.
1180 * modules/pam_faildelay/pam_faildelay.8.xml: Likewise.
1181 * modules/pam_filter/pam_filter.8.xml: Likewise.
1182 * modules/pam_ftp/pam_ftp.8.xml: Likewise.
1183 * modules/pam_group/pam_group.8.xml: Likewise.
1184 * modules/pam_issue/pam_issue.8.xml: Likewise.
1185 * modules/pam_keyinit/pam_keyinit.8.xml: Likewise.
1186 * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
1187 * modules/pam_limits/pam_limits.8.xml: Likewise.
1188 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
1189 * modules/pam_localuser/pam_localuser.8.xml: Likewise.
1190 * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
1191 * modules/pam_mail/pam_mail.8.xml: Likewise.
1192 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
1193 * modules/pam_motd/pam_motd.8.xml: Likewise.
1194 * modules/pam_namespace/pam_namespace.8.xml: Likewise.
1195 * modules/pam_nologin/pam_nologin.8.xml: Likewise.
1196 * modules/pam_permit/pam_permit.8.xml: Likewise.
1197 * modules/pam_rhosts/pam_rhosts.8.xml: Likewise.
1198 * modules/pam_rootok/pam_rootok.8.xml: Likewise.
1199 * modules/pam_securetty/pam_securetty.8.xml: Likewise.
1200 * modules/pam_selinux/pam_selinux.8.xml: Likewise.
1201 * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
1202 * modules/pam_shells/pam_shells.8.xml: Likewise.
1203 * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
1204 * modules/pam_tally/pam_tally.8.xml: Likewise.
1205 * modules/pam_time/pam_time.8.xml: Likewise.
1206 * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
1207 * modules/pam_umask/pam_umask.8.xml: Likewise.
1208 * modules/pam_unix/pam_unix.8.xml: Likewise.
1209 * modules/pam_userdb/pam_userdb.8.xml: Likewise.
1210 * modules/pam_warn/pam_warn.8.xml: Likewise.
1211 * modules/pam_wheel/pam_wheel.8.xml: Likewise.
1212 * modules/pam_xauth/pam_xauth.8.xml: Likewise.
1214 2008-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
1216 * configure.in: Add version for gettext, add search path
1217 for m4 directory, fix handling of --disable-* options.
1218 Patches from Diego Pettenò <flameeyes@gmail.com>.
1220 * configure.in: Run autoupdate on it.
1222 * acincludde.m4: Rename to ...
1223 * m4/jh_path_xml_catalog.m4: ... this.
1225 * m4/*.m4: Remove all autoconf m4 files.
1227 2008-07-29 Steve Langasek <vorlon@debian.org>
1229 * modules/pam_cracklib/pam_cracklib.8.xml: correct a typo,
1230 "Only he" -> "Only the"
1232 2008-07-28 Steve Langasek <vorlon@debian.org>
1234 * libpamc/test/regress/test.libpamc.c: use standard u_int8_t
1235 type instead of __u8, as elsewhere.
1236 Patch from Roger Leigh <rleigh@debian.org>.
1237 * modules/pam_unix/passverify.c: make save_old_password()
1238 thread-safe by using pam_modutil_getpwnam() instead of getpwnam()
1239 * modules/pam_unix/passverify.c, modules/pam_unix/passverify.h,
1240 modules/pam_unix/pam_unix_passwd.c: add pamh argument to
1243 2008-07-27 Steve Langasek <vorlon@debian.org>
1245 * modules/pam_*/pam_*.8.xml: fix up the references to pam.d,
1246 which is in manpage section 5, not 8.
1247 * modules/pam_env/environment, modules/pam_env/pam_env.8.xml:
1248 spelling fix, seperate -> separate
1250 2008-07-26 Steve Langasek <vorlon@debian.org>
1252 * modules/pam_env/pam_env.c: Fix module to skip over
1253 non-alphanumeric variable names, and to handle the case when
1254 asked to delete a non-existent variable.
1256 2008-07-13 Tomas Mraz <t8m@centrum.cz>
1258 * modules/pam_mail/pam_mail.8.xml: Module supports session and
1259 not account service (#1980773).
1261 2008-07-11 Tomas Mraz <t8m@centrum.cz>
1263 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Do
1264 not close the pipe descriptor in borderline case (#2009766).
1265 * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
1267 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
1268 * modules/pam_unix/support.h: Define upper limit of fds we will
1271 * modules/pam_selinux/pam_selinux.c (config_context): Do not
1272 ask for the level if use_current_range is set.
1273 (context_from_env): New function to obtain the context from
1274 PAM environment variables.
1275 (pam_sm_open_session): Call context_from_env() if env_params option
1276 is present. use_current_range now modifies behavior of the
1277 context_from_env and config_context options.
1278 * modules/pam_selinux/pam_selinux.8.xml: Describe the env_params
1279 option. Adjust description of use_current_range option.
1281 2008-07-09 Thorsten Kukuk <kukuk@thkukuk.de>
1283 * modules/pam_exec/pam_exec.c (call_exec): Move all variable
1284 declaration to begin of a block (#1976310).
1286 * xtests/tst-pam_group1.c (run_test): Move no_grps declaration
1287 to begin of function (#1976310).
1289 * modules/pam_securetty/pam_securetty.8.xml: Replace
1290 PAM_IGNORE with PAM_USER_UNKNOWN (#1994330).
1292 * modules/pam_tally/pam_tally.c: Add support for silent and
1293 no_log_info options.
1294 * modules/pam_tally/pam_tally.8.xml: Document silent and
1295 no_log_info options.
1297 2008-07-08 Thorsten Kukuk <kukuk@thkukuk.de>
1299 * modules/pam_unix/passverify.c (verify_pwd_hash): Adjust debug
1302 2008-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
1304 * modules/pam_unix/unix_chkpwd.c (main): Fix compiling without
1307 * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo in ucredit
1308 description (reported by Wayne Pollock <pollock@acm.org>)
1310 2008-06-19 Tomas Mraz <t8m@centrum.cz>
1312 * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
1313 Detect configuration errors. Fail on incomplete condition.
1315 2008-05-20 Tomas Mraz <t8m@centrum.cz>
1317 * configure.in: Work correctly with autoconf-2.62.
1319 2008-05-19 Tomas Mraz <t8m@centrum.cz>
1321 * doc/man/pam_getenv.3.xml: Correct the pam_getenv documentation.
1323 * doc/man/pam_prompt.3.xml: Add missing description.
1325 2008-05-14 Kjartan Maraas <kmaraas@gnome.org>
1327 * po/nb.po: Updated translation.
1329 2008-05-14 Sulyok Péter <peti@sulyok.hu>
1331 * po/hu.po: Updated translation.
1333 2008-05-14 Tomas Mraz <t8m@centrum.cz>
1335 * libpam/pam_modutil_getgrgid.c: Replace hardcoded constant with
1336 define PWD_LENGTH_SHIFT.
1337 * libpam/pam_modutil_getgrnam.c: Likewise.
1338 * libpam/pam_modutil_getpwnam.c: Likewise.
1339 * libpam/pam_modutil_getpwuid.c: Likewise.
1340 * libpam/pam_modutil_getspnam.c: Likewise.
1341 * libpam/pam_modutil_private.h: Adjust values for PWD_ constants.
1343 * modules/pam_unix/pam_unix_passwd.c(pam_sm_chauthtok): Unset authtok
1344 item when password is not approved.
1345 * modules/pam_unix/support.c(_unix_read_password): UNIX_USE_FIRST_PASS
1346 is always set when UNIX_AUTHTOK is set, change order of conditions.
1348 2008-05-02 Tomas Mraz <t8m@centrum.cz>
1350 * modules/pam_selinux/pam_selinux.c(query_response): Add handling
1352 (manual_context): Handle failed query_response() properly. Rename
1353 variable responses to response which is more correct name.
1354 (config_context): Likewise.
1355 (pam_sm_open_session): Do not base decision on whether there is a tty.
1357 2008-04-22 Tomas Mraz <t8m@centrum.cz>
1359 * modules/pam_selinux/pam_selinux.c(pam_sm_close_sesion): Fix
1360 regression from the change from 2008-03-20. setexeccon() must be
1361 called also with NULL prev_context.
1363 2008-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
1365 * modules/pam_access/access.conf.5.xml: Document changed behavior
1367 * modules/pam_access/pam_access.c: Add from_remote_host to
1368 struct login_info to change behavior of LOCAL keyword: if
1369 PAM_RHOST is not set, LOCAL will be true.
1371 2008-04-18 Tomas Mraz <t8m@centrum.cz>
1373 * modules/pam_namespace/pam_namespace.c: New functions
1374 unprotect_dirs(), cleanup_protect_data(), protect_mount(),
1375 protect_dir() to protect directory by bind mount.
1376 (cleanup_data): Renamed to cleanup_polydir_data().
1377 (parse_create_params): Allow missing specification of mode
1379 (check_inst_parent): Call protect_dir() on the instance parent
1380 directory. The directory is created when it doesn't exist.
1381 (create_polydir): Protect and make the polydir by protect_dir(),
1382 remove potential races.
1383 (create_dirs): Renamed to create_instance(), remove call to
1385 (ns_setup): Call protect_dir() on the polydir if it already exists.
1386 Call inst_init() after the polydir is mounted.
1387 (setup_namespace): Set the namespace protect data to be cleaned up
1388 on pam_close_session()/pam_end().
1389 (pam_sm_open_session): Initialize the protect_dirs.
1390 (pam_sm_close_session): Cleanup namespace protect data.
1391 * modules/pam_namespace/pam_namespace.h: Define struct for the
1392 stack of protected dirs.
1393 * modules/pam_namespace/pam_namespace.8.xml: Document when the
1394 instance init script is called.
1395 * modules/pam_namespace/namespace.conf.5.xml: Likewise.
1397 2008-04-17 Tomas Mraz <t8m@centrum.cz>
1399 * modules/pam_access/pam_access.c(myhostname): Removed function.
1400 (user_match): Supply hostname of the machine to the netgroup_match().
1401 Use hostname from the loginfo instead of calling myhostname().
1402 (pam_sm_authenticate): Call gethostname() to fill hostname in the
1405 * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try
1406 to lock if euid != 0.
1408 2008-04-16 Tomas Mraz <t8m@centrum.cz>
1410 * modules/pam_unix/Makefile.am: Link unix_chkpwd with libaudit.
1411 * modules/pam_unix/unix_chkpwd.c(_audit_log): New function for audit.
1412 (main): Call _audit_log() when appropriate.
1414 * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Recognize also
1415 try_first_pass and use_first_pass options.
1416 (pam_sm_chauthtok): Implement the new options.
1418 2008-04-08 Tomas Mraz <t8m@centrum.cz>
1420 * modules/pam_xauth/pam_xauth.c(run_coprocess): Avoid multiple
1421 calls to sysconf() (based on patch by Sami Farin).
1423 * libpam/pam_item.c (TRY_SET): Do not set when destination
1424 is identical to source.
1425 (pam_set_item): Do not overwrite destination when it
1426 is identical to source.
1428 2008-04-07 Miloš Komarčević <kmilos@gmail.com>
1430 * po/sr.po: New file with translation.
1431 * po/sr@latin.po: Likewise.
1432 * po/LINGUAS: Add sr and sr@latin.
1434 2008-04-03 Thorsten Kukuk <kukuk@thkukuk.de>
1436 * release version 1.0.0
1438 * configure.in: Set version number to 1.0.0.
1439 * libpam/Makefile.am: Bump patchlevel of libpam.
1440 * doc/adg/Linux-PAM_ADG.xml: Update version/date.
1441 * doc/mwg/Linux-PAM_MWG.xml: Likewise.
1442 * doc/sag/Linux-PAM_SAG.xml: Likewise.
1444 2008-03-31 Dan Walsh <dwalsh@redhat.com>
1446 * modules/pam_sepermit/pam_sepermit.c(sepermit_lock): Mark lock fd to
1449 2008-03-25 Leah Liu <lliu@redhat.com>
1451 * po/zh_CN.po: Updated translation.
1453 2008-03-20 Tomas Mraz <t8m@centrum.cz>
1455 * modules/pam_namespace/pam_namespace.c(poly_name): Switch to USER
1456 method only when appropriate.
1457 (setup_namespace): Do not umount when not mounted with RUSER.
1459 * modules/pam_selinux/pam_selinux.c(pam_sm_close_session): Call
1460 freecontext() after the context is logged not before.
1462 2008-03-18 Canniot Thomas <thomas.canniot@mrtomlinux.org>
1464 * po/fr.po: Updated translation.
1466 2008-03-13 Ankit Patel <ankit@redhat.com>
1468 * po/gu.po: Updated translation.
1470 2008-03-05 Tomas Mraz <t8m@centrum.cz>
1472 * modules/pam_cracklib/pam_cracklib.c(pam_sm_chauthtok): Avoid
1473 unnecessary x_strdup() of resp.
1474 * modules/pam_ftp/pam_ftp(pam_sm_authenticate): Call _pam_overwrite()
1475 before dropping password resp.
1477 2008-03-03 Tomas Mraz <t8m@centrum.cz>
1479 * modules/pam_selinux/pam_selinux.c: Do not translate syslog messages.
1480 * po/Linux-PAM.pot: Update.
1482 * libpam/pam_item.c(RESET): Rename to TRY_SET, handle strdup failure.
1483 (pam_set_item): Use TRY_SET() also for PAM_AUTHTOK and PAM_OLDAUTHTOK.
1484 Handle allocation failure for PAM_XAUTHDATA.
1485 (pam_get_user): Return error when conversation returns NULL user.
1486 Call pam_set_item() instead of RESET().
1488 2008-02-26 Tomas Mraz <t8m@centrum.cz>
1490 * modules/pam_unix/Makefile.am: Do not link to cracklib.
1491 * modules/pam_unix/pam_unix_passwd.c(_pam_unix_approve_pass):
1492 Do not call FascistCheck() from cracklib.
1494 2008-02-29 Fabian Affolter <fab@fedoraproject.org>
1496 * po/de.po: Updated translation.
1498 2008-02-28 Piotr Drąg <piotrdrag@gmail.com>
1500 * po/pl.po: Updated translation.
1502 2008-02-26 Tomas Mraz <t8m@centrum.cz>
1504 * po/LINUGAS: New languages added.
1505 * po/es.po: Updated translations.
1506 * po/fr.po: Likewise.
1507 * po/it.po: Likewise.
1508 * po/ja.po: Likewise.
1509 * po/nl.po: Likewise.
1510 * po/pl.po: Likewise.
1511 * po/pt_BR.po: Likewise.
1512 * po/ru.po: Likewise.
1513 * po/zh_CN.po: Likewise.
1514 * po/as.po: New file.
1515 * po/gu.po: Likewise.
1516 * po/hi.po: Likewise.
1517 * po/kn.po: Likewise.
1518 * po/ko.po: Likewise.
1519 * po/ml.po: Likewise.
1520 * po/or.po: Likewise.
1521 * po/si.po: Likewise.
1522 * po/ta.po: Likewise.
1524 2008-02-21 Tomas Mraz <t8m@centrum.cz>
1526 * libpam/pam_audit.c (_pam_audit_writelog): Silence syslog
1527 message on non-error return.
1529 * modules/pam_unix/unix_chkpwd.c (main): Proceed as unprivileged
1530 user when checking password of another user.
1531 * modules/pam_unix/unix_update.c: Fix comment.
1533 2008-02-18 Dmitry V. Levin <ldv@altlinux.org>
1535 * libpam/pam_handlers.c (_pam_assemble_line): Fix potential
1537 * xtests/tst-pam_assemble_line1.pamd: New test for
1539 * xtests/tst-pam_assemble_line1.sh: New script for
1540 tst-pam_assemble_line1.
1541 * xtests/Makefile.am (NOSRCTESTS): Add tst-pam_assemble_line1.
1542 (EXTRA_DIST): Add tst-pam_assemble_line1.pamd and
1543 tst-pam_assemble_line1.sh
1545 * modules/pam_exec/pam_exec.c (call_exec): Fix asprintf return
1548 2008-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
1550 * release version 0.99.10.0
1552 * configure.in: set version number.
1554 * modules/pam_rhosts/Makefile.am: Remove pam_rhosts_auth.
1555 * modules/pam_rhosts/pam_rhosts_auth.c: Removed.
1556 * modules/pam_rhosts/tst-pam_rhosts_auth: Removed.
1558 * modules/pam_namespace/Makefile.am (noinst_HEADERS): Add
1561 2008-02-13 Tomas Mraz <t8m@centrum.cz>
1563 * modules/pam_namespace/Makefile.am: Add argv_parse files and namespace.d
1565 * modules/pam_namespace/argv_parse.c: New file.
1566 * modules/pam_namespace/argv_parse.h: New file.
1567 * modules/pam_namespace/namespace.conf.5.xml: Document new features.
1568 * modules/pam_namespace/pam_namespace.8.xml: Likewise.
1569 * modules/pam_namespace/pam_namespace.h: Use SECURECONF_DIR define.
1570 Define NAMESPACE_D_DIR and NAMESPACE_D_GLOB. Define new option flags
1572 (polydir_s): Add rdir, replace exclusive with flags, add init_script,
1573 owner, group, and mode.
1574 (instance_data): Add ruser, gid, and ruid.
1575 * modules/pam_namespace/pam_namespace.c: Remove now unused copy_ent().
1576 (add_polydir_entry): Add the entry directly, no copy.
1577 (del_polydir): New function.
1578 (del_polydir_list): Call del_polydir().
1579 (expand_variables, parse_create_params, parse_iscript_params,
1580 parse_method): New functions.
1581 (process_line): Call expand_variables() on polydir and instance prefix.
1582 Call argv_parse() instead of strtok_r(). Allocate struct polydir_s on heap.
1583 (parse_config_file): Parse .conf files from namespace.d dir after
1585 (form_context): Call getcon() or get_default_context_with_level() when
1586 appropriate flags are set.
1587 (poly_name): Handle shared polydir flag.
1588 (inst_init): Execute non-default init script when specified.
1589 (create_polydir): New function.
1590 (create_dirs): Remove the code which checks the polydir. Do not call
1591 inst_init() when noinit flag is set.
1592 (ns_setup): Check the polydir and eventually create it if the create flag
1594 (setup_namespace): Use ruser uid from idata. Set the namespace polydir
1595 pam data only when namespace was set up correctly. Unmount polydir
1597 (get_user_data): New function.
1598 (pam_sm_open_session): Check for use_current_context and
1599 use_default_context options. Call get_user_data().
1600 (pam_sm_close_session): Call get_user_data().
1602 2008-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
1604 * po/de.po: Translate some more strings.
1606 2008-02-05 Thorsten Kukuk <kukuk@thkukuk.de>
1608 * modules/pam_unix/unix_update.c: Remove unused declarations.
1610 2008-02-04 Thorsten Kukuk <kukuk@thkukuk.de>
1612 * libpam/pam_static_modules.h: Add _pam_sepermit_modstruct.
1613 * modules/pam_sepermit/pam_sepermit.c: Fix typo.
1614 * modules/pam_sepermit/Makefile.am: Install config file only
1615 if we build the module.
1617 * README: Add --disable-pie to configure options for static library.
1619 * doc/man/Makefile.am: Fix building outside of src directory.
1621 * libpam/Makefile.am: Bump version number of libpam.
1623 * modules/Makefile.am: Add pam_sepermit.
1625 * doc/Makefile.am: Fix build out of source directory.
1627 * po/POTFILES.in: Add pam_sepermit.c.
1629 * modules/pam_exec/pam_exec.c: Set PAM environment variables and
1631 * modules/pam_exec/pam_exec.8.xml: Document new behavior.
1632 Patch from Julien Lecomte <julien@lecomte.at>.
1634 2008-02-01 Tomas Mraz <t8m@centrum.cz>
1636 * modules/pam_namespace/namespace.conf.5.xml: Add documentation for
1637 tmpfs and tmpdir polyinst and for ~ user list modifier.
1638 * modules/pam_namespace/namespace.init: Add documentation for the
1639 new init parameter. Add home directory initialization script.
1640 * modules/pam_namespace/pam_namespace.8.xml: Document the new
1641 init parameter of the namespace.init script.
1642 * modules/pam_namespace/pam_namespace.c(copy_ent): Copy exclusive flag.
1643 (cleanup_data): New function.
1644 (process_line): Set exclusive flag. Add tmpfs and tmpdir methods.
1645 (ns_override): Change behavior on the exclusive flag.
1646 (poly_name): Process tmpfs and tmpdir methods.
1647 (inst_init): Add flag for new directory initialization.
1648 (create_dirs): Process the tmpdir method, add the new directory
1650 (ns_setup): Remove unused code. Process the tmpfs method.
1651 (cleanup_tmpdirs): New function.
1652 (setup_namespace): Set data for proper cleanup. Cleanup the tmpdirs
1654 (pam_sm_close_session): Instead of parsing the config file again use
1655 the previously set data for cleanup.
1656 * modules/pam_namespace/pam_namespace.h: Add TMPFS and TMPDIR methods
1659 2008-01-29 Tomas Mraz <t8m@centrum.cz>
1661 * configure.in: Test for setkeycreatecon needs libselinux.
1662 Add new module pam_sepermit.
1663 * modules/Makefile.am: Add new module pam_sepermit.
1664 * modules/pam_sepermit/.cvsignore: New file.
1665 * modules/pam_sepermit/Makefile.am: Likewise.
1666 * modules/pam_sepermit/README.xml: Likewise.
1667 * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
1668 * modules/pam_sepermit/pam_sepermit.c: Likewise.
1669 * modules/pam_sepermit/sepermit.conf: Likewise.
1670 * modules/pam_sepermit/tst-pam_sepermit: Likewise.
1671 * doc/sag/pam_sepermit.xml: Likewise.
1673 * doc/sag/pam_tty_audit.xml: Add pam_tty_audit to SAG.
1675 2008-01-29 Miloslav Trmac <mitr@redhat.com>
1677 * modules/pam_tty_audit/README.xml: Add notes section.
1678 * modules/pam_tty_audit/pam_tty_audit.8.xml: Describe patterns
1679 support and open_only option. Add notes.
1680 * modules/pam_tty_audit/pam_tty_audit.c(pam_sm_open_session): Add
1681 support for pattern matching and the open_only option.
1683 2008-01-28 Thorsten Kukuk <kukuk@thkukuk.de>
1685 * libpam/pam_audit.c: Include pam_modutil_private.h.
1687 * libpam/pam_item.c (pam_set_item): Fix compiler warning.
1689 * libpam/pam_end.c (pam_end): Cast to correct pointer type.
1690 * libpam/include/security/_pam_macros.h (_pam_overwrite_n): Use
1693 * modules/pam_unix/passverify.c: Fix compiling without SELinux
1696 2008-01-24 Tomas Mraz <t8m@centrum.cz>
1698 * modules/pam_unix/bigcrypt.c (bigcrypt): Use crypt_r() when
1700 * modules/pam_unix/passverify.c (strip_hpux_aging): New function
1701 to strip HP/UX aging info from password hash.
1702 (verify_pwd_hash): Call strip_hpux_aging(), use crypt_r() when
1705 2008-01-23 Tomas Mraz <t8m@centrum.cz>
1707 * configure.in: Add test for crypt_r(). Add setting/disabling random
1710 * modules/pam_unix/Makefile.am: Add unix_update.8 manpage generated from
1711 XML, generate also unix_chkpwd.8 from XML.
1712 * modules/pam_unix/pam_unix_acct.c: Add rounds parameter to _set_ctrl().
1713 * modules/pam_unix/pam_unix_auth.c: Likewise.
1714 * modules/pam_unix/pam_unix_sess.c: Likewise.
1715 * modules/pam_unix/pam_unix_passwd.c: Likewise.
1716 * modules/pam_unix/support.c(_set_ctrl): Likewise.
1717 * modules/pam_unix/support.h: Likewise. Add UNIX_SHA256_PASS,
1718 UNIX_SHA512_PASS, and UNIX_ALGO_ROUNDS ctrls.
1719 (pam_sm_chauthtok): Refactor out new password encryption.
1720 * modules/pam_unix/passverify.c(crypt_make_salt): New function.
1721 (crypt_md5_wrapper): Call crypt_make_salt().
1722 (create_password_hash): New function refactored out of
1723 pam_sm_chauthtok(). Support for new password hashes.
1724 * modules/pam_unix/passverify.h: Drop ascii_to_bin() and bin_to_ascii()
1725 macros. Add prototype for create_password_hash().
1726 * modules/pam_unix/unix_update.8.xml: New file.
1727 * modules/pam_unix/unix_chkpwd.8.xml: Likewise.
1729 * modules/pam_unix/Makefile.am: Add unix_update helper.
1730 * modules/pam_unix/pam_unix_passwd.c: Move functions i64c(),
1731 crypt_md5_wrapper(), save_old_password(), _update_passwd() and
1732 _update_shadow() to passverify.c file. Rename _unix_run_shadow_binary()
1733 to _unix_run_update_binary(), which also verifies old password and
1735 (_do_setpass, pam_sm_chauthtok): lckpwdf()->lock_pwdf(), the same for unlock.
1736 Call _unix_run_update_binary() appropriately.
1737 _update_passwd()->unix_update_passwd(), the same for shadow.
1738 * modules/pam_unix/passverify.c: Add new functions moved from
1739 pam_unix_passwd.c and unix_chkpwd.c.
1740 * modules/pam_unix/passverify.h: Likewise.
1741 * modules/pam_unix/unix_chkpwd.c: Remove SELinux checks. Move
1742 su_sighandler(), setup_signals(), getuidname() to passverify.c.
1743 (main): Remove 'shadow' option. Refactor out read_passwords() and
1744 call it. More strict checking how the binary is called.
1745 * modules/pam_unix/unix_update.c: New helper binary - non-setuid,
1746 called from SELinux confined apps only.
1748 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Return
1749 status and daysleft instead of fake shadow entry.
1750 (pam_sm_acct_mgmt): Call _unix_run_verify_binary() appropriately.
1751 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Call
1752 get_account_info() and check_shadow_expiry().
1753 * modules/pam_unix/support.h: Adjust _unix_run_verify_binary()
1755 * modules/pam_unix/support.c (_unix_run_helper_binary): Remove check
1756 on selinux enabled/disabled.
1757 * modules/pam_unix/unix_chkpwd.c (_verify_account): Rename to
1758 _check_expiry(), now checks shadow expiry info.
1759 (main): Remove check on selinux enabled/disabled. Check shadow
1760 expiry through _check_expiry().
1762 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Call
1763 get_account_info() and check_shadow_expiry().
1764 * modules/pam_unix/passverify.c: Add get_account_info() to
1765 obtain shadow and passwd entry. Add check_shadow_expiry() to
1766 for shadow password expiry check.
1767 (get_pwd_hash): Call get_account_info().
1768 * modules/pam_unix/passverify.h: Add prototypes for get_account_info()
1769 and check_shadow_expiry().
1771 2008-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
1773 * doc/man/Makefile.am: Fix manual page dependencies,
1774 add hack for bug in xsl stylestheets.
1776 2008-01-07 Thorsten Kukuk <kukuk@thkukuk.de>
1778 * po/it.po: Fix typos.
1779 * po/de.po: Few new translations.
1780 * po/POTFILES.in: Add pam_tty_audit.c and passverify.c.
1781 * doc/man/pam_xauth_data.3.xml: Added to CVS.
1782 * doc/man/pam_xauth_data.3: Likewise.
1783 * modules/pam_tty_audit/README: Likewise.
1784 * modules/pam_tty_audit/pam_tty_audit.8: Likewise.
1785 * po/sv.po: Update swedish translation [#1857531].
1786 * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix
1787 cut & paste error [#1863490].
1789 2008-01-02 Petteri Räty <betelgeuse@gentoo.org>
1790 * modules/pam_limits/limits.conf: document allowed values for
1792 * modules/pam_limits/limits.conf.5.xml: Likewise.
1794 2007-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
1796 * README: Document how to run make check with static modules
1799 2007-12-18 Peter Breitenlohner <peb@mppmu.mpg.de>
1800 * README: Document that "make check" requires a file
1801 /etc/pam.d/other (SF#1822764).
1803 2007-12-12 Eamon Walsh <ewalsh@tycho.nsa.gov>
1805 * doc/man/pam_item_types_ext.inc.xml: More appropriate wording
1806 for PAM_XDISPLAY doc.
1808 2007-12-07 Tomas Mraz <t8m@centrum.cz>
1810 * po/cs.po: Updated translations.
1812 * libpam/libpam.map: Add LIBPAM_MODUTIL_1.1 version.
1813 * libpam/pam_audit.c: Add _pam_audit_open() and
1814 pam_modutil_audit_write().
1815 (_pam_auditlog): Call _pam_audit_open().
1816 * libpam/include/security/pam_modutil.h: Add pam_modutil_audit_write().
1817 * modules/pam_access/pam_access.8.xml: Add noaudit option.
1819 * modules/pam_access/pam_access.c: Move fs, sep, pam_access_debug, and
1820 only_new_group_syntax variables to struct login_info. Add noaudit
1822 (_parse_args): Adjust for the move of variables and add support for
1824 (group_match): Add debug parameter.
1825 (string_match): Likewise.
1826 (network_netmask_match): Likewise.
1827 (login_access): Adjust for the move of variables. Add nonall_match.
1828 Add call to pam_modutil_audit_write().
1829 (list_match): Adjust for the move of variables.
1830 (user_match): Likewise.
1831 (from_match): Likewise.
1832 (pam_sm_authenticate): Call _parse_args() earlier.
1833 * modules/pam_limits/pam_limits.8.xml: Add noaudit option.
1835 * modules/pam_limits/pam_limits.c (_pam_parse): Add noaudit option.
1836 (setup_limits): Call pam_modutil_audit_write().
1837 * modules/pam_time/pam_time.8.xml: Add debug and noaudit options.
1839 * modules/pam_time/pam_time.c: Add option parsing (_pam_parse()).
1840 (check_account): Call _pam_parse(). Call pam_modutil_audit_write()
1841 and pam_syslog() on login denials.
1843 2007-12-07 Luca Bruno <luca.br@uno.it>
1845 * po/it.po: Updated translations.
1847 2007-12-06 Eamon Walsh <ewalsh@tycho.nsa.gov>
1849 * libpam/include/security/_pam_macros.h: Add _pam_overwrite_n()
1851 * libpam/include/security/_pam_types.h: Add PAM_XDISPLAY,
1852 PAM_XAUTHDATA items, pam_xauth_data struct.
1853 * libpam/pam_item.c (pam_set_item, pam_get_item): Handle
1854 PAM_XDISPLAY and PAM_XAUTHDATA items.
1855 * libpam/pam_end.c (pam_end): Destroy the new items.
1856 * libpam/pam_private.h (pam_handle): Add data members for new
1857 items. Add prototype for _pam_memdup.
1858 * libpam/pam_misc.c: Add _pam_memdup.
1859 * doc/man/Makefile.am: Add pam_xauth_data.3. Replace
1860 pam_item_types.inc.xml with pam_item_types_std.inc.xml and
1861 pam_item_types_ext.inc.xml.
1862 * doc/man/pam_get_item.3.xml: Replace pam_item_types.inc.xml
1863 with pam_item_types_std.inc.xml and pam_item_types_ext.inc.xml.
1864 * doc/man/pam_set_item.3.xml: Likewise.
1865 * doc/man/pam_item_types.inc.xml: Removed file.
1866 * doc/man/pam_item_types_ext.inc.xml: New file.
1867 * doc/man/pam_item_types_std.inc.xml: New file.
1869 2007-12-06 Tomas Mraz <t8m@centrum.cz>
1871 * modules/pam_tty_audit/pam_tty_audit.8.xml: Fix example.
1873 2007-12-05 Miloslav Trmac <mitr@redhat.com>
1875 * configure.in: Add test for audit_tty_status struct. Add
1876 pam_tty_audit module.
1877 * libpam/pam_static_modules.h: Add pam_tty_audit module.
1878 * modules/pam_tty_audit/Makefile.am: New file.
1879 * modules/pam_tty_audit/README.xml: Likewise.
1880 * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
1881 * modules/pam_tty_audit/pam_tty_audit.c: Likewise.
1883 2007-12-05 Tomas Mraz <t8m@centrum.cz>
1885 * modules/pam_unix/Makefile.am: Add passverify.h and passverify.c
1886 as first part of pam_unix refactorization.
1887 * modules/pam_unix/pam_unix/pam_unix_acct.c: Include passverify.h.
1888 * modules/pam_unix/pam_unix_passwd.c: Likewise.
1889 * modules/pam_unix/passverify.c: New file with common functions.
1890 * modules/pam_unix/passverify.h: Prototypes for the common functions.
1891 * modules/pam_unix/support.c: Include passverify.h, move
1892 _unix_shadowed() to passverify.c.
1893 (_unix_verify_password): Refactor out verify_pwd_hash() function.
1894 * modules/pam_unix/support.h: Move _unix_shadowed() prototype to
1896 * modules/pam_unix/unix_chkpwd.c: Use _unix_shadowed() and
1897 verify_pwd_hash() from passverify.c.
1899 2007-11-20 Thorsten Kukuk <kukuk@thkukuk.de>
1901 * modules/pam_unix/Makefile.am (unix_chkpwd_LDADD): Don't link
1902 unix_chkpwd unnecessary against libpam (#1822779).
1904 * modules/pam_tally/pam_tally.c (tally_log): Map
1905 pam_modutil_getpwnam to getpwnam if we don't compile
1907 * modules/pam_tally/Makefile.am: Don't link pam_tally_app
1908 against libpam (#1822779).
1910 2007-11-06 Thorsten Kukuk <kukuk@thkukuk.de>
1912 * xtests/tst-pam_group1.c: Include stdlib.h
1913 * xtests/tst-pam_succeed_if1.c: Likewise.
1914 * xtests/tst-pam_limits1.c: Likewise.
1915 * xtests/tst-pam_access1.c: Likewise.
1916 * xtests/tst-pam_access2.c: Likewise.
1917 * xtests/tst-pam_access3.c: Likewise.
1918 * xtests/tst-pam_access4.c: Likewise.
1919 * xtests/tst-pam_unix1.c: Likewise.
1920 * xtests/tst-pam_unix2.c: Likewise.
1921 * xtests/tst-pam_unix3.c: Likewise.
1922 * xtests/tst-pam_cracklib1.c: Likewise.
1923 * xtests/tst-pam_cracklib2.c: Likewise.
1925 * libpam/pam_static_modules.h: Fix name of pam_namespace variable.
1927 2007-11-01 Peter Breitenlohner <peb@mppmu.mpg.de>
1929 * doc/man/pam_conv.3.xml: Correct typo.
1931 2007-10-30 Peter Breitenlohner <peb@mppmu.mpg.de>
1933 * modules/pam_rhosts/pam_rhosts_auth.c (__icheckhost): Correct
1934 misplaced parenthesis.
1935 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Prevent use of
1936 dngettext() when NLS is disabled.
1937 * modules/pam_exec/pam_exec.c (call_exec): Avoid gcc warning.
1938 * doc/specs/parse_y.y (set_label, new_counter): Break trigraphs to
1940 * modules/pam_wheel/pam_wheel.c: Remove excessive initializer
1943 * modules/pam_cracklib/pam_cracklib.8.xml: Correct typo.
1944 * modules/pam_limits/limits.conf.5.xml: Likewise.
1945 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
1946 * modules/pam_xauth/pam_xauth.8.xml: Likewise.
1948 * modules/pam_deny/pam_deny.8.xml: Correct spelling.
1949 * modules/pam_group/pam_group.8.xml: Likewise.
1950 * modules/pam_permit/pam_permit.8.xml: Likewise.
1951 * modules/pam_shells/pam_shells.8.xml: Likewise.
1952 * modules/pam_time/pam_time.8.xml: Likewise.
1953 * modules/pam_warn/pam_warn.8.xml: Likewise.
1955 * tests/tst-dlopen.c: Return 77 in case of static modules, such that
1956 all modules/pam_*/tst-pam_* tests yield SKIP instead of FAIL.
1957 * libpam/Makefile.am (libpam_la_LIBADD): Use "$(shell ls ...)" instead
1958 of "`ls ...`", to allow for static modules.
1959 * libpam/pam_static_modules.h: Make pam_keyinit module depend on
1960 HAVE_KEY_MANAGEMENT; correct name of pam_faildelay pam_module struct.
1961 * modules/pam_faildelay/pam_faildelay.c: Correct name of pam_module
1964 2007-10-25 Steve Langasek <vorlon@debian.org>
1966 * modules/pam_tally/pam_tally.c: fix the definition of OPT_AUDIT
1967 to be octal instead of decimal, so that it works properly in a
1968 bit field instead of forcing the "even_deny_root_account" and
1969 "no_reset" options to on.
1970 Patch from Corey Wright <undefined@pobox.com>.
1972 2007-10-19 Tomas Mraz <t8m@centrum.cz>
1974 * xtests/tst-pam_access1.c: Use different name for user and group.
1975 * xtests/tst-pam_access1.sh: Likewise.
1976 * xtests/tst-pam_access2.c: Likewise.
1977 * xtests/tst-pam_access2.sh: Likewise.
1978 * xtests/tst-pam_access4.c: Likewise.
1979 * xtests/tst-pam_access4.sh: Likewise.
1980 * xtests/group.conf: Likewise.
1981 * xtests/tst-pam_group1.c: Likewise.
1982 * xtests/tst-pam_group1.sh: Likewise.
1984 * libpam/pam_dispatch.c (_pam_dispatch_aux): Save states for substacks,
1985 record substack level, skip over virtual substack modules, implement
1986 evaluation of done, die, reset and jumps in substacks. Also fixes
1987 too far jumps in substacks.
1988 * libpam/pam_end.c (pam_end): Drop substack evaluation states.
1989 * libpam/pam_handlers.c (_pam_parse_conf_file): Add substack level
1990 parameter, instead of must_fail use handler_type needed for virtual
1992 (_pam_load_conf_file): Add substack level parameter.
1993 (_pam_init_handlers): Substack level parameter added to
1994 _pam_parse_conf_file() calls.
1995 (_pam_load_module): New function.
1996 (_pam_add_handler): Refactor code into the _pam_load_module(). Add
1997 support for virtual substack modules.
1998 * libpam/pam_private.h: Rename must_fail to handler_type, add stack_level
1999 to struct handler. Define handler type constants. Add struct
2000 for substack evaluation states. Define constant for maximum
2001 substack level. Add substack states pointer to former state struct.
2002 * libpam/pam_start.c (pam_start): Initialize pointer to substack states.
2003 * doc/man/pam.conf-syntax.xml: Document substack control.
2004 * xtests/Makefile.am: Add new tests for substack evaluation.
2005 * xtests/run_xtests.sh: Support multiple .pamd files in a test.
2006 * xtests/tst-pam_authfail.pamd: New tests for substack evaluation.
2007 * xtests/tst-pam_authsucceed.pamd: Likewise.
2008 * xtests/tst-pam_substack1.pamd: Likewise.
2009 * xtests/tst-pam_substack1a.pamd: Likewise.
2010 * xtests/tst-pam_substack1.sh: Likewise.
2011 * xtests/tst-pam_substack2.pamd: Likewise.
2012 * xtests/tst-pam_substack2a.pamd: Likewise.
2013 * xtests/tst-pam_substack2.sh: Likewise.
2014 * xtests/tst-pam_substack3.pamd: Likewise.
2015 * xtests/tst-pam_substack3a.pamd: Likewise.
2016 * xtests/tst-pam_substack3.sh: Likewise.
2017 * xtests/tst-pam_substack4.pamd: Likewise.
2018 * xtests/tst-pam_substack4a.pamd: Likewise.
2019 * xtests/tst-pam_substack4.sh: Likewise.
2020 * xtests/tst-pam_substack5.pamd: Likewise.
2021 * xtests/tst-pam_substack5a.pamd: Likewise.
2022 * xtests/tst-pam_substack5.sh: Likewise.
2024 2007-10-18 Tomas Mraz <t8m@centrum.cz>
2026 * xtests/tst-pam_dispatch4.c: Fix comment about the test.
2027 * xtests/tst-pam_dispatch4.pamd: Improve the testcase.
2028 * xtests/tst-pam_cracklib2.c: Make the testcase more robust.
2030 2007-10-12 Thorsten Kukuk <kukuk@thkukuk.de>
2032 * xtests/Makefile.am: Add tst-pam_dispatch5 sources
2033 * xtests/tst-pam_dispatch5.c: New test for jump too far.
2034 * xtests/tst-pam_dispatch5.pamd: New test configuration.
2036 2007-10-09 Tomas Mraz <t8m@centrum.cz>
2038 * modules/pam_tally/pam_tally.8.xml: Document audit option
2041 2007-10-09 Thorsten Kukuk <kukuk@thkukuk.de>
2043 * release version 0.99.9.0
2045 * configure.in: Increase vesion number.
2047 * libpam/Makefile.am: Increase release number.
2048 * libpam_misc/Makefile.am: Increase release number.
2050 * po/*.po: Regenerate.
2052 2007-10-08 Thorsten Kukuk <kukuk@thkukuk.de>
2054 * modules/pam_time/pam_time.c (is_same): Length of strings without
2055 wildcard needs to be the same.
2056 * modules/pam_group/pam_group.c (is_same): Likewise.
2058 2007-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
2060 * xtests/tst-pam_group1.c: New test case for user compare in pam_group.
2061 * xtests/tst-pam_group1.sh: Script to run test case.
2062 * xtests/tst-pam_group1.pamd: Config for test case.
2063 * xtests/Makefile.am: Add tst-pam_group1 test case.
2064 * xtests/run-xtests.sh: Save/restore group.conf.
2065 * xtests/group.conf: New.
2067 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Don't
2068 free arguments used for putenv().
2070 * doc/man/pam_putenv.3.xml: Document that application has to free
2073 2007-09-27 Tomas Mraz <t8m@centrum.cz>
2075 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist): Fix in
2076 operator rhbz #295151.
2077 * modules/pam_namespace/pam_namespace.c (poly_name): Do not try to
2078 get context when SELinux is disabled.
2080 2007-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
2082 * xtests/tst-pam_succeed_if1.c: New test case for
2083 https://bugzilla.redhat.com/show_bug.cgi?id=295151
2084 * xtests/tst-pam_succeed_if1.sh: Script to run test case.
2085 * xtests/tst-pam_succeed_if1.pamd: Config for test case.
2086 * xtests/Makefile.am: Add tst-pam_succeed_if1 test case.
2088 * xtests/run-xtests.sh: Add support to skip tests.
2089 * xtests/tst-pam_limits1.c: Skip test if RLIMIT_NICE is not
2092 2007-09-03 Steve Langasek <vorlon@debian.org>
2094 * modules/pam_limits/pam_limits.c: remove a number of unnecessary
2095 string manipulations, including a strncpy() that was acting on
2098 * libpam_misc/misc_conv.c: don't block SIGINT in misc_conv; it's
2099 perfectly valid to allow the user to interrupt at a prompt. If
2100 an application wants prompts to not be interruptable, the
2101 application should take responsibility for blocking SIGINT.
2103 2007-09-02 Thorsten Kukuk <kukuk@thkukuk.de>
2105 * examples/Makefile.am: Fix usage of LIBADD, LDADD and LDFLAGS.
2106 * libpam/Makefile.am: Likewise.
2107 * modules/pam_access/Makefile.am: Likewise.
2108 * modules/pam_cracklib/Makefile.am: Likewise.
2109 * modules/pam_debug/Makefile.am: Likewise.
2110 * modules/pam_deny/Makefile.am: Likewise.
2111 * modules/pam_echo/Makefile.am: Likewise.
2112 * modules/pam_env/Makefile.am: Likewise.
2113 * modules/pam_exec/Makefile.am: Likewise.
2114 * modules/pam_faildelay/Makefile.am: Likewise.
2115 * modules/pam_filter/Makefile.am: Likewise.
2116 * modules/pam_filter/upperLOWER/Makefile.am: Likewise.
2117 * modules/pam_ftp/Makefile.am: Likewise.
2118 * modules/pam_group/Makefile.am: Likewise.
2119 * modules/pam_issue/Makefile.am: Likewise.
2120 * modules/pam_keyinit/Makefile.am: Likewise.
2121 * modules/pam_lastlog/Makefile.am: Likewise.
2122 * modules/pam_limits/Makefile.am: Likewise.
2123 * modules/pam_listfile/Makefile.am: Likewise.
2124 * modules/pam_localuser/Makefile.am: Likewise.
2125 * modules/pam_loginuid/Makefile.am: Likewise.
2126 * modules/pam_mail/Makefile.am: Likewise.
2127 * modules/pam_mkhomedir/Makefile.am: Likewise.
2128 * modules/pam_motd/Makefile.am: Likewise.
2129 * modules/pam_namespace/Makefile.am: Likewise.
2130 * modules/pam_nologin/Makefile.am: Likewise.
2131 * modules/pam_permit/Makefile.am: Likewise.
2132 * modules/pam_rhosts/Makefile.am: Likewise.
2133 * modules/pam_rootok/Makefile.am: Likewise.
2134 * modules/pam_securetty/Makefile.am: Likewise.
2135 * modules/pam_selinux/Makefile.am: Likewise.
2136 * modules/pam_shells/Makefile.am: Likewise.
2137 * modules/pam_stress/Makefile.am: Likewise.
2138 * modules/pam_succeed_if/Makefile.am: Likewise.
2139 * modules/pam_tally/Makefile.am: Likewise.
2140 * modules/pam_time/Makefile.am: Likewise.
2141 * modules/pam_umask/Makefile.am: Likewise.
2142 * modules/pam_unix/Makefile.am: Likewise.
2143 * tests/Makefile.am: Likewise.
2145 2007-08-31 Steve Langasek <vorlon@debian.org>
2147 * modules/pam_group/group.conf: don't use "games" as an example
2148 group, on some distros this is a pre-existing group that it would
2149 be a security hole to give users access to.
2151 2007-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
2153 * modules/pam_limits/limits.conf.5.xml: Document that maxlogins
2154 is ignored for users with UID 0.
2156 2007-08-30 Steve Langasek <vorlon@debian.org>
2158 * modules/pam_unix/support.c, modules/pam_unix/unix_chkpwd.c:
2159 A wrong username doesn't need to be logged at LOG_ALERT;
2160 LOG_WARNING should be sufficient.
2161 Patch from Sam Hartman <hartmans@debian.org>.
2163 * modules/pam_cracklib/pam_cracklib.c:
2164 s/CRACKLIB_DICT/CRACKLIB_DICTS/, for consistency with existing
2167 2007-08-29 Steve Langasek <vorlon@debian.org>
2169 * libpam/pam_modutil_getgrgid.c, libpam/pam_modutil_getgrnam.c,
2170 libpam/pam_modutil_getpwnam.c, libpam/pam_modutil_getpwuid.c,
2171 libpam/pam_modutil_getspnam.c: don't use pthread mutexes in libpam
2172 unnecessarily; this avoids linking problems on non-Linux
2175 * modules/pam_listfile/pam_listfile.c, modules/pam_listfile/README,
2176 modules/pam_listfile/pam_listfile.8,
2177 modules/pam_listfile/pam_listfile.8.xml: add a 'quiet' option to
2178 avoid logging errors any time a user is refused service by this
2181 2007-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
2183 * modules/pam_rhosts/pam_rhosts_auth.c: buflen needs to be size_t.
2184 (__icheckhost): Cast to int32_t to fix limited range error.
2186 * modules/pam_cracklib/pam_cracklib.c: Mark cracklib_dictpath
2189 2007-08-29 Steve Langasek <vorlon@debian.org>
2191 * modules/pam_rhosts/pam_rhosts_auth.c: getline returns -1 at
2192 EOF, not 0. Check accordingly to fix an infinite loop. Thanks
2193 to Stephan Springl <springl-rhosts@bfw-online.de> for catching
2196 2007-08-28 Steve Langasek <vorlon@debian.org>
2198 * configure.in: call AC_CHECK_HEADERS instead of AC_CHECK_HEADER
2199 for crack.h, so we get a HAVE_CRACK_H define.
2200 * modules/pam_cracklib/pam_cracklib.c: don't copy around the
2201 cracklib dictpath into a fixed-width buffer, when we can just
2202 point at the existing strings; and allow users to override the
2203 default cracklib path with -DCRACKLIB_DICT, required for
2204 compatibility with cracklib 2.7.
2206 2007-08-27 Steve Langasek <vorlon@debian.org>
2208 * modules/pam_limits/pam_limits.c: when building on non-Linux
2209 systems, give a warning only, not an error; no one seems to
2210 remember why this error was here in the first place, but leave
2211 something in that might still grab the attention of non-Linux
2213 Patch from Michal Suchanek <hramrach_l@centrum.cz>.
2214 * configure.in, modules/pam_rhosts/pam_rhosts_auth.c: check for
2215 the presence of net/if.h before using, required for Hurd
2217 Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
2218 * modules/pam_limits/pam_limits.c: conditionalize the use of
2219 RLIMIT_AS, which is not present on the Hurd.
2220 Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
2221 * modules/pam_rhosts/pam_rhosts_auth.c: use getline() instead of
2222 a static buffer when available; fixes the build on systems
2223 without MAXHOSTNAMELEN (i.e., the Hurd).
2224 * modules/pam_xauth/pam_xauth.c: make sure PATH_MAX is defined
2227 2007-08-26 Andrew Morgan <morgan@kernel.org>
2229 * doc/man/pam.conf-syntax.xml
2230 Minor fixes: '\[' -> '\]'.
2232 2007-08-25 Steve Langasek <vorlon@debian.org>
2234 * doc/man/pam.conf-syntax.xml, doc/man/pam.conf.5:
2235 Document "new" control options conv_again and incomplete, supported
2236 in pam.d's extended syntax.
2237 Patch from Ben Collins <bcollins@debian.org>.
2239 2007-08-15 Tomas Mraz <t8m@centrum.cz>
2241 * modules/pam_access/pam_access.c (list_match): Add explicit
2242 sptr argument for strtok_r, otherwise the code is not portable.
2244 2007-08-13 Olivier Blin <blino@mandriva.com>
2246 * doc/man/pam.3.xml: Fix typo.
2247 * doc/man/pam.3: Likewise.
2248 * doc/man/pam_end.3.xml: Likewise.
2249 * doc/man/pam_end.3: Likewise.
2251 2007-07-18 Thorsten Kukuk <kukuk@thkukuk.de>
2253 * release version 0.99.8.1
2255 * libpam/pam_audit.c: Include unistd.h for getuid().
2256 * libpam/Makefile.am: Bump version number.
2258 2007-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
2260 * libpam/pam_audit.c (_pam_audit_writelog): Don't return
2261 error if application runs as normal user. Fixes regression
2262 introduced with last change.
2264 2007-07-10 Thorsten Kukuk <kukuk@thkukuk.de>
2266 * configure.in: Add --with-db-uniquename option to support
2267 db libraries and functions with unique name extension.
2268 Patch from Diego 'Flameeyes' Pettenò <flameeyes@gmail.com>.
2270 * modules/pam_limits/pam_limits.c: Include locale.h.
2272 2007-07-06 Thorsten Kukuk <kukuk@thkukuk.de>
2274 * release version 0.99.8.0
2276 * configure.in: Check for audit_log_acct_message instead of
2277 audit_log_user_message.
2278 * libpam/pam_audit.c: Use audit_log_acct_message.
2279 Based on patch from Mark J Cox <mjc@redhat.com>.
2280 * libpam/Makefile.am: Bump version number of libpam.
2282 * modules/pam_umask/pam_umask.c (set_umask): mode_t is 32bit,
2285 * xtests/tst-pam_limits1.c: Fix printf arguments.
2287 * po/*.po: Merge po files with latest code changes.
2289 2007-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
2291 * modules/pam_limits/pam_limits.c (process_limit): Check upper and
2292 lower limit of nice value, fix off-by-one in conversation to rlim_t.
2293 * xtests/Makefile.am: Add new pam_limits test case.
2294 * xtests/limits.conf: New, config file for test case.
2295 * xtests/pam_limits1.c: New, test case for RLIMIT_NICE.
2296 * xtests/pam_limits1.sh: Likewise.
2297 * xtests/pam_limits1.pamd: Likewise.
2299 2007-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
2301 * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r
2302 result for recursive calls.
2303 * xtests/Makefile.am: Add new pam_access test cases.
2304 * xtests/pam_access1.c: New test case.
2305 * xtests/pam_access2.c: Likewise.
2306 * xtests/pam_access3.c: Likewise.
2307 * xtests/pam_access4.c: Likewise.
2308 * xtests/pam_access1.sh: Wrapper to create user accounts.
2309 * xtests/pam_access2.sh: Likewise.
2310 * xtests/pam_access3.sh: Likewise.
2311 * xtests/pam_access4.sh: Likewise.
2312 * xtests/pam_access1.pamd: PAM config file for pam_access tests.
2313 * xtests/pam_access2.pamd: Likewise.
2314 * xtests/pam_access3.pamd: Likewise.
2315 * xtests/pam_access4.pamd: Likewise.
2316 * xtests/access.conf: Config file for pam_access tests.
2317 * xtests/run-tests.sh: Install access.conf into system.
2319 2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
2321 * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print
2322 better error message if /proc/self/loginuid cannot be opened.
2324 * modules/pam_limits/pam_limits.c (process_limit): Check for
2325 variable overflow after multiplication [bnc#283001].
2327 * modules/pam_access/pam_access.c: Add new syntax for groups
2328 in access.conf to differentiate group names from account names.
2329 Based on patch from Julien Lecomte <julien@famille-lecomte.net>,
2330 solves feature request [#411390].
2331 * modules/pam_access/access.conf: Add example for new group
2333 * modules/pam_access/access.conf.5.xml: Document new syntax.
2335 2007-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
2337 * modules/pam_cracklib/pam_cracklib.8.xml: Document new minclass
2339 * modules/pam_cracklib/pam_cracklib.c: Add support for minimum
2340 character classes [#1688777]. Based on patch from Keith Schincke.
2342 * xtests/tst-pam_cracklib2.c: New, test case for minclass option.
2343 * xtests/tst-pam_cracklib2.pamd: New, PAM config file for test case.
2344 * xtests/Makefile.am: Add new testcase.
2346 * xtests/pam_cracklib.c: Fix comment what this application tests.
2348 * configure.in: Use /lib64 on x86-64, ppc64, s390x, sparc64
2350 2007-06-15 Tomas Mraz <t8m@centrum.cz>
2352 * modules/pam_selinux/pam_selinux.8.xml: Remove multiple option,
2353 add select_context and use_current_range options.
2354 * modules/pam_selinux/pam_selinux.c (send_audit_message): Added
2355 function for auditing role/level changes.
2356 (query_response): Add default response.
2357 (select_context): Removed.
2358 (manual_context): Query only role and level.
2359 (mls_range_allowed): Added function for range check.
2360 (config_context): Added function for role and level override.
2361 (pam_sm_open_session): Remove multiple option, add select_context
2362 and use_current_range_options. Use getseuserbyname to obtain
2363 SELinux user and level. Audit role/level changes. Call setkeycreatecon
2364 to assign key creation context. Don't fail on errors when SELinux
2365 is not in enforcing mode.
2366 * configure.in: Check for setkeycreatecon().
2368 * modules/pam_namespace/README.xml: Avoid duplication of
2370 * modules/pam_namespace/namespace.conf: More real life example
2372 * modules/pam_namespace/namespace.conf.5.xml: Likewise plus
2373 properly describe how instance directory names are formed.
2374 * modules/pam_namespace/namespace.init: Preserve euid when
2375 called from setuid apps (su, newrole).
2376 * modules/pam_namespace/pam_namespace.8.xml: Added option
2377 no_unmount_on_close.
2378 * modules/pam_namespace/pam_namespace.c (process_line): Polyinst
2379 methods are now user, level and context. Fix crash on unknown
2380 override user in config file.
2381 (ns_override): Add explicit uid parameter.
2382 (form_context): Skip for user method. Implement level based
2384 (poly_name): Initialize contexts. Add level based polyinst,
2385 remove 'both' metod. Use raw contexts for instance names,
2386 truncate long instance names and add hash.
2387 (ns_setup): Hashing moved to poly_name().
2388 (setup_namespace): Handle correctly override users for
2389 su (when unmnt_remnt is used).
2390 (pam_sm_close_session): Added no_unmount_on_close option.
2391 * modules/pam_namespace/pam_namespace.h: Added
2392 no_unmount_on_close_option, level method, limit on instance
2393 directory name length.
2395 2007-05-04 Thorsten Kukuk <kukuk@suse.de>
2397 * xtests/run-xtests.sh: Use SRCDIR to find PAM config files.
2398 * xtests/Makefile.am: Call run-xtests.sh with srcdir as first
2400 Based on patch by Bernard Leak <thisisnotapipe@hotmail.com>.
2402 2007-04-30 Thorsten Kukuk <kukuk@thkukuk.de>
2404 * modules/pam_limits/limits.conf: Address space limit is KB.
2405 * modules/pam_limits/limits.conf.5.xml: Likewise.
2406 Reported by Thomas Vander Stichele <thomas@apestaart.org>.
2408 * modules/pam_mail/pam_mail.c (_do_mail): Remove duplicate
2409 check for PAM_SILENT and don't bail out if it is set [#1706247].
2411 2007-03-29 Tomas Mraz <t8m@centrum.cz>
2413 * modules/pam_access/pam_access.c (login_access, list_match):
2414 Replace strtok with strtok_r.
2415 * modules/pam_cracklib/pam_cracklib.c (check_old_password):
2417 * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate):
2419 * modules/pam_unix/pam_unix_passwd.c (check_old_password,
2420 save_old_password): Likewise.
2422 * modules/pam_limits/Makefile.am: Define limits.d dir and install it.
2423 * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing.
2424 * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr.
2425 (pam_parse): conf_file is now ptr.
2426 (pam_sm_open_session): Add parsing files from limits.d subdir using
2427 glob, change pl to pointer.
2429 2007-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
2431 * po/ar.po: New translation.
2432 * po/ca.po: Likewise.
2433 * po/da.po: Likewise.
2434 * po/ru.po: Likewise.
2435 * po/sv.po: Likewise.
2436 * po/zu.po: Likewise.
2437 * po/LINGUAS: Add ar, ca, da, ru, sv, zu
2439 * po/hu.po: Update translation.
2441 2007-02-21 Tomas Mraz <t8m@centrum.cz>
2443 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Test for
2444 allocation failure in bigcrypt().
2446 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Allow
2447 modification of '*' password by root.
2449 2007-02-06 Tomas Mraz <t8m@centrum.cz>
2451 * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Remove
2452 debug syslog message when loginuid doesn't exist.
2454 2007-02-01 Tomas Mraz <t8m@centrum.cz>
2456 * xtests/tst-pam_unix3.c: Fix typos in comments.
2458 * modules/pam_unix/support.c (_unix_verify_password): Explicitly
2459 disallow '!' in the beginning of password hash. Treat only
2460 13 bytes password hash specifically. (Suggested by Solar Designer.)
2461 Fix a warning and test for allocation failure.
2462 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
2464 2007-01-31 Thorsten Kukuk <kukuk@thkukuk.de>
2466 * xtests/Makefile.am: Add new pam_unix.so tests
2467 * xtests/run-xtests.sh: Prefer shell scripts (wrapper)
2469 * xtests/tst-pam_cracklib1.c: Fix typo.
2470 * xtests/tst-pam_unix1.c: New, for sucurity fix.
2471 * xtests/tst-pam_unix1.pamd: New.
2472 * xtests/tst-pam_unix1.sh: New.
2473 * xtests/tst-pam_unix2.c: New, for crypt checks.
2474 * xtests/tst-pam_unix2.pamd: New.
2475 * xtests/tst-pam_unix2.sh: New.
2476 * xtests/tst-pam_unix3.c: New, for bigcrypt checks.
2477 * xtests/tst-pam_unix3.pamd: New.
2478 * xtests/tst-pam_unix3.sh: New.
2480 2007-01-23 Thorsten Kukuk <kukuk@suse.de>
2484 * configure.in: Set version number to 0.99.7.1
2486 2007-01-23 Thorsten Kukuk <kukuk@thukuk.de>
2487 Tomas Mraz <t8m@centrum.cz>
2489 * modules/pam_unix/support.c (_unix_verify_password): Always
2490 compare full encrypted passwords (CVE-2007-0003).
2492 2007-01-23 Tomas Mraz <t8m@centrum.cz>
2494 * modules/pam_loginuid/Makefile.am (AM_LDFLAGS): Add LIBAUDIT.
2496 * modules/pam_selinux/Makefile.am (pam_selinux_check_LDFLAGS): Add
2498 (pam_selinux_la_LDFLAGS): Likewise.
2500 2007-01-17 Thorsten Kukuk <kukuk@thkukuk.de>
2504 * configure.in: Set version number to 0.99.7.0
2506 * Makefile.am (M4_FILES): Replace GNU make extension by listing
2509 2007-01-17 Tomas Mraz <t8m@centrum.cz>
2511 * po/*.po: Updated strings to translate.
2512 * po/Linux-PAM.pot: Likewise.
2514 2007-01-16 Thorsten Kukuk <kukuk@thkukuk.de>
2516 * doc/man/pam.conf-syntax.xml: Improve documentation about
2517 sufficient keyword (Patch by Petteri Räty <betelgeuse@gentoo.org>)
2519 2006-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
2521 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Forbid
2522 only '+' and '-' as first characters for account names.
2523 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
2525 2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
2527 * configure.in: Fix ENOKEY check (specify errno.h as header
2530 * configure.in: Add AM_PROG_CC_C_O.
2531 * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS.
2532 * modules/pam_tally/Makefile.am: Likewise.
2533 * modules/pam_unix/Makefile.am: Likewise.
2535 * modules/pam_stress/pam_stress.c (pam_sm_chauthtok): Fix
2536 localisation of message printed to user.
2537 * po/de.po: Adjust translation.
2539 2006-12-18 Tomas Mraz <t8m@centrum.cz>
2541 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Localize
2542 message printed to user.
2544 * modules/pam_unix/support.c (_unix_verify_password): Use strncmp
2545 only for bigcrypt result.
2547 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Switch to new
2548 egid first, euid next. Revert euid/egid to old euid/egid and not
2550 (pam_sm_open_session): Switch to new rgid first, ruid next.
2552 2006-12-13 Thorsten Kukuk <kukuk@thkukuk.de>
2554 * modules/pam_localuser/pam_localuser.c: Add support for session
2555 and chauthtok [SF#1606180].
2556 * modules/pam_localuser/pam_localuser.8.xml: Document last change.
2558 * libpam/pam_audit.c (_pam_audit_writelog): Print error message
2561 2006-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
2563 * libpam/pam_audit.c (_pam_audit_writelog): Print error
2564 message on failure to syslog.
2566 2006-12-09 Thorsten Kukuk <kukuk@thkukuk.de>
2568 * modules/pam_umask/pam_umask.c: Use strtoul instead of strtol,
2569 fix overflow detection.
2571 2006-12-06 Thorsten Kukuk <kukuk@thkukuk.de>
2573 * modules/pam_mkhomedir/pam_mkhomedir.c (rec_mkdir): Fix
2574 handling of left-most path component [SF#1591598].
2575 (create_homedir): Mark user visible messages for translation.
2576 * po/de.po: Adjust german translation for pam_mkhomedir.
2578 * modules/pam_faildelay/pam_faildelay.c: If no argument is
2579 given, try to read FAIL_DELAY from /etc/login.defs.
2580 * modules/pam_faildelay/pam_faildelay.8.xml: Document usage
2583 2006-12-04 Tomas Mraz <t8m@centrun.cz>
2585 * po/jp.po: Fixed mistake in Password: message (from
2586 Peng Huang <phuang@redhat.com>).
2588 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de>
2590 * po/hu.po: Update hungarian translation (from
2591 Kalman Kemenczy <kkemenczy@novell.com>).
2593 * configure.in: Allow disabling support for cracklib, audit, libdb.
2595 * modules/pam_faildelay/pam_faildelay.8.xml: Correct name of Author.
2597 * configure.in: Remove --enable-docdir (obsolete by --docdir).
2598 * doc/Makefile.am: Don't overwrite htmldir.
2599 * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir.
2600 * doc/mwg/Makefile.am: Likewise.
2601 * doc/sag/Makefile.am: Likewise.
2602 * doc/specs/Makefile.am: Use docdir.
2604 * tests/tst-pam_set_data.c: New test cases for pam_set_data().
2605 * tests/Makefile.am: Add pam_set_data test case.
2607 * libpam/pam_data.c: Add NULL pointer check for module_data_name.
2608 * libpam/Makefile.am: Bump revision of shared library.
2610 2006-11-08 Thorsten Kukuk <kukuk@thkukuk.de>
2612 * configure.in: Add modules/pam_faildelay/Makefile.
2613 * doc/sag/Linux-PAM_SAG.xml: Include pam_faildelay.xml.
2614 * doc/sag/pam_faildelay.xml: New.
2615 * libpam/pam_static_modules.h: Include static pam_faildelay data.
2616 * modules/Makefile.am: Add pam_faildelay directory.
2617 * modules/pam_faildelay/Makefile.am: New.
2618 * modules/pam_faildelay/README: New, generated from XML file.
2619 * modules/pam_faildelay/README.xml: New.
2620 * modules/pam_faildelay/pam_faildelay.8: New, generated from xml.
2621 * modules/pam_faildelay/pam_faildelay.8.xml: New.
2622 * modules/pam_faildelay/pam_faildelay.c: New.
2623 * modules/pam_faildelay/tst-pam_faildelay: New.
2625 * po/POTFILES.in: Add pam_faildelay.c and pam_loginuid.c.
2627 2006-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
2629 * modules/pam_cracklib/pam_cracklib.c: PAM_DEBUG_ARG
2630 is a bit mask and not a boolean value (Reported by
2631 Jochen Voss <voss@seehuhn.de>).
2633 2006-10-26 Thorsten Kukuk <kukuk@thkukuk.de>
2635 * doc/man/pam.3.xml: Add pam_get_user function.
2637 * modules/pam_motd/pam_motd.8.xml: Fix typo.
2639 2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
2641 * modules/pam_namespace/pam_namespace.c: Reserve space for
2644 2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
2646 * modules/pam_unix/support.c (_unix_verify_password): Try system
2647 crypt() if we don't know the hash alogorithm.
2648 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
2650 2006-10-13 Tomas Mraz <t8m@centrum.cz>
2652 * doc/mwg/Linux-PAM_MWG.xml: Add id[s] to section[s].
2653 * doc/sag/pam_access.xml: Likewise.
2654 * doc/sag/pam_echo.xml: Likewise.
2655 * doc/sag/pam_env.xml: Likewise.
2656 * doc/sag/pam_exec.xml: Likewise.
2657 * doc/sag/pam_group.xml: Likewise.
2658 * doc/sag/pam_limits.xml: Likewise.
2659 * doc/sag/pam_namespace.xml: Likewise.
2660 * doc/sag/pam_time.xml: Likewise.
2661 * doc/sag/Linux-PAM_SAG.xml: Add id to book.
2662 * doc/adg/Linux-PAM_ADG.xml: Add id to book.
2663 * doc/mwg/Linux-PAM_MWG.xml: Add id to book.
2666 2006-10-07 Thorsten Kukuk <kukuk@thkukuk.de>
2668 * po/hu.po: Updated hungarian translation (from
2669 Kalman Kemenczy <kkemenczy@novell.com>)
2671 2006-09-20 Thorsten Kukuk <kukuk@thkukuk.de>
2673 * doc/adg/Makefile.am: Add manual pages as dependency.
2674 * doc/mwg/Makefile.am: Likewise.
2675 * doc/sag/Makefile.am: Likewise.
2676 * doc/sag/Linux-PAM_SAG.xml: Include pam_unix.xml.
2677 * doc/sag/pam_unix.xml: New.
2678 * modules/pam_unix/Makefile.am: Generate pam_unix.8 manual page.
2679 * modules/pam_unix/README.xml: New.
2680 * modules/pam_unix/pam_unix.8.xml: New.
2681 * modules/pam_unix/README: Regenerate from XML.
2682 * modules/pam_unix/pam_unix.8: Generated from XML.
2684 2006-09-09 Dmitry V. Levin <ldv@altlinux.org>
2686 * modules/pam_wheel/pam_wheel.8.xml: Fix typo.
2687 * modules/pam_wheel/pam_wheel.8: Likewise.
2688 * modules/pam_wheel/README: Likewise.
2690 2006-09-08 Thorsten Kukuk <kukuk@thkukuk.de>
2692 * po/de.po: Fix typo.
2694 2006-09-06 Thorsten Kukuk <kukuk@thkukuk.de>
2696 * release version 0.99.6.3
2698 2006-09-01 Thorsten Kukuk <kukuk@thkukuk.de>
2700 * modules/pam_loginuid/pam_loginuid.8.xml: Fix typo in
2703 2006-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
2705 * modules/pam_env/environment: New, dummy environment example
2708 * modules/pam_namespace/Makefile.am: Don't install
2709 manual page if we don't build module.
2711 * m4/ld-as-needed.m4: Don't set LDFLAGS if check failed.
2712 * m4/ld-O1: Likewise.
2714 2006-08-30 Tomas Mraz <t8m@centrum.cz>
2716 * modules/pam_access/pam_access.8.xml: All services supported.
2717 * modules/pam_access/pam_access.c (pam_sm_open_session): New.
2718 (pam_sm_close_session): New.
2719 (pam_sm_chauthtok): New.
2721 * modules/pam_access/pam_succeed_if.8.xml: All services supported.
2722 * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return
2723 PAM_IGNORE rather than success.
2724 (pam_sm_open_session): New.
2725 (pam_sm_close_session): New.
2726 (pam_sm_chauthtok): New.
2728 2006-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
2730 * xtests/Makefile.am: Move shell code to execute tests from here ...
2731 * xtests/run-xtests.sh: ... to here.
2732 * xtests/*.c: Include config.h.
2733 * tests/*.c: Likewise.
2735 * modules/pam_namespace/pam_namespace.c: Use pam_modutil_getpwnam()
2736 instead of getpwnam().
2738 2006-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
2740 * doc/sag/pam_loginuid.xml: New.
2741 * doc/sag/Linux-PAM_SAG.xml: Include pam_loginuid.xml.
2743 * configure.in: Add modules/pam_loginuid/Makefile.
2744 * modules/Makefile.am: Add pam_loginuid sub directory.
2746 * libpam/pam_static_modules.h: Add pam_loginuid.
2748 * modules/pam_loginuid/Makefile.am: New.
2749 * modules/pam_loginuid/tst-pam_loginuid: New.
2750 * modules/pam_loginuid/pam_loginuid.8.xml: New.
2751 * modules/pam_loginuid/pam_loginuid.8: New, generated from XML source.
2752 * modules/pam_loginuid/pam_loginuid.c: New.
2753 * modules/pam_loginuid/README.xml: New.
2754 * modules/pam_loginuid/README: New, generated from XML source.
2756 2006-08-29 Dmitry V. Levin <ldv@altlinux.org>
2758 * modules/pam_exec/pam_exec.c (call_exec): Add required third
2759 argument to open() call with O_CREAT flag set.
2761 2006-08-28 Thorsten Kukuk <kukuk@thkukuk.de>
2763 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Remove
2766 2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
2768 * release version 0.99.6.2
2770 * modules/pam_lastlog/pam_lastlog.c (last_login_date): Create
2771 lastlog file if it does not exist.
2773 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Check
2774 for error from getting second token.
2775 * xtests/Makefile.am: Add tst-pam_cracklib1
2776 * xtests/tst-pam_cracklib1.c: New, check for pam_cracklib seg.fault.
2777 * xtests/tst-pam_cracklib1.pamd: New, config for cracklib test.
2779 2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
2781 * xtests/tst-pam_dispatch4.c: New test.
2782 * xtests/tst-pam_dispatch4.pamd: PAM config for new test.
2784 2006-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
2786 * release version 0.99.6.1
2788 2006-08-09 David Howells <dhowells@redhat.com>
2790 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Set real uid
2791 to user's before revoking.
2792 (pam_sm_open_session): Remember the uid.
2794 2006-08-06 Thorsten Kukuk <kukuk@thkukuk.de>
2796 * modules/pam_umask/pam_umask.c (setup_limits_from_gecos):
2798 * modules/pam_umask/pam_umask.8.xml: Document silent option.
2800 * xtests/Makefile.am: Fix includes for bootstrapping.
2801 Reported by Greg Schafer <gschafer@zip.com.au>.
2803 2006-08-05 Thorsten Kukuk <kukuk@thkukuk.de>
2805 * release version 0.99.6.0
2807 * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
2808 pam_modutil_getpwnam instead of getpwnam.
2810 * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
2811 svc variable to char pointer for snprintf.
2813 * configure.in: Generate xtests/Makefile.
2814 * Makefile.am (SUBDIRS): Add xtests.
2815 * README: Document make check and make xtests.
2816 * xtests/Makefile.am: New.
2817 * xtests/tst-pam_dispatch1.pamd: New.
2818 * xtests/tst-pam_dispatch2.pamd: New.
2819 * xtests/tst-pam_dispatch3.pamd: New.
2820 * xtests/tst-pam_dispatch1.c: New.
2821 * xtests/tst-pam_dispatch2.c: New.
2822 * xtests/tst-pam_dispatch3.c: New.
2824 2006-08-04 Ray Strode <rstrode@redhat.com>
2826 * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
2827 Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
2829 2006-08-03 David Howells <dhowells@redhat.com>
2831 * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
2832 (init_keyrings): Properly handle multiple invocations of the module.
2833 (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
2835 2006-08-03 Tomas Mraz <t8m@centrum.cz>
2837 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
2838 New function for list matching.
2839 (evaluate_notinlist): Likewise.
2840 (evaluate): Add service value match, list matching.
2841 * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
2844 * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
2845 relabelling error when the tty device doesn't exist (ENOENT).
2847 2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
2849 * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
2850 rationale about when this function should be used and when not.
2852 * doc/index.html: Cleanup to look prettier.
2854 2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
2856 * libpam/Makefile.am: Bump patchlevel of libpam.
2857 * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
2858 or [return=bad] is used, don't return PAM_IGNORE. Based on
2859 patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
2861 2006-07-28 Thorsten Kukuk <kukuk@thkukuk.de>
2863 * ABOUT-NLS: Upgrade to gettext-0.15.
2864 * config.rpath: Likewise.
2865 * m4/gettext.m4: Upgrade to gettext-0.15.
2866 * m4/inttypes-h.m4: New file, from gettext-0.15.
2867 * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
2868 * m4/lib-link.m4: Upgrade to gettext-0.15.
2869 * m4/lib-prefix.m4: Upgrade to gettext-0.15.
2870 * m4/lock.m4: New file, from gettext-0.15.
2871 * m4/longdouble.m4: Upgrade to gettext-0.15.
2872 * m4/nls.m4: Upgrade to gettext-0.15.
2873 * m4/po.m4: Upgrade to gettext-0.15.
2874 * m4/size_max.m4: Upgrade to gettext-0.15.
2875 * m4/visibility.m4: New file, from gettext-0.15.
2876 * po/Makefile.in.in: Upgrade to gettext-0.15.
2878 2006-07-24 David Quigley <dpquigl@tycho.nsa.gov>
2880 * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
2881 * modules/pam_namespace/pam_namespace.c: Move includes and
2882 data structure definitions from here ...
2883 * modules/pam_namespace/pam_namespace.h: ... here. New file.
2885 * modules/pam_namespace/pam_namespace.c: Move large sections
2886 of code into new functions.
2888 2006-07-24 Thorsten Kukuk <kukuk@thkukuk.de>
2890 * doc/adg/Makefile.am: Add uninstall and distclean rules.
2891 * doc/mwg/Makefile.am: Likewise.
2892 * doc/sag/Makefile.am: Likewise.
2894 2006-07-08 Daniel Richard G. <skunk@iskunk.org>
2896 * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
2897 * conf/pam_conv1/pam_conv.lex: Rename to ...
2898 * conf/pam_conv1/pam_conv_l.l: ... this.
2899 * conf/pam_conv1/pam_conv.y: Rename to ...
2900 * conf/pam_conv1/pam_conv_y.y: ... this.
2901 * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
2903 * doc/Makefile.am: Fix rule to install index.html.
2904 * doc/adg/Makefile.am: Fix test usage.
2905 * doc/mwg/Makefile.am: Likewise.
2906 * doc/sag/Makefile.am: Likewise.
2907 * doc/specs/Makefile.am: Fix rules for lex and yacc files.
2908 * specs/parse.lex: Rename to ...
2909 * doc/specs/parse_l.l: ... this.
2910 * doc/specs/parse.y: Rename to ...
2911 * doc/specs/parse_y.y: ... this.
2912 * libpam/pam_account.c: Fix #if vs. #ifdef.
2913 * libpam/pam_audit.c: Likewise.
2914 * libpam/pam_auth.c: Likewise.
2915 * libpam/pam_password.c: Likewise.
2916 * libpam/pam_private.h: Likewise.
2917 * libpam/pam_session.c: Likewise.
2918 * libpam/pam_start.c: Likewise.
2919 * libpam/pam_static.c: Fix "empty sourcefile" warning.
2920 * modules/pam_limits/pam_limits.c: Check for __linux, too.
2921 * modules/pam_userdb/Makefile.am: Don't run test if no
2923 * tests/tst-dlopen.c: Include config.h.
2925 2006-07-03 Dan Yefimov
2927 * configure.in: Fixed have_key_syscalls test.
2929 * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
2930 match, removed AI_ADDRCONFIG flag.
2932 2006-06-30 Tomas Mraz <t8m@centrum.cz>
2934 * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
2936 2006-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
2938 * doc/Makefile.am (releasedocs): Fix directory layout.
2939 * doc/adg/Makefile.am: Likewise.
2940 * doc/mwg/Makefile.am: Likewise.
2941 * doc/sag/Makefile.am: Likewise.
2943 2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
2945 * doc/sag: System Administrator Guide as XML source.
2946 * doc/sag/Makefile.am: New.
2947 * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
2948 * doc/sag/pam_*.xml: New, wrapper to include module documentation.
2950 * doc/adg: Application Developers Guide as XML source.
2951 * doc/adg/Makefile.am: New.
2952 * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
2953 * doc/adg/pam_*.xml: New, wrappers to include manual pages.
2955 * doc/mwg: Application Developers Guide as XML source.
2956 * doc/mwg/Makefile.am: New.
2957 * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
2958 * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
2960 * doc/CREDITS: Removed.
2961 * doc/NOTES: Removed.
2962 * doc/pam_appl.sgml: Removed.
2963 * doc/pam_modules.sgml: Removed.
2964 * doc/pam_source.sgml: Removed.
2965 * doc/figs/pam_orient.txt: Removed.
2966 * doc/figs: Removed.
2968 * configure.in: Remove checks for sgml2* progrs, add sag, adg
2971 * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
2973 * doc/modules: Remove directory.
2974 * doc/html: Remove directory.
2975 * doc/ps: Remove directory.
2976 * doc/pdf: Remove directory.
2977 * doc/txts: Remove directory.
2978 * doc/index.html: Moved from html directory to here.
2980 2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
2982 * release version 0.99.5.0
2984 * bump version number to 0.99.5.0
2986 * modules/pam_rhosts/pam_rhosts.c: New module, replaces
2988 * modules/pam_rhosts/pam_rhosts.8.xml: New.
2989 * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
2990 * modules/pam_rhosts/tst-pam_rhosts: New.
2991 * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
2992 manual page and README.
2993 * modules/pam_rhosts/README.xml: New.
2994 * modules/pam_rhosts/reADME: Regenerated from XML source.
2996 * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
2998 * doc/man/pam_sm_authenticate.3.xml: Likewise.
2999 * doc/man/pam_sm_chauthtok.3.xml: Likewise.
3000 * doc/man/pam_sm_close_session.3.xml: Likewise.
3001 * doc/man/pam_sm_open_session.3.xml: Likewise.
3002 * doc/man/pam_sm_setcred.3.xml: Likewise.
3004 * po/POTFILES.in: Add new source files.
3006 * libpam/pam_static_modules.h: Add new modules.
3008 * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
3010 * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
3011 files and manual page.
3013 2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
3015 * configure.in: Allow disabling of SELinux support, check for
3018 2006-06-27 Tomas Mraz <t8m@centrum.cz>
3020 * modules/pam_namespace/pam_namespace.c: New module
3021 originally written by Janak Desai.
3022 * modules/pam_namespace/Makefile.am: New.
3023 * modules/pam_namespace/README: New.
3024 * modules/pam_namespace/md5.c: New.
3025 * modules/pam_namespace/md5.h: New.
3026 * modules/pam_namespace/namespace.conf: New.
3027 * modules/pam_namespace/namespace.conf.5: New.
3028 * modules/pam_namespace/namespace.conf.5.xml: New.
3029 * modules/pam_namespace/namespace.init: New.
3030 * modules/pam_namespace/pam_namespace.8: New.
3031 * modules/pam_namespace/pam_namespace.8.xml: New.
3032 * modules/pam_namespace/tst-pam_namespace: New.
3033 * modules/Makefile.am: Added pam_namespace.
3034 * configure.in: Added pam_namespace, test for unshare
3037 2006-06-27 David Howells <dhowells@redhat.com>
3039 * modules/pam_keyinit/pam_keyinit.c: New module.
3040 * modules/pam_keyinit/pam_keyinit.8: New.
3041 * modules/pam_keyinit/pam_keyinit.8.xml: New.
3042 * modules/pam_keyinit/README: New.
3043 * modules/pam_keyinit/README.xml: New.
3044 * modules/pam_keyinit/Makefile.am: New.
3045 * modules/pam_keyinit/tst-pam_keyinit: New.
3046 * modules/Makefile.am: Added pam_keyinit.
3047 * configure.in: Added test for the key mgmt syscall.
3049 2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
3051 * m4/libprelude.m4: Sync with upstream.
3053 2006-06-27 Tomas Mraz <t8m@centrum.cz>
3055 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
3056 signal() fails with SIG_ERR return
3057 * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
3059 * modules/pam_unix/support.c(_unix_run_helper_binary):
3062 2006-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
3064 * doc/man/misc_conv.3.xml: New.
3065 * doc/man/misc_conv.3: New.
3066 * doc/man/pam_misc_paste_env.3.xml: New.
3067 * doc/man/pam_misc_paste_env.3: New.
3068 * doc/man/pam_misc_drop_env.3.xml: New.
3069 * doc/man/pam_misc_drop_env.3: New.
3070 * doc/man/pam_misc_setenv.3.xml: New.
3071 * doc/man/pam_misc_setenv.3: New.
3072 * doc/man/Makefile.am: Add new manual pages.
3074 * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
3075 in Applicatoin Developer Guide.
3076 * doc/man/pam_authenticate.3.xml: Likewise
3077 * doc/man/pam_chauthtok.3.xml: Likewise
3078 * doc/man/pam_close_session.3.xml: Likewise
3079 * doc/man/pam_conv.3.xml: Likewise
3080 * doc/man/pam_end.3.xml: Likewise
3081 * doc/man/pam_fail_delay.3.xml: Likewise
3082 * doc/man/pam_getenv.3.xml: Likewise
3083 * doc/man/pam_getenvlist.3.xml: Likewise
3084 * doc/man/pam_open_session.3.xml: Likewise
3085 * doc/man/pam_putenv.3.xml: Likewise
3086 * doc/man/pam_setcred.3.xml: Likewise
3087 * doc/man/pam_start.3.xml: Likewise
3088 * doc/man/pam_strerror.3.xml: Likewise
3090 * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
3091 * doc/man/pam_authenticate.3: Likewise
3092 * doc/man/pam_chauthtok.3: Likewise
3093 * doc/man/pam_close_session.3: Likewise
3094 * doc/man/pam_conv.3: Likewise
3095 * doc/man/pam_end.3: Likewise
3096 * doc/man/pam_fail_delay.3: Likewise
3097 * doc/man/pam_getenv.3: Likewise
3098 * doc/man/pam_getenvlist.3: Likewise
3099 * doc/man/pam_open_session.3: Likewise
3100 * doc/man/pam_putenv.3: Likewise
3101 * doc/man/pam_setcred.3: Likewise
3102 * doc/man/pam_sm_close_session.3: Likewise
3103 * doc/man/pam_start.3: Likewise
3104 * doc/man/pam_strerror.3: Likewise
3105 * doc/man/pam_syslog.3: Likewise
3106 * doc/man/PAM.8: Likewise
3108 2006-06-24 Thorsten Kukuk <kukuk@thkukuk.de>
3110 * modules/pam_limits/pam_limits.c (setup_limits): Don't
3111 reset priority for root.
3113 2006-06-23 Thorsten Kukuk <kukuk@thkukuk.de>
3115 * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
3116 * modules/pam_access/pam_access.8.xml: Likewise.
3117 * modules/pam_deny/pam_deny.8.xml: Likewise.
3118 * modules/pam_echo/pam_echo.8.xml: Likewise.
3119 * modules/pam_env/pam_env.8.xml: Likewise.
3120 * modules/pam_env/pam_env.conf.5.xml: Likewise.
3121 * modules/pam_group/group.conf.5.xml: Likewise.
3122 * modules/pam_group/pam_group.8.xml: Likewise.
3123 * modules/pam_limits/limits.conf.5.xml: Likewise.
3124 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
3125 * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
3126 * modules/pam_time/pam_time.8.xml: Likewise.
3127 * modules/pam_time/time.conf.5.xml: Likewise.
3129 * modules/pam_access/access.conf.5: Regenerate.
3130 * modules/pam_access/pam_access.8: Likewise.
3131 * modules/pam_deny/pam_deny.8: Likewise.
3132 * modules/pam_echo/README: Likewise.
3133 * modules/pam_echo/pam_echo.8: Likewise.
3134 * modules/pam_env/pam_env.8: Likewise.
3135 * modules/pam_env/pam_env.conf.5: Likewise.
3136 * modules/pam_group/README: Likewise.
3137 * modules/pam_group/group.conf.5: Likewise.
3138 * modules/pam_group/pam_group.8: Likewise.
3139 * modules/pam_limits/limits.conf.5: Likewise.
3140 * modules/pam_listfile/README: Likewise.
3141 * modules/pam_listfile/pam_listfile.8: Likewise.
3142 * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
3143 * modules/pam_time/pam_time.8: Likewise.
3144 * modules/pam_time/time.conf.5: Likewise.
3146 * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
3147 and pam.conf-syntax.xml.
3148 * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
3149 * doc/man/pam.conf.5: Regenerated.
3150 * doc/man/pam.conf-desc.xml: New.
3151 * doc/man/pam.conf-dir.xml: New.
3152 * doc/man/pam.conf-syntax.xml: New.
3154 2006-06-21 Thorsten Kukuk <kukuk@thkukuk.de>
3156 * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
3159 * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
3160 * modules/pam_issue/pam_issue.8: Regenerate.
3162 2006-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
3164 * configure.in: Remove unused check for libcap.
3166 * m4/ld-as-needed.m4: New.
3168 * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
3169 require docbook version 4.4.
3171 2006-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
3173 * doc/man/pam.8.xml: Syntax cleanup.
3174 * doc/pam/PAM.8: Regenerated from xml source.
3175 * man/pam_sm_chauthtok.3: New.
3176 * man/pam_sm_chauthtok.3.xml: New.
3177 * man/pam_sm_close_session.3: New.
3178 * man/pam_sm_close_session.3.xml: New.
3179 * man/pam_sm_open_session.3: New.
3180 * man/pam_sm_open_session.3.xml: New.
3181 * man/pam_sm_authenticate.3: New.
3182 * man/pam_sm_authenticate.3.xml: New.
3183 * man/pam_sm_setcred.3: New.
3184 * man/pam_sm_setcred.3.xml: New.
3185 * man/Makefile.am: Add new pam_sm_* manual pages.
3187 * specs/Makefile.am: Fix rule to generate draft.
3189 2006-06-18 Thorsten Kukuk <kukuk@thkukuk.de>
3191 * modules/pam_tally/Makefile.am: Include Make.xml.rules.
3192 * modules/pam_tally/pam_tally.8.xml: New.
3193 * modules/pam_tally/pam_tally.8: New, generated from xml file.
3194 * modules/pam_tally/README.xml: New.
3195 * modules/pam_tally/README: Regenerated from xml file.
3197 * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
3198 * modules/pam_selinux/pam_selinux.8.xml: New.
3199 * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
3200 * modules/pam_selinux/README.xml: New.
3201 * modules/pam_selinux/README: Regenerated from xml file.
3203 2006-06-17 Thorsten Kukuk <kukuk@thkukuk.de>
3205 * modules/pam_debug/Makefile.am: Include Make.xml.rules.
3206 * modules/pam_debug/pam_debug.8.xml: New.
3207 * modules/pam_debug/pam_debug.8: New, generated from xml file.
3208 * modules/pam_debug/README.xml: New.
3209 * modules/pam_debug/README: Regenerated from xml file.
3211 * examples/vpass.c: UID is unsigned on Linux.
3212 * modules/pam_exec/pam_exec.c: Likewise.
3213 * modules/pam_unix/pam_unix_acct.c: Likewise.
3214 * modules/pam_unix/pam_unix_sess.c: Likewise.
3216 * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
3217 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
3218 * modules/pam_succeed_if/README: Regenerated.
3220 * modules/pam_limits/Makefile.am: Include Make.xml.rules.
3221 * modules/pam_limits/limits.conf.5: New, generated from xml file.
3222 * modules/pam_limits/limits.conf.5.xml: New.
3223 * modules/pam_limits/pam_limits.8: New, generated from xml file.
3224 * modules/pam_limits/pam_limits.8.xml: New.
3225 * modules/pam_limits/README.xml: New.
3226 * modules/pam_limits/README: Regenerated from README.xml.
3228 2006-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
3230 * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
3231 are unsigned on Linux, don't truncate them.
3232 (_do_setpass): err is of type clnt_stat, not int.
3234 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
3235 truncate UID for syslog output.
3237 * modules/pam_time/pam_time.c: Replace type boolean with int.
3238 * modules/pam_group/pam_group.c: Likewise.
3240 2006-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
3242 * modules/pam_unix/bigcrypt.h: New.
3243 * modules/pam_unix/Makefile.am: Add bigcrypt.h.
3244 * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
3245 * modules/pam_unix/support.c: Include bigcrypt.h, remove
3247 * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
3249 * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
3252 * modules/pam_time/pam_time.c (logic_member): Remove unused
3255 * modules/pam_group/pam_group.c (logic_field): Accept
3256 colon in tty name. [#1428276].
3257 (logic_member): Remove unused variable len.
3258 (check_account): Fix usage of err variable in debug code.
3260 * modules/pam_time/pam_time.c (logic_field): Likewise.
3262 * configure.in: Add special exceptions for icc: different
3263 compiler warnings, no PIE support.
3265 2006-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
3267 * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
3269 * configure.in: Remove --enable-memory-debug, add option
3270 to disable prelude if installed.
3272 * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
3273 * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
3274 * modules/pam_unix/unix_chkpwd.c: Likewise.
3275 * libpam/include/security/_pam_types.h: Likewise.
3276 * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
3277 * libpam/pam_malloc.c: Remove file.
3278 * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
3280 * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
3283 * libpam/pam_private.h: Remove _pam_strCMP.
3284 * libpam/pam_misc.c: Likewise.
3285 * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
3287 2006-06-12 Thorsten Kukuk <kukuk@thkukuk.de>
3289 * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
3290 for modules from main application.
3292 2006-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
3294 * modules/pam_time/Makefile.am: Include Make.xml.rules.
3295 * modules/pam_time/time.conf.5: New, generated from xml file.
3296 * modules/pam_time/time.conf.5.xml: New.
3297 * modules/pam_time/pam_time.8: New, generated from xml file.
3298 * modules/pam_time/pam_time.8.xml: New.
3299 * modules/pam_time/README.xml: New.
3300 * modules/pam_time/README: Regenerated from README.xml.
3302 * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
3303 * modules/pam_wheel/pam_wheel.8.xml: New.
3304 * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
3305 * modules/pam_wheel/README.xml: New.
3306 * modules/pam_wheel/README: Regenerated from xml file.
3308 * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
3309 * modules/pam_xauth/pam_xauth.8.xml: New.
3310 * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
3311 * modules/pam_xauth/README.xml: New.
3312 * modules/pam_xauth/README: Regenerated from xml file.
3314 * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
3315 * modules/pam_deny/pam_deny.8: Regenerate from xml file.
3316 * modules/pam_deny/README: Likewise.
3318 * modules/pam_warn/Makefile.am: Include Make.xml.rules.
3319 * modules/pam_warn/pam_warn.8.xml: New.
3320 * modules/pam_warn/pam_warn.8: New, generated from xml file.
3321 * modules/pam_warn/README.xml: New.
3322 * modules/pam_warn/README: Regenerated from xml file.
3324 * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
3325 * modules/pam_userdb/pam_userdb.8.xml: New.
3326 * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
3327 * modules/pam_userdb/README.xml: New.
3328 * modules/pam_userdb/README: Regenerated from xml file.
3330 2006-06-06 Thorsten Kukuk <kukuk@thkukuk.de>
3332 * modules/pam_shells/Makefile.am: Include Make.xml.rules.
3333 * modules/pam_shells/pam_shells.8.xml: New.
3334 * modules/pam_shells/pam_shells.8: New, generated from xml file.
3335 * modules/pam_shells/README.xml: New.
3336 * modules/pam_shells/README: Regenerated from xml file.
3338 * libpam/include/security/pam_malloc.h: Add missing license
3341 * libpam/include/security/pam_ext.h: Add brackets for C++.
3342 * libpam/include/security/pam_modutil.h: Likewise.
3344 * libpam/include/security/pam_modules.h: Document where to
3345 find the copyright/license informations.
3347 * libpam/include/security/pam_appl.h: Move _pam_compat.h
3348 include inside of brackets.
3350 2006-06-04 Thorsten Kukuk <kukuk@thkukuk.de>
3352 * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
3353 * modules/pam_securetty/pam_securetty.8.xml: New.
3354 * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
3355 * modules/pam_securetty/README.xml: New.
3356 * modules/pam_securetty/README: Regenerated from xml file.
3358 * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
3359 * modules/pam_rootok/pam_rootok.8.xml: New.
3360 * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
3361 * modules/pam_rootok/README.xml: New.
3362 * modules/pam_rootok/README: Regenerated from xml file.
3364 * modules/pam_permit/Makefile.am: Include Make.xml.rules.
3365 * modules/pam_permit/pam_permit.8.xml: New.
3366 * modules/pam_permit/pam_permit.8: New, generated from xml file.
3367 * modules/pam_permit/README.xml: New.
3368 * modules/pam_permit/README: Regenerated from xml file.
3370 * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
3371 * modules/pam_nologin/pam_nologin.8.xml: New.
3372 * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
3373 * modules/pam_nologin/README.xml: New.
3374 * modules/pam_nologin/README: Regenerated from xml file.
3376 2006-06-03 Thorsten Kukuk <kukuk@thkukuk.de>
3378 * modules/pam_motd/Makefile.am: Include Make.xml.rules.
3379 * modules/pam_motd/pam_motd.8.xml: New.
3380 * modules/pam_motd/pam_motd.8: New, generated from xml file.
3381 * modules/pam_motd/README.xml: New.
3382 * modules/pam_motd/README: New, generated from xml file.
3384 2006-06-02 Thorsten Kukuk <kukuk@thkukuk.de>
3386 * modules/pam_mail/Makefile.am: Include Make.xml.rules.
3387 * modules/pam_mail/pam_mail.8.xml: New.
3388 * modules/pam_mail/pam_mail.8: New, generated from xml file.
3389 * modules/pam_mail/README.xml: New.
3390 * modules/pam_mail/README: Regenerated from xml file.
3392 * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
3393 * modules/pam_localuser/pam_localuser.8.xml: New.
3394 * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
3395 * modules/pam_localuser/README.xml: New.
3396 * modules/pam_localuser/README: Regenerated from xml file.
3398 * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
3399 * doc/man/pam.3: Likewise.
3400 * doc/man/pam.conf.5: Likewise.
3401 * doc/man/pam_acct_mgmt.3: Likewise.
3402 * doc/man/pam_authenticate.3: Likewise.
3403 * doc/man/pam_chauthtok.3: Likewise.
3404 * doc/man/pam_close_session.3: Likewise.
3405 * doc/man/pam_conv.3: Likewise.
3406 * doc/man/pam_end.3: Likewise.
3407 * doc/man/pam_error.3: Likewise.
3408 * doc/man/pam_fail_delay.3: Likewise.
3409 * doc/man/pam_get_data.3: Likewise.
3410 * doc/man/pam_get_item.3: Likewise.
3411 * doc/man/pam_get_user.3: Likewise.
3412 * doc/man/pam_getenv.3: Likewise.
3413 * doc/man/pam_getenvlist.3: Likewise.
3414 * doc/man/pam_info.3: Likewise.
3415 * doc/man/pam_open_session.3: Likewise.
3416 * doc/man/pam_prompt.3: Likewise.
3417 * doc/man/pam_putenv.3: Likewise.
3418 * doc/man/pam_set_data.3: Likewise.
3419 * doc/man/pam_set_item.3: Likewise.
3420 * doc/man/pam_setcred.3: Likewise.
3421 * doc/man/pam_sm_acct_mgmt.3: Likewise.
3422 * doc/man/pam_start.3: Likewise.
3423 * doc/man/pam_strerror.3: Likewise.
3424 * doc/man/pam_syslog.3: Likewise.
3425 * modules/pam_access/access.conf.5: Likewise.
3426 * modules/pam_access/pam_access.8: Likewise.
3427 * modules/pam_cracklib/pam_cracklib.8: Likewise.
3428 * modules/pam_deny/pam_deny.8: Likewise.
3429 * modules/pam_echo/pam_echo.8: Likewise.
3430 * modules/pam_env/pam_env.8: Likewise.
3431 * modules/pam_env/pam_env.conf.5: Likewise.
3432 * modules/pam_exec/pam_exec.8: Likewise.
3433 * modules/pam_filter/pam_filter.8: Likewise.
3434 * modules/pam_ftp/pam_ftp.8: Likewise.
3435 * modules/pam_group/group.conf.5: Likewise.
3436 * modules/pam_group/pam_group.8: Likewise.
3437 * modules/pam_issue/pam_issue.8: Likewise.
3438 * modules/pam_lastlog/pam_lastlog.8: Likewise.
3439 * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
3440 * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
3441 * modules/pam_umask/pam_umask.8: Likewise.
3443 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
3444 dngettext if available [#1427738].
3445 * configure.in: Check for dngettext [#1427738].
3446 * po/*.po: Update to dngettext usage.
3448 * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
3449 * modules/pam_listfile/pam_listfile.8.xml: New.
3450 * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
3451 * modules/pam_listfile/README.xml: New.
3452 * modules/pam_listfile/README: Regenerated from xml file.
3454 2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
3456 * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
3457 * modules/pam_lastlog/pam_lastlog.8.xml: New.
3458 * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
3459 * modules/pam_lastlog/README.xml: New.
3460 * modules/pam_lastlog/README: Regenerated from xml file.
3462 * modules/pam_group/Makefile.am: Include Make.xml.rules.
3463 * modules/pam_group/group.conf.5.xml: New.
3464 * modules/pam_group/group.conf.5: New, generated from xml file.
3465 * modules/pam_group/pam_group.8.xml: New.
3466 * modules/pam_group/pam_group.8: New, generated from xml file.
3467 * modules/pam_group/README.xml: New.
3468 * modules/pam_group/README: Regenerated from xml file.
3470 * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
3471 * modules/pam_ftp/pam_ftp.8.xml: New.
3472 * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
3473 * modules/pam_ftp/README.xml: New.
3474 * modules/pam_ftp/README: Regenerated from xml file.
3476 * modules/pam_issue/Makefile.am: Include Make.xml.rules.
3477 * modules/pam_issue/pam_issue.8.xml: New.
3478 * modules/pam_issue/pam_issue.8: New, generated from xml file.
3479 * modules/pam_issue/README.xml: New.
3480 * modules/pam_issue/README: Regenerated from xml file.
3482 * modules/pam_filter/Makefile.am: Include Make.xml.rules.
3483 * modules/pam_filter/pam_filter.8.xml: New.
3484 * modules/pam_filter/pam_filter.8: New, generated from xml file.
3485 * modules/pam_filter/README.xml: New.
3486 * modules/pam_filter/README: Regenerated from xml file.
3488 2006-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
3490 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
3491 directory documentation.
3493 * modules/pam_umask/Makefile.am: Include Make.xml.rules.
3494 * modules/pam_umask/pam_umask.8.xml: New.
3495 * modules/pam_umask/pam_umask.8: New, generated from xml file.
3496 * modules/pam_umask/README.xml: New.
3497 * modules/pam_umask/README: Regenerated from xml file.
3499 2006-05-29 Thorsten Kukuk <kukuk@thkukuk.de>
3501 * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
3502 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
3503 * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
3504 * modules/pam_mkhomedir/README.xml: New.
3505 * modules/pam_mkhomedir/README: Regenerated from xml file.
3507 2006-05-23 Thorsten Kukuk <kukuk@thkukuk.de>
3509 * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
3512 2006-05-22 Thorsten Kukuk <kukuk@thkukuk.de>
3514 * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
3515 Fix memory leaks, [#1490956] found by Coverity.
3517 * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
3518 value of pam_get_user().
3519 (tally_get_data): Check if oldtime is not NULL.
3520 [#1489818] found by Coverity.
3522 * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
3523 ignore return value of stat(). [#1489808] found by Coverity.
3525 * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
3526 NULL pointer dereference. [#1489792] found by Coverity.
3528 * libpam/Makefile.am: bump release number of libpam.so.
3529 * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
3530 [#1489804] found by Coverity.
3532 * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
3533 str, [#1489658] found by Coverity.
3535 * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
3536 a potential NULL pointer dereference.
3537 (pam_sm_chauthtok): Remove dead code.
3538 [#1489634] found by Coverity.
3540 2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
3542 * configure.in: Check for fseeko.
3543 * modules/pam_tally/pam_tally.c: Use fseeko if available
3544 (Based on patch by IBM).
3546 2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
3548 * release version 0.99.4.0
3550 * libpam/pam_strerror.c: Unify error messages.
3552 * po/zh_TW.po: Adjust for last pam_strerror changes.
3553 * po/zh_CN.po: Likewise.
3554 * po/uk.po: Likewise.
3555 * po/tr.po: Likewise.
3556 * po/pt.po: Likewise.
3557 * po/pt_BR.po: Likewise.
3558 * po/pl.po: Likewise.
3559 * po/ja.po: Likewise.
3560 * po/nl.po: Likewise.
3561 * po/nb.po: Likewise.
3562 * po/it.po: Likewise.
3563 * po/hu.po: Likewise.
3564 * po/fr.po: Likewise.
3565 * po/fi.po: Likewise.
3566 * po/es.po: Likewise.
3567 * po/de.po: Likewise.
3568 * po/cs.po: Likewise.
3570 * doc/man/pam.3.xml: New.
3571 * doc/man/pam.3. New, generated from XML file.
3573 * doc/man/pam_sm_acct_mgmt.3.xml: New.
3574 * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
3576 * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
3579 * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
3581 2006-05-02 Thorsten Kukuk <kukuk@thkukuk.de>
3583 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
3584 different strings for plural or not [#1427738]
3586 * po/*.po: Adjust for pam_unix.so translation fix.
3588 * modules/pam_tally/pam_tally.c: Always close file handle
3589 in error case, don't close it depending on *TALLY value [#1478180]
3591 2006-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
3593 * po/fr.po: Updated.
3595 2006-04-11 Thorsten Kukuk <kukuk@thkukuk.de>
3597 * po/km.po: Updated.
3599 2006-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
3601 * po/LINGUAS: Add uk.
3604 * po/cs.po: Updated.
3605 * po/po/es.po: Updated.
3606 * po/fi.po: Updated.
3607 * po/fr.po: Updated.
3608 * po/hu.po: Updated.
3609 * po/it.po: Updated.
3610 * po/ja.po: Updated.
3611 * po/nb.po: Updated.
3612 * po/pl.po: Updated.
3613 * po/pt.po: Updated.
3614 * po/pt_BR.po: Updated.
3615 * po/zh_CN.po: Updated.
3616 * po/zh_TW.po: Updated.
3618 2006-03-21 Thorsten Kukuk <kukuk@thkukuk.de>
3620 * configure.in: Remove ALL_LINGUAS.
3622 * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
3624 2006-03-13 Thorsten Kukuk <kukuk@thkukuk.de>
3626 * doc/man/pam_error.3.xml: New.
3627 * doc/man/pam_error.3: New, generated from XML file.
3628 * doc/man/pam_verror.3: New, generated from XML file.
3629 * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
3631 * modules/pam_lastlog/Makefile.am: Fix typo.
3633 * modules/pam_lastlog/pam_lastlog.c: Move comment for
3634 translators in right line.
3635 * po/*.po: Update po files with comment for translator.
3637 2006-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
3639 * doc/man/Makefile.am: Add new manual pages.
3641 * doc/man/pam.conf.5.xml: Replace link with content
3643 * doc/man/pam.conf.5: Regenerated from XML file.
3645 * doc/man/pam_info.3.xml: New.
3646 * doc/man/pam_info.3: New, generated from XML file.
3647 * doc/man/pam_vinfo.3: New, generated from XML file.
3649 * doc/man/pam_conv.3.xml: New.
3650 * doc/man/pam_conv.3: New, generated from XML file.
3652 * doc/man/pam_putenv.3.xml: New.
3653 * doc/man/pam_putenv.3: New, generated from XML file.
3655 * doc/man/pam_getenv.3.xml: New.
3656 * doc/man/pam_getenv.3: New, generated from XML file.
3658 * doc/man/pam_getenvlist.3.xml: New.
3659 * doc/man/pam_getenvlist.3: New, generated from XML file.
3661 * libpam/pam_item.c (pam_get_user): Check for valid pamh before
3664 * configure.in: create tests/Makefile
3665 * Makefile.am (SUBDIRS): Add tests
3666 * tests/Makefile.am: New.
3667 * tests/tst-dlopen.c: New.
3668 * tests/tst-pam_acct_mgmt.c: New.
3669 * tests/tst-pam_authenticate.c: New.
3670 * tests/tst-pam_chauthtok.c: New.
3671 * tests/tst-pam_close_session.c: New.
3672 * tests/tst-pam_end.c: New.
3673 * tests/tst-pam_fail_delay.c: New.
3674 * tests/tst-pam_getenvlist.c: New.
3675 * tests/tst-pam_get_item.c: New.
3676 * tests/tst-pam_open_session.c: New.
3677 * tests/tst-pam_setcred.c: New.
3678 * tests/tst-pam_set_item.c: New.
3679 * tests/tst-pam_start.c: New.
3680 * tests/tst-pam_get_user.c: New.
3682 * modules/pam_access/Makefile.am: Add rules for make check
3683 * modules/pam_access/tst-pam_access: New
3684 * modules/pam_cracklib/Makefile.am: Add rules for make check
3685 * modules/pam_cracklib/tst-pam_cracklib: New
3686 * modules/pam_debug/Makefile.am: Add rules for make check
3687 * modules/pam_debug/tst-pam_debug: New
3688 * modules/pam_deny/Makefile.am: Add rules for make check
3689 * modules/pam_deny/tst-pam_deny: New
3690 * modules/pam_echo/Makefile.am: Add rules for make check
3691 * modules/pam_echo/tst-pam_echo: New
3692 * modules/pam_env/Makefile.am: Add rules for make check
3693 * modules/pam_env/tst-pam_env: New
3694 * modules/pam_exec/Makefile.am: Add rules for make check
3695 * modules/pam_exec/tst-pam_exec: New
3696 * modules/pam_filter/Makefile.am: Add rules for make check
3697 * modules/pam_filter/tst-pam_filter: New
3698 * modules/pam_ftp/Makefile.am: Add rules for make check
3699 * modules/pam_ftp/tst-pam_ftp: New
3700 * modules/pam_group/Makefile.am: Add rules for make check
3701 * modules/pam_group/tst-pam_group: New
3702 * modules/pam_issue/Makefile.am: Add rules for make check
3703 * modules/pam_issue/tst-pam_issue: New
3704 * modules/pam_lastlog/Makefile.am: Add rules for make check
3705 * modules/pam_lastlog/tst-pam_lastlog: New
3706 * modules/pam_limits/Makefile.am: Add rules for make check
3707 * modules/pam_limits/tst-pam_limits: New
3708 * modules/pam_listfile/Makefile.am: Add rules for make check
3709 * modules/pam_listfile/tst-pam_listfile: New
3710 * modules/pam_localuser/Makefile.am: Add rules for make check
3711 * modules/pam_localuser/tst-pam_localuser: New
3712 * modules/pam_mail/Makefile.am: Add rules for make check
3713 * modules/pam_mail/tst-pam_mail: New
3714 * modules/pam_mkhomedir/Makefile.am: Add rules for make check
3715 * modules/pam_mkhomedir/tst-pam_mkhomedir: New
3716 * modules/pam_motd/Makefile.am: Add rules for make check
3717 * modules/pam_motd/tst-pam_motd: New
3718 * modules/pam_nologin/Makefile.am: Add rules for make check
3719 * modules/pam_nologin/tst-pam_nologin: New
3720 * modules/pam_permit/Makefile.am: Add rules for make check
3721 * modules/pam_permit/tst-pam_permit: New
3722 * modules/pam_rhosts/Makefile.am: Add rules for make check
3723 * modules/pam_rhosts/tst-pam_rhosts: New
3724 * modules/pam_rootok/Makefile.am: Add rules for make check
3725 * modules/pam_rootok/tst-pam_rootok: New
3726 * modules/pam_securetty/Makefile.am: Add rules for make check
3727 * modules/pam_securetty/tst-pam_securetty: New
3728 * modules/pam_selinux/Makefile.am: Add rules for make check
3729 * modules/pam_selinux/tst-pam_selinux: New
3730 * modules/pam_shells/Makefile.am: Add rules for make check
3731 * modules/pam_shells/tst-pam_shells: New
3732 * modules/pam_stress/Makefile.am: Add rules for make check
3733 * modules/pam_stress/tst-pam_stress: New
3734 * modules/pam_succeed_if/Makefile.am: Add rules for make check
3735 * modules/pam_succeed_if/tst-pam_succeed_if: New
3736 * modules/pam_tally/Makefile.am: Add rules for make check
3737 * modules/pam_tally/tst-pam_tally: New
3738 * modules/pam_time/Makefile.am: Add rules for make check
3739 * modules/pam_time/tst-pam_time: New
3740 * modules/pam_umask/Makefile.am: Add rules for make check
3741 * modules/pam_umask/tst-pam_umask: New
3742 * modules/pam_unix/Makefile.am: Add rules for make check
3743 * modules/pam_unix/tst-pam_unix: New
3744 * modules/pam_userdb/Makefile.am: Add rules for make check
3745 * modules/pam_userdb/tst-pam_userdb: New
3746 * modules/pam_warn/Makefile.am: Add rules for make check
3747 * modules/pam_warn/tst-pam_warn: New
3748 * modules/pam_wheel/Makefile.am: Add rules for make check
3749 * modules/pam_wheel/tst-pam_wheel: New
3750 * modules/pam_xauth/Makefile.am: Add rules for make check
3751 * modules/pam_xauth/tst-pam_xauth: New
3753 2006-03-11 Thorsten Kukuk <kukuk@thkukuk.de>
3755 * doc/man/pam_fail_delay.3.xml: New.
3756 * doc/man/pam_fail_delay.3: New, generated from xml.
3757 * doc/man/pam_prompt.3.xml: New.
3758 * doc/man/pam_prompt.3: New, generated from xml.
3759 * doc/man/pam_syslog.3.xml: New.
3760 * doc/man/pam_syslog.3: New, generated from xml.
3761 * doc/man/pam_vprompt.3: New, generated from xml.
3762 * doc/man/pam_vsyslog.3: New, generated from xml.
3764 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
3766 * po/km.po: Update Khmer translation.
3768 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
3770 * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
3771 version from #1425487.
3772 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
3773 * modules/pam_succeed_if/Makefile.am: Include XML rules.
3774 * modules/pam_succeed_if/README.xml: New.
3775 * modules/pam_succeed_if/README: Regenerated from xml.
3776 * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
3779 2006-02-22 Thorsten Kukuk <kukuk@thkukuk.de>
3781 * configure.in: Fix check for incomplete libaudit installations
3782 (Patch from Ruediger Oertel <ro@suse.de>).
3784 * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
3785 correct last_login field [#1427401].
3787 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
3788 format string for translation to allow reorder [#1428269].
3789 * po/*.po: Update with last pam_lastlog change.
3792 2006-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
3794 * doc/man/Makefile.am: Add new manual pages.
3795 * doc/man/pam_end.3: Regenerated from xml file.
3796 * doc/man/pam_end.3.xml: Document freeing of item data.
3797 * doc/man/pam_get_user.3: New.
3798 * doc/man/pam_get_user.3.xml: New.
3799 * modules/pam_access/access.conf.5.xml: Fix typos.
3800 * modules/pam_env/Makefile.am: Add new manual pages.
3801 * modules/pam_env/README: Regenerate from xml file.
3802 * modules/pam_env/README.xml: New.
3803 * modules/pam_env/pam_env.8: New.
3804 * modules/pam_env/pam_env.8.xml: New.
3805 * modules/pam_env/pam_env.conf.5: New.
3806 * modules/pam_env/pam_env.conf.5.xml New.
3808 2006-02-14 Thorsten Kukuk <kukuk@thkukuk.de>
3810 * po/fi.po: Updated translations.
3811 * po/pl.po: Likewise.
3812 * po/km.po: New translation.
3813 * configure.in: Add km as new language.
3815 2006-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
3817 * modules/pam_echo/pam_echo.8.xml: New.
3818 * modules/pam_echo/pam_echo.8: Regenerated from xml file.
3819 * modules/pam_echo/Makefile.am: Include Make.xml.rules.
3820 * modules/pam_echo/pam_echo.c: Fix return value.
3822 * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
3824 2006-02-12 Thorsten Kukuk <kukuk@thkukuk.de>
3826 * configure.in: Add doc/man/Makefile.
3827 * Make.xml.rules: Enable xincludes for manual pages.
3828 * doc/Makefile.am (EXRA_DIST): Remove manual pages.
3829 (SUBDIR): Add man subdirectory.
3830 * doc/man/Makefile.am: New.
3831 * doc/man/pam_acct_mgmt.3: New.
3832 * doc/man/pam_acct_mgmt.3.xml: New.
3833 * doc/man/pam_get_data.3: New.
3834 * doc/man/pam_get_data.3.xml: New.
3835 * doc/man/pam_set_data.3: New.
3836 * doc/man/pam_set_data.3.xml: New.
3837 * doc/man/pam.8.xml: New.
3838 * doc/man/pam.8: Regenerated from xml file.
3839 * doc/man/pam_authenticate.3.xml: New.
3840 * doc/man/pam_authenticate.3: Regenerated from xml file.
3841 * doc/man/pam_chauthtok.3.xml: New.
3842 * doc/man/pam_chauthtok.3: Regenerated from xml file.
3843 * doc/man/pam_close_session.3.xml: New.
3844 * doc/man/pam_close_session.3: Regenerated from xml file.
3845 * doc/man/pam_end.3.xml: New.
3846 * doc/man/pam_end.3: Regenerated from xml file.
3847 * doc/man/pam_fail_delay.3.xml: New.
3848 * doc/man/pam_fail_delay.3: Regenerated from xml file.
3849 * doc/man/pam_get_item.3.xml: New.
3850 * doc/man/pam_get_item.3: Regenerated from xml file.
3851 * doc/man/pam_item_types.inc.xml: New.
3852 * doc/man/pam_open_session.3.xml: New.
3853 * doc/man/pam_open_session.3: Regenerated from xml file.
3854 * doc/man/pam_set_item.3.xml: New.
3855 * doc/man/pam_set_item.3: Regenerated from xml file.
3856 * doc/man/pam_setcred.3.xml: New.
3857 * doc/man/pam_setcred.3: Regenerated from xml file.
3858 * doc/man/pam_start.3.xml: New.
3859 * doc/man/pam_start.3: Regenerated from xml file.
3860 * doc/man/pam_strerror.3.xml: New.
3861 * doc/man/pam_strerror.3: Regenerated from xml file.
3862 * doc/man/template-man: Removed.
3864 2006-02-10 Thorsten Kukuk <kukuk@thkukuk.de>
3866 * configure.in: Remove pam_pwdb support.
3867 * modules/Makefile.am: remove pam_pwdb.
3868 * modules/pam_pwdb: Remove complete directory.
3869 * libpam/Makefile.am: Remove LIBPWDB references.
3870 * libpam/pam_static_modules.h: Remove pam_pwdb references.
3871 * doc/modules/pam_pwdb.sgml: Removed.
3872 * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
3873 * doc/pam_source.sgml: Remove references to libpwdb.
3874 * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
3875 * doc/modules/pam_group.sgml: Likewise.
3876 * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
3877 * doc/modules/pam_userdb.sgml: Likewise.
3878 * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
3880 * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
3881 * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
3883 * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
3884 * modules/pam_cracklib/Makefile.am: Likewise.
3885 * modules/pam_deny/Makefile.am: Likewise.
3886 * modules/pam_exec/Makefile.am: Likewise.
3888 2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
3890 * configure.in: Check for text browser.
3891 * Make.xml.rules: Add rule to generate README from README.xml.
3893 * modules/pam_access/Makefile.am: Include Make.xml.rules.
3894 * modules/pam_access/README: Regenerated from README.xml.
3895 * modules/pam_access/README.xml: New.
3896 * modules/pam_access/access.conf: Extended by new examples.
3897 * modules/pam_access/access.conf.5: New, generated from xml file.
3898 * modules/pam_access/access.conf.5.xml: New.
3899 * modules/pam_access/pam_access.8: New, generated from xml file.
3900 * modules/pam_access/pam_access.8.xml: New.
3901 * modules/pam_access/pam_access.c: Add rules for IPv6 and
3903 Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
3905 * modules/pam_deny/Makefile.am: Include Make.xml.rules.
3906 * modules/pam_deny/pam_deny.8.xml: New.
3907 * modules/pam_deny/pam_deny.8: New, generated from xml file.
3908 * modules/pam_deny/README.xml: New.
3909 * modules/pam_deny/README: Regenerated from xml file.
3911 * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
3912 * modules/pam_cracklib/pam_cracklib.8.xml: New.
3913 * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
3914 * modules/pam_cracklib/README.xml: New.
3915 * modules/pam_cracklib/README: Regenerated from xml file.
3917 * modules/pam_exec/Makefile.am: Add rule to generate README.
3918 * modules/pam_exec/README: Regenerated from xml file.
3919 * modules/pam_exec/pam_exec.8: Regenerated from xml file.
3920 * modules/pam_exec/pam_exec.8.xml: Syntax files.
3922 2006-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
3925 * po/pt.po: Update translations.
3926 * configure.in: Add nl as new language.
3928 2006-01-30 Thorsten Kukuk <kukuk@thkukuk.de>
3930 * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
3931 * modules/pam_exec/Makefile.am: Include Make.xml.rules.
3933 * Make.xml.rules: New.
3935 * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
3937 2006-01-27 Thorsten Kukuk <kukuk@thkukuk.de>
3939 * configure.in: Prefer libdb over libndbm, fix check for
3940 libcrack and remove not needed BACKUP_LIBS.
3942 2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
3944 * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
3946 * po/de.po: Fix one translation.
3948 * configure.in: Add modules/pam_exec.
3949 * modules/Makefile.am: Add pam_exec subdirectory.
3950 * modules/pam_exec/README: New.
3951 * modules/pam_exec/Makefile.am: New.
3952 * modules/pam_exec/pam_exec.8: New.
3953 * modules/pam_exec/pam_exec.c: New.
3954 * modules/pam_exec/pam_exec.8.xml: New.
3955 * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
3956 * po/*.po: Merge new pam_exec strings.
3958 * libpam/pam_static_modules.h: New.
3959 * Makefile.am: Reorder subdirectories for static modules.
3960 * configure.in: Add --enable-static-modules option.
3961 * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
3962 necessary, add pam_static_modules.h, link against all PAM
3963 module object files if STATIC_MODULES is defined.
3964 * libpam/pam_static.c: Remove old _static_module* includes,
3965 include pam_static_modules.h.
3967 * configure.in: Add checks for xsltproc, xmllint and docbook
3969 * m4/jh_path_xml_catalog.m4: New.
3971 2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
3973 * modules/pam_succeed_if/pam_succeed_if.c: Add support for
3975 * modules/pam_xauth/pam_xauth.c: Likewise.
3977 * libpam/pam_static.c (_pam_open_static_handler): Add pamh
3979 * libpam/pam_private.h: Adjust prototype.
3980 * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
3981 _pam_open_static_handler call.
3983 * configure.in: Don't define PAM_DYNAMIC.
3984 * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
3985 include pam_dynamic.h
3986 * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
3987 exclude functions if we compile with PAM_STATIC.
3988 * libpam/pam_dynamic.h: Remove.
3989 * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
3990 * libpam/Makefile.am: Bump version number of libpam, remove
3993 2006-01-21 Thorsten Kukuk <kukuk@thkukuk.de>
3995 * modules/pam_listfile/pam_listfile.c: Add support for session
3996 and password management.
3998 2006-01-19 Thorsten Kukuk <kukuk@thkukuk.de>
4000 * doc/specs/Makefile.am (spec): Add padout to fix parallel
4001 build (Reported by Andreas Haumer <andreas@xss.co.at>).
4003 2006-01-15 Thorsten Kukuk <kukuk@thkukuk.de>
4005 * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
4008 2006-01-13 Thorsten Kukuk <kukuk@thkukuk.de>
4010 * release version 0.99.3.0
4012 * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
4015 * modules/pam_umask/pam_umask.c (search_key): Don't ignore
4016 EOF/error return value from fgets().
4018 * configure.in: Check for getline and getdelim
4020 * po/fi.po: Add new translations.
4021 * po/de.po: Likewise.
4022 * po/es.po: Likewise.
4023 * po/fr.po: Likewise.
4024 * po/it.po: Likewise.
4025 * po/ja.po: Likewise.
4026 * po/pt_BR.po: Likewise.
4027 * po/zh_CH.po: Likewise.
4028 * po/zh_TW.po: Likewise.
4030 2006-01-13 Dmitry V. Levin <ldv@altlinux.org>
4032 * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
4033 call with %m specifier.
4035 2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
4037 * configure.in: Add check for -fpie/-pie
4038 * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
4039 upperLOWER with -fpie/-pie if supported.
4040 * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
4041 with -fpie/-pie if supported.
4043 2006-01-12 Steve Grubb <sgrubb@redhat.com>
4045 * configure.in: Add check for audit library.
4046 * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
4047 (libpam_la_SOURCES): Add pam_audit.c.
4048 * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
4049 * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
4050 * libpam/pam_password.c (pam_chauthtok): Likewise.
4051 * libpam/pam_session.c (pam_open_session),
4052 (pam_close_session): Likewise.
4053 * libpam/pam_private.h: Add audit_state member to pam_handle,
4054 declare _pam_auditlog and _pam_audit_end.
4055 * libpam/pam_start.c (pam_start): Initialize audit_state.
4056 * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
4058 * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
4059 * NEWS: Note about added auditing.
4061 2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de>
4063 * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
4065 * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
4066 if we compile libpam itself.
4068 * po/hu.po: Update with new translations.
4070 2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
4072 * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
4073 instead of PAM_AUTHTOK_RECOVER_ERR.
4074 * modules/pam_pwdb/support.-c: Likewise.
4075 * modules/pam_unix/support.c: Likewise.
4076 * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
4077 * libpam/pam_strerror.c (pam_strerror): Likewise.
4079 * libpam/include/security/_pam_compat.h: Define
4080 PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
4082 * libpam/include/security/_pam_types.h: Rename
4083 PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
4085 2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
4087 * libpam/include/security/_pam_types.h: Remove nonnull attribute
4088 from third paramter (item) of pam_get_item.
4089 * libpam/Makefile.am: Bump version number of shared library.
4091 2005-12-21 Tomas Mraz <t8m@centrum.cz>
4093 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
4094 (evaluate_notingroup): Simplified.
4095 (evaluate_innetgr), (evaluate_notinnetgr): New functions.
4096 (evaluate): Added calls to evaluate_(not)innetgr().
4097 * modules/pam_succeed_if/README: Documented netgroup matching.
4098 * NEWS: Mentioned the added netgroup matching support.
4100 2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
4102 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
4103 strftime instead of ctime.
4105 * po/de.po: Fix typo.
4107 2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de>
4109 * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
4110 Reported by Charles_H_Bedford@nbc.gov.
4112 * modules/pam_time/pam_time.c (check_account): Implement
4113 support for netgroups.
4115 * modules/pam_time/time.conf: Document usage of netgroups.
4117 2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
4119 * modules/pam_group/pam_group.c (check_account): Implement
4120 support for netgroups.
4122 * modules/pam_group/group.conf: Add all documentation to this
4123 example config file and don't reference to outdated configs.
4125 * modules/pam_group/README: New.
4127 * modules/pam_group/Makefile.am: Add README to EXTRADIST.
4129 2005-12-15 Thorsten Kukuk <kukuk@suse.de>
4131 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
4132 error if user logins the first time.
4134 * modules/pam_lastlog/README: New.
4136 * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
4138 2005-12-14 Thorsten Kukuk <kukuk@suse.de>
4140 * modules/pam_deny/pam_deny.c: Fix comment.
4142 * doc/pam_appl.sgml: Fix typo.
4144 Reported by Russell Bateman <russ@windofkeltia.com>
4146 2005-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
4148 * release version 0.99.2.1
4150 * po/de.po: Remove new fuzzy entry
4152 * NEWS: Add 0.99.2.1 changes
4154 * configure.in: bump version number to 0.99.2.1
4156 2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
4158 Cleanup pam_syslog messages.
4160 * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
4161 * modules/pam_filter/pam_filter.c (set_filter): Append %m
4162 specifier to pam_syslog messages where appropriate.
4163 * modules/pam_group/pam_group.c (read_field): Likewise.
4164 * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
4165 (create_homedir): Do not use make_remark() wrapper, call
4166 pam_info() directly. Call pam_syslog() right after failed
4167 operation and append %m specifier to pam_syslog messages where
4169 * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
4170 sequence of malloc(), strcpy() and strcat() calls with asprintf().
4171 Append %m specifier to pam_syslog messages where appropriate.
4172 * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
4173 Append %m specifier to pam_syslog messages where appropriate.
4174 * modules/pam_shells/pam_shells.c (perform_check): Likewise.
4176 2005-12-12 Tomas Mraz <t8m@centrum.cz>
4178 * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
4179 * po/Linux-PAM.pot: Likewise.
4180 * po/de.po: Likewise.
4181 * po/es.po: Likewise.
4182 * po/fi.po: Likewise.
4183 * po/fr.po: Likewise.
4184 * po/hu.po: Likewise.
4185 * po/it.po: Likewise.
4186 * po/ja.po: Likewise.
4187 * po/nb.po: Likewise.
4188 * po/pa.po: Likewise.
4189 * po/pl.po: Likewise.
4190 * po/pt.po: Likewise.
4191 * po/pt_BR.po: Likewise.
4192 * po/zh_CN.po: Likewise.
4193 * po/zh_TW.po: Likewise.
4194 * po/de.po: Add new translation, fixed typo in string.
4196 2005-12-12 Mike Becher <Mike.Becher@lrz-muenchen.de>
4198 * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
4200 2005-12-12 Thorsten Kukuk <kukuk@suse.de>
4202 * modules/pam_mail/README: Document "quiet" and "standard"
4205 2005-12-07 Thorsten Kukuk <kukuk@suse.de>
4207 * modules/pam_mail/pam_mail.c: Modify assembling of output
4208 for easier translation.
4210 * po/de.po: Translate new pam_mail messages.
4213 2005-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
4215 * po/de.po: Add new translation, fix wrong format specifier.
4216 * po/cs.po: Fix wrong format specifier.
4217 * po/es.po: Likewise.
4218 * po/fi.po: Likewise.
4219 * po/fr.po: Likewise.
4220 * po/hu.po: Likewise.
4221 * po/it.po: Likewise.
4222 * po/ja.po: Likewise.
4223 * po/nb.po: Likewise.
4224 * po/pa.po: Likewise.
4225 * po/pl.po: Likewise.
4226 * po/pt.po: Likewise.
4227 * po/pt_BR.po: Likewise.
4228 * po/zh_CN.po: Likewise.
4229 * po/zh_TW.po: Likewise.
4231 2005-11-24 Dmitry V. Levin <ldv@altlinux.org>
4233 * config.h.in: Remove generated file.
4234 * .cvsignore: Add config.h.in.
4236 * configure.in: Do not check for strerror.
4237 * libpam_misc/misc_conv.c (read_string): Replace strerror()
4238 call with %m specifier.
4239 * libpamc/pamc_converse.c (pamc_converse): Likewise.
4240 * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
4241 * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
4243 * modules/pam_selinux/pam_selinux.c (security_label_tty):
4245 (security_restorelabel_tty, security_label_tty): Append %m
4246 specifier where appropriate.
4247 * modules/pam_selinux/pam_selinux_check.c (main): Replace
4248 strerror() call with %m specifier.
4249 * modules/pam_unix/pam_unix_passwd.c (save_old_password,
4250 _update_passwd, _update_shadow): Likewise.
4251 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
4252 * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
4253 * po/Linux-PAM.pot: Update strings from pam_selinux.
4254 * po/cs.po: Likewise.
4255 * po/de.po: Likewise.
4256 * po/es.po: Likewise.
4257 * po/fi.po: Likewise.
4258 * po/fr.po: Likewise.
4259 * po/hu.po: Likewise.
4260 * po/it.po: Likewise.
4261 * po/ja.po: Likewise.
4262 * po/nb.po: Likewise.
4263 * po/pa.po: Likewise.
4264 * po/pl.po: Likewise.
4265 * po/pt.po: Likewise.
4266 * po/pt_BR.po: Likewise.
4267 * po/zh_CN.po: Likewise.
4268 * po/zh_TW.po: Likewise.
4270 2005-11-23 Thorsten Kukuk <kukuk@suse.de>
4272 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
4273 new variable to fix compiler warning.
4275 * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
4276 don't need to start with /dev/.
4278 2005-11-21 Thorsten Kukuk <kukuk@thkukuk.de>
4280 * release version 0.99.2.0
4282 * libpam_misc/Makefile.am: Increase release number (for change
4285 * NEWS: Adjust for 0.99.2.0
4287 2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de>
4289 * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
4290 Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
4292 2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
4294 * libpam/pam_handlers.c: Replace code for all dlopen variants with
4296 * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
4297 * libpam/pam_dynamic.h: Provide prototypes.
4298 For Mac OS X support [#534205]
4300 2005-11-09 Tomas Mraz <t8m@centrum.cz>
4302 * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
4304 * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
4305 full path tty name. Allow unset tty.
4306 (logic_member): Allow matching ':' in tty name.
4307 * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
4308 full path tty name. Allow unset tty.
4309 (logic_member): Allow matching ':' in tty name.
4311 * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
4314 2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
4316 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
4317 correct variable names.
4319 2005-11-06 Steve Langasek <vorlon@debian.org>
4321 * modules/pam_env/pam_env.c: don't treat a missing
4322 /etc/environment as a fatal error when attempting to read it,
4323 and try to read this file by default; this restores the behavior
4324 from Linux-PAM 0.76.
4326 2005-11-02 Tomas Mraz <t8m@centrum.cz>
4328 * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
4331 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
4332 logic when comparing dates to handle corner cases better [#1245888].
4334 2005-10-31 Thorsten Kukuk <kukuk@suse.de>
4336 * modules/pam_filter/pam_filter.c: Use XCASE only if defined
4339 2005-10-27 Thorsten Kukuk <kukuk@suse.de>
4341 * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
4343 2005-10-26 Tomas Mraz <t8m@centrum.cz>
4345 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
4346 modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
4347 modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
4348 uid to 0 before executing the helper if SELinux is enabled.
4349 * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
4350 if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
4353 2005-10-20 Tomas Mraz <t8m@centrum.cz>
4355 * configure.in: Added check for xauth binary and --with-xauth option.
4356 * config.h.in: Added configurable PAM_PATH_XAUTH.
4357 * modules/pam_xauth/README,
4358 modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
4359 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
4360 searching xauth binary on multiple places.
4361 (run_coprocess): Don't use execvp as it can be a security risk.
4363 2005-10-04 Steve Langasek <vorlon@debian.org>
4365 * libpam/include/security/pam_malloc.h,
4366 libpam/include/security/pam_modules.h: Declare public header
4367 files extern "C" so that they are C++-safe.
4369 2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
4370 Steve Langasek <vorlon@debian.org>
4372 Cleanup gratuitous use of strdup().
4373 Fix "missing argument" checks.
4375 * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
4376 to conffile and envfile arguments. Do not use x_strdup() for
4377 conffile and envfile initialization. Fix "missing argument"
4379 (_parse_config_file): Take conffile argument of type "const char *"
4380 instead of "char **". Do not free conffile.
4381 (_parse_env_file): Take env_file argument of type "const char *"
4382 instead of "char **". Do not free env_file.
4383 (pam_sm_setcred): Add const qualifier to conf_file and env_file.
4384 Pass conf_file and env_file to _parse_config_file() and
4385 _parse_env_file() by value.
4386 (pam_sm_open_session): Likewise.
4388 * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
4389 users argument. Do not use x_strdup() for users initialization.
4390 (lookup): Add const qualifier to list argument.
4391 (pam_sm_authenticate): Add const qualifier to users argument.
4393 * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
4394 to maildir argument. Do not use x_strdup() for maildir
4395 initialization. Fix "missing argument" check.
4396 (get_folder): Take path_mail argument of type "const char *"
4397 instead of "char **". Do not free path_mail.
4398 (_do_mail): Add const qualifier to path_mail argument.
4399 Pass path_mail to get_folder() by value.
4401 * modules/pam_motd/pam_motd.c: Include <syslog.h>.
4402 (pam_sm_open_session): Add const qualifier to motd_path.
4403 Do not use x_strdup() for motd_path initialization. Do not
4404 free motd_path. Fix "missing argument" check. Add "unknown
4407 * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
4408 qualifier to database and cryptmode arguments. Fix "missing
4410 (pam_sm_authenticate): Add const qualifier to database and cryptmode.
4411 (pam_sm_acct_mgmt): Likewise.
4413 2005-10-01 Steve Langasek <vorlon@debian.org>
4415 * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
4417 2005-09-30 Steve Langasek <vorlon@debian.org>
4419 * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
4420 gratuitous use of strdup().
4422 2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
4426 * doc/specs/Makefile.am (install-data-local): Install
4428 (all): Copy rfc if we build outside of source directory.
4430 2005-09-27 Thorsten Kukuk <kukuk@suse.de>
4432 * NEWS: Document removal of pam_radius.
4433 * autogen.sh: Make configure script executeable.
4435 * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
4436 (lex.yy.c): Fixed out of tree build.
4438 * conv/pam_conv1/pam_conv.y: Fix main prototype.
4442 * po/POTFILES.in: Remove files not distributed by tar archive
4443 and not containing strings for translation.
4445 2005-09-26 Tomas Mraz <t8m@centrum.cz>
4447 * NEWS: Add a few missing entries from CHANGELOG.
4449 * AUTHORS: Fixed entries for Toady and me.
4451 * Makefile.am (M4_FILES): Fixed out of tree build.
4452 * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
4453 (spec, lex.yy.c): Fixed out of tree build.
4455 * modules/pam_userdb/README: Document try_first_pass and
4456 use_first_pass options, remove use_authtok option.
4459 2005-09-26 Dmitry V. Levin <ldv@altlinux.org>
4461 * NEWS: Mention changes in pam_lastlog.
4463 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
4466 * autogen.sh: Don't generate NEWS file.
4467 * CHANGELOG: Document it as obsolete.
4469 2005-09-26 Tomas Mraz <t8m@centrum.cz>
4471 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
4472 _log_err() -> pam_syslog()
4473 (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
4474 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
4475 _log_err() -> pam_syslog()
4476 * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
4477 (getNISserver, _unix_run_shadow_binary, _update_passwd,
4478 _update_shadow, _do_setpass, _pam_unix_approve_pass,
4479 pam_sm_chauthtok): _log_err() -> pam_syslog()
4480 * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
4481 (pam_sm_open_session, pam_sm_close_session):
4482 _log_err() -> pam_syslog()
4483 * modules/pam_unix/support.c (_log_err, converse): removed
4484 (_make_remark): use pam_prompt() instead of converse()
4485 (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
4486 _unix_verify_password, _unix_read_password):
4487 _log_err() -> pam_syslog()
4488 _cleanup(), _unix_cleanup(): Silence unused param warnings.
4489 (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
4490 _unix_run_helper_binary): Silence incorrect type warnings.
4491 (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
4492 instead of converse().
4493 * modules/pam_unix/support.h (_log_err): removed
4494 * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
4496 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
4498 * configure.in: Add doc/specs/Makefile.
4499 * Makefile.am: Add releasedocs rule.
4500 * doc/Makefile.am: Add specs subdir, remove files from specs
4501 directory, add rfc86.0.txt to releasedocs.
4502 * doc/specs/Makefile.am: New file.
4503 * doc/specs/formatter/parse.y: move from here ...
4504 * doc/specs/parse.y: ... here.
4505 * doc/specs/formatter/parse.lex: move from here ...
4506 * doc/specs/parse.lex: ... here.
4508 * modules/pam_mail/pam_mail.c: Mark missing strings for translation
4509 * po/Linux-PAM.pot: Add new strings from pam_mail
4510 * po/cs.po: Likewise.
4511 * po/de.po: Likewise.
4512 * po/es.po: Likewise.
4513 * po/fi.po: Likewise.
4514 * po/fr.po: Likewise.
4515 * po/hu.po: Likewise.
4516 * po/it.po: Likewise.
4517 * po/ja.po: Likewise.
4518 * po/nb.po: Likewise.
4519 * po/pa.po: Likewise.
4520 * po/pl.po: Likewise.
4521 * po/pt.po: Likewise.
4522 * po/pt_BR.po: Likewise.
4523 * po/zh_CN.po: Likewise.
4524 * po/zh_TW.po: Likewise.
4526 2005-09-23 Tomas Mraz <t8m@centrum.cz>
4528 * modules/pam_access/pam_access.c (from_match): Support NULL from.
4529 (string_match): Support NULL string, add NONE keyword matching it.
4530 (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
4531 * modules/pam_access/access.conf: NONE keyword description
4532 * modules/pam_access/README: NONE keyword description
4534 2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
4536 * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
4537 pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
4538 text of log messages.
4539 (pam_sm_open_session): Replace sequence of malloc(), strcpy()
4540 and strcat() calls with asprintf(). Replace syslog() calls
4543 * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
4544 instead of memcmp() for string comparison.
4546 2005-09-21 Dmitry V. Levin <ldv@altlinux.org>
4548 * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
4549 (parse_args): Add pam_handle_t* argument. Log unrecognized
4551 (perform_check): Log pam_get_user() and malloc() failures.
4552 (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
4553 Pass pam_handle_t* to parse_args().
4555 * modules/pam_mail/pam_mail.c: Include <errno.h>.
4556 Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
4557 NO_MAIL_STANDARD_FORMAT macros.
4558 (parse_args, get_folder): Cleanup error messages.
4559 (get_folder): Fix leak of the path_mail variable in case of
4560 pam_get_user() failure. Cleanup memory management.
4561 (get_mail_status): Add pam_handle_t* argument. Fix leaks of
4562 namelist variable. Cleanup memory management. Log memory
4563 allocation failures. Remove 250-byte limit on Maildir pathname.
4564 (report_mail): Mark text messages for translation.
4565 (_do_mail): Cleanup memory management. Pass pam_handle_t*
4566 to get_mail_status().
4568 * po/Linux-PAM.pot: Update with new strings from pam_mail for
4570 * po/cs.po: Likewise.
4571 * po/de.po: Likewise.
4572 * po/es.po: Likewise.
4573 * po/fi.po: Likewise.
4574 * po/fr.po: Likewise.
4575 * po/hu.po: Likewise.
4576 * po/it.po: Likewise.
4577 * po/ja.po: Likewise.
4578 * po/nb.po: Likewise.
4579 * po/pa.po: Likewise.
4580 * po/pl.po: Likewise.
4581 * po/pt.po: Likewise.
4582 * po/pt_BR.po: Likewise.
4583 * po/zh_CN.po: Likewise.
4584 * po/zh_TW.po: Likewise.
4586 2005-09-20 Thorsten Kukuk <kukuk@suse.de>
4588 * configure.in: Add finish translation.
4591 * acinclude.m4: remove libprelude macros.
4592 * m4/libprelude.m4: New.
4594 * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
4596 * libpamc/Makefile.am (EXTRA_DIST): Add License.
4598 See CHANGELOG for earlier changes.