1 2008-10-20 Shankar Prasad <svenkate@redhat.com>
3 * po/kn.po: Updated translations.
5 2008-10-20 Leah Liu <lliu@redhat.com>
7 * po/zh_CN.po: Updated translations.
9 2008-10-20 Ondrej Sulek <feonsu@gmail.com>
11 * po/LINGUAS: New language.
12 * po/sk.po: New translation to Slovak.
14 2008-10-17 Tomas Mraz <t8m@centrum.cz>
16 * configure.in: Add modules/pam_tally2/Makefile.
17 * doc/sag/Linux-PAM_SAG.xml: Include pam_tally2.xml.
18 * doc/sag/pam_tally2.xml: New.
19 * libpam/pam_static_modules.h: Add pam_tally2 static struct.
20 * modules/Makefile.am: Add pam_tally2 directory.
21 * modules/pam_tally2/Makefile.am: New.
22 * modules/pam_tally2/README.xml: New.
23 * modules/pam_tally2/tallylog.h: New.
24 * modules/pam_tally2/pam_tally2.8.xml: New.
25 * modules/pam_tally2/pam_tally2.c: New.
26 * modules/pam_tally2/pam_tally2_app.c: New.
27 * modules/pam_tally2/tst-pam_tally2: New.
28 * po/POTFILES.in: Add pam_tally2 sources.
30 2008-10-17 Xavier Queralt Mateu <xqueralt@gmail.com>
32 * po/ca.po: Updated translations.
34 2008-10-15 Tomas Mraz <t8m@centrum.cz>
36 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Save the old
37 euid to suid to be able to restore it.
39 2008-10-15 Piotr Drąg <piotrdrag@gmail.com>
41 * po/pl.po: Updated translations.
43 2008-10-13 Tomas Mraz <t8m@centrum.cz>
45 * po/LINGUAS: New languages.
46 * po/cs.po: Updated translations.
48 2008-10-13 Amitakhya Phukan <aphukan@redhat.com>
50 * po/as.po: Updated translations.
52 2008-10-13 Shankar Prasad <svenkate@redhat.com>
54 * po/kn.po: Updated translations.
56 2008-10-13 Sandeep Sheshrao Shedmake <sshedmak@redhat.com>
58 * po/mr.po: New translation to Marathi.
60 2008-10-13 Runa Bhattacharjee <runab@redhat.com>
62 * po/bn_IN.po: Updated translations.
64 2008-10-13 Sharuzzaman Ahmat Raslan <sharuzzaman@gmail.com>
66 * po/ms.po: New translation to Malay.
68 2008-10-10 Thorsten Kukuk <kukuk@thkukuk.de>
70 * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass):
71 Remove check for re-used passwords.
72 * modules/pam_cracklib/pam_cracklib.8.xml: Remove documentation
73 of re-used password check.
75 * configure.in: add modules/pam_pwhistory/Makefile.
76 * doc/sag/Linux-PAM_SAG.xml: Include pam_pwhistory.xml.
77 * doc/sag/pam_pwhistory.xml: New.
78 * libpam/pam_static_modules.h: Add pam_pwhistory data.
79 * modules/Makefile.am: Add pam_pwhistory directory.
80 * modules/pam_pwhistory/Makefile.am: New.
81 * modules/pam_pwhistory/README.xml: New.
82 * modules/pam_pwhistory/opasswd.c: New.
83 * modules/pam_pwhistory/opasswd.h: New.
84 * modules/pam_pwhistory/pam_pwhistory.8.xml: New.
85 * modules/pam_pwhistory/pam_pwhistory.c: New.
86 * modules/pam_pwhistory/tst-pam_pwhistory: New.
87 * xtests/Makefile.am: New.
88 * xtests/run-xtests.sh: New.
89 * xtests/tst-pam_pwhistory1.c: New.
90 * xtests/tst-pam_pwhistory1.pamd: New.
91 * xtests/tst-pam_pwhistory1.sh: New.
92 * po/POTFILES.in: Add modules/pam_pwhistory/.
93 * po/de.po: Update translations.
95 2008-10-02 Thorsten Kukuk <kukuk@thkukuk.de>
97 * po/de.po: Update translations.
99 2008-09-30 Manoj Kumar Giri <mgiri@redhat.com>
101 * po/or.po: Updated translations.
103 2008-09-30 Taylon Silmer Lacerda Silva <taylonsilva@gmail.com>
105 * po/pt_BR.po: Updated translations.
107 2008-09-30 Tomas Mraz <t8m@centrum.cz>
109 * modules/pam_lastlog/pam_lastlog.8.xml: Document new options
110 noupdate and showfailed.
111 * modules/pam_lastlog/pam_lastlog.c(pam_parse): Recognize the new
113 (last_login_read): New output parameter lltime. Do not display
114 the last login message if it would be empty.
115 (last_login_date): New output parameter lltime. Do not write the
116 last login info when LASTLOG_UPDATE is not set.
117 (last_login_failed): New function to display the last bad login
119 (pam_sm_open_session): Obtain lltime from last_login_date() and
120 call last_login_failed() when appropriate.
122 * po/Linux-pam.pot: Updated strings to translate.
125 2008-09-29 Thorsten Kukuk <kukuk@thkukuk.de>
127 * modules/pam_echo/pam_echo.8.xml: Fix format error.
129 2008-09-25 Tomas Mraz <t8m@centrum.cz>
131 * modules/pam_tally/pam_tally.c(get_tally): Fix syslog message.
132 (tally_check): Open faillog read only. Close file descriptor.
133 Fix typos in messages.
135 2008-09-25 Thorsten Kukuk <kukuk@thkukuk.de>
137 * modules/pam_mail/pam_mail.c (report_mail): Fix logic of
138 "quiet" option (Patch from Andreas Henriksson <andreas@fatal.se>)
140 * modules/pam_mail/pam_mail.8.xml: Fix typo.
142 2008-09-23 Tomas Mraz <t8m@centrum.cz>
144 * modules/pam_limits/limits.conf.5.xml: Comment that rss limit is
147 2008-09-19 Tomas Mraz <t8m@centrum.cz>
149 * modules/pam_cracklib/pam_cracklib.8.xml: Fix description
150 of the palindrome test. Document new options maxrepeat and
152 * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Parse
153 the maxrepeat and reject_username options.
154 (password_check): Call the new tests usercheck() and
156 (_pam_unix_approve_pass): Pass user name to the password_check().
158 2008-09-16 Thorsten Kukuk <kukuk@thkukuk.de>
160 * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo.
162 * modules/pam_unix/pam_unix.8.xml: Fix typo.
164 2008-09-03 Thorsten Kukuk <kukuk@thkukuk.de>
166 * modules/pam_exec/pam_exec.c: Expose authtok if requested,
167 provide environment variable containing service type.
168 * modules/pam_exec/pam_exec.8.xml: Document new option.
170 2008-08-29 Tomas Mraz <t8m@centrum.cz>
172 * modules/pam_loginuid/pam_loginuid.c(set_loginuid): Uids
175 2008-08-18 Thorsten Kukuk <kukuk@thkukuk.de>
177 * Makefile.am (M4_FILES): Adjust list.
179 * modules/pam_access/pam_access.8.xml: Fix module service
181 * modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
182 * modules/pam_debug/pam_debug.8.xml: Likewise.
183 * modules/pam_deny/pam_deny.8.xml: Likewise.
184 * modules/pam_echo/pam_echo.8.xml: Likewise.
185 * modules/pam_env/pam_env.8.xml: Likewise.
186 * modules/pam_exec/pam_exec.8.xml: Likewise.
187 * modules/pam_faildelay/pam_faildelay.8.xml: Likewise.
188 * modules/pam_filter/pam_filter.8.xml: Likewise.
189 * modules/pam_ftp/pam_ftp.8.xml: Likewise.
190 * modules/pam_group/pam_group.8.xml: Likewise.
191 * modules/pam_issue/pam_issue.8.xml: Likewise.
192 * modules/pam_keyinit/pam_keyinit.8.xml: Likewise.
193 * modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
194 * modules/pam_limits/pam_limits.8.xml: Likewise.
195 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
196 * modules/pam_localuser/pam_localuser.8.xml: Likewise.
197 * modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
198 * modules/pam_mail/pam_mail.8.xml: Likewise.
199 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
200 * modules/pam_motd/pam_motd.8.xml: Likewise.
201 * modules/pam_namespace/pam_namespace.8.xml: Likewise.
202 * modules/pam_nologin/pam_nologin.8.xml: Likewise.
203 * modules/pam_permit/pam_permit.8.xml: Likewise.
204 * modules/pam_rhosts/pam_rhosts.8.xml: Likewise.
205 * modules/pam_rootok/pam_rootok.8.xml: Likewise.
206 * modules/pam_securetty/pam_securetty.8.xml: Likewise.
207 * modules/pam_selinux/pam_selinux.8.xml: Likewise.
208 * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
209 * modules/pam_shells/pam_shells.8.xml: Likewise.
210 * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
211 * modules/pam_tally/pam_tally.8.xml: Likewise.
212 * modules/pam_time/pam_time.8.xml: Likewise.
213 * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
214 * modules/pam_umask/pam_umask.8.xml: Likewise.
215 * modules/pam_unix/pam_unix.8.xml: Likewise.
216 * modules/pam_userdb/pam_userdb.8.xml: Likewise.
217 * modules/pam_warn/pam_warn.8.xml: Likewise.
218 * modules/pam_wheel/pam_wheel.8.xml: Likewise.
219 * modules/pam_xauth/pam_xauth.8.xml: Likewise.
221 2008-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
223 * configure.in: Add version for gettext, add search path
224 for m4 directory, fix handling of --disable-* options.
225 Patches from Diego Pettenò <flameeyes@gmail.com>.
227 * configure.in: Run autoupdate on it.
229 * acincludde.m4: Rename to ...
230 * m4/jh_path_xml_catalog.m4: ... this.
232 * m4/*.m4: Remove all autoconf m4 files.
234 2008-07-29 Steve Langasek <vorlon@debian.org>
236 * modules/pam_cracklib/pam_cracklib.8.xml: correct a typo,
237 "Only he" -> "Only the"
239 2008-07-28 Steve Langasek <vorlon@debian.org>
241 * libpamc/test/regress/test.libpamc.c: use standard u_int8_t
242 type instead of __u8, as elsewhere.
243 Patch from Roger Leigh <rleigh@debian.org>.
244 * modules/pam_unix/passverify.c: make save_old_password()
245 thread-safe by using pam_modutil_getpwnam() instead of getpwnam()
246 * modules/pam_unix/passverify.c, modules/pam_unix/passverify.h,
247 modules/pam_unix/pam_unix_passwd.c: add pamh argument to
250 2008-07-27 Steve Langasek <vorlon@debian.org>
252 * modules/pam_*/pam_*.8.xml: fix up the references to pam.d,
253 which is in manpage section 5, not 8.
254 * modules/pam_env/environment, modules/pam_env/pam_env.8.xml:
255 spelling fix, seperate -> separate
257 2008-07-26 Steve Langasek <vorlon@debian.org>
259 * modules/pam_env/pam_env.c: Fix module to skip over
260 non-alphanumeric variable names, and to handle the case when
261 asked to delete a non-existent variable.
263 2008-07-13 Tomas Mraz <t8m@centrum.cz>
265 * modules/pam_mail/pam_mail.8.xml: Module supports session and
266 not account service (#1980773).
268 2008-07-11 Tomas Mraz <t8m@centrum.cz>
270 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Do
271 not close the pipe descriptor in borderline case (#2009766).
272 * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
274 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
275 * modules/pam_unix/support.h: Define upper limit of fds we will
278 * modules/pam_selinux/pam_selinux.c (config_context): Do not
279 ask for the level if use_current_range is set.
280 (context_from_env): New function to obtain the context from
281 PAM environment variables.
282 (pam_sm_open_session): Call context_from_env() if env_params option
283 is present. use_current_range now modifies behavior of the
284 context_from_env and config_context options.
285 * modules/pam_selinux/pam_selinux.8.xml: Describe the env_params
286 option. Adjust description of use_current_range option.
288 2008-07-09 Thorsten Kukuk <kukuk@thkukuk.de>
290 * modules/pam_exec/pam_exec.c (call_exec): Move all variable
291 declaration to begin of a block (#1976310).
293 * xtests/tst-pam_group1.c (run_test): Move no_grps declaration
294 to begin of function (#1976310).
296 * modules/pam_securetty/pam_securetty.8.xml: Replace
297 PAM_IGNORE with PAM_USER_UNKNOWN (#1994330).
299 * modules/pam_tally/pam_tally.c: Add support for silent and
301 * modules/pam_tally/pam_tally.8.xml: Document silent and
304 2008-07-08 Thorsten Kukuk <kukuk@thkukuk.de>
306 * modules/pam_unix/passverify.c (verify_pwd_hash): Adjust debug
309 2008-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
311 * modules/pam_unix/unix_chkpwd.c (main): Fix compiling without
314 * modules/pam_cracklib/pam_cracklib.8.xml: Fix typo in ucredit
315 description (reported by Wayne Pollock <pollock@acm.org>)
317 2008-06-19 Tomas Mraz <t8m@centrum.cz>
319 * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
320 Detect configuration errors. Fail on incomplete condition.
322 2008-05-20 Tomas Mraz <t8m@centrum.cz>
324 * configure.in: Work correctly with autoconf-2.62.
326 2008-05-19 Tomas Mraz <t8m@centrum.cz>
328 * doc/man/pam_getenv.3.xml: Correct the pam_getenv documentation.
330 * doc/man/pam_prompt.3.xml: Add missing description.
332 2008-05-14 Kjartan Maraas <kmaraas@gnome.org>
334 * po/nb.po: Updated translation.
336 2008-05-14 Sulyok Péter <peti@sulyok.hu>
338 * po/hu.po: Updated translation.
340 2008-05-14 Tomas Mraz <t8m@centrum.cz>
342 * libpam/pam_modutil_getgrgid.c: Replace hardcoded constant with
343 define PWD_LENGTH_SHIFT.
344 * libpam/pam_modutil_getgrnam.c: Likewise.
345 * libpam/pam_modutil_getpwnam.c: Likewise.
346 * libpam/pam_modutil_getpwuid.c: Likewise.
347 * libpam/pam_modutil_getspnam.c: Likewise.
348 * libpam/pam_modutil_private.h: Adjust values for PWD_ constants.
350 * modules/pam_unix/pam_unix_passwd.c(pam_sm_chauthtok): Unset authtok
351 item when password is not approved.
352 * modules/pam_unix/support.c(_unix_read_password): UNIX_USE_FIRST_PASS
353 is always set when UNIX_AUTHTOK is set, change order of conditions.
355 2008-05-02 Tomas Mraz <t8m@centrum.cz>
357 * modules/pam_selinux/pam_selinux.c(query_response): Add handling
359 (manual_context): Handle failed query_response() properly. Rename
360 variable responses to response which is more correct name.
361 (config_context): Likewise.
362 (pam_sm_open_session): Do not base decision on whether there is a tty.
364 2008-04-22 Tomas Mraz <t8m@centrum.cz>
366 * modules/pam_selinux/pam_selinux.c(pam_sm_close_sesion): Fix
367 regression from the change from 2008-03-20. setexeccon() must be
368 called also with NULL prev_context.
370 2008-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
372 * modules/pam_access/access.conf.5.xml: Document changed behavior
374 * modules/pam_access/pam_access.c: Add from_remote_host to
375 struct login_info to change behavior of LOCAL keyword: if
376 PAM_RHOST is not set, LOCAL will be true.
378 2008-04-18 Tomas Mraz <t8m@centrum.cz>
380 * modules/pam_namespace/pam_namespace.c: New functions
381 unprotect_dirs(), cleanup_protect_data(), protect_mount(),
382 protect_dir() to protect directory by bind mount.
383 (cleanup_data): Renamed to cleanup_polydir_data().
384 (parse_create_params): Allow missing specification of mode
386 (check_inst_parent): Call protect_dir() on the instance parent
387 directory. The directory is created when it doesn't exist.
388 (create_polydir): Protect and make the polydir by protect_dir(),
389 remove potential races.
390 (create_dirs): Renamed to create_instance(), remove call to
392 (ns_setup): Call protect_dir() on the polydir if it already exists.
393 Call inst_init() after the polydir is mounted.
394 (setup_namespace): Set the namespace protect data to be cleaned up
395 on pam_close_session()/pam_end().
396 (pam_sm_open_session): Initialize the protect_dirs.
397 (pam_sm_close_session): Cleanup namespace protect data.
398 * modules/pam_namespace/pam_namespace.h: Define struct for the
399 stack of protected dirs.
400 * modules/pam_namespace/pam_namespace.8.xml: Document when the
401 instance init script is called.
402 * modules/pam_namespace/namespace.conf.5.xml: Likewise.
404 2008-04-17 Tomas Mraz <t8m@centrum.cz>
406 * modules/pam_access/pam_access.c(myhostname): Removed function.
407 (user_match): Supply hostname of the machine to the netgroup_match().
408 Use hostname from the loginfo instead of calling myhostname().
409 (pam_sm_authenticate): Call gethostname() to fill hostname in the
412 * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Do not try
413 to lock if euid != 0.
415 2008-04-16 Tomas Mraz <t8m@centrum.cz>
417 * modules/pam_unix/Makefile.am: Link unix_chkpwd with libaudit.
418 * modules/pam_unix/unix_chkpwd.c(_audit_log): New function for audit.
419 (main): Call _audit_log() when appropriate.
421 * modules/pam_cracklib/pam_cracklib.c(_pam_parse): Recognize also
422 try_first_pass and use_first_pass options.
423 (pam_sm_chauthtok): Implement the new options.
425 2008-04-08 Tomas Mraz <t8m@centrum.cz>
427 * modules/pam_xauth/pam_xauth.c(run_coprocess): Avoid multiple
428 calls to sysconf() (based on patch by Sami Farin).
430 * libpam/pam_item.c (TRY_SET): Do not set when destination
431 is identical to source.
432 (pam_set_item): Do not overwrite destination when it
433 is identical to source.
435 2008-04-07 Miloš Komarčević <kmilos@gmail.com>
437 * po/sr.po: New file with translation.
438 * po/sr@latin.po: Likewise.
439 * po/LINGUAS: Add sr and sr@latin.
441 2008-04-03 Thorsten Kukuk <kukuk@thkukuk.de>
443 * release version 1.0.0
445 * configure.in: Set version number to 1.0.0.
446 * libpam/Makefile.am: Bump patchlevel of libpam.
447 * doc/adg/Linux-PAM_ADG.xml: Update version/date.
448 * doc/mwg/Linux-PAM_MWG.xml: Likewise.
449 * doc/sag/Linux-PAM_SAG.xml: Likewise.
451 2008-03-31 Dan Walsh <dwalsh@redhat.com>
453 * modules/pam_sepermit/pam_sepermit.c(sepermit_lock): Mark lock fd to
456 2008-03-25 Leah Liu <lliu@redhat.com>
458 * po/zh_CN.po: Updated translation.
460 2008-03-20 Tomas Mraz <t8m@centrum.cz>
462 * modules/pam_namespace/pam_namespace.c(poly_name): Switch to USER
463 method only when appropriate.
464 (setup_namespace): Do not umount when not mounted with RUSER.
466 * modules/pam_selinux/pam_selinux.c(pam_sm_close_session): Call
467 freecontext() after the context is logged not before.
469 2008-03-18 Canniot Thomas <thomas.canniot@mrtomlinux.org>
471 * po/fr.po: Updated translation.
473 2008-03-13 Ankit Patel <ankit@redhat.com>
475 * po/gu.po: Updated translation.
477 2008-03-05 Tomas Mraz <t8m@centrum.cz>
479 * modules/pam_cracklib/pam_cracklib.c(pam_sm_chauthtok): Avoid
480 unnecessary x_strdup() of resp.
481 * modules/pam_ftp/pam_ftp(pam_sm_authenticate): Call _pam_overwrite()
482 before dropping password resp.
484 2008-03-03 Tomas Mraz <t8m@centrum.cz>
486 * modules/pam_selinux/pam_selinux.c: Do not translate syslog messages.
487 * po/Linux-PAM.pot: Update.
489 * libpam/pam_item.c(RESET): Rename to TRY_SET, handle strdup failure.
490 (pam_set_item): Use TRY_SET() also for PAM_AUTHTOK and PAM_OLDAUTHTOK.
491 Handle allocation failure for PAM_XAUTHDATA.
492 (pam_get_user): Return error when conversation returns NULL user.
493 Call pam_set_item() instead of RESET().
495 2008-02-26 Tomas Mraz <t8m@centrum.cz>
497 * modules/pam_unix/Makefile.am: Do not link to cracklib.
498 * modules/pam_unix/pam_unix_passwd.c(_pam_unix_approve_pass):
499 Do not call FascistCheck() from cracklib.
501 2008-02-29 Fabian Affolter <fab@fedoraproject.org>
503 * po/de.po: Updated translation.
505 2008-02-28 Piotr Drąg <piotrdrag@gmail.com>
507 * po/pl.po: Updated translation.
509 2008-02-26 Tomas Mraz <t8m@centrum.cz>
511 * po/LINUGAS: New languages added.
512 * po/es.po: Updated translations.
513 * po/fr.po: Likewise.
514 * po/it.po: Likewise.
515 * po/ja.po: Likewise.
516 * po/nl.po: Likewise.
517 * po/pl.po: Likewise.
518 * po/pt_BR.po: Likewise.
519 * po/ru.po: Likewise.
520 * po/zh_CN.po: Likewise.
521 * po/as.po: New file.
522 * po/gu.po: Likewise.
523 * po/hi.po: Likewise.
524 * po/kn.po: Likewise.
525 * po/ko.po: Likewise.
526 * po/ml.po: Likewise.
527 * po/or.po: Likewise.
528 * po/si.po: Likewise.
529 * po/ta.po: Likewise.
531 2008-02-21 Tomas Mraz <t8m@centrum.cz>
533 * libpam/pam_audit.c (_pam_audit_writelog): Silence syslog
534 message on non-error return.
536 * modules/pam_unix/unix_chkpwd.c (main): Proceed as unprivileged
537 user when checking password of another user.
538 * modules/pam_unix/unix_update.c: Fix comment.
540 2008-02-18 Dmitry V. Levin <ldv@altlinux.org>
542 * libpam/pam_handlers.c (_pam_assemble_line): Fix potential
544 * xtests/tst-pam_assemble_line1.pamd: New test for
546 * xtests/tst-pam_assemble_line1.sh: New script for
547 tst-pam_assemble_line1.
548 * xtests/Makefile.am (NOSRCTESTS): Add tst-pam_assemble_line1.
549 (EXTRA_DIST): Add tst-pam_assemble_line1.pamd and
550 tst-pam_assemble_line1.sh
552 * modules/pam_exec/pam_exec.c (call_exec): Fix asprintf return
555 2008-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
557 * release version 0.99.10.0
559 * configure.in: set version number.
561 * modules/pam_rhosts/Makefile.am: Remove pam_rhosts_auth.
562 * modules/pam_rhosts/pam_rhosts_auth.c: Removed.
563 * modules/pam_rhosts/tst-pam_rhosts_auth: Removed.
565 * modules/pam_namespace/Makefile.am (noinst_HEADERS): Add
568 2008-02-13 Tomas Mraz <t8m@centrum.cz>
570 * modules/pam_namespace/Makefile.am: Add argv_parse files and namespace.d
572 * modules/pam_namespace/argv_parse.c: New file.
573 * modules/pam_namespace/argv_parse.h: New file.
574 * modules/pam_namespace/namespace.conf.5.xml: Document new features.
575 * modules/pam_namespace/pam_namespace.8.xml: Likewise.
576 * modules/pam_namespace/pam_namespace.h: Use SECURECONF_DIR define.
577 Define NAMESPACE_D_DIR and NAMESPACE_D_GLOB. Define new option flags
579 (polydir_s): Add rdir, replace exclusive with flags, add init_script,
580 owner, group, and mode.
581 (instance_data): Add ruser, gid, and ruid.
582 * modules/pam_namespace/pam_namespace.c: Remove now unused copy_ent().
583 (add_polydir_entry): Add the entry directly, no copy.
584 (del_polydir): New function.
585 (del_polydir_list): Call del_polydir().
586 (expand_variables, parse_create_params, parse_iscript_params,
587 parse_method): New functions.
588 (process_line): Call expand_variables() on polydir and instance prefix.
589 Call argv_parse() instead of strtok_r(). Allocate struct polydir_s on heap.
590 (parse_config_file): Parse .conf files from namespace.d dir after
592 (form_context): Call getcon() or get_default_context_with_level() when
593 appropriate flags are set.
594 (poly_name): Handle shared polydir flag.
595 (inst_init): Execute non-default init script when specified.
596 (create_polydir): New function.
597 (create_dirs): Remove the code which checks the polydir. Do not call
598 inst_init() when noinit flag is set.
599 (ns_setup): Check the polydir and eventually create it if the create flag
601 (setup_namespace): Use ruser uid from idata. Set the namespace polydir
602 pam data only when namespace was set up correctly. Unmount polydir
604 (get_user_data): New function.
605 (pam_sm_open_session): Check for use_current_context and
606 use_default_context options. Call get_user_data().
607 (pam_sm_close_session): Call get_user_data().
609 2008-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
611 * po/de.po: Translate some more strings.
613 2008-02-05 Thorsten Kukuk <kukuk@thkukuk.de>
615 * modules/pam_unix/unix_update.c: Remove unused declarations.
617 2008-02-04 Thorsten Kukuk <kukuk@thkukuk.de>
619 * libpam/pam_static_modules.h: Add _pam_sepermit_modstruct.
620 * modules/pam_sepermit/pam_sepermit.c: Fix typo.
621 * modules/pam_sepermit/Makefile.am: Install config file only
622 if we build the module.
624 * README: Add --disable-pie to configure options for static library.
626 * doc/man/Makefile.am: Fix building outside of src directory.
628 * libpam/Makefile.am: Bump version number of libpam.
630 * modules/Makefile.am: Add pam_sepermit.
632 * doc/Makefile.am: Fix build out of source directory.
634 * po/POTFILES.in: Add pam_sepermit.c.
636 * modules/pam_exec/pam_exec.c: Set PAM environment variables and
638 * modules/pam_exec/pam_exec.8.xml: Document new behavior.
639 Patch from Julien Lecomte <julien@lecomte.at>.
641 2008-02-01 Tomas Mraz <t8m@centrum.cz>
643 * modules/pam_namespace/namespace.conf.5.xml: Add documentation for
644 tmpfs and tmpdir polyinst and for ~ user list modifier.
645 * modules/pam_namespace/namespace.init: Add documentation for the
646 new init parameter. Add home directory initialization script.
647 * modules/pam_namespace/pam_namespace.8.xml: Document the new
648 init parameter of the namespace.init script.
649 * modules/pam_namespace/pam_namespace.c(copy_ent): Copy exclusive flag.
650 (cleanup_data): New function.
651 (process_line): Set exclusive flag. Add tmpfs and tmpdir methods.
652 (ns_override): Change behavior on the exclusive flag.
653 (poly_name): Process tmpfs and tmpdir methods.
654 (inst_init): Add flag for new directory initialization.
655 (create_dirs): Process the tmpdir method, add the new directory
657 (ns_setup): Remove unused code. Process the tmpfs method.
658 (cleanup_tmpdirs): New function.
659 (setup_namespace): Set data for proper cleanup. Cleanup the tmpdirs
661 (pam_sm_close_session): Instead of parsing the config file again use
662 the previously set data for cleanup.
663 * modules/pam_namespace/pam_namespace.h: Add TMPFS and TMPDIR methods
666 2008-01-29 Tomas Mraz <t8m@centrum.cz>
668 * configure.in: Test for setkeycreatecon needs libselinux.
669 Add new module pam_sepermit.
670 * modules/Makefile.am: Add new module pam_sepermit.
671 * modules/pam_sepermit/.cvsignore: New file.
672 * modules/pam_sepermit/Makefile.am: Likewise.
673 * modules/pam_sepermit/README.xml: Likewise.
674 * modules/pam_sepermit/pam_sepermit.8.xml: Likewise.
675 * modules/pam_sepermit/pam_sepermit.c: Likewise.
676 * modules/pam_sepermit/sepermit.conf: Likewise.
677 * modules/pam_sepermit/tst-pam_sepermit: Likewise.
678 * doc/sag/pam_sepermit.xml: Likewise.
680 * doc/sag/pam_tty_audit.xml: Add pam_tty_audit to SAG.
682 2008-01-29 Miloslav Trmac <mitr@redhat.com>
684 * modules/pam_tty_audit/README.xml: Add notes section.
685 * modules/pam_tty_audit/pam_tty_audit.8.xml: Describe patterns
686 support and open_only option. Add notes.
687 * modules/pam_tty_audit/pam_tty_audit.c(pam_sm_open_session): Add
688 support for pattern matching and the open_only option.
690 2008-01-28 Thorsten Kukuk <kukuk@thkukuk.de>
692 * libpam/pam_audit.c: Include pam_modutil_private.h.
694 * libpam/pam_item.c (pam_set_item): Fix compiler warning.
696 * libpam/pam_end.c (pam_end): Cast to correct pointer type.
697 * libpam/include/security/_pam_macros.h (_pam_overwrite_n): Use
700 * modules/pam_unix/passverify.c: Fix compiling without SELinux
703 2008-01-24 Tomas Mraz <t8m@centrum.cz>
705 * modules/pam_unix/bigcrypt.c (bigcrypt): Use crypt_r() when
707 * modules/pam_unix/passverify.c (strip_hpux_aging): New function
708 to strip HP/UX aging info from password hash.
709 (verify_pwd_hash): Call strip_hpux_aging(), use crypt_r() when
712 2008-01-23 Tomas Mraz <t8m@centrum.cz>
714 * configure.in: Add test for crypt_r(). Add setting/disabling random
717 * modules/pam_unix/Makefile.am: Add unix_update.8 manpage generated from
718 XML, generate also unix_chkpwd.8 from XML.
719 * modules/pam_unix/pam_unix_acct.c: Add rounds parameter to _set_ctrl().
720 * modules/pam_unix/pam_unix_auth.c: Likewise.
721 * modules/pam_unix/pam_unix_sess.c: Likewise.
722 * modules/pam_unix/pam_unix_passwd.c: Likewise.
723 * modules/pam_unix/support.c(_set_ctrl): Likewise.
724 * modules/pam_unix/support.h: Likewise. Add UNIX_SHA256_PASS,
725 UNIX_SHA512_PASS, and UNIX_ALGO_ROUNDS ctrls.
726 (pam_sm_chauthtok): Refactor out new password encryption.
727 * modules/pam_unix/passverify.c(crypt_make_salt): New function.
728 (crypt_md5_wrapper): Call crypt_make_salt().
729 (create_password_hash): New function refactored out of
730 pam_sm_chauthtok(). Support for new password hashes.
731 * modules/pam_unix/passverify.h: Drop ascii_to_bin() and bin_to_ascii()
732 macros. Add prototype for create_password_hash().
733 * modules/pam_unix/unix_update.8.xml: New file.
734 * modules/pam_unix/unix_chkpwd.8.xml: Likewise.
736 * modules/pam_unix/Makefile.am: Add unix_update helper.
737 * modules/pam_unix/pam_unix_passwd.c: Move functions i64c(),
738 crypt_md5_wrapper(), save_old_password(), _update_passwd() and
739 _update_shadow() to passverify.c file. Rename _unix_run_shadow_binary()
740 to _unix_run_update_binary(), which also verifies old password and
742 (_do_setpass, pam_sm_chauthtok): lckpwdf()->lock_pwdf(), the same for unlock.
743 Call _unix_run_update_binary() appropriately.
744 _update_passwd()->unix_update_passwd(), the same for shadow.
745 * modules/pam_unix/passverify.c: Add new functions moved from
746 pam_unix_passwd.c and unix_chkpwd.c.
747 * modules/pam_unix/passverify.h: Likewise.
748 * modules/pam_unix/unix_chkpwd.c: Remove SELinux checks. Move
749 su_sighandler(), setup_signals(), getuidname() to passverify.c.
750 (main): Remove 'shadow' option. Refactor out read_passwords() and
751 call it. More strict checking how the binary is called.
752 * modules/pam_unix/unix_update.c: New helper binary - non-setuid,
753 called from SELinux confined apps only.
755 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Return
756 status and daysleft instead of fake shadow entry.
757 (pam_sm_acct_mgmt): Call _unix_run_verify_binary() appropriately.
758 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Call
759 get_account_info() and check_shadow_expiry().
760 * modules/pam_unix/support.h: Adjust _unix_run_verify_binary()
762 * modules/pam_unix/support.c (_unix_run_helper_binary): Remove check
763 on selinux enabled/disabled.
764 * modules/pam_unix/unix_chkpwd.c (_verify_account): Rename to
765 _check_expiry(), now checks shadow expiry info.
766 (main): Remove check on selinux enabled/disabled. Check shadow
767 expiry through _check_expiry().
769 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Call
770 get_account_info() and check_shadow_expiry().
771 * modules/pam_unix/passverify.c: Add get_account_info() to
772 obtain shadow and passwd entry. Add check_shadow_expiry() to
773 for shadow password expiry check.
774 (get_pwd_hash): Call get_account_info().
775 * modules/pam_unix/passverify.h: Add prototypes for get_account_info()
776 and check_shadow_expiry().
778 2008-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
780 * doc/man/Makefile.am: Fix manual page dependencies,
781 add hack for bug in xsl stylestheets.
783 2008-01-07 Thorsten Kukuk <kukuk@thkukuk.de>
785 * po/it.po: Fix typos.
786 * po/de.po: Few new translations.
787 * po/POTFILES.in: Add pam_tty_audit.c and passverify.c.
788 * doc/man/pam_xauth_data.3.xml: Added to CVS.
789 * doc/man/pam_xauth_data.3: Likewise.
790 * modules/pam_tty_audit/README: Likewise.
791 * modules/pam_tty_audit/pam_tty_audit.8: Likewise.
792 * po/sv.po: Update swedish translation [#1857531].
793 * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix
794 cut & paste error [#1863490].
796 2008-01-02 Petteri Räty <betelgeuse@gentoo.org>
797 * modules/pam_limits/limits.conf: document allowed values for
799 * modules/pam_limits/limits.conf.5.xml: Likewise.
801 2007-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
803 * README: Document how to run make check with static modules
806 2007-12-18 Peter Breitenlohner <peb@mppmu.mpg.de>
807 * README: Document that "make check" requires a file
808 /etc/pam.d/other (SF#1822764).
810 2007-12-12 Eamon Walsh <ewalsh@tycho.nsa.gov>
812 * doc/man/pam_item_types_ext.inc.xml: More appropriate wording
813 for PAM_XDISPLAY doc.
815 2007-12-07 Tomas Mraz <t8m@centrum.cz>
817 * po/cs.po: Updated translations.
819 * libpam/libpam.map: Add LIBPAM_MODUTIL_1.1 version.
820 * libpam/pam_audit.c: Add _pam_audit_open() and
821 pam_modutil_audit_write().
822 (_pam_auditlog): Call _pam_audit_open().
823 * libpam/include/security/pam_modutil.h: Add pam_modutil_audit_write().
824 * modules/pam_access/pam_access.8.xml: Add noaudit option.
826 * modules/pam_access/pam_access.c: Move fs, sep, pam_access_debug, and
827 only_new_group_syntax variables to struct login_info. Add noaudit
829 (_parse_args): Adjust for the move of variables and add support for
831 (group_match): Add debug parameter.
832 (string_match): Likewise.
833 (network_netmask_match): Likewise.
834 (login_access): Adjust for the move of variables. Add nonall_match.
835 Add call to pam_modutil_audit_write().
836 (list_match): Adjust for the move of variables.
837 (user_match): Likewise.
838 (from_match): Likewise.
839 (pam_sm_authenticate): Call _parse_args() earlier.
840 * modules/pam_limits/pam_limits.8.xml: Add noaudit option.
842 * modules/pam_limits/pam_limits.c (_pam_parse): Add noaudit option.
843 (setup_limits): Call pam_modutil_audit_write().
844 * modules/pam_time/pam_time.8.xml: Add debug and noaudit options.
846 * modules/pam_time/pam_time.c: Add option parsing (_pam_parse()).
847 (check_account): Call _pam_parse(). Call pam_modutil_audit_write()
848 and pam_syslog() on login denials.
850 2007-12-07 Luca Bruno <luca.br@uno.it>
852 * po/it.po: Updated translations.
854 2007-12-06 Eamon Walsh <ewalsh@tycho.nsa.gov>
856 * libpam/include/security/_pam_macros.h: Add _pam_overwrite_n()
858 * libpam/include/security/_pam_types.h: Add PAM_XDISPLAY,
859 PAM_XAUTHDATA items, pam_xauth_data struct.
860 * libpam/pam_item.c (pam_set_item, pam_get_item): Handle
861 PAM_XDISPLAY and PAM_XAUTHDATA items.
862 * libpam/pam_end.c (pam_end): Destroy the new items.
863 * libpam/pam_private.h (pam_handle): Add data members for new
864 items. Add prototype for _pam_memdup.
865 * libpam/pam_misc.c: Add _pam_memdup.
866 * doc/man/Makefile.am: Add pam_xauth_data.3. Replace
867 pam_item_types.inc.xml with pam_item_types_std.inc.xml and
868 pam_item_types_ext.inc.xml.
869 * doc/man/pam_get_item.3.xml: Replace pam_item_types.inc.xml
870 with pam_item_types_std.inc.xml and pam_item_types_ext.inc.xml.
871 * doc/man/pam_set_item.3.xml: Likewise.
872 * doc/man/pam_item_types.inc.xml: Removed file.
873 * doc/man/pam_item_types_ext.inc.xml: New file.
874 * doc/man/pam_item_types_std.inc.xml: New file.
876 2007-12-06 Tomas Mraz <t8m@centrum.cz>
878 * modules/pam_tty_audit/pam_tty_audit.8.xml: Fix example.
880 2007-12-05 Miloslav Trmac <mitr@redhat.com>
882 * configure.in: Add test for audit_tty_status struct. Add
883 pam_tty_audit module.
884 * libpam/pam_static_modules.h: Add pam_tty_audit module.
885 * modules/pam_tty_audit/Makefile.am: New file.
886 * modules/pam_tty_audit/README.xml: Likewise.
887 * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
888 * modules/pam_tty_audit/pam_tty_audit.c: Likewise.
890 2007-12-05 Tomas Mraz <t8m@centrum.cz>
892 * modules/pam_unix/Makefile.am: Add passverify.h and passverify.c
893 as first part of pam_unix refactorization.
894 * modules/pam_unix/pam_unix/pam_unix_acct.c: Include passverify.h.
895 * modules/pam_unix/pam_unix_passwd.c: Likewise.
896 * modules/pam_unix/passverify.c: New file with common functions.
897 * modules/pam_unix/passverify.h: Prototypes for the common functions.
898 * modules/pam_unix/support.c: Include passverify.h, move
899 _unix_shadowed() to passverify.c.
900 (_unix_verify_password): Refactor out verify_pwd_hash() function.
901 * modules/pam_unix/support.h: Move _unix_shadowed() prototype to
903 * modules/pam_unix/unix_chkpwd.c: Use _unix_shadowed() and
904 verify_pwd_hash() from passverify.c.
906 2007-11-20 Thorsten Kukuk <kukuk@thkukuk.de>
908 * modules/pam_unix/Makefile.am (unix_chkpwd_LDADD): Don't link
909 unix_chkpwd unnecessary against libpam (#1822779).
911 * modules/pam_tally/pam_tally.c (tally_log): Map
912 pam_modutil_getpwnam to getpwnam if we don't compile
914 * modules/pam_tally/Makefile.am: Don't link pam_tally_app
915 against libpam (#1822779).
917 2007-11-06 Thorsten Kukuk <kukuk@thkukuk.de>
919 * xtests/tst-pam_group1.c: Include stdlib.h
920 * xtests/tst-pam_succeed_if1.c: Likewise.
921 * xtests/tst-pam_limits1.c: Likewise.
922 * xtests/tst-pam_access1.c: Likewise.
923 * xtests/tst-pam_access2.c: Likewise.
924 * xtests/tst-pam_access3.c: Likewise.
925 * xtests/tst-pam_access4.c: Likewise.
926 * xtests/tst-pam_unix1.c: Likewise.
927 * xtests/tst-pam_unix2.c: Likewise.
928 * xtests/tst-pam_unix3.c: Likewise.
929 * xtests/tst-pam_cracklib1.c: Likewise.
930 * xtests/tst-pam_cracklib2.c: Likewise.
932 * libpam/pam_static_modules.h: Fix name of pam_namespace variable.
934 2007-11-01 Peter Breitenlohner <peb@mppmu.mpg.de>
936 * doc/man/pam_conv.3.xml: Correct typo.
938 2007-10-30 Peter Breitenlohner <peb@mppmu.mpg.de>
940 * modules/pam_rhosts/pam_rhosts_auth.c (__icheckhost): Correct
941 misplaced parenthesis.
942 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Prevent use of
943 dngettext() when NLS is disabled.
944 * modules/pam_exec/pam_exec.c (call_exec): Avoid gcc warning.
945 * doc/specs/parse_y.y (set_label, new_counter): Break trigraphs to
947 * modules/pam_wheel/pam_wheel.c: Remove excessive initializer
950 * modules/pam_cracklib/pam_cracklib.8.xml: Correct typo.
951 * modules/pam_limits/limits.conf.5.xml: Likewise.
952 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
953 * modules/pam_xauth/pam_xauth.8.xml: Likewise.
955 * modules/pam_deny/pam_deny.8.xml: Correct spelling.
956 * modules/pam_group/pam_group.8.xml: Likewise.
957 * modules/pam_permit/pam_permit.8.xml: Likewise.
958 * modules/pam_shells/pam_shells.8.xml: Likewise.
959 * modules/pam_time/pam_time.8.xml: Likewise.
960 * modules/pam_warn/pam_warn.8.xml: Likewise.
962 * tests/tst-dlopen.c: Return 77 in case of static modules, such that
963 all modules/pam_*/tst-pam_* tests yield SKIP instead of FAIL.
964 * libpam/Makefile.am (libpam_la_LIBADD): Use "$(shell ls ...)" instead
965 of "`ls ...`", to allow for static modules.
966 * libpam/pam_static_modules.h: Make pam_keyinit module depend on
967 HAVE_KEY_MANAGEMENT; correct name of pam_faildelay pam_module struct.
968 * modules/pam_faildelay/pam_faildelay.c: Correct name of pam_module
971 2007-10-25 Steve Langasek <vorlon@debian.org>
973 * modules/pam_tally/pam_tally.c: fix the definition of OPT_AUDIT
974 to be octal instead of decimal, so that it works properly in a
975 bit field instead of forcing the "even_deny_root_account" and
976 "no_reset" options to on.
977 Patch from Corey Wright <undefined@pobox.com>.
979 2007-10-19 Tomas Mraz <t8m@centrum.cz>
981 * xtests/tst-pam_access1.c: Use different name for user and group.
982 * xtests/tst-pam_access1.sh: Likewise.
983 * xtests/tst-pam_access2.c: Likewise.
984 * xtests/tst-pam_access2.sh: Likewise.
985 * xtests/tst-pam_access4.c: Likewise.
986 * xtests/tst-pam_access4.sh: Likewise.
987 * xtests/group.conf: Likewise.
988 * xtests/tst-pam_group1.c: Likewise.
989 * xtests/tst-pam_group1.sh: Likewise.
991 * libpam/pam_dispatch.c (_pam_dispatch_aux): Save states for substacks,
992 record substack level, skip over virtual substack modules, implement
993 evaluation of done, die, reset and jumps in substacks. Also fixes
994 too far jumps in substacks.
995 * libpam/pam_end.c (pam_end): Drop substack evaluation states.
996 * libpam/pam_handlers.c (_pam_parse_conf_file): Add substack level
997 parameter, instead of must_fail use handler_type needed for virtual
999 (_pam_load_conf_file): Add substack level parameter.
1000 (_pam_init_handlers): Substack level parameter added to
1001 _pam_parse_conf_file() calls.
1002 (_pam_load_module): New function.
1003 (_pam_add_handler): Refactor code into the _pam_load_module(). Add
1004 support for virtual substack modules.
1005 * libpam/pam_private.h: Rename must_fail to handler_type, add stack_level
1006 to struct handler. Define handler type constants. Add struct
1007 for substack evaluation states. Define constant for maximum
1008 substack level. Add substack states pointer to former state struct.
1009 * libpam/pam_start.c (pam_start): Initialize pointer to substack states.
1010 * doc/man/pam.conf-syntax.xml: Document substack control.
1011 * xtests/Makefile.am: Add new tests for substack evaluation.
1012 * xtests/run_xtests.sh: Support multiple .pamd files in a test.
1013 * xtests/tst-pam_authfail.pamd: New tests for substack evaluation.
1014 * xtests/tst-pam_authsucceed.pamd: Likewise.
1015 * xtests/tst-pam_substack1.pamd: Likewise.
1016 * xtests/tst-pam_substack1a.pamd: Likewise.
1017 * xtests/tst-pam_substack1.sh: Likewise.
1018 * xtests/tst-pam_substack2.pamd: Likewise.
1019 * xtests/tst-pam_substack2a.pamd: Likewise.
1020 * xtests/tst-pam_substack2.sh: Likewise.
1021 * xtests/tst-pam_substack3.pamd: Likewise.
1022 * xtests/tst-pam_substack3a.pamd: Likewise.
1023 * xtests/tst-pam_substack3.sh: Likewise.
1024 * xtests/tst-pam_substack4.pamd: Likewise.
1025 * xtests/tst-pam_substack4a.pamd: Likewise.
1026 * xtests/tst-pam_substack4.sh: Likewise.
1027 * xtests/tst-pam_substack5.pamd: Likewise.
1028 * xtests/tst-pam_substack5a.pamd: Likewise.
1029 * xtests/tst-pam_substack5.sh: Likewise.
1031 2007-10-18 Tomas Mraz <t8m@centrum.cz>
1033 * xtests/tst-pam_dispatch4.c: Fix comment about the test.
1034 * xtests/tst-pam_dispatch4.pamd: Improve the testcase.
1035 * xtests/tst-pam_cracklib2.c: Make the testcase more robust.
1037 2007-10-12 Thorsten Kukuk <kukuk@thkukuk.de>
1039 * xtests/Makefile.am: Add tst-pam_dispatch5 sources
1040 * xtests/tst-pam_dispatch5.c: New test for jump too far.
1041 * xtests/tst-pam_dispatch5.pamd: New test configuration.
1043 2007-10-09 Tomas Mraz <t8m@centrum.cz>
1045 * modules/pam_tally/pam_tally.8.xml: Document audit option
1048 2007-10-09 Thorsten Kukuk <kukuk@thkukuk.de>
1050 * release version 0.99.9.0
1052 * configure.in: Increase vesion number.
1054 * libpam/Makefile.am: Increase release number.
1055 * libpam_misc/Makefile.am: Increase release number.
1057 * po/*.po: Regenerate.
1059 2007-10-08 Thorsten Kukuk <kukuk@thkukuk.de>
1061 * modules/pam_time/pam_time.c (is_same): Length of strings without
1062 wildcard needs to be the same.
1063 * modules/pam_group/pam_group.c (is_same): Likewise.
1065 2007-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
1067 * xtests/tst-pam_group1.c: New test case for user compare in pam_group.
1068 * xtests/tst-pam_group1.sh: Script to run test case.
1069 * xtests/tst-pam_group1.pamd: Config for test case.
1070 * xtests/Makefile.am: Add tst-pam_group1 test case.
1071 * xtests/run-xtests.sh: Save/restore group.conf.
1072 * xtests/group.conf: New.
1074 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Don't
1075 free arguments used for putenv().
1077 * doc/man/pam_putenv.3.xml: Document that application has to free
1080 2007-09-27 Tomas Mraz <t8m@centrum.cz>
1082 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist): Fix in
1083 operator rhbz #295151.
1084 * modules/pam_namespace/pam_namespace.c (poly_name): Do not try to
1085 get context when SELinux is disabled.
1087 2007-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
1089 * xtests/tst-pam_succeed_if1.c: New test case for
1090 https://bugzilla.redhat.com/show_bug.cgi?id=295151
1091 * xtests/tst-pam_succeed_if1.sh: Script to run test case.
1092 * xtests/tst-pam_succeed_if1.pamd: Config for test case.
1093 * xtests/Makefile.am: Add tst-pam_succeed_if1 test case.
1095 * xtests/run-xtests.sh: Add support to skip tests.
1096 * xtests/tst-pam_limits1.c: Skip test if RLIMIT_NICE is not
1099 2007-09-03 Steve Langasek <vorlon@debian.org>
1101 * modules/pam_limits/pam_limits.c: remove a number of unnecessary
1102 string manipulations, including a strncpy() that was acting on
1105 * libpam_misc/misc_conv.c: don't block SIGINT in misc_conv; it's
1106 perfectly valid to allow the user to interrupt at a prompt. If
1107 an application wants prompts to not be interruptable, the
1108 application should take responsibility for blocking SIGINT.
1110 2007-09-02 Thorsten Kukuk <kukuk@thkukuk.de>
1112 * examples/Makefile.am: Fix usage of LIBADD, LDADD and LDFLAGS.
1113 * libpam/Makefile.am: Likewise.
1114 * modules/pam_access/Makefile.am: Likewise.
1115 * modules/pam_cracklib/Makefile.am: Likewise.
1116 * modules/pam_debug/Makefile.am: Likewise.
1117 * modules/pam_deny/Makefile.am: Likewise.
1118 * modules/pam_echo/Makefile.am: Likewise.
1119 * modules/pam_env/Makefile.am: Likewise.
1120 * modules/pam_exec/Makefile.am: Likewise.
1121 * modules/pam_faildelay/Makefile.am: Likewise.
1122 * modules/pam_filter/Makefile.am: Likewise.
1123 * modules/pam_filter/upperLOWER/Makefile.am: Likewise.
1124 * modules/pam_ftp/Makefile.am: Likewise.
1125 * modules/pam_group/Makefile.am: Likewise.
1126 * modules/pam_issue/Makefile.am: Likewise.
1127 * modules/pam_keyinit/Makefile.am: Likewise.
1128 * modules/pam_lastlog/Makefile.am: Likewise.
1129 * modules/pam_limits/Makefile.am: Likewise.
1130 * modules/pam_listfile/Makefile.am: Likewise.
1131 * modules/pam_localuser/Makefile.am: Likewise.
1132 * modules/pam_loginuid/Makefile.am: Likewise.
1133 * modules/pam_mail/Makefile.am: Likewise.
1134 * modules/pam_mkhomedir/Makefile.am: Likewise.
1135 * modules/pam_motd/Makefile.am: Likewise.
1136 * modules/pam_namespace/Makefile.am: Likewise.
1137 * modules/pam_nologin/Makefile.am: Likewise.
1138 * modules/pam_permit/Makefile.am: Likewise.
1139 * modules/pam_rhosts/Makefile.am: Likewise.
1140 * modules/pam_rootok/Makefile.am: Likewise.
1141 * modules/pam_securetty/Makefile.am: Likewise.
1142 * modules/pam_selinux/Makefile.am: Likewise.
1143 * modules/pam_shells/Makefile.am: Likewise.
1144 * modules/pam_stress/Makefile.am: Likewise.
1145 * modules/pam_succeed_if/Makefile.am: Likewise.
1146 * modules/pam_tally/Makefile.am: Likewise.
1147 * modules/pam_time/Makefile.am: Likewise.
1148 * modules/pam_umask/Makefile.am: Likewise.
1149 * modules/pam_unix/Makefile.am: Likewise.
1150 * tests/Makefile.am: Likewise.
1152 2007-08-31 Steve Langasek <vorlon@debian.org>
1154 * modules/pam_group/group.conf: don't use "games" as an example
1155 group, on some distros this is a pre-existing group that it would
1156 be a security hole to give users access to.
1158 2007-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
1160 * modules/pam_limits/limits.conf.5.xml: Document that maxlogins
1161 is ignored for users with UID 0.
1163 2007-08-30 Steve Langasek <vorlon@debian.org>
1165 * modules/pam_unix/support.c, modules/pam_unix/unix_chkpwd.c:
1166 A wrong username doesn't need to be logged at LOG_ALERT;
1167 LOG_WARNING should be sufficient.
1168 Patch from Sam Hartman <hartmans@debian.org>.
1170 * modules/pam_cracklib/pam_cracklib.c:
1171 s/CRACKLIB_DICT/CRACKLIB_DICTS/, for consistency with existing
1174 2007-08-29 Steve Langasek <vorlon@debian.org>
1176 * libpam/pam_modutil_getgrgid.c, libpam/pam_modutil_getgrnam.c,
1177 libpam/pam_modutil_getpwnam.c, libpam/pam_modutil_getpwuid.c,
1178 libpam/pam_modutil_getspnam.c: don't use pthread mutexes in libpam
1179 unnecessarily; this avoids linking problems on non-Linux
1182 * modules/pam_listfile/pam_listfile.c, modules/pam_listfile/README,
1183 modules/pam_listfile/pam_listfile.8,
1184 modules/pam_listfile/pam_listfile.8.xml: add a 'quiet' option to
1185 avoid logging errors any time a user is refused service by this
1188 2007-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
1190 * modules/pam_rhosts/pam_rhosts_auth.c: buflen needs to be size_t.
1191 (__icheckhost): Cast to int32_t to fix limited range error.
1193 * modules/pam_cracklib/pam_cracklib.c: Mark cracklib_dictpath
1196 2007-08-29 Steve Langasek <vorlon@debian.org>
1198 * modules/pam_rhosts/pam_rhosts_auth.c: getline returns -1 at
1199 EOF, not 0. Check accordingly to fix an infinite loop. Thanks
1200 to Stephan Springl <springl-rhosts@bfw-online.de> for catching
1203 2007-08-28 Steve Langasek <vorlon@debian.org>
1205 * configure.in: call AC_CHECK_HEADERS instead of AC_CHECK_HEADER
1206 for crack.h, so we get a HAVE_CRACK_H define.
1207 * modules/pam_cracklib/pam_cracklib.c: don't copy around the
1208 cracklib dictpath into a fixed-width buffer, when we can just
1209 point at the existing strings; and allow users to override the
1210 default cracklib path with -DCRACKLIB_DICT, required for
1211 compatibility with cracklib 2.7.
1213 2007-08-27 Steve Langasek <vorlon@debian.org>
1215 * modules/pam_limits/pam_limits.c: when building on non-Linux
1216 systems, give a warning only, not an error; no one seems to
1217 remember why this error was here in the first place, but leave
1218 something in that might still grab the attention of non-Linux
1220 Patch from Michal Suchanek <hramrach_l@centrum.cz>.
1221 * configure.in, modules/pam_rhosts/pam_rhosts_auth.c: check for
1222 the presence of net/if.h before using, required for Hurd
1224 Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
1225 * modules/pam_limits/pam_limits.c: conditionalize the use of
1226 RLIMIT_AS, which is not present on the Hurd.
1227 Patch from Igor Khavkine <i_khavki@alcor.concordia.ca>.
1228 * modules/pam_rhosts/pam_rhosts_auth.c: use getline() instead of
1229 a static buffer when available; fixes the build on systems
1230 without MAXHOSTNAMELEN (i.e., the Hurd).
1231 * modules/pam_xauth/pam_xauth.c: make sure PATH_MAX is defined
1234 2007-08-26 Andrew Morgan <morgan@kernel.org>
1236 * doc/man/pam.conf-syntax.xml
1237 Minor fixes: '\[' -> '\]'.
1239 2007-08-25 Steve Langasek <vorlon@debian.org>
1241 * doc/man/pam.conf-syntax.xml, doc/man/pam.conf.5:
1242 Document "new" control options conv_again and incomplete, supported
1243 in pam.d's extended syntax.
1244 Patch from Ben Collins <bcollins@debian.org>.
1246 2007-08-15 Tomas Mraz <t8m@centrum.cz>
1248 * modules/pam_access/pam_access.c (list_match): Add explicit
1249 sptr argument for strtok_r, otherwise the code is not portable.
1251 2007-08-13 Olivier Blin <blino@mandriva.com>
1253 * doc/man/pam.3.xml: Fix typo.
1254 * doc/man/pam.3: Likewise.
1255 * doc/man/pam_end.3.xml: Likewise.
1256 * doc/man/pam_end.3: Likewise.
1258 2007-07-18 Thorsten Kukuk <kukuk@thkukuk.de>
1260 * release version 0.99.8.1
1262 * libpam/pam_audit.c: Include unistd.h for getuid().
1263 * libpam/Makefile.am: Bump version number.
1265 2007-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
1267 * libpam/pam_audit.c (_pam_audit_writelog): Don't return
1268 error if application runs as normal user. Fixes regression
1269 introduced with last change.
1271 2007-07-10 Thorsten Kukuk <kukuk@thkukuk.de>
1273 * configure.in: Add --with-db-uniquename option to support
1274 db libraries and functions with unique name extension.
1275 Patch from Diego 'Flameeyes' Pettenò <flameeyes@gmail.com>.
1277 * modules/pam_limits/pam_limits.c: Include locale.h.
1279 2007-07-06 Thorsten Kukuk <kukuk@thkukuk.de>
1281 * release version 0.99.8.0
1283 * configure.in: Check for audit_log_acct_message instead of
1284 audit_log_user_message.
1285 * libpam/pam_audit.c: Use audit_log_acct_message.
1286 Based on patch from Mark J Cox <mjc@redhat.com>.
1287 * libpam/Makefile.am: Bump version number of libpam.
1289 * modules/pam_umask/pam_umask.c (set_umask): mode_t is 32bit,
1292 * xtests/tst-pam_limits1.c: Fix printf arguments.
1294 * po/*.po: Merge po files with latest code changes.
1296 2007-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
1298 * modules/pam_limits/pam_limits.c (process_limit): Check upper and
1299 lower limit of nice value, fix off-by-one in conversation to rlim_t.
1300 * xtests/Makefile.am: Add new pam_limits test case.
1301 * xtests/limits.conf: New, config file for test case.
1302 * xtests/pam_limits1.c: New, test case for RLIMIT_NICE.
1303 * xtests/pam_limits1.sh: Likewise.
1304 * xtests/pam_limits1.pamd: Likewise.
1306 2007-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
1308 * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r
1309 result for recursive calls.
1310 * xtests/Makefile.am: Add new pam_access test cases.
1311 * xtests/pam_access1.c: New test case.
1312 * xtests/pam_access2.c: Likewise.
1313 * xtests/pam_access3.c: Likewise.
1314 * xtests/pam_access4.c: Likewise.
1315 * xtests/pam_access1.sh: Wrapper to create user accounts.
1316 * xtests/pam_access2.sh: Likewise.
1317 * xtests/pam_access3.sh: Likewise.
1318 * xtests/pam_access4.sh: Likewise.
1319 * xtests/pam_access1.pamd: PAM config file for pam_access tests.
1320 * xtests/pam_access2.pamd: Likewise.
1321 * xtests/pam_access3.pamd: Likewise.
1322 * xtests/pam_access4.pamd: Likewise.
1323 * xtests/access.conf: Config file for pam_access tests.
1324 * xtests/run-tests.sh: Install access.conf into system.
1326 2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
1328 * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Print
1329 better error message if /proc/self/loginuid cannot be opened.
1331 * modules/pam_limits/pam_limits.c (process_limit): Check for
1332 variable overflow after multiplication [bnc#283001].
1334 * modules/pam_access/pam_access.c: Add new syntax for groups
1335 in access.conf to differentiate group names from account names.
1336 Based on patch from Julien Lecomte <julien@famille-lecomte.net>,
1337 solves feature request [#411390].
1338 * modules/pam_access/access.conf: Add example for new group
1340 * modules/pam_access/access.conf.5.xml: Document new syntax.
1342 2007-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
1344 * modules/pam_cracklib/pam_cracklib.8.xml: Document new minclass
1346 * modules/pam_cracklib/pam_cracklib.c: Add support for minimum
1347 character classes [#1688777]. Based on patch from Keith Schincke.
1349 * xtests/tst-pam_cracklib2.c: New, test case for minclass option.
1350 * xtests/tst-pam_cracklib2.pamd: New, PAM config file for test case.
1351 * xtests/Makefile.am: Add new testcase.
1353 * xtests/pam_cracklib.c: Fix comment what this application tests.
1355 * configure.in: Use /lib64 on x86-64, ppc64, s390x, sparc64
1357 2007-06-15 Tomas Mraz <t8m@centrum.cz>
1359 * modules/pam_selinux/pam_selinux.8.xml: Remove multiple option,
1360 add select_context and use_current_range options.
1361 * modules/pam_selinux/pam_selinux.c (send_audit_message): Added
1362 function for auditing role/level changes.
1363 (query_response): Add default response.
1364 (select_context): Removed.
1365 (manual_context): Query only role and level.
1366 (mls_range_allowed): Added function for range check.
1367 (config_context): Added function for role and level override.
1368 (pam_sm_open_session): Remove multiple option, add select_context
1369 and use_current_range_options. Use getseuserbyname to obtain
1370 SELinux user and level. Audit role/level changes. Call setkeycreatecon
1371 to assign key creation context. Don't fail on errors when SELinux
1372 is not in enforcing mode.
1373 * configure.in: Check for setkeycreatecon().
1375 * modules/pam_namespace/README.xml: Avoid duplication of
1377 * modules/pam_namespace/namespace.conf: More real life example
1379 * modules/pam_namespace/namespace.conf.5.xml: Likewise plus
1380 properly describe how instance directory names are formed.
1381 * modules/pam_namespace/namespace.init: Preserve euid when
1382 called from setuid apps (su, newrole).
1383 * modules/pam_namespace/pam_namespace.8.xml: Added option
1384 no_unmount_on_close.
1385 * modules/pam_namespace/pam_namespace.c (process_line): Polyinst
1386 methods are now user, level and context. Fix crash on unknown
1387 override user in config file.
1388 (ns_override): Add explicit uid parameter.
1389 (form_context): Skip for user method. Implement level based
1391 (poly_name): Initialize contexts. Add level based polyinst,
1392 remove 'both' metod. Use raw contexts for instance names,
1393 truncate long instance names and add hash.
1394 (ns_setup): Hashing moved to poly_name().
1395 (setup_namespace): Handle correctly override users for
1396 su (when unmnt_remnt is used).
1397 (pam_sm_close_session): Added no_unmount_on_close option.
1398 * modules/pam_namespace/pam_namespace.h: Added
1399 no_unmount_on_close_option, level method, limit on instance
1400 directory name length.
1402 2007-05-04 Thorsten Kukuk <kukuk@suse.de>
1404 * xtests/run-xtests.sh: Use SRCDIR to find PAM config files.
1405 * xtests/Makefile.am: Call run-xtests.sh with srcdir as first
1407 Based on patch by Bernard Leak <thisisnotapipe@hotmail.com>.
1409 2007-04-30 Thorsten Kukuk <kukuk@thkukuk.de>
1411 * modules/pam_limits/limits.conf: Address space limit is KB.
1412 * modules/pam_limits/limits.conf.5.xml: Likewise.
1413 Reported by Thomas Vander Stichele <thomas@apestaart.org>.
1415 * modules/pam_mail/pam_mail.c (_do_mail): Remove duplicate
1416 check for PAM_SILENT and don't bail out if it is set [#1706247].
1418 2007-03-29 Tomas Mraz <t8m@centrum.cz>
1420 * modules/pam_access/pam_access.c (login_access, list_match):
1421 Replace strtok with strtok_r.
1422 * modules/pam_cracklib/pam_cracklib.c (check_old_password):
1424 * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate):
1426 * modules/pam_unix/pam_unix_passwd.c (check_old_password,
1427 save_old_password): Likewise.
1429 * modules/pam_limits/Makefile.am: Define limits.d dir and install it.
1430 * modules/pam_limits/pam_limits.8.xml: Describe limits.d parsing.
1431 * modules/pam_limits/pam_limits.c (pam_limit_s): Make conf_file ptr.
1432 (pam_parse): conf_file is now ptr.
1433 (pam_sm_open_session): Add parsing files from limits.d subdir using
1434 glob, change pl to pointer.
1436 2007-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
1438 * po/ar.po: New translation.
1439 * po/ca.po: Likewise.
1440 * po/da.po: Likewise.
1441 * po/ru.po: Likewise.
1442 * po/sv.po: Likewise.
1443 * po/zu.po: Likewise.
1444 * po/LINGUAS: Add ar, ca, da, ru, sv, zu
1446 * po/hu.po: Update translation.
1448 2007-02-21 Tomas Mraz <t8m@centrum.cz>
1450 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Test for
1451 allocation failure in bigcrypt().
1453 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Allow
1454 modification of '*' password by root.
1456 2007-02-06 Tomas Mraz <t8m@centrum.cz>
1458 * modules/pam_loginuid/pam_loginuid.c (set_loginuid): Remove
1459 debug syslog message when loginuid doesn't exist.
1461 2007-02-01 Tomas Mraz <t8m@centrum.cz>
1463 * xtests/tst-pam_unix3.c: Fix typos in comments.
1465 * modules/pam_unix/support.c (_unix_verify_password): Explicitly
1466 disallow '!' in the beginning of password hash. Treat only
1467 13 bytes password hash specifically. (Suggested by Solar Designer.)
1468 Fix a warning and test for allocation failure.
1469 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
1471 2007-01-31 Thorsten Kukuk <kukuk@thkukuk.de>
1473 * xtests/Makefile.am: Add new pam_unix.so tests
1474 * xtests/run-xtests.sh: Prefer shell scripts (wrapper)
1476 * xtests/tst-pam_cracklib1.c: Fix typo.
1477 * xtests/tst-pam_unix1.c: New, for sucurity fix.
1478 * xtests/tst-pam_unix1.pamd: New.
1479 * xtests/tst-pam_unix1.sh: New.
1480 * xtests/tst-pam_unix2.c: New, for crypt checks.
1481 * xtests/tst-pam_unix2.pamd: New.
1482 * xtests/tst-pam_unix2.sh: New.
1483 * xtests/tst-pam_unix3.c: New, for bigcrypt checks.
1484 * xtests/tst-pam_unix3.pamd: New.
1485 * xtests/tst-pam_unix3.sh: New.
1487 2007-01-23 Thorsten Kukuk <kukuk@suse.de>
1491 * configure.in: Set version number to 0.99.7.1
1493 2007-01-23 Thorsten Kukuk <kukuk@thukuk.de>
1494 Tomas Mraz <t8m@centrum.cz>
1496 * modules/pam_unix/support.c (_unix_verify_password): Always
1497 compare full encrypted passwords (CVE-2007-0003).
1499 2007-01-23 Tomas Mraz <t8m@centrum.cz>
1501 * modules/pam_loginuid/Makefile.am (AM_LDFLAGS): Add LIBAUDIT.
1503 * modules/pam_selinux/Makefile.am (pam_selinux_check_LDFLAGS): Add
1505 (pam_selinux_la_LDFLAGS): Likewise.
1507 2007-01-17 Thorsten Kukuk <kukuk@thkukuk.de>
1511 * configure.in: Set version number to 0.99.7.0
1513 * Makefile.am (M4_FILES): Replace GNU make extension by listing
1516 2007-01-17 Tomas Mraz <t8m@centrum.cz>
1518 * po/*.po: Updated strings to translate.
1519 * po/Linux-PAM.pot: Likewise.
1521 2007-01-16 Thorsten Kukuk <kukuk@thkukuk.de>
1523 * doc/man/pam.conf-syntax.xml: Improve documentation about
1524 sufficient keyword (Patch by Petteri Räty <betelgeuse@gentoo.org>)
1526 2006-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
1528 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Forbid
1529 only '+' and '-' as first characters for account names.
1530 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
1532 2006-12-18 Thorsten Kukuk <kukuk@thkukuk.de>
1534 * configure.in: Fix ENOKEY check (specify errno.h as header
1537 * configure.in: Add AM_PROG_CC_C_O.
1538 * libpam/Makefile.am: Add content of AM_LDFLAGS to *_LDFLAGS.
1539 * modules/pam_tally/Makefile.am: Likewise.
1540 * modules/pam_unix/Makefile.am: Likewise.
1542 * modules/pam_stress/pam_stress.c (pam_sm_chauthtok): Fix
1543 localisation of message printed to user.
1544 * po/de.po: Adjust translation.
1546 2006-12-18 Tomas Mraz <t8m@centrum.cz>
1548 * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): Localize
1549 message printed to user.
1551 * modules/pam_unix/support.c (_unix_verify_password): Use strncmp
1552 only for bigcrypt result.
1554 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Switch to new
1555 egid first, euid next. Revert euid/egid to old euid/egid and not
1557 (pam_sm_open_session): Switch to new rgid first, ruid next.
1559 2006-12-13 Thorsten Kukuk <kukuk@thkukuk.de>
1561 * modules/pam_localuser/pam_localuser.c: Add support for session
1562 and chauthtok [SF#1606180].
1563 * modules/pam_localuser/pam_localuser.8.xml: Document last change.
1565 * libpam/pam_audit.c (_pam_audit_writelog): Print error message
1568 2006-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
1570 * libpam/pam_audit.c (_pam_audit_writelog): Print error
1571 message on failure to syslog.
1573 2006-12-09 Thorsten Kukuk <kukuk@thkukuk.de>
1575 * modules/pam_umask/pam_umask.c: Use strtoul instead of strtol,
1576 fix overflow detection.
1578 2006-12-06 Thorsten Kukuk <kukuk@thkukuk.de>
1580 * modules/pam_mkhomedir/pam_mkhomedir.c (rec_mkdir): Fix
1581 handling of left-most path component [SF#1591598].
1582 (create_homedir): Mark user visible messages for translation.
1583 * po/de.po: Adjust german translation for pam_mkhomedir.
1585 * modules/pam_faildelay/pam_faildelay.c: If no argument is
1586 given, try to read FAIL_DELAY from /etc/login.defs.
1587 * modules/pam_faildelay/pam_faildelay.8.xml: Document usage
1590 2006-12-04 Tomas Mraz <t8m@centrun.cz>
1592 * po/jp.po: Fixed mistake in Password: message (from
1593 Peng Huang <phuang@redhat.com>).
1595 2006-11-28 Thorsten Kukuk <kukuk@thkukuk.de>
1597 * po/hu.po: Update hungarian translation (from
1598 Kalman Kemenczy <kkemenczy@novell.com>).
1600 * configure.in: Allow disabling support for cracklib, audit, libdb.
1602 * modules/pam_faildelay/pam_faildelay.8.xml: Correct name of Author.
1604 * configure.in: Remove --enable-docdir (obsolete by --docdir).
1605 * doc/Makefile.am: Don't overwrite htmldir.
1606 * doc/adg/Makefile.am: Use docdir, htmldir and pdfdir.
1607 * doc/mwg/Makefile.am: Likewise.
1608 * doc/sag/Makefile.am: Likewise.
1609 * doc/specs/Makefile.am: Use docdir.
1611 * tests/tst-pam_set_data.c: New test cases for pam_set_data().
1612 * tests/Makefile.am: Add pam_set_data test case.
1614 * libpam/pam_data.c: Add NULL pointer check for module_data_name.
1615 * libpam/Makefile.am: Bump revision of shared library.
1617 2006-11-08 Thorsten Kukuk <kukuk@thkukuk.de>
1619 * configure.in: Add modules/pam_faildelay/Makefile.
1620 * doc/sag/Linux-PAM_SAG.xml: Include pam_faildelay.xml.
1621 * doc/sag/pam_faildelay.xml: New.
1622 * libpam/pam_static_modules.h: Include static pam_faildelay data.
1623 * modules/Makefile.am: Add pam_faildelay directory.
1624 * modules/pam_faildelay/Makefile.am: New.
1625 * modules/pam_faildelay/README: New, generated from XML file.
1626 * modules/pam_faildelay/README.xml: New.
1627 * modules/pam_faildelay/pam_faildelay.8: New, generated from xml.
1628 * modules/pam_faildelay/pam_faildelay.8.xml: New.
1629 * modules/pam_faildelay/pam_faildelay.c: New.
1630 * modules/pam_faildelay/tst-pam_faildelay: New.
1632 * po/POTFILES.in: Add pam_faildelay.c and pam_loginuid.c.
1634 2006-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
1636 * modules/pam_cracklib/pam_cracklib.c: PAM_DEBUG_ARG
1637 is a bit mask and not a boolean value (Reported by
1638 Jochen Voss <voss@seehuhn.de>).
1640 2006-10-26 Thorsten Kukuk <kukuk@thkukuk.de>
1642 * doc/man/pam.3.xml: Add pam_get_user function.
1644 * modules/pam_motd/pam_motd.8.xml: Fix typo.
1646 2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
1648 * modules/pam_namespace/pam_namespace.c: Reserve space for
1651 2006-10-24 Thorsten Kukuk <kukuk@thkukuk.de>
1653 * modules/pam_unix/support.c (_unix_verify_password): Try system
1654 crypt() if we don't know the hash alogorithm.
1655 * modules/pam_unix/unix_chkpwd.c (_unix_verify_password): Likewise.
1657 2006-10-13 Tomas Mraz <t8m@centrum.cz>
1659 * doc/mwg/Linux-PAM_MWG.xml: Add id[s] to section[s].
1660 * doc/sag/pam_access.xml: Likewise.
1661 * doc/sag/pam_echo.xml: Likewise.
1662 * doc/sag/pam_env.xml: Likewise.
1663 * doc/sag/pam_exec.xml: Likewise.
1664 * doc/sag/pam_group.xml: Likewise.
1665 * doc/sag/pam_limits.xml: Likewise.
1666 * doc/sag/pam_namespace.xml: Likewise.
1667 * doc/sag/pam_time.xml: Likewise.
1668 * doc/sag/Linux-PAM_SAG.xml: Add id to book.
1669 * doc/adg/Linux-PAM_ADG.xml: Add id to book.
1670 * doc/mwg/Linux-PAM_MWG.xml: Add id to book.
1673 2006-10-07 Thorsten Kukuk <kukuk@thkukuk.de>
1675 * po/hu.po: Updated hungarian translation (from
1676 Kalman Kemenczy <kkemenczy@novell.com>)
1678 2006-09-20 Thorsten Kukuk <kukuk@thkukuk.de>
1680 * doc/adg/Makefile.am: Add manual pages as dependency.
1681 * doc/mwg/Makefile.am: Likewise.
1682 * doc/sag/Makefile.am: Likewise.
1683 * doc/sag/Linux-PAM_SAG.xml: Include pam_unix.xml.
1684 * doc/sag/pam_unix.xml: New.
1685 * modules/pam_unix/Makefile.am: Generate pam_unix.8 manual page.
1686 * modules/pam_unix/README.xml: New.
1687 * modules/pam_unix/pam_unix.8.xml: New.
1688 * modules/pam_unix/README: Regenerate from XML.
1689 * modules/pam_unix/pam_unix.8: Generated from XML.
1691 2006-09-09 Dmitry V. Levin <ldv@altlinux.org>
1693 * modules/pam_wheel/pam_wheel.8.xml: Fix typo.
1694 * modules/pam_wheel/pam_wheel.8: Likewise.
1695 * modules/pam_wheel/README: Likewise.
1697 2006-09-08 Thorsten Kukuk <kukuk@thkukuk.de>
1699 * po/de.po: Fix typo.
1701 2006-09-06 Thorsten Kukuk <kukuk@thkukuk.de>
1703 * release version 0.99.6.3
1705 2006-09-01 Thorsten Kukuk <kukuk@thkukuk.de>
1707 * modules/pam_loginuid/pam_loginuid.8.xml: Fix typo in
1710 2006-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
1712 * modules/pam_env/environment: New, dummy environment example
1715 * modules/pam_namespace/Makefile.am: Don't install
1716 manual page if we don't build module.
1718 * m4/ld-as-needed.m4: Don't set LDFLAGS if check failed.
1719 * m4/ld-O1: Likewise.
1721 2006-08-30 Tomas Mraz <t8m@centrum.cz>
1723 * modules/pam_access/pam_access.8.xml: All services supported.
1724 * modules/pam_access/pam_access.c (pam_sm_open_session): New.
1725 (pam_sm_close_session): New.
1726 (pam_sm_chauthtok): New.
1728 * modules/pam_access/pam_succeed_if.8.xml: All services supported.
1729 * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return
1730 PAM_IGNORE rather than success.
1731 (pam_sm_open_session): New.
1732 (pam_sm_close_session): New.
1733 (pam_sm_chauthtok): New.
1735 2006-08-30 Thorsten Kukuk <kukuk@thkukuk.de>
1737 * xtests/Makefile.am: Move shell code to execute tests from here ...
1738 * xtests/run-xtests.sh: ... to here.
1739 * xtests/*.c: Include config.h.
1740 * tests/*.c: Likewise.
1742 * modules/pam_namespace/pam_namespace.c: Use pam_modutil_getpwnam()
1743 instead of getpwnam().
1745 2006-08-29 Thorsten Kukuk <kukuk@thkukuk.de>
1747 * doc/sag/pam_loginuid.xml: New.
1748 * doc/sag/Linux-PAM_SAG.xml: Include pam_loginuid.xml.
1750 * configure.in: Add modules/pam_loginuid/Makefile.
1751 * modules/Makefile.am: Add pam_loginuid sub directory.
1753 * libpam/pam_static_modules.h: Add pam_loginuid.
1755 * modules/pam_loginuid/Makefile.am: New.
1756 * modules/pam_loginuid/tst-pam_loginuid: New.
1757 * modules/pam_loginuid/pam_loginuid.8.xml: New.
1758 * modules/pam_loginuid/pam_loginuid.8: New, generated from XML source.
1759 * modules/pam_loginuid/pam_loginuid.c: New.
1760 * modules/pam_loginuid/README.xml: New.
1761 * modules/pam_loginuid/README: New, generated from XML source.
1763 2006-08-29 Dmitry V. Levin <ldv@altlinux.org>
1765 * modules/pam_exec/pam_exec.c (call_exec): Add required third
1766 argument to open() call with O_CREAT flag set.
1768 2006-08-28 Thorsten Kukuk <kukuk@thkukuk.de>
1770 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Remove
1773 2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
1775 * release version 0.99.6.2
1777 * modules/pam_lastlog/pam_lastlog.c (last_login_date): Create
1778 lastlog file if it does not exist.
1780 * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Check
1781 for error from getting second token.
1782 * xtests/Makefile.am: Add tst-pam_cracklib1
1783 * xtests/tst-pam_cracklib1.c: New, check for pam_cracklib seg.fault.
1784 * xtests/tst-pam_cracklib1.pamd: New, config for cracklib test.
1786 2006-08-24 Thorsten Kukuk <kukuk@thkukuk.de>
1788 * xtests/tst-pam_dispatch4.c: New test.
1789 * xtests/tst-pam_dispatch4.pamd: PAM config for new test.
1791 2006-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
1793 * release version 0.99.6.1
1795 2006-08-09 David Howells <dhowells@redhat.com>
1797 * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Set real uid
1798 to user's before revoking.
1799 (pam_sm_open_session): Remember the uid.
1801 2006-08-06 Thorsten Kukuk <kukuk@thkukuk.de>
1803 * modules/pam_umask/pam_umask.c (setup_limits_from_gecos):
1805 * modules/pam_umask/pam_umask.8.xml: Document silent option.
1807 * xtests/Makefile.am: Fix includes for bootstrapping.
1808 Reported by Greg Schafer <gschafer@zip.com.au>.
1810 2006-08-05 Thorsten Kukuk <kukuk@thkukuk.de>
1812 * release version 0.99.6.0
1814 * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
1815 pam_modutil_getpwnam instead of getpwnam.
1817 * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
1818 svc variable to char pointer for snprintf.
1820 * configure.in: Generate xtests/Makefile.
1821 * Makefile.am (SUBDIRS): Add xtests.
1822 * README: Document make check and make xtests.
1823 * xtests/Makefile.am: New.
1824 * xtests/tst-pam_dispatch1.pamd: New.
1825 * xtests/tst-pam_dispatch2.pamd: New.
1826 * xtests/tst-pam_dispatch3.pamd: New.
1827 * xtests/tst-pam_dispatch1.c: New.
1828 * xtests/tst-pam_dispatch2.c: New.
1829 * xtests/tst-pam_dispatch3.c: New.
1831 2006-08-04 Ray Strode <rstrode@redhat.com>
1833 * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
1834 Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
1836 2006-08-03 David Howells <dhowells@redhat.com>
1838 * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
1839 (init_keyrings): Properly handle multiple invocations of the module.
1840 (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
1842 2006-08-03 Tomas Mraz <t8m@centrum.cz>
1844 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
1845 New function for list matching.
1846 (evaluate_notinlist): Likewise.
1847 (evaluate): Add service value match, list matching.
1848 * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
1851 * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
1852 relabelling error when the tty device doesn't exist (ENOENT).
1854 2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
1856 * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
1857 rationale about when this function should be used and when not.
1859 * doc/index.html: Cleanup to look prettier.
1861 2006-08-01 Thorsten Kukuk <kukuk@thkukuk.de>
1863 * libpam/Makefile.am: Bump patchlevel of libpam.
1864 * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
1865 or [return=bad] is used, don't return PAM_IGNORE. Based on
1866 patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
1868 2006-07-28 Thorsten Kukuk <kukuk@thkukuk.de>
1870 * ABOUT-NLS: Upgrade to gettext-0.15.
1871 * config.rpath: Likewise.
1872 * m4/gettext.m4: Upgrade to gettext-0.15.
1873 * m4/inttypes-h.m4: New file, from gettext-0.15.
1874 * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
1875 * m4/lib-link.m4: Upgrade to gettext-0.15.
1876 * m4/lib-prefix.m4: Upgrade to gettext-0.15.
1877 * m4/lock.m4: New file, from gettext-0.15.
1878 * m4/longdouble.m4: Upgrade to gettext-0.15.
1879 * m4/nls.m4: Upgrade to gettext-0.15.
1880 * m4/po.m4: Upgrade to gettext-0.15.
1881 * m4/size_max.m4: Upgrade to gettext-0.15.
1882 * m4/visibility.m4: New file, from gettext-0.15.
1883 * po/Makefile.in.in: Upgrade to gettext-0.15.
1885 2006-07-24 David Quigley <dpquigl@tycho.nsa.gov>
1887 * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
1888 * modules/pam_namespace/pam_namespace.c: Move includes and
1889 data structure definitions from here ...
1890 * modules/pam_namespace/pam_namespace.h: ... here. New file.
1892 * modules/pam_namespace/pam_namespace.c: Move large sections
1893 of code into new functions.
1895 2006-07-24 Thorsten Kukuk <kukuk@thkukuk.de>
1897 * doc/adg/Makefile.am: Add uninstall and distclean rules.
1898 * doc/mwg/Makefile.am: Likewise.
1899 * doc/sag/Makefile.am: Likewise.
1901 2006-07-08 Daniel Richard G. <skunk@iskunk.org>
1903 * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
1904 * conf/pam_conv1/pam_conv.lex: Rename to ...
1905 * conf/pam_conv1/pam_conv_l.l: ... this.
1906 * conf/pam_conv1/pam_conv.y: Rename to ...
1907 * conf/pam_conv1/pam_conv_y.y: ... this.
1908 * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
1910 * doc/Makefile.am: Fix rule to install index.html.
1911 * doc/adg/Makefile.am: Fix test usage.
1912 * doc/mwg/Makefile.am: Likewise.
1913 * doc/sag/Makefile.am: Likewise.
1914 * doc/specs/Makefile.am: Fix rules for lex and yacc files.
1915 * specs/parse.lex: Rename to ...
1916 * doc/specs/parse_l.l: ... this.
1917 * doc/specs/parse.y: Rename to ...
1918 * doc/specs/parse_y.y: ... this.
1919 * libpam/pam_account.c: Fix #if vs. #ifdef.
1920 * libpam/pam_audit.c: Likewise.
1921 * libpam/pam_auth.c: Likewise.
1922 * libpam/pam_password.c: Likewise.
1923 * libpam/pam_private.h: Likewise.
1924 * libpam/pam_session.c: Likewise.
1925 * libpam/pam_start.c: Likewise.
1926 * libpam/pam_static.c: Fix "empty sourcefile" warning.
1927 * modules/pam_limits/pam_limits.c: Check for __linux, too.
1928 * modules/pam_userdb/Makefile.am: Don't run test if no
1930 * tests/tst-dlopen.c: Include config.h.
1932 2006-07-03 Dan Yefimov <dan@D00M.lightwave.net.ru>
1934 * configure.in: Fixed have_key_syscalls test.
1936 * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
1937 match, removed AI_ADDRCONFIG flag.
1939 2006-06-30 Tomas Mraz <t8m@centrum.cz>
1941 * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
1943 2006-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
1945 * doc/Makefile.am (releasedocs): Fix directory layout.
1946 * doc/adg/Makefile.am: Likewise.
1947 * doc/mwg/Makefile.am: Likewise.
1948 * doc/sag/Makefile.am: Likewise.
1950 2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
1952 * doc/sag: System Administrator Guide as XML source.
1953 * doc/sag/Makefile.am: New.
1954 * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
1955 * doc/sag/pam_*.xml: New, wrapper to include module documentation.
1957 * doc/adg: Application Developers Guide as XML source.
1958 * doc/adg/Makefile.am: New.
1959 * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
1960 * doc/adg/pam_*.xml: New, wrappers to include manual pages.
1962 * doc/mwg: Application Developers Guide as XML source.
1963 * doc/mwg/Makefile.am: New.
1964 * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
1965 * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
1967 * doc/CREDITS: Removed.
1968 * doc/NOTES: Removed.
1969 * doc/pam_appl.sgml: Removed.
1970 * doc/pam_modules.sgml: Removed.
1971 * doc/pam_source.sgml: Removed.
1972 * doc/figs/pam_orient.txt: Removed.
1973 * doc/figs: Removed.
1975 * configure.in: Remove checks for sgml2* progrs, add sag, adg
1978 * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
1980 * doc/modules: Remove directory.
1981 * doc/html: Remove directory.
1982 * doc/ps: Remove directory.
1983 * doc/pdf: Remove directory.
1984 * doc/txts: Remove directory.
1985 * doc/index.html: Moved from html directory to here.
1987 2006-06-28 Thorsten Kukuk <kukuk@thkukuk.de>
1989 * release version 0.99.5.0
1991 * bump version number to 0.99.5.0
1993 * modules/pam_rhosts/pam_rhosts.c: New module, replaces
1995 * modules/pam_rhosts/pam_rhosts.8.xml: New.
1996 * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
1997 * modules/pam_rhosts/tst-pam_rhosts: New.
1998 * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
1999 manual page and README.
2000 * modules/pam_rhosts/README.xml: New.
2001 * modules/pam_rhosts/reADME: Regenerated from XML source.
2003 * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
2005 * doc/man/pam_sm_authenticate.3.xml: Likewise.
2006 * doc/man/pam_sm_chauthtok.3.xml: Likewise.
2007 * doc/man/pam_sm_close_session.3.xml: Likewise.
2008 * doc/man/pam_sm_open_session.3.xml: Likewise.
2009 * doc/man/pam_sm_setcred.3.xml: Likewise.
2011 * po/POTFILES.in: Add new source files.
2013 * libpam/pam_static_modules.h: Add new modules.
2015 * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
2017 * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
2018 files and manual page.
2020 2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
2022 * configure.in: Allow disabling of SELinux support, check for
2025 2006-06-27 Tomas Mraz <t8m@centrum.cz>
2027 * modules/pam_namespace/pam_namespace.c: New module
2028 originally written by Janak Desai.
2029 * modules/pam_namespace/Makefile.am: New.
2030 * modules/pam_namespace/README: New.
2031 * modules/pam_namespace/md5.c: New.
2032 * modules/pam_namespace/md5.h: New.
2033 * modules/pam_namespace/namespace.conf: New.
2034 * modules/pam_namespace/namespace.conf.5: New.
2035 * modules/pam_namespace/namespace.conf.5.xml: New.
2036 * modules/pam_namespace/namespace.init: New.
2037 * modules/pam_namespace/pam_namespace.8: New.
2038 * modules/pam_namespace/pam_namespace.8.xml: New.
2039 * modules/pam_namespace/tst-pam_namespace: New.
2040 * modules/Makefile.am: Added pam_namespace.
2041 * configure.in: Added pam_namespace, test for unshare
2044 2006-06-27 David Howells <dhowells@redhat.com>
2046 * modules/pam_keyinit/pam_keyinit.c: New module.
2047 * modules/pam_keyinit/pam_keyinit.8: New.
2048 * modules/pam_keyinit/pam_keyinit.8.xml: New.
2049 * modules/pam_keyinit/README: New.
2050 * modules/pam_keyinit/README.xml: New.
2051 * modules/pam_keyinit/Makefile.am: New.
2052 * modules/pam_keyinit/tst-pam_keyinit: New.
2053 * modules/Makefile.am: Added pam_keyinit.
2054 * configure.in: Added test for the key mgmt syscall.
2056 2006-06-27 Thorsten Kukuk <kukuk@thkukuk.de>
2058 * m4/libprelude.m4: Sync with upstream.
2060 2006-06-27 Tomas Mraz <t8m@centrum.cz>
2062 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
2063 signal() fails with SIG_ERR return
2064 * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
2066 * modules/pam_unix/support.c(_unix_run_helper_binary):
2069 2006-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
2071 * doc/man/misc_conv.3.xml: New.
2072 * doc/man/misc_conv.3: New.
2073 * doc/man/pam_misc_paste_env.3.xml: New.
2074 * doc/man/pam_misc_paste_env.3: New.
2075 * doc/man/pam_misc_drop_env.3.xml: New.
2076 * doc/man/pam_misc_drop_env.3: New.
2077 * doc/man/pam_misc_setenv.3.xml: New.
2078 * doc/man/pam_misc_setenv.3: New.
2079 * doc/man/Makefile.am: Add new manual pages.
2081 * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
2082 in Applicatoin Developer Guide.
2083 * doc/man/pam_authenticate.3.xml: Likewise
2084 * doc/man/pam_chauthtok.3.xml: Likewise
2085 * doc/man/pam_close_session.3.xml: Likewise
2086 * doc/man/pam_conv.3.xml: Likewise
2087 * doc/man/pam_end.3.xml: Likewise
2088 * doc/man/pam_fail_delay.3.xml: Likewise
2089 * doc/man/pam_getenv.3.xml: Likewise
2090 * doc/man/pam_getenvlist.3.xml: Likewise
2091 * doc/man/pam_open_session.3.xml: Likewise
2092 * doc/man/pam_putenv.3.xml: Likewise
2093 * doc/man/pam_setcred.3.xml: Likewise
2094 * doc/man/pam_start.3.xml: Likewise
2095 * doc/man/pam_strerror.3.xml: Likewise
2097 * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
2098 * doc/man/pam_authenticate.3: Likewise
2099 * doc/man/pam_chauthtok.3: Likewise
2100 * doc/man/pam_close_session.3: Likewise
2101 * doc/man/pam_conv.3: Likewise
2102 * doc/man/pam_end.3: Likewise
2103 * doc/man/pam_fail_delay.3: Likewise
2104 * doc/man/pam_getenv.3: Likewise
2105 * doc/man/pam_getenvlist.3: Likewise
2106 * doc/man/pam_open_session.3: Likewise
2107 * doc/man/pam_putenv.3: Likewise
2108 * doc/man/pam_setcred.3: Likewise
2109 * doc/man/pam_sm_close_session.3: Likewise
2110 * doc/man/pam_start.3: Likewise
2111 * doc/man/pam_strerror.3: Likewise
2112 * doc/man/pam_syslog.3: Likewise
2113 * doc/man/PAM.8: Likewise
2115 2006-06-24 Thorsten Kukuk <kukuk@thkukuk.de>
2117 * modules/pam_limits/pam_limits.c (setup_limits): Don't
2118 reset priority for root.
2120 2006-06-23 Thorsten Kukuk <kukuk@thkukuk.de>
2122 * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
2123 * modules/pam_access/pam_access.8.xml: Likewise.
2124 * modules/pam_deny/pam_deny.8.xml: Likewise.
2125 * modules/pam_echo/pam_echo.8.xml: Likewise.
2126 * modules/pam_env/pam_env.8.xml: Likewise.
2127 * modules/pam_env/pam_env.conf.5.xml: Likewise.
2128 * modules/pam_group/group.conf.5.xml: Likewise.
2129 * modules/pam_group/pam_group.8.xml: Likewise.
2130 * modules/pam_limits/limits.conf.5.xml: Likewise.
2131 * modules/pam_listfile/pam_listfile.8.xml: Likewise.
2132 * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
2133 * modules/pam_time/pam_time.8.xml: Likewise.
2134 * modules/pam_time/time.conf.5.xml: Likewise.
2136 * modules/pam_access/access.conf.5: Regenerate.
2137 * modules/pam_access/pam_access.8: Likewise.
2138 * modules/pam_deny/pam_deny.8: Likewise.
2139 * modules/pam_echo/README: Likewise.
2140 * modules/pam_echo/pam_echo.8: Likewise.
2141 * modules/pam_env/pam_env.8: Likewise.
2142 * modules/pam_env/pam_env.conf.5: Likewise.
2143 * modules/pam_group/README: Likewise.
2144 * modules/pam_group/group.conf.5: Likewise.
2145 * modules/pam_group/pam_group.8: Likewise.
2146 * modules/pam_limits/limits.conf.5: Likewise.
2147 * modules/pam_listfile/README: Likewise.
2148 * modules/pam_listfile/pam_listfile.8: Likewise.
2149 * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
2150 * modules/pam_time/pam_time.8: Likewise.
2151 * modules/pam_time/time.conf.5: Likewise.
2153 * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
2154 and pam.conf-syntax.xml.
2155 * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
2156 * doc/man/pam.conf.5: Regenerated.
2157 * doc/man/pam.conf-desc.xml: New.
2158 * doc/man/pam.conf-dir.xml: New.
2159 * doc/man/pam.conf-syntax.xml: New.
2161 2006-06-21 Thorsten Kukuk <kukuk@thkukuk.de>
2163 * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
2166 * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
2167 * modules/pam_issue/pam_issue.8: Regenerate.
2169 2006-06-20 Thorsten Kukuk <kukuk@thkukuk.de>
2171 * configure.in: Remove unused check for libcap.
2173 * m4/ld-as-needed.m4: New.
2175 * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
2176 require docbook version 4.4.
2178 2006-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
2180 * doc/man/pam.8.xml: Syntax cleanup.
2181 * doc/pam/PAM.8: Regenerated from xml source.
2182 * man/pam_sm_chauthtok.3: New.
2183 * man/pam_sm_chauthtok.3.xml: New.
2184 * man/pam_sm_close_session.3: New.
2185 * man/pam_sm_close_session.3.xml: New.
2186 * man/pam_sm_open_session.3: New.
2187 * man/pam_sm_open_session.3.xml: New.
2188 * man/pam_sm_authenticate.3: New.
2189 * man/pam_sm_authenticate.3.xml: New.
2190 * man/pam_sm_setcred.3: New.
2191 * man/pam_sm_setcred.3.xml: New.
2192 * man/Makefile.am: Add new pam_sm_* manual pages.
2194 * specs/Makefile.am: Fix rule to generate draft.
2196 2006-06-18 Thorsten Kukuk <kukuk@thkukuk.de>
2198 * modules/pam_tally/Makefile.am: Include Make.xml.rules.
2199 * modules/pam_tally/pam_tally.8.xml: New.
2200 * modules/pam_tally/pam_tally.8: New, generated from xml file.
2201 * modules/pam_tally/README.xml: New.
2202 * modules/pam_tally/README: Regenerated from xml file.
2204 * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
2205 * modules/pam_selinux/pam_selinux.8.xml: New.
2206 * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
2207 * modules/pam_selinux/README.xml: New.
2208 * modules/pam_selinux/README: Regenerated from xml file.
2210 2006-06-17 Thorsten Kukuk <kukuk@thkukuk.de>
2212 * modules/pam_debug/Makefile.am: Include Make.xml.rules.
2213 * modules/pam_debug/pam_debug.8.xml: New.
2214 * modules/pam_debug/pam_debug.8: New, generated from xml file.
2215 * modules/pam_debug/README.xml: New.
2216 * modules/pam_debug/README: Regenerated from xml file.
2218 * examples/vpass.c: UID is unsigned on Linux.
2219 * modules/pam_exec/pam_exec.c: Likewise.
2220 * modules/pam_unix/pam_unix_acct.c: Likewise.
2221 * modules/pam_unix/pam_unix_sess.c: Likewise.
2223 * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
2224 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
2225 * modules/pam_succeed_if/README: Regenerated.
2227 * modules/pam_limits/Makefile.am: Include Make.xml.rules.
2228 * modules/pam_limits/limits.conf.5: New, generated from xml file.
2229 * modules/pam_limits/limits.conf.5.xml: New.
2230 * modules/pam_limits/pam_limits.8: New, generated from xml file.
2231 * modules/pam_limits/pam_limits.8.xml: New.
2232 * modules/pam_limits/README.xml: New.
2233 * modules/pam_limits/README: Regenerated from README.xml.
2235 2006-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
2237 * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
2238 are unsigned on Linux, don't truncate them.
2239 (_do_setpass): err is of type clnt_stat, not int.
2241 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
2242 truncate UID for syslog output.
2244 * modules/pam_time/pam_time.c: Replace type boolean with int.
2245 * modules/pam_group/pam_group.c: Likewise.
2247 2006-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
2249 * modules/pam_unix/bigcrypt.h: New.
2250 * modules/pam_unix/Makefile.am: Add bigcrypt.h.
2251 * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
2252 * modules/pam_unix/support.c: Include bigcrypt.h, remove
2254 * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
2256 * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
2259 * modules/pam_time/pam_time.c (logic_member): Remove unused
2262 * modules/pam_group/pam_group.c (logic_field): Accept
2263 colon in tty name. [#1428276].
2264 (logic_member): Remove unused variable len.
2265 (check_account): Fix usage of err variable in debug code.
2267 * modules/pam_time/pam_time.c (logic_field): Likewise.
2269 * configure.in: Add special exceptions for icc: different
2270 compiler warnings, no PIE support.
2272 2006-06-14 Thorsten Kukuk <kukuk@thkukuk.de>
2274 * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
2276 * configure.in: Remove --enable-memory-debug, add option
2277 to disable prelude if installed.
2279 * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
2280 * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
2281 * modules/pam_unix/unix_chkpwd.c: Likewise.
2282 * libpam/include/security/_pam_types.h: Likewise.
2283 * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
2284 * libpam/pam_malloc.c: Remove file.
2285 * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
2287 * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
2290 * libpam/pam_private.h: Remove _pam_strCMP.
2291 * libpam/pam_misc.c: Likewise.
2292 * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
2294 2006-06-12 Thorsten Kukuk <kukuk@thkukuk.de>
2296 * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
2297 for modules from main application.
2299 2006-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
2301 * modules/pam_time/Makefile.am: Include Make.xml.rules.
2302 * modules/pam_time/time.conf.5: New, generated from xml file.
2303 * modules/pam_time/time.conf.5.xml: New.
2304 * modules/pam_time/pam_time.8: New, generated from xml file.
2305 * modules/pam_time/pam_time.8.xml: New.
2306 * modules/pam_time/README.xml: New.
2307 * modules/pam_time/README: Regenerated from README.xml.
2309 * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
2310 * modules/pam_wheel/pam_wheel.8.xml: New.
2311 * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
2312 * modules/pam_wheel/README.xml: New.
2313 * modules/pam_wheel/README: Regenerated from xml file.
2315 * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
2316 * modules/pam_xauth/pam_xauth.8.xml: New.
2317 * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
2318 * modules/pam_xauth/README.xml: New.
2319 * modules/pam_xauth/README: Regenerated from xml file.
2321 * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
2322 * modules/pam_deny/pam_deny.8: Regenerate from xml file.
2323 * modules/pam_deny/README: Likewise.
2325 * modules/pam_warn/Makefile.am: Include Make.xml.rules.
2326 * modules/pam_warn/pam_warn.8.xml: New.
2327 * modules/pam_warn/pam_warn.8: New, generated from xml file.
2328 * modules/pam_warn/README.xml: New.
2329 * modules/pam_warn/README: Regenerated from xml file.
2331 * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
2332 * modules/pam_userdb/pam_userdb.8.xml: New.
2333 * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
2334 * modules/pam_userdb/README.xml: New.
2335 * modules/pam_userdb/README: Regenerated from xml file.
2337 2006-06-06 Thorsten Kukuk <kukuk@thkukuk.de>
2339 * modules/pam_shells/Makefile.am: Include Make.xml.rules.
2340 * modules/pam_shells/pam_shells.8.xml: New.
2341 * modules/pam_shells/pam_shells.8: New, generated from xml file.
2342 * modules/pam_shells/README.xml: New.
2343 * modules/pam_shells/README: Regenerated from xml file.
2345 * libpam/include/security/pam_malloc.h: Add missing license
2348 * libpam/include/security/pam_ext.h: Add brackets for C++.
2349 * libpam/include/security/pam_modutil.h: Likewise.
2351 * libpam/include/security/pam_modules.h: Document where to
2352 find the copyright/license informations.
2354 * libpam/include/security/pam_appl.h: Move _pam_compat.h
2355 include inside of brackets.
2357 2006-06-04 Thorsten Kukuk <kukuk@thkukuk.de>
2359 * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
2360 * modules/pam_securetty/pam_securetty.8.xml: New.
2361 * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
2362 * modules/pam_securetty/README.xml: New.
2363 * modules/pam_securetty/README: Regenerated from xml file.
2365 * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
2366 * modules/pam_rootok/pam_rootok.8.xml: New.
2367 * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
2368 * modules/pam_rootok/README.xml: New.
2369 * modules/pam_rootok/README: Regenerated from xml file.
2371 * modules/pam_permit/Makefile.am: Include Make.xml.rules.
2372 * modules/pam_permit/pam_permit.8.xml: New.
2373 * modules/pam_permit/pam_permit.8: New, generated from xml file.
2374 * modules/pam_permit/README.xml: New.
2375 * modules/pam_permit/README: Regenerated from xml file.
2377 * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
2378 * modules/pam_nologin/pam_nologin.8.xml: New.
2379 * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
2380 * modules/pam_nologin/README.xml: New.
2381 * modules/pam_nologin/README: Regenerated from xml file.
2383 2006-06-03 Thorsten Kukuk <kukuk@thkukuk.de>
2385 * modules/pam_motd/Makefile.am: Include Make.xml.rules.
2386 * modules/pam_motd/pam_motd.8.xml: New.
2387 * modules/pam_motd/pam_motd.8: New, generated from xml file.
2388 * modules/pam_motd/README.xml: New.
2389 * modules/pam_motd/README: New, generated from xml file.
2391 2006-06-02 Thorsten Kukuk <kukuk@thkukuk.de>
2393 * modules/pam_mail/Makefile.am: Include Make.xml.rules.
2394 * modules/pam_mail/pam_mail.8.xml: New.
2395 * modules/pam_mail/pam_mail.8: New, generated from xml file.
2396 * modules/pam_mail/README.xml: New.
2397 * modules/pam_mail/README: Regenerated from xml file.
2399 * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
2400 * modules/pam_localuser/pam_localuser.8.xml: New.
2401 * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
2402 * modules/pam_localuser/README.xml: New.
2403 * modules/pam_localuser/README: Regenerated from xml file.
2405 * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
2406 * doc/man/pam.3: Likewise.
2407 * doc/man/pam.conf.5: Likewise.
2408 * doc/man/pam_acct_mgmt.3: Likewise.
2409 * doc/man/pam_authenticate.3: Likewise.
2410 * doc/man/pam_chauthtok.3: Likewise.
2411 * doc/man/pam_close_session.3: Likewise.
2412 * doc/man/pam_conv.3: Likewise.
2413 * doc/man/pam_end.3: Likewise.
2414 * doc/man/pam_error.3: Likewise.
2415 * doc/man/pam_fail_delay.3: Likewise.
2416 * doc/man/pam_get_data.3: Likewise.
2417 * doc/man/pam_get_item.3: Likewise.
2418 * doc/man/pam_get_user.3: Likewise.
2419 * doc/man/pam_getenv.3: Likewise.
2420 * doc/man/pam_getenvlist.3: Likewise.
2421 * doc/man/pam_info.3: Likewise.
2422 * doc/man/pam_open_session.3: Likewise.
2423 * doc/man/pam_prompt.3: Likewise.
2424 * doc/man/pam_putenv.3: Likewise.
2425 * doc/man/pam_set_data.3: Likewise.
2426 * doc/man/pam_set_item.3: Likewise.
2427 * doc/man/pam_setcred.3: Likewise.
2428 * doc/man/pam_sm_acct_mgmt.3: Likewise.
2429 * doc/man/pam_start.3: Likewise.
2430 * doc/man/pam_strerror.3: Likewise.
2431 * doc/man/pam_syslog.3: Likewise.
2432 * modules/pam_access/access.conf.5: Likewise.
2433 * modules/pam_access/pam_access.8: Likewise.
2434 * modules/pam_cracklib/pam_cracklib.8: Likewise.
2435 * modules/pam_deny/pam_deny.8: Likewise.
2436 * modules/pam_echo/pam_echo.8: Likewise.
2437 * modules/pam_env/pam_env.8: Likewise.
2438 * modules/pam_env/pam_env.conf.5: Likewise.
2439 * modules/pam_exec/pam_exec.8: Likewise.
2440 * modules/pam_filter/pam_filter.8: Likewise.
2441 * modules/pam_ftp/pam_ftp.8: Likewise.
2442 * modules/pam_group/group.conf.5: Likewise.
2443 * modules/pam_group/pam_group.8: Likewise.
2444 * modules/pam_issue/pam_issue.8: Likewise.
2445 * modules/pam_lastlog/pam_lastlog.8: Likewise.
2446 * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
2447 * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
2448 * modules/pam_umask/pam_umask.8: Likewise.
2450 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
2451 dngettext if available [#1427738].
2452 * configure.in: Check for dngettext [#1427738].
2453 * po/*.po: Update to dngettext usage.
2455 * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
2456 * modules/pam_listfile/pam_listfile.8.xml: New.
2457 * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
2458 * modules/pam_listfile/README.xml: New.
2459 * modules/pam_listfile/README: Regenerated from xml file.
2461 2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
2463 * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
2464 * modules/pam_lastlog/pam_lastlog.8.xml: New.
2465 * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
2466 * modules/pam_lastlog/README.xml: New.
2467 * modules/pam_lastlog/README: Regenerated from xml file.
2469 * modules/pam_group/Makefile.am: Include Make.xml.rules.
2470 * modules/pam_group/group.conf.5.xml: New.
2471 * modules/pam_group/group.conf.5: New, generated from xml file.
2472 * modules/pam_group/pam_group.8.xml: New.
2473 * modules/pam_group/pam_group.8: New, generated from xml file.
2474 * modules/pam_group/README.xml: New.
2475 * modules/pam_group/README: Regenerated from xml file.
2477 * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
2478 * modules/pam_ftp/pam_ftp.8.xml: New.
2479 * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
2480 * modules/pam_ftp/README.xml: New.
2481 * modules/pam_ftp/README: Regenerated from xml file.
2483 * modules/pam_issue/Makefile.am: Include Make.xml.rules.
2484 * modules/pam_issue/pam_issue.8.xml: New.
2485 * modules/pam_issue/pam_issue.8: New, generated from xml file.
2486 * modules/pam_issue/README.xml: New.
2487 * modules/pam_issue/README: Regenerated from xml file.
2489 * modules/pam_filter/Makefile.am: Include Make.xml.rules.
2490 * modules/pam_filter/pam_filter.8.xml: New.
2491 * modules/pam_filter/pam_filter.8: New, generated from xml file.
2492 * modules/pam_filter/README.xml: New.
2493 * modules/pam_filter/README: Regenerated from xml file.
2495 2006-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
2497 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
2498 directory documentation.
2500 * modules/pam_umask/Makefile.am: Include Make.xml.rules.
2501 * modules/pam_umask/pam_umask.8.xml: New.
2502 * modules/pam_umask/pam_umask.8: New, generated from xml file.
2503 * modules/pam_umask/README.xml: New.
2504 * modules/pam_umask/README: Regenerated from xml file.
2506 2006-05-29 Thorsten Kukuk <kukuk@thkukuk.de>
2508 * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
2509 * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
2510 * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
2511 * modules/pam_mkhomedir/README.xml: New.
2512 * modules/pam_mkhomedir/README: Regenerated from xml file.
2514 2006-05-23 Thorsten Kukuk <kukuk@thkukuk.de>
2516 * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
2519 2006-05-22 Thorsten Kukuk <kukuk@thkukuk.de>
2521 * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
2522 Fix memory leaks, [#1490956] found by Coverity.
2524 * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
2525 value of pam_get_user().
2526 (tally_get_data): Check if oldtime is not NULL.
2527 [#1489818] found by Coverity.
2529 * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
2530 ignore return value of stat(). [#1489808] found by Coverity.
2532 * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
2533 NULL pointer dereference. [#1489792] found by Coverity.
2535 * libpam/Makefile.am: bump release number of libpam.so.
2536 * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
2537 [#1489804] found by Coverity.
2539 * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
2540 str, [#1489658] found by Coverity.
2542 * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
2543 a potential NULL pointer dereference.
2544 (pam_sm_chauthtok): Remove dead code.
2545 [#1489634] found by Coverity.
2547 2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
2549 * configure.in: Check for fseeko.
2550 * modules/pam_tally/pam_tally.c: Use fseeko if available
2551 (Based on patch by IBM).
2553 2006-05-04 Thorsten Kukuk <kukuk@thkukuk.de>
2555 * release version 0.99.4.0
2557 * libpam/pam_strerror.c: Unify error messages.
2559 * po/zh_TW.po: Adjust for last pam_strerror changes.
2560 * po/zh_CN.po: Likewise.
2561 * po/uk.po: Likewise.
2562 * po/tr.po: Likewise.
2563 * po/pt.po: Likewise.
2564 * po/pt_BR.po: Likewise.
2565 * po/pl.po: Likewise.
2566 * po/ja.po: Likewise.
2567 * po/nl.po: Likewise.
2568 * po/nb.po: Likewise.
2569 * po/it.po: Likewise.
2570 * po/hu.po: Likewise.
2571 * po/fr.po: Likewise.
2572 * po/fi.po: Likewise.
2573 * po/es.po: Likewise.
2574 * po/de.po: Likewise.
2575 * po/cs.po: Likewise.
2577 * doc/man/pam.3.xml: New.
2578 * doc/man/pam.3. New, generated from XML file.
2580 * doc/man/pam_sm_acct_mgmt.3.xml: New.
2581 * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
2583 * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
2586 * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
2588 2006-05-02 Thorsten Kukuk <kukuk@thkukuk.de>
2590 * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
2591 different strings for plural or not [#1427738]
2593 * po/*.po: Adjust for pam_unix.so translation fix.
2595 * modules/pam_tally/pam_tally.c: Always close file handle
2596 in error case, don't close it depending on *TALLY value [#1478180]
2598 2006-04-21 Thorsten Kukuk <kukuk@thkukuk.de>
2600 * po/fr.po: Updated.
2602 2006-04-11 Thorsten Kukuk <kukuk@thkukuk.de>
2604 * po/km.po: Updated.
2606 2006-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
2608 * po/LINGUAS: Add uk.
2611 * po/cs.po: Updated.
2612 * po/po/es.po: Updated.
2613 * po/fi.po: Updated.
2614 * po/fr.po: Updated.
2615 * po/hu.po: Updated.
2616 * po/it.po: Updated.
2617 * po/ja.po: Updated.
2618 * po/nb.po: Updated.
2619 * po/pl.po: Updated.
2620 * po/pt.po: Updated.
2621 * po/pt_BR.po: Updated.
2622 * po/zh_CN.po: Updated.
2623 * po/zh_TW.po: Updated.
2625 2006-03-21 Thorsten Kukuk <kukuk@thkukuk.de>
2627 * configure.in: Remove ALL_LINGUAS.
2629 * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
2631 2006-03-13 Thorsten Kukuk <kukuk@thkukuk.de>
2633 * doc/man/pam_error.3.xml: New.
2634 * doc/man/pam_error.3: New, generated from XML file.
2635 * doc/man/pam_verror.3: New, generated from XML file.
2636 * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
2638 * modules/pam_lastlog/Makefile.am: Fix typo.
2640 * modules/pam_lastlog/pam_lastlog.c: Move comment for
2641 translators in right line.
2642 * po/*.po: Update po files with comment for translator.
2644 2006-03-12 Thorsten Kukuk <kukuk@thkukuk.de>
2646 * doc/man/Makefile.am: Add new manual pages.
2648 * doc/man/pam.conf.5.xml: Replace link with content
2650 * doc/man/pam.conf.5: Regenerated from XML file.
2652 * doc/man/pam_info.3.xml: New.
2653 * doc/man/pam_info.3: New, generated from XML file.
2654 * doc/man/pam_vinfo.3: New, generated from XML file.
2656 * doc/man/pam_conv.3.xml: New.
2657 * doc/man/pam_conv.3: New, generated from XML file.
2659 * doc/man/pam_putenv.3.xml: New.
2660 * doc/man/pam_putenv.3: New, generated from XML file.
2662 * doc/man/pam_getenv.3.xml: New.
2663 * doc/man/pam_getenv.3: New, generated from XML file.
2665 * doc/man/pam_getenvlist.3.xml: New.
2666 * doc/man/pam_getenvlist.3: New, generated from XML file.
2668 * libpam/pam_item.c (pam_get_user): Check for valid pamh before
2671 * configure.in: create tests/Makefile
2672 * Makefile.am (SUBDIRS): Add tests
2673 * tests/Makefile.am: New.
2674 * tests/tst-dlopen.c: New.
2675 * tests/tst-pam_acct_mgmt.c: New.
2676 * tests/tst-pam_authenticate.c: New.
2677 * tests/tst-pam_chauthtok.c: New.
2678 * tests/tst-pam_close_session.c: New.
2679 * tests/tst-pam_end.c: New.
2680 * tests/tst-pam_fail_delay.c: New.
2681 * tests/tst-pam_getenvlist.c: New.
2682 * tests/tst-pam_get_item.c: New.
2683 * tests/tst-pam_open_session.c: New.
2684 * tests/tst-pam_setcred.c: New.
2685 * tests/tst-pam_set_item.c: New.
2686 * tests/tst-pam_start.c: New.
2687 * tests/tst-pam_get_user.c: New.
2689 * modules/pam_access/Makefile.am: Add rules for make check
2690 * modules/pam_access/tst-pam_access: New
2691 * modules/pam_cracklib/Makefile.am: Add rules for make check
2692 * modules/pam_cracklib/tst-pam_cracklib: New
2693 * modules/pam_debug/Makefile.am: Add rules for make check
2694 * modules/pam_debug/tst-pam_debug: New
2695 * modules/pam_deny/Makefile.am: Add rules for make check
2696 * modules/pam_deny/tst-pam_deny: New
2697 * modules/pam_echo/Makefile.am: Add rules for make check
2698 * modules/pam_echo/tst-pam_echo: New
2699 * modules/pam_env/Makefile.am: Add rules for make check
2700 * modules/pam_env/tst-pam_env: New
2701 * modules/pam_exec/Makefile.am: Add rules for make check
2702 * modules/pam_exec/tst-pam_exec: New
2703 * modules/pam_filter/Makefile.am: Add rules for make check
2704 * modules/pam_filter/tst-pam_filter: New
2705 * modules/pam_ftp/Makefile.am: Add rules for make check
2706 * modules/pam_ftp/tst-pam_ftp: New
2707 * modules/pam_group/Makefile.am: Add rules for make check
2708 * modules/pam_group/tst-pam_group: New
2709 * modules/pam_issue/Makefile.am: Add rules for make check
2710 * modules/pam_issue/tst-pam_issue: New
2711 * modules/pam_lastlog/Makefile.am: Add rules for make check
2712 * modules/pam_lastlog/tst-pam_lastlog: New
2713 * modules/pam_limits/Makefile.am: Add rules for make check
2714 * modules/pam_limits/tst-pam_limits: New
2715 * modules/pam_listfile/Makefile.am: Add rules for make check
2716 * modules/pam_listfile/tst-pam_listfile: New
2717 * modules/pam_localuser/Makefile.am: Add rules for make check
2718 * modules/pam_localuser/tst-pam_localuser: New
2719 * modules/pam_mail/Makefile.am: Add rules for make check
2720 * modules/pam_mail/tst-pam_mail: New
2721 * modules/pam_mkhomedir/Makefile.am: Add rules for make check
2722 * modules/pam_mkhomedir/tst-pam_mkhomedir: New
2723 * modules/pam_motd/Makefile.am: Add rules for make check
2724 * modules/pam_motd/tst-pam_motd: New
2725 * modules/pam_nologin/Makefile.am: Add rules for make check
2726 * modules/pam_nologin/tst-pam_nologin: New
2727 * modules/pam_permit/Makefile.am: Add rules for make check
2728 * modules/pam_permit/tst-pam_permit: New
2729 * modules/pam_rhosts/Makefile.am: Add rules for make check
2730 * modules/pam_rhosts/tst-pam_rhosts: New
2731 * modules/pam_rootok/Makefile.am: Add rules for make check
2732 * modules/pam_rootok/tst-pam_rootok: New
2733 * modules/pam_securetty/Makefile.am: Add rules for make check
2734 * modules/pam_securetty/tst-pam_securetty: New
2735 * modules/pam_selinux/Makefile.am: Add rules for make check
2736 * modules/pam_selinux/tst-pam_selinux: New
2737 * modules/pam_shells/Makefile.am: Add rules for make check
2738 * modules/pam_shells/tst-pam_shells: New
2739 * modules/pam_stress/Makefile.am: Add rules for make check
2740 * modules/pam_stress/tst-pam_stress: New
2741 * modules/pam_succeed_if/Makefile.am: Add rules for make check
2742 * modules/pam_succeed_if/tst-pam_succeed_if: New
2743 * modules/pam_tally/Makefile.am: Add rules for make check
2744 * modules/pam_tally/tst-pam_tally: New
2745 * modules/pam_time/Makefile.am: Add rules for make check
2746 * modules/pam_time/tst-pam_time: New
2747 * modules/pam_umask/Makefile.am: Add rules for make check
2748 * modules/pam_umask/tst-pam_umask: New
2749 * modules/pam_unix/Makefile.am: Add rules for make check
2750 * modules/pam_unix/tst-pam_unix: New
2751 * modules/pam_userdb/Makefile.am: Add rules for make check
2752 * modules/pam_userdb/tst-pam_userdb: New
2753 * modules/pam_warn/Makefile.am: Add rules for make check
2754 * modules/pam_warn/tst-pam_warn: New
2755 * modules/pam_wheel/Makefile.am: Add rules for make check
2756 * modules/pam_wheel/tst-pam_wheel: New
2757 * modules/pam_xauth/Makefile.am: Add rules for make check
2758 * modules/pam_xauth/tst-pam_xauth: New
2760 2006-03-11 Thorsten Kukuk <kukuk@thkukuk.de>
2762 * doc/man/pam_fail_delay.3.xml: New.
2763 * doc/man/pam_fail_delay.3: New, generated from xml.
2764 * doc/man/pam_prompt.3.xml: New.
2765 * doc/man/pam_prompt.3: New, generated from xml.
2766 * doc/man/pam_syslog.3.xml: New.
2767 * doc/man/pam_syslog.3: New, generated from xml.
2768 * doc/man/pam_vprompt.3: New, generated from xml.
2769 * doc/man/pam_vsyslog.3: New, generated from xml.
2771 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
2773 * po/km.po: Update Khmer translation.
2775 2006-02-24 Thorsten Kukuk <kukuk@thkukuk.de>
2777 * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
2778 version from #1425487.
2779 * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
2780 * modules/pam_succeed_if/Makefile.am: Include XML rules.
2781 * modules/pam_succeed_if/README.xml: New.
2782 * modules/pam_succeed_if/README: Regenerated from xml.
2783 * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
2786 2006-02-22 Thorsten Kukuk <kukuk@thkukuk.de>
2788 * configure.in: Fix check for incomplete libaudit installations
2789 (Patch from Ruediger Oertel <ro@suse.de>).
2791 * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
2792 correct last_login field [#1427401].
2794 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
2795 format string for translation to allow reorder [#1428269].
2796 * po/*.po: Update with last pam_lastlog change.
2799 2006-02-17 Thorsten Kukuk <kukuk@thkukuk.de>
2801 * doc/man/Makefile.am: Add new manual pages.
2802 * doc/man/pam_end.3: Regenerated from xml file.
2803 * doc/man/pam_end.3.xml: Document freeing of item data.
2804 * doc/man/pam_get_user.3: New.
2805 * doc/man/pam_get_user.3.xml: New.
2806 * modules/pam_access/access.conf.5.xml: Fix typos.
2807 * modules/pam_env/Makefile.am: Add new manual pages.
2808 * modules/pam_env/README: Regenerate from xml file.
2809 * modules/pam_env/README.xml: New.
2810 * modules/pam_env/pam_env.8: New.
2811 * modules/pam_env/pam_env.8.xml: New.
2812 * modules/pam_env/pam_env.conf.5: New.
2813 * modules/pam_env/pam_env.conf.5.xml New.
2815 2006-02-14 Thorsten Kukuk <kukuk@thkukuk.de>
2817 * po/fi.po: Updated translations.
2818 * po/pl.po: Likewise.
2819 * po/km.po: New translation.
2820 * configure.in: Add km as new language.
2822 2006-02-13 Thorsten Kukuk <kukuk@thkukuk.de>
2824 * modules/pam_echo/pam_echo.8.xml: New.
2825 * modules/pam_echo/pam_echo.8: Regenerated from xml file.
2826 * modules/pam_echo/Makefile.am: Include Make.xml.rules.
2827 * modules/pam_echo/pam_echo.c: Fix return value.
2829 * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
2831 2006-02-12 Thorsten Kukuk <kukuk@thkukuk.de>
2833 * configure.in: Add doc/man/Makefile.
2834 * Make.xml.rules: Enable xincludes for manual pages.
2835 * doc/Makefile.am (EXRA_DIST): Remove manual pages.
2836 (SUBDIR): Add man subdirectory.
2837 * doc/man/Makefile.am: New.
2838 * doc/man/pam_acct_mgmt.3: New.
2839 * doc/man/pam_acct_mgmt.3.xml: New.
2840 * doc/man/pam_get_data.3: New.
2841 * doc/man/pam_get_data.3.xml: New.
2842 * doc/man/pam_set_data.3: New.
2843 * doc/man/pam_set_data.3.xml: New.
2844 * doc/man/pam.8.xml: New.
2845 * doc/man/pam.8: Regenerated from xml file.
2846 * doc/man/pam_authenticate.3.xml: New.
2847 * doc/man/pam_authenticate.3: Regenerated from xml file.
2848 * doc/man/pam_chauthtok.3.xml: New.
2849 * doc/man/pam_chauthtok.3: Regenerated from xml file.
2850 * doc/man/pam_close_session.3.xml: New.
2851 * doc/man/pam_close_session.3: Regenerated from xml file.
2852 * doc/man/pam_end.3.xml: New.
2853 * doc/man/pam_end.3: Regenerated from xml file.
2854 * doc/man/pam_fail_delay.3.xml: New.
2855 * doc/man/pam_fail_delay.3: Regenerated from xml file.
2856 * doc/man/pam_get_item.3.xml: New.
2857 * doc/man/pam_get_item.3: Regenerated from xml file.
2858 * doc/man/pam_item_types.inc.xml: New.
2859 * doc/man/pam_open_session.3.xml: New.
2860 * doc/man/pam_open_session.3: Regenerated from xml file.
2861 * doc/man/pam_set_item.3.xml: New.
2862 * doc/man/pam_set_item.3: Regenerated from xml file.
2863 * doc/man/pam_setcred.3.xml: New.
2864 * doc/man/pam_setcred.3: Regenerated from xml file.
2865 * doc/man/pam_start.3.xml: New.
2866 * doc/man/pam_start.3: Regenerated from xml file.
2867 * doc/man/pam_strerror.3.xml: New.
2868 * doc/man/pam_strerror.3: Regenerated from xml file.
2869 * doc/man/template-man: Removed.
2871 2006-02-10 Thorsten Kukuk <kukuk@thkukuk.de>
2873 * configure.in: Remove pam_pwdb support.
2874 * modules/Makefile.am: remove pam_pwdb.
2875 * modules/pam_pwdb: Remove complete directory.
2876 * libpam/Makefile.am: Remove LIBPWDB references.
2877 * libpam/pam_static_modules.h: Remove pam_pwdb references.
2878 * doc/modules/pam_pwdb.sgml: Removed.
2879 * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
2880 * doc/pam_source.sgml: Remove references to libpwdb.
2881 * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
2882 * doc/modules/pam_group.sgml: Likewise.
2883 * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
2884 * doc/modules/pam_userdb.sgml: Likewise.
2885 * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
2887 * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
2888 * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
2890 * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
2891 * modules/pam_cracklib/Makefile.am: Likewise.
2892 * modules/pam_deny/Makefile.am: Likewise.
2893 * modules/pam_exec/Makefile.am: Likewise.
2895 2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
2897 * configure.in: Check for text browser.
2898 * Make.xml.rules: Add rule to generate README from README.xml.
2900 * modules/pam_access/Makefile.am: Include Make.xml.rules.
2901 * modules/pam_access/README: Regenerated from README.xml.
2902 * modules/pam_access/README.xml: New.
2903 * modules/pam_access/access.conf: Extended by new examples.
2904 * modules/pam_access/access.conf.5: New, generated from xml file.
2905 * modules/pam_access/access.conf.5.xml: New.
2906 * modules/pam_access/pam_access.8: New, generated from xml file.
2907 * modules/pam_access/pam_access.8.xml: New.
2908 * modules/pam_access/pam_access.c: Add rules for IPv6 and
2910 Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
2912 * modules/pam_deny/Makefile.am: Include Make.xml.rules.
2913 * modules/pam_deny/pam_deny.8.xml: New.
2914 * modules/pam_deny/pam_deny.8: New, generated from xml file.
2915 * modules/pam_deny/README.xml: New.
2916 * modules/pam_deny/README: Regenerated from xml file.
2918 * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
2919 * modules/pam_cracklib/pam_cracklib.8.xml: New.
2920 * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
2921 * modules/pam_cracklib/README.xml: New.
2922 * modules/pam_cracklib/README: Regenerated from xml file.
2924 * modules/pam_exec/Makefile.am: Add rule to generate README.
2925 * modules/pam_exec/README: Regenerated from xml file.
2926 * modules/pam_exec/pam_exec.8: Regenerated from xml file.
2927 * modules/pam_exec/pam_exec.8.xml: Syntax files.
2929 2006-02-06 Thorsten Kukuk <kukuk@thkukuk.de>
2932 * po/pt.po: Update translations.
2933 * configure.in: Add nl as new language.
2935 2006-01-30 Thorsten Kukuk <kukuk@thkukuk.de>
2937 * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
2938 * modules/pam_exec/Makefile.am: Include Make.xml.rules.
2940 * Make.xml.rules: New.
2942 * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
2944 2006-01-27 Thorsten Kukuk <kukuk@thkukuk.de>
2946 * configure.in: Prefer libdb over libndbm, fix check for
2947 libcrack and remove not needed BACKUP_LIBS.
2949 2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
2951 * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
2953 * po/de.po: Fix one translation.
2955 * configure.in: Add modules/pam_exec.
2956 * modules/Makefile.am: Add pam_exec subdirectory.
2957 * modules/pam_exec/README: New.
2958 * modules/pam_exec/Makefile.am: New.
2959 * modules/pam_exec/pam_exec.8: New.
2960 * modules/pam_exec/pam_exec.c: New.
2961 * modules/pam_exec/pam_exec.8.xml: New.
2962 * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
2963 * po/*.po: Merge new pam_exec strings.
2965 * libpam/pam_static_modules.h: New.
2966 * Makefile.am: Reorder subdirectories for static modules.
2967 * configure.in: Add --enable-static-modules option.
2968 * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
2969 necessary, add pam_static_modules.h, link against all PAM
2970 module object files if STATIC_MODULES is defined.
2971 * libpam/pam_static.c: Remove old _static_module* includes,
2972 include pam_static_modules.h.
2974 * configure.in: Add checks for xsltproc, xmllint and docbook
2976 * m4/jh_path_xml_catalog.m4: New.
2978 2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
2980 * modules/pam_succeed_if/pam_succeed_if.c: Add support for
2982 * modules/pam_xauth/pam_xauth.c: Likewise.
2984 * libpam/pam_static.c (_pam_open_static_handler): Add pamh
2986 * libpam/pam_private.h: Adjust prototype.
2987 * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
2988 _pam_open_static_handler call.
2990 * configure.in: Don't define PAM_DYNAMIC.
2991 * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
2992 include pam_dynamic.h
2993 * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
2994 exclude functions if we compile with PAM_STATIC.
2995 * libpam/pam_dynamic.h: Remove.
2996 * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
2997 * libpam/Makefile.am: Bump version number of libpam, remove
3000 2006-01-21 Thorsten Kukuk <kukuk@thkukuk.de>
3002 * modules/pam_listfile/pam_listfile.c: Add support for session
3003 and password management.
3005 2006-01-19 Thorsten Kukuk <kukuk@thkukuk.de>
3007 * doc/specs/Makefile.am (spec): Add padout to fix parallel
3008 build (Reported by Andreas Haumer <andreas@xss.co.at>).
3010 2006-01-15 Thorsten Kukuk <kukuk@thkukuk.de>
3012 * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
3015 2006-01-13 Thorsten Kukuk <kukuk@thkukuk.de>
3017 * release version 0.99.3.0
3019 * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
3022 * modules/pam_umask/pam_umask.c (search_key): Don't ignore
3023 EOF/error return value from fgets().
3025 * configure.in: Check for getline and getdelim
3027 * po/fi.po: Add new translations.
3028 * po/de.po: Likewise.
3029 * po/es.po: Likewise.
3030 * po/fr.po: Likewise.
3031 * po/it.po: Likewise.
3032 * po/ja.po: Likewise.
3033 * po/pt_BR.po: Likewise.
3034 * po/zh_CH.po: Likewise.
3035 * po/zh_TW.po: Likewise.
3037 2006-01-13 Dmitry V. Levin <ldv@altlinux.org>
3039 * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
3040 call with %m specifier.
3042 2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
3044 * configure.in: Add check for -fpie/-pie
3045 * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
3046 upperLOWER with -fpie/-pie if supported.
3047 * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
3048 with -fpie/-pie if supported.
3050 2006-01-12 Steve Grubb <sgrubb@redhat.com>
3052 * configure.in: Add check for audit library.
3053 * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
3054 (libpam_la_SOURCES): Add pam_audit.c.
3055 * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
3056 * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
3057 * libpam/pam_password.c (pam_chauthtok): Likewise.
3058 * libpam/pam_session.c (pam_open_session),
3059 (pam_close_session): Likewise.
3060 * libpam/pam_private.h: Add audit_state member to pam_handle,
3061 declare _pam_auditlog and _pam_audit_end.
3062 * libpam/pam_start.c (pam_start): Initialize audit_state.
3063 * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
3065 * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
3066 * NEWS: Note about added auditing.
3068 2006-01-11 Thorsten Kukuk <kukuk@thkukuk.de>
3070 * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
3072 * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
3073 if we compile libpam itself.
3075 * po/hu.po: Update with new translations.
3077 2006-01-08 Thorsten Kukuk <kukuk@thkukuk.de>
3079 * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
3080 instead of PAM_AUTHTOK_RECOVER_ERR.
3081 * modules/pam_pwdb/support.-c: Likewise.
3082 * modules/pam_unix/support.c: Likewise.
3083 * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
3084 * libpam/pam_strerror.c (pam_strerror): Likewise.
3086 * libpam/include/security/_pam_compat.h: Define
3087 PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
3089 * libpam/include/security/_pam_types.h: Rename
3090 PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
3092 2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
3094 * libpam/include/security/_pam_types.h: Remove nonnull attribute
3095 from third paramter (item) of pam_get_item.
3096 * libpam/Makefile.am: Bump version number of shared library.
3098 2005-12-21 Tomas Mraz <t8m@centrum.cz>
3100 * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
3101 (evaluate_notingroup): Simplified.
3102 (evaluate_innetgr), (evaluate_notinnetgr): New functions.
3103 (evaluate): Added calls to evaluate_(not)innetgr().
3104 * modules/pam_succeed_if/README: Documented netgroup matching.
3105 * NEWS: Mentioned the added netgroup matching support.
3107 2005-12-20 Thorsten Kukuk <kukuk@thkukuk.de>
3109 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
3110 strftime instead of ctime.
3112 * po/de.po: Fix typo.
3114 2005-12-19 Thorsten Kukuk <kukuk@thkukuk.de>
3116 * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
3117 Reported by Charles_H_Bedford@nbc.gov.
3119 * modules/pam_time/pam_time.c (check_account): Implement
3120 support for netgroups.
3122 * modules/pam_time/time.conf: Document usage of netgroups.
3124 2005-12-16 Thorsten Kukuk <kukuk@thkukuk.de>
3126 * modules/pam_group/pam_group.c (check_account): Implement
3127 support for netgroups.
3129 * modules/pam_group/group.conf: Add all documentation to this
3130 example config file and don't reference to outdated configs.
3132 * modules/pam_group/README: New.
3134 * modules/pam_group/Makefile.am: Add README to EXTRADIST.
3136 2005-12-15 Thorsten Kukuk <kukuk@suse.de>
3138 * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
3139 error if user logins the first time.
3141 * modules/pam_lastlog/README: New.
3143 * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
3145 2005-12-14 Thorsten Kukuk <kukuk@suse.de>
3147 * modules/pam_deny/pam_deny.c: Fix comment.
3149 * doc/pam_appl.sgml: Fix typo.
3151 Reported by Russell Bateman <russ@windofkeltia.com>
3153 2005-12-12 Thorsten Kukuk <kukuk@thkukuk.de>
3155 * release version 0.99.2.1
3157 * po/de.po: Remove new fuzzy entry
3159 * NEWS: Add 0.99.2.1 changes
3161 * configure.in: bump version number to 0.99.2.1
3163 2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
3165 Cleanup pam_syslog messages.
3167 * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
3168 * modules/pam_filter/pam_filter.c (set_filter): Append %m
3169 specifier to pam_syslog messages where appropriate.
3170 * modules/pam_group/pam_group.c (read_field): Likewise.
3171 * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
3172 (create_homedir): Do not use make_remark() wrapper, call
3173 pam_info() directly. Call pam_syslog() right after failed
3174 operation and append %m specifier to pam_syslog messages where
3176 * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
3177 sequence of malloc(), strcpy() and strcat() calls with asprintf().
3178 Append %m specifier to pam_syslog messages where appropriate.
3179 * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
3180 Append %m specifier to pam_syslog messages where appropriate.
3181 * modules/pam_shells/pam_shells.c (perform_check): Likewise.
3183 2005-12-12 Tomas Mraz <t8m@centrum.cz>
3185 * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
3186 * po/Linux-PAM.pot: Likewise.
3187 * po/de.po: Likewise.
3188 * po/es.po: Likewise.
3189 * po/fi.po: Likewise.
3190 * po/fr.po: Likewise.
3191 * po/hu.po: Likewise.
3192 * po/it.po: Likewise.
3193 * po/ja.po: Likewise.
3194 * po/nb.po: Likewise.
3195 * po/pa.po: Likewise.
3196 * po/pl.po: Likewise.
3197 * po/pt.po: Likewise.
3198 * po/pt_BR.po: Likewise.
3199 * po/zh_CN.po: Likewise.
3200 * po/zh_TW.po: Likewise.
3201 * po/de.po: Add new translation, fixed typo in string.
3203 2005-12-12 Mike Becher <Mike.Becher@lrz-muenchen.de>
3205 * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
3207 2005-12-12 Thorsten Kukuk <kukuk@suse.de>
3209 * modules/pam_mail/README: Document "quiet" and "standard"
3212 2005-12-07 Thorsten Kukuk <kukuk@suse.de>
3214 * modules/pam_mail/pam_mail.c: Modify assembling of output
3215 for easier translation.
3217 * po/de.po: Translate new pam_mail messages.
3220 2005-11-24 Thorsten Kukuk <kukuk@thkukuk.de>
3222 * po/de.po: Add new translation, fix wrong format specifier.
3223 * po/cs.po: Fix wrong format specifier.
3224 * po/es.po: Likewise.
3225 * po/fi.po: Likewise.
3226 * po/fr.po: Likewise.
3227 * po/hu.po: Likewise.
3228 * po/it.po: Likewise.
3229 * po/ja.po: Likewise.
3230 * po/nb.po: Likewise.
3231 * po/pa.po: Likewise.
3232 * po/pl.po: Likewise.
3233 * po/pt.po: Likewise.
3234 * po/pt_BR.po: Likewise.
3235 * po/zh_CN.po: Likewise.
3236 * po/zh_TW.po: Likewise.
3238 2005-11-24 Dmitry V. Levin <ldv@altlinux.org>
3240 * config.h.in: Remove generated file.
3241 * .cvsignore: Add config.h.in.
3243 * configure.in: Do not check for strerror.
3244 * libpam_misc/misc_conv.c (read_string): Replace strerror()
3245 call with %m specifier.
3246 * libpamc/pamc_converse.c (pamc_converse): Likewise.
3247 * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
3248 * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
3250 * modules/pam_selinux/pam_selinux.c (security_label_tty):
3252 (security_restorelabel_tty, security_label_tty): Append %m
3253 specifier where appropriate.
3254 * modules/pam_selinux/pam_selinux_check.c (main): Replace
3255 strerror() call with %m specifier.
3256 * modules/pam_unix/pam_unix_passwd.c (save_old_password,
3257 _update_passwd, _update_shadow): Likewise.
3258 * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
3259 * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
3260 * po/Linux-PAM.pot: Update strings from pam_selinux.
3261 * po/cs.po: Likewise.
3262 * po/de.po: Likewise.
3263 * po/es.po: Likewise.
3264 * po/fi.po: Likewise.
3265 * po/fr.po: Likewise.
3266 * po/hu.po: Likewise.
3267 * po/it.po: Likewise.
3268 * po/ja.po: Likewise.
3269 * po/nb.po: Likewise.
3270 * po/pa.po: Likewise.
3271 * po/pl.po: Likewise.
3272 * po/pt.po: Likewise.
3273 * po/pt_BR.po: Likewise.
3274 * po/zh_CN.po: Likewise.
3275 * po/zh_TW.po: Likewise.
3277 2005-11-23 Thorsten Kukuk <kukuk@suse.de>
3279 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
3280 new variable to fix compiler warning.
3282 * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
3283 don't need to start with /dev/.
3285 2005-11-21 Thorsten Kukuk <kukuk@thkukuk.de>
3287 * release version 0.99.2.0
3289 * libpam_misc/Makefile.am: Increase release number (for change
3292 * NEWS: Adjust for 0.99.2.0
3294 2005-11-17 Thorsten Kukuk <kukuk@thkukuk.de>
3296 * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
3297 Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
3299 2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
3301 * libpam/pam_handlers.c: Replace code for all dlopen variants with
3303 * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
3304 * libpam/pam_dynamic.h: Provide prototypes.
3305 For Mac OS X support [#534205]
3307 2005-11-09 Tomas Mraz <t8m@centrum.cz>
3309 * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
3311 * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
3312 full path tty name. Allow unset tty.
3313 (logic_member): Allow matching ':' in tty name.
3314 * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
3315 full path tty name. Allow unset tty.
3316 (logic_member): Allow matching ':' in tty name.
3318 * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
3321 2005-11-07 Thorsten Kukuk <kukuk@thkukuk.de>
3323 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
3324 correct variable names.
3326 2005-11-06 Steve Langasek <vorlon@debian.org>
3328 * modules/pam_env/pam_env.c: don't treat a missing
3329 /etc/environment as a fatal error when attempting to read it,
3330 and try to read this file by default; this restores the behavior
3331 from Linux-PAM 0.76.
3333 2005-11-02 Tomas Mraz <t8m@centrum.cz>
3335 * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
3338 * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
3339 logic when comparing dates to handle corner cases better [#1245888].
3341 2005-10-31 Thorsten Kukuk <kukuk@suse.de>
3343 * modules/pam_filter/pam_filter.c: Use XCASE only if defined
3346 2005-10-27 Thorsten Kukuk <kukuk@suse.de>
3348 * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
3350 2005-10-26 Tomas Mraz <t8m@centrum.cz>
3352 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
3353 modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
3354 modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
3355 uid to 0 before executing the helper if SELinux is enabled.
3356 * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
3357 if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
3360 2005-10-20 Tomas Mraz <t8m@centrum.cz>
3362 * configure.in: Added check for xauth binary and --with-xauth option.
3363 * config.h.in: Added configurable PAM_PATH_XAUTH.
3364 * modules/pam_xauth/README,
3365 modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
3366 * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
3367 searching xauth binary on multiple places.
3368 (run_coprocess): Don't use execvp as it can be a security risk.
3370 2005-10-04 Steve Langasek <vorlon@debian.org>
3372 * libpam/include/security/pam_malloc.h,
3373 libpam/include/security/pam_modules.h: Declare public header
3374 files extern "C" so that they are C++-safe.
3376 2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
3377 Steve Langasek <vorlon@debian.org>
3379 Cleanup gratuitous use of strdup().
3380 Fix "missing argument" checks.
3382 * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
3383 to conffile and envfile arguments. Do not use x_strdup() for
3384 conffile and envfile initialization. Fix "missing argument"
3386 (_parse_config_file): Take conffile argument of type "const char *"
3387 instead of "char **". Do not free conffile.
3388 (_parse_env_file): Take env_file argument of type "const char *"
3389 instead of "char **". Do not free env_file.
3390 (pam_sm_setcred): Add const qualifier to conf_file and env_file.
3391 Pass conf_file and env_file to _parse_config_file() and
3392 _parse_env_file() by value.
3393 (pam_sm_open_session): Likewise.
3395 * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
3396 users argument. Do not use x_strdup() for users initialization.
3397 (lookup): Add const qualifier to list argument.
3398 (pam_sm_authenticate): Add const qualifier to users argument.
3400 * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
3401 to maildir argument. Do not use x_strdup() for maildir
3402 initialization. Fix "missing argument" check.
3403 (get_folder): Take path_mail argument of type "const char *"
3404 instead of "char **". Do not free path_mail.
3405 (_do_mail): Add const qualifier to path_mail argument.
3406 Pass path_mail to get_folder() by value.
3408 * modules/pam_motd/pam_motd.c: Include <syslog.h>.
3409 (pam_sm_open_session): Add const qualifier to motd_path.
3410 Do not use x_strdup() for motd_path initialization. Do not
3411 free motd_path. Fix "missing argument" check. Add "unknown
3414 * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
3415 qualifier to database and cryptmode arguments. Fix "missing
3417 (pam_sm_authenticate): Add const qualifier to database and cryptmode.
3418 (pam_sm_acct_mgmt): Likewise.
3420 2005-10-01 Steve Langasek <vorlon@debian.org>
3422 * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
3424 2005-09-30 Steve Langasek <vorlon@debian.org>
3426 * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
3427 gratuitous use of strdup().
3429 2005-09-27 Thorsten Kukuk <kukuk@thkukuk.de>
3433 * doc/specs/Makefile.am (install-data-local): Install
3435 (all): Copy rfc if we build outside of source directory.
3437 2005-09-27 Thorsten Kukuk <kukuk@suse.de>
3439 * NEWS: Document removal of pam_radius.
3440 * autogen.sh: Make configure script executeable.
3442 * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
3443 (lex.yy.c): Fixed out of tree build.
3445 * conv/pam_conv1/pam_conv.y: Fix main prototype.
3449 * po/POTFILES.in: Remove files not distributed by tar archive
3450 and not containing strings for translation.
3452 2005-09-26 Tomas Mraz <t8m@centrum.cz>
3454 * NEWS: Add a few missing entries from CHANGELOG.
3456 * AUTHORS: Fixed entries for Toady and me.
3458 * Makefile.am (M4_FILES): Fixed out of tree build.
3459 * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
3460 (spec, lex.yy.c): Fixed out of tree build.
3462 * modules/pam_userdb/README: Document try_first_pass and
3463 use_first_pass options, remove use_authtok option.
3466 2005-09-26 Dmitry V. Levin <ldv@altlinux.org>
3468 * NEWS: Mention changes in pam_lastlog.
3470 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
3473 * autogen.sh: Don't generate NEWS file.
3474 * CHANGELOG: Document it as obsolete.
3476 2005-09-26 Tomas Mraz <t8m@centrum.cz>
3478 * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
3479 _log_err() -> pam_syslog()
3480 (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
3481 * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
3482 _log_err() -> pam_syslog()
3483 * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
3484 (getNISserver, _unix_run_shadow_binary, _update_passwd,
3485 _update_shadow, _do_setpass, _pam_unix_approve_pass,
3486 pam_sm_chauthtok): _log_err() -> pam_syslog()
3487 * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
3488 (pam_sm_open_session, pam_sm_close_session):
3489 _log_err() -> pam_syslog()
3490 * modules/pam_unix/support.c (_log_err, converse): removed
3491 (_make_remark): use pam_prompt() instead of converse()
3492 (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
3493 _unix_verify_password, _unix_read_password):
3494 _log_err() -> pam_syslog()
3495 _cleanup(), _unix_cleanup(): Silence unused param warnings.
3496 (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
3497 _unix_run_helper_binary): Silence incorrect type warnings.
3498 (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
3499 instead of converse().
3500 * modules/pam_unix/support.h (_log_err): removed
3501 * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
3503 2005-09-26 Thorsten Kukuk <kukuk@suse.de>
3505 * configure.in: Add doc/specs/Makefile.
3506 * Makefile.am: Add releasedocs rule.
3507 * doc/Makefile.am: Add specs subdir, remove files from specs
3508 directory, add rfc86.0.txt to releasedocs.
3509 * doc/specs/Makefile.am: New file.
3510 * doc/specs/formatter/parse.y: move from here ...
3511 * doc/specs/parse.y: ... here.
3512 * doc/specs/formatter/parse.lex: move from here ...
3513 * doc/specs/parse.lex: ... here.
3515 * modules/pam_mail/pam_mail.c: Mark missing strings for translation
3516 * po/Linux-PAM.pot: Add new strings from pam_mail
3517 * po/cs.po: Likewise.
3518 * po/de.po: Likewise.
3519 * po/es.po: Likewise.
3520 * po/fi.po: Likewise.
3521 * po/fr.po: Likewise.
3522 * po/hu.po: Likewise.
3523 * po/it.po: Likewise.
3524 * po/ja.po: Likewise.
3525 * po/nb.po: Likewise.
3526 * po/pa.po: Likewise.
3527 * po/pl.po: Likewise.
3528 * po/pt.po: Likewise.
3529 * po/pt_BR.po: Likewise.
3530 * po/zh_CN.po: Likewise.
3531 * po/zh_TW.po: Likewise.
3533 2005-09-23 Tomas Mraz <t8m@centrum.cz>
3535 * modules/pam_access/pam_access.c (from_match): Support NULL from.
3536 (string_match): Support NULL string, add NONE keyword matching it.
3537 (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
3538 * modules/pam_access/access.conf: NONE keyword description
3539 * modules/pam_access/README: NONE keyword description
3541 2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
3543 * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
3544 pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
3545 text of log messages.
3546 (pam_sm_open_session): Replace sequence of malloc(), strcpy()
3547 and strcat() calls with asprintf(). Replace syslog() calls
3550 * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
3551 instead of memcmp() for string comparison.
3553 2005-09-21 Dmitry V. Levin <ldv@altlinux.org>
3555 * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
3556 (parse_args): Add pam_handle_t* argument. Log unrecognized
3558 (perform_check): Log pam_get_user() and malloc() failures.
3559 (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
3560 Pass pam_handle_t* to parse_args().
3562 * modules/pam_mail/pam_mail.c: Include <errno.h>.
3563 Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
3564 NO_MAIL_STANDARD_FORMAT macros.
3565 (parse_args, get_folder): Cleanup error messages.
3566 (get_folder): Fix leak of the path_mail variable in case of
3567 pam_get_user() failure. Cleanup memory management.
3568 (get_mail_status): Add pam_handle_t* argument. Fix leaks of
3569 namelist variable. Cleanup memory management. Log memory
3570 allocation failures. Remove 250-byte limit on Maildir pathname.
3571 (report_mail): Mark text messages for translation.
3572 (_do_mail): Cleanup memory management. Pass pam_handle_t*
3573 to get_mail_status().
3575 * po/Linux-PAM.pot: Update with new strings from pam_mail for
3577 * po/cs.po: Likewise.
3578 * po/de.po: Likewise.
3579 * po/es.po: Likewise.
3580 * po/fi.po: Likewise.
3581 * po/fr.po: Likewise.
3582 * po/hu.po: Likewise.
3583 * po/it.po: Likewise.
3584 * po/ja.po: Likewise.
3585 * po/nb.po: Likewise.
3586 * po/pa.po: Likewise.
3587 * po/pl.po: Likewise.
3588 * po/pt.po: Likewise.
3589 * po/pt_BR.po: Likewise.
3590 * po/zh_CN.po: Likewise.
3591 * po/zh_TW.po: Likewise.
3593 2005-09-20 Thorsten Kukuk <kukuk@suse.de>
3595 * configure.in: Add finish translation.
3598 * acinclude.m4: remove libprelude macros.
3599 * m4/libprelude.m4: New.
3601 * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
3603 * libpamc/Makefile.am (EXTRA_DIST): Add License.
3605 See CHANGELOG for earlier changes.