]> granicus.if.org Git - linux-pam/blob - ChangeLog
Relevant BUGIDs:
[linux-pam] / ChangeLog
1 2006-08-05  Thorsten Kukuk  <kukuk@thkukuk.de>
2
3         * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
4         pam_modutil_getpwnam instead of getpwnam.
5
6         * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
7         svc variable to char pointer for snprintf.
8
9         * configure.in: Generate xtests/Makefile.
10         * Makefile.am (SUBDIRS): Add xtests.
11         * README: Document make check and make xtests.
12         * xtests/Makefile.am: New.
13         * xtests/tst-pam_dispatch1.pamd: New.
14         * xtests/tst-pam_dispatch2.pamd: New.
15         * xtests/tst-pam_dispatch3.pamd: New.
16         * xtests/tst-pam_dispatch1.c: New.
17         * xtests/tst-pam_dispatch2.c: New.
18         * xtests/tst-pam_dispatch3.c: New.
19
20 2006-08-04 Ray Strode  <rstrode@redhat.com>
21
22         * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
23         Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
24
25 2006-08-03  David Howells  <dhowells@redhat.com>
26
27         * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
28         (init_keyrings): Properly handle multiple invocations of the module.
29         (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
30
31 2006-08-03  Tomas Mraz  <t8m@centrum.cz>
32
33         * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
34         New function for list matching.
35         (evaluate_notinlist): Likewise.
36         (evaluate): Add service value match, list matching.
37         * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
38         features.
39
40         * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
41         relabelling error when the tty device doesn't exist (ENOENT).
42
43 2006-08-01  Thorsten Kukuk  <kukuk@thkukuk.de>
44
45         * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
46         rationale about when this function should be used and when not.
47
48         * doc/index.html: Cleanup to look prettier.
49
50 2006-08-01  Thorsten Kukuk  <kukuk@thkukuk.de>
51
52         * libpam/Makefile.am: Bump patchlevel of libpam.
53         * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
54         or [return=bad] is used, don't return PAM_IGNORE. Based on
55         patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
56
57 2006-07-28  Thorsten Kukuk  <kukuk@thkukuk.de>
58
59         * ABOUT-NLS: Upgrade to gettext-0.15.
60         * config.rpath: Likewise.
61         * m4/gettext.m4: Upgrade to gettext-0.15.
62         * m4/inttypes-h.m4: New file, from gettext-0.15.
63         * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
64         * m4/lib-link.m4: Upgrade to gettext-0.15.
65         * m4/lib-prefix.m4: Upgrade to gettext-0.15.
66         * m4/lock.m4: New file, from gettext-0.15.
67         * m4/longdouble.m4: Upgrade to gettext-0.15.
68         * m4/nls.m4: Upgrade to gettext-0.15.
69         * m4/po.m4: Upgrade to gettext-0.15.
70         * m4/size_max.m4: Upgrade to gettext-0.15.
71         * m4/visibility.m4: New file, from gettext-0.15.
72         * po/Makefile.in.in: Upgrade to gettext-0.15.
73
74 2006-07-24  David Quigley   <dpquigl@tycho.nsa.gov>
75
76         * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
77         * modules/pam_namespace/pam_namespace.c: Move includes and
78         data structure definitions from here ...
79         * modules/pam_namespace/pam_namespace.h: ... here. New file.
80
81         * modules/pam_namespace/pam_namespace.c: Move large sections
82         of code into new functions.
83
84 2006-07-24  Thorsten Kukuk  <kukuk@thkukuk.de>
85
86         * doc/adg/Makefile.am: Add uninstall and distclean rules.
87         * doc/mwg/Makefile.am: Likewise.
88         * doc/sag/Makefile.am: Likewise.
89
90 2006-07-08  Daniel Richard G.  <skunk@iskunk.org>
91
92         * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
93         * conf/pam_conv1/pam_conv.lex: Rename to ...
94         * conf/pam_conv1/pam_conv_l.l: ... this.
95         * conf/pam_conv1/pam_conv.y: Rename to ...
96         * conf/pam_conv1/pam_conv_y.y: ... this.
97         * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
98         calls.
99         * doc/Makefile.am: Fix rule to install index.html.
100         * doc/adg/Makefile.am: Fix test usage.
101         * doc/mwg/Makefile.am: Likewise.
102         * doc/sag/Makefile.am: Likewise.
103         * doc/specs/Makefile.am: Fix rules for lex and yacc files.
104         * specs/parse.lex: Rename to ...
105         * doc/specs/parse_l.l: ... this.
106         * doc/specs/parse.y: Rename to ...
107         * doc/specs/parse_y.y: ... this.
108         * libpam/pam_account.c: Fix #if vs. #ifdef.
109         * libpam/pam_audit.c: Likewise.
110         * libpam/pam_auth.c: Likewise.
111         * libpam/pam_password.c: Likewise.
112         * libpam/pam_private.h: Likewise.
113         * libpam/pam_session.c: Likewise.
114         * libpam/pam_start.c: Likewise.
115         * libpam/pam_static.c: Fix "empty sourcefile" warning.
116         * modules/pam_limits/pam_limits.c: Check for __linux, too.
117         * modules/pam_userdb/Makefile.am: Don't run test if no
118         libdb available.
119         * tests/tst-dlopen.c: Include config.h.
120
121 2006-07-03  Dan Yefimov  <dan@D00M.lightwave.net.ru>
122
123         * configure.in: Fixed have_key_syscalls test.
124
125         * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
126         match, removed AI_ADDRCONFIG flag.
127
128 2006-06-30  Tomas Mraz  <t8m@centrum.cz>
129
130         * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
131
132 2006-06-29  Thorsten Kukuk  <kukuk@thkukuk.de>
133
134         * doc/Makefile.am (releasedocs): Fix directory layout.
135         * doc/adg/Makefile.am: Likewise.
136         * doc/mwg/Makefile.am: Likewise.
137         * doc/sag/Makefile.am: Likewise.
138
139 2006-06-28  Thorsten Kukuk  <kukuk@thkukuk.de>
140
141         * doc/sag: System Administrator Guide as XML source.
142         * doc/sag/Makefile.am: New.
143         * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
144         * doc/sag/pam_*.xml: New, wrapper to include module documentation.
145
146         * doc/adg: Application Developers Guide as XML source.
147         * doc/adg/Makefile.am: New.
148         * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
149         * doc/adg/pam_*.xml: New, wrappers to include manual pages.
150
151         * doc/mwg: Application Developers Guide as XML source.
152         * doc/mwg/Makefile.am: New.
153         * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
154         * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
155
156         * doc/CREDITS: Removed.
157         * doc/NOTES: Removed.
158         * doc/pam_appl.sgml: Removed.
159         * doc/pam_modules.sgml: Removed.
160         * doc/pam_source.sgml: Removed.
161         * doc/figs/pam_orient.txt: Removed.
162         * doc/figs: Removed.
163
164         * configure.in: Remove checks for sgml2* progrs, add sag, adg
165         and mwg Makefiles.
166
167         * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
168         directories.
169         * doc/modules: Remove directory.
170         * doc/html: Remove directory.
171         * doc/ps: Remove directory.
172         * doc/pdf: Remove directory.
173         * doc/txts: Remove directory.
174         * doc/index.html: Moved from html directory to here.
175
176 2006-06-28  Thorsten Kukuk  <kukuk@thkukuk.de>
177
178         * release version 0.99.5.0
179
180         * bump version number to 0.99.5.0
181
182         * modules/pam_rhosts/pam_rhosts.c: New module, replaces
183         pam_rhosts_auth.so.
184         * modules/pam_rhosts/pam_rhosts.8.xml: New.
185         * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
186         * modules/pam_rhosts/tst-pam_rhosts: New.
187         * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
188         manual page and README.
189         * modules/pam_rhosts/README.xml: New.
190         * modules/pam_rhosts/reADME: Regenerated from XML source.
191
192         * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
193         writers guide.
194         * doc/man/pam_sm_authenticate.3.xml: Likewise.
195         * doc/man/pam_sm_chauthtok.3.xml: Likewise.
196         * doc/man/pam_sm_close_session.3.xml: Likewise.
197         * doc/man/pam_sm_open_session.3.xml: Likewise.
198         * doc/man/pam_sm_setcred.3.xml: Likewise.
199
200         * po/POTFILES.in: Add new source files.
201
202         * libpam/pam_static_modules.h: Add new modules.
203
204         * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
205
206         * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
207         files and manual page.
208
209 2006-06-27  Thorsten Kukuk <kukuk@thkukuk.de>
210
211         * configure.in: Allow disabling of SELinux support, check for
212         rootok_af.
213
214 2006-06-27  Tomas Mraz <t8m@centrum.cz>
215
216         * modules/pam_namespace/pam_namespace.c: New module
217         originally written by Janak Desai.
218         * modules/pam_namespace/Makefile.am: New.
219         * modules/pam_namespace/README: New.
220         * modules/pam_namespace/md5.c: New.
221         * modules/pam_namespace/md5.h: New.
222         * modules/pam_namespace/namespace.conf: New.
223         * modules/pam_namespace/namespace.conf.5: New.
224         * modules/pam_namespace/namespace.conf.5.xml: New.
225         * modules/pam_namespace/namespace.init: New.
226         * modules/pam_namespace/pam_namespace.8: New.
227         * modules/pam_namespace/pam_namespace.8.xml: New.
228         * modules/pam_namespace/tst-pam_namespace: New.
229         * modules/Makefile.am: Added pam_namespace.
230         * configure.in: Added pam_namespace, test for unshare
231         library call.
232
233 2006-06-27  David Howells <dhowells@redhat.com>
234
235         * modules/pam_keyinit/pam_keyinit.c: New module.
236         * modules/pam_keyinit/pam_keyinit.8: New.
237         * modules/pam_keyinit/pam_keyinit.8.xml: New.
238         * modules/pam_keyinit/README: New.
239         * modules/pam_keyinit/README.xml: New.
240         * modules/pam_keyinit/Makefile.am: New.
241         * modules/pam_keyinit/tst-pam_keyinit: New.
242         * modules/Makefile.am: Added pam_keyinit.
243         * configure.in: Added test for the key mgmt syscall.
244
245 2006-06-27  Thorsten Kukuk <kukuk@thkukuk.de>
246
247         * m4/libprelude.m4: Sync with upstream.
248
249 2006-06-27  Tomas Mraz <t8m@centrum.cz>
250
251         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
252         signal() fails with SIG_ERR return
253         * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
254         Likewise.
255         * modules/pam_unix/support.c(_unix_run_helper_binary):
256         Likewise.
257
258 2006-06-25  Thorsten Kukuk  <kukuk@thkukuk.de>
259
260         * doc/man/misc_conv.3.xml: New.
261         * doc/man/misc_conv.3: New.
262         * doc/man/pam_misc_paste_env.3.xml: New.
263         * doc/man/pam_misc_paste_env.3: New.
264         * doc/man/pam_misc_drop_env.3.xml: New.
265         * doc/man/pam_misc_drop_env.3: New.
266         * doc/man/pam_misc_setenv.3.xml: New.
267         * doc/man/pam_misc_setenv.3: New.
268         * doc/man/Makefile.am: Add new manual pages.
269
270         * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
271         in Applicatoin Developer Guide.
272         * doc/man/pam_authenticate.3.xml: Likewise
273         * doc/man/pam_chauthtok.3.xml: Likewise
274         * doc/man/pam_close_session.3.xml: Likewise
275         * doc/man/pam_conv.3.xml: Likewise
276         * doc/man/pam_end.3.xml: Likewise
277         * doc/man/pam_fail_delay.3.xml: Likewise
278         * doc/man/pam_getenv.3.xml: Likewise
279         * doc/man/pam_getenvlist.3.xml: Likewise
280         * doc/man/pam_open_session.3.xml: Likewise
281         * doc/man/pam_putenv.3.xml: Likewise
282         * doc/man/pam_setcred.3.xml: Likewise
283         * doc/man/pam_start.3.xml: Likewise
284         * doc/man/pam_strerror.3.xml: Likewise
285
286         * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
287         * doc/man/pam_authenticate.3: Likewise
288         * doc/man/pam_chauthtok.3: Likewise
289         * doc/man/pam_close_session.3: Likewise
290         * doc/man/pam_conv.3: Likewise
291         * doc/man/pam_end.3: Likewise
292         * doc/man/pam_fail_delay.3: Likewise
293         * doc/man/pam_getenv.3: Likewise
294         * doc/man/pam_getenvlist.3: Likewise
295         * doc/man/pam_open_session.3: Likewise
296         * doc/man/pam_putenv.3: Likewise
297         * doc/man/pam_setcred.3: Likewise
298         * doc/man/pam_sm_close_session.3: Likewise
299         * doc/man/pam_start.3: Likewise
300         * doc/man/pam_strerror.3: Likewise
301         * doc/man/pam_syslog.3: Likewise
302         * doc/man/PAM.8: Likewise
303
304 2006-06-24  Thorsten Kukuk  <kukuk@thkukuk.de>
305
306         * modules/pam_limits/pam_limits.c (setup_limits): Don't
307         reset priority for root.
308
309 2006-06-23  Thorsten Kukuk  <kukuk@thkukuk.de>
310
311         * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
312         * modules/pam_access/pam_access.8.xml: Likewise.
313         * modules/pam_deny/pam_deny.8.xml: Likewise.
314         * modules/pam_echo/pam_echo.8.xml: Likewise.
315         * modules/pam_env/pam_env.8.xml: Likewise.
316         * modules/pam_env/pam_env.conf.5.xml: Likewise.
317         * modules/pam_group/group.conf.5.xml: Likewise.
318         * modules/pam_group/pam_group.8.xml: Likewise.
319         * modules/pam_limits/limits.conf.5.xml: Likewise.
320         * modules/pam_listfile/pam_listfile.8.xml: Likewise.
321         * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
322         * modules/pam_time/pam_time.8.xml: Likewise.
323         * modules/pam_time/time.conf.5.xml: Likewise.
324
325         * modules/pam_access/access.conf.5: Regenerate.
326         * modules/pam_access/pam_access.8: Likewise.
327         * modules/pam_deny/pam_deny.8: Likewise.
328         * modules/pam_echo/README: Likewise.
329         * modules/pam_echo/pam_echo.8: Likewise.
330         * modules/pam_env/pam_env.8: Likewise.
331         * modules/pam_env/pam_env.conf.5: Likewise.
332         * modules/pam_group/README: Likewise.
333         * modules/pam_group/group.conf.5: Likewise.
334         * modules/pam_group/pam_group.8: Likewise.
335         * modules/pam_limits/limits.conf.5: Likewise.
336         * modules/pam_listfile/README: Likewise.
337         * modules/pam_listfile/pam_listfile.8: Likewise.
338         * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
339         * modules/pam_time/pam_time.8: Likewise.
340         * modules/pam_time/time.conf.5: Likewise.
341
342         * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
343         and pam.conf-syntax.xml.
344         * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
345         * doc/man/pam.conf.5: Regenerated.
346         * doc/man/pam.conf-desc.xml: New.
347         * doc/man/pam.conf-dir.xml: New.
348         * doc/man/pam.conf-syntax.xml: New.
349
350 2006-06-21  Thorsten Kukuk  <kukuk@thkukuk.de>
351
352         * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
353         is not installed.
354
355         * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
356         * modules/pam_issue/pam_issue.8: Regenerate.
357
358 2006-06-20  Thorsten Kukuk  <kukuk@thkukuk.de>
359
360         * configure.in: Remove unused check for libcap.
361
362         * m4/ld-as-needed.m4: New.
363         * m4/ld-O1.m4: New.
364         * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
365         require docbook version 4.4.
366
367 2006-06-19  Thorsten Kukuk  <kukuk@thkukuk.de>
368
369         * doc/man/pam.8.xml: Syntax cleanup.
370         * doc/pam/PAM.8: Regenerated from xml source.
371         * man/pam_sm_chauthtok.3: New.
372         * man/pam_sm_chauthtok.3.xml: New.
373         * man/pam_sm_close_session.3: New.
374         * man/pam_sm_close_session.3.xml: New.
375         * man/pam_sm_open_session.3: New.
376         * man/pam_sm_open_session.3.xml: New.
377         * man/pam_sm_authenticate.3: New.
378         * man/pam_sm_authenticate.3.xml: New.
379         * man/pam_sm_setcred.3: New.
380         * man/pam_sm_setcred.3.xml: New.
381         * man/Makefile.am: Add new pam_sm_* manual pages.
382
383         * specs/Makefile.am: Fix rule to generate draft.
384
385 2006-06-18  Thorsten Kukuk  <kukuk@thkukuk.de>
386
387         * modules/pam_tally/Makefile.am: Include Make.xml.rules.
388         * modules/pam_tally/pam_tally.8.xml: New.
389         * modules/pam_tally/pam_tally.8: New, generated from xml file.
390         * modules/pam_tally/README.xml: New.
391         * modules/pam_tally/README: Regenerated from xml file.
392
393         * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
394         * modules/pam_selinux/pam_selinux.8.xml: New.
395         * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
396         * modules/pam_selinux/README.xml: New.
397         * modules/pam_selinux/README: Regenerated from xml file.
398
399 2006-06-17  Thorsten Kukuk  <kukuk@thkukuk.de>
400
401         * modules/pam_debug/Makefile.am: Include Make.xml.rules.
402         * modules/pam_debug/pam_debug.8.xml: New.
403         * modules/pam_debug/pam_debug.8: New, generated from xml file.
404         * modules/pam_debug/README.xml: New.
405         * modules/pam_debug/README: Regenerated from xml file.
406
407         * examples/vpass.c: UID is unsigned on Linux.
408         * modules/pam_exec/pam_exec.c: Likewise.
409         * modules/pam_unix/pam_unix_acct.c: Likewise.
410         * modules/pam_unix/pam_unix_sess.c: Likewise.
411
412         * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
413         * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
414         * modules/pam_succeed_if/README: Regenerated.
415
416         * modules/pam_limits/Makefile.am: Include Make.xml.rules.
417         * modules/pam_limits/limits.conf.5: New, generated from xml file.
418         * modules/pam_limits/limits.conf.5.xml: New.
419         * modules/pam_limits/pam_limits.8: New, generated from xml file.
420         * modules/pam_limits/pam_limits.8.xml: New.
421         * modules/pam_limits/README.xml: New.
422         * modules/pam_limits/README: Regenerated from README.xml.
423
424 2006-06-16  Thorsten Kukuk  <kukuk@thkukuk.de>
425
426         * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
427         are unsigned on Linux, don't truncate them.
428         (_do_setpass): err is of type clnt_stat, not int.
429
430         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
431         truncate UID for syslog output.
432
433         * modules/pam_time/pam_time.c: Replace type boolean with int.
434         * modules/pam_group/pam_group.c: Likewise.
435
436 2006-06-15  Thorsten Kukuk  <kukuk@thkukuk.de>
437
438         * modules/pam_unix/bigcrypt.h: New.
439         * modules/pam_unix/Makefile.am: Add bigcrypt.h.
440         * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
441         * modules/pam_unix/support.c: Include bigcrypt.h, remove
442         own prototype.
443         * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
444         own prototype.
445         * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
446         own prototype.
447
448         * modules/pam_time/pam_time.c (logic_member): Remove unused
449         variable len.
450
451         * modules/pam_group/pam_group.c (logic_field): Accept
452         colon in tty name. [#1428276].
453         (logic_member): Remove unused variable len.
454         (check_account): Fix usage of err variable in debug code.
455
456         * modules/pam_time/pam_time.c (logic_field): Likewise.
457
458         * configure.in: Add special exceptions for icc: different
459         compiler warnings, no PIE support.
460
461 2006-06-14  Thorsten Kukuk  <kukuk@thkukuk.de>
462
463         * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
464
465         * configure.in: Remove --enable-memory-debug, add option
466         to disable prelude if installed.
467
468         * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
469         * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
470         * modules/pam_unix/unix_chkpwd.c: Likewise.
471         * libpam/include/security/_pam_types.h: Likewise.
472         * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
473         * libpam/pam_malloc.c: Remove file.
474         * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
475
476         * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
477         instead of strdup.
478
479         * libpam/pam_private.h: Remove _pam_strCMP.
480         * libpam/pam_misc.c: Likewise.
481         * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
482
483 2006-06-12  Thorsten Kukuk  <kukuk@thkukuk.de>
484
485         * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
486         for modules from main application.
487
488 2006-06-09  Thorsten Kukuk  <kukuk@thkukuk.de>
489
490         * modules/pam_time/Makefile.am: Include Make.xml.rules.
491         * modules/pam_time/time.conf.5: New, generated from xml file.
492         * modules/pam_time/time.conf.5.xml: New.
493         * modules/pam_time/pam_time.8: New, generated from xml file.
494         * modules/pam_time/pam_time.8.xml: New.
495         * modules/pam_time/README.xml: New.
496         * modules/pam_time/README: Regenerated from README.xml.
497
498         * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
499         * modules/pam_wheel/pam_wheel.8.xml: New.
500         * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
501         * modules/pam_wheel/README.xml: New.
502         * modules/pam_wheel/README: Regenerated from xml file.
503
504         * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
505         * modules/pam_xauth/pam_xauth.8.xml: New.
506         * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
507         * modules/pam_xauth/README.xml: New.
508         * modules/pam_xauth/README: Regenerated from xml file.
509
510         * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
511         * modules/pam_deny/pam_deny.8: Regenerate from xml file.
512         * modules/pam_deny/README: Likewise.
513
514         * modules/pam_warn/Makefile.am: Include Make.xml.rules.
515         * modules/pam_warn/pam_warn.8.xml: New.
516         * modules/pam_warn/pam_warn.8: New, generated from xml file.
517         * modules/pam_warn/README.xml: New.
518         * modules/pam_warn/README: Regenerated from xml file.
519
520         * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
521         * modules/pam_userdb/pam_userdb.8.xml: New.
522         * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
523         * modules/pam_userdb/README.xml: New.
524         * modules/pam_userdb/README: Regenerated from xml file.
525
526 2006-06-06  Thorsten Kukuk  <kukuk@thkukuk.de>
527
528         * modules/pam_shells/Makefile.am: Include Make.xml.rules.
529         * modules/pam_shells/pam_shells.8.xml: New.
530         * modules/pam_shells/pam_shells.8: New, generated from xml file.
531         * modules/pam_shells/README.xml: New.
532         * modules/pam_shells/README: Regenerated from xml file.
533
534         * libpam/include/security/pam_malloc.h: Add missing license
535         informations.
536
537         * libpam/include/security/pam_ext.h: Add brackets for C++.
538         * libpam/include/security/pam_modutil.h: Likewise.
539
540         * libpam/include/security/pam_modules.h: Document where to
541         find the copyright/license informations.
542
543         * libpam/include/security/pam_appl.h: Move _pam_compat.h
544         include inside of brackets.
545
546 2006-06-04  Thorsten Kukuk  <kukuk@thkukuk.de>
547
548         * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
549         * modules/pam_securetty/pam_securetty.8.xml: New.
550         * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
551         * modules/pam_securetty/README.xml: New.
552         * modules/pam_securetty/README: Regenerated from xml file.
553
554         * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
555         * modules/pam_rootok/pam_rootok.8.xml: New.
556         * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
557         * modules/pam_rootok/README.xml: New.
558         * modules/pam_rootok/README: Regenerated from xml file.
559
560         * modules/pam_permit/Makefile.am: Include Make.xml.rules.
561         * modules/pam_permit/pam_permit.8.xml: New.
562         * modules/pam_permit/pam_permit.8: New, generated from xml file.
563         * modules/pam_permit/README.xml: New.
564         * modules/pam_permit/README: Regenerated from xml file.
565
566         * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
567         * modules/pam_nologin/pam_nologin.8.xml: New.
568         * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
569         * modules/pam_nologin/README.xml: New.
570         * modules/pam_nologin/README: Regenerated from xml file.
571
572 2006-06-03  Thorsten Kukuk  <kukuk@thkukuk.de>
573
574         * modules/pam_motd/Makefile.am: Include Make.xml.rules.
575         * modules/pam_motd/pam_motd.8.xml: New.
576         * modules/pam_motd/pam_motd.8: New, generated from xml file.
577         * modules/pam_motd/README.xml: New.
578         * modules/pam_motd/README: New, generated from xml file.
579
580 2006-06-02  Thorsten Kukuk  <kukuk@thkukuk.de>
581
582         * modules/pam_mail/Makefile.am: Include Make.xml.rules.
583         * modules/pam_mail/pam_mail.8.xml: New.
584         * modules/pam_mail/pam_mail.8: New, generated from xml file.
585         * modules/pam_mail/README.xml: New.
586         * modules/pam_mail/README: Regenerated from xml file.
587
588         * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
589         * modules/pam_localuser/pam_localuser.8.xml: New.
590         * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
591         * modules/pam_localuser/README.xml: New.
592         * modules/pam_localuser/README: Regenerated from xml file.
593
594         * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
595         * doc/man/pam.3: Likewise.
596         * doc/man/pam.conf.5: Likewise.
597         * doc/man/pam_acct_mgmt.3: Likewise.
598         * doc/man/pam_authenticate.3: Likewise.
599         * doc/man/pam_chauthtok.3: Likewise.
600         * doc/man/pam_close_session.3: Likewise.
601         * doc/man/pam_conv.3: Likewise.
602         * doc/man/pam_end.3: Likewise.
603         * doc/man/pam_error.3: Likewise.
604         * doc/man/pam_fail_delay.3: Likewise.
605         * doc/man/pam_get_data.3: Likewise.
606         * doc/man/pam_get_item.3: Likewise.
607         * doc/man/pam_get_user.3: Likewise.
608         * doc/man/pam_getenv.3: Likewise.
609         * doc/man/pam_getenvlist.3: Likewise.
610         * doc/man/pam_info.3: Likewise.
611         * doc/man/pam_open_session.3: Likewise.
612         * doc/man/pam_prompt.3: Likewise.
613         * doc/man/pam_putenv.3: Likewise.
614         * doc/man/pam_set_data.3: Likewise.
615         * doc/man/pam_set_item.3: Likewise.
616         * doc/man/pam_setcred.3: Likewise.
617         * doc/man/pam_sm_acct_mgmt.3: Likewise.
618         * doc/man/pam_start.3: Likewise.
619         * doc/man/pam_strerror.3: Likewise.
620         * doc/man/pam_syslog.3: Likewise.
621         * modules/pam_access/access.conf.5: Likewise.
622         * modules/pam_access/pam_access.8: Likewise.
623         * modules/pam_cracklib/pam_cracklib.8: Likewise.
624         * modules/pam_deny/pam_deny.8: Likewise.
625         * modules/pam_echo/pam_echo.8: Likewise.
626         * modules/pam_env/pam_env.8: Likewise.
627         * modules/pam_env/pam_env.conf.5: Likewise.
628         * modules/pam_exec/pam_exec.8: Likewise.
629         * modules/pam_filter/pam_filter.8: Likewise.
630         * modules/pam_ftp/pam_ftp.8: Likewise.
631         * modules/pam_group/group.conf.5: Likewise.
632         * modules/pam_group/pam_group.8: Likewise.
633         * modules/pam_issue/pam_issue.8: Likewise.
634         * modules/pam_lastlog/pam_lastlog.8: Likewise.
635         * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
636         * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
637         * modules/pam_umask/pam_umask.8: Likewise.
638
639         * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
640         dngettext if available [#1427738].
641         * configure.in: Check for dngettext [#1427738].
642         * po/*.po: Update to dngettext usage.
643
644         * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
645         * modules/pam_listfile/pam_listfile.8.xml: New.
646         * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
647         * modules/pam_listfile/README.xml: New.
648         * modules/pam_listfile/README: Regenerated from xml file.
649
650 2006-06-01  Thorsten Kukuk  <kukuk@thkukuk.de>
651
652         * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
653         * modules/pam_lastlog/pam_lastlog.8.xml: New.
654         * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
655         * modules/pam_lastlog/README.xml: New.
656         * modules/pam_lastlog/README: Regenerated from xml file.
657
658         * modules/pam_group/Makefile.am: Include Make.xml.rules.
659         * modules/pam_group/group.conf.5.xml: New.
660         * modules/pam_group/group.conf.5: New, generated from xml file.
661         * modules/pam_group/pam_group.8.xml: New.
662         * modules/pam_group/pam_group.8: New, generated from xml file.
663         * modules/pam_group/README.xml: New.
664         * modules/pam_group/README: Regenerated from xml file.
665
666         * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
667         * modules/pam_ftp/pam_ftp.8.xml: New.
668         * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
669         * modules/pam_ftp/README.xml: New.
670         * modules/pam_ftp/README: Regenerated from xml file.
671
672         * modules/pam_issue/Makefile.am: Include Make.xml.rules.
673         * modules/pam_issue/pam_issue.8.xml: New.
674         * modules/pam_issue/pam_issue.8: New, generated from xml file.
675         * modules/pam_issue/README.xml: New.
676         * modules/pam_issue/README: Regenerated from xml file.
677
678         * modules/pam_filter/Makefile.am: Include Make.xml.rules.
679         * modules/pam_filter/pam_filter.8.xml: New.
680         * modules/pam_filter/pam_filter.8: New, generated from xml file.
681         * modules/pam_filter/README.xml: New.
682         * modules/pam_filter/README: Regenerated from xml file.
683
684 2006-05-30  Thorsten Kukuk  <kukuk@thkukuk.de>
685
686         * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
687         directory documentation.
688
689         * modules/pam_umask/Makefile.am: Include Make.xml.rules.
690         * modules/pam_umask/pam_umask.8.xml: New.
691         * modules/pam_umask/pam_umask.8: New, generated from xml file.
692         * modules/pam_umask/README.xml: New.
693         * modules/pam_umask/README: Regenerated from xml file.
694
695 2006-05-29  Thorsten Kukuk  <kukuk@thkukuk.de>
696
697         * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
698         * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
699         * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
700         * modules/pam_mkhomedir/README.xml: New.
701         * modules/pam_mkhomedir/README: Regenerated from xml file.
702
703 2006-05-23  Thorsten Kukuk  <kukuk@thkukuk.de>
704
705         * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
706         instead of read().
707
708 2006-05-22  Thorsten Kukuk  <kukuk@thkukuk.de>
709
710         * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
711         Fix memory leaks, [#1490956] found by Coverity.
712
713         * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
714         value of pam_get_user().
715         (tally_get_data): Check if oldtime is not NULL.
716         [#1489818] found by Coverity.
717
718         * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
719         ignore return value of stat(). [#1489808] found by Coverity.
720
721         * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
722         NULL pointer dereference. [#1489792] found by Coverity.
723
724         * libpam/Makefile.am: bump release number of libpam.so.
725         * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
726         [#1489804] found by Coverity.
727
728         * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
729         str, [#1489658] found by Coverity.
730
731         * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
732         a potential NULL pointer dereference.
733         (pam_sm_chauthtok): Remove dead code.
734         [#1489634] found by Coverity.
735
736 2006-05-04  Thorsten Kukuk  <kukuk@suse.de>
737
738         * configure.in: Check for fseeko.
739         * modules/pam_tally/pam_tally.c: Use fseeko if available
740         (Based on patch by IBM).
741
742 2006-05-04  Thorsten Kukuk  <kukuk@thkukuk.de>
743
744         * release version 0.99.4.0
745
746         * libpam/pam_strerror.c: Unify error messages.
747
748         * po/zh_TW.po: Adjust for last pam_strerror changes.
749         * po/zh_CN.po: Likewise.
750         * po/uk.po: Likewise.
751         * po/tr.po: Likewise.
752         * po/pt.po: Likewise.
753         * po/pt_BR.po: Likewise.
754         * po/pl.po: Likewise.
755         * po/ja.po: Likewise.
756         * po/nl.po: Likewise.
757         * po/nb.po: Likewise.
758         * po/it.po: Likewise.
759         * po/hu.po: Likewise.
760         * po/fr.po: Likewise.
761         * po/fi.po: Likewise.
762         * po/es.po: Likewise.
763         * po/de.po: Likewise.
764         * po/cs.po: Likewise.
765
766         * doc/man/pam.3.xml: New.
767         * doc/man/pam.3. New, generated from XML file.
768
769         * doc/man/pam_sm_acct_mgmt.3.xml: New.
770         * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
771
772         * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
773         all manual pages.
774
775         * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
776
777 2006-05-02  Thorsten Kukuk  <kukuk@thkukuk.de>
778
779         * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
780         different strings for plural or not [#1427738]
781
782         * po/*.po: Adjust for pam_unix.so translation fix.
783
784         * modules/pam_tally/pam_tally.c: Always close file handle
785         in error case, don't close it depending on *TALLY value [#1478180]
786
787 2006-04-21  Thorsten Kukuk  <kukuk@thkukuk.de>
788
789         * po/fr.po: Updated.
790
791 2006-04-11  Thorsten Kukuk  <kukuk@thkukuk.de>
792
793         * po/km.po: Updated.
794
795 2006-03-27  Thorsten Kukuk  <kukuk@thkukuk.de>
796
797         * po/LINGUAS: Add uk.
798
799         * po/uk.po: New.
800         * po/cs.po: Updated.
801         * po/po/es.po: Updated.
802         * po/fi.po: Updated.
803         * po/fr.po: Updated.
804         * po/hu.po: Updated.
805         * po/it.po: Updated.
806         * po/ja.po: Updated.
807         * po/nb.po: Updated.
808         * po/pl.po: Updated.
809         * po/pt.po: Updated.
810         * po/pt_BR.po: Updated.
811         * po/zh_CN.po: Updated.
812         * po/zh_TW.po: Updated.
813
814 2006-03-21  Thorsten Kukuk  <kukuk@thkukuk.de>
815
816         * configure.in: Remove ALL_LINGUAS.
817         * po/LINGUAS: New.
818         * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
819
820 2006-03-13  Thorsten Kukuk  <kukuk@thkukuk.de>
821
822         * doc/man/pam_error.3.xml: New.
823         * doc/man/pam_error.3: New, generated from XML file.
824         * doc/man/pam_verror.3: New, generated from XML file.
825         * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
826
827         * modules/pam_lastlog/Makefile.am: Fix typo.
828
829         * modules/pam_lastlog/pam_lastlog.c: Move comment for
830         translators in right line.
831         * po/*.po: Update po files with comment for translator.
832
833 2006-03-12  Thorsten Kukuk  <kukuk@thkukuk.de>
834
835         * doc/man/Makefile.am: Add new manual pages.
836
837         * doc/man/pam.conf.5.xml: Replace link with content
838         of PAM admin guide.
839         * doc/man/pam.conf.5: Regenerated from XML file.
840
841         * doc/man/pam_info.3.xml: New.
842         * doc/man/pam_info.3: New, generated from XML file.
843         * doc/man/pam_vinfo.3: New, generated from XML file.
844
845         * doc/man/pam_conv.3.xml: New.
846         * doc/man/pam_conv.3: New, generated from XML file.
847
848         * doc/man/pam_putenv.3.xml: New.
849         * doc/man/pam_putenv.3: New, generated from XML file.
850
851         * doc/man/pam_getenv.3.xml: New.
852         * doc/man/pam_getenv.3: New, generated from XML file.
853
854         * doc/man/pam_getenvlist.3.xml: New.
855         * doc/man/pam_getenvlist.3: New, generated from XML file.
856
857         * libpam/pam_item.c (pam_get_user): Check for valid pamh before
858         using it.
859
860         * configure.in: create tests/Makefile
861         * Makefile.am (SUBDIRS): Add tests
862         * tests/Makefile.am: New.
863         * tests/tst-dlopen.c: New.
864         * tests/tst-pam_acct_mgmt.c: New.
865         * tests/tst-pam_authenticate.c: New.
866         * tests/tst-pam_chauthtok.c: New.
867         * tests/tst-pam_close_session.c: New.
868         * tests/tst-pam_end.c: New.
869         * tests/tst-pam_fail_delay.c: New.
870         * tests/tst-pam_getenvlist.c: New.
871         * tests/tst-pam_get_item.c: New.
872         * tests/tst-pam_open_session.c: New.
873         * tests/tst-pam_setcred.c: New.
874         * tests/tst-pam_set_item.c: New.
875         * tests/tst-pam_start.c: New.
876         * tests/tst-pam_get_user.c: New.
877
878         * modules/pam_access/Makefile.am: Add rules for make check
879         * modules/pam_access/tst-pam_access: New
880         * modules/pam_cracklib/Makefile.am: Add rules for make check
881         * modules/pam_cracklib/tst-pam_cracklib: New
882         * modules/pam_debug/Makefile.am: Add rules for make check
883         * modules/pam_debug/tst-pam_debug: New
884         * modules/pam_deny/Makefile.am: Add rules for make check
885         * modules/pam_deny/tst-pam_deny: New
886         * modules/pam_echo/Makefile.am: Add rules for make check
887         * modules/pam_echo/tst-pam_echo: New
888         * modules/pam_env/Makefile.am: Add rules for make check
889         * modules/pam_env/tst-pam_env: New
890         * modules/pam_exec/Makefile.am: Add rules for make check
891         * modules/pam_exec/tst-pam_exec: New
892         * modules/pam_filter/Makefile.am: Add rules for make check
893         * modules/pam_filter/tst-pam_filter: New
894         * modules/pam_ftp/Makefile.am: Add rules for make check
895         * modules/pam_ftp/tst-pam_ftp: New
896         * modules/pam_group/Makefile.am: Add rules for make check
897         * modules/pam_group/tst-pam_group: New
898         * modules/pam_issue/Makefile.am: Add rules for make check
899         * modules/pam_issue/tst-pam_issue: New
900         * modules/pam_lastlog/Makefile.am: Add rules for make check
901         * modules/pam_lastlog/tst-pam_lastlog: New
902         * modules/pam_limits/Makefile.am: Add rules for make check
903         * modules/pam_limits/tst-pam_limits: New
904         * modules/pam_listfile/Makefile.am: Add rules for make check
905         * modules/pam_listfile/tst-pam_listfile: New
906         * modules/pam_localuser/Makefile.am: Add rules for make check
907         * modules/pam_localuser/tst-pam_localuser: New
908         * modules/pam_mail/Makefile.am: Add rules for make check
909         * modules/pam_mail/tst-pam_mail: New
910         * modules/pam_mkhomedir/Makefile.am: Add rules for make check
911         * modules/pam_mkhomedir/tst-pam_mkhomedir: New
912         * modules/pam_motd/Makefile.am: Add rules for make check
913         * modules/pam_motd/tst-pam_motd: New
914         * modules/pam_nologin/Makefile.am: Add rules for make check
915         * modules/pam_nologin/tst-pam_nologin: New
916         * modules/pam_permit/Makefile.am: Add rules for make check
917         * modules/pam_permit/tst-pam_permit: New
918         * modules/pam_rhosts/Makefile.am: Add rules for make check
919         * modules/pam_rhosts/tst-pam_rhosts: New
920         * modules/pam_rootok/Makefile.am: Add rules for make check
921         * modules/pam_rootok/tst-pam_rootok: New
922         * modules/pam_securetty/Makefile.am: Add rules for make check
923         * modules/pam_securetty/tst-pam_securetty: New
924         * modules/pam_selinux/Makefile.am: Add rules for make check
925         * modules/pam_selinux/tst-pam_selinux: New
926         * modules/pam_shells/Makefile.am: Add rules for make check
927         * modules/pam_shells/tst-pam_shells: New
928         * modules/pam_stress/Makefile.am: Add rules for make check
929         * modules/pam_stress/tst-pam_stress: New
930         * modules/pam_succeed_if/Makefile.am: Add rules for make check
931         * modules/pam_succeed_if/tst-pam_succeed_if: New
932         * modules/pam_tally/Makefile.am: Add rules for make check
933         * modules/pam_tally/tst-pam_tally: New
934         * modules/pam_time/Makefile.am: Add rules for make check
935         * modules/pam_time/tst-pam_time: New
936         * modules/pam_umask/Makefile.am: Add rules for make check
937         * modules/pam_umask/tst-pam_umask: New
938         * modules/pam_unix/Makefile.am: Add rules for make check
939         * modules/pam_unix/tst-pam_unix: New
940         * modules/pam_userdb/Makefile.am: Add rules for make check
941         * modules/pam_userdb/tst-pam_userdb: New
942         * modules/pam_warn/Makefile.am: Add rules for make check
943         * modules/pam_warn/tst-pam_warn: New
944         * modules/pam_wheel/Makefile.am: Add rules for make check
945         * modules/pam_wheel/tst-pam_wheel: New
946         * modules/pam_xauth/Makefile.am: Add rules for make check
947         * modules/pam_xauth/tst-pam_xauth: New
948
949 2006-03-11  Thorsten Kukuk  <kukuk@thkukuk.de>
950
951         * doc/man/pam_fail_delay.3.xml: New.
952         * doc/man/pam_fail_delay.3: New, generated from xml.
953         * doc/man/pam_prompt.3.xml: New.
954         * doc/man/pam_prompt.3: New, generated from xml.
955         * doc/man/pam_syslog.3.xml: New.
956         * doc/man/pam_syslog.3: New, generated from xml.
957         * doc/man/pam_vprompt.3: New, generated from xml.
958         * doc/man/pam_vsyslog.3: New, generated from xml.
959
960 2006-02-24  Thorsten Kukuk  <kukuk@thkukuk.de>
961
962         * po/km.po: Update Khmer translation.
963
964 2006-02-24  Thorsten Kukuk  <kukuk@thkukuk.de>
965
966         * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
967         version from #1425487.
968         * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
969         * modules/pam_succeed_if/Makefile.am: Include XML rules.
970         * modules/pam_succeed_if/README.xml: New.
971         * modules/pam_succeed_if/README: Regenerated from xml.
972         * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
973         return values.
974
975 2006-02-22  Thorsten Kukuk  <kukuk@thkukuk.de>
976
977         * configure.in: Fix check for incomplete libaudit installations
978         (Patch from Ruediger Oertel <ro@suse.de>).
979
980         * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
981         correct last_login field [#1427401].
982
983         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
984         format string for translation to allow reorder [#1428269].
985         * po/*.po: Update with last pam_lastlog change.
986
987
988 2006-02-17  Thorsten Kukuk  <kukuk@thkukuk.de>
989
990         * doc/man/Makefile.am: Add new manual pages.
991         * doc/man/pam_end.3: Regenerated from xml file.
992         * doc/man/pam_end.3.xml: Document freeing of item data.
993         * doc/man/pam_get_user.3: New.
994         * doc/man/pam_get_user.3.xml: New.
995         * modules/pam_access/access.conf.5.xml: Fix typos.
996         * modules/pam_env/Makefile.am: Add new manual pages.
997         * modules/pam_env/README: Regenerate from xml file.
998         * modules/pam_env/README.xml: New.
999         * modules/pam_env/pam_env.8: New.
1000         * modules/pam_env/pam_env.8.xml: New.
1001         * modules/pam_env/pam_env.conf.5: New.
1002         * modules/pam_env/pam_env.conf.5.xml New.
1003
1004 2006-02-14  Thorsten Kukuk  <kukuk@thkukuk.de>
1005
1006         * po/fi.po: Updated translations.
1007         * po/pl.po: Likewise.
1008         * po/km.po: New translation.
1009         * configure.in: Add km as new language.
1010
1011 2006-02-13  Thorsten Kukuk  <kukuk@thkukuk.de>
1012
1013         * modules/pam_echo/pam_echo.8.xml: New.
1014         * modules/pam_echo/pam_echo.8: Regenerated from xml file.
1015         * modules/pam_echo/Makefile.am: Include Make.xml.rules.
1016         * modules/pam_echo/pam_echo.c: Fix return value.
1017
1018         * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
1019
1020 2006-02-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1021
1022         * configure.in: Add doc/man/Makefile.
1023         * Make.xml.rules: Enable xincludes for manual pages.
1024         * doc/Makefile.am (EXRA_DIST): Remove manual pages.
1025         (SUBDIR): Add man subdirectory.
1026         * doc/man/Makefile.am: New.
1027         * doc/man/pam_acct_mgmt.3: New.
1028         * doc/man/pam_acct_mgmt.3.xml: New.
1029         * doc/man/pam_get_data.3: New.
1030         * doc/man/pam_get_data.3.xml: New.
1031         * doc/man/pam_set_data.3: New.
1032         * doc/man/pam_set_data.3.xml: New.
1033         * doc/man/pam.8.xml: New.
1034         * doc/man/pam.8: Regenerated from xml file.
1035         * doc/man/pam_authenticate.3.xml: New.
1036         * doc/man/pam_authenticate.3: Regenerated from xml file.
1037         * doc/man/pam_chauthtok.3.xml: New.
1038         * doc/man/pam_chauthtok.3: Regenerated from xml file.
1039         * doc/man/pam_close_session.3.xml: New.
1040         * doc/man/pam_close_session.3: Regenerated from xml file.
1041         * doc/man/pam_end.3.xml: New.
1042         * doc/man/pam_end.3: Regenerated from xml file.
1043         * doc/man/pam_fail_delay.3.xml: New.
1044         * doc/man/pam_fail_delay.3: Regenerated from xml file.
1045         * doc/man/pam_get_item.3.xml: New.
1046         * doc/man/pam_get_item.3: Regenerated from xml file.
1047         * doc/man/pam_item_types.inc.xml: New.
1048         * doc/man/pam_open_session.3.xml: New.
1049         * doc/man/pam_open_session.3: Regenerated from xml file.
1050         * doc/man/pam_set_item.3.xml: New.
1051         * doc/man/pam_set_item.3: Regenerated from xml file.
1052         * doc/man/pam_setcred.3.xml: New.
1053         * doc/man/pam_setcred.3: Regenerated from xml file.
1054         * doc/man/pam_start.3.xml: New.
1055         * doc/man/pam_start.3: Regenerated from xml file.
1056         * doc/man/pam_strerror.3.xml: New.
1057         * doc/man/pam_strerror.3: Regenerated from xml file.
1058         * doc/man/template-man: Removed.
1059
1060 2006-02-10  Thorsten Kukuk  <kukuk@thkukuk.de>
1061
1062         * configure.in: Remove pam_pwdb support.
1063         * modules/Makefile.am: remove pam_pwdb.
1064         * modules/pam_pwdb: Remove complete directory.
1065         * libpam/Makefile.am: Remove LIBPWDB references.
1066         * libpam/pam_static_modules.h: Remove pam_pwdb references.
1067         * doc/modules/pam_pwdb.sgml: Removed.
1068         * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
1069         * doc/pam_source.sgml: Remove references to libpwdb.
1070         * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
1071         * doc/modules/pam_group.sgml: Likewise.
1072         * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
1073         * doc/modules/pam_userdb.sgml: Likewise.
1074         * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
1075         with pam_unix.
1076         * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
1077         * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
1078
1079         * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
1080         * modules/pam_cracklib/Makefile.am: Likewise.
1081         * modules/pam_deny/Makefile.am: Likewise.
1082         * modules/pam_exec/Makefile.am: Likewise.
1083
1084 2006-02-07  Thorsten Kukuk  <kukuk@thkukuk.de>
1085
1086         * configure.in: Check for text browser.
1087         * Make.xml.rules: Add rule to generate README from README.xml.
1088
1089         * modules/pam_access/Makefile.am: Include Make.xml.rules.
1090         * modules/pam_access/README: Regenerated from README.xml.
1091         * modules/pam_access/README.xml: New.
1092         * modules/pam_access/access.conf: Extended by new examples.
1093         * modules/pam_access/access.conf.5: New, generated from xml file.
1094         * modules/pam_access/access.conf.5.xml: New.
1095         * modules/pam_access/pam_access.8: New, generated from xml file.
1096         * modules/pam_access/pam_access.8.xml: New.
1097         * modules/pam_access/pam_access.c: Add rules for IPv6 and
1098         netmasks.
1099         Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
1100
1101         * modules/pam_deny/Makefile.am: Include Make.xml.rules.
1102         * modules/pam_deny/pam_deny.8.xml: New.
1103         * modules/pam_deny/pam_deny.8: New, generated from xml file.
1104         * modules/pam_deny/README.xml: New.
1105         * modules/pam_deny/README: Regenerated from xml file.
1106
1107         * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
1108         * modules/pam_cracklib/pam_cracklib.8.xml: New.
1109         * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
1110         * modules/pam_cracklib/README.xml: New.
1111         * modules/pam_cracklib/README: Regenerated from xml file.
1112
1113         * modules/pam_exec/Makefile.am: Add rule to generate README.
1114         * modules/pam_exec/README: Regenerated from xml file.
1115         * modules/pam_exec/pam_exec.8: Regenerated from xml file.
1116         * modules/pam_exec/pam_exec.8.xml: Syntax files.
1117
1118 2006-02-06  Thorsten Kukuk  <kukuk@thkukuk.de>
1119
1120         * po/nl.po: New.
1121         * po/pt.po: Update translations.
1122         * configure.in: Add nl as new language.
1123
1124 2006-01-30  Thorsten Kukuk  <kukuk@thkukuk.de>
1125
1126         * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
1127         * modules/pam_exec/Makefile.am: Include Make.xml.rules.
1128
1129         * Make.xml.rules: New.
1130
1131         * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
1132
1133 2006-01-27  Thorsten Kukuk  <kukuk@thkukuk.de>
1134
1135         * configure.in: Prefer libdb over libndbm, fix check for
1136         libcrack and remove not needed BACKUP_LIBS.
1137
1138 2006-01-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1139
1140         * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
1141
1142         * po/de.po: Fix one translation.
1143
1144         * configure.in: Add modules/pam_exec.
1145         * modules/Makefile.am: Add pam_exec subdirectory.
1146         * modules/pam_exec/README: New.
1147         * modules/pam_exec/Makefile.am: New.
1148         * modules/pam_exec/pam_exec.8: New.
1149         * modules/pam_exec/pam_exec.c: New.
1150         * modules/pam_exec/pam_exec.8.xml: New.
1151         * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
1152         * po/*.po: Merge new pam_exec strings.
1153
1154         * libpam/pam_static_modules.h: New.
1155         * Makefile.am: Reorder subdirectories for static modules.
1156         * configure.in: Add --enable-static-modules option.
1157         * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
1158         necessary, add pam_static_modules.h, link against all PAM
1159         module object files if STATIC_MODULES is defined.
1160         * libpam/pam_static.c: Remove old _static_module* includes,
1161         include pam_static_modules.h.
1162
1163         * configure.in: Add checks for xsltproc, xmllint and docbook
1164         xsl stylesheet.
1165         * m4/jh_path_xml_catalog.m4: New.
1166
1167 2006-01-22  Thorsten Kukuk  <kukuk@thkukuk.de>
1168
1169         * modules/pam_succeed_if/pam_succeed_if.c: Add support for
1170         static modules.
1171         * modules/pam_xauth/pam_xauth.c: Likewise.
1172
1173         * libpam/pam_static.c (_pam_open_static_handler): Add pamh
1174         as argument.
1175         * libpam/pam_private.h: Adjust prototype.
1176         * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
1177         _pam_open_static_handler call.
1178
1179         * configure.in: Don't define PAM_DYNAMIC.
1180         * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
1181         include pam_dynamic.h
1182         * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
1183         exclude functions if we compile with PAM_STATIC.
1184         * libpam/pam_dynamic.h: Remove.
1185         * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
1186         * libpam/Makefile.am: Bump version number of libpam, remove
1187         pam_dynamic.h.
1188
1189 2006-01-21  Thorsten Kukuk  <kukuk@thkukuk.de>
1190
1191         * modules/pam_listfile/pam_listfile.c: Add support for session
1192         and password management.
1193
1194 2006-01-19  Thorsten Kukuk  <kukuk@suse.de>
1195
1196         * doc/specs/Makefile.am (spec): Add padout to fix parallel
1197         build (Reported by Andreas Haumer <andreas@xss.co.at>).
1198
1199 2006-01-15  Thorsten Kukuk  <kukuk@thkukuk.de>
1200
1201         * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
1202         already defined.
1203
1204 2006-01-13  Thorsten Kukuk  <kukuk@thkukuk.de>
1205
1206         * release version 0.99.3.0
1207
1208         * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
1209         error.
1210
1211         * modules/pam_umask/pam_umask.c (search_key): Don't ignore
1212         EOF/error return value from fgets().
1213
1214         * configure.in: Check for getline and getdelim
1215
1216         * po/fi.po: Add new translations.
1217         * po/de.po: Likewise.
1218         * po/es.po: Likewise.
1219         * po/fr.po: Likewise.
1220         * po/it.po: Likewise.
1221         * po/ja.po: Likewise.
1222         * po/pt_BR.po: Likewise.
1223         * po/zh_CH.po: Likewise.
1224         * po/zh_TW.po: Likewise.
1225
1226 2006-01-13  Dmitry V. Levin  <ldv@altlinux.org>
1227
1228         * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
1229         call with %m specifier.
1230
1231 2006-01-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1232
1233         * configure.in: Add check for -fpie/-pie
1234         * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
1235         upperLOWER with -fpie/-pie if supported.
1236         * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
1237         with -fpie/-pie if supported.
1238
1239 2006-01-12  Steve Grubb  <sgrubb@redhat.com>
1240
1241         * configure.in: Add check for audit library.
1242         * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
1243         (libpam_la_SOURCES): Add pam_audit.c.
1244         * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
1245         * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
1246         * libpam/pam_password.c (pam_chauthtok):  Likewise.
1247         * libpam/pam_session.c (pam_open_session),
1248         (pam_close_session): Likewise.
1249         * libpam/pam_private.h: Add audit_state member to pam_handle,
1250         declare _pam_auditlog and _pam_audit_end.
1251         * libpam/pam_start.c (pam_start): Initialize audit_state.
1252         * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
1253         implementation.
1254         * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
1255         * NEWS: Note about added auditing.
1256
1257 2006-01-11  Thorsten Kukuk  <kukuk@thkukuk.de>
1258
1259         * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
1260
1261         * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
1262         if we compile libpam itself.
1263
1264         * po/hu.po: Update with new translations.
1265
1266 2006-01-08  Thorsten Kukuk  <kukuk@thkukuk.de>
1267
1268         * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
1269         instead of PAM_AUTHTOK_RECOVER_ERR.
1270         * modules/pam_pwdb/support.-c: Likewise.
1271         * modules/pam_unix/support.c: Likewise.
1272         * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
1273         * libpam/pam_strerror.c (pam_strerror): Likewise.
1274
1275         * libpam/include/security/_pam_compat.h: Define
1276         PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
1277
1278         * libpam/include/security/_pam_types.h: Rename
1279         PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
1280
1281 2006-01-05  Thorsten Kukuk  <kukuk@thkukuk.de>
1282
1283         * libpam/include/security/_pam_types.h: Remove nonnull attribute
1284         from third paramter (item) of pam_get_item.
1285         * libpam/Makefile.am: Bump version number of shared library.
1286
1287 2005-12-21  Tomas Mraz <t8m@centrum.cz>
1288
1289         * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
1290         (evaluate_notingroup): Simplified.
1291         (evaluate_innetgr), (evaluate_notinnetgr): New functions.
1292         (evaluate): Added calls to evaluate_(not)innetgr().
1293         * modules/pam_succeed_if/README: Documented netgroup matching.
1294         * NEWS: Mentioned the added netgroup matching support.
1295
1296 2005-12-20  Thorsten Kukuk  <kukuk@thkukuk.de>
1297
1298         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
1299         strftime instead of ctime.
1300
1301         * po/de.po: Fix typo.
1302
1303 2005-12-19  Thorsten Kukuk  <kukuk@thkukuk.de>
1304
1305         * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
1306         Reported by Charles_H_Bedford@nbc.gov.
1307
1308         * modules/pam_time/pam_time.c (check_account): Implement
1309         support for netgroups.
1310
1311         * modules/pam_time/time.conf: Document usage of netgroups.
1312
1313 2005-12-16  Thorsten Kukuk  <kukuk@thkukuk.de>
1314
1315         * modules/pam_group/pam_group.c (check_account): Implement
1316         support for netgroups.
1317
1318         * modules/pam_group/group.conf: Add all documentation to this
1319         example config file and don't reference to outdated configs.
1320
1321         * modules/pam_group/README: New.
1322
1323         * modules/pam_group/Makefile.am: Add README to EXTRADIST.
1324
1325 2005-12-15  Thorsten Kukuk  <kukuk@suse.de>
1326
1327         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
1328         error if user logins the first time.
1329
1330         * modules/pam_lastlog/README: New.
1331
1332         * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
1333
1334 2005-12-14  Thorsten Kukuk  <kukuk@suse.de>
1335
1336         * modules/pam_deny/pam_deny.c: Fix comment.
1337
1338         * doc/pam_appl.sgml: Fix typo.
1339
1340         Reported by Russell Bateman <russ@windofkeltia.com>
1341
1342 2005-12-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1343
1344         * release version 0.99.2.1
1345
1346         * po/de.po: Remove new fuzzy entry
1347
1348         * NEWS: Add 0.99.2.1 changes
1349
1350         * configure.in: bump version number to 0.99.2.1
1351
1352 2005-12-12  Dmitry V. Levin  <ldv@altlinux.org>
1353
1354         Cleanup pam_syslog messages.
1355
1356         * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
1357         * modules/pam_filter/pam_filter.c (set_filter): Append %m
1358         specifier to pam_syslog messages where appropriate.
1359         * modules/pam_group/pam_group.c (read_field): Likewise.
1360         * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
1361         (create_homedir): Do not use make_remark() wrapper, call
1362         pam_info() directly.  Call pam_syslog() right after failed
1363         operation and append %m specifier to pam_syslog messages where
1364         appropriate.
1365         * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
1366         sequence of malloc(), strcpy() and strcat() calls with asprintf().
1367         Append %m specifier to pam_syslog messages where appropriate.
1368         * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
1369         Append %m specifier to pam_syslog messages where appropriate.
1370         * modules/pam_shells/pam_shells.c (perform_check): Likewise.
1371
1372 2005-12-12  Tomas Mraz  <t8m@centrum.cz>
1373
1374         * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
1375         * po/Linux-PAM.pot: Likewise.
1376         * po/de.po: Likewise.
1377         * po/es.po: Likewise.
1378         * po/fi.po: Likewise.
1379         * po/fr.po: Likewise.
1380         * po/hu.po: Likewise.
1381         * po/it.po: Likewise.
1382         * po/ja.po: Likewise.
1383         * po/nb.po: Likewise.
1384         * po/pa.po: Likewise.
1385         * po/pl.po: Likewise.
1386         * po/pt.po: Likewise.
1387         * po/pt_BR.po: Likewise.
1388         * po/zh_CN.po: Likewise.
1389         * po/zh_TW.po: Likewise.
1390         * po/de.po: Add new translation, fixed typo in string.
1391
1392 2005-12-12  Mike Becher  <Mike.Becher@lrz-muenchen.de>
1393
1394         * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
1395
1396 2005-12-12  Thorsten Kukuk  <kukuk@suse.de>
1397
1398         * modules/pam_mail/README: Document "quiet" and "standard"
1399         options.
1400
1401 2005-12-07  Thorsten Kukuk  <kukuk@suse.de>
1402
1403         * modules/pam_mail/pam_mail.c: Modify assembling of output
1404         for easier translation.
1405
1406         * po/de.po: Translate new pam_mail messages.
1407
1408
1409 2005-11-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1410
1411         * po/de.po: Add new translation, fix wrong format specifier.
1412         * po/cs.po: Fix wrong format specifier.
1413         * po/es.po: Likewise.
1414         * po/fi.po: Likewise.
1415         * po/fr.po: Likewise.
1416         * po/hu.po: Likewise.
1417         * po/it.po: Likewise.
1418         * po/ja.po: Likewise.
1419         * po/nb.po: Likewise.
1420         * po/pa.po: Likewise.
1421         * po/pl.po: Likewise.
1422         * po/pt.po: Likewise.
1423         * po/pt_BR.po: Likewise.
1424         * po/zh_CN.po: Likewise.
1425         * po/zh_TW.po: Likewise.
1426
1427 2005-11-24  Dmitry V. Levin  <ldv@altlinux.org>
1428
1429         * config.h.in: Remove generated file.
1430         * .cvsignore: Add config.h.in.
1431
1432         * configure.in: Do not check for strerror.
1433         * libpam_misc/misc_conv.c (read_string): Replace strerror()
1434         call with %m specifier.
1435         * libpamc/pamc_converse.c (pamc_converse): Likewise.
1436         * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
1437         * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
1438         Likewise.
1439         * modules/pam_selinux/pam_selinux.c (security_label_tty):
1440         Likewise.
1441         (security_restorelabel_tty, security_label_tty): Append %m
1442         specifier where appropriate.
1443         * modules/pam_selinux/pam_selinux_check.c (main): Replace
1444         strerror() call with %m specifier.
1445         * modules/pam_unix/pam_unix_passwd.c (save_old_password,
1446         _update_passwd, _update_shadow): Likewise.
1447         * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
1448         * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
1449         * po/Linux-PAM.pot: Update strings from pam_selinux.
1450         * po/cs.po: Likewise.
1451         * po/de.po: Likewise.
1452         * po/es.po: Likewise.
1453         * po/fi.po: Likewise.
1454         * po/fr.po: Likewise.
1455         * po/hu.po: Likewise.
1456         * po/it.po: Likewise.
1457         * po/ja.po: Likewise.
1458         * po/nb.po: Likewise.
1459         * po/pa.po: Likewise.
1460         * po/pl.po: Likewise.
1461         * po/pt.po: Likewise.
1462         * po/pt_BR.po: Likewise.
1463         * po/zh_CN.po: Likewise.
1464         * po/zh_TW.po: Likewise.
1465
1466 2005-11-23  Thorsten Kukuk  <kukuk@suse.de>
1467
1468         * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
1469         new variable to fix compiler warning.
1470
1471         * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
1472         don't need to start with /dev/.
1473
1474 2005-11-21  Thorsten Kukuk  <kukuk@thkukuk.de>
1475
1476         * release version 0.99.2.0
1477
1478         * libpam_misc/Makefile.am: Increase release number (for change
1479         from 2005-11-09)
1480
1481         * NEWS: Adjust for 0.99.2.0
1482
1483 2005-11-17  Thorsten Kukuk  <kukuk@thkukuk.de>
1484
1485         * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
1486         Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
1487
1488 2005-11-16  Thorsten Kukuk  <kukuk@thkukuk.de>
1489
1490         * libpam/pam_handlers.c: Replace code for all dlopen variants with
1491         a generic wrapper.
1492         * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
1493         * libpam/pam_dynamic.h: Provide prototypes.
1494         For Mac OS X support [#534205]
1495
1496 2005-11-09  Tomas Mraz <t8m@centrum.cz>
1497
1498         * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
1499         full path tty name.
1500         * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
1501         full path tty name. Allow unset tty.
1502         (logic_member): Allow matching ':' in tty name.
1503         * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
1504         full path tty name. Allow unset tty.
1505         (logic_member): Allow matching ':' in tty name.
1506
1507         * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
1508         is not terminal.
1509
1510 2005-11-07  Thorsten Kukuk  <kukuk@thkukuk.de>
1511
1512         * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
1513         correct variable names.
1514
1515 2005-11-06  Steve Langasek <vorlon@debian.org>
1516
1517         * modules/pam_env/pam_env.c: don't treat a missing
1518         /etc/environment as a fatal error when attempting to read it,
1519         and try to read this file by default; this restores the behavior
1520         from Linux-PAM 0.76.
1521
1522 2005-11-02  Tomas Mraz <t8m@centrum.cz>
1523
1524         * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
1525         by ohyajapn.
1526
1527         * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
1528         logic when comparing dates to handle corner cases better [#1245888].
1529
1530 2005-10-31  Thorsten Kukuk  <kukuk@suse.de>
1531
1532         * modules/pam_filter/pam_filter.c: Use XCASE only if defined
1533         [#624214]
1534
1535 2005-10-27  Thorsten Kukuk  <kukuk@suse.de>
1536
1537         * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
1538
1539 2005-10-26  Tomas Mraz  <t8m@centrum.cz>
1540
1541         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
1542         modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
1543         modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
1544         uid to 0 before executing the helper if SELinux is enabled.
1545         * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
1546         if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
1547
1548
1549 2005-10-20  Tomas Mraz  <t8m@centrum.cz>
1550
1551         * configure.in: Added check for xauth binary and --with-xauth option.
1552         * config.h.in: Added configurable PAM_PATH_XAUTH.
1553         * modules/pam_xauth/README,
1554         modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
1555         * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
1556         searching xauth binary on multiple places.
1557         (run_coprocess): Don't use execvp as it can be a security risk.
1558
1559 2005-10-04  Steve Langasek  <vorlon@debian.org>
1560
1561         * libpam/include/security/pam_malloc.h,
1562         libpam/include/security/pam_modules.h: Declare public header
1563         files extern "C" so that they are C++-safe.
1564
1565 2005-10-02  Dmitry V. Levin  <ldv@altlinux.org>
1566             Steve Langasek  <vorlon@debian.org>
1567
1568         Cleanup gratuitous use of strdup().
1569         Fix "missing argument" checks.
1570
1571         * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
1572         to conffile and envfile arguments.  Do not use x_strdup() for
1573         conffile and envfile initialization.  Fix "missing argument"
1574         checks.
1575         (_parse_config_file): Take conffile argument of type "const char *"
1576         instead of "char **".  Do not free conffile.
1577         (_parse_env_file): Take env_file argument of type "const char *"
1578         instead of "char **".  Do not free env_file.
1579         (pam_sm_setcred): Add const qualifier to conf_file and env_file.
1580         Pass conf_file and env_file to _parse_config_file() and
1581         _parse_env_file() by value.
1582         (pam_sm_open_session): Likewise.
1583
1584         * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
1585         users argument.  Do not use x_strdup() for users initialization.
1586         (lookup):  Add const qualifier to list argument.
1587         (pam_sm_authenticate): Add const qualifier to users argument.
1588
1589         * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
1590         to maildir argument.  Do not use x_strdup() for maildir
1591         initialization.  Fix "missing argument" check.
1592         (get_folder): Take path_mail argument of type "const char *"
1593         instead of "char **".  Do not free path_mail.
1594         (_do_mail): Add const qualifier to path_mail argument.
1595         Pass path_mail to get_folder() by value.
1596
1597         * modules/pam_motd/pam_motd.c: Include <syslog.h>.
1598         (pam_sm_open_session): Add const qualifier to motd_path.
1599         Do not use x_strdup() for motd_path initialization.  Do not
1600         free motd_path.  Fix "missing argument" check.  Add "unknown
1601         option" warning.
1602
1603         * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
1604         qualifier to database and cryptmode arguments.  Fix "missing
1605         argument" checks.
1606         (pam_sm_authenticate): Add const qualifier to database and cryptmode.
1607         (pam_sm_acct_mgmt): Likewise.
1608
1609 2005-10-01  Steve Langasek  <vorlon@debian.org>
1610
1611         * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
1612
1613 2005-09-30  Steve Langasek  <vorlon@debian.org>
1614
1615         * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
1616         gratuitous use of strdup().
1617
1618 2005-09-27  Thorsten Kukuk  <kukuk@thkukuk.de>
1619
1620         * release 0.99.1.0
1621
1622         * doc/specs/Makefile.am (install-data-local): Install
1623         rfc and draft.
1624         (all): Copy rfc if we build outside of source directory.
1625
1626 2005-09-27  Thorsten Kukuk  <kukuk@suse.de>
1627
1628         * NEWS: Document removal of pam_radius.
1629         * autogen.sh: Make configure script executeable.
1630
1631         * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
1632         (lex.yy.c): Fixed out of tree build.
1633
1634         * conv/pam_conv1/pam_conv.y: Fix main prototype.
1635
1636         * README: Adjust.
1637
1638         * po/POTFILES.in: Remove files not distributed by tar archive
1639         and not containing strings for translation.
1640
1641 2005-09-26  Tomas Mraz  <t8m@centrum.cz>
1642
1643         * NEWS: Add a few missing entries from CHANGELOG.
1644
1645         * AUTHORS: Fixed entries for Toady and me.
1646
1647         * Makefile.am (M4_FILES): Fixed out of tree build.
1648         * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
1649         (spec, lex.yy.c): Fixed out of tree build.
1650
1651         * modules/pam_userdb/README: Document try_first_pass and
1652         use_first_pass options, remove use_authtok option.
1653
1654
1655 2005-09-26  Dmitry V. Levin  <ldv@altlinux.org>
1656
1657         * NEWS: Mention changes in pam_lastlog.
1658
1659 2005-09-26  Thorsten Kukuk  <kukuk@suse.de>
1660
1661         * NEWS: New file.
1662         * autogen.sh: Don't generate NEWS file.
1663         * CHANGELOG: Document it as obsolete.
1664
1665 2005-09-26  Tomas Mraz  <t8m@centrum.cz>
1666
1667         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
1668         _log_err() -> pam_syslog()
1669         (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
1670         * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
1671         _log_err() -> pam_syslog()
1672         * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
1673         (getNISserver, _unix_run_shadow_binary, _update_passwd,
1674         _update_shadow, _do_setpass, _pam_unix_approve_pass,
1675         pam_sm_chauthtok): _log_err() -> pam_syslog()
1676         * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
1677         (pam_sm_open_session, pam_sm_close_session):
1678         _log_err() -> pam_syslog()
1679         * modules/pam_unix/support.c (_log_err, converse): removed
1680         (_make_remark): use pam_prompt() instead of converse()
1681         (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
1682         _unix_verify_password, _unix_read_password):
1683         _log_err() -> pam_syslog()
1684         _cleanup(), _unix_cleanup(): Silence unused param warnings.
1685         (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
1686         _unix_run_helper_binary): Silence incorrect type warnings.
1687         (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
1688         instead of converse().
1689         * modules/pam_unix/support.h (_log_err): removed
1690         * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
1691
1692 2005-09-26  Thorsten Kukuk  <kukuk@suse.de>
1693
1694         * configure.in: Add doc/specs/Makefile.
1695         * Makefile.am: Add releasedocs rule.
1696         * doc/Makefile.am: Add specs subdir, remove files from specs
1697         directory, add rfc86.0.txt to releasedocs.
1698         * doc/specs/Makefile.am: New file.
1699         * doc/specs/formatter/parse.y: move from here ...
1700         * doc/specs/parse.y: ... here.
1701         * doc/specs/formatter/parse.lex: move from here ...
1702         * doc/specs/parse.lex: ... here.
1703
1704         * modules/pam_mail/pam_mail.c: Mark missing strings for translation
1705         * po/Linux-PAM.pot: Add new strings from pam_mail
1706         * po/cs.po: Likewise.
1707         * po/de.po: Likewise.
1708         * po/es.po: Likewise.
1709         * po/fi.po: Likewise.
1710         * po/fr.po: Likewise.
1711         * po/hu.po: Likewise.
1712         * po/it.po: Likewise.
1713         * po/ja.po: Likewise.
1714         * po/nb.po: Likewise.
1715         * po/pa.po: Likewise.
1716         * po/pl.po: Likewise.
1717         * po/pt.po: Likewise.
1718         * po/pt_BR.po: Likewise.
1719         * po/zh_CN.po: Likewise.
1720         * po/zh_TW.po: Likewise.
1721
1722 2005-09-23  Tomas Mraz  <t8m@centrum.cz>
1723
1724         * modules/pam_access/pam_access.c (from_match): Support NULL from.
1725         (string_match): Support NULL string, add NONE keyword matching it.
1726         (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
1727         * modules/pam_access/access.conf: NONE keyword description
1728         * modules/pam_access/README: NONE keyword description
1729
1730 2005-09-22  Dmitry V. Levin  <ldv@altlinux.org>
1731
1732         * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
1733         pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
1734         text of log messages.
1735         (pam_sm_open_session): Replace sequence of malloc(), strcpy()
1736         and strcat() calls with asprintf().  Replace syslog() calls
1737         with pam_syslog().
1738
1739         * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
1740         instead of memcmp() for string comparison.
1741
1742 2005-09-21  Dmitry V. Levin  <ldv@altlinux.org>
1743
1744         * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
1745         (parse_args): Add pam_handle_t* argument.  Log unrecognized
1746         options.
1747         (perform_check): Log pam_get_user() and malloc() failures.
1748         (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
1749         Pass pam_handle_t* to parse_args().
1750
1751         * modules/pam_mail/pam_mail.c: Include <errno.h>.
1752         Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
1753         NO_MAIL_STANDARD_FORMAT macros.
1754         (parse_args, get_folder): Cleanup error messages.
1755         (get_folder): Fix leak of the path_mail variable in case of
1756         pam_get_user() failure.  Cleanup memory management.
1757         (get_mail_status): Add pam_handle_t* argument.  Fix leaks of
1758         namelist variable.  Cleanup memory management.  Log memory
1759         allocation failures.  Remove 250-byte limit on Maildir pathname.
1760         (report_mail): Mark text messages for translation.
1761         (_do_mail): Cleanup memory management.  Pass pam_handle_t*
1762         to get_mail_status().
1763
1764         * po/Linux-PAM.pot: Update with new strings from pam_mail for
1765         translation.
1766         * po/cs.po: Likewise.
1767         * po/de.po: Likewise.
1768         * po/es.po: Likewise.
1769         * po/fi.po: Likewise.
1770         * po/fr.po: Likewise.
1771         * po/hu.po: Likewise.
1772         * po/it.po: Likewise.
1773         * po/ja.po: Likewise.
1774         * po/nb.po: Likewise.
1775         * po/pa.po: Likewise.
1776         * po/pl.po: Likewise.
1777         * po/pt.po: Likewise.
1778         * po/pt_BR.po: Likewise.
1779         * po/zh_CN.po: Likewise.
1780         * po/zh_TW.po: Likewise.
1781
1782 2005-09-20  Thorsten Kukuk  <kukuk@suse.de>
1783
1784         * configure.in: Add finish translation.
1785         * po/fi.po: New.
1786
1787         * acinclude.m4: remove libprelude macros.
1788         * m4/libprelude.m4: New.
1789
1790         * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
1791
1792         * libpamc/Makefile.am (EXTRA_DIST): Add License.
1793
1794 See CHANGELOG for earlier changes.