granicus.if.org Git - linux-pam/blob - ChangeLog

   1 2006-09-06  Thorsten Kukuk  <kukuk@thkukuk.de>
   2
   3         * release version 0.99.6.3
   4
   5 2006-09-01  Thorsten Kukuk  <kukuk@thkukuk.de>
   6
   7         * modules/pam_loginuid/pam_loginuid.8.xml: Fix typo in
   8         config name.
   9
  10 2006-08-31  Thorsten Kukuk  <kukuk@thkukuk.de>
  11
  12         * modules/pam_env/environment: New, dummy environment example
  13         config file.
  14
  15         * modules/pam_namespace/Makefile.am: Don't install
  16         manual page if we don't build module.
  17
  18         * m4/ld-as-needed.m4: Don't set LDFLAGS if check failed.
  19         * m4/ld-O1: Likewise.
  20
  21 2006-08-30  Tomas Mraz  <t8m@centrum.cz>
  22
  23         * modules/pam_access/pam_access.8.xml: All services supported.
  24         * modules/pam_access/pam_access.c (pam_sm_open_session): New.
  25         (pam_sm_close_session): New.
  26         (pam_sm_chauthtok): New.
  27
  28         * modules/pam_access/pam_succeed_if.8.xml: All services supported.
  29         * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return
  30         PAM_IGNORE rather than success.
  31         (pam_sm_open_session): New.
  32         (pam_sm_close_session): New.
  33         (pam_sm_chauthtok): New.
  34
  35 2006-08-30  Thorsten Kukuk  <kukuk@thkukuk.de>
  36
  37         * xtests/Makefile.am: Move shell code to execute tests from here ...
  38         * xtests/run-xtests.sh: ... to here.
  39         * xtests/*.c: Include config.h.
  40         * tests/*.c: Likewise.
  41
  42         * modules/pam_namespace/pam_namespace.c: Use pam_modutil_getpwnam()
  43         instead of getpwnam().
  44
  45 2006-08-29  Thorsten Kukuk  <kukuk@thkukuk.de>
  46
  47         * doc/sag/pam_loginuid.xml: New.
  48         * doc/sag/Linux-PAM_SAG.xml: Include pam_loginuid.xml.
  49
  50         * configure.in: Add modules/pam_loginuid/Makefile.
  51         * modules/Makefile.am: Add pam_loginuid sub directory.
  52
  53         * libpam/pam_static_modules.h: Add pam_loginuid.
  54
  55         * modules/pam_loginuid/Makefile.am: New.
  56         * modules/pam_loginuid/tst-pam_loginuid: New.
  57         * modules/pam_loginuid/pam_loginuid.8.xml: New.
  58         * modules/pam_loginuid/pam_loginuid.8: New, generated from XML source.
  59         * modules/pam_loginuid/pam_loginuid.c: New.
  60         * modules/pam_loginuid/README.xml: New.
  61         * modules/pam_loginuid/README: New, generated from XML source.
  62
  63 2006-08-29  Dmitry V. Levin  <ldv@altlinux.org>
  64
  65         * modules/pam_exec/pam_exec.c (call_exec): Add required third
  66         argument to open() call with O_CREAT flag set.
  67
  68 2006-08-28  Thorsten Kukuk  <kukuk@thkukuk.de>
  69
  70         * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Remove
  71         duplicate code.
  72
  73 2006-08-24  Thorsten Kukuk  <kukuk@thkukuk.de>
  74
  75         * release version 0.99.6.2
  76
  77         * modules/pam_lastlog/pam_lastlog.c (last_login_date): Create
  78         lastlog file if it does not exist.
  79
  80         * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Check
  81         for error from getting second token.
  82         * xtests/Makefile.am: Add tst-pam_cracklib1
  83         * xtests/tst-pam_cracklib1.c: New, check for pam_cracklib seg.fault.
  84         * xtests/tst-pam_cracklib1.pamd: New, config for cracklib test.
  85
  86 2006-08-24  Thorsten Kukuk  <kukuk@thkukuk.de>
  87
  88         * xtests/tst-pam_dispatch4.c: New test.
  89         * xtests/tst-pam_dispatch4.pamd: PAM config for new test.
  90
  91 2006-08-09  Thorsten Kukuk  <kukuk@thkukuk.de>
  92
  93         * release version 0.99.6.1
  94
  95 2006-08-09  David Howells  <dhowells@redhat.com>
  96
  97         * modules/pam_keyinit/pam_keyinit.c (kill_keyrings): Set real uid
  98         to user's before revoking.
  99         (pam_sm_open_session): Remember the uid.
 100
 101 2006-08-06  Thorsten Kukuk  <kukuk@thkukuk.de>
 102
 103         * modules/pam_umask/pam_umask.c (setup_limits_from_gecos):
 104         Add error handling.
 105         * modules/pam_umask/pam_umask.8.xml: Document silent option.
 106
 107         * xtests/Makefile.am: Fix includes for bootstrapping.
 108         Reported by Greg Schafer <gschafer@zip.com.au>.
 109
 110 2006-08-05  Thorsten Kukuk  <kukuk@thkukuk.de>
 111
 112         * release version 0.99.6.0
 113
 114         * modules/pam_limits/pam_limits.c (pam_sm_open_session): Use
 115         pam_modutil_getpwnam instead of getpwnam.
 116
 117         * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Cast
 118         svc variable to char pointer for snprintf.
 119
 120         * configure.in: Generate xtests/Makefile.
 121         * Makefile.am (SUBDIRS): Add xtests.
 122         * README: Document make check and make xtests.
 123         * xtests/Makefile.am: New.
 124         * xtests/tst-pam_dispatch1.pamd: New.
 125         * xtests/tst-pam_dispatch2.pamd: New.
 126         * xtests/tst-pam_dispatch3.pamd: New.
 127         * xtests/tst-pam_dispatch1.c: New.
 128         * xtests/tst-pam_dispatch2.c: New.
 129         * xtests/tst-pam_dispatch3.c: New.
 130
 131 2006-08-04 Ray Strode  <rstrode@redhat.com>
 132
 133         * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate):
 134         Return PAM_USER_UNKNOWN instead of PAM_SERVICE_ERR where appropriate.
 135
 136 2006-08-03  David Howells  <dhowells@redhat.com>
 137
 138         * modules/pam_keyinit/pam_keyinit.c: Debug should be off by default.
 139         (init_keyrings): Properly handle multiple invocations of the module.
 140         (kill_keyrings, pam_sm_open_session, pam_sm_close_session): Likewise.
 141
 142 2006-08-03  Tomas Mraz  <t8m@centrum.cz>
 143
 144         * modules/pam_succeed_if/pam_succeed_if.c (evaluate_inlist):
 145         New function for list matching.
 146         (evaluate_notinlist): Likewise.
 147         (evaluate): Add service value match, list matching.
 148         * modules/pam_succeed_if/pam_succeed_if.8.xml: Document the
 149         features.
 150
 151         * modules/pam_selinux/pam_selinux.c (security_label_tty): Don't log
 152         relabelling error when the tty device doesn't exist (ENOENT).
 153
 154 2006-08-01  Thorsten Kukuk  <kukuk@thkukuk.de>
 155
 156         * doc/man/pam_fail_delay.3.xml: Fix some Bugs and enhance
 157         rationale about when this function should be used and when not.
 158
 159         * doc/index.html: Cleanup to look prettier.
 160
 161 2006-08-01  Thorsten Kukuk  <kukuk@thkukuk.de>
 162
 163         * libpam/Makefile.am: Bump patchlevel of libpam.
 164         * libpam/pam_dispatch.c (_pam_dispatch_aux): If [return=die]
 165         or [return=bad] is used, don't return PAM_IGNORE. Based on
 166         patch by Tomas Mraz <t8m@centrum.cz>, [BRC#196859].
 167
 168 2006-07-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 169
 170         * ABOUT-NLS: Upgrade to gettext-0.15.
 171         * config.rpath: Likewise.
 172         * m4/gettext.m4: Upgrade to gettext-0.15.
 173         * m4/inttypes-h.m4: New file, from gettext-0.15.
 174         * m4/inttypes-pri.m4: Upgrade to gettext-0.15.
 175         * m4/lib-link.m4: Upgrade to gettext-0.15.
 176         * m4/lib-prefix.m4: Upgrade to gettext-0.15.
 177         * m4/lock.m4: New file, from gettext-0.15.
 178         * m4/longdouble.m4: Upgrade to gettext-0.15.
 179         * m4/nls.m4: Upgrade to gettext-0.15.
 180         * m4/po.m4: Upgrade to gettext-0.15.
 181         * m4/size_max.m4: Upgrade to gettext-0.15.
 182         * m4/visibility.m4: New file, from gettext-0.15.
 183         * po/Makefile.in.in: Upgrade to gettext-0.15.
 184
 185 2006-07-24  David Quigley   <dpquigl@tycho.nsa.gov>
 186
 187         * modules/pam_namespace/Makefile.am: Add pam_namespace.h.
 188         * modules/pam_namespace/pam_namespace.c: Move includes and
 189         data structure definitions from here ...
 190         * modules/pam_namespace/pam_namespace.h: ... here. New file.
 191
 192         * modules/pam_namespace/pam_namespace.c: Move large sections
 193         of code into new functions.
 194
 195 2006-07-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 196
 197         * doc/adg/Makefile.am: Add uninstall and distclean rules.
 198         * doc/mwg/Makefile.am: Likewise.
 199         * doc/sag/Makefile.am: Likewise.
 200
 201 2006-07-08  Daniel Richard G.  <skunk@iskunk.org>
 202
 203         * conf/pam_conv1/Makefile.am: Fix rules for lex and yacc files.
 204         * conf/pam_conv1/pam_conv.lex: Rename to ...
 205         * conf/pam_conv1/pam_conv_l.l: ... this.
 206         * conf/pam_conv1/pam_conv.y: Rename to ...
 207         * conf/pam_conv1/pam_conv_y.y: ... this.
 208         * configure.in: Add AC_HELP_STRING()s to various AC_ARG_ENABLE()
 209         calls.
 210         * doc/Makefile.am: Fix rule to install index.html.
 211         * doc/adg/Makefile.am: Fix test usage.
 212         * doc/mwg/Makefile.am: Likewise.
 213         * doc/sag/Makefile.am: Likewise.
 214         * doc/specs/Makefile.am: Fix rules for lex and yacc files.
 215         * specs/parse.lex: Rename to ...
 216         * doc/specs/parse_l.l: ... this.
 217         * doc/specs/parse.y: Rename to ...
 218         * doc/specs/parse_y.y: ... this.
 219         * libpam/pam_account.c: Fix #if vs. #ifdef.
 220         * libpam/pam_audit.c: Likewise.
 221         * libpam/pam_auth.c: Likewise.
 222         * libpam/pam_password.c: Likewise.
 223         * libpam/pam_private.h: Likewise.
 224         * libpam/pam_session.c: Likewise.
 225         * libpam/pam_start.c: Likewise.
 226         * libpam/pam_static.c: Fix "empty sourcefile" warning.
 227         * modules/pam_limits/pam_limits.c: Check for __linux, too.
 228         * modules/pam_userdb/Makefile.am: Don't run test if no
 229         libdb available.
 230         * tests/tst-dlopen.c: Include config.h.
 231
 232 2006-07-03  Dan Yefimov  <dan@D00M.lightwave.net.ru>
 233
 234         * configure.in: Fixed have_key_syscalls test.
 235
 236         * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network
 237         match, removed AI_ADDRCONFIG flag.
 238
 239 2006-06-30  Tomas Mraz  <t8m@centrum.cz>
 240
 241         * modules/pam_namespace/Makefile.am(EXTRA_DIST): Add namespace.init.
 242
 243 2006-06-29  Thorsten Kukuk  <kukuk@thkukuk.de>
 244
 245         * doc/Makefile.am (releasedocs): Fix directory layout.
 246         * doc/adg/Makefile.am: Likewise.
 247         * doc/mwg/Makefile.am: Likewise.
 248         * doc/sag/Makefile.am: Likewise.
 249
 250 2006-06-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 251
 252         * doc/sag: System Administrator Guide as XML source.
 253         * doc/sag/Makefile.am: New.
 254         * doc/sag/Linux-PAM_SAG.xml: New, main XML document.
 255         * doc/sag/pam_*.xml: New, wrapper to include module documentation.
 256
 257         * doc/adg: Application Developers Guide as XML source.
 258         * doc/adg/Makefile.am: New.
 259         * doc/adg/Linux-PAM_ADG.xml: New, main XML document.
 260         * doc/adg/pam_*.xml: New, wrappers to include manual pages.
 261
 262         * doc/mwg: Application Developers Guide as XML source.
 263         * doc/mwg/Makefile.am: New.
 264         * doc/mwg/Linux-PAM_MWG.xml: New, main XML document.
 265         * doc/mwg/pam_*.xml: New, wrappers to include manual pages.
 266
 267         * doc/CREDITS: Removed.
 268         * doc/NOTES: Removed.
 269         * doc/pam_appl.sgml: Removed.
 270         * doc/pam_modules.sgml: Removed.
 271         * doc/pam_source.sgml: Removed.
 272         * doc/figs/pam_orient.txt: Removed.
 273         * doc/figs: Removed.
 274
 275         * configure.in: Remove checks for sgml2* progrs, add sag, adg
 276         and mwg Makefiles.
 277
 278         * doc/Makefile.am: Remove references to sgml, add sag, adg and mwg
 279         directories.
 280         * doc/modules: Remove directory.
 281         * doc/html: Remove directory.
 282         * doc/ps: Remove directory.
 283         * doc/pdf: Remove directory.
 284         * doc/txts: Remove directory.
 285         * doc/index.html: Moved from html directory to here.
 286
 287 2006-06-28  Thorsten Kukuk  <kukuk@thkukuk.de>
 288
 289         * release version 0.99.5.0
 290
 291         * bump version number to 0.99.5.0
 292
 293         * modules/pam_rhosts/pam_rhosts.c: New module, replaces
 294         pam_rhosts_auth.so.
 295         * modules/pam_rhosts/pam_rhosts.8.xml: New.
 296         * modules/pam_rhosts/pam_rhosts.8: New, generated from XML source.
 297         * modules/pam_rhosts/tst-pam_rhosts: New.
 298         * modules/pam_rhosts/Makefile.am: Add pam_rhosts, generate
 299         manual page and README.
 300         * modules/pam_rhosts/README.xml: New.
 301         * modules/pam_rhosts/reADME: Regenerated from XML source.
 302
 303         * doc/man/pam_sm_acct_mgmt.3.xml: Adjust syntax for module
 304         writers guide.
 305         * doc/man/pam_sm_authenticate.3.xml: Likewise.
 306         * doc/man/pam_sm_chauthtok.3.xml: Likewise.
 307         * doc/man/pam_sm_close_session.3.xml: Likewise.
 308         * doc/man/pam_sm_open_session.3.xml: Likewise.
 309         * doc/man/pam_sm_setcred.3.xml: Likewise.
 310
 311         * po/POTFILES.in: Add new source files.
 312
 313         * libpam/pam_static_modules.h: Add new modules.
 314
 315         * modules/pam_keyinit.c: Add _pam_keyinit_modstruct.
 316
 317         * modules/pam_keyinit/Makefile.am (EXTRA_DIST): Add XML
 318         files and manual page.
 319
 320 2006-06-27  Thorsten Kukuk <kukuk@thkukuk.de>
 321
 322         * configure.in: Allow disabling of SELinux support, check for
 323         rootok_af.
 324
 325 2006-06-27  Tomas Mraz <t8m@centrum.cz>
 326
 327         * modules/pam_namespace/pam_namespace.c: New module
 328         originally written by Janak Desai.
 329         * modules/pam_namespace/Makefile.am: New.
 330         * modules/pam_namespace/README: New.
 331         * modules/pam_namespace/md5.c: New.
 332         * modules/pam_namespace/md5.h: New.
 333         * modules/pam_namespace/namespace.conf: New.
 334         * modules/pam_namespace/namespace.conf.5: New.
 335         * modules/pam_namespace/namespace.conf.5.xml: New.
 336         * modules/pam_namespace/namespace.init: New.
 337         * modules/pam_namespace/pam_namespace.8: New.
 338         * modules/pam_namespace/pam_namespace.8.xml: New.
 339         * modules/pam_namespace/tst-pam_namespace: New.
 340         * modules/Makefile.am: Added pam_namespace.
 341         * configure.in: Added pam_namespace, test for unshare
 342         library call.
 343
 344 2006-06-27  David Howells <dhowells@redhat.com>
 345
 346         * modules/pam_keyinit/pam_keyinit.c: New module.
 347         * modules/pam_keyinit/pam_keyinit.8: New.
 348         * modules/pam_keyinit/pam_keyinit.8.xml: New.
 349         * modules/pam_keyinit/README: New.
 350         * modules/pam_keyinit/README.xml: New.
 351         * modules/pam_keyinit/Makefile.am: New.
 352         * modules/pam_keyinit/tst-pam_keyinit: New.
 353         * modules/Makefile.am: Added pam_keyinit.
 354         * configure.in: Added test for the key mgmt syscall.
 355
 356 2006-06-27  Thorsten Kukuk <kukuk@thkukuk.de>
 357
 358         * m4/libprelude.m4: Sync with upstream.
 359
 360 2006-06-27  Tomas Mraz <t8m@centrum.cz>
 361
 362         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
 363         signal() fails with SIG_ERR return
 364         * modules/pam_unix/pam_unix_passwd.c(_unix_run_shadow_binary):
 365         Likewise.
 366         * modules/pam_unix/support.c(_unix_run_helper_binary):
 367         Likewise.
 368
 369 2006-06-25  Thorsten Kukuk  <kukuk@thkukuk.de>
 370
 371         * doc/man/misc_conv.3.xml: New.
 372         * doc/man/misc_conv.3: New.
 373         * doc/man/pam_misc_paste_env.3.xml: New.
 374         * doc/man/pam_misc_paste_env.3: New.
 375         * doc/man/pam_misc_drop_env.3.xml: New.
 376         * doc/man/pam_misc_drop_env.3: New.
 377         * doc/man/pam_misc_setenv.3.xml: New.
 378         * doc/man/pam_misc_setenv.3: New.
 379         * doc/man/Makefile.am: Add new manual pages.
 380
 381         * doc/man/pam_acct_mgmt.3.xml: Fix syntax for inclusion
 382         in Applicatoin Developer Guide.
 383         * doc/man/pam_authenticate.3.xml: Likewise
 384         * doc/man/pam_chauthtok.3.xml: Likewise
 385         * doc/man/pam_close_session.3.xml: Likewise
 386         * doc/man/pam_conv.3.xml: Likewise
 387         * doc/man/pam_end.3.xml: Likewise
 388         * doc/man/pam_fail_delay.3.xml: Likewise
 389         * doc/man/pam_getenv.3.xml: Likewise
 390         * doc/man/pam_getenvlist.3.xml: Likewise
 391         * doc/man/pam_open_session.3.xml: Likewise
 392         * doc/man/pam_putenv.3.xml: Likewise
 393         * doc/man/pam_setcred.3.xml: Likewise
 394         * doc/man/pam_start.3.xml: Likewise
 395         * doc/man/pam_strerror.3.xml: Likewise
 396
 397         * doc/man/pam_acct_mgmt.3: Regenerate from XML source.
 398         * doc/man/pam_authenticate.3: Likewise
 399         * doc/man/pam_chauthtok.3: Likewise
 400         * doc/man/pam_close_session.3: Likewise
 401         * doc/man/pam_conv.3: Likewise
 402         * doc/man/pam_end.3: Likewise
 403         * doc/man/pam_fail_delay.3: Likewise
 404         * doc/man/pam_getenv.3: Likewise
 405         * doc/man/pam_getenvlist.3: Likewise
 406         * doc/man/pam_open_session.3: Likewise
 407         * doc/man/pam_putenv.3: Likewise
 408         * doc/man/pam_setcred.3: Likewise
 409         * doc/man/pam_sm_close_session.3: Likewise
 410         * doc/man/pam_start.3: Likewise
 411         * doc/man/pam_strerror.3: Likewise
 412         * doc/man/pam_syslog.3: Likewise
 413         * doc/man/PAM.8: Likewise
 414
 415 2006-06-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 416
 417         * modules/pam_limits/pam_limits.c (setup_limits): Don't
 418         reset priority for root.
 419
 420 2006-06-23  Thorsten Kukuk  <kukuk@thkukuk.de>
 421
 422         * modules/pam_access/access.conf.5.xml: Fix syntax for SAG.
 423         * modules/pam_access/pam_access.8.xml: Likewise.
 424         * modules/pam_deny/pam_deny.8.xml: Likewise.
 425         * modules/pam_echo/pam_echo.8.xml: Likewise.
 426         * modules/pam_env/pam_env.8.xml: Likewise.
 427         * modules/pam_env/pam_env.conf.5.xml: Likewise.
 428         * modules/pam_group/group.conf.5.xml: Likewise.
 429         * modules/pam_group/pam_group.8.xml: Likewise.
 430         * modules/pam_limits/limits.conf.5.xml: Likewise.
 431         * modules/pam_listfile/pam_listfile.8.xml: Likewise.
 432         * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
 433         * modules/pam_time/pam_time.8.xml: Likewise.
 434         * modules/pam_time/time.conf.5.xml: Likewise.
 435
 436         * modules/pam_access/access.conf.5: Regenerate.
 437         * modules/pam_access/pam_access.8: Likewise.
 438         * modules/pam_deny/pam_deny.8: Likewise.
 439         * modules/pam_echo/README: Likewise.
 440         * modules/pam_echo/pam_echo.8: Likewise.
 441         * modules/pam_env/pam_env.8: Likewise.
 442         * modules/pam_env/pam_env.conf.5: Likewise.
 443         * modules/pam_group/README: Likewise.
 444         * modules/pam_group/group.conf.5: Likewise.
 445         * modules/pam_group/pam_group.8: Likewise.
 446         * modules/pam_limits/limits.conf.5: Likewise.
 447         * modules/pam_listfile/README: Likewise.
 448         * modules/pam_listfile/pam_listfile.8: Likewise.
 449         * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
 450         * modules/pam_time/pam_time.8: Likewise.
 451         * modules/pam_time/time.conf.5: Likewise.
 452
 453         * doc/man/Makefile.am: Add pam.conf-desc.xml, pam.conf-dir.xml
 454         and pam.conf-syntax.xml.
 455         * doc/man/pam.conf.5.xml: Split into different pieces for SAG.
 456         * doc/man/pam.conf.5: Regenerated.
 457         * doc/man/pam.conf-desc.xml: New.
 458         * doc/man/pam.conf-dir.xml: New.
 459         * doc/man/pam.conf-syntax.xml: New.
 460
 461 2006-06-21  Thorsten Kukuk  <kukuk@thkukuk.de>
 462
 463         * modules/pam_selinux/Makefile.am: Fix "make dist" if libselinux
 464         is not installed.
 465
 466         * modules/pam_issue/pam_issue.8.xml: Fix listing of escapes.
 467         * modules/pam_issue/pam_issue.8: Regenerate.
 468
 469 2006-06-20  Thorsten Kukuk  <kukuk@thkukuk.de>
 470
 471         * configure.in: Remove unused check for libcap.
 472
 473         * m4/ld-as-needed.m4: New.
 474         * m4/ld-O1.m4: New.
 475         * configure.in: Call PAM_LD_AS_NEEDED and PAM_LD_O1,
 476         require docbook version 4.4.
 477
 478 2006-06-19  Thorsten Kukuk  <kukuk@thkukuk.de>
 479
 480         * doc/man/pam.8.xml: Syntax cleanup.
 481         * doc/pam/PAM.8: Regenerated from xml source.
 482         * man/pam_sm_chauthtok.3: New.
 483         * man/pam_sm_chauthtok.3.xml: New.
 484         * man/pam_sm_close_session.3: New.
 485         * man/pam_sm_close_session.3.xml: New.
 486         * man/pam_sm_open_session.3: New.
 487         * man/pam_sm_open_session.3.xml: New.
 488         * man/pam_sm_authenticate.3: New.
 489         * man/pam_sm_authenticate.3.xml: New.
 490         * man/pam_sm_setcred.3: New.
 491         * man/pam_sm_setcred.3.xml: New.
 492         * man/Makefile.am: Add new pam_sm_* manual pages.
 493
 494         * specs/Makefile.am: Fix rule to generate draft.
 495
 496 2006-06-18  Thorsten Kukuk  <kukuk@thkukuk.de>
 497
 498         * modules/pam_tally/Makefile.am: Include Make.xml.rules.
 499         * modules/pam_tally/pam_tally.8.xml: New.
 500         * modules/pam_tally/pam_tally.8: New, generated from xml file.
 501         * modules/pam_tally/README.xml: New.
 502         * modules/pam_tally/README: Regenerated from xml file.
 503
 504         * modules/pam_selinux/Makefile.am: Include Make.xml.rules.
 505         * modules/pam_selinux/pam_selinux.8.xml: New.
 506         * modules/pam_selinux/pam_selinux.8: Regenerated from xml file.
 507         * modules/pam_selinux/README.xml: New.
 508         * modules/pam_selinux/README: Regenerated from xml file.
 509
 510 2006-06-17  Thorsten Kukuk  <kukuk@thkukuk.de>
 511
 512         * modules/pam_debug/Makefile.am: Include Make.xml.rules.
 513         * modules/pam_debug/pam_debug.8.xml: New.
 514         * modules/pam_debug/pam_debug.8: New, generated from xml file.
 515         * modules/pam_debug/README.xml: New.
 516         * modules/pam_debug/README: Regenerated from xml file.
 517
 518         * examples/vpass.c: UID is unsigned on Linux.
 519         * modules/pam_exec/pam_exec.c: Likewise.
 520         * modules/pam_unix/pam_unix_acct.c: Likewise.
 521         * modules/pam_unix/pam_unix_sess.c: Likewise.
 522
 523         * modules/pam_succeed_if/pam_succeed_if.8.xml: Fix syntax error.
 524         * modules/pam_succeed_if/pam_succeed_if.8: Regenerated.
 525         * modules/pam_succeed_if/README: Regenerated.
 526
 527         * modules/pam_limits/Makefile.am: Include Make.xml.rules.
 528         * modules/pam_limits/limits.conf.5: New, generated from xml file.
 529         * modules/pam_limits/limits.conf.5.xml: New.
 530         * modules/pam_limits/pam_limits.8: New, generated from xml file.
 531         * modules/pam_limits/pam_limits.8.xml: New.
 532         * modules/pam_limits/README.xml: New.
 533         * modules/pam_limits/README: Regenerated from README.xml.
 534
 535 2006-06-16  Thorsten Kukuk  <kukuk@thkukuk.de>
 536
 537         * modules/pam_unix/pam_unix_passwd.c (save_old_password): UIDs
 538         are unsigned on Linux, don't truncate them.
 539         (_do_setpass): err is of type clnt_stat, not int.
 540
 541         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't
 542         truncate UID for syslog output.
 543
 544         * modules/pam_time/pam_time.c: Replace type boolean with int.
 545         * modules/pam_group/pam_group.c: Likewise.
 546
 547 2006-06-15  Thorsten Kukuk  <kukuk@thkukuk.de>
 548
 549         * modules/pam_unix/bigcrypt.h: New.
 550         * modules/pam_unix/Makefile.am: Add bigcrypt.h.
 551         * modules/pam_unix/bigcrypt.c: Include bigcrypt.h.
 552         * modules/pam_unix/support.c: Include bigcrypt.h, remove
 553         own prototype.
 554         * modules/pam_unix/bigcrypt_main.c: Include bigcrypt.h, remove
 555         own prototype.
 556         * modules/pam_unix/pam_unix_passwd.c: Include bigcrypt.h, remove
 557         own prototype.
 558
 559         * modules/pam_time/pam_time.c (logic_member): Remove unused
 560         variable len.
 561
 562         * modules/pam_group/pam_group.c (logic_field): Accept
 563         colon in tty name. [#1428276].
 564         (logic_member): Remove unused variable len.
 565         (check_account): Fix usage of err variable in debug code.
 566
 567         * modules/pam_time/pam_time.c (logic_field): Likewise.
 568
 569         * configure.in: Add special exceptions for icc: different
 570         compiler warnings, no PIE support.
 571
 572 2006-06-14  Thorsten Kukuk  <kukuk@thkukuk.de>
 573
 574         * libpam/pam_misc.c (_pam_strdup): Use strlen and strcpy.
 575
 576         * configure.in: Remove --enable-memory-debug, add option
 577         to disable prelude if installed.
 578
 579         * modules/pam_tally/pam_tally.c: Remove MEMORY_DEBUG
 580         * modules/pam_filter/upperLOWER/upperLOWER.c: Likewise.
 581         * modules/pam_unix/unix_chkpwd.c: Likewise.
 582         * libpam/include/security/_pam_types.h: Likewise.
 583         * libpam/libpam.map: Remove LIBPAM_MALLOC_DEBUG export.
 584         * libpam/pam_malloc.c: Remove file.
 585         * libpam/Makefile.am: Remove pam_malloc.c and pam_malloc.h.
 586
 587         * libpam/pam_handlers.c (extract_modulename): Use _pam_strdup
 588         instead of strdup.
 589
 590         * libpam/pam_private.h: Remove _pam_strCMP.
 591         * libpam/pam_misc.c: Likewise.
 592         * libpam/pam_handlers.c: Replaced _pam_strCMP with strcasecmp.
 593
 594 2006-06-12  Thorsten Kukuk  <kukuk@thkukuk.de>
 595
 596         * modules/pam_tally/Makefile.am (AM_LDFLAGS): Remove flags
 597         for modules from main application.
 598
 599 2006-06-09  Thorsten Kukuk  <kukuk@thkukuk.de>
 600
 601         * modules/pam_time/Makefile.am: Include Make.xml.rules.
 602         * modules/pam_time/time.conf.5: New, generated from xml file.
 603         * modules/pam_time/time.conf.5.xml: New.
 604         * modules/pam_time/pam_time.8: New, generated from xml file.
 605         * modules/pam_time/pam_time.8.xml: New.
 606         * modules/pam_time/README.xml: New.
 607         * modules/pam_time/README: Regenerated from README.xml.
 608
 609         * modules/pam_wheel/Makefile.am: Include Make.xml.rules.
 610         * modules/pam_wheel/pam_wheel.8.xml: New.
 611         * modules/pam_wheel/pam_wheel.8: New, generated from xml file.
 612         * modules/pam_wheel/README.xml: New.
 613         * modules/pam_wheel/README: Regenerated from xml file.
 614
 615         * modules/pam_xauth/Makefile.am: Include Make.xml.rules.
 616         * modules/pam_xauth/pam_xauth.8.xml: New.
 617         * modules/pam_xauth/pam_xauth.8: Regenerated from xml file.
 618         * modules/pam_xauth/README.xml: New.
 619         * modules/pam_xauth/README: Regenerated from xml file.
 620
 621         * modules/pam_deny/pam_deny.8.xml: Fix syntax errors.
 622         * modules/pam_deny/pam_deny.8: Regenerate from xml file.
 623         * modules/pam_deny/README: Likewise.
 624
 625         * modules/pam_warn/Makefile.am: Include Make.xml.rules.
 626         * modules/pam_warn/pam_warn.8.xml: New.
 627         * modules/pam_warn/pam_warn.8: New, generated from xml file.
 628         * modules/pam_warn/README.xml: New.
 629         * modules/pam_warn/README: Regenerated from xml file.
 630
 631         * modules/pam_userdb/Makefile.am: Include Make.xml.rules.
 632         * modules/pam_userdb/pam_userdb.8.xml: New.
 633         * modules/pam_userdb/pam_userdb.8: New, generated from xml file.
 634         * modules/pam_userdb/README.xml: New.
 635         * modules/pam_userdb/README: Regenerated from xml file.
 636
 637 2006-06-06  Thorsten Kukuk  <kukuk@thkukuk.de>
 638
 639         * modules/pam_shells/Makefile.am: Include Make.xml.rules.
 640         * modules/pam_shells/pam_shells.8.xml: New.
 641         * modules/pam_shells/pam_shells.8: New, generated from xml file.
 642         * modules/pam_shells/README.xml: New.
 643         * modules/pam_shells/README: Regenerated from xml file.
 644
 645         * libpam/include/security/pam_malloc.h: Add missing license
 646         informations.
 647
 648         * libpam/include/security/pam_ext.h: Add brackets for C++.
 649         * libpam/include/security/pam_modutil.h: Likewise.
 650
 651         * libpam/include/security/pam_modules.h: Document where to
 652         find the copyright/license informations.
 653
 654         * libpam/include/security/pam_appl.h: Move _pam_compat.h
 655         include inside of brackets.
 656
 657 2006-06-04  Thorsten Kukuk  <kukuk@thkukuk.de>
 658
 659         * modules/pam_securetty/Makefile.am: Include Make.xml.rules.
 660         * modules/pam_securetty/pam_securetty.8.xml: New.
 661         * modules/pam_securetty/pam_securetty.8: Regenerated from xml file.
 662         * modules/pam_securetty/README.xml: New.
 663         * modules/pam_securetty/README: Regenerated from xml file.
 664
 665         * modules/pam_rootok/Makefile.am: Include Make.xml.rules.
 666         * modules/pam_rootok/pam_rootok.8.xml: New.
 667         * modules/pam_rootok/pam_rootok.8: New, generated from xml file.
 668         * modules/pam_rootok/README.xml: New.
 669         * modules/pam_rootok/README: Regenerated from xml file.
 670
 671         * modules/pam_permit/Makefile.am: Include Make.xml.rules.
 672         * modules/pam_permit/pam_permit.8.xml: New.
 673         * modules/pam_permit/pam_permit.8: New, generated from xml file.
 674         * modules/pam_permit/README.xml: New.
 675         * modules/pam_permit/README: Regenerated from xml file.
 676
 677         * modules/pam_nologin/Makefile.am: Include Make.xml.rules.
 678         * modules/pam_nologin/pam_nologin.8.xml: New.
 679         * modules/pam_nologin/pam_nologin.8: Regenerated from xml file.
 680         * modules/pam_nologin/README.xml: New.
 681         * modules/pam_nologin/README: Regenerated from xml file.
 682
 683 2006-06-03  Thorsten Kukuk  <kukuk@thkukuk.de>
 684
 685         * modules/pam_motd/Makefile.am: Include Make.xml.rules.
 686         * modules/pam_motd/pam_motd.8.xml: New.
 687         * modules/pam_motd/pam_motd.8: New, generated from xml file.
 688         * modules/pam_motd/README.xml: New.
 689         * modules/pam_motd/README: New, generated from xml file.
 690
 691 2006-06-02  Thorsten Kukuk  <kukuk@thkukuk.de>
 692
 693         * modules/pam_mail/Makefile.am: Include Make.xml.rules.
 694         * modules/pam_mail/pam_mail.8.xml: New.
 695         * modules/pam_mail/pam_mail.8: New, generated from xml file.
 696         * modules/pam_mail/README.xml: New.
 697         * modules/pam_mail/README: Regenerated from xml file.
 698
 699         * modules/pam_localuser/Makefile.am: Include Make.xml.rules.
 700         * modules/pam_localuser/pam_localuser.8.xml: New.
 701         * modules/pam_localuser/pam_localuser.8: New, generated from xml file.
 702         * modules/pam_localuser/README.xml: New.
 703         * modules/pam_localuser/README: Regenerated from xml file.
 704
 705         * doc/man/PAM.8: Regenerate with DocBook XSL Stylesheets v1.70.1.
 706         * doc/man/pam.3: Likewise.
 707         * doc/man/pam.conf.5: Likewise.
 708         * doc/man/pam_acct_mgmt.3: Likewise.
 709         * doc/man/pam_authenticate.3: Likewise.
 710         * doc/man/pam_chauthtok.3: Likewise.
 711         * doc/man/pam_close_session.3: Likewise.
 712         * doc/man/pam_conv.3: Likewise.
 713         * doc/man/pam_end.3: Likewise.
 714         * doc/man/pam_error.3: Likewise.
 715         * doc/man/pam_fail_delay.3: Likewise.
 716         * doc/man/pam_get_data.3: Likewise.
 717         * doc/man/pam_get_item.3: Likewise.
 718         * doc/man/pam_get_user.3: Likewise.
 719         * doc/man/pam_getenv.3: Likewise.
 720         * doc/man/pam_getenvlist.3: Likewise.
 721         * doc/man/pam_info.3: Likewise.
 722         * doc/man/pam_open_session.3: Likewise.
 723         * doc/man/pam_prompt.3: Likewise.
 724         * doc/man/pam_putenv.3: Likewise.
 725         * doc/man/pam_set_data.3: Likewise.
 726         * doc/man/pam_set_item.3: Likewise.
 727         * doc/man/pam_setcred.3: Likewise.
 728         * doc/man/pam_sm_acct_mgmt.3: Likewise.
 729         * doc/man/pam_start.3: Likewise.
 730         * doc/man/pam_strerror.3: Likewise.
 731         * doc/man/pam_syslog.3: Likewise.
 732         * modules/pam_access/access.conf.5: Likewise.
 733         * modules/pam_access/pam_access.8: Likewise.
 734         * modules/pam_cracklib/pam_cracklib.8: Likewise.
 735         * modules/pam_deny/pam_deny.8: Likewise.
 736         * modules/pam_echo/pam_echo.8: Likewise.
 737         * modules/pam_env/pam_env.8: Likewise.
 738         * modules/pam_env/pam_env.conf.5: Likewise.
 739         * modules/pam_exec/pam_exec.8: Likewise.
 740         * modules/pam_filter/pam_filter.8: Likewise.
 741         * modules/pam_ftp/pam_ftp.8: Likewise.
 742         * modules/pam_group/group.conf.5: Likewise.
 743         * modules/pam_group/pam_group.8: Likewise.
 744         * modules/pam_issue/pam_issue.8: Likewise.
 745         * modules/pam_lastlog/pam_lastlog.8: Likewise.
 746         * modules/pam_mkhomedir/pam_mkhomedir.8: Likewise.
 747         * modules/pam_succeed_if/pam_succeed_if.8: Likewise.
 748         * modules/pam_umask/pam_umask.8: Likewise.
 749
 750         * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
 751         dngettext if available [#1427738].
 752         * configure.in: Check for dngettext [#1427738].
 753         * po/*.po: Update to dngettext usage.
 754
 755         * modules/pam_listfile/Makefile.am: Include Make.xml.rules.
 756         * modules/pam_listfile/pam_listfile.8.xml: New.
 757         * modules/pam_listfile/pam_listfile.8: New, generated from xml file.
 758         * modules/pam_listfile/README.xml: New.
 759         * modules/pam_listfile/README: Regenerated from xml file.
 760
 761 2006-06-01  Thorsten Kukuk  <kukuk@thkukuk.de>
 762
 763         * modules/pam_lastlog/Makefile.am: Include Make.xml.rules.
 764         * modules/pam_lastlog/pam_lastlog.8.xml: New.
 765         * modules/pam_lastlog/pam_lastlog.8: New, generated from xml file.
 766         * modules/pam_lastlog/README.xml: New.
 767         * modules/pam_lastlog/README: Regenerated from xml file.
 768
 769         * modules/pam_group/Makefile.am: Include Make.xml.rules.
 770         * modules/pam_group/group.conf.5.xml: New.
 771         * modules/pam_group/group.conf.5: New, generated from xml file.
 772         * modules/pam_group/pam_group.8.xml: New.
 773         * modules/pam_group/pam_group.8: New, generated from xml file.
 774         * modules/pam_group/README.xml: New.
 775         * modules/pam_group/README: Regenerated from xml file.
 776
 777         * modules/pam_ftp/Makefile.am: Include Make.xml.rules.
 778         * modules/pam_ftp/pam_ftp.8.xml: New.
 779         * modules/pam_ftp/pam_ftp.8: New, generated from xml file.
 780         * modules/pam_ftp/README.xml: New.
 781         * modules/pam_ftp/README: Regenerated from xml file.
 782
 783         * modules/pam_issue/Makefile.am: Include Make.xml.rules.
 784         * modules/pam_issue/pam_issue.8.xml: New.
 785         * modules/pam_issue/pam_issue.8: New, generated from xml file.
 786         * modules/pam_issue/README.xml: New.
 787         * modules/pam_issue/README: Regenerated from xml file.
 788
 789         * modules/pam_filter/Makefile.am: Include Make.xml.rules.
 790         * modules/pam_filter/pam_filter.8.xml: New.
 791         * modules/pam_filter/pam_filter.8: New, generated from xml file.
 792         * modules/pam_filter/README.xml: New.
 793         * modules/pam_filter/README: Regenerated from xml file.
 794
 795 2006-05-30  Thorsten Kukuk  <kukuk@thkukuk.de>
 796
 797         * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Fix umask and skel
 798         directory documentation.
 799
 800         * modules/pam_umask/Makefile.am: Include Make.xml.rules.
 801         * modules/pam_umask/pam_umask.8.xml: New.
 802         * modules/pam_umask/pam_umask.8: New, generated from xml file.
 803         * modules/pam_umask/README.xml: New.
 804         * modules/pam_umask/README: Regenerated from xml file.
 805
 806 2006-05-29  Thorsten Kukuk  <kukuk@thkukuk.de>
 807
 808         * modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
 809         * modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
 810         * modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
 811         * modules/pam_mkhomedir/README.xml: New.
 812         * modules/pam_mkhomedir/README: Regenerated from xml file.
 813
 814 2006-05-23  Thorsten Kukuk  <kukuk@thkukuk.de>
 815
 816         * modules/pam_echo/pam_echo.c (pam_echo): Use pam_modutil_read()
 817         instead of read().
 818
 819 2006-05-22  Thorsten Kukuk  <kukuk@thkukuk.de>
 820
 821         * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
 822         Fix memory leaks, [#1490956] found by Coverity.
 823
 824         * modules/pam_tally/pam_tally.c (pam_get_uid): Check return
 825         value of pam_get_user().
 826         (tally_get_data): Check if oldtime is not NULL.
 827         [#1489818] found by Coverity.
 828
 829         * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
 830         ignore return value of stat(). [#1489808] found by Coverity.
 831
 832         * modules/pam_mail/pam_mail.c (get_folder): Fix a potential
 833         NULL pointer dereference. [#1489792] found by Coverity.
 834
 835         * libpam/Makefile.am: bump release number of libpam.so.
 836         * libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
 837         [#1489804] found by Coverity.
 838
 839         * modules/pam_echo/pam_echo.c (replace_and_print): Initialize
 840         str, [#1489658] found by Coverity.
 841
 842         * modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
 843         a potential NULL pointer dereference.
 844         (pam_sm_chauthtok): Remove dead code.
 845         [#1489634] found by Coverity.
 846
 847 2006-05-04  Thorsten Kukuk  <kukuk@suse.de>
 848
 849         * configure.in: Check for fseeko.
 850         * modules/pam_tally/pam_tally.c: Use fseeko if available
 851         (Based on patch by IBM).
 852
 853 2006-05-04  Thorsten Kukuk  <kukuk@thkukuk.de>
 854
 855         * release version 0.99.4.0
 856
 857         * libpam/pam_strerror.c: Unify error messages.
 858
 859         * po/zh_TW.po: Adjust for last pam_strerror changes.
 860         * po/zh_CN.po: Likewise.
 861         * po/uk.po: Likewise.
 862         * po/tr.po: Likewise.
 863         * po/pt.po: Likewise.
 864         * po/pt_BR.po: Likewise.
 865         * po/pl.po: Likewise.
 866         * po/ja.po: Likewise.
 867         * po/nl.po: Likewise.
 868         * po/nb.po: Likewise.
 869         * po/it.po: Likewise.
 870         * po/hu.po: Likewise.
 871         * po/fr.po: Likewise.
 872         * po/fi.po: Likewise.
 873         * po/es.po: Likewise.
 874         * po/de.po: Likewise.
 875         * po/cs.po: Likewise.
 876
 877         * doc/man/pam.3.xml: New.
 878         * doc/man/pam.3. New, generated from XML file.
 879
 880         * doc/man/pam_sm_acct_mgmt.3.xml: New.
 881         * doc/man/pam_sm_acct_mgmt.3: New, generated from XML file.
 882
 883         * doc/man/*.xml: Fix encoding and use always UTF-8, regenerate
 884         all manual pages.
 885
 886         * doc/pam_modules.sgml (PAM_NEW_AUTHTOKEN_REQD): Fix typo.
 887
 888 2006-05-02  Thorsten Kukuk  <kukuk@thkukuk.de>
 889
 890         * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Use
 891         different strings for plural or not [#1427738]
 892
 893         * po/*.po: Adjust for pam_unix.so translation fix.
 894
 895         * modules/pam_tally/pam_tally.c: Always close file handle
 896         in error case, don't close it depending on *TALLY value [#1478180]
 897
 898 2006-04-21  Thorsten Kukuk  <kukuk@thkukuk.de>
 899
 900         * po/fr.po: Updated.
 901
 902 2006-04-11  Thorsten Kukuk  <kukuk@thkukuk.de>
 903
 904         * po/km.po: Updated.
 905
 906 2006-03-27  Thorsten Kukuk  <kukuk@thkukuk.de>
 907
 908         * po/LINGUAS: Add uk.
 909
 910         * po/uk.po: New.
 911         * po/cs.po: Updated.
 912         * po/po/es.po: Updated.
 913         * po/fi.po: Updated.
 914         * po/fr.po: Updated.
 915         * po/hu.po: Updated.
 916         * po/it.po: Updated.
 917         * po/ja.po: Updated.
 918         * po/nb.po: Updated.
 919         * po/pl.po: Updated.
 920         * po/pt.po: Updated.
 921         * po/pt_BR.po: Updated.
 922         * po/zh_CN.po: Updated.
 923         * po/zh_TW.po: Updated.
 924
 925 2006-03-21  Thorsten Kukuk  <kukuk@thkukuk.de>
 926
 927         * configure.in: Remove ALL_LINGUAS.
 928         * po/LINGUAS: New.
 929         * po/tr.po: New (from Ismail Donmez <ismail@pardus.org.tr>).
 930
 931 2006-03-13  Thorsten Kukuk  <kukuk@thkukuk.de>
 932
 933         * doc/man/pam_error.3.xml: New.
 934         * doc/man/pam_error.3: New, generated from XML file.
 935         * doc/man/pam_verror.3: New, generated from XML file.
 936         * doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
 937
 938         * modules/pam_lastlog/Makefile.am: Fix typo.
 939
 940         * modules/pam_lastlog/pam_lastlog.c: Move comment for
 941         translators in right line.
 942         * po/*.po: Update po files with comment for translator.
 943
 944 2006-03-12  Thorsten Kukuk  <kukuk@thkukuk.de>
 945
 946         * doc/man/Makefile.am: Add new manual pages.
 947
 948         * doc/man/pam.conf.5.xml: Replace link with content
 949         of PAM admin guide.
 950         * doc/man/pam.conf.5: Regenerated from XML file.
 951
 952         * doc/man/pam_info.3.xml: New.
 953         * doc/man/pam_info.3: New, generated from XML file.
 954         * doc/man/pam_vinfo.3: New, generated from XML file.
 955
 956         * doc/man/pam_conv.3.xml: New.
 957         * doc/man/pam_conv.3: New, generated from XML file.
 958
 959         * doc/man/pam_putenv.3.xml: New.
 960         * doc/man/pam_putenv.3: New, generated from XML file.
 961
 962         * doc/man/pam_getenv.3.xml: New.
 963         * doc/man/pam_getenv.3: New, generated from XML file.
 964
 965         * doc/man/pam_getenvlist.3.xml: New.
 966         * doc/man/pam_getenvlist.3: New, generated from XML file.
 967
 968         * libpam/pam_item.c (pam_get_user): Check for valid pamh before
 969         using it.
 970
 971         * configure.in: create tests/Makefile
 972         * Makefile.am (SUBDIRS): Add tests
 973         * tests/Makefile.am: New.
 974         * tests/tst-dlopen.c: New.
 975         * tests/tst-pam_acct_mgmt.c: New.
 976         * tests/tst-pam_authenticate.c: New.
 977         * tests/tst-pam_chauthtok.c: New.
 978         * tests/tst-pam_close_session.c: New.
 979         * tests/tst-pam_end.c: New.
 980         * tests/tst-pam_fail_delay.c: New.
 981         * tests/tst-pam_getenvlist.c: New.
 982         * tests/tst-pam_get_item.c: New.
 983         * tests/tst-pam_open_session.c: New.
 984         * tests/tst-pam_setcred.c: New.
 985         * tests/tst-pam_set_item.c: New.
 986         * tests/tst-pam_start.c: New.
 987         * tests/tst-pam_get_user.c: New.
 988
 989         * modules/pam_access/Makefile.am: Add rules for make check
 990         * modules/pam_access/tst-pam_access: New
 991         * modules/pam_cracklib/Makefile.am: Add rules for make check
 992         * modules/pam_cracklib/tst-pam_cracklib: New
 993         * modules/pam_debug/Makefile.am: Add rules for make check
 994         * modules/pam_debug/tst-pam_debug: New
 995         * modules/pam_deny/Makefile.am: Add rules for make check
 996         * modules/pam_deny/tst-pam_deny: New
 997         * modules/pam_echo/Makefile.am: Add rules for make check
 998         * modules/pam_echo/tst-pam_echo: New
 999         * modules/pam_env/Makefile.am: Add rules for make check
1000         * modules/pam_env/tst-pam_env: New
1001         * modules/pam_exec/Makefile.am: Add rules for make check
1002         * modules/pam_exec/tst-pam_exec: New
1003         * modules/pam_filter/Makefile.am: Add rules for make check
1004         * modules/pam_filter/tst-pam_filter: New
1005         * modules/pam_ftp/Makefile.am: Add rules for make check
1006         * modules/pam_ftp/tst-pam_ftp: New
1007         * modules/pam_group/Makefile.am: Add rules for make check
1008         * modules/pam_group/tst-pam_group: New
1009         * modules/pam_issue/Makefile.am: Add rules for make check
1010         * modules/pam_issue/tst-pam_issue: New
1011         * modules/pam_lastlog/Makefile.am: Add rules for make check
1012         * modules/pam_lastlog/tst-pam_lastlog: New
1013         * modules/pam_limits/Makefile.am: Add rules for make check
1014         * modules/pam_limits/tst-pam_limits: New
1015         * modules/pam_listfile/Makefile.am: Add rules for make check
1016         * modules/pam_listfile/tst-pam_listfile: New
1017         * modules/pam_localuser/Makefile.am: Add rules for make check
1018         * modules/pam_localuser/tst-pam_localuser: New
1019         * modules/pam_mail/Makefile.am: Add rules for make check
1020         * modules/pam_mail/tst-pam_mail: New
1021         * modules/pam_mkhomedir/Makefile.am: Add rules for make check
1022         * modules/pam_mkhomedir/tst-pam_mkhomedir: New
1023         * modules/pam_motd/Makefile.am: Add rules for make check
1024         * modules/pam_motd/tst-pam_motd: New
1025         * modules/pam_nologin/Makefile.am: Add rules for make check
1026         * modules/pam_nologin/tst-pam_nologin: New
1027         * modules/pam_permit/Makefile.am: Add rules for make check
1028         * modules/pam_permit/tst-pam_permit: New
1029         * modules/pam_rhosts/Makefile.am: Add rules for make check
1030         * modules/pam_rhosts/tst-pam_rhosts: New
1031         * modules/pam_rootok/Makefile.am: Add rules for make check
1032         * modules/pam_rootok/tst-pam_rootok: New
1033         * modules/pam_securetty/Makefile.am: Add rules for make check
1034         * modules/pam_securetty/tst-pam_securetty: New
1035         * modules/pam_selinux/Makefile.am: Add rules for make check
1036         * modules/pam_selinux/tst-pam_selinux: New
1037         * modules/pam_shells/Makefile.am: Add rules for make check
1038         * modules/pam_shells/tst-pam_shells: New
1039         * modules/pam_stress/Makefile.am: Add rules for make check
1040         * modules/pam_stress/tst-pam_stress: New
1041         * modules/pam_succeed_if/Makefile.am: Add rules for make check
1042         * modules/pam_succeed_if/tst-pam_succeed_if: New
1043         * modules/pam_tally/Makefile.am: Add rules for make check
1044         * modules/pam_tally/tst-pam_tally: New
1045         * modules/pam_time/Makefile.am: Add rules for make check
1046         * modules/pam_time/tst-pam_time: New
1047         * modules/pam_umask/Makefile.am: Add rules for make check
1048         * modules/pam_umask/tst-pam_umask: New
1049         * modules/pam_unix/Makefile.am: Add rules for make check
1050         * modules/pam_unix/tst-pam_unix: New
1051         * modules/pam_userdb/Makefile.am: Add rules for make check
1052         * modules/pam_userdb/tst-pam_userdb: New
1053         * modules/pam_warn/Makefile.am: Add rules for make check
1054         * modules/pam_warn/tst-pam_warn: New
1055         * modules/pam_wheel/Makefile.am: Add rules for make check
1056         * modules/pam_wheel/tst-pam_wheel: New
1057         * modules/pam_xauth/Makefile.am: Add rules for make check
1058         * modules/pam_xauth/tst-pam_xauth: New
1059
1060 2006-03-11  Thorsten Kukuk  <kukuk@thkukuk.de>
1061
1062         * doc/man/pam_fail_delay.3.xml: New.
1063         * doc/man/pam_fail_delay.3: New, generated from xml.
1064         * doc/man/pam_prompt.3.xml: New.
1065         * doc/man/pam_prompt.3: New, generated from xml.
1066         * doc/man/pam_syslog.3.xml: New.
1067         * doc/man/pam_syslog.3: New, generated from xml.
1068         * doc/man/pam_vprompt.3: New, generated from xml.
1069         * doc/man/pam_vsyslog.3: New, generated from xml.
1070
1071 2006-02-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1072
1073         * po/km.po: Update Khmer translation.
1074
1075 2006-02-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1076
1077         * modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
1078         version from #1425487.
1079         * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
1080         * modules/pam_succeed_if/Makefile.am: Include XML rules.
1081         * modules/pam_succeed_if/README.xml: New.
1082         * modules/pam_succeed_if/README: Regenerated from xml.
1083         * modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
1084         return values.
1085
1086 2006-02-22  Thorsten Kukuk  <kukuk@thkukuk.de>
1087
1088         * configure.in: Fix check for incomplete libaudit installations
1089         (Patch from Ruediger Oertel <ro@suse.de>).
1090
1091         * modules/pam_lastlog/pam_lastlog.c (last_login_write): Initialize
1092         correct last_login field [#1427401].
1093
1094         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
1095         format string for translation to allow reorder [#1428269].
1096         * po/*.po: Update with last pam_lastlog change.
1097
1098
1099 2006-02-17  Thorsten Kukuk  <kukuk@thkukuk.de>
1100
1101         * doc/man/Makefile.am: Add new manual pages.
1102         * doc/man/pam_end.3: Regenerated from xml file.
1103         * doc/man/pam_end.3.xml: Document freeing of item data.
1104         * doc/man/pam_get_user.3: New.
1105         * doc/man/pam_get_user.3.xml: New.
1106         * modules/pam_access/access.conf.5.xml: Fix typos.
1107         * modules/pam_env/Makefile.am: Add new manual pages.
1108         * modules/pam_env/README: Regenerate from xml file.
1109         * modules/pam_env/README.xml: New.
1110         * modules/pam_env/pam_env.8: New.
1111         * modules/pam_env/pam_env.8.xml: New.
1112         * modules/pam_env/pam_env.conf.5: New.
1113         * modules/pam_env/pam_env.conf.5.xml New.
1114
1115 2006-02-14  Thorsten Kukuk  <kukuk@thkukuk.de>
1116
1117         * po/fi.po: Updated translations.
1118         * po/pl.po: Likewise.
1119         * po/km.po: New translation.
1120         * configure.in: Add km as new language.
1121
1122 2006-02-13  Thorsten Kukuk  <kukuk@thkukuk.de>
1123
1124         * modules/pam_echo/pam_echo.8.xml: New.
1125         * modules/pam_echo/pam_echo.8: Regenerated from xml file.
1126         * modules/pam_echo/Makefile.am: Include Make.xml.rules.
1127         * modules/pam_echo/pam_echo.c: Fix return value.
1128
1129         * doc/modules/pam_chroot.sgml: Remove obsolete sgml file.
1130
1131 2006-02-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1132
1133         * configure.in: Add doc/man/Makefile.
1134         * Make.xml.rules: Enable xincludes for manual pages.
1135         * doc/Makefile.am (EXRA_DIST): Remove manual pages.
1136         (SUBDIR): Add man subdirectory.
1137         * doc/man/Makefile.am: New.
1138         * doc/man/pam_acct_mgmt.3: New.
1139         * doc/man/pam_acct_mgmt.3.xml: New.
1140         * doc/man/pam_get_data.3: New.
1141         * doc/man/pam_get_data.3.xml: New.
1142         * doc/man/pam_set_data.3: New.
1143         * doc/man/pam_set_data.3.xml: New.
1144         * doc/man/pam.8.xml: New.
1145         * doc/man/pam.8: Regenerated from xml file.
1146         * doc/man/pam_authenticate.3.xml: New.
1147         * doc/man/pam_authenticate.3: Regenerated from xml file.
1148         * doc/man/pam_chauthtok.3.xml: New.
1149         * doc/man/pam_chauthtok.3: Regenerated from xml file.
1150         * doc/man/pam_close_session.3.xml: New.
1151         * doc/man/pam_close_session.3: Regenerated from xml file.
1152         * doc/man/pam_end.3.xml: New.
1153         * doc/man/pam_end.3: Regenerated from xml file.
1154         * doc/man/pam_fail_delay.3.xml: New.
1155         * doc/man/pam_fail_delay.3: Regenerated from xml file.
1156         * doc/man/pam_get_item.3.xml: New.
1157         * doc/man/pam_get_item.3: Regenerated from xml file.
1158         * doc/man/pam_item_types.inc.xml: New.
1159         * doc/man/pam_open_session.3.xml: New.
1160         * doc/man/pam_open_session.3: Regenerated from xml file.
1161         * doc/man/pam_set_item.3.xml: New.
1162         * doc/man/pam_set_item.3: Regenerated from xml file.
1163         * doc/man/pam_setcred.3.xml: New.
1164         * doc/man/pam_setcred.3: Regenerated from xml file.
1165         * doc/man/pam_start.3.xml: New.
1166         * doc/man/pam_start.3: Regenerated from xml file.
1167         * doc/man/pam_strerror.3.xml: New.
1168         * doc/man/pam_strerror.3: Regenerated from xml file.
1169         * doc/man/template-man: Removed.
1170
1171 2006-02-10  Thorsten Kukuk  <kukuk@thkukuk.de>
1172
1173         * configure.in: Remove pam_pwdb support.
1174         * modules/Makefile.am: remove pam_pwdb.
1175         * modules/pam_pwdb: Remove complete directory.
1176         * libpam/Makefile.am: Remove LIBPWDB references.
1177         * libpam/pam_static_modules.h: Remove pam_pwdb references.
1178         * doc/modules/pam_pwdb.sgml: Removed.
1179         * po/POTFILES.in: Remove modules/pam_pwdb/*.c entries.
1180         * doc/pam_source.sgml: Remove references to libpwdb.
1181         * doc/modules/pam_limits.sgml: Remove wrong reference to libpwdb.
1182         * doc/modules/pam_group.sgml: Likewise.
1183         * doc/modules/pam_cracklib.sgml: Replace pam_pwdb with pam_unix.
1184         * doc/modules/pam_userdb.sgml: Likewise.
1185         * modules/pam_cracklib/pam_cracklib.8.xml: Replace pam_pwdb
1186         with pam_unix.
1187         * modules/pam_mkhomedir/pam_mkhomedir.c: Likewise.
1188         * modules/pam_group/pam_group.c: Remove dead code for libpwdb.
1189
1190         * modules/pam_access/Makefile.am: Fix EXTRA_DIST.
1191         * modules/pam_cracklib/Makefile.am: Likewise.
1192         * modules/pam_deny/Makefile.am: Likewise.
1193         * modules/pam_exec/Makefile.am: Likewise.
1194
1195 2006-02-07  Thorsten Kukuk  <kukuk@thkukuk.de>
1196
1197         * configure.in: Check for text browser.
1198         * Make.xml.rules: Add rule to generate README from README.xml.
1199
1200         * modules/pam_access/Makefile.am: Include Make.xml.rules.
1201         * modules/pam_access/README: Regenerated from README.xml.
1202         * modules/pam_access/README.xml: New.
1203         * modules/pam_access/access.conf: Extended by new examples.
1204         * modules/pam_access/access.conf.5: New, generated from xml file.
1205         * modules/pam_access/access.conf.5.xml: New.
1206         * modules/pam_access/pam_access.8: New, generated from xml file.
1207         * modules/pam_access/pam_access.8.xml: New.
1208         * modules/pam_access/pam_access.c: Add rules for IPv6 and
1209         netmasks.
1210         Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
1211
1212         * modules/pam_deny/Makefile.am: Include Make.xml.rules.
1213         * modules/pam_deny/pam_deny.8.xml: New.
1214         * modules/pam_deny/pam_deny.8: New, generated from xml file.
1215         * modules/pam_deny/README.xml: New.
1216         * modules/pam_deny/README: Regenerated from xml file.
1217
1218         * modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
1219         * modules/pam_cracklib/pam_cracklib.8.xml: New.
1220         * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
1221         * modules/pam_cracklib/README.xml: New.
1222         * modules/pam_cracklib/README: Regenerated from xml file.
1223
1224         * modules/pam_exec/Makefile.am: Add rule to generate README.
1225         * modules/pam_exec/README: Regenerated from xml file.
1226         * modules/pam_exec/pam_exec.8: Regenerated from xml file.
1227         * modules/pam_exec/pam_exec.8.xml: Syntax files.
1228
1229 2006-02-06  Thorsten Kukuk  <kukuk@thkukuk.de>
1230
1231         * po/nl.po: New.
1232         * po/pt.po: Update translations.
1233         * configure.in: Add nl as new language.
1234
1235 2006-01-30  Thorsten Kukuk  <kukuk@thkukuk.de>
1236
1237         * modules/pam_exec/pam_exec.8.xml: Fix syntax of Return Value section.
1238         * modules/pam_exec/Makefile.am: Include Make.xml.rules.
1239
1240         * Make.xml.rules: New.
1241
1242         * Makefile.am (EXTRA_DIST): Add Make.xml.rules.
1243
1244 2006-01-27  Thorsten Kukuk  <kukuk@thkukuk.de>
1245
1246         * configure.in: Prefer libdb over libndbm, fix check for
1247         libcrack and remove not needed BACKUP_LIBS.
1248
1249 2006-01-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1250
1251         * modules/pam_debug/pam_debug.c: Fix name of pam_module struct.
1252
1253         * po/de.po: Fix one translation.
1254
1255         * configure.in: Add modules/pam_exec.
1256         * modules/Makefile.am: Add pam_exec subdirectory.
1257         * modules/pam_exec/README: New.
1258         * modules/pam_exec/Makefile.am: New.
1259         * modules/pam_exec/pam_exec.8: New.
1260         * modules/pam_exec/pam_exec.c: New.
1261         * modules/pam_exec/pam_exec.8.xml: New.
1262         * po/POTFILES.in: Add modules/pam_exec/pam_exec.c.
1263         * po/*.po: Merge new pam_exec strings.
1264
1265         * libpam/pam_static_modules.h: New.
1266         * Makefile.am: Reorder subdirectories for static modules.
1267         * configure.in: Add --enable-static-modules option.
1268         * libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
1269         necessary, add pam_static_modules.h, link against all PAM
1270         module object files if STATIC_MODULES is defined.
1271         * libpam/pam_static.c: Remove old _static_module* includes,
1272         include pam_static_modules.h.
1273
1274         * configure.in: Add checks for xsltproc, xmllint and docbook
1275         xsl stylesheet.
1276         * m4/jh_path_xml_catalog.m4: New.
1277
1278 2006-01-22  Thorsten Kukuk  <kukuk@thkukuk.de>
1279
1280         * modules/pam_succeed_if/pam_succeed_if.c: Add support for
1281         static modules.
1282         * modules/pam_xauth/pam_xauth.c: Likewise.
1283
1284         * libpam/pam_static.c (_pam_open_static_handler): Add pamh
1285         as argument.
1286         * libpam/pam_private.h: Adjust prototype.
1287         * libpam/pam_handlers.c (_pam_add_handler): Add pamh to
1288         _pam_open_static_handler call.
1289
1290         * configure.in: Don't define PAM_DYNAMIC.
1291         * libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
1292         include pam_dynamic.h
1293         * libpam/pam_dynamic.c: Don't include pam_dynamic.h,
1294         exclude functions if we compile with PAM_STATIC.
1295         * libpam/pam_dynamic.h: Remove.
1296         * libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
1297         * libpam/Makefile.am: Bump version number of libpam, remove
1298         pam_dynamic.h.
1299
1300 2006-01-21  Thorsten Kukuk  <kukuk@thkukuk.de>
1301
1302         * modules/pam_listfile/pam_listfile.c: Add support for session
1303         and password management.
1304
1305 2006-01-19  Thorsten Kukuk  <kukuk@suse.de>
1306
1307         * doc/specs/Makefile.am (spec): Add padout to fix parallel
1308         build (Reported by Andreas Haumer <andreas@xss.co.at>).
1309
1310 2006-01-15  Thorsten Kukuk  <kukuk@thkukuk.de>
1311
1312         * modules/pam_echo/pam_echo.c: Define HOST_NAME_MAX if not
1313         already defined.
1314
1315 2006-01-13  Thorsten Kukuk  <kukuk@thkukuk.de>
1316
1317         * release version 0.99.3.0
1318
1319         * libpam_misc/misc_conv.c (misc_conv): Fix strict aliasing
1320         error.
1321
1322         * modules/pam_umask/pam_umask.c (search_key): Don't ignore
1323         EOF/error return value from fgets().
1324
1325         * configure.in: Check for getline and getdelim
1326
1327         * po/fi.po: Add new translations.
1328         * po/de.po: Likewise.
1329         * po/es.po: Likewise.
1330         * po/fr.po: Likewise.
1331         * po/it.po: Likewise.
1332         * po/ja.po: Likewise.
1333         * po/pt_BR.po: Likewise.
1334         * po/zh_CH.po: Likewise.
1335         * po/zh_TW.po: Likewise.
1336
1337 2006-01-13  Dmitry V. Levin  <ldv@altlinux.org>
1338
1339         * libpam/pam_audit.c (_pam_auditlog): Replace strerror(errno)
1340         call with %m specifier.
1341
1342 2006-01-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1343
1344         * configure.in: Add check for -fpie/-pie
1345         * modules/pam_filter/upperLOWER/Makefile.am: Compile/link
1346         upperLOWER with -fpie/-pie if supported.
1347         * modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
1348         with -fpie/-pie if supported.
1349
1350 2006-01-12  Steve Grubb  <sgrubb@redhat.com>
1351
1352         * configure.in: Add check for audit library.
1353         * libpam/Makefile.am (libpam_la_LDFLAGS): Add LIBAUDIT.
1354         (libpam_la_SOURCES): Add pam_audit.c.
1355         * libpam/pam_account.c (pam_acct_mgmt): Add _pam_auditlog() call.
1356         * libpam/pam_auth.c (pam_authenticate), (pam_setcred): Likewise.
1357         * libpam/pam_password.c (pam_chauthtok):  Likewise.
1358         * libpam/pam_session.c (pam_open_session),
1359         (pam_close_session): Likewise.
1360         * libpam/pam_private.h: Add audit_state member to pam_handle,
1361         declare _pam_auditlog and _pam_audit_end.
1362         * libpam/pam_start.c (pam_start): Initialize audit_state.
1363         * libpam/pam_audit.c: New file with _pam_auditlog and _pam_audit_end
1364         implementation.
1365         * libpam/pam_end.c (pam_end): Add _pam_audit_end() call.
1366         * NEWS: Note about added auditing.
1367
1368 2006-01-11  Thorsten Kukuk  <kukuk@thkukuk.de>
1369
1370         * libpam/Makefile.am (AM_CFLAGS): Define LIBPAM_COMPILE.
1371
1372         * libpam/include/security/_pam_types.h: Don't define PAM_NONNULL
1373         if we compile libpam itself.
1374
1375         * po/hu.po: Update with new translations.
1376
1377 2006-01-08  Thorsten Kukuk  <kukuk@thkukuk.de>
1378
1379         * modules/pam_cracklib/pam_cracklib.c: Use PAM_AUTHTOK_RECOVERY_ERR
1380         instead of PAM_AUTHTOK_RECOVER_ERR.
1381         * modules/pam_pwdb/support.-c: Likewise.
1382         * modules/pam_unix/support.c: Likewise.
1383         * modules/pam_userdb/pam_userdb.c (pam_sm_authenticate): Likewise.
1384         * libpam/pam_strerror.c (pam_strerror): Likewise.
1385
1386         * libpam/include/security/_pam_compat.h: Define
1387         PAM_AUTHTOK_RECOVER_ERR for backward compatibility.
1388
1389         * libpam/include/security/_pam_types.h: Rename
1390         PAM_AUTHTOK_RECOVER_ERR to PAM_AUTHTOK_RECOVERY_ERR.
1391
1392 2006-01-05  Thorsten Kukuk  <kukuk@thkukuk.de>
1393
1394         * libpam/include/security/_pam_types.h: Remove nonnull attribute
1395         from third paramter (item) of pam_get_item.
1396         * libpam/Makefile.am: Bump version number of shared library.
1397
1398 2005-12-21  Tomas Mraz <t8m@centrum.cz>
1399
1400         * modules/pam_succeed_if/pam_succeed_if.c (evaluate_ingroup),
1401         (evaluate_notingroup): Simplified.
1402         (evaluate_innetgr), (evaluate_notinnetgr): New functions.
1403         (evaluate): Added calls to evaluate_(not)innetgr().
1404         * modules/pam_succeed_if/README: Documented netgroup matching.
1405         * NEWS: Mentioned the added netgroup matching support.
1406
1407 2005-12-20  Thorsten Kukuk  <kukuk@thkukuk.de>
1408
1409         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Use
1410         strftime instead of ctime.
1411
1412         * po/de.po: Fix typo.
1413
1414 2005-12-19  Thorsten Kukuk  <kukuk@thkukuk.de>
1415
1416         * libpam/pam_syslog.c: Define LOG_AUTHPRIV as LOG_AUTH on Solaris.
1417         Reported by Charles_H_Bedford@nbc.gov.
1418
1419         * modules/pam_time/pam_time.c (check_account): Implement
1420         support for netgroups.
1421
1422         * modules/pam_time/time.conf: Document usage of netgroups.
1423
1424 2005-12-16  Thorsten Kukuk  <kukuk@thkukuk.de>
1425
1426         * modules/pam_group/pam_group.c (check_account): Implement
1427         support for netgroups.
1428
1429         * modules/pam_group/group.conf: Add all documentation to this
1430         example config file and don't reference to outdated configs.
1431
1432         * modules/pam_group/README: New.
1433
1434         * modules/pam_group/Makefile.am: Add README to EXTRADIST.
1435
1436 2005-12-15  Thorsten Kukuk  <kukuk@suse.de>
1437
1438         * modules/pam_lastlog/pam_lastlog.c (last_login_read): Don't report an
1439         error if user logins the first time.
1440
1441         * modules/pam_lastlog/README: New.
1442
1443         * modules/pam_lastlog/Makefile.am: Add README to EXTRADIST.
1444
1445 2005-12-14  Thorsten Kukuk  <kukuk@suse.de>
1446
1447         * modules/pam_deny/pam_deny.c: Fix comment.
1448
1449         * doc/pam_appl.sgml: Fix typo.
1450
1451         Reported by Russell Bateman <russ@windofkeltia.com>
1452
1453 2005-12-12  Thorsten Kukuk  <kukuk@thkukuk.de>
1454
1455         * release version 0.99.2.1
1456
1457         * po/de.po: Remove new fuzzy entry
1458
1459         * NEWS: Add 0.99.2.1 changes
1460
1461         * configure.in: bump version number to 0.99.2.1
1462
1463 2005-12-12  Dmitry V. Levin  <ldv@altlinux.org>
1464
1465         Cleanup pam_syslog messages.
1466
1467         * modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
1468         * modules/pam_filter/pam_filter.c (set_filter): Append %m
1469         specifier to pam_syslog messages where appropriate.
1470         * modules/pam_group/pam_group.c (read_field): Likewise.
1471         * modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
1472         (create_homedir): Do not use make_remark() wrapper, call
1473         pam_info() directly.  Call pam_syslog() right after failed
1474         operation and append %m specifier to pam_syslog messages where
1475         appropriate.
1476         * modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
1477         sequence of malloc(), strcpy() and strcat() calls with asprintf().
1478         Append %m specifier to pam_syslog messages where appropriate.
1479         * modules/pam_securetty/pam_securetty.c (securetty_perform_check):
1480         Append %m specifier to pam_syslog messages where appropriate.
1481         * modules/pam_shells/pam_shells.c (perform_check): Likewise.
1482
1483 2005-12-12  Tomas Mraz  <t8m@centrum.cz>
1484
1485         * modules/pam_mail/pam_mail.c (report_mail): Fixed typo in string.
1486         * po/Linux-PAM.pot: Likewise.
1487         * po/de.po: Likewise.
1488         * po/es.po: Likewise.
1489         * po/fi.po: Likewise.
1490         * po/fr.po: Likewise.
1491         * po/hu.po: Likewise.
1492         * po/it.po: Likewise.
1493         * po/ja.po: Likewise.
1494         * po/nb.po: Likewise.
1495         * po/pa.po: Likewise.
1496         * po/pl.po: Likewise.
1497         * po/pt.po: Likewise.
1498         * po/pt_BR.po: Likewise.
1499         * po/zh_CN.po: Likewise.
1500         * po/zh_TW.po: Likewise.
1501         * po/de.po: Add new translation, fixed typo in string.
1502
1503 2005-12-12  Mike Becher  <Mike.Becher@lrz-muenchen.de>
1504
1505         * doc/Makefile.am: Fixed install of PS, PDF, TXT and HTML files.
1506
1507 2005-12-12  Thorsten Kukuk  <kukuk@suse.de>
1508
1509         * modules/pam_mail/README: Document "quiet" and "standard"
1510         options.
1511
1512 2005-12-07  Thorsten Kukuk  <kukuk@suse.de>
1513
1514         * modules/pam_mail/pam_mail.c: Modify assembling of output
1515         for easier translation.
1516
1517         * po/de.po: Translate new pam_mail messages.
1518
1519
1520 2005-11-24  Thorsten Kukuk  <kukuk@thkukuk.de>
1521
1522         * po/de.po: Add new translation, fix wrong format specifier.
1523         * po/cs.po: Fix wrong format specifier.
1524         * po/es.po: Likewise.
1525         * po/fi.po: Likewise.
1526         * po/fr.po: Likewise.
1527         * po/hu.po: Likewise.
1528         * po/it.po: Likewise.
1529         * po/ja.po: Likewise.
1530         * po/nb.po: Likewise.
1531         * po/pa.po: Likewise.
1532         * po/pl.po: Likewise.
1533         * po/pt.po: Likewise.
1534         * po/pt_BR.po: Likewise.
1535         * po/zh_CN.po: Likewise.
1536         * po/zh_TW.po: Likewise.
1537
1538 2005-11-24  Dmitry V. Levin  <ldv@altlinux.org>
1539
1540         * config.h.in: Remove generated file.
1541         * .cvsignore: Add config.h.in.
1542
1543         * configure.in: Do not check for strerror.
1544         * libpam_misc/misc_conv.c (read_string): Replace strerror()
1545         call with %m specifier.
1546         * libpamc/pamc_converse.c (pamc_converse): Likewise.
1547         * modules/pam_echo/pam_echo.c (pam_echo): Likewise.
1548         * modules/pam_localuser/pam_localuser.c (pam_sm_authenticate):
1549         Likewise.
1550         * modules/pam_selinux/pam_selinux.c (security_label_tty):
1551         Likewise.
1552         (security_restorelabel_tty, security_label_tty): Append %m
1553         specifier where appropriate.
1554         * modules/pam_selinux/pam_selinux_check.c (main): Replace
1555         strerror() call with %m specifier.
1556         * modules/pam_unix/pam_unix_passwd.c (save_old_password,
1557         _update_passwd, _update_shadow): Likewise.
1558         * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
1559         * modules/pam_unix/unix_chkpwd.c (_update_shadow): Likewise.
1560         * po/Linux-PAM.pot: Update strings from pam_selinux.
1561         * po/cs.po: Likewise.
1562         * po/de.po: Likewise.
1563         * po/es.po: Likewise.
1564         * po/fi.po: Likewise.
1565         * po/fr.po: Likewise.
1566         * po/hu.po: Likewise.
1567         * po/it.po: Likewise.
1568         * po/ja.po: Likewise.
1569         * po/nb.po: Likewise.
1570         * po/pa.po: Likewise.
1571         * po/pl.po: Likewise.
1572         * po/pt.po: Likewise.
1573         * po/pt_BR.po: Likewise.
1574         * po/zh_CN.po: Likewise.
1575         * po/zh_TW.po: Likewise.
1576
1577 2005-11-23  Thorsten Kukuk  <kukuk@suse.de>
1578
1579         * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Introduce
1580         new variable to fix compiler warning.
1581
1582         * libpam/pam_modutil_getlogin.c (pam_modutil_getlogin): PAM_TTY
1583         don't need to start with /dev/.
1584
1585 2005-11-21  Thorsten Kukuk  <kukuk@thkukuk.de>
1586
1587         * release version 0.99.2.0
1588
1589         * libpam_misc/Makefile.am: Increase release number (for change
1590         from 2005-11-09)
1591
1592         * NEWS: Adjust for 0.99.2.0
1593
1594 2005-11-17  Thorsten Kukuk  <kukuk@thkukuk.de>
1595
1596         * libpam/include/security/_pam_compat.h: Fix wrong #ifdef nesting.
1597         Redefine PAM_CHANGE_EXPIRED_AUTHTOK [#604380]
1598
1599 2005-11-16  Thorsten Kukuk  <kukuk@thkukuk.de>
1600
1601         * libpam/pam_handlers.c: Replace code for all dlopen variants with
1602         a generic wrapper.
1603         * libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
1604         * libpam/pam_dynamic.h: Provide prototypes.
1605         For Mac OS X support [#534205]
1606
1607 2005-11-09  Tomas Mraz <t8m@centrum.cz>
1608
1609         * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly
1610         full path tty name.
1611         * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly
1612         full path tty name. Allow unset tty.
1613         (logic_member): Allow matching ':' in tty name.
1614         * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly
1615         full path tty name. Allow unset tty.
1616         (logic_member): Allow matching ':' in tty name.
1617
1618         * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin
1619         is not terminal.
1620
1621 2005-11-07  Thorsten Kukuk  <kukuk@thkukuk.de>
1622
1623         * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Use
1624         correct variable names.
1625
1626 2005-11-06  Steve Langasek <vorlon@debian.org>
1627
1628         * modules/pam_env/pam_env.c: don't treat a missing
1629         /etc/environment as a fatal error when attempting to read it,
1630         and try to read this file by default; this restores the behavior
1631         from Linux-PAM 0.76.
1632
1633 2005-11-02  Tomas Mraz <t8m@centrum.cz>
1634
1635         * modules/pam_unix/support.c (_unix_getpwnam): Fix typo [#1224807]
1636         by ohyajapn.
1637
1638         * modules/pam_unix/pam_unix_passwd.c (_unix_verify_shadow): Change the
1639         logic when comparing dates to handle corner cases better [#1245888].
1640
1641 2005-10-31  Thorsten Kukuk  <kukuk@suse.de>
1642
1643         * modules/pam_filter/pam_filter.c: Use XCASE only if defined
1644         [#624214]
1645
1646 2005-10-27  Thorsten Kukuk  <kukuk@suse.de>
1647
1648         * doc/man/pam.8: Fix wording for authentication chapter [#1197444]
1649
1650 2005-10-26  Tomas Mraz  <t8m@centrum.cz>
1651
1652         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
1653         modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
1654         modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
1655         uid to 0 before executing the helper if SELinux is enabled.
1656         * modules/pam_unix/unix_chkpwd.c (main): Disable user check only
1657         if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
1658
1659
1660 2005-10-20  Tomas Mraz  <t8m@centrum.cz>
1661
1662         * configure.in: Added check for xauth binary and --with-xauth option.
1663         * config.h.in: Added configurable PAM_PATH_XAUTH.
1664         * modules/pam_xauth/README,
1665         modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
1666         * modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
1667         searching xauth binary on multiple places.
1668         (run_coprocess): Don't use execvp as it can be a security risk.
1669
1670 2005-10-04  Steve Langasek  <vorlon@debian.org>
1671
1672         * libpam/include/security/pam_malloc.h,
1673         libpam/include/security/pam_modules.h: Declare public header
1674         files extern "C" so that they are C++-safe.
1675
1676 2005-10-02  Dmitry V. Levin  <ldv@altlinux.org>
1677             Steve Langasek  <vorlon@debian.org>
1678
1679         Cleanup gratuitous use of strdup().
1680         Fix "missing argument" checks.
1681
1682         * modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
1683         to conffile and envfile arguments.  Do not use x_strdup() for
1684         conffile and envfile initialization.  Fix "missing argument"
1685         checks.
1686         (_parse_config_file): Take conffile argument of type "const char *"
1687         instead of "char **".  Do not free conffile.
1688         (_parse_env_file): Take env_file argument of type "const char *"
1689         instead of "char **".  Do not free env_file.
1690         (pam_sm_setcred): Add const qualifier to conf_file and env_file.
1691         Pass conf_file and env_file to _parse_config_file() and
1692         _parse_env_file() by value.
1693         (pam_sm_open_session): Likewise.
1694
1695         * modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
1696         users argument.  Do not use x_strdup() for users initialization.
1697         (lookup):  Add const qualifier to list argument.
1698         (pam_sm_authenticate): Add const qualifier to users argument.
1699
1700         * modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
1701         to maildir argument.  Do not use x_strdup() for maildir
1702         initialization.  Fix "missing argument" check.
1703         (get_folder): Take path_mail argument of type "const char *"
1704         instead of "char **".  Do not free path_mail.
1705         (_do_mail): Add const qualifier to path_mail argument.
1706         Pass path_mail to get_folder() by value.
1707
1708         * modules/pam_motd/pam_motd.c: Include <syslog.h>.
1709         (pam_sm_open_session): Add const qualifier to motd_path.
1710         Do not use x_strdup() for motd_path initialization.  Do not
1711         free motd_path.  Fix "missing argument" check.  Add "unknown
1712         option" warning.
1713
1714         * modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
1715         qualifier to database and cryptmode arguments.  Fix "missing
1716         argument" checks.
1717         (pam_sm_authenticate): Add const qualifier to database and cryptmode.
1718         (pam_sm_acct_mgmt): Likewise.
1719
1720 2005-10-01  Steve Langasek  <vorlon@debian.org>
1721
1722         * modules/pam_userdb/pam_userdb.c: spelling fix in log message.
1723
1724 2005-09-30  Steve Langasek  <vorlon@debian.org>
1725
1726         * modules/pam_userdb/pam_userdb.c: Fix memory leak due to
1727         gratuitous use of strdup().
1728
1729 2005-09-27  Thorsten Kukuk  <kukuk@thkukuk.de>
1730
1731         * release 0.99.1.0
1732
1733         * doc/specs/Makefile.am (install-data-local): Install
1734         rfc and draft.
1735         (all): Copy rfc if we build outside of source directory.
1736
1737 2005-09-27  Thorsten Kukuk  <kukuk@suse.de>
1738
1739         * NEWS: Document removal of pam_radius.
1740         * autogen.sh: Make configure script executeable.
1741
1742         * conv/pam_conv1/Makefile (EXTRA_DIST): Removed lex.yy.c
1743         (lex.yy.c): Fixed out of tree build.
1744
1745         * conv/pam_conv1/pam_conv.y: Fix main prototype.
1746
1747         * README: Adjust.
1748
1749         * po/POTFILES.in: Remove files not distributed by tar archive
1750         and not containing strings for translation.
1751
1752 2005-09-26  Tomas Mraz  <t8m@centrum.cz>
1753
1754         * NEWS: Add a few missing entries from CHANGELOG.
1755
1756         * AUTHORS: Fixed entries for Toady and me.
1757
1758         * Makefile.am (M4_FILES): Fixed out of tree build.
1759         * doc/specs/Makefile.am (EXTRA_DIST): Removed lex.yy.c
1760         (spec, lex.yy.c): Fixed out of tree build.
1761
1762         * modules/pam_userdb/README: Document try_first_pass and
1763         use_first_pass options, remove use_authtok option.
1764
1765
1766 2005-09-26  Dmitry V. Levin  <ldv@altlinux.org>
1767
1768         * NEWS: Mention changes in pam_lastlog.
1769
1770 2005-09-26  Thorsten Kukuk  <kukuk@suse.de>
1771
1772         * NEWS: New file.
1773         * autogen.sh: Don't generate NEWS file.
1774         * CHANGELOG: Document it as obsolete.
1775
1776 2005-09-26  Tomas Mraz  <t8m@centrum.cz>
1777
1778         * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
1779         _log_err() -> pam_syslog()
1780         (pam_sm_acct_mgmt): _log_err() -> pam_syslog(), fix warning.
1781         * modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate):
1782         _log_err() -> pam_syslog()
1783         * modules/pam_unix/pam_unix_passwd.c: removed obsolete ifdef
1784         (getNISserver, _unix_run_shadow_binary, _update_passwd,
1785         _update_shadow, _do_setpass, _pam_unix_approve_pass,
1786         pam_sm_chauthtok): _log_err() -> pam_syslog()
1787         * modules/pam_unix/pam_unix_sess.c: removed obsolete ifdef
1788         (pam_sm_open_session, pam_sm_close_session):
1789         _log_err() -> pam_syslog()
1790         * modules/pam_unix/support.c (_log_err, converse): removed
1791         (_make_remark): use pam_prompt() instead of converse()
1792         (_set_ctrl, _cleanup_failures, _unix_run_helper_binary,
1793         _unix_verify_password, _unix_read_password):
1794         _log_err() -> pam_syslog()
1795         _cleanup(), _unix_cleanup(): Silence unused param warnings.
1796         (_cleanup_failures, _unix_verify_password, _unix_getpwnam,
1797         _unix_run_helper_binary): Silence incorrect type warnings.
1798         (_unix_read_password): Use multiple pam_prompt() and pam_info() calls
1799         instead of converse().
1800         * modules/pam_unix/support.h (_log_err): removed
1801         * modules/pam_unix/unix_chkpwd.c (_log_err): LOG_AUTH -> LOG_AUTHPRIV
1802
1803 2005-09-26  Thorsten Kukuk  <kukuk@suse.de>
1804
1805         * configure.in: Add doc/specs/Makefile.
1806         * Makefile.am: Add releasedocs rule.
1807         * doc/Makefile.am: Add specs subdir, remove files from specs
1808         directory, add rfc86.0.txt to releasedocs.
1809         * doc/specs/Makefile.am: New file.
1810         * doc/specs/formatter/parse.y: move from here ...
1811         * doc/specs/parse.y: ... here.
1812         * doc/specs/formatter/parse.lex: move from here ...
1813         * doc/specs/parse.lex: ... here.
1814
1815         * modules/pam_mail/pam_mail.c: Mark missing strings for translation
1816         * po/Linux-PAM.pot: Add new strings from pam_mail
1817         * po/cs.po: Likewise.
1818         * po/de.po: Likewise.
1819         * po/es.po: Likewise.
1820         * po/fi.po: Likewise.
1821         * po/fr.po: Likewise.
1822         * po/hu.po: Likewise.
1823         * po/it.po: Likewise.
1824         * po/ja.po: Likewise.
1825         * po/nb.po: Likewise.
1826         * po/pa.po: Likewise.
1827         * po/pl.po: Likewise.
1828         * po/pt.po: Likewise.
1829         * po/pt_BR.po: Likewise.
1830         * po/zh_CN.po: Likewise.
1831         * po/zh_TW.po: Likewise.
1832
1833 2005-09-23  Tomas Mraz  <t8m@centrum.cz>
1834
1835         * modules/pam_access/pam_access.c (from_match): Support NULL from.
1836         (string_match): Support NULL string, add NONE keyword matching it.
1837         (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL.
1838         * modules/pam_access/access.conf: NONE keyword description
1839         * modules/pam_access/README: NONE keyword description
1840
1841 2005-09-22  Dmitry V. Levin  <ldv@altlinux.org>
1842
1843         * modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
1844         pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
1845         text of log messages.
1846         (pam_sm_open_session): Replace sequence of malloc(), strcpy()
1847         and strcat() calls with asprintf().  Replace syslog() calls
1848         with pam_syslog().
1849
1850         * modules/pam_nologin/pam_nologin.c (parse_args): Use strncmp()
1851         instead of memcmp() for string comparison.
1852
1853 2005-09-21  Dmitry V. Levin  <ldv@altlinux.org>
1854
1855         * modules/pam_nologin/pam_nologin.c: Include <syslog.h>.
1856         (parse_args): Add pam_handle_t* argument.  Log unrecognized
1857         options.
1858         (perform_check): Log pam_get_user() and malloc() failures.
1859         (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt):
1860         Pass pam_handle_t* to parse_args().
1861
1862         * modules/pam_mail/pam_mail.c: Include <errno.h>.
1863         Remove YOUR_MAIL_VERBOSE_FORMAT, YOUR_MAIL_STANDARD_FORMAT and
1864         NO_MAIL_STANDARD_FORMAT macros.
1865         (parse_args, get_folder): Cleanup error messages.
1866         (get_folder): Fix leak of the path_mail variable in case of
1867         pam_get_user() failure.  Cleanup memory management.
1868         (get_mail_status): Add pam_handle_t* argument.  Fix leaks of
1869         namelist variable.  Cleanup memory management.  Log memory
1870         allocation failures.  Remove 250-byte limit on Maildir pathname.
1871         (report_mail): Mark text messages for translation.
1872         (_do_mail): Cleanup memory management.  Pass pam_handle_t*
1873         to get_mail_status().
1874
1875         * po/Linux-PAM.pot: Update with new strings from pam_mail for
1876         translation.
1877         * po/cs.po: Likewise.
1878         * po/de.po: Likewise.
1879         * po/es.po: Likewise.
1880         * po/fi.po: Likewise.
1881         * po/fr.po: Likewise.
1882         * po/hu.po: Likewise.
1883         * po/it.po: Likewise.
1884         * po/ja.po: Likewise.
1885         * po/nb.po: Likewise.
1886         * po/pa.po: Likewise.
1887         * po/pl.po: Likewise.
1888         * po/pt.po: Likewise.
1889         * po/pt_BR.po: Likewise.
1890         * po/zh_CN.po: Likewise.
1891         * po/zh_TW.po: Likewise.
1892
1893 2005-09-20  Thorsten Kukuk  <kukuk@suse.de>
1894
1895         * configure.in: Add finish translation.
1896         * po/fi.po: New.
1897
1898         * acinclude.m4: remove libprelude macros.
1899         * m4/libprelude.m4: New.
1900
1901         * Makefile.am (EXTRA_DIST): make sure we include all m4 macros.
1902
1903         * libpamc/Makefile.am (EXTRA_DIST): Add License.
1904
1905 See CHANGELOG for earlier changes.