1 Linux-PAM NEWS -- history of user-visible changes.
6 * pam_rootok: Add support for chauthtok and acct_mgmt
12 * pam_access: Revert netgroup match to original behavior, add new
13 syntax for adding the local hostname to netgroup match
14 * libpam: Add new functions pam_get_authtok_noverify() and
15 pam_get_authtok_verify()
16 * Add sepermit.conf.5 manual page
22 * Documentation updates and fixes
27 * pam_succeed_if: Use provided username
28 * pam_mkhomedir: Fix handling of options
32 * Fixed CVE-2009-0579 (minimum days limit on password change is ignored).
33 * Fix libpam internal config/argument parser
34 * Add optional file locking to pam_tally2
36 * pam_access improvements
37 * Changes in the behavior of the password stack. Results of PRELIM_CHECK
38 are not used for the final run.
42 * Supply hostname of the machine to netgroup match call in pam_access
43 * Make pam_namespace to work safe on child directories of parent directories
45 * Redefine LOCAL keyword of pam_access configuration file
46 * Add support for try_first_pass and use_first_pass to pam_cracklib
47 * Print informative messages for rejected login and add silent and
48 no_log_info options to pam_tally
49 * Add support for passing PAM_AUTHTOK to stdin of helpers from pam_exec
50 * New password quality tests in pam_cracklib
51 * New options for pam_lastlog to show last failed login attempt and
52 to disable lastlog update
53 * New pam_pwhistory module to store last used passwords
54 * New pam_tally2 module similar to pam_tally with wordsize independent
56 * Make libpam not log missing module if its type is prepended with '-'
57 * New pam_timestamp module for authentication based on recent successful
59 * Add blowfish support to pam_unix.
60 * Add support for user specific environment file to pam_env.
61 * Add pam_get_authtok to libpam as Linux-PAM extension.
62 * Rename type option of pam_cracklib to authtok_type.
66 * Small bug fix release
71 * Regression fixed in pam_selinux
72 * Problem with big UIDs fixed in pam_loginuid
77 * Regression fixed in pam_set_item()
88 * New substack directive in config file syntax.
89 * New module pam_tty_audit.so for enabling and disabling tty
91 * New PAM items PAM_XDISPLAY and PAM_XAUTHDATA.
92 * Auditing login denials based by origin (pam_access), time (pam_time),
93 and number of sessions (pam_limits) to the Linux audit subsystem.
94 * Support sha256 and sha512 algorithms in pam_unix when they are supported
96 * New pam_sepermit.so module for allowing/rejecting access based on
98 * Improved functionality of pam_namespace.so module (method flags,
99 namespace.d configuration directory, new options).
100 * Finaly removed deprecated pam_rhosts_auth module.
105 * misc_conv no longer blocks SIGINT; applications that don't want
106 user-interruptable prompts should block SIGINT themselves
107 * Merge fixes from Debian
108 * Fix parser for pam_group and pam_time
113 * Fix a regression in audit code introduced with last release
114 * Fix compiling with --disable-nls
119 * Add translations for ar, ca, da, ru, sv and zu.
120 * Update hungarian translation.
121 * Add support for limits.d directory to pam_limits.
122 * Improve pam_namespace module tobe more useful
123 for MLS, fixed crash with bad config files.
124 * Improve pam_selinux module to be more useful
126 * Add minclass option to pam_cracklib
127 * Add new group syntax to pam_access
132 * Security fix for pam_unix.so (CVE-2007-0003).
137 * Add manual page for pam_unix.so.
138 * Add pam_faildelay module to set pam_fail_delay() value.
139 * Fix possible seg.fault in libpam/pam_set_data().
140 * Cleanup of configure options.
141 * Update hungarian translation, fix german translation.
146 * pam_loginuid: New PAM module.
147 * pam_access, pam_succeed_if: Support passwd and session services.
152 * pam_lastlog: Don't refuse login if lastlog file got lost.
153 * pam_cracklib: Fix a user triggerable crash.
154 * documentation: Regenerate with fixed docbook stylesheet.
159 * Fix bootstrapping problems.
160 * Bug fixes: pam_keyinit, pam_umask
165 * pam_namespace: Code cleanup, add init script to tar archive.
166 * pam_succeed_if: Add support for service match.
167 * Add xtests (to run after installation).
168 * Documentation: Convert sgml guides to XML, unify documentation
169 for PAM functions and modules.
174 * pam_tally: Fix support for large UIDs
175 * Fixed all problems found by Coverity
176 * Add support for Intel C Compiler
177 * Add manual page for pam_mkhomedir, pam_umask, pam_filter,
178 pam_issue, pam_ftp, pam_group, pam_lastlog, pam_listfile,
179 pam_localuser, pam_mail, pam_motd, pam_nologin, pam_permit,
180 pam_rootok, pam_securetty, pam_shells, pam_userdb, pam_warn,
181 pam_time, pam_limits, pam_debug, pam_tally
182 * The libpam memory debug code was removed
183 * pam_keyinit: New module to initialise kernel session keyring.
184 * pam_namespace: New module to configure private namespace for a session.
185 * pam_rhosts: New module which replaces pam_rhosts_auth, now IPv6 capable.
186 * pam_rhosts_auth: This module is now deprecated.
192 * Fix building of static variants of libpam, libpamc and libpam_misc
193 * pam_listfile: Add support for password and session management
194 * pam_exec: New PAM module to execute arbitary commands
195 * Fix building of a static libpam including all PAM modules
196 * New/updated translations for: nl, pt, pl, fi, km, tr, uk, fr
197 * pam_access: Add network(address) / netmask and IPv6 support
198 * Add manual pages for pam_cracklib, pam_deny and pam_access
199 * pam_pwdb: This deprecated module was removed
200 * Manual pages: Major rewrite/cleanup
205 * Fix NULL pointer checks in libpam.so
206 * pam_succeed_if, pam_group, pam_time: Support netgroup matching
207 * New translations for: nb, hu, fi, de, es, fr, it, ja, pt_BR, zh_CN, zh_TW
208 * Audit PAM calls if Linux Audit is available
209 * Compile upperLOWER and unix_chkpwd as PIE binaries
214 * Fix install of PS, PDF, TXT and HTML files
215 * pam_mail: Update README
217 * pam_modutil_getlogin: Fix parsing of PAM_TTY variable
222 * Fix parsing of full path tty name in various modules
223 * pam_xauth: Look for xauth executable in multiple places
224 * pam_unix: Disable user check in unix_chkpwd only if real uid
225 is 0 (CVE-2005-2977). Log failed password check attempt.
226 * pam_env: Support /etc/environment again, but don't treat it as
227 error if it is missing.
228 * pam_userdb: Fix memory leak.
233 * Use autoconf/automake/libtool
234 * Add gettext support
235 * Add translations for cs, de, es, fr, hu, it, ja, nb, pa, pt_BR,
237 * libpam: Remove pam_authenticate_secondary stub
238 * libpam: Add pam_prompt,pam_vprompt,pam_error,pam_verror,pam_info
239 and pam_vinfo functions for use by modules as extension
240 * libpam: Add pam_syslog function for unified syslog messages from
242 * libpam: Moved functions from pammodutil to libpam
243 * pam_umask: New module for setting umask from GECOS field, /etc/login.defs
244 or /etc/default/login
245 * pam_echo: New PAM module for message output
246 * pam_userdb: Fix regression (crash when crypt param not specified)
247 * pam_limits: Fix regression from RLIMIT_NICE support (wrong limit
248 values for other limits are applied)
249 * pam_access: Support for NULL tty - matches ALL and NONE keywords
250 * pam_lastlog: Enable log to wtmp by default. Add "nowtmp" option
251 * pam_radius: This module was removed