+2010-08-29 Nicolas François <nicolas.francois@centraliens.net>
+
+ * autogen.sh: Expand autoreconf to avoid running autopoint.
+
+2010-08-29 Nicolas François <nicolas.francois@centraliens.net>
+
+ * po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
+ * po/*.po, man/po/*.po: Updated PO files.
+
+2010-08-28 Brian M. Carlson <sandals@crustytoothpaste.ath.cx>
+
+ * man/chsh.1.xml: Fix comma splice.
+
+2010-08-28 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/protoypes.h, libmisc/copydir.c, src/useradd.c:
+ selinux_file_context renamed set_selinux_file_context.
+ * lib/protoypes.h, libmisc/copydir.c, src/useradd.c:
+ Added reset_selinux_file_context.
+ * src/useradd.c: Check the return value of
+ set_selinux_file_context and reset_selinux_file_context.
+ * libmisc/copydir.c: Check the return value of
+ reset_selinux_file_context.
+
+2010-08-28 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/su.c: Fix handling of environment variables when
+ the environment is not changed. In particular, this makes su
+ behave as documented regarding PATH and IFS (i.e. they are reset)
+ when -p is provided.
+
+2010-08-28 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/su.1.xml: Fix typo.
+
+2010-08-22 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/newgrp.c, src/userdel.c, src/grpck.c, src/gpasswd.c,
+ src/newusers.c, src/pwconv.c, src/chpasswd.c, src/logoutd.c,
+ src/chfn.c, src/groupmems.c, src/usermod.c, src/pwunconv.c,
+ src/expiry.c, src/groupdel.c, src/chgpasswd.c, src/useradd.c,
+ src/su.c, src/groupmod.c, src/passwd.c, src/pwck.c, src/chage.c,
+ src/groupadd.c, src/login.c, src/grpconv.c, src/groups.c,
+ src/grpunconv.c, src/chsh.c: Prog changed to a constant string.
+
+2010-08-22 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/limits.c: Avoid implicit conversion of integer to
+ boolean.
+ * libmisc/basename.c: Avoid implicit conversion of pointer to
+ boolean.
+ * libmisc/basename.c, lib/prototypes.h (Basename): Return a
+ constant string.
+ * libmisc/basename.c, libmisc/obscure.c, lib/prototypes.h,
+ libmisc/xmalloc.c, libmisc/getdate.h, libmisc/system.c,
+ libmisc/getgr_nam_gid.c, libmisc/failure.c, libmisc/valid.c: Add
+ splint annotations.
+ * libmisc/chowndir.c: Avoid memory leak.
+ * libmisc/chowndir.c: Do not check *printf/*puts return value.
+ * libmisc/chowntty.c: Avoid implicit conversion between integer
+ types.
+ * libmisc/obscure.c: Return a bool when possible instead of int.
+ * libmisc/shell.c: Do not check *printf/*puts return value.
+ * libmisc/shell.c: Do not check execle return value.
+ * libmisc/setupenv.c: Avoid implicit conversion between integer
+ types.
+ * libmisc/xmalloc.c: size should not be zero to avoid returning
+ NULL pointers.
+ * libmisc/hushed.c: Do not check *printf/*puts return value.
+ * libmisc/system.c: Avoid implicit conversion of integer to
+ boolean. safe_system last argument is a boolean.
+ * libmisc/system.c: Check return value of dup2.
+ * libmisc/system.c: Do not check *printf/*puts return value.
+ * libmisc/system.c: Do not check execve return value.
+ * libmisc/salt.c: Do not check *printf/*puts return value.
+ * libmisc/loginprompt.c: Do not check gethostname return value.
+ * libmisc/find_new_gid.c, libmisc/find_new_uid.c: Do not check
+ gr_rewind/pw_rewind return value.
+ * libmisc/ttytype.c: Limit the number of parsed characters in the
+ sscanf format.
+ * libmisc/ttytype.c: Test if a type was really read.
+ * libmisc/sub.c: Do not check *printf/*puts return value.
+ * libmisc/sub.c: Avoid implicit conversion of integer to boolean.
+ * src/userdel.c: Fix typo in comment.
+ * src/userdel.c: Avoid implicit conversion of boolean to integer.
+ * src/userdel.c: safe_system last argument is a boolean.
+ * src/newusers.c: Avoid implicit conversion of boolean to integer.
+ * src/newusers.c: Avoid implicit conversion of integer to boolean.
+ * src/usermod.c: Add brackets.
+ * src/usermod.c: Avoid implicit conversion of characters or
+ integers to booleans.
+ * src/vipw.c: Avoid implicit conversion of integer to boolean.
+ * src/su.c: Avoid implicit conversion of integer to boolean.
+ * src/su.c: Add brackets.
+ * src/useradd.c: Avoid implicit conversion of characters or
+ integers to booleans.
+
+2010-08-22 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/obscure.c, lib/prototypes.h (obscure): Return a bool
+ instead of an int.
+ * libmisc/obscure.c, libmisc/tz.c, src/passwd.c, lib/encrypt.c,
+ libmisc/copydir.c, lib/prototypes.h: Add splint annotations.
+ * libmisc/tz.c: Fix some const issues.
+ * libmisc/tz.c: Avoid multi-statements lines.
+ * libmisc/tz.c: Add brackets.
+ * libmisc/copydir.c: Do not check *printf/*puts return value.
+ * libmisc/copydir.c: Fail if we cannot set or reset the SELinux
+ fscreate context.
+ * libmisc/copydir.c: Use xmalloc instead of malloc.
+ * libmisc/copydir.c: Do not check lutimes return value
+ * src/vipw.c: Avoid implicit conversion of integer to boolean.
+ * src/su.c (iswheel): Return a bool instead of an int.
+ * src/passwd.c: Remove insert_crypt_passwd(). Use xstrdup instead.
+ * src/passwd.c: Return constant strings when sufficient.
+ * src/passwd.c: Do not check *printf/*puts return value.
+ * src/passwd.c: Avoid implicit conversion of character to boolean.
+ * src/passwd.c: Do not check sleep return value.
+ * src/sulogin.c: Do not check *printf/*puts return value.
+ * lib/encrypt.c: Do not check fprintf return value.
+
+2010-08-21 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/passwd.c: Fix a const issue.
+ * src/passwd.c: Avoid multi-statements lines.
+ * src/sulogin.c: Fix a const issue.
+
+2010-08-21 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/copydir.c, lib/prototypes.h: Caller can choose not to
+ copy the extended attributes (the SELinux context is hence reset)
+ * src/usermod.c: Copy the extended attributes.
+ * src/useradd.c: Only reset the SELinux context.
+
+2010-08-21 Nicolas François <nicolas.francois@centraliens.net>
+
+ * configure.in: Fixed typo.
+
+2010-08-21 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/console.c, libmisc/motd.c, libmisc/setupenv.c,
+ libmisc/sulog.c, libmisc/hushed.c, libmisc/failure.c,
+ libmisc/loginprompt.c, libmisc/ttytype.c, libmisc/obscure.c,
+ libmisc/pam_pass_non_interractive.c, src/userdel.c, src/login.c,
+ lib/commonio.c, lib/commonio.h, libmisc/setugid.c,
+ libmisc/setupenv.c: Fix some const issues.
+ * libmisc/motd.c: Avoid multi-statements lines.
+ * libmisc/motd.c: Support long MOTD_FILE.
+ * libmisc/list.c, lib/prototypes.h: Revert previous change.
+ dup_list and is_on_list are used with members as defined for the
+ group structure, and thus even if the list is not modified, the
+ list elements cannot be constant strings.
+ * libmisc/system.c: Avoid C++ comments.
+ * src/vipw.c: WITH_TCB cannot be tested inside a gettextized
+ string. Split the Usage string.
+ * lib/commonio.h: Re-indent.
+
+2010-08-21 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/audit_help.c (audit_logger):pgname is not used. We let
+ audit find out the name of the program.
+ * libmisc/audit_help.c: Re-indent.
+
+2010-08-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/groupio.c: Avoid implicit conversion from signed to unsigned.
+
+2010-08-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/commonio.c: Make sure there are no NULL pointer dereference.
+
+2010-08-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/remove_tree.c: Ignore snprintf return value.
+
+2010-08-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/prototypes.h, libmisc/list.c: dup_list() and is_on_list() do
+ not change the members of the list they receive. Added const
+ qualifiers.
+
+2010-08-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/usermod.c: Re-indent.
+
+2010-08-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/commonio.c: Avoid multi-statements lines.
+
+2010-08-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/po/fr.po: Fix a typo.
+
+2010-06-24 Baurzhan Muftakhidinov <baurthefirst@gmail.com>
+
+ * NEWS, po/kk.po: Updated Kazakh translation.
+
+2010-04-12 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/po/fr.po: Fix some typos. Minor updates: 886t70f187u.
+
+2010-04-12 Nicolas François <nicolas.francois@centraliens.net>
+
+ * po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
+ * po/*.po, man/po/*.po: Updated PO files.
+
+2010-04-05 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/newusers.8.xml, man/useradd.8.xml, man/groupadd.8.xml,
+ man/login.defs.d/UMASK.xml, man/login.defs.d/CREATE_HOME.xml,
+ man/login.defs.d/LOGIN_RETRIES.xml: Fix typos: choosen, overriden,
+ bahavior.
+
+2010-04-04 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/usermod.8.xml: Document changes of ownerships.
+
+2010-04-04 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/vipw.8.xml: Fix formatting typo.
+ * man/vipw.8.xml: Document the login.defs parameters only when tcb
+ is enabled.
+
+2010-04-04 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/useradd.c: spool is a constant string.
+ * src/useradd.c: Set the new copy_tree's paramater 'copy_root' to false
+
+2010-04-04 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/usermod.c: move_home() is only called if mflg is set.
+ * src/usermod.c: Fail is -m is provided but the old home directory
+ is not a directory.
+ * src/usermod.c: Use the previous improvement of copy_tree to
+ provide better error diagnosis.
+ * src/usermod.c: When rename() is used, also change the ownership.
+ * src/usermod.c: Do not change the ownership of the root directory
+ twice.
+ * src/usermod.c: When -u is provided, only change the ownership of
+ the home directory if it is a directory.
+ * src/usermod.c: Also change ownerships when -g is used.
+
+2010-04-04 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/prototypes.h, libmisc/copydir.c: Add the old UID and GID to
+ copy_tree to detect when ownership shall be changed.
+ * libmisc/copydir.c: Document the behavior when the IDs are set to
+ -1.
+ * lib/prototypes.h, libmisc/copydir.c (copy_tree): Add parameter
+ copy_root.
+ * libmisc/copydir.c: error() and ctx can be static.
+ * libmisc/copydir.c (copy_hardlink): Remove parameter src.
+
+2010-04-04 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/chowndir.c: Dynamically allocate memory to support
+ path longer than 1024 characters.
+ * libmisc/chowndir.c: Fix typos in documentation.
+ * libmisc/chowndir.c: Support and document the behavior when a old
+ or new ID is set to -1.
+ * libmisc/chowndir.c: Improved error detection when chown fails.
+ * libmisc/chowndir.c: Harmonize error handling strategy when an
+ error occurs: stop changing ownership as soon as an error was
+ detected.
+
+2010-04-03 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/hu/passwd.5: Fix formatting typo.
+ * man/id/login.1: Likewise.
+
+2010-03-31 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/vipw.8.xml: When TCB is enabled, vipw uses login.defs.
+
+2010-03-31 Nicolas François <nicolas.francois@centraliens.net>
+
+ * NEWS, libmisc/copydir.c: When a hardlink is detected, the
+ original hardlink should not be removed.
+
+2010-03-30 Nicolas François <nicolas.francois@centraliens.net>
+
+ * po/POTFILES.in, libmisc/Makefile.am, lib/prototypes.h,
+ libmisc/remove_tree.c, libmisc/copydir.c: Split remove_tree()
+ outside of copydir.c to avoid linking against libacl or libattr.
+
+2010-03-30 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/su.c: shell's name must be -su when a su fakes a login.
+
+2010-03-30 Nicolas François <nicolas.francois@centraliens.net>
+
+ * NEWS, configure.in, libmisc/copydir.c, man/useradd.8.xml,
+ man/usermod.8.xml, src/Makefile.am: Added support for ACLs and
+ Extended Attributes.
+
+2010-03-30 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/copydir.c: Document the sections closed by #endif
+
+2010-03-27 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/vipw.8.xml: Add section ENVIRONMENT.
+
+2010-03-26 Nicolas François <nicolas.francois@centraliens.net>
+
+ * etc/login.defs: Updated description of UMASK to indicate its
+ usage by pam_umask.
+ * man/login.defs.d/UMASK.xml: Likewise.
+
+2010-03-25 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/login.1.xml: login does not check for new mails in PAM
+ enabled versions. This is done by pam_mail.
+
+2010-03-25 Nicolas François <nicolas.francois@centraliens.net>
+
+ * NEWS, src/chpasswd.c, man/chpasswd.8.xml, man/login.defs.5.xml:
+ PAM enabled versions: restore the -e option to allow restoring
+ passwords without knowing those passwords. Restore together the -m
+ and -c options.
+
+2010-03-23 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/su.c, src/vipw.c, src/newgrp.c: When the child is
+ interrupted, stop ourself with a SIGSTOP signal.
+
+2010-03-23 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/newgrp.c: Limit the scope of variable pid.
+ * src/login_nopam.c: Limit the scope of variables end, lineno, i,
+ str_len.
+ * src/logoutd.c: Limit the scope of variable c.
+ * src/vipw.c: Re-indent.
+ * src/vipw.c: Close the file after the creation of the backup.
+ * src/useradd.c (set_default): Close input file on failure.
+ * src/useradd.c: Limit the scope of variables spool, file, fd, gr,
+ gid, mode.
+ * src/passwd.c: Limit the scope of variables last and ok.
+ * src/chage.c: Fix typo (non breaking space).
+ * src/login.c: Limit the scope of variables erasechar killchar, c,
+ failed.
+ * src/groups.c: Limit the scope of variable ngroups, pri_grp, i.
+ * src/id.c: Limit the scope of variable i.
+
+2010-03-22 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/utent.c (getutline): Remove getutline(). This function is
+ no more used.
+ * lib/groupmem.c: Limit the scope of variable i.
+ * lib/shadow.c: Avoid implicit conversion of pointers and integers
+ to booleans.
+ * lib/shadow.c: Added brackets.
+ * libmisc/limits.c: Limit the scope of variable tmpmask.
+ * libmisc/copydir.c: Close opened file on failure.
+ * libmisc/loginprompt.c: Limit the scope of variable envc.
+ * libmisc/find_new_uid.c, libmisc/find_new_gid.c: Limit the scope
+ of variable id.
+
+2010-03-21 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/find_new_gid.c, libmisc/find_new_uid.c: Detect some
+ misconfigurations of UID_MIN, UID_MAX, SYS_UID_MIN, SYS_UID_MAX (and
+ the GID equivalents)
+
+2010-03-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * NEWS, configure.in: Next version will be 4.1.5.
+ * po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
+ * po/*.po, man/po/*.po: Updated PO files.
+
+2010-03-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/limits.c: Re-indent to make pmccabe happy.
+
+2010-03-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/generate_translations.mak, man/generate_mans.mak: Fix
+ distcheck. All manpages generation code shall be enclosed in
+ ENABLE_REGENERATE_MAN conditions.
+
+2010-03-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/useradd.8.xml: Do not document the features which are not
+ working.
+ * man/useradd.8.xml: Fix typo: -u was meant instead of -o.
+ * man/useradd.8.xml: Document that the default behavior depends on
+ CREATE_HOME.
+
+2010-03-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/groupio.c: Fix memory management insplit_groups().
+
+2010-03-20 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/strtoday.c: Empty dates indicate a disabled date, this is
+ not an error.
+
+2010-03-19 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/useradd.c, lib/commonio.c, po/POTFILES.in: Fix typos.
+ * libmisc/limits.c: Removed unused variable.
+
+2010-03-19 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/commonio.c: Stop sorting entries when we reach the first
+ NIS line.
+
+2010-03-18 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/chsh.c: Even for root, warn if an invalid shell is
+ specified. Alioth#311305
+
+2010-03-18 Nicolas François <nicolas.francois@centraliens.net>
+
+ * man/limits.5.xml: Document the selection of the limits when
+ multiple lines match the user.
+
+2010-03-18 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/limits.c: Re-indent.
+ * libmisc/limits.c: Reformat the documentation. Avoid personal
+ comments.
+ * man/limits.5.xml: Document the new features.
+
+2010-03-18 Thomas Orgis <thomas@orgis.org>
+
+ * NEWS, libmisc/limits.c: Fix parsing of limits.
+ * NEWS, libmisc/limits.c: Add support for infinite limits.
+ * NEWS, libmisc/limits.c: Add support for @group syntax.
+
+2010-03-18 Nicolas François <nicolas.francois@centraliens.net>
+
+ * lib/tcbfuncs.h: Re-indent.
+ * lib/tcbfuncs.h: Explicitly indicate function taking a void
+ parameter.
+
+2010-03-18 Nicolas François <nicolas.francois@centraliens.net>
+
+ * src/useradd.c: When exiting because of a failure, warn if an
+ home directory created, but cannot be removed.
+
+2010-03-18 Nicolas François <nicolas.francois@centraliens.net>
+
+ * libmisc/chowndir.c: Re-indent.
+ * libmisc/chowndir.c: Avoid assignment in comparisons.
+ * libmisc/chowndir.c: Added brackets and parenthesis.
+
2010-03-18 Nicolas François <nicolas.francois@centraliens.net>
* libmisc/strtoday.c: Add support for numerical dates, assuming