Thorsten Kukuk [Tue, 7 Feb 2006 07:51:13 +0000 (07:51 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Check for text browser.
* Make.xml.rules: Add rule to generate README from README.xml.
* modules/pam_access/Makefile.am: Include Make.xml.rules.
* modules/pam_access/README: Regenerated from README.xml.
* modules/pam_access/README.xml: New.
* modules/pam_access/access.conf: Extended by new examples.
* modules/pam_access/access.conf.5: New, generated from xml file.
* modules/pam_access/access.conf.5.xml: New.
* modules/pam_access/pam_access.8: New, generated from xml file.
* modules/pam_access/pam_access.8.xml: New.
* modules/pam_access/pam_access.c: Add rules for IPv6 and
netmasks.
Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
* modules/pam_deny/Makefile.am: Include Make.xml.rules.
* modules/pam_deny/pam_deny.8.xml: New.
* modules/pam_deny/pam_deny.8: New, generated from xml file.
* modules/pam_deny/README.xml: New.
* modules/pam_deny/README: Regenerated from xml file.
* modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
* modules/pam_cracklib/pam_cracklib.8.xml: New.
* modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
* modules/pam_cracklib/README.xml: New.
* modules/pam_cracklib/README: Regenerated from xml file.
* modules/pam_exec/Makefile.am: Add rule to generate README.
* modules/pam_exec/README: Regenerated from xml file.
* modules/pam_exec/pam_exec.8: Regenerated from xml file.
* modules/pam_exec/pam_exec.8.xml: Syntax files.
Thorsten Kukuk [Tue, 24 Jan 2006 23:28:31 +0000 (23:28 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
Add framework for manpages in xml source
Fix --enable-static-modules
2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
* libpam/pam_static_modules.h: New.
* Makefile.am: Reorder subdirectories for static modules.
* configure.in: Add --enable-static-modules option.
* libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
necessary, add pam_static_modules.h, link against all PAM
module object files if STATIC_MODULES is defined.
* libpam/pam_static.c: Remove old _static_module* includes,
include pam_static_modules.h.
* configure.in: Add checks for xsltproc, xmllint and docbook
xsl stylesheet.
* m4/jh_path_xml_catalog.m4: New.
Thorsten Kukuk [Sun, 22 Jan 2006 07:36:54 +0000 (07:36 +0000)]
Relevant BUGIDs: none
Purpose of commit: bugfix
Commit summary:
---------------
Fix compiling of static version of shared libpam, libpamc and libpam_misc
libraries without assuming "--enable-static-modules do not make the modules
dynamically loadable".
2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Don't define PAM_DYNAMIC.
* libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
include pam_dynamic.h
* libpam/pam_dynamic.c: Don't include pam_dynamic.h,
exclude functions if we compile with PAM_STATIC.
* libpam/pam_dynamic.h: Remove.
* libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
* libpam/Makefile.am: Bump version number of libpam, remove
pam_dynamic.h.
Thorsten Kukuk [Thu, 12 Jan 2006 15:34:49 +0000 (15:34 +0000)]
Relevant BUGIDs: none
Purpose of commit: new feature
Commit summary:
---------------
2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Add check for -fpie/-pie
* modules/pam_filter/upperLOWER/Makefile.am: Compile/link
upperLOWER with -fpie/-pie if supported.
* modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
with -fpie/-pie if supported.
Thorsten Kukuk [Thu, 5 Jan 2006 13:00:28 +0000 (13:00 +0000)]
Relevant BUGIDs: none
Purpose of commit: bugfix
Commit summary:
---------------
item of pam_get_item() is allowed to be NULL and the behavior is
documented, so we have to allow it.
2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
* libpam/include/security/_pam_types.h: Remove nonnull attribute
from third paramter (item) of pam_get_item.
* libpam/Makefile.am: Bump version number of shared library.
Dmitry V. Levin [Mon, 12 Dec 2005 14:45:00 +0000 (14:45 +0000)]
Relevant BUGIDs: none
Purpose of commit: cleanup
Commit summary:
---------------
2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
Cleanup pam_syslog messages.
* modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
* modules/pam_filter/pam_filter.c (set_filter): Append %m
specifier to pam_syslog messages where appropriate.
* modules/pam_group/pam_group.c (read_field): Likewise.
* modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
(create_homedir): Do not use make_remark() wrapper, call
pam_info() directly. Call pam_syslog() right after failed
operation and append %m specifier to pam_syslog messages where
appropriate.
* modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
sequence of malloc(), strcpy() and strcat() calls with asprintf().
Append %m specifier to pam_syslog messages where appropriate.
* modules/pam_securetty/pam_securetty.c (securetty_perform_check):
Append %m specifier to pam_syslog messages where appropriate.
* modules/pam_shells/pam_shells.c (perform_check): Likewise.
Thorsten Kukuk [Fri, 18 Nov 2005 08:57:01 +0000 (08:57 +0000)]
Relevant BUGIDs: 534205
Purpose of commit: new feature
Commit summary:
---------------
2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
* libpam/pam_handlers.c: Replace code for all dlopen variants with
a generic wrapper.
* libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
* libpam/pam_dynamic.h: Provide prototypes.
For Mac OS X support [#534205]
Steve Langasek [Sun, 6 Nov 2005 12:50:43 +0000 (12:50 +0000)]
Relevant BUGIDs: Debian bugs #330458, #330852
Purpose of commit: bugfix
Commit summary:
---------------
don't treat a missing /etc/environment as a fatal error when attempting
to read it, and try to read this file by default; this restores the
behavior from Linux-PAM 0.76.
Tomas Mraz [Wed, 26 Oct 2005 19:05:32 +0000 (19:05 +0000)]
Relevant BUGIDs: Red Hat bz 168180
Purpose of commit: bugfix
Commit summary:
---------------
2005-10-26 Tomas Mraz <t8m@centrum.cz>
* modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
uid to 0 before executing the helper if SELinux is enabled.
* modules/pam_unix/unix_chkpwd.c (main): Disable user check only
if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
Tomas Mraz [Thu, 20 Oct 2005 17:01:06 +0000 (17:01 +0000)]
Relevant BUGIDs: Red Hat bz 171164
Purpose of commit: new feature
Commit summary:
---------------
2005-10-20 Tomas Mraz <t8m@centrum.cz>
* configure.in: Added check for xauth binary and --with-xauth option.
* config.h.in: Added configurable PAM_PATH_XAUTH.
* modules/pam_xauth/README,
modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
* modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
searching xauth binary on multiple places.
(run_coprocess): Don't use execvp as it can be a security risk.
Dmitry V. Levin [Tue, 4 Oct 2005 11:35:18 +0000 (11:35 +0000)]
2005-10-02 Dmitry V. Levin <ldv@altlinux.org>
Steve Langasek <vorlon@debian.org>
Cleanup gratuitous use of strdup().
Fix "missing argument" checks.
* modules/pam_env/pam_env.c (_pam_parse): Add const qualifier
to conffile and envfile arguments. Do not use x_strdup() for
conffile and envfile initialization. Fix "missing argument"
checks.
(_parse_config_file): Take conffile argument of type "const char *"
instead of "char **". Do not free conffile.
(_parse_env_file): Take env_file argument of type "const char *"
instead of "char **". Do not free env_file.
(pam_sm_setcred): Add const qualifier to conf_file and env_file.
Pass conf_file and env_file to _parse_config_file() and
_parse_env_file() by value.
(pam_sm_open_session): Likewise.
* modules/pam_ftp/pam_ftp.c (_pam_parse): Add const qualifier to
users argument. Do not use x_strdup() for users initialization.
(lookup): Add const qualifier to list argument.
(pam_sm_authenticate): Add const qualifier to users argument.
* modules/pam_mail/pam_mail.c (_pam_parse): Add const qualifier
to maildir argument. Do not use x_strdup() for maildir
initialization. Fix "missing argument" check.
(get_folder): Take path_mail argument of type "const char *"
instead of "char **". Do not free path_mail.
(_do_mail): Add const qualifier to path_mail argument.
Pass path_mail to get_folder() by value.
* modules/pam_motd/pam_motd.c: Include <syslog.h>.
(pam_sm_open_session): Add const qualifier to motd_path.
Do not use x_strdup() for motd_path initialization. Do not
free motd_path. Fix "missing argument" check. Add "unknown
option" warning.
* modules/pam_userdb/pam_userdb.c (_pam_parse): Add const
qualifier to database and cryptmode arguments. Fix "missing
argument" checks.
(pam_sm_authenticate): Add const qualifier to database and cryptmode.
(pam_sm_acct_mgmt): Likewise.
Commit summary:
---------------
2005-09-22 Dmitry V. Levin <ldv@altlinux.org>
* modules/pam_xauth/pam_xauth.c: (check_acl, pam_sm_open_session,
pam_sm_close_session): Strip redundant "pam_xauth: " prefix from
text of log messages.
(pam_sm_open_session): Replace sequence of malloc(), strcpy()
and strcat() calls with asprintf(). Replace syslog() calls
with pam_syslog().
Tomas Mraz [Wed, 21 Sep 2005 10:54:50 +0000 (10:54 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix, new feature
Commit summary:
---------------
pam_lastlog: Cleanup, fix broken logic in pam_parse,
modify wtmp by default, nowtmp option switches that off (patch by ldv)
projects / linux-pam / log