]>
granicus.if.org Git - cronie/log
summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
mmaslano [Fri, 17 Aug 2007 13:16:14 +0000 (15:16 +0200)]
Into with_selinux and with_pam part was added variables
used only there. In Makefile are libs set by variables.
mmaslano [Fri, 17 Aug 2007 13:15:49 +0000 (15:15 +0200)]
Now is possible to use different character encodings for mailed cron job output by
setting the CONTENT_TYPE and CONTENT_TRANSFER_ENCODING variables in crontabs,
to the correct values of the mail headers of those names.
mmaslano [Fri, 17 Aug 2007 13:15:35 +0000 (15:15 +0200)]
Module pam_limit.so was added to default configuration.
mmaslano [Fri, 17 Aug 2007 13:15:24 +0000 (15:15 +0200)]
Fixing "security": minutely job are made realy only one time per
minute. If the job is delayed into next minute, then it's skipped
for this minute.
mmaslano [Fri, 17 Aug 2007 13:15:07 +0000 (15:15 +0200)]
The security.c file was filled with selinux and pam often
used functions, which were removed from other files.
mmaslano [Fri, 17 Aug 2007 13:13:20 +0000 (15:13 +0200)]
Option -m was added: it's possible to use something else then sendmail.
mmaslano [Fri, 17 Aug 2007 13:13:09 +0000 (15:13 +0200)]
Now is cron with audit. Complaining about denying users.
mmaslano [Fri, 17 Aug 2007 13:12:59 +0000 (15:12 +0200)]
The return value were added because of too many warning messages
from compiler. Also the variables were initialized.
mmaslano [Fri, 17 Aug 2007 13:12:45 +0000 (15:12 +0200)]
'Build enviroment' is set in pam section for better security.
mmaslano [Fri, 17 Aug 2007 13:10:50 +0000 (15:10 +0200)]
Comments were changed.
mmaslano [Fri, 17 Aug 2007 13:10:36 +0000 (15:10 +0200)]
Selinux: Instead of getting context and then the username is
used function getuserbyname.
mmaslano [Fri, 17 Aug 2007 13:10:16 +0000 (15:10 +0200)]
Too many flags was set for lstating crontab. Time of change is
checked and uids for reading new crontab are ok.
mmaslano [Fri, 17 Aug 2007 13:09:50 +0000 (15:09 +0200)]
List corruption when items are removed from /etc/cron.d.
Variable tabname is filled with file or NULL and checked
when crontab is changed.
mmaslano [Fri, 17 Aug 2007 13:09:30 +0000 (15:09 +0200)]
Crond.pam was changed according to pam modules.
The pam_limits.so could be used.
mmaslano [Fri, 17 Aug 2007 13:04:56 +0000 (15:04 +0200)]
lstat instead of stat can stat even symlink itself, not the file
that it refers to.
mmaslano [Fri, 17 Aug 2007 13:04:41 +0000 (15:04 +0200)]
Redefined limits of macros.
mmaslano [Fri, 17 Aug 2007 13:04:30 +0000 (15:04 +0200)]
If fork fails, pam has to close session.
mmaslano [Fri, 17 Aug 2007 13:04:18 +0000 (15:04 +0200)]
fix of bug rhbz#154065: crontab should not use waitpid(...,WUNTRACED)
and stop itself if its child is stopped
mmaslano [Fri, 17 Aug 2007 13:04:04 +0000 (15:04 +0200)]
PAM hadn't closed session.
mmaslano [Fri, 17 Aug 2007 13:03:51 +0000 (15:03 +0200)]
Selinux doesn't segfault, because of: permissive mode returns 0
and selinux enabled is also check context.
mmaslano [Fri, 17 Aug 2007 13:03:34 +0000 (15:03 +0200)]
Cron validate the recipient only when CRON_VALIDATE_MAILRCPTS isn't null.
Validating of email recipient is default off.
mmaslano [Fri, 17 Aug 2007 13:03:24 +0000 (15:03 +0200)]
Set item in pam - "cron".
mmaslano [Fri, 17 Aug 2007 13:03:13 +0000 (15:03 +0200)]
Initialize some important variables.
mmaslano [Fri, 17 Aug 2007 13:03:01 +0000 (15:03 +0200)]
Add -p option for crontab.
Without the -p option /etc/crontab must not be writable by any
user other than root, no crontab files may be links, or linked
to by any other file, and no crontab files may be executable,
or be writable by any user other than their owner
mmaslano [Fri, 17 Aug 2007 13:02:43 +0000 (15:02 +0200)]
Fix for ppc: int ch='\0' is initialized.
mmaslano [Fri, 17 Aug 2007 13:02:33 +0000 (15:02 +0200)]
Don't read the header of crontab.
mmaslano [Fri, 17 Aug 2007 13:02:23 +0000 (15:02 +0200)]
For setegid are used saved gid instead of getgid().
Now are swaped back the correct gid.
mmaslano [Fri, 17 Aug 2007 13:02:07 +0000 (15:02 +0200)]
Allow root's crontab (check with getuid).
mmaslano [Fri, 17 Aug 2007 13:01:57 +0000 (15:01 +0200)]
According to changes in selinux selinux_check_passwd_access
is now enough for examinitaion of user's password.
mmaslano [Fri, 17 Aug 2007 13:01:43 +0000 (15:01 +0200)]
Context in selinux is now correctly undone.
mmaslano [Fri, 17 Aug 2007 13:01:32 +0000 (15:01 +0200)]
/etc/crontab is now writable only by root. No links on this file are allowed.
mmaslano [Fri, 17 Aug 2007 13:01:19 +0000 (15:01 +0200)]
Add -i option to crontab, which print prompt before removing crontab.
mmaslano [Fri, 17 Aug 2007 13:01:06 +0000 (15:01 +0200)]
Nicknames were mentioned in man pages (@yearly, @hourly, etc).
mmaslano [Fri, 17 Aug 2007 13:00:52 +0000 (15:00 +0200)]
Crontab is stat instead of fstat and crontab is reopened for
reading new stdin.
This change should:
Allowed editors such as 'gedit' which do not modify original
file, but which rename(2) a temp file to original, to be used
by crontab -e (bug 129170).
mmaslano [Fri, 17 Aug 2007 13:00:31 +0000 (15:00 +0200)]
In lower version of pam was re-open log needed (rhel-4 and lower).
mmaslano [Fri, 17 Aug 2007 13:00:21 +0000 (15:00 +0200)]
Change in pam configuration file (auth sufficient is now used).
mmaslano [Fri, 17 Aug 2007 13:00:05 +0000 (15:00 +0200)]
Selinux for crontab: checking users with selinux.
User is fixed from char to const char.
mmaslano [Fri, 17 Aug 2007 12:59:53 +0000 (14:59 +0200)]
Hardwired 'system' wasn't needed.
mmaslano [Fri, 17 Aug 2007 12:59:18 +0000 (14:59 +0200)]
Add file crond.pam, which has rules for pam sessions.
In Makefile is now crond.pam installed.
mmaslano [Fri, 17 Aug 2007 12:59:02 +0000 (14:59 +0200)]
Now we compile with pam flags and libs.
mmaslano [Fri, 17 Aug 2007 12:58:01 +0000 (14:58 +0200)]
PAM support was added: open sessions and set credentials for users.
mmaslano [Fri, 17 Aug 2007 12:53:48 +0000 (14:53 +0200)]
In Makefile are now LIB = -lselinux and -DWITH_SELINUX flags.
mmaslano [Fri, 17 Aug 2007 12:53:37 +0000 (14:53 +0200)]
Features was added into manual.
mmaslano [Fri, 17 Aug 2007 12:53:24 +0000 (14:53 +0200)]
Remove header in user's crontab.
mmaslano [Fri, 17 Aug 2007 12:53:13 +0000 (14:53 +0200)]
Logs now inform about creating crontabs for users,
which aren't allowed to use crontab.
It's for user in cron.{allow,deny}
mmaslano [Fri, 17 Aug 2007 12:52:59 +0000 (14:52 +0200)]
Change behavior to allow crontab to take stdin with no '-'.
mmaslano [Fri, 17 Aug 2007 12:52:48 +0000 (14:52 +0200)]
RH_CROND was added in programme - stating directory.
In RH_CROND are system crontables.
mmaslano [Fri, 17 Aug 2007 12:52:34 +0000 (14:52 +0200)]
Use snprintf instead of sprintf.
mmaslano [Fri, 17 Aug 2007 12:52:22 +0000 (14:52 +0200)]
Use fork instead of vfork.
Add signal: Our grandparent is watching for our parent's death by
catching SIGCHLD. Meanwhile, our parent will use wait
explicitly and so has disabled SIGCHLD. So now it's
time to reset SIGCHLD handling.
mmaslano [Fri, 17 Aug 2007 12:52:08 +0000 (14:52 +0200)]
Add first selinux patch. Loading users through selinux scontext.
mmaslano [Fri, 17 Aug 2007 12:51:52 +0000 (14:51 +0200)]
Redefine sendmail options.
mmaslano [Fri, 17 Aug 2007 12:51:35 +0000 (14:51 +0200)]
Change path names for redhat/fedora system.
mmaslano [Fri, 17 Aug 2007 12:51:21 +0000 (14:51 +0200)]
Changes in Makefile: flags, -pie option, permission
and installation paths for redhat/fedora system.
mmaslano [Fri, 17 Aug 2007 12:47:59 +0000 (14:47 +0200)]
Source files of vixie-cron-4.1.