Thorsten Kukuk [Thu, 1 Jun 2006 16:33:48 +0000 (16:33 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_ftp/Makefile.am: Include Make.xml.rules.
* modules/pam_ftp/pam_ftp.8.xml: New.
* modules/pam_ftp/pam_ftp.8: New, generated from xml file.
* modules/pam_ftp/README.xml: New.
* modules/pam_ftp/README: Regenerated from xml file.
Thorsten Kukuk [Thu, 1 Jun 2006 11:41:18 +0000 (11:41 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2006-06-01 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_issue/Makefile.am: Include Make.xml.rules.
* modules/pam_issue/pam_issue.8.xml: New.
* modules/pam_issue/pam_issue.8: New, generated from xml file.
* modules/pam_issue/README.xml: New.
* modules/pam_issue/README: Regenerated from xml file.
* modules/pam_filter/Makefile.am: Include Make.xml.rules.
* modules/pam_filter/pam_filter.8.xml: New.
* modules/pam_filter/pam_filter.8: New, generated from xml file.
* modules/pam_filter/README.xml: New.
* modules/pam_filter/README: Regenerated from xml file.
Thorsten Kukuk [Tue, 30 May 2006 07:48:36 +0000 (07:48 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2006-05-30 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_umask/Makefile.am: Include Make.xml.rules.
* modules/pam_umask/pam_umask.8.xml: New.
* modules/pam_umask/pam_umask.8: New, generated from xml file.
* modules/pam_umask/README.xml: New.
* modules/pam_umask/README: Regenerated from xml file.
Thorsten Kukuk [Mon, 29 May 2006 07:38:03 +0000 (07:38 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2006-05-29 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_mkhomedir/Makefile.am: Include Make.xml.rules.
* modules/pam_mkhomedir/pam_mkhomedir.8.xml: New.
* modules/pam_mkhomedir/pam_mkhomedir.8: New, generated from xml file.
* modules/pam_mkhomedir/README.xml: New.
* modules/pam_mkhomedir/README: Regenerated from xml file.
* modules/pam_listfile/pam_listfile.c (pam_sm_authenticate):
Fix memory leaks, [#1490956] found by Coverity.
* modules/pam_tally/pam_tally.c (pam_get_uid): Check return
value of pam_get_user().
(tally_get_data): Check if oldtime is not NULL.
[#1489818] found by Coverity.
* modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Don't
ignore return value of stat(). [#1489808] found by Coverity.
* modules/pam_mail/pam_mail.c (get_folder): Fix a potential
NULL pointer dereference. [#1489792] found by Coverity.
* libpam/Makefile.am: bump release number of libpam.so.
* libpam/pam_misc.c (_pam_mkargv): Fix memory leak,
[#1489804] found by Coverity.
* modules/pam_echo/pam_echo.c (replace_and_print): Initialize
str, [#1489658] found by Coverity.
* modules/pam_cracklib/pam_cracklib.c (_pam_unix_approve_pass): Fix
a potential NULL pointer dereference.
(pam_sm_chauthtok): Remove dead code.
[#1489634] found by Coverity.
Thorsten Kukuk [Thu, 4 May 2006 06:56:04 +0000 (06:56 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature, cleanup
Commit summary:
---------------
To unify look of error messages remove trailing dot from 4 pam_strerror()
messages and adjust translations.
Convert all xml files to UTF-8.
Add pam.3 and pam_sm_acct_mgmt.3.
Thorsten Kukuk [Mon, 13 Mar 2006 19:34:17 +0000 (19:34 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2006-03-13 Thorsten Kukuk <kukuk@thkukuk.de>
* doc/man/pam_error.3.xml: New.
* doc/man/pam_error.3: New, generated from XML file.
* doc/man/pam_verror.3: New, generated from XML file.
* doc/man/Makefile.am: Add pam_error.3 and pam_verror.3.
* modules/pam_succeed_if/pam_succeed_if.8.xml: New, based on
version from #1425487.
* modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
* modules/pam_succeed_if/Makefile.am: Include XML rules.
* modules/pam_succeed_if/README.xml: New.
* modules/pam_succeed_if/README: Regenerated from xml.
* modules/pam_succeed_if/pam_succeed_if.c: Fix comment about
return values.
* modules/pam_lastlog/pam_lastlog.c (last_login_read): Mark strftime
format string for translation to allow reorder [#1428269].
* po/*.po: Update with last pam_lastlog change.
Thorsten Kukuk [Tue, 7 Feb 2006 07:51:13 +0000 (07:51 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Check for text browser.
* Make.xml.rules: Add rule to generate README from README.xml.
* modules/pam_access/Makefile.am: Include Make.xml.rules.
* modules/pam_access/README: Regenerated from README.xml.
* modules/pam_access/README.xml: New.
* modules/pam_access/access.conf: Extended by new examples.
* modules/pam_access/access.conf.5: New, generated from xml file.
* modules/pam_access/access.conf.5.xml: New.
* modules/pam_access/pam_access.8: New, generated from xml file.
* modules/pam_access/pam_access.8.xml: New.
* modules/pam_access/pam_access.c: Add rules for IPv6 and
netmasks.
Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>.
* modules/pam_deny/Makefile.am: Include Make.xml.rules.
* modules/pam_deny/pam_deny.8.xml: New.
* modules/pam_deny/pam_deny.8: New, generated from xml file.
* modules/pam_deny/README.xml: New.
* modules/pam_deny/README: Regenerated from xml file.
* modules/pam_cracklib/Makefile.am: Include Make.xml.rules.
* modules/pam_cracklib/pam_cracklib.8.xml: New.
* modules/pam_cracklib/pam_cracklib.8: New, generated from xml file.
* modules/pam_cracklib/README.xml: New.
* modules/pam_cracklib/README: Regenerated from xml file.
* modules/pam_exec/Makefile.am: Add rule to generate README.
* modules/pam_exec/README: Regenerated from xml file.
* modules/pam_exec/pam_exec.8: Regenerated from xml file.
* modules/pam_exec/pam_exec.8.xml: Syntax files.
Thorsten Kukuk [Tue, 24 Jan 2006 23:28:31 +0000 (23:28 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
Add framework for manpages in xml source
Fix --enable-static-modules
2006-01-24 Thorsten Kukuk <kukuk@thkukuk.de>
* libpam/pam_static_modules.h: New.
* Makefile.am: Reorder subdirectories for static modules.
* configure.in: Add --enable-static-modules option.
* libpam/Makefile.am: Define WITH_SELINUX and WITH_PWDB if
necessary, add pam_static_modules.h, link against all PAM
module object files if STATIC_MODULES is defined.
* libpam/pam_static.c: Remove old _static_module* includes,
include pam_static_modules.h.
* configure.in: Add checks for xsltproc, xmllint and docbook
xsl stylesheet.
* m4/jh_path_xml_catalog.m4: New.
Thorsten Kukuk [Sun, 22 Jan 2006 07:36:54 +0000 (07:36 +0000)]
Relevant BUGIDs: none
Purpose of commit: bugfix
Commit summary:
---------------
Fix compiling of static version of shared libpam, libpamc and libpam_misc
libraries without assuming "--enable-static-modules do not make the modules
dynamically loadable".
2006-01-22 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Don't define PAM_DYNAMIC.
* libpam/pam_handlers.c: Get ride of PAM_DYNAMIC, don't
include pam_dynamic.h
* libpam/pam_dynamic.c: Don't include pam_dynamic.h,
exclude functions if we compile with PAM_STATIC.
* libpam/pam_dynamic.h: Remove.
* libpam/pam_private.h: Add function prototypes from pam_dynamic.h.
* libpam/Makefile.am: Bump version number of libpam, remove
pam_dynamic.h.
Thorsten Kukuk [Thu, 12 Jan 2006 15:34:49 +0000 (15:34 +0000)]
Relevant BUGIDs: none
Purpose of commit: new feature
Commit summary:
---------------
2006-01-12 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Add check for -fpie/-pie
* modules/pam_filter/upperLOWER/Makefile.am: Compile/link
upperLOWER with -fpie/-pie if supported.
* modules/pam_unix/Makefile.am: Compile/link unix_chkpwd
with -fpie/-pie if supported.
Thorsten Kukuk [Thu, 5 Jan 2006 13:00:28 +0000 (13:00 +0000)]
Relevant BUGIDs: none
Purpose of commit: bugfix
Commit summary:
---------------
item of pam_get_item() is allowed to be NULL and the behavior is
documented, so we have to allow it.
2006-01-05 Thorsten Kukuk <kukuk@thkukuk.de>
* libpam/include/security/_pam_types.h: Remove nonnull attribute
from third paramter (item) of pam_get_item.
* libpam/Makefile.am: Bump version number of shared library.
Dmitry V. Levin [Mon, 12 Dec 2005 14:45:00 +0000 (14:45 +0000)]
Relevant BUGIDs: none
Purpose of commit: cleanup
Commit summary:
---------------
2005-12-12 Dmitry V. Levin <ldv@altlinux.org>
Cleanup pam_syslog messages.
* modules/pam_env/pam_env.c (_expand_arg): Fix compiler warning.
* modules/pam_filter/pam_filter.c (set_filter): Append %m
specifier to pam_syslog messages where appropriate.
* modules/pam_group/pam_group.c (read_field): Likewise.
* modules/pam_mkhomedir/pam_mkhomedir.c (make_remark): Remove.
(create_homedir): Do not use make_remark() wrapper, call
pam_info() directly. Call pam_syslog() right after failed
operation and append %m specifier to pam_syslog messages where
appropriate.
* modules/pam_rhosts/pam_rhosts_auth.c (pam_iruserok): Replace
sequence of malloc(), strcpy() and strcat() calls with asprintf().
Append %m specifier to pam_syslog messages where appropriate.
* modules/pam_securetty/pam_securetty.c (securetty_perform_check):
Append %m specifier to pam_syslog messages where appropriate.
* modules/pam_shells/pam_shells.c (perform_check): Likewise.
Thorsten Kukuk [Fri, 18 Nov 2005 08:57:01 +0000 (08:57 +0000)]
Relevant BUGIDs: 534205
Purpose of commit: new feature
Commit summary:
---------------
2005-11-16 Thorsten Kukuk <kukuk@thkukuk.de>
* libpam/pam_handlers.c: Replace code for all dlopen variants with
a generic wrapper.
* libpam/pam_dynamic.c: Implement generic wrapper for dlopen.
* libpam/pam_dynamic.h: Provide prototypes.
For Mac OS X support [#534205]
Steve Langasek [Sun, 6 Nov 2005 12:50:43 +0000 (12:50 +0000)]
Relevant BUGIDs: Debian bugs #330458, #330852
Purpose of commit: bugfix
Commit summary:
---------------
don't treat a missing /etc/environment as a fatal error when attempting
to read it, and try to read this file by default; this restores the
behavior from Linux-PAM 0.76.
Tomas Mraz [Wed, 26 Oct 2005 19:05:32 +0000 (19:05 +0000)]
Relevant BUGIDs: Red Hat bz 168180
Purpose of commit: bugfix
Commit summary:
---------------
2005-10-26 Tomas Mraz <t8m@centrum.cz>
* modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary),
modules/pam_unix/pam_unix_passwd.c (_unix_run_shadow_binary),
modules/pam_unix/support.c (_unix_run_shadow_binary_): Set real
uid to 0 before executing the helper if SELinux is enabled.
* modules/pam_unix/unix_chkpwd.c (main): Disable user check only
if real uid is 0 (CVE-2005-2977). Log failed password check attempt.
Tomas Mraz [Thu, 20 Oct 2005 17:01:06 +0000 (17:01 +0000)]
Relevant BUGIDs: Red Hat bz 171164
Purpose of commit: new feature
Commit summary:
---------------
2005-10-20 Tomas Mraz <t8m@centrum.cz>
* configure.in: Added check for xauth binary and --with-xauth option.
* config.h.in: Added configurable PAM_PATH_XAUTH.
* modules/pam_xauth/README,
modules/pam_xauth/pam_xauth.8: Document where xauth is looked for.
* modules/pam_xauth/pam_xauth.c (pam_sm_open_session): Implement
searching xauth binary on multiple places.
(run_coprocess): Don't use execvp as it can be a security risk.