]>
granicus.if.org Git - linux-pam/log
Dmitry V. Levin [Tue, 19 Oct 2010 23:33:02 +0000 (23:33 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
2010-10-19 Dmitry V. Levin <ldv@altlinux.org>
* modules/pam_selinux/pam_selinux.c (verbose_message): Remove.
(pam_sm_open_session): Call send_text() instead of verbose_message().
Dmitry V. Levin [Tue, 19 Oct 2010 16:48:32 +0000 (16:48 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2010-10-19 Dmitry V. Levin <ldv@altlinux.org>
* m4/ld-no-undefined.m4: New file.
* configure.in: Use PAM_LD_NO_UNDEFINED.
* Makefile.am (M4_FILES): Add m4/ld-no-undefined.m4.
Dmitry V. Levin [Tue, 19 Oct 2010 16:41:20 +0000 (16:41 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-10-19 Dmitry V. Levin <ldv@altlinux.org>
* m4/ld-O1.m4 (PAM_LD_O1): Fix typo.
Dmitry V. Levin [Tue, 19 Oct 2010 16:36:35 +0000 (16:36 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-10-19 Dmitry V. Levin <ldv@altlinux.org>
* modules/pam_selinux/Makefile.am (pam_selinux_la_LIBADD): Add
@LIBAUDIT@.
Thorsten Kukuk [Tue, 19 Oct 2010 15:24:34 +0000 (15:24 +0000)]
Relevant BUGIDs:
Purpose of commit: documentation
Commit summary:
---------------
2010-10-19 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_env/pam_env.8.xml: Document side effects of
environment variables in the stack.
* modules/pam_exec/pam_exec.8.xml: Document that user can
have controll over the environment.
Steve Langasek [Mon, 11 Oct 2010 19:33:44 +0000 (19:33 +0000)]
revert preceding patch; under discussion, no consensus
Tomas Mraz [Mon, 11 Oct 2010 14:24:30 +0000 (14:24 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-10-11 Tomas Mraz <t8m@centrum.cz>
* modules/pam_env/pam_env.c: Change default for user_readenv to 0.
* modules/pam_env/pam_env.8.xml: Document the new default for user_readenv.
Dmitry V. Levin [Fri, 8 Oct 2010 11:53:38 +0000 (11:53 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-10-07 Dmitry V. Levin <ldv@altlinux.org>
* modules/pam_selinux/pam_selinux.c (verbose_message): Fix format
string.
Dmitry V. Levin [Sun, 3 Oct 2010 21:00:53 +0000 (21:00 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-10-04 Dmitry V. Levin <ldv@altlinux.org>
* libpam/pam_modutil_priv.c: New file.
* libpam/Makefile.am (libpam_la_SOURCES): Add it.
* libpam/include/security/pam_modutil.h (struct pam_modutil_privs,
PAM_MODUTIL_DEF_PRIVS, pam_modutil_drop_priv,
pam_modutil_regain_priv): New declarations.
* libpam/libpam.map (LIBPAM_MODUTIL_1.1.3): New interface.
* modules/pam_env/pam_env.c (handle_env): Use new pam_modutil interface.
* modules/pam_mail/pam_mail.c (_do_mail): Likewise.
* modules/pam_xauth/pam_xauth.c (check_acl, pam_sm_open_session,
pam_sm_close_session): Likewise.
(pam_sm_open_session): Remove redundant fchown call.
Fixes CVE-2010-3430, CVE-2010-3431.
Thorsten Kukuk [Fri, 1 Oct 2010 11:05:45 +0000 (11:05 +0000)]
Relevant BUGIDs: #
3078936
Purpose of commit: bugfix
Commit summary:
---------------
2010-10-01 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Extend cross compiling check.
* doc/specs/Makefile.am: Set CFLAGS and LDFLAGS to BUILD_CFLAGS
and BUILD_LDFLAGS.
Bug #
3078936 / gentoo #339174
Thorsten Kukuk [Thu, 30 Sep 2010 13:47:14 +0000 (13:47 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
2010-09-30 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Warn if
unlink() fails.
Dmitry V. Levin [Tue, 28 Sep 2010 17:19:42 +0000 (17:19 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-09-27 Dmitry V. Levin <ldv@altlinux.org>
* modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Return
PAM_SUCCESS immediately if no cookie file is defined. Return
PAM_SESSION_ERR if cookie file is defined but target uid cannot be
determined. Do not modify cookiefile string returned by pam_get_data.
Dmitry V. Levin [Tue, 28 Sep 2010 17:11:36 +0000 (17:11 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-09-27 Dmitry V. Levin <ldv@altlinux.org>
* modules/pam_xauth/pam_xauth.c (check_acl): Check that the given
access control file is a regular file.
Dmitry V. Levin [Mon, 20 Sep 2010 20:16:30 +0000 (20:16 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
2010-09-16 Dmitry V. Levin <ldv@altlinux.org>
* modules/pam_env/pam_env.c (handle_env): Use setfsuid() return code.
* modules/pam_mail/pam_mail.c (_do_mail): Likewise.
* modules/pam_xauth/pam_xauth.c (check_acl, pam_sm_open_session,
pam_sm_close_session): Likewise.
Thorsten Kukuk [Tue, 31 Aug 2010 11:20:59 +0000 (11:20 +0000)]
Relevant BUGIDs:
Purpose of commit: new release
Commit summary:
---------------
2010-08-31 Thorsten Kukuk <kukuk@thkukuk.de>
* release version 1.1.2
* configure.in: Bump version number.
* NEWS: Document changes since 1.1.1.
* doc/adg/Linux-PAM_ADG.xml: Bump version number.
* doc/mwg/Linux-PAM_MWG.xml: Likewise.
* doc/sag/Linux-PAM_SAG.xml: Likewise.
* libpam/Makefile.am: Bump revision of shared library.
* po/*.po: Regenerate.
Tomas Mraz [Thu, 26 Aug 2010 19:16:18 +0000 (19:16 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2010-08-26 Tomas Mraz <t8m@centrum.cz>
* modules/pam_nologin/pam_nologin.c (perform_check): Try first
/var/run/nologin if the nologin file is not explicitly specified.
* modules/pam_nologin/pam_nologin.8.xml: Document that /var/run/nologin
is tried first.
Tomas Mraz [Thu, 26 Aug 2010 19:11:51 +0000 (19:11 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2010-08-26 Sweta Kothari <swkothar@redhat.com>
* po/gu.po: Updated translations.
2010-08-26 Geert Warrink <geert.warrink@onsnet.nu>
* po/nl.po: Updated translations.
Thorsten Kukuk [Thu, 26 Aug 2010 13:49:33 +0000 (13:49 +0000)]
Relevant BUGIDs: #
2315432 , debian#284854#42.
Purpose of commit: bugfix
Commit summary:
---------------
2010-08-26 Thorsten Kukuk <kukuk@thkukuk.de>
* doc/specs/Makefile.am: Use CC_FOR_BUILD as compiler (cross
compile support).
* configure.in: Check for host compiler if cross compiling.
Bug #
2315432 , debian#284854#42.
Thorsten Kukuk [Tue, 17 Aug 2010 11:15:32 +0000 (11:15 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2010-08-17 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/pam_unix_passwd.c: Implement minlen option.
* modules/pam_unix/support.c: Likewise.
* modules/pam_unix/support.h: Likewise.
* modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Adjust
arguments for _set_ctrl call.
* modules/pam_unix/pam_unix_auth.c (pam_sm_authenticate): Likewise.
* modules/pam_unix/pam_unix_session.c: Likewise.
* modules/pam_unix/pam_unix.8.xml: Document minlen option.
Based on patch by Steve Langasek.
Thorsten Kukuk [Fri, 13 Aug 2010 08:59:53 +0000 (08:59 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-08-12 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_mail/pam_mail.c: Check for mail only with user
privilegs.
* modules/pam_xauth/pam_xauth.c (run_coprocess): Check return
value of setgid, setgroups and setuid.
* modules/pam_xauth/pam_xauth.c (check_acl): Save errno for
later usage.
* modules/pam_env/pam_env.c (handle_env): Check if user exists,
read local user config only with user privilegs.`
Thorsten Kukuk [Mon, 9 Aug 2010 15:36:48 +0000 (15:36 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix/cleanup
Commit summary:
---------------
2010-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_tally/pam_tally.8.xml: Document that pam_tally is
deprecated.
* modules/pam_tty_audit/Makefile.am (EXTRA_DIST): Fix make dist.
Thorsten Kukuk [Mon, 9 Aug 2010 14:16:25 +0000 (14:16 +0000)]
Relevant BUGIDs:
2923437
Purpose of commit: bugfix
Commit summary:
---------------
2010-08-09 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/passverify.c (check_shadow_expiry): Correct
check for expired date.
* modules/pam_unix/pam_unix_passwd.c (_pam_unix_approve_pass): Remove
check for password length. Bug #
2923437 .
Thorsten Kukuk [Wed, 4 Aug 2010 14:51:45 +0000 (14:51 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-08-04 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_tally2/pam_tally2.c (get_tally): Create file
with correct permissions. Patch by Diego Elio "Flameeyes" Pettenò.
Thorsten Kukuk [Wed, 4 Aug 2010 13:54:02 +0000 (13:54 +0000)]
Relevant BUGIDs:
2730965
Purpose of commit: workaround
Commit summary:
---------------
2010-08-04 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/passverify.c (PAMH_ARG_DECL): Don't request
password change if time is not yet set (1.1.1970). Bug #
2730965 .
Thorsten Kukuk [Wed, 4 Aug 2010 13:00:59 +0000 (13:00 +0000)]
Relevant BUGIDs: #
3035919 , #
3002340 , #
3037155
Purpose of commit: bugfix
Commit summary:
---------------
2010-08-04 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_access/pam_access.c (user_match): Make sure
that user@host will not match @@netgroup. Bug #
3035919 .
* modules/pam_group/pam_group.c (check_account): Add '%' for
UNIX groups.
* modules/pam_group/group.conf: Add example for '%'.
* modules/pam_group/group.conf.5.xml: Document '%' syntax.
Bug #
3002340 , #
3037155 .
Steve Langasek [Mon, 2 Aug 2010 13:59:02 +0000 (13:59 +0000)]
Relevant BUGIDs: Debian bug #582362
Purpose of commit: bugfix
Commit summary:
---------------
Don't pass --version-script options when linking executables, only when
linking libraries
Patch from Julien Cristau <jcristau@debian.org>
Thorsten Kukuk [Mon, 12 Jul 2010 14:47:11 +0000 (14:47 +0000)]
Relevant BUGIDs:
2917257
Purpose of commit: enhancement
Commit summary:
---------------
2010-07-12 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate): Add
audit flag to enable logging about unknown user (#
2917257 ).
* modules/pam_succeed_if/pam_succeed_if.8.xml: Document audit.
* modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml.
* modules/pam_succeed_if/README: Regenerated from xml.
Thorsten Kukuk [Tue, 22 Jun 2010 16:26:28 +0000 (16:26 +0000)]
Relevant BUGIDs:
3004656
Purpose of commit: bugfix
Commit summary:
---------------
2010-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_umask/pam_umask.8.xml: Remove comparisation of
gid and uid for usergroups.
* modules/pam_umask/pam_umask.c (setup_limits_from_gecos): Likewise.
Bug #
3004656
Thorsten Kukuk [Tue, 22 Jun 2010 14:57:44 +0000 (14:57 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-06-22 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Don't check for libxcrypt if no xcrypt.h exists,
fix typo introduced with 1.1.1.
Reported by Diego Elio "Flameeyes" Pettenò.
Thorsten Kukuk [Tue, 15 Jun 2010 14:27:13 +0000 (14:27 +0000)]
Relevant BUGIDs:
3010705
Purpose of commit: bugfix
Commit summary:
---------------
2010-06-15 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Call
setfsuid to be allowed to remove temporary files (#
3010705 ).
(pam_sm_open_session): Call fchown with correct permissions.
Thorsten Kukuk [Wed, 9 Jun 2010 08:58:06 +0000 (08:58 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Add test case for unresolved symbols
2010-06-09 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_tty_audit/Makefile.am (TESTS): Add tst-pam_tty_audit.
* modules/pam_tty_audit/tst-pam_tty_audit: New.
Commit summary:
---------------
Steve Langasek [Mon, 7 Jun 2010 19:30:34 +0000 (19:30 +0000)]
Relevant BUGIDs: Ubuntu bug #588547
Purpose of commit: bugfix
Commit summary:
---------------
2010-06-07 Steve Langasek <vorlon@debian.org>
* modules/pam_tty_audit/Makefile.am: If we don't have the libraries
required for building pam_tty_audit, we shouldn't install the manpage
either.
Thorsten Kukuk [Thu, 27 May 2010 12:49:22 +0000 (12:49 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-05-27 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_userdb/pam_userdb.c: Define HAVE_DBM
for BerkDB 5.0 support. Patch by Diego Elio Pettenò.
Thorsten Kukuk [Wed, 5 May 2010 08:05:04 +0000 (08:05 +0000)]
Relevant BUGIDs:
Purpose of commit: docu fix
Commit summary:
---------------
2010-04-15 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_exec/pam_exec.8.xml: Fix example.
Thorsten Kukuk [Wed, 14 Apr 2010 10:22:10 +0000 (10:22 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-04-13 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_pwhistory/opasswd.c: Fix compilation if
cyprt_r() is not available.
* configure.in: check for getutent_r.
* modules/pam_timestamp/pam_timestamp.c: Use getutent()
if getutent_r() does not exist.
Patch from Diego Elio "Flameeyes" Pettenò.
Thorsten Kukuk [Mon, 12 Apr 2010 13:55:21 +0000 (13:55 +0000)]
Relevant BUGIDs:
Purpose of commit: enhancement
Commit summary:
---------------
2010-04-12 Thorsten Kukuk <kukuk@thkukuk.de>
* doc/man/pam.conf-syntax.xml: Better documentation of
"actionN". Patch from Michal Soltys <soltys@ziu.info>.
Thorsten Kukuk [Tue, 6 Apr 2010 08:07:11 +0000 (08:07 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2010-04-06 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_rootok/pam_rootok.c: Add support for acct_mgmt
and chauthtok.
* modules/pam_rootok/pam_rootok.8.xml: Document new module
types.
Thorsten Kukuk [Mon, 29 Mar 2010 14:43:40 +0000 (14:43 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
po/ar.po: Add missing Plural-Forms entry to header.
Tomas Mraz [Thu, 25 Mar 2010 20:08:42 +0000 (20:08 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2010-03-25 Daniel Nylander <po@danielnylander.se>
* po/sv.po: Updated translations.
Tomas Mraz [Wed, 24 Mar 2010 13:57:50 +0000 (13:57 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2010-03-24 Ani Peter <anipeter@fedoraproject.org>
* po/ml.po: Updated translations.
Tomas Mraz [Mon, 8 Mar 2010 07:29:39 +0000 (07:29 +0000)]
Relevant BUGIDs:
Purpose of commit: translations
Commit summary:
---------------
2010-03-08 Yuri Chornoivan <yurchor@ukr.net>
* po/uk.po: Updated translations.
Tomas Mraz [Tue, 9 Feb 2010 15:08:59 +0000 (15:08 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2010-02-09 Tomas Mraz <t8m@centrum.cz>
* libpam/pam_get_authtok.c (pam_get_authtok_internal): Fix
regression in the new password prompt.
Tomas Mraz [Mon, 4 Jan 2010 17:00:33 +0000 (17:00 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2010-01-04 Elad <el.il@doom.co.il>
* po/he.po: New translation to Hebrew.
* po/LINGUAS: Add Hebrew to the list.
Thorsten Kukuk [Wed, 16 Dec 2009 13:17:13 +0000 (13:17 +0000)]
Relevant BUGIDs:
Purpose of commit: release
Commit summary:
---------------
2009-12-16 Thorsten Kukuk <kukuk@suse.de>
* release version 1.1.1
* NEWS: Adjust for 1.1.1
* configure.in: Likewise.
* doc/adg/Linux-PAM_ADG.xml: Likewise.
* doc/mwg/Linux-PAM_MWG.xml: Likewise.
* doc/sag/Linux-PAM_SAG.xml: Likewise.
* po/*.po: Regenerated.
Thorsten Kukuk [Tue, 8 Dec 2009 14:41:40 +0000 (14:41 +0000)]
Relevant BUGIDs:
2892529
Purpose of commit: bugfix
Commit summary:
---------------
2009-12-08 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Rename DEBUG to PAM_DEBUG.
* libpam/pam_env.c: Likewise
* libpam/pam_handlers.c: Likewise
* libpam/pam_miscc.c: Likewise
* libpam/pam_password.c: Likewise
* libpam/include/security/_pam_macros.h: Likewise
* libpamc/test/modules/pam_secret.c: Likewise
* modules/pam_group/pam_group.c: Likewise
* modules/pam_listfile/pam_listfile.c: Likewise
* modules/pam_unix/pam_unix_auth.c: Likewise
* modules/pam_unix/pam_unix_passwd.c: Likewise
Tomas Mraz [Tue, 8 Dec 2009 09:15:51 +0000 (09:15 +0000)]
Relevant BUGIDs: rhbz#545053
Purpose of commit: new feature
Commit summary:
---------------
2009-12-08 Tomas Mraz <t8m@centrum.cz>
* modules/pam_unix/passverify.c(unix_update_shadow): Create a shadow
entry if not present in the file.
Tomas Mraz [Tue, 8 Dec 2009 09:06:46 +0000 (09:06 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
2009-12-08 Tomas Mraz <t8m@centrum.cz>
* modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Remove
unused function and variable.
Tomas Mraz [Thu, 19 Nov 2009 10:43:23 +0000 (10:43 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-11-19 Tomas Mraz <t8m@centrum.cz>
* modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return
PAM_AUTH_ERR from the module if sepermit_lock() fails.
Tomas Mraz [Wed, 18 Nov 2009 16:06:53 +0000 (16:06 +0000)]
Relevant BUGIDs:
2892189
Purpose of commit: bugfix
Commit summary:
---------------
2009-11-18 Tomas Mraz <t8m@centrum.cz>
* modules/pam_access/pam_access.c(user_match): Revert the netgroup
match to the original behavior, add new syntax for adding the local
hostname.
* modules/pam_access/access.conf.5.xml: Document the new syntax
for adding the local hostname to the netgroup match.
Thorsten Kukuk [Tue, 10 Nov 2009 15:52:20 +0000 (15:52 +0000)]
Relevant BUGIDs:
Purpose of commit: regression fix
Commit summary:
---------------
2009-11-10 Thorsten Kukuk <kukuk@suse.de>
* doc/man/pam_get_authtok.3.xml: Document pam_get_authtok_noverify
and pam_get_authtok_verify.
* libpam/Makefile.am (libpam_la_LDFLAGS): Bump revesion of libpam.
* libpam/pam_get_authtok.c (pam_get_authtok_internal): Renamed
from pam_get_authtok, add flags argument, always check return
values.
* modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Use
pam_get_authtok_noverify and pam_get_authtok_verify.
* libpam/include/security/pam_ext.h: Add prototypes for
pam_get_authtok_noverify and pam_get_authtok_verify.
* libpam/libpam.map: Add new pam_get_authtok_* functions.
Thorsten Kukuk [Wed, 4 Nov 2009 14:07:44 +0000 (14:07 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
Add new manual page.
Tomas Mraz [Mon, 2 Nov 2009 16:12:56 +0000 (16:12 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-11-02 Ani Peter <anipeter@fedoraproject.org>
* po/ml.po: Updated translations.
Tomas Mraz [Mon, 2 Nov 2009 16:09:07 +0000 (16:09 +0000)]
Relevant BUGIDs:
Purpose of commit: new feature
Commit summary:
---------------
2009-11-02 Tomas Mraz <t8m@centrum.cz>
* modules/pam_sepermit/Makefile.am: Add sepermit.conf(5) manual page.
* modules/pam_sepermit/pam_sepermit.8.xml: Add reference to
sepermit.conf(5). Drop some redundant text.
* modules/pam_sepermit/sepermit.conf.5.xml: New file.
* modules/pam_sepermit/pam_sepermit.c(sepermit_match): Implement the ignore
option in sepermit.conf.
Tomas Mraz [Thu, 29 Oct 2009 15:26:50 +0000 (15:26 +0000)]
Relevant BUGIDs: rhbz#531530
Purpose of commit: bugfix
Commit summary:
---------------
2009-10-29 Tomas Mraz <t8m@centrum.cz>
* modules/pam_xauth/Makefile.am: Link with libselinux.
* modules/pam_xauth/pam_xauth.c(pam_sm_open_session): Call
setfscreatecon() if selinux is enabled to create the .xauth file
with the right label. Original idea by Dan Walsh.
Tomas Mraz [Thu, 8 Oct 2009 15:19:41 +0000 (15:19 +0000)]
Relevant BUGIDs:
Purpose of commit: documentation
Commit summary:
---------------
2009-10-08 Tomas Mraz <t8m@centrum.cz>
* modules/pam_tty_audit/pam_tty_audit.8.xml: Add notice about aureport
add SEE ALSO section.
Tomas Mraz [Tue, 6 Oct 2009 12:26:05 +0000 (12:26 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-10-06 Tomas Mraz <t8m@centrum.cz>
* modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Just
call pam_modutil_user_in_group_nam_nam() instead of reimplementation
of group matching.
Tomas Mraz [Mon, 5 Oct 2009 06:57:53 +0000 (06:57 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-10-05 Kris Thomsen <lakristho@gmail.com>
* po/da.po: Updated translations.
Tomas Mraz [Tue, 29 Sep 2009 10:58:33 +0000 (10:58 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-09-29 Piotr Drąg <piotrdrag@gmail.com>
* po/pl.po: Updated translations.
Tomas Mraz [Mon, 21 Sep 2009 07:11:16 +0000 (07:11 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-09-21 Yulia Poyarkova <yulia.poyarkova@redhat.com>
* po/ru.po: Updated translations.
Tomas Mraz [Thu, 17 Sep 2009 08:11:11 +0000 (08:11 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-09-17 Kiyoto Hashida <khashida@redhat.com>
* po/ja.po: Updated translations.
Tomas Mraz [Thu, 17 Sep 2009 08:08:48 +0000 (08:08 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-09-18 Eunju Kim <eukim@redhat.com>
* po/ko.po: Updated translations.
Tomas Mraz [Thu, 17 Sep 2009 08:04:14 +0000 (08:04 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-09-17 Yulia Poyarkova <yulia.poyarkova@redhat.com>
* po/ru.po: Updated translations.
Steve Langasek [Thu, 10 Sep 2009 10:19:57 +0000 (10:19 +0000)]
Relevant BUGIDs: Debian bug #537848
Purpose of commit: bugfix
Commit summary:
---------------
2009-09-10 Steve Langasek <vorlon@debian.org>
* modules/pam_securetty/pam_securetty.c: pam_securetty should not
return PAM_USER_UNKNOWN when the tty is secure, regardless of what
was entered as a username.
Patch from Nicolas François <nicolas.francois@centraliens.net>.
Steve Langasek [Mon, 31 Aug 2009 22:09:44 +0000 (22:09 +0000)]
Relevant BUGIDs: Debian bug #518908
Purpose of commit: portability
Commit summary:
---------------
2009-08-31 Steve Langasek <vorlon@debian.org>
* modules/pam_namespace/namespace.init: make this portable to POSIX
awk, instead of using GNU awk extensions.
Steve Langasek [Tue, 25 Aug 2009 07:54:15 +0000 (07:54 +0000)]
Relevant BUGIDs: Debian bug #470096
Purpose of commit: bugfix
Commit summary:
---------------
2009-08-25 Steve Langasek <vorlon@debian.org>
* po/es.po: fix missing whitespace in password prompts.
Steve Langasek [Tue, 25 Aug 2009 07:32:55 +0000 (07:32 +0000)]
Relevant BUGIDs: Debian bug #470137
Purpose of commit: bugfix
Commit summary:
---------------
2009-08-25 Steve Langasek <vorlon@debian.org>
* modules/pam_sepermit/pam_sepermit.8.xml: fix up one reference
to pam.d(8) left behind because I've forgotten how CVS works
Steve Langasek [Mon, 24 Aug 2009 21:26:18 +0000 (21:26 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
sesseion -> session
Steve Langasek [Mon, 24 Aug 2009 07:48:26 +0000 (07:48 +0000)]
Relevant BUGIDs:
Purpose of commit: grammar fixes
Commit summary:
---------------
"successful" -> "successfully"; "them self" -> "themself" - the use of
"themself" as a gender-indeterminate reflexive pronoun in English is
disputed and somewhat awkward, but "them self" is 100% wrong.
Thorsten Kukuk [Tue, 21 Jul 2009 13:59:24 +0000 (13:59 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-07-21 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Delete
new token if it does not match strength criteria.
Thorsten Kukuk [Tue, 30 Jun 2009 10:28:53 +0000 (10:28 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
This makes Linux-PAM compile able with uClibc or on embedded systems
without full libc/libnsl.
2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/yppasswd_xdr.c: Remove unnecessary header files.
* modules/pam_unix/support.c (_unix_getpwnam): Only compile in NIS
support if all necessary functions exist.
* modules/pam_unix/pam_unix_passwd.c (getNISserver): Add debug
option, handle correct if OS has no NIS support.
* modules/pam_access/pam_access.c (netgroup_match): Check if
yp_get_default_domain and innetgr are available at compile time.
* configure.in: Check for functions: innetgr, getdomainname
check for headers: rpcsvc/ypclnt.h, rpcsvc/yp_prot.h.
Thorsten Kukuk [Mon, 29 Jun 2009 08:15:00 +0000 (08:15 +0000)]
Relevant BUGIDs:
Purpose of commit: docu fix
Commit summary:
---------------
2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/pam_unix.8.xml: Fix blowfish description.
Reported by Diego E. “Flameeyes” Pettenò.
Thorsten Kukuk [Sun, 28 Jun 2009 09:27:00 +0000 (09:27 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_namespace/Makefile.am: Fix make maintainer-clean,
fix docu dependencies.
* modules/pam_xauth/Makefile.am: Fix make maintainer-clean.
* modules/pam_access/Makefile.am: Likewise.
* modules/pam_debug/Makefile.am: Likewise.
* modules/pam_deny/Makefile.am: Likewise.
* modules/pam_echo/Makefile.am: Likewise.
* modules/pam_env/Makefile.am: Likewise.
* modules/pam_faildelay/Makefile.am: Likewise.
* modules/pam_ftp/Makefile.am: Likewise.
* modules/pam_group/Makefile.am: Likewise.
* modules/pam_issue/Makefile.am: Likewise.
* modules/pam_keyinit/Makefile.am: Likewise.
* modules/pam_lastlog/Makefile.am: Likewise.
* modules/pam_limits/Makefile.am: Likewise.
* modules/pam_listfile/Makefile.am: Likewise.
* modules/pam_localuser/Makefile.am: Likewise.
* modules/pam_loginuid/Makefile.am: Likewise.
* modules/pam_mail/Makefile.am: Likewise.
* modules/pam_mkhomedir/Makefile.am: Likewise.
* modules/pam_motd/Makefile.am: Likewise.
* modules/pam_nologin/Makefile.am: Likewise.
* modules/pam_pwhistory/Makefile.am: Likewise.
* modules/pam_rhosts/Makefile.am: Likewise.
* modules/pam_rootok/Makefile.am: Likewise.
* modules/pam_securetty/Makefile.am: Likewise.
* modules/pam_shells/Makefile.am: Likewise.
* modules/pam_succeed_if/Makefile.am: Likewise.
* modules/pam_tally2/Makefile.am: Likewise.
* modules/pam_tally/Makefile.am: Likewise.
* modules/pam_time/Makefile.am: Likewise.
* modules/pam_timestamp/Makefile.am: Likewise.
* modules/pam_tty_audit/Makefile.am: Likewise.
* modules/pam_umask/Makefile.am: Likewise.
* modules/pam_unix/Makefile.am: Likewise.
* modules/pam_warn/Makefile.am: Likewise.
* modules/pam_wheel/Makefile.am: Likewise.
* modules/pam_filter/Makefile.am: Likewise.
* configure.in: Make regeneration of docu configureable,
rename enable_man to enable_docu.
* modules/pam_env/pam_env.c (_pam_parse): Fix typo in debug
code.
* modules/pam_cracklib/Makefile.am: Don't install docu if
module is disabled for building.
* modules/pam_userdb/Makefile.am: Likewise.
Thorsten Kukuk [Fri, 26 Jun 2009 12:23:28 +0000 (12:23 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/pam_unix_passwd.c: Remove dead SELinux
code.
Thorsten Kukuk [Fri, 26 Jun 2009 12:07:11 +0000 (12:07 +0000)]
Relevant BUGIDs:
2809661
Purpose of commit: bugfix
Commit summary:
---------------
Fix compiling with --disable-nls:
2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_lastlog/pam_lastlog.c (last_login_failed): Fix
usage of wrong variable [bug#
2809661 ].
Thorsten Kukuk [Fri, 26 Jun 2009 09:55:25 +0000 (09:55 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
Fix blowfish support
009-06-25 Thorsten Kukuk <kukuk@thkukuk.de>
* configure.in: Rename crypt_gensalt_rn to crypt_gensalt_r
* modules/pam_unix/passverify.c: Likewise.
Thorsten Kukuk [Fri, 19 Jun 2009 14:45:29 +0000 (14:45 +0000)]
Relevant BUGIDs:
Purpose of commit: release
Commit summary:
---------------
2009-06-19 Thorsten Kukuk <kukuk@thkukuk.de>
* release version 1.1.0
Thorsten Kukuk [Tue, 16 Jun 2009 08:46:31 +0000 (08:46 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
Adjust date.
Thorsten Kukuk [Tue, 16 Jun 2009 08:32:40 +0000 (08:32 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-06-16 Thorsten Kukuk <kukuk@thkukuk.de>
* doc/sag/Linux-PAM_SAG.xml: Fix typos.
* doc/adg/Linux-PAM_ADG.xml: Likewise.
* doc/mwg/Linux-PAM_MWG.xml: Likewise.
Tomas Mraz [Mon, 8 Jun 2009 07:17:30 +0000 (07:17 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-06-08 Rajesh Ranjan <rajesh672@gmail.com>
* po/hi.po: Updated translations.
Tomas Mraz [Mon, 1 Jun 2009 13:41:00 +0000 (13:41 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-06-01 Jaswinder Singh <jsingh@redhat.com>
* po/pa.po: Updated translations.
Tomas Mraz [Mon, 1 Jun 2009 07:07:35 +0000 (07:07 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-06-01 Tomáš Mráz <t8m@centrum.cz>
* modules/pam_pwhistory/opasswd.c (save_old_password): Don't
call fclose() on NULL descriptor. Found by Steve Grubb.
Tomas Mraz [Mon, 1 Jun 2009 07:03:19 +0000 (07:03 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
2009-06-01 Ville Skyttä <ville.skytta@iki.fi>
* modules/pam_limits/pam_limits.8.xml: Only *.conf
files are parsed. Spelling fixes.
* modules/pam_access/pam_access.8.xml: Spelling fixes.
* modules/pam_cracklib/pam_cracklib.8.xml: Likewise.
* modules/pam_echo/pam_echo.8.xml: Likewise.
* modules/pam_env/pam_env.8.xml: Likewise.
* modules/pam_exec/pam_exec.8.xml: Likewise.
* modules/pam_filter/pam_filter.8.xml: Likewise.
* modules/pam_ftp/pam_ftp.8.xml: Likewise.
* modules/pam_group/pam_group.8.xml: Likewise.
* modules/pam_issue/pam_issue.8.xml: Likewise.
* modules/pam_lastlog/pam_lastlog.8.xml: Likewise.
* modules/pam_listfile/pam_listfile.8.xml: Likewise.
* modules/pam_localuser/pam_localuser.8.xml: Likewise.
* modules/pam_loginuid/pam_loginuid.8.xml: Likewise.
* modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise.
* modules/pam_motd/pam_motd.8.xml: Likewise.
* modules/pam_namespace/pam_namespace.8.xml: Likewise.
* modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
* modules/pam_selinux/pam_selinux.8.xml: Likewise.
* modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise.
* modules/pam_tally/pam_tally.8.xml: Likewise.
* modules/pam_tally2/pam_tally2.8.xml: Likewise.
* modules/pam_time/pam_time.8.xml: Likewise.
* modules/pam_timestamp/pam_timestamp.8.xml: Likewise.
* modules/pam_timestamp/pam_timestamp_check.8.xml: Likewise.
* modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise.
* modules/pam_umask/pam_umask.8.xml: Likewise.
* modules/pam_unix/pam_unix.8.xml: Likewise.
* modules/pam_xauth/pam_xauth.8.xml: Likewise.
Tomas Mraz [Thu, 28 May 2009 16:33:57 +0000 (16:33 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-05-28 Jaswinder Singh <jsingh@redhat.com>
* po/pa.po: Updated translations.
Tomas Mraz [Thu, 21 May 2009 16:20:32 +0000 (16:20 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-05-21 Albert Carabasa Giribet <albertc@asic.udl.cat>
* po/ca.po: Updated translations.
Tomas Mraz [Mon, 11 May 2009 15:04:43 +0000 (15:04 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-05-11 Ani Peter <anipeter@fedoraproject.org>
* po/ml.po: Updated translations.
2009-05-11 Charles-Antoine Couret <cacouret@wanadoo.fr>
* po/fr.po: Updated translations.
Tomas Mraz [Mon, 11 May 2009 14:52:31 +0000 (14:52 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-05-11 Tomáš Mráz <t8m@centrum.cz>
* modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary): Remove
unnecessary setuid() call.
Thorsten Kukuk [Tue, 5 May 2009 16:03:08 +0000 (16:03 +0000)]
Relevant BUGIDs:
Purpose of commit:
Commit summary:
---------------
Include missing entry
Thorsten Kukuk [Tue, 5 May 2009 16:01:49 +0000 (16:01 +0000)]
Relevant BUGIDs:
Purpose of commit: beta release
Commit summary:
---------------
2009-05-05 Thorsten Kukuk <kukuk@thkukuk.de>
* release 1.0.92
* libpamc/Makefile.am (libpamc_la_LDFLAGS): Increase revesion.
* configure.in: Increase version to 1.0.92.
Tomas Mraz [Mon, 20 Apr 2009 17:27:22 +0000 (17:27 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-04-20 Mario Santagiuliana <mario@marionline.it>
* po/it.po: Updated translations.
Tomas Mraz [Fri, 17 Apr 2009 10:53:01 +0000 (10:53 +0000)]
Relevant BUGIDs:
Purpose of commit: translation
Commit summary:
---------------
2009-04-17 Fabian Affolter <fab@fedoraproject.org>
* po/de.po: Updated translations.
Tomas Mraz [Thu, 16 Apr 2009 13:54:46 +0000 (13:54 +0000)]
Relevant BUGIDs: rhbz#495941
Purpose of commit: bugfix
Commit summary:
---------------
2009-04-16 Tomáš Mráz <t8m@centrum.cz>
* modules/pam_succeed_if/pam_succeed_if.c (evaluate): Add user
parameter. Use user instead of pwd->pw_name in comparsions.
(pam_sm_authenticate): Pass the original user to evaluate().
Tomas Mraz [Tue, 14 Apr 2009 13:40:00 +0000 (13:40 +0000)]
Relevant BUGIDs:
Purpose of commit: translations
Commit summary:
---------------
2009-04-14 Amitakhya Phukan <aphukan@fedoraproject.org>
* po/as.po: Updated translations.
2009-04-14 Runa Bhattacharjee <runab@fedoraproject.org>
* po/bn_IN.po: Updated translations.
2009-04-14 Sweta Kothari <swkothar@redhat.com>
* po/gu.po: Updated translations.
2009-04-14 Sandeep Shedmake <sandeep.shedmake@gmail.com>
* po/mr.po: Updated translations.
2009-04-14 Rui Gouveia <rui.gouveia@globaltek.pt>
* po/pt.po: Updated translations.
2009-04-14 I. Felix <ifelix@redhat.com>
* po/ta.po: Updated translations.
2009-04-14 Krishna Babu K <kkrothap@redhat.com>
* po/te.po: Updated translations.
Thorsten Kukuk [Thu, 9 Apr 2009 08:09:11 +0000 (08:09 +0000)]
Relevant BUGIDs:
Purpose of commit: cleanup
Commit summary:
---------------
2009-04-09 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/yppasswd.h: Update license to GPLv2 or later
on request of Olaf Kirch (Author).
* modules/pam_unix/yppasswd_xdr.c: Likewise.
Tomas Mraz [Mon, 6 Apr 2009 15:44:09 +0000 (15:44 +0000)]
Relevant BUGIDs:
Purpose of commit: translations
Commit summary:
---------------
2009-04-06 R.E. van der Luit <nippur@fedoraproject.org>
* po/nl.po: Updated translations.
2009-04-06 Terry Chuang <tchuang@redhat.com>
* po/zh_TW.po: Updated translations.
Tomas Mraz [Fri, 3 Apr 2009 14:43:59 +0000 (14:43 +0000)]
Relevant BUGIDs:
Purpose of commit: translations
Commit summary:
---------------
2009-04-03 Shankar Prasad <svenkate@redhat.com>
* po/kn.po: Updated translations.
2009-04-03 Manoj Kumar Giri <mgiri@redhat.com>
* po/or.po: Updated translations.
2009-04-03 Miloš Komarčević <kmilos@gmail.com>
* po/sr.po: Updated translations.
* po/sr@latin.po: Updated translations.
2009-04-03 Leah Liu <lliu@redhat.com>
* po/zh_CN.po: Updated translations.
Dmitry V. Levin [Fri, 3 Apr 2009 00:36:22 +0000 (00:36 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-04-03 Dmitry V. Levin <ldv@altlinux.org>
* libpamc/pamc_load.c (__pamc_exec_agent): Replace call to exit(3)
in child process with call to _exit(2).
* modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Likewise.
* modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary):
Likewise.
* modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary):
Likewise.
* modules/pam_unix/support.c (_unix_run_helper_binary): Likewise.
* modules/pam_xauth/pam_xauth.c (run_coprocess): Likewise.
* modules/pam_exec/pam_exec.c (call_exec): Replace all calls to
exit(3) in child process with calls to _exit(2).
* modules/pam_filter/pam_filter.c (set_filter): Likewise.
* modules/pam_namespace/pam_namespace.c (inst_init,
cleanup_tmpdirs): Likewise.
Thorsten Kukuk [Fri, 27 Mar 2009 10:46:11 +0000 (10:46 +0000)]
Relevant BUGIDs:
Purpose of commit: bugfix
Commit summary:
---------------
2009-03-27 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_unix/support.c (_unix_run_helper_binary): Don't
ignore return value of write().
* libpamc/include/security/pam_client.h (PAM_BP_ASSERT): Honour
NDEBUG.
* modules/pam_timestamp/pam_timestamp.c: don't ignore return
values of lchown and fchown.
Thorsten Kukuk [Wed, 25 Mar 2009 10:54:23 +0000 (10:54 +0000)]
Relevant BUGIDs:
2487654
Purpose of commit: bugfix
Commit summary:
---------------
2009-03-25 Thorsten Kukuk <kukuk@thkukuk.de>
* modules/pam_mkhomedir/pam_mkhomedir.c: Make option handling
reentrant (#
2487654 )
(_pam_parse): Fix umask option.
* modules/pam_unix/passverify.c: Fix typo.
* modules/pam_issue/pam_issue.c: Fix compiler warning.
* modules/pam_ftp/pam_ftp.c: Likewise.
Tomas Mraz [Wed, 25 Mar 2009 08:26:20 +0000 (08:26 +0000)]
Relevant BUGIDs:
Purpose of commit: translations
Commit summary:
---------------
2009-03-25 Pavol Šimo <palo.simo@gmail.com>
* po/sk.po: Updated translations.
2009-03-24 Sulyok Péter <peti@sulyok.hu>
* po/hu.po: Updated translations.
2009-03-24 Domingo Becker <domingobecker@gmail.com>
* po/es.po: Updated translations.
2009-03-24 Diego Búrigo Zacarão <diegobz@projetofedora.org>
* po/pt_BR.po: Updated translations.
2009-03-24 Piotr Drąg <piotrdrag@gmail.com>
* po/pl.po: Updated translations.
Tomas Mraz [Tue, 24 Mar 2009 16:46:55 +0000 (16:46 +0000)]
Relevant BUGIDs:
Purpose of commit: translations
Commit summary:
---------------
2009-03-24 Tomas Mraz <t8m@centrum.cz>
* po/cs.po: Updated translations.