diff options
Diffstat (limited to 'modules/pam_warn')
-rw-r--r-- | modules/pam_warn/.cvsignore | 6 | ||||
-rw-r--r-- | modules/pam_warn/Makefile.am | 31 | ||||
-rw-r--r-- | modules/pam_warn/README | 36 | ||||
-rw-r--r-- | modules/pam_warn/README.xml | 41 | ||||
-rw-r--r-- | modules/pam_warn/pam_warn.8 | 67 | ||||
-rw-r--r-- | modules/pam_warn/pam_warn.8.xml | 104 | ||||
-rw-r--r-- | modules/pam_warn/pam_warn.c | 123 | ||||
-rwxr-xr-x | modules/pam_warn/tst-pam_warn | 2 |
8 files changed, 0 insertions, 410 deletions
diff --git a/modules/pam_warn/.cvsignore b/modules/pam_warn/.cvsignore deleted file mode 100644 index 9fb98574..00000000 --- a/modules/pam_warn/.cvsignore +++ /dev/null @@ -1,6 +0,0 @@ -*.la -*.lo -.deps -.libs -Makefile -Makefile.in diff --git a/modules/pam_warn/Makefile.am b/modules/pam_warn/Makefile.am deleted file mode 100644 index 6ecc1362..00000000 --- a/modules/pam_warn/Makefile.am +++ /dev/null @@ -1,31 +0,0 @@ -# -# Copyright (c) 2005, 2006 Thorsten Kukuk <kukuk@suse.de> -# - -CLEANFILES = *~ - -EXTRA_DIST = README $(MANS) $(XMLS) tst-pam_warn - -man_MANS = pam_warn.8 -XMLS = README.xml pam_warn.8.xml - -TESTS = tst-pam_warn - -securelibdir = $(SECUREDIR) -secureconfdir = $(SCONFIGDIR) - -AM_CFLAGS = -I$(top_srcdir)/libpam/include -I$(top_srcdir)/libpamc/include -AM_LDFLAGS = -no-undefined -avoid-version -module \ - -L$(top_builddir)/libpam -lpam -if HAVE_VERSIONING - AM_LDFLAGS += -Wl,--version-script=$(srcdir)/../modules.map -endif - -securelib_LTLIBRARIES = pam_warn.la - -if ENABLE_REGENERATE_MAN -noinst_DATA = README -README: pam_warn.8.xml --include $(top_srcdir)/Make.xml.rules -endif - diff --git a/modules/pam_warn/README b/modules/pam_warn/README deleted file mode 100644 index d9619b53..00000000 --- a/modules/pam_warn/README +++ /dev/null @@ -1,36 +0,0 @@ -pam_warn — PAM module which logs all PAM items if called - -━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ - -DESCRIPTION - -pam_warn is a PAM module that logs the service, terminal, user, remote user and -remote host to syslog(3). The items are not probed for, but instead obtained -from the standard PAM items. The module always returns PAM_IGNORE, indicating -that it does not want to affect the authentication process. - -OPTIONS - -This module does not recognice any options. - -EXAMPLES - -#%PAM-1.0 -# -# If we don't have config entries for a service, the -# OTHER entries are used. To be secure, warn and deny -# access to everything. -other auth required pam_warn.so -other auth required pam_deny.so -other account required pam_warn.so -other account required pam_deny.so -other password required pam_warn.so -other password required pam_deny.so -other session required pam_warn.so -other session required pam_deny.so - - -AUTHOR - -pam_warn was written by Andrew G. Morgan <morgan@kernel.org>. - diff --git a/modules/pam_warn/README.xml b/modules/pam_warn/README.xml deleted file mode 100644 index 4367c28f..00000000 --- a/modules/pam_warn/README.xml +++ /dev/null @@ -1,41 +0,0 @@ -<?xml version="1.0" encoding='UTF-8'?> -<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN" -"http://www.docbook.org/xml/4.3/docbookx.dtd" -[ -<!-- -<!ENTITY pamaccess SYSTEM "pam_warn.8.xml"> ---> -]> - -<article> - - <articleinfo> - - <title> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" - href="pam_warn.8.xml" xpointer='xpointer(//refnamediv[@id = "pam_warn-name"]/*)'/> - </title> - - </articleinfo> - - <section> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" - href="pam_warn.8.xml" xpointer='xpointer(//refsect1[@id = "pam_warn-description"]/*)'/> - </section> - - <section> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" - href="pam_warn.8.xml" xpointer='xpointer(//refsect1[@id = "pam_warn-options"]/*)'/> - </section> - - <section> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" - href="pam_warn.8.xml" xpointer='xpointer(//refsect1[@id = "pam_warn-examples"]/*)'/> - </section> - - <section> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" - href="pam_warn.8.xml" xpointer='xpointer(//refsect1[@id = "pam_warn-author"]/*)'/> - </section> - -</article> diff --git a/modules/pam_warn/pam_warn.8 b/modules/pam_warn/pam_warn.8 deleted file mode 100644 index 4e2c67c5..00000000 --- a/modules/pam_warn/pam_warn.8 +++ /dev/null @@ -1,67 +0,0 @@ -.\" Title: pam_warn -.\" Author: -.\" Generator: DocBook XSL Stylesheets v1.70.1 <http://docbook.sf.net/> -.\" Date: 06/09/2006 -.\" Manual: Linux\-PAM Manual -.\" Source: Linux\-PAM Manual -.\" -.TH "PAM_WARN" "8" "06/09/2006" "Linux\-PAM Manual" "Linux\-PAM Manual" -.\" disable hyphenation -.nh -.\" disable justification (adjust text to left margin only) -.ad l -.SH "NAME" -pam_warn \- PAM module which logs all PAM items if called -.SH "SYNOPSIS" -.HP 12 -\fBpam_warn.so\fR -.SH "DESCRIPTION" -.PP -pam_warn is a PAM module that logs the service, terminal, user, remote user and remote host to -\fBsyslog\fR(3). The items are not probed for, but instead obtained from the standard PAM items. The module always returns -\fBPAM_IGNORE\fR, indicating that it does not want to affect the authentication process. -.SH "OPTIONS" -.PP -This module does not recognice any options. -.SH "MODULE SERVICES PROVIDED" -.PP -The services -\fBauth\fR, -\fBaccount\fR, -\fBpassword\fR -and -\fBsession\fR -are supported. -.SH "RETURN VALUES" -.TP 3n -PAM_IGNORE -This module always returns PAM_IGNORE. -.SH "EXAMPLES" -.sp -.RS 3n -.nf -#%PAM\-1.0 -# -# If we don't have config entries for a service, the -# OTHER entries are used. To be secure, warn and deny -# access to everything. -other auth required pam_warn.so -other auth required pam_deny.so -other account required pam_warn.so -other account required pam_deny.so -other password required pam_warn.so -other password required pam_deny.so -other session required pam_warn.so -other session required pam_deny.so - -.fi -.RE -.SH "SEE ALSO" -.PP - -\fBpam.conf\fR(5), -\fBpam.d\fR(8), -\fBpam\fR(8) -.SH "AUTHOR" -.PP -pam_warn was written by Andrew G. Morgan <morgan@kernel.org>. diff --git a/modules/pam_warn/pam_warn.8.xml b/modules/pam_warn/pam_warn.8.xml deleted file mode 100644 index 1aa70f59..00000000 --- a/modules/pam_warn/pam_warn.8.xml +++ /dev/null @@ -1,104 +0,0 @@ -<?xml version="1.0" encoding='UTF-8'?> -<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN" - "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd"> - -<refentry id="pam_warn"> - - <refmeta> - <refentrytitle>pam_warn</refentrytitle> - <manvolnum>8</manvolnum> - <refmiscinfo class="sectdesc">Linux-PAM Manual</refmiscinfo> - </refmeta> - <refnamediv id="pam_warn-name"> - <refname>pam_warn</refname> - <refpurpose>PAM module which logs all PAM items if called</refpurpose> - </refnamediv> - <refsynopsisdiv> - <cmdsynopsis id="pam_warn-cmdsynopsis"> - <command>pam_warn.so</command> - </cmdsynopsis> - </refsynopsisdiv> - - <refsect1 id="pam_warn-description"> - <title>DESCRIPTION</title> - <para> - pam_warn is a PAM module that logs the service, terminal, user, - remote user and remote host to - <citerefentry> - <refentrytitle>syslog</refentrytitle><manvolnum>3</manvolnum> - </citerefentry>. The items are not probed for, but instead obtained - from the standard PAM items. The module always returns - <emphasis remap='B'>PAM_IGNORE</emphasis>, indicating that it - does not want to affect the authentication process. - </para> - </refsect1> - - <refsect1 id="pam_warn-options"> - <title>OPTIONS</title> - <para>This module does not recognice any options.</para> - </refsect1> - - <refsect1 id="pam_warn-services"> - <title>MODULE SERVICES PROVIDED</title> - <para> - The services <option>auth</option>, <option>account</option>, - <option>password</option> and <option>session</option> are supported. - </para> - </refsect1> - - <refsect1 id='pam_warn-return_values'> - <title>RETURN VALUES</title> - <variablelist> - <varlistentry> - <term>PAM_IGNORE</term> - <listitem> - <para> - This module always returns PAM_IGNORE. - </para> - </listitem> - </varlistentry> - </variablelist> - </refsect1> - - <refsect1 id='pam_warn-examples'> - <title>EXAMPLES</title> - <programlisting> -#%PAM-1.0 -# -# If we don't have config entries for a service, the -# OTHER entries are used. To be secure, warn and deny -# access to everything. -other auth required pam_warn.so -other auth required pam_deny.so -other account required pam_warn.so -other account required pam_deny.so -other password required pam_warn.so -other password required pam_deny.so -other session required pam_warn.so -other session required pam_deny.so - </programlisting> - </refsect1> - - <refsect1 id='pam_warn-see_also'> - <title>SEE ALSO</title> - <para> - <citerefentry> - <refentrytitle>pam.conf</refentrytitle><manvolnum>5</manvolnum> - </citerefentry>, - <citerefentry> - <refentrytitle>pam.d</refentrytitle><manvolnum>8</manvolnum> - </citerefentry>, - <citerefentry> - <refentrytitle>pam</refentrytitle><manvolnum>8</manvolnum> - </citerefentry> - </para> - </refsect1> - - <refsect1 id='pam_warn-author'> - <title>AUTHOR</title> - <para> - pam_warn was written by Andrew G. Morgan <morgan@kernel.org>. - </para> - </refsect1> - -</refentry> diff --git a/modules/pam_warn/pam_warn.c b/modules/pam_warn/pam_warn.c deleted file mode 100644 index 268e2289..00000000 --- a/modules/pam_warn/pam_warn.c +++ /dev/null @@ -1,123 +0,0 @@ -/* pam_warn module */ - -/* - * $Id$ - * - * Written by Andrew Morgan <morgan@linux.kernel.org> 1996/3/11 - */ - -#include "config.h" - -#include <stdio.h> -#include <unistd.h> -#include <syslog.h> -#include <stdarg.h> - -/* - * here, we make a definition for the externally accessible function - * in this file (this definition is required for static a module - * but strongly encouraged generally) it is used to instruct the - * modules include file to define the function prototypes. - */ - -#define PAM_SM_AUTH -#define PAM_SM_PASSWORD - -#include <security/pam_modules.h> -#include <security/pam_ext.h> - -/* some syslogging */ - -#define OBTAIN(item, value, default_value) do { \ - (void) pam_get_item(pamh, item, &value); \ - value = value ? value : default_value ; \ -} while (0) - -static void log_items(pam_handle_t *pamh, const char *function) -{ - const void *service=NULL, *user=NULL, *terminal=NULL, - *rhost=NULL, *ruser=NULL; - - OBTAIN(PAM_SERVICE, service, "<unknown>"); - OBTAIN(PAM_TTY, terminal, "<unknown>"); - OBTAIN(PAM_USER, user, "<unknown>"); - OBTAIN(PAM_RUSER, ruser, "<unknown>"); - OBTAIN(PAM_RHOST, rhost, "<unknown>"); - - pam_syslog(pamh, LOG_NOTICE, - "function=[%s] service=[%s] terminal=[%s] user=[%s]" - " ruser=[%s] rhost=[%s]\n", function, - (const char *) service, (const char *) terminal, - (const char *) user, (const char *) ruser, - (const char *) rhost); -} - -/* --- authentication management functions (only) --- */ - -PAM_EXTERN -int pam_sm_authenticate(pam_handle_t *pamh, int flags UNUSED, - int argc UNUSED, const char **argv UNUSED) -{ - log_items(pamh, __FUNCTION__); - return PAM_IGNORE; -} - -PAM_EXTERN -int pam_sm_setcred(pam_handle_t *pamh, int flags UNUSED, - int argc UNUSED, const char **argv UNUSED) -{ - log_items(pamh, __FUNCTION__); - return PAM_IGNORE; -} - -/* password updating functions */ - -PAM_EXTERN -int pam_sm_chauthtok(pam_handle_t *pamh, int flags UNUSED, - int argc UNUSED, const char **argv UNUSED) -{ - log_items(pamh, __FUNCTION__); - return PAM_IGNORE; -} - -PAM_EXTERN int -pam_sm_acct_mgmt(pam_handle_t *pamh, int flags UNUSED, - int argc UNUSED, const char **argv UNUSED) -{ - log_items(pamh, __FUNCTION__); - return PAM_IGNORE; -} - -PAM_EXTERN int -pam_sm_open_session(pam_handle_t *pamh, int flags UNUSED, - int argc UNUSED, const char **argv UNUSED) -{ - log_items(pamh, __FUNCTION__); - return PAM_IGNORE; -} - -PAM_EXTERN int -pam_sm_close_session(pam_handle_t *pamh, int flags UNUSED, - int argc UNUSED, const char **argv UNUSED) -{ - log_items(pamh, __FUNCTION__); - return PAM_IGNORE; -} - -#ifdef PAM_STATIC - -/* static module data */ - -struct pam_module _pam_warn_modstruct = { - "pam_warn", - pam_sm_authenticate, - pam_sm_setcred, - pam_sm_acct_mgmt, - pam_sm_open_session, - pam_sm_close_session, - pam_sm_chauthtok, -}; - -#endif - -/* end of module definition */ diff --git a/modules/pam_warn/tst-pam_warn b/modules/pam_warn/tst-pam_warn deleted file mode 100755 index 0b48365a..00000000 --- a/modules/pam_warn/tst-pam_warn +++ /dev/null @@ -1,2 +0,0 @@ -#!/bin/sh -../../tests/tst-dlopen .libs/pam_warn.so |