aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | Install text module documentation in libpam-doc/txtSam Hartman2025-01-141-0/+1
| |
* | Use installed faillock and namespace man page rather than source man page.Sam Hartman2025-01-143-3/+2
| |
* | Depend on fopSam Hartman2025-01-141-2/+1
| |
* | Build depend on mesonSam Hartman2025-01-142-9/+13
| |
* | Update upstream source from tag 'upstream/1.7.0'Sam Hartman2024-12-02800-180635/+16382
|\ \ | |/ |/| | | Update to upstream version '1.7.0' with Debian dir 0b3cd490884352e14273caeca2f05c6a525499fa
| * New upstream version 1.7.0Sam Hartman2024-12-02800-180635/+16382
| |\
| | * maint: update release procedureDmitry V. Levin2024-10-241-4/+5
| | | | | | | | | | | | * maint/README-release: Update.
| | * Remove autogen.shDmitry V. Levin2024-10-241-5/+0
| | | | | | | | | | | | Complements: 613e59dca703 ("build: drop autotools support")
| | * Prepare for 1.7.0 releaseDmitry V. Levin2024-10-235-4/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * meson.build: Raise project version to 1.7.0. * po/meson.build: Likewise. * po/Linux-PAM.pot (Project-Id-Version): Likewise. * libpam/include/security/_pam_types.h (__LINUX_PAM_MINOR__): Update. * NEWS: Update. Resolves: https://github.com/linux-pam/linux-pam/issues/844
| | * build: drop autotools supportDmitry V. Levin2024-10-23105-4902/+0
| | | | | | | | | | | | There is no point in supporting two different build systems.
| | * ci: drop autotools supportDmitry V. Levin2024-10-233-366/+154
| | |
| | * README: replace autotools-based instructions with meson-based onesDmitry V. Levin2024-10-231-20/+7
| | |
| | * maint: use meson to generate release tarballsDmitry V. Levin2024-10-231-12/+4
| | |
| | * pam_access: clarify `LOCAL` keyword behaviourIker Pedrosa2024-10-221-11/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | * modules/pam_access/access.conf.5.xml: `LOCAL` keyword behaviour explanation was focused on the development internals. Let's clarify it by rephrasing it to something a sysadmin can understand. Resolves: https://issues.redhat.com/browse/RHEL-39943 Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
| | * pam_access: always match local addressIker Pedrosa2024-10-221-2/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * modules/pam_access/pam_access.c: match the local address regardless of the IP version in use. In some circumstances the `localhost` may be translated to IPv4 or IPv6, but the configuration file only indicated the address for one of the two versions. Since the originating value is set in `PAM_RHOST` and PAM has no control over it, let's match the local addresses regardless of the IP version in use. Resolves: https://issues.redhat.com/browse/RHEL-23018 Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
| | * ci/meson-build.sh: add a git status checkDmitry V. Levin2024-10-211-0/+5
| | | | | | | | | | | | | | | * ci/meson-build.sh: Check that "git status" does not report any differences or untracked files.
| | * ci/meson-build.sh: change DESTDIR for the install testDmitry V. Levin2024-10-211-2/+2
| | | | | | | | | | | | | | | Move DESTDIR inside the build tree to reduce the number of top level directories used for tests.
| | * pam_get_authtok*: disallow setting pamh to NULLAndrey Kovalev2024-10-185-3/+60
| | | | | | | | | | | | | | | | | | This also prevents a potential NULL pointer dereference in pam_get_authtok_internal and pam_get_authtok_verify when the pamh argument they access is set to NULL.
| | * build: check gdbm_close return typeDmitry V. Levin2024-10-152-0/+11
| | | | | | | | | | | | | | | | | | | | | | | | gdbm_close() used to return void, later it was changed to return int. We cannot assume either way and have to check whether gdbm_close() returns int. Fixes: 45c2c496dcf8 ("pam_userdb: enable GDBM support")
| | * po: update .pot and .po filesDmitry V. Levin2024-10-1383-7988/+8905
| | | | | | | | | | | | | | | | | | Regenerate po/Linux-PAM.pot and po/*.po using "meson compile Linux-PAM-update-po" command. This essentially updates the line numbers and timestamps.
| | * po: pass additional arguments to xgettextDmitry V. Levin2024-10-131-1/+6
| | |
| | * po: update translations using Weblate (Korean)김인수2024-10-131-44/+44
| | | | | | | | | | | | | | | | | | Currently translated at 100.0% (101 of 101 strings). Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/ko/
| | * po: update translations using Weblate (Korean)Seong-ho Cho2024-10-131-15/+15
| | | | | | | | | | | | | | | | | | Currently translated at 100.0% (101 of 101 strings). Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/ko/
| | * po: update translations using Weblate (Japanese)Tomohiro KATO2024-10-131-11/+11
| | | | | | | | | | | | | | | | | | Currently translated at 100.0% (101 of 101 strings). Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/ja/
| | * po: update translations using Weblate (Irish)Aindriu Mac Giolla Eoin2024-10-131-83/+61
| | | | | | | | | | | | | | | | | | Currently translated at 100.0% (101 of 101 strings). Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/ga/
| | * po: update translations using Weblate (French)Léane GRASSER2024-10-131-45/+46
| | | | | | | | | | | | | | | | | | Currently translated at 100.0% (101 of 101 strings). Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/fr/
| | * po: update translations using Weblate (Norwegian Nynorsk)Adaline Simonian2024-10-131-6/+8
| | | | | | | | | | | | | | | | | | Currently translated at 97.0% (98 of 101 strings). Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/nn/
| | * po: update translations using Weblate (Slovenian)Martin Srebotnjak2024-10-131-97/+101
| | | | | | | | | | | | | | | | | | Currently translated at 100.0% (101 of 101 strings). Translate-URL: https://translate.fedoraproject.org/projects/linux-pam/master/sl/
| | * .github: add a few more meson jobsDmitry V. Levin2024-10-131-0/+391
| | |
| | * .github: add gcc-14 and clang-16/clang-17/clang-18 jobsDmitry V. Levin2024-10-131-0/+271
| | |
| | * .github: switch builder jobs from ubuntu-latest to ubuntu-24.04Dmitry V. Levin2024-10-132-25/+25
| | | | | | | | | | | | | | | Even though ubuntu-latest is still ubuntu-22.04 yet, let's move on by switching builder jobs to ubuntu-24.04.
| | * .github: drop old clang jobsDmitry V. Levin2024-10-131-42/+0
| | | | | | | | | | | | | | | These clang versions suddenly disappeared from ubuntu-22.04 repository, and it is unlikely that old clang jobs will be missed anyway.
| | * pam_filter: close unused file descriptorsDmitry V. Levin2024-09-131-1/+5
| | | | | | | | | | | | | | | | | | When creating a socket pipe for communication between the parent and the child process, each of these two processes should keep just one of these socket pipe descriptors.
| | * pam_filter: fix potential fd leak on error pathDmitry V. Levin2024-09-131-4/+8
| | | | | | | | | | | | Resolves: https://github.com/linux-pam/linux-pam/issues/829
| | * examples/tty_conv: fix potential out of bound write in readline()PavlNekrasov2024-09-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | At the end of the loop the iterator `i` can be equal to `PAM_MAX_RESP_SIZE`, which will cause an index call outside the array in the `input[i] = '\0';` Signed-off-by: Dmitry V. Levin <ldv@strace.io>
| | * pam_env: install environment file in vendordirThorsten Kukuk2024-09-122-1/+3
| | | | | | | | | | | | | | | If vendordir is enabled, the distribution provided configuration files should be below this directory and not in /etc.
| | * Add .gitattributesDmitry V. Levin2024-09-101-0/+7
| | | | | | | | | | | | | | | Mark a few files and directories with export-ignore attribute so that they won't be added to archive files.
| | * ci: add a few meson jobsDmitry V. Levin2024-09-103-5/+202
| | |
| | * meson: build Linux-PAM using mesonDmitry V. Levin2024-09-1078-1/+1973
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On my non-representative hardware, the full build using autotools (./autogen.sh && CFLAGS=-O2 ./configure && make -j`nproc` && make -j`nproc` install) takes about 45 seconds. On the same hardware, the full build using meson (meson setup -Doptimization=2 dir && meson compile -C dir && meson install -C dir) takes just about 7.5 seconds.
| | * Remove unused .gitignore fileDmitry V. Levin2024-09-101-2/+0
| | | | | | | | | | | | | | | | | | doc/specs/formatter/.gitignore became irrelevant along with the whole doc/specs/formatter directory after commit 96eb2dc401f785e2b35a2089dda24416ff9bb305 back in 2005.
| | * pam_userdb: don't overwrite free'd memoryKeith Turner - C724732024-09-101-7/+3
| | | | | | | | | | | | | | | | | | | | | | | | As crypt_r is expected to return a pointer into a provided crypt_data struct, callers should not modify the string returned by crypt_r after freeing the corresponding crypt_data struct. Co-authored-by: Dmitry V. Levin <ldv@strace.io>
| | * pam_limits: use systemd-logind instead of utmp (#822)Thorsten Kukuk2024-09-102-5/+80
| | | | | | | | | | | | | | | | | | | | | The utmp database is unreliable for counting logged in users, since there is no standard which defines who should create an entry at which time for which reason. And it has a Y2038 problem with glibc/x86-64. Query systemd-logind for the number of user sessions instead.
| | * pam_issue: only count class userThorsten Kukuk2024-09-051-1/+19
| | | | | | | | | | | | | | | | | | | | | | | | Since systemd added new types of classes (e.g. manager*), we cannot use the count of all sessions anymore, but have to check which class this is. This is backward compatible, systemd v209 or newer is required.
| | * run-xtests.sh: skip the tests instead of failing them if run by non-rootDmitry V. Levin2024-09-051-1/+1
| | | | | | | | | | | | This simplifies integration of xtests into test frameworks.
| | * xtests: fix compilation warningDmitry V. Levin2024-09-051-1/+7
| | |
| | * Remove unused "dynamic" directoryDmitry V. Levin2024-09-044-278/+0
| | | | | | | | | | | | | | | | | | The code there cannot be compiled at least since introduction of autotools build system by commit 23624ea6f78ec8acc167a2491c00998907fc76b1 back in 2005.
| | * pam_loginuid: avoid using postal address in the GNU GPL license noticeDmitry V. Levin2024-09-031-3/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Following the recent news about the latest change of the FSF postal address, replace the FSF postal address in the GNU GPL license notice with the URL. Apparently, "Information for maintainers of GNU Software" for quite a long time suggests using the URL instead of the postal address. Link: https://lists.gnu.org/archive/html/info-gnu/2024-09/msg00000.html Link: https://www.gnu.org/prep/maintain/html_node/License-Notices-for-Code.html
| | * ci: rename run-build-and-tests.sh to autotools-build.shDmitry V. Levin2024-08-312-17/+17
| | | | | | | | | | | | | | | | | | As the script is for autotools-based builds, give it a more descriptive name, so it wouldn't be confused with build scripts for other build systems.
| | * build: consistently include config.h firstDmitry V. Levin2024-08-309-11/+17
| | | | | | | | | | | | Make sure that config.h is included before any system header.
| | * pam_unix: do not check for HAVE_PAM_FAIL_DELAYDmitry V. Levin2024-08-291-2/+0
| | | | | | | | | | | | | | | Given that pam_fail_delay is always provided by libpam, checking for HAVE_PAM_FAIL_DELAY may have any sense only in third-party modules.
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-10 19:21:48 +0000