aboutsummaryrefslogtreecommitdiff
path: root/ChangeLog
Commit message (Collapse)AuthorAgeFilesLines
* Generate ChangeLog from git logDmitry V. Levin2011-10-271-5094/+0
| | | | | | | | | | | | | * .gitignore: Add ChangeLog * ChangeLog: Rename to ChangeLog-CVS. * Makefile.am (gen-changelog): New rule. (dist-hook, .PHONY): Depend on it. (EXTRA_DIST): Add ChangeLog-CVS. * README-hacking: New file. * gitlog-to-changelog: Import from gnulib. * autogen.sh: Create empty ChangeLog file to make automake strictness check happy. Use automated "autoreconf -fiv" instead of manual invocations of various autotools.
* 2011-10-25 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-10-251-0/+9
| | | | | | | | | * release version 1.1.5 * configure.in: Bump version number. * modules/pam_tally2/pam_tally2.8.xml: Remove never used option "no_lock_time".
* pam_env: abort when encountering an overflowed environment variable expansionKees Cook2011-10-141-0/+5
| | | | | | | * modules/pam_env/pam_env.c (_expand_arg): Abort when encountering an overflowed environment variable expansion. Fixes CVE-2011-3149. Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874565
* pam_env: correctly count leading whitespace when parsing environment fileKees Cook2011-10-141-0/+7
| | | | | | | * modules/pam_env/pam_env.c (_assemble_line): Correctly count leading whitespace. Fixes CVE-2011-3148. Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874469
* If getdomainname() fails or domainname not set use NULL as domain in innetgr().Tomas Mraz2011-10-101-0/+3
|
* Add hostname resolution cache.Tomas Mraz2011-10-101-0/+10
|
* Improve documentation of the sufficient and requisite control values. (Red ↵Tomas Mraz2011-09-301-1/+6
| | | | Hat Bug #742413)
* Correct the FSF address.Tomas Mraz2011-08-251-0/+2
|
* Fix the split on @ in the user field. (Red Hat Bug #732081)Tomas Mraz2011-08-251-0/+5
|
* Fix missing dereference.Tomas Mraz2011-08-231-0/+4
|
* Fix order of librariesThorsten Kukuk2011-06-241-0/+3
|
* Add release to ChangeLogThorsten Kukuk2011-06-211-0/+2
|
* 2011-06-22 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-06-211-0/+7
| | | | | | | | | * release version 1.1.4 * configure.in: Bump version number. * NEWS: Document changes since 1.1.3 * libpam/Makefile.am: Bump release number of shared library * po/de.po: Translate new string.
* 2011-06-21 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-06-211-0/+8
| | | | | | | | * modules/pam_limits/pam_limits.c: Add set_all option, read limits from PID one if no limit is specified and set_all is set. * modules/pam_limits/pam_limits.8.xml: Document set_all option. Based on Patch by Kees Cook.
* Initialize the fake_item from item.Tomas Mraz2011-06-151-0/+3
|
* Avoid memleaks and fd leak in error paths.Tomas Mraz2011-06-151-0/+4
|
* Do not crash when remember, minlen, or rounds options are used with wrong ↵Tomas Mraz2011-06-151-0/+3
| | | | module type.
* Cleanups of pam_pwhistory code. Make opasswd entry parsing more robust.Tomas Mraz2011-06-151-1/+8
| | | | | | | | | * modules/pam_pwhistory/opasswd.c (check_old_password): Do not needlessly call strdupa(). (save_old_password): Avoid memleaks in error paths. Avoid memleak of buf. Make the opasswd entry parsing more robust. * modules/pam_pwhistory/pam_pwhistory.8.xml: Document the special meaning of remember=0.
* Avoid leaking memory and dir handle on realloc failure.Tomas Mraz2011-06-151-0/+6
|
* Fix typoThorsten Kukuk2011-06-141-1/+1
|
* 2011-06-14 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-06-141-0/+10
| | | | | | | | | | * configure.in: Check for libtirpc bye default. * libpam/Makefile.am: Add support for libtirpc. * modules/pam_access/Makefile.am: Likewise. * modules/pam_unix/Makefile.am: Likewise. * modules/pam_unix/pam_unix_passwd.c: Change ifdefs for new libtirpc support. * modules/pam_unix/yppasswd_xdr.c: Only compile if we have rpc/rpc.h.
* Test also whether the tty is in the /sys/class/tty/console/active file.Tomas Mraz2011-06-131-0/+7
|
* Detect the shared / mount and enable private mounts based on that.Tomas Mraz2011-06-071-0/+9
|
* Define the MS_PRIVATE and MS_REC flags if they are not in sys/mount.h.Tomas Mraz2011-06-061-0/+3
|
* Rewrite of the field parsing in pam_group and pam_time.Tomas Mraz2011-06-061-0/+13
|
* Vietnamese translation added.Tomas Mraz2011-06-061-0/+5
|
* Check for return value of pam_get_item() in pam_echo module.Tomas Mraz2011-06-021-0/+3
|
* Guard for pam_get_user() error in pam_filter module.Tomas Mraz2011-06-021-0/+3
|
* Guards for memory allocation errors in pam_cracklib module.Tomas Mraz2011-06-021-0/+4
|
* Add support for the mount_private option to pam_namespace.Tomas Mraz2011-06-021-0/+11
|
* 2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-05-301-0/+11
| | | | | | | | | | | * modules/pam_timestamp/pam_timestamp.c (main): Remove unsused variable pretval. * modules/pam_stress/pam_stress.c (converse): **message is const. (stress_get_password): pmsg is const. (pam_sm_chauthtok): Likewise. * libpam/pam_item.c (pam_get_user): Make pmsg const and remove casts.
* 2011-05-30 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-05-301-0/+5
| | | | | * modules/pam_env/pam_env.c (_pam_parse): Implement debug option. Based on patch by Tomas Mraz.
* 2011-05-24 Thorsten Kukuk <kukuk@thkukuk.de>Thorsten Kukuk2011-05-241-0/+6
| | | | | | * modules/pam_listfile/pam_listfile.c (pam_sm_authenticate): quiet option has no argument, print no missing file if quiet is set [sf#3194930].
* 2011-05-04 Thorsten Kukuk <kukuk@thkukuk.de>kukuk2011-05-041-0/+6
| | | | | * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Don't abort with error if btmp file does not exist.
* Clear the whole MD5 context.Tomas Mraz2011-03-211-0/+3
|
* Relevant BUGIDs:Tomas Mraz2011-03-181-0/+8
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2011-03-18 Tomas Mraz <tm@t8m.info> * modules/pam_namespace/md5.c (MD5Final): Clear the whole ctx. * modules/pam_namespace/pam_namespace.c (del_polydir): Guard for NULL poly. (protect_dir): Guard for -1 passing to close(). (ns_setup): Likewise. (pam_sm_open_session): Correctly test for SELinux enabled flag.
* Relevant BUGIDs:Tomas Mraz2011-03-171-0/+9
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2011-03-17 Tomas Mraz <tm@t8m.info> * modules/pam_selinux/pam_selinux.c (config_context): Fix leak of type. (manual_context): Likewise. (context_from_env): Remove extraneous auditing in success case. * modules/pam_unix/support.c (_unix_run_helper_binary): Remove extra close() call.
* Relevant BUGIDs:Tomas Mraz2011-02-221-0/+5
| | | | | | | | | | | Purpose of commit: docfix Commit summary: --------------- 2011-02-22 Tomas Mraz <tm@t8m.info> * modules/pam_nologin/pam_nologin.8.xml: Add missing space. * modules/pam_limits/limits.conf.5.xml: Fix typo.
* Relevant BUGIDs:Tomas Mraz2010-12-211-0/+5
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-12-21 Tomas Mraz <tm@t8m.info> * modules/pam_selinux/pam_selinux.c (mls_range_allowed): Unhardcode values for security class and av permission bit.
* Relevant BUGIDs:Tomas Mraz2010-12-141-0/+11
| | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2010-12-14 Tomas Mraz <tm@t8m.info> * modules/pam_limits/pam_limits.c (parse_uid_range): New function to parse the range of uids or gids. (parse_config_file): Call parse_uid_range() and if uid/gid range is identified, setup the limits if the range matches. New parameters containing user's uid and primary gid. (pam_sm_open_session): Pass the user's uid and primary gid to parse_config_file(). * modules/pam_limits/limits.conf.5.xml: Document the uid/gid ranges.
* Relevant BUGIDs:Tomas Mraz2010-12-141-0/+4
| | | | | | | | | | Purpose of commit: translations Commit summary: --------------- 2010-12-14 Bahadır Kandemir <bahadir@pardus.org.tr> * po/tr.po: Updated translations.
* Relevant BUGIDs:Tomas Mraz2010-11-251-0/+5
| | | | | | | | | | | Purpose of commit: docfix Commit summary: --------------- 2010-11-25 Tomas Mraz <tm@t8m.info> * modules/pam_securetty/pam_securetty.8.xml: Improve documentation of the kernel console feature and the noconsole option.
* Relevant BUGIDs:Thorsten Kukuk2010-11-241-0/+8
| | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2010-11-24 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_securetty/pam_securetty.c: Parse console= kernel option, add noconsole option. * modules/pam_securetty/pam_securetty.8.xml: Document new behavior for serial console. Patch from Lennart Poettering.
* Relevant BUGIDs:Tomas Mraz2010-11-241-0/+4
| | | | | | | | | | Purpose of commit: docfix Commit summary: --------------- 2010-11-24 Tomas Mraz <tm@t8m.info> * modules/pam_limits/limits.conf.5.xml: Document the %group syntax.
* Relevant BUGIDs:Tomas Mraz2010-11-181-0/+6
| | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2010-11-18 Tomas Mraz <tm@t8m.info> * modules/pam_limits/pam_limits.c (pam_parse,pam_sm_open_session): Drop obsolete and broken option change_uid. * modules/pam_limits/pam_limits.8.xml: Likewise.
* Relevant BUGIDs:Tomas Mraz2010-11-161-0/+6
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-11-16 Tomas Mraz <tm@t8m.info> * modules/pam_pwhistory/pam_pwhistory.c (pam_sm_chauthtok): Remove dead and duplicate code. Return PAM_INCOMPLETE instead of PAM_CONV_AGAIN.
* Relevant BUGIDs:Tomas Mraz2010-11-111-0/+8
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-11-11 Tomas Mraz <tm@t8m.info> * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Fix potential use after free in case SELinux is misconfigured. * modules/pam_namespace/pam_namespace.c (process_line): Fix memory leak when parsing empty config file lines.
* Relevant BUGIDs:Thorsten Kukuk2010-10-281-0/+10
| | | | | | | | | | | | | | | | | Purpose of commit: release Commit summary: --------------- 2010-10-28 Thorsten Kukuk <kukuk@thkukuk.de> * release version 1.1.3 * configure.in: Increase version to 1.1.3 * NEWS: document visible changes * libpam/Makefile.am (libpam_la_LDFLAGS): Bump version number.
* Relevant BUGIDs:Thorsten Kukuk2010-10-271-0/+6
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-27 Thorsten Kukuk <kukuk@thkukuk.de> * doc/adg/Makefile.am: Use UTF-8 for html docu. * doc/mwg/Makefile.am: Likewise. * doc/sag/Makefile.am: Likewise. kernel.org webserver is using UTF-8
* Relevant BUGIDs:Tomas Mraz2010-10-221-0/+6
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2010-10-22 Tomas Mraz <tm@t8m.info> * modules/pam_namespace/pam_namespace.c (inst_init): Use execle() to execute the init script with clean environment. (CVE-2010-3853) (cleanup_tmpdirs): Likewise for executing rm.
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-14 12:41:14 +0000