aboutsummaryrefslogtreecommitdiff
path: root/modules/pam_unix/support.c
Commit message (Collapse)AuthorAgeFilesLines
* Relevant BUGIDs:Thorsten Kukuk2004-09-151-1/+1
| | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: Add parts of Steve Grubb's resource leak and other fixes
* Relevant BUGIDs:Thorsten Kukuk2004-09-141-1/+1
| | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: Bug 1027903 and 1027912
* Relevant BUGIDs: 849498Thorsten Kukuk2003-11-261-1/+1
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- The type of remember in support.c is int, not long. But we compare remember with LONG_MIN and LONG_MAX. While this works on 32bit architectures, this fails on 64bit one. INT_MIN and INT_MAX should be used.
* Relevant BUGIDs: 667584 664290Andrew G. Morgan2003-01-141-32/+10
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Two bug fixes in one: don't trust getlogin() and sanely lower the time the password databases are locked in pam_unix.
* Relevant BUGIDs: 521314Andrew G. Morgan2002-09-231-37/+38
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- This code is needed to complete this bugfix.
* Relevant BUGIDs: 476963Andrew G. Morgan2002-07-111-0/+18
| | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- some applications are not prepared to get a SIGCHLD from a child process they didn't think they launched, so we now suppress this signal for the duration of use of the helper binary. The 'noreap' module argument is provided to override this new default.
* Relevant BUGIDs: 521314Andrew G. Morgan2002-07-091-1/+10
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- bigcrypt does not match crypt when password length is too long. This led to a pam_unix problem when the module had not set the password in bigcrypt mode, but was trying to compare with bigcrypt output. The fix is to use the stored password as a guide to how much of the encrypted password to compare against.
* Relevant BUGIDs: 476947Andrew G. Morgan2001-11-261-1/+2
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- be more confident that strings are being initialized correctly from Nalin.
* Relevant BUGIDs: 440107Steve Langasek2001-09-131-1/+2
| | | | | | | | | Purpose of commit: module reentrancy Commit summary: --------------- Commit sample code that uses getpwnam_r instead of getpwnam. All code is #ifdef'ed out right now.
* Relevant BUGIDs: 440107Steve Langasek2001-09-131-1/+35
| | | | | | | | | Purpose of commit: module reentrancy Commit summary: --------------- Commit sample code that uses getpwnam_r instead of getpwnam. All code is #ifdef'ed out right now.
* Relevant BUGIDs: 440107Steve Langasek2001-07-101-11/+7
| | | | | | | | | | Purpose of commit: bugfix/cleanup Commit summary: --------------- Removed superfluous use of static variables in md5 and bigcrypt routines, bringing us a step closer to thread-safeness. Eliminated some variable indirection along the way.
* Relevant BUGIDs: 112540Andrew G. Morgan2001-02-111-3/+6
| | | | | | | | | | | | | | | Purpose of commit: minor security bugfix Commit summary: --------------- Fixes for the password helper binaries. Before, there was no check that the password entered was actually that of the intended user being authenticated. Instead, the password was checked for the requesting user. While this disstinction sounds like a security hole, its actually not been a problem in practice. The helper binaries have only been used in the case that the application is not setuid-0 and as such even if an improper authentication succeeded, the application could not change its uid from that of the requesting user.
* Relevant BUGIDs: 126431, 126423Steve Langasek2000-12-201-22/+44
| | | | | | | | | | | | Purpose of commit: new feature / bugfix Commit summary: --------------- This changes the format of pam_unix log messages, per bug 126423. The change is extensive (every call to _log_err() now has an additional argument) but straightforward. These changes to the logging code incidentally fix the problem reported in bug 126431.
* Relevant BUGIDs: 126036Steve Langasek2000-12-181-22/+56
| | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Changes format of pam_unix 'authentication failure' log messages for purposes of consistency and clarity. Note that we do not log the 'user=' item in the case of an invalid username unless the audit flag is turned on. Note also that the way we currently log these failures isn't i18n-friendly. I imagine this will need correcting at some point in the future.
* Relevant BUGIDs: 125704, 124930Steve Langasek2000-12-131-4/+4
| | | | | | | | | Purpose of commit: portable handling of utmp in pam_unix Commit summary: --------------- Fixes problem with PAM_getlogin() on Solaris (and hopefully other Unices), as per David Lee's report.
* Relevant BUGIDs: 123399Andrew G. Morgan2000-11-251-1/+1
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- avoid possibility of SIGPIPE from helper binary non-invocation or early exit.
* Relevant BUGIDs: 113238Steve Langasek2000-08-311-0/+2
| | | | | | | | | | | | Purpose of commit: bugfix to pam_unix Commit summary: --------------- Fixed case where pam_unix would segfault if the app's conversation function returned a null pointer as the password. Since a null pointer can never be a valid password unless the password file also has a null field (which we already check for), we now check for a valid pointer and return PAM_AUTH_ERR if we don't have one.
* Initial revisionAndrew G. Morgan2000-06-201-0/+821
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-19 12:36:31 +0000