pam.git - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Relevant BUGIDs: 2917257	Thorsten Kukuk	2010-07-12	2	-4/+20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: enhancement Commit summary: --------------- 2010-07-12 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_succeed_if/pam_succeed_if.c (pam_sm_authenticate): Add audit flag to enable logging about unknown user (#2917257). * modules/pam_succeed_if/pam_succeed_if.8.xml: Document audit. * modules/pam_succeed_if/pam_succeed_if.8: Regenerated from xml. * modules/pam_succeed_if/README: Regenerated from xml.
*	Relevant BUGIDs: 3004656	Thorsten Kukuk	2010-06-22	2	-9/+8
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2010-06-22 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_umask/pam_umask.8.xml: Remove comparisation of gid and uid for usergroups. * modules/pam_umask/pam_umask.c (setup_limits_from_gecos): Likewise. Bug #3004656
*	Relevant BUGIDs: 3010705	Thorsten Kukuk	2010-06-15	1	-1/+20
\| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2010-06-15 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_xauth/pam_xauth.c (pam_sm_close_session): Call setfsuid to be allowed to remove temporary files (#3010705). (pam_sm_open_session): Call fchown with correct permissions.
*	Relevant BUGIDs:	Thorsten Kukuk	2010-06-09	2	-0/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Add test case for unresolved symbols 2010-06-09 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_tty_audit/Makefile.am (TESTS): Add tst-pam_tty_audit. * modules/pam_tty_audit/tst-pam_tty_audit: New. Commit summary: ---------------
*	Relevant BUGIDs: Ubuntu bug #588547	Steve Langasek	2010-06-07	1	-2/+4
\| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2010-06-07 Steve Langasek <vorlon@debian.org> * modules/pam_tty_audit/Makefile.am: If we don't have the libraries required for building pam_tty_audit, we shouldn't install the manpage either.
*	Relevant BUGIDs:	Thorsten Kukuk	2010-05-27	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2010-05-27 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_userdb/pam_userdb.c: Define HAVE_DBM for BerkDB 5.0 support. Patch by Diego Elio Pettenò.
*	Relevant BUGIDs:	Thorsten Kukuk	2010-05-05	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: docu fix Commit summary: --------------- 2010-04-15 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_exec/pam_exec.8.xml: Fix example.
*	Relevant BUGIDs:	Thorsten Kukuk	2010-04-14	2	-5/+25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2010-04-13 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_pwhistory/opasswd.c: Fix compilation if cyprt_r() is not available. * configure.in: check for getutent_r. * modules/pam_timestamp/pam_timestamp.c: Use getutent() if getutent_r() does not exist. Patch from Diego Elio "Flameeyes" Pettenò.
*	Relevant BUGIDs:	Thorsten Kukuk	2010-04-06	2	-12/+42
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: new feature Commit summary: --------------- 2010-04-06 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_rootok/pam_rootok.c: Add support for acct_mgmt and chauthtok. * modules/pam_rootok/pam_rootok.8.xml: Document new module types.
*	Relevant BUGIDs: 2892529	Thorsten Kukuk	2009-12-08	4	-15/+13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-12-08 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Rename DEBUG to PAM_DEBUG. * libpam/pam_env.c: Likewise * libpam/pam_handlers.c: Likewise * libpam/pam_miscc.c: Likewise * libpam/pam_password.c: Likewise * libpam/include/security/_pam_macros.h: Likewise * libpamc/test/modules/pam_secret.c: Likewise * modules/pam_group/pam_group.c: Likewise * modules/pam_listfile/pam_listfile.c: Likewise * modules/pam_unix/pam_unix_auth.c: Likewise * modules/pam_unix/pam_unix_passwd.c: Likewise
*	Relevant BUGIDs: rhbz#545053	Tomas Mraz	2009-12-08	1	-7/+18
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: new feature Commit summary: --------------- 2009-12-08 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/passverify.c(unix_update_shadow): Create a shadow entry if not present in the file.
*	Relevant BUGIDs:	Tomas Mraz	2009-12-08	1	-12/+0
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: cleanup Commit summary: --------------- 2009-12-08 Tomas Mraz <t8m@centrum.cz> * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Remove unused function and variable.
*	Relevant BUGIDs:	Tomas Mraz	2009-11-19	1	-1/+2
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-11-19 Tomas Mraz <t8m@centrum.cz> * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Return PAM_AUTH_ERR from the module if sepermit_lock() fails.
*	Relevant BUGIDs: 2892189	Tomas Mraz	2009-11-18	2	-4/+14
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-11-18 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.c(user_match): Revert the netgroup match to the original behavior, add new syntax for adding the local hostname. * modules/pam_access/access.conf.5.xml: Document the new syntax for adding the local hostname to the netgroup match.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-11-10	1	-2/+13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: regression fix Commit summary: --------------- 2009-11-10 Thorsten Kukuk <kukuk@suse.de> * doc/man/pam_get_authtok.3.xml: Document pam_get_authtok_noverify and pam_get_authtok_verify. * libpam/Makefile.am (libpam_la_LDFLAGS): Bump revesion of libpam. * libpam/pam_get_authtok.c (pam_get_authtok_internal): Renamed from pam_get_authtok, add flags argument, always check return values. * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Use pam_get_authtok_noverify and pam_get_authtok_verify. * libpam/include/security/pam_ext.h: Add prototypes for pam_get_authtok_noverify and pam_get_authtok_verify. * libpam/libpam.map: Add new pam_get_authtok_* functions.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-11-04	1	-0/+1
\| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- Add new manual page.
*	Relevant BUGIDs:	Tomas Mraz	2009-11-02	4	-20/+141
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: new feature Commit summary: --------------- 2009-11-02 Tomas Mraz <t8m@centrum.cz> * modules/pam_sepermit/Makefile.am: Add sepermit.conf(5) manual page. * modules/pam_sepermit/pam_sepermit.8.xml: Add reference to sepermit.conf(5). Drop some redundant text. * modules/pam_sepermit/sepermit.conf.5.xml: New file. * modules/pam_sepermit/pam_sepermit.c(sepermit_match): Implement the ignore option in sepermit.conf.
*	Relevant BUGIDs: rhbz#531530	Tomas Mraz	2009-10-29	2	-4/+43
\| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-10-29 Tomas Mraz <t8m@centrum.cz> * modules/pam_xauth/Makefile.am: Link with libselinux. * modules/pam_xauth/pam_xauth.c(pam_sm_open_session): Call setfscreatecon() if selinux is enabled to create the .xauth file with the right label. Original idea by Dan Walsh.
*	Relevant BUGIDs:	Tomas Mraz	2009-10-08	1	-0/+22
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: documentation Commit summary: --------------- 2009-10-08 Tomas Mraz <t8m@centrum.cz> * modules/pam_tty_audit/pam_tty_audit.8.xml: Add notice about aureport add SEE ALSO section.
*	Relevant BUGIDs:	Tomas Mraz	2009-10-06	1	-54/+22
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-10-06 Tomas Mraz <t8m@centrum.cz> * modules/pam_listfile/pam_listfile.c(pam_sm_authenticate): Just call pam_modutil_user_in_group_nam_nam() instead of reimplementation of group matching.
*	Relevant BUGIDs: Debian bug #537848	Steve Langasek	2009-09-10	1	-5/+6
\| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-09-10 Steve Langasek <vorlon@debian.org> * modules/pam_securetty/pam_securetty.c: pam_securetty should not return PAM_USER_UNKNOWN when the tty is secure, regardless of what was entered as a username. Patch from Nicolas François <nicolas.francois@centraliens.net>.
*	Relevant BUGIDs: Debian bug #518908	Steve Langasek	2009-08-31	1	-1/+2
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: portability Commit summary: --------------- 2009-08-31 Steve Langasek <vorlon@debian.org> * modules/pam_namespace/namespace.init: make this portable to POSIX awk, instead of using GNU awk extensions.
*	Relevant BUGIDs: Debian bug #470137	Steve Langasek	2009-08-25	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-08-25 Steve Langasek <vorlon@debian.org> * modules/pam_sepermit/pam_sepermit.8.xml: fix up one reference to pam.d(8) left behind because I've forgotten how CVS works
*	Relevant BUGIDs:	Thorsten Kukuk	2009-07-21	1	-2/+4
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-07-21 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_cracklib/pam_cracklib.c (pam_sm_chauthtok): Delete new token if it does not match strength criteria.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-06-30	4	-8/+63
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- This makes Linux-PAM compile able with uClibc or on embedded systems without full libc/libnsl. 2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/yppasswd_xdr.c: Remove unnecessary header files. * modules/pam_unix/support.c (_unix_getpwnam): Only compile in NIS support if all necessary functions exist. * modules/pam_unix/pam_unix_passwd.c (getNISserver): Add debug option, handle correct if OS has no NIS support. * modules/pam_access/pam_access.c (netgroup_match): Check if yp_get_default_domain and innetgr are available at compile time. * configure.in: Check for functions: innetgr, getdomainname check for headers: rpcsvc/ypclnt.h, rpcsvc/yp_prot.h.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-06-29	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: docu fix Commit summary: --------------- 2009-06-29 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/pam_unix.8.xml: Fix blowfish description. Reported by Diego E. “Flameeyes” Pettenò.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-06-28	43	-102/+125
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_namespace/Makefile.am: Fix make maintainer-clean, fix docu dependencies. * modules/pam_xauth/Makefile.am: Fix make maintainer-clean. * modules/pam_access/Makefile.am: Likewise. * modules/pam_debug/Makefile.am: Likewise. * modules/pam_deny/Makefile.am: Likewise. * modules/pam_echo/Makefile.am: Likewise. * modules/pam_env/Makefile.am: Likewise. * modules/pam_faildelay/Makefile.am: Likewise. * modules/pam_ftp/Makefile.am: Likewise. * modules/pam_group/Makefile.am: Likewise. * modules/pam_issue/Makefile.am: Likewise. * modules/pam_keyinit/Makefile.am: Likewise. * modules/pam_lastlog/Makefile.am: Likewise. * modules/pam_limits/Makefile.am: Likewise. * modules/pam_listfile/Makefile.am: Likewise. * modules/pam_localuser/Makefile.am: Likewise. * modules/pam_loginuid/Makefile.am: Likewise. * modules/pam_mail/Makefile.am: Likewise. * modules/pam_mkhomedir/Makefile.am: Likewise. * modules/pam_motd/Makefile.am: Likewise. * modules/pam_nologin/Makefile.am: Likewise. * modules/pam_pwhistory/Makefile.am: Likewise. * modules/pam_rhosts/Makefile.am: Likewise. * modules/pam_rootok/Makefile.am: Likewise. * modules/pam_securetty/Makefile.am: Likewise. * modules/pam_shells/Makefile.am: Likewise. * modules/pam_succeed_if/Makefile.am: Likewise. * modules/pam_tally2/Makefile.am: Likewise. * modules/pam_tally/Makefile.am: Likewise. * modules/pam_time/Makefile.am: Likewise. * modules/pam_timestamp/Makefile.am: Likewise. * modules/pam_tty_audit/Makefile.am: Likewise. * modules/pam_umask/Makefile.am: Likewise. * modules/pam_unix/Makefile.am: Likewise. * modules/pam_warn/Makefile.am: Likewise. * modules/pam_wheel/Makefile.am: Likewise. * modules/pam_filter/Makefile.am: Likewise. * configure.in: Make regeneration of docu configureable, rename enable_man to enable_docu. * modules/pam_env/pam_env.c (_pam_parse): Fix typo in debug code. * modules/pam_cracklib/Makefile.am: Don't install docu if module is disabled for building. * modules/pam_userdb/Makefile.am: Likewise.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-06-26	1	-8/+3
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: cleanup Commit summary: --------------- 2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/pam_unix_passwd.c: Remove dead SELinux code.
*	Relevant BUGIDs: 2809661	Thorsten Kukuk	2009-06-26	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- Fix compiling with --disable-nls: 2009-06-26 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_lastlog/pam_lastlog.c (last_login_failed): Fix usage of wrong variable [bug#2809661].
*	Relevant BUGIDs:	Thorsten Kukuk	2009-06-26	1	-7/+7
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- Fix blowfish support 009-06-25 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Rename crypt_gensalt_rn to crypt_gensalt_r * modules/pam_unix/passverify.c: Likewise.
*	Relevant BUGIDs:	Tomas Mraz	2009-06-01	1	-2/+4
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-06-01 Tomáš Mráz <t8m@centrum.cz> * modules/pam_pwhistory/opasswd.c (save_old_password): Don't call fclose() on NULL descriptor. Found by Steve Grubb.
*	Relevant BUGIDs:	Tomas Mraz	2009-06-01	29	-52/+52
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: cleanup Commit summary: --------------- 2009-06-01 Ville Skyttä <ville.skytta@iki.fi> * modules/pam_limits/pam_limits.8.xml: Only .conf files are parsed. Spelling fixes. modules/pam_access/pam_access.8.xml: Spelling fixes. * modules/pam_cracklib/pam_cracklib.8.xml: Likewise. * modules/pam_echo/pam_echo.8.xml: Likewise. * modules/pam_env/pam_env.8.xml: Likewise. * modules/pam_exec/pam_exec.8.xml: Likewise. * modules/pam_filter/pam_filter.8.xml: Likewise. * modules/pam_ftp/pam_ftp.8.xml: Likewise. * modules/pam_group/pam_group.8.xml: Likewise. * modules/pam_issue/pam_issue.8.xml: Likewise. * modules/pam_lastlog/pam_lastlog.8.xml: Likewise. * modules/pam_listfile/pam_listfile.8.xml: Likewise. * modules/pam_localuser/pam_localuser.8.xml: Likewise. * modules/pam_loginuid/pam_loginuid.8.xml: Likewise. * modules/pam_mkhomedir/pam_mkhomedir.8.xml: Likewise. * modules/pam_motd/pam_motd.8.xml: Likewise. * modules/pam_namespace/pam_namespace.8.xml: Likewise. * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise. * modules/pam_selinux/pam_selinux.8.xml: Likewise. * modules/pam_succeed_if/pam_succeed_if.8.xml: Likewise. * modules/pam_tally/pam_tally.8.xml: Likewise. * modules/pam_tally2/pam_tally2.8.xml: Likewise. * modules/pam_time/pam_time.8.xml: Likewise. * modules/pam_timestamp/pam_timestamp.8.xml: Likewise. * modules/pam_timestamp/pam_timestamp_check.8.xml: Likewise. * modules/pam_tty_audit/pam_tty_audit.8.xml: Likewise. * modules/pam_umask/pam_umask.8.xml: Likewise. * modules/pam_unix/pam_unix.8.xml: Likewise. * modules/pam_xauth/pam_xauth.8.xml: Likewise.
*	Relevant BUGIDs:	Tomas Mraz	2009-05-11	1	-6/+0
\| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-05-11 Tomáš Mráz <t8m@centrum.cz> * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary): Remove unnecessary setuid() call.
*	Relevant BUGIDs: rhbz#495941	Tomas Mraz	2009-04-16	1	-7/+7
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-04-16 Tomáš Mráz <t8m@centrum.cz> * modules/pam_succeed_if/pam_succeed_if.c (evaluate): Add user parameter. Use user instead of pwd->pw_name in comparsions. (pam_sm_authenticate): Pass the original user to evaluate().
*	Relevant BUGIDs:	Thorsten Kukuk	2009-04-09	2	-8/+8
\| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: cleanup Commit summary: --------------- 2009-04-09 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/yppasswd.h: Update license to GPLv2 or later on request of Olaf Kirch (Author). * modules/pam_unix/yppasswd_xdr.c: Likewise.
*	Relevant BUGIDs:	Dmitry V. Levin	2009-04-03	8	-32/+29
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-04-03 Dmitry V. Levin <ldv@altlinux.org> * libpamc/pamc_load.c (__pamc_exec_agent): Replace call to exit(3) in child process with call to _exit(2). * modules/pam_mkhomedir/pam_mkhomedir.c (create_homedir): Likewise. * modules/pam_unix/pam_unix_acct.c (_unix_run_verify_binary): Likewise. * modules/pam_unix/pam_unix_passwd.c (_unix_run_update_binary): Likewise. * modules/pam_unix/support.c (_unix_run_helper_binary): Likewise. * modules/pam_xauth/pam_xauth.c (run_coprocess): Likewise. * modules/pam_exec/pam_exec.c (call_exec): Replace all calls to exit(3) in child process with calls to _exit(2). * modules/pam_filter/pam_filter.c (set_filter): Likewise. * modules/pam_namespace/pam_namespace.c (inst_init, cleanup_tmpdirs): Likewise.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-03-27	3	-15/+38
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-03-27 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_unix/support.c (_unix_run_helper_binary): Don't ignore return value of write(). * libpamc/include/security/pam_client.h (PAM_BP_ASSERT): Honour NDEBUG. * modules/pam_timestamp/pam_timestamp.c: don't ignore return values of lchown and fchown.
*	Relevant BUGIDs: 2487654	Thorsten Kukuk	2009-03-25	4	-30/+33
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-03-25 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_mkhomedir/pam_mkhomedir.c: Make option handling reentrant (#2487654) (_pam_parse): Fix umask option. * modules/pam_unix/passverify.c: Fix typo. * modules/pam_issue/pam_issue.c: Fix compiler warning. * modules/pam_ftp/pam_ftp.c: Likewise.
*	Relevant BUGIDs:	Tomas Mraz	2009-03-24	2	-3/+27
\| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-03-24 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/passverify.c(save_old_password): Call fflush() and fsync(). (unix_update_passwd, unix_update_shadow): Likewise. * modules/pam_pwhistory/opasswd.c(save_old_password): Likewise.
*	Relevant BUGIDs:	Tomas Mraz	2009-03-03	4	-3/+15
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-03-03 Tomas Mraz <t8m@centrum.cz> * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Test for abnormal exit of the helper binary. * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary): Likewise. * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise. * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Likewise.
*	Relevant BUGIDs:	Tomas Mraz	2009-02-27	9	-116/+210
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: new feature Commit summary: --------------- 2009-02-27 Tomas Mraz <t8m@centrum.cz> * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Replace signal() with sigaction(). * modules/pam_namespace/pam_namespace.c(inst_init, cleanup_tmpdirs): Likewise. * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Likewise. * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary): Likewise. * modules/pam_unix/passverify.c(su_sighandler): Likewise. * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise. * modules/pam_tally2/Makefile.am: Link the pam_tally2 app to libpam for auxiliary functions. * modules/pam_tally2/pam_tally2.8.xml: Drop non-existing no_reset option. Document new serialize option. * modules/pam_tally2/pam_tally2.c: Add support for the new serialize option. (_cleanup, tally_set_data, tally_get_data): Add tally file handle to tally PAM data. Needed for fcntl() locking. (get_tally): Use low level file access instead of stdio buffered FILE. If serialize option is used lock the tally file access. (set_tally, tally_bump, tally_reset): Use low level file access instead of stdio buffered FILE. Close the file handle only when it is not owned by PAM data. (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt): Pass the tally file handle to tally_set_data(). Get it from tally_get_data(). (main): Use low level file access instead of stdio buffered FILE.
*	Relevant BUGIDs: debian#514437 rhbz#487216	Tomas Mraz	2009-02-26	2	-1/+12
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-02-26 Tomas Mraz <t8m@centrum.cz> * xtests/Makefile.am: Add tst-pam_unix4. * xtests/tst-pam_unix4.c: New test for password change and shadow min days limit. * xtests/tst-pam_unix4.pamd: Likewise. * xtests/tst-pam_unix4.sh: Likewise. * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Ignore PAM_AUTHTOK_ERR on shadow verification. * modules/pam_unix/passverify.c (check_shadow_expiry): Return PAM_AUTHTOK_ERR if sp_min limit for password change is defied.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-02-25	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2009-02-25 Thorsten Kukuk <kukuk@thkukuk.de> * libpam/pam_misc.c (_pam_StrTok): Use unsigned char instead of int. Reported by Marcus Granado. * tests/Makefile.am (TESTS): Add tst-pam_mkargv. * tests/tst-pam_mkargv.c (main): Test case for _pam_mkargv. * po/de.po: Update fuzzy translations.
*	Relevant BUGIDs:	Tomas Mraz	2009-02-25	1	-79/+75
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: new feature Commit summary: --------------- 2009-02-25 Tomas Mraz <t8m@centrum.cz> * xtests/access.conf: Add a line for name resolution test case. * xtests/tst-pam_access4.c (main): Set PAM_RHOST for testing the LOCAL keyword. Add a test case for name resolution. * modules/pam_access/pam_access.c (from_match): Move name resolution to network_netmask_match(). (network_netmask_match): Do a name resolution of the origin only if matching against a real network/netmask.
*	Relevant BUGIDs:	Thorsten Kukuk	2009-02-20	2	-6/+88
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: enhancement Commit summary: --------------- 2009-02-20 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_limits/limits.conf.5.xml: Document that the kernel can refuse values out of range for the local system. * modules/pam_limits/pam_limits.c (setup_limits): Log if setrlimit fails.
*	Relevant BUGIDs: rhbz#476784	Tomas Mraz	2009-01-19	4	-343/+590
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: new feature Commit summary: --------------- 2009-01-19 Tomas Mraz <t8m@centrum.cz> * modules/pam_mkhomedir/Makefile.am: Add mkhomedir_helper. * modules/pam_mkhomedir/mkhomedir_helper.8.xml: New file. Manual page for mkhomedir_helper. * modules/pam_mkhomedir/mkhomedir_helper.c: New file. Source for mkhomedir_helper. Most of the code moved from pam_mkhomedir.c. * modules/pam_mkhomedir/pam_mkhomedir.c (_pam_parse): Do not convert umask to integer. (rec_mkdir): Moved to mkhomedir_helper.c. (create_homedir): Just exec the helper. (pam_sm_open_session): Improve logging.
*	Relevant BUGIDs:	Thorsten Kukuk	2008-12-18	2	-11/+10
\| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2008-12-18 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_pwhistory/pam_pwhistory.c (parse_option): Rename type= option to authtok_type= (because of pam_get_authtok). * modules/pam_pwhistory/pam_pwhistory.8.xml: Likewise.
*	Relevant BUGIDs:	Tomas Mraz	2008-12-17	1	-4/+20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: new feature Commit summary: --------------- 2008-12-17 Tomas Mraz <t8m@centrum.cz> * modules/pam_tty_audit/pam_tty_audit.c (pam_sm_open_session): Do not abort on unknown option. Avoid double free of old_status. (pam_sm_close_session): Use LOG_DEBUG for restored status message. * configure.in: Test for getseuser(). * modules/pam_selinux/pam_selinux.c (pam_sm_open_session): Call getseuser() instead of getseuserbyname() if the function is available.
*	Relevant BUGIDs:	Tomas Mraz	2008-12-17	1	-3/+2
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2008-12-17 Tomas Mraz <t8m@centrum.cz> * modules/pam_tty_audit/pam_tty_audit.c (pam_sm_open_session): Do not abort on unknown option. Avoid double free of old_status. (pam_sm_close_session): Use LOG_DEBUG for restored status message.
*	Relevant BUGIDs:	Tomas Mraz	2008-12-12	2	-3/+3
\| \| \| \| \| \| \| \| \| \| \| \|	Purpose of commit: bugfix Commit summary: --------------- 2008-12-12 Tomas Mraz <t8m@centrum.cz> * modules/pam_tally2/pam_tally2.c (get_tally): Test for EACCES instead of EPERM. * modules/pam_tally2/pam_tally2.8.xml: Fix documentation.