Nalin Dahyabhai
c835c2a921
- switch buildrequires: and requires: on e2fsprogs-devel into
...
buildrequires: and requires: on libss-devel, libcom_err-devel, per
sandeen on fedora-devel-list
2009-06-29 19:28:01 +00:00
Nalin Dahyabhai
f06a358eca
- split up so that sections of the tree which have their own configure
...
scripts preprocess their own man pages
2009-06-29 19:00:59 +00:00
Nalin Dahyabhai
612cb4a5ae
- call the macro correctly in appl/telnet
...
- use MSG_NOTICE rather than MSG_RESULT to note that we're using libselinux
2009-06-29 18:51:29 +00:00
Nalin Dahyabhai
36e46dc693
- note tracking numbers assigned by upstream RT
2009-06-26 22:08:03 +00:00
Nalin Dahyabhai
3f291ca045
- selinux labeling: use selabel_open() family of functions rather than
...
matchpathcon(), bail on it if attempting to get the mutex lock fails
2009-06-26 21:45:54 +00:00
Nalin Dahyabhai
6e77eee565
- merge in another hunk that we reported along with what was already in
...
here
2009-06-26 21:42:13 +00:00
Nalin Dahyabhai
7d63382d8d
- remove this, more or less implemented upstream
2009-06-26 21:40:10 +00:00
Nalin Dahyabhai
84ade2f840
- fix a type mismatch in krb5_copy_error_message()
...
- ftp: fix some odd use of strlen()
2009-06-26 21:36:54 +00:00
Nalin Dahyabhai
17bcf3db89
- fix a type mismatch
2009-06-26 21:35:41 +00:00
Nalin Dahyabhai
d7d96cfa8f
- correct some dubious use of strlen() in the ftp client
2009-06-26 21:35:25 +00:00
Nalin Dahyabhai
525e89b7fd
- note the original RT number
...
- use MSG_NOTICE rather than MSG_RESULT to announce that we're enabled
2009-06-23 20:58:07 +00:00
Nalin Dahyabhai
1d6f8b9bad
- compile with %%{?_smp_mflags} (Steve Grubb)
...
- drop the bit where we munge part of the error table header, as it's not
needed any more
2009-06-16 21:29:37 +00:00
Nalin Dahyabhai
aecce15d40
add and own %%{_libdir}/krb5/plugins/authdata
2009-06-05 15:18:29 +00:00
Nalin Dahyabhai
34072014a1
remove obsolete files
2009-06-04 22:38:18 +00:00
Nalin Dahyabhai
a6e25b4c5d
- put $prefix/sbin in everyone's $PATH, not just root's
2009-06-04 22:36:59 +00:00
Nalin Dahyabhai
fae1002a8e
- drop pam_krb5-specific settings which override library defaults
...
- drop v4-specific default_domain
2009-06-04 22:35:56 +00:00
Nalin Dahyabhai
9773673656
- drop command-line arguments which previously signalled v5-only
2009-06-04 22:34:40 +00:00
Nalin Dahyabhai
ddc65be424
- remove references to files which aren't there any more
2009-06-04 22:18:04 +00:00
Nalin Dahyabhai
eff2218c3a
- eliminate a compiler warning
2009-06-04 22:17:17 +00:00
Nalin Dahyabhai
f72d641eb4
- new source set
2009-06-04 22:15:04 +00:00
Nalin Dahyabhai
2f1613d440
- update to 1.7, second pass
2009-06-04 22:09:07 +00:00
Nalin Dahyabhai
259e2512e5
- fix a syntax error
2009-06-04 20:45:45 +00:00
Nalin Dahyabhai
379f28cb47
- also treat "nsAccountLock: TRUE" in directory entries as an indication of
...
an account having been disabled
2009-06-04 19:38:46 +00:00
Nalin Dahyabhai
55c161be92
- patch to label most files at create-time
2009-06-04 19:37:06 +00:00
Nalin Dahyabhai
8a5745ff76
- update of the PAM support patch
2009-06-04 19:35:17 +00:00
Nalin Dahyabhai
7520433037
- avoid double-logging in the servers by avoiding processing of the same
...
configuration file twice
2009-06-04 19:32:36 +00:00
Nalin Dahyabhai
f4932dde69
- suppress our indirect dependencies from the output of --libs, unless the
...
user also passed in the --deps flag
2009-06-04 19:30:50 +00:00
Nalin Dahyabhai
94d3c5951e
- try to be more resilient to comparisons of malformed principal structures
2009-06-04 19:29:44 +00:00
Nalin Dahyabhai
8c991219ab
- when we're not doing a recursive transfer, treat subdirectories as a
...
problem
2009-06-04 19:27:50 +00:00
Nalin Dahyabhai
6879d98ef2
- try to avoid locking up in rsh due to client and server blocking on
...
writes at the same time
2009-06-04 19:26:29 +00:00
Nalin Dahyabhai
0b6e153ff8
- use an in-memory ccache instead of an on-disk temporary to avoid
...
compile-time warnings about using mktemp()
2009-06-04 19:16:47 +00:00
Nalin Dahyabhai
dd70d4f4ef
- send the length of the file by printf()ing a long long instead of a long,
...
so that we don't break on large files on 32-bit machines
2009-06-04 19:15:24 +00:00
Nalin Dahyabhai
d067ec29b6
- link binaries to produce position-independent executables, and strip the
...
flags used to do so, and library path flags, from the output of
krb5-config
- install shared libraries with the execute bit set
- we used to override RPATH here, but configure takes --disable-rpath now
2009-06-04 19:09:04 +00:00
Nalin Dahyabhai
bc603de2a8
- forward-port long-present out-of-tree patch to support "ANY" keytab type,
...
which takes as its residual a comma-separated list of keytab names and
will search them all in turn when looking for a specific key
2009-06-04 19:05:20 +00:00
Nalin Dahyabhai
3c1272ff63
- add an auth stack to ksu's PAM configuration so that pam_setcred() calls
...
won't just fail
2009-05-19 23:21:48 +00:00
Nalin Dahyabhai
06c77ea1cd
- make PAM support for ksu also set PAM_RUSER
2009-05-11 18:19:08 +00:00
Nalin Dahyabhai
df43b1e2b6
yeah, actually bump the release number
2009-04-23 22:51:25 +00:00
Nalin Dahyabhai
5ebd815122
- extend PAM support to ksu: perform account and session management for the
...
target user
- pull up and merge James Leddy's changes to also set PAM_RHOST in
PAM-aware network-facing services
2009-04-23 22:43:26 +00:00
Nalin Dahyabhai
d3b2b69619
- fix a typo in a ksu error message (Marek Mahut)
2009-04-21 18:46:52 +00:00
Nalin Dahyabhai
27c8414969
- okay, finally remove this
2009-04-21 18:46:37 +00:00
Nalin Dahyabhai
8614c0dcd0
- "rev" works the way the test suite expects now, so don't disable tests
...
that use it
2009-04-21 18:46:16 +00:00
Nalin Dahyabhai
f0389e0488
note why we don't just run make check here
2009-04-20 21:15:12 +00:00
Nalin Dahyabhai
41d635cc23
- add empty Default-Start: statements to the init scripts
2009-04-20 20:33:32 +00:00
Nalin Dahyabhai
724545eab6
- add LSB-style informational headers to the init scripts
2009-04-20 20:32:02 +00:00
Nalin Dahyabhai
980855a07a
- explicitly run the pdf generation script using sh (part of #225974 )
2009-04-17 13:29:41 +00:00
Nalin Dahyabhai
f51ed46fff
- remove obsolete patch for CVE-2009-0845
...
- add patches for read overflow and null pointer dereference in the
implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
- add patch for attempt to free uninitialized pointer in libkrb5
(CVE-2009-0846)
- add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
2009-04-07 18:16:28 +00:00
Nalin Dahyabhai
ebb2e9030e
- add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
2009-04-07 18:15:43 +00:00
Nalin Dahyabhai
0d81cc8c03
- add patch for attempt to free uninitialized pointer in libkrb5
...
(CVE-2009-0846)
2009-04-07 18:15:12 +00:00
Nalin Dahyabhai
b28fb4b7da
- add patches for read overflow and null pointer dereference in the
...
implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
2009-04-07 18:14:43 +00:00
Nalin Dahyabhai
d43a03520f
- make the kpropd init script treat reload as restart (part of #225974 )
2009-04-06 20:33:44 +00:00