Commit Graph

23 Commits

Author SHA1 Message Date
Iker Pedrosa c06f60cfdc pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365 2024-02-13 03:32:42 +00:00
Iker Pedrosa cc494428b0 - libpam: use getlogin() from libc and not utmp
- pam_access: handle hostnames in access.conf

Resolves: RHEL-16727
Resolves: RHEL-22300

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-01-26 08:48:08 +01:00
Iker Pedrosa f955ee172d pam_faillock: create tallydir before creating tallyfile
Resolves: RHEL-20943

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-01-08 11:22:04 +01:00
Iker Pedrosa 2a8b5fe8cc - libpam: use close_range() to close file descriptors
- fix formatting of audit messages

Resolves: RHEL-5099
Resolves: RHEL-5100

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-11-10 10:48:17 +01:00
Iker Pedrosa 773403c3b7 pam_misc: make length of misc_conv() configurable and set to 4096
Resolves: #2215007

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-06-26 09:18:55 +02:00
Iker Pedrosa 9c94f52d3d Several PAM fixes
- pam_lastlog: check localtime_r() return value
- pam_faillock: clarify missing user faillock files after reboot
- pam_faillock: avoid logging an erroneous consecutive login failure message

Resolves: #2130124
Resolves: #2126632
Resolves: #2126648

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-11-29 12:15:15 +01:00
Iker Pedrosa 158ed61997 pam_pwhistory: load configuration from file
Resolves: https://issues.redhat.com/browse/RHELX-74

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-09-28 14:25:07 +02:00
Iker Pedrosa 0145802b1d pam_usertype: only use SYS_UID_MAX for system users
Resolves: #2078421

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-06-23 11:34:08 +02:00
Iker Pedrosa dbd1a76874 faillock: load configuration from file
Resolves: #2061698

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-05-25 16:28:54 +02:00
Iker Pedrosa aba8c1f8a4 pam_keyinit: thread-safe implementation
Resolves: #2061696

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-05-17 10:41:26 +02:00
Iker Pedrosa d0e126a9a6 pam_limits: "Unlimited" is not a valid value for RLIMIT_NOFILE
Resolves: #1989900

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-12-02 17:04:01 +01:00
Mohan Boddu aaa21bd3d9 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-09 22:48:24 +00:00
Iker Pedrosa 2b70f50adf Fix issues detected by covscan tool
Resolves: #1938835

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-07-14 17:06:42 +02:00
Iker Pedrosa 64f2f990fa pam_timestamp: openssl hmac authentication
Resolves: #1934975
2021-07-02 13:20:26 +02:00
Iker Pedrosa eb9679aa50 Disable nis support.
Resolves: #1942373
2021-04-22 12:36:38 +02:00
Mohan Boddu c0dc140413 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 02:47:07 +00:00
DistroBaker 0fcd04fec7 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/pam.git#ada898394e090a3207e1da14e3a31b3afbf547da
2021-02-03 20:21:30 +00:00
DistroBaker de2c600c24 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/pam.git#a880e5be1ef48134db9c54d44c399bedff638db4
2020-11-30 15:29:48 +00:00
DistroBaker 2bdc25a498 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/pam.git#15ec0223edf65e5f4ae94e790912ac879c9cab98
2020-11-26 09:26:40 +00:00
Troy Dawson 4d6cc0adfc RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/pam#bcd73c678e2247f96db66d05037478e8fbe593e6
2020-11-16 13:17:36 -08:00
DistroBaker ed4e70950f Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/pam.git#f35e0f9f106bdbb3ef10319d8876b7c436b000ee
2020-11-06 08:49:25 +00:00
DistroBaker 35569b9b83 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/pam.git#75940340ad3cd336f66d68188d95d43b45233fa4
2020-10-27 21:41:33 +01:00
Petr Šabata 6165e91cb4 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/pam#767f761a2d5d99b87ebc44c4ad751467b46b1d97
2020-10-15 22:44:37 +02:00