Tomáš Mráz
790525d4ab
- review
...
- don't free/malloc when unnecessary
2007-09-19 19:25:24 +00:00
Tomáš Mráz
43c3a5a46e
- add pam_selinux_permit module
...
- pam_succeed_if: fix in operator (#295151 )
2007-09-19 18:11:42 +00:00
Tomáš Mráz
ac8e934c7b
- when SELinux enabled always run the helper binary instead of direct
...
shadow access (#293181 )
2007-09-18 20:23:57 +00:00
Tomáš Mráz
66eb83163f
- wrong orig code
2007-08-24 13:35:26 +00:00
Tomáš Mráz
9e1a698edf
- do not ask for blank password when SELinux confined ( #254044 )
...
- initialize homedirs in namespace init script (original patch by dwalsh)
2007-08-24 13:15:01 +00:00
Tomáš Mráz
a47d5ca5e4
- multifunction scanner device support ( #251468 )
2007-08-22 19:30:39 +00:00
Tomáš Mráz
73ea19b4f7
- most devices are now handled by HAL and not pam_console (patch by davidz)
...
- license tag fix
2007-08-22 18:03:12 +00:00
Tomáš Mráz
81e34ba414
- fix auth regression when uid != 0 from previous build ( #251804 )
2007-08-13 09:05:04 +00:00
Tomáš Mráz
ecf62ebc17
- make db4 build with new glibc
2007-08-06 14:57:26 +00:00
Tomáš Mráz
8fa0463a67
- updated db4 to 4.6.18 ( #249740 )
...
- added user and new instance parameters to namespace init
- document the new features of pam_namespace
- do not log an audit error when uid != 0 (#249870 )
2007-08-06 12:31:50 +00:00
Jeremy Katz
f6d27e9e3a
- rebuild for toolchain bug
2007-07-25 17:52:58 +00:00
Tomáš Mráz
3f1e71cada
- drop the merged patches
2007-07-23 19:07:42 +00:00
Tomáš Mráz
e632831daf
- signature
2007-07-23 18:51:25 +00:00
Tomáš Mráz
9ba69a733e
- removed merged patches
2007-07-23 18:48:43 +00:00
Tomáš Mráz
6c6453458a
- upgrade to latest upstream version
...
- add some firewire devices to default console perms (#240770 )
2007-07-23 18:46:31 +00:00
Tomáš Mráz
8e3ad05d67
- oops wrong patch version
2007-06-04 14:24:16 +00:00
Tomáš Mráz
09b44afcb6
- pam_namespace: better document behavior on failure ( #237249 )
...
- pam_unix: split out passwd change to a new helper binary (#236316 )
- pam_namespace: add support for temporary logons (#241226 )
2007-06-04 14:22:15 +00:00
Tomáš Mráz
33d3c087e3
- pam_selinux: improve context change auditing ( #234781 )
...
- pam_namespace: fix parsing config file with unknown users (#234513 )
2007-04-13 16:14:38 +00:00
Tomáš Mráz
a28e30cbc4
- pam_console: always decrement use count ( #230823 )
...
- pam_namespace: use raw context for poly dir name (#227345 )
- pam_namespace: truncate long poly dir name (append hash) (#230120 )
- we don't patch any po files anymore
2007-03-23 11:02:35 +00:00
Tomáš Mráz
71ab958a92
- correctly relabel tty in the default case ( #229542 )
...
- pam_unix: cleanup of bigcrypt support
- pam_unix: allow modification of '*' passwords to root
2007-02-21 20:32:28 +00:00
Tomáš Mráz
504a3315ce
- more X displays as consoles ( #227462 )
2007-02-06 15:58:27 +00:00
Tomáš Mráz
bbd6bf031f
- upgrade to new upstream version resolving CVE-2007-0003
...
- pam_namespace: unmount poly dir for override users
2007-01-24 12:14:29 +00:00
Tomáš Mráz
d1daca3136
- add back min salt length requirement which was erroneously removed
...
upstream
2007-01-22 13:11:10 +00:00
Tomáš Mráz
0b9c1bae67
- upgrade to new upstream version
...
- drop pam_stack module as it is obsolete
- some changes to silence rpmlint
2007-01-19 17:42:21 +00:00
Tomáš Mráz
8a453fc0be
- properly include /var/log/faillog and tallylog as ghosts and create them
...
in post script (#209646 )
- update gmo files as we patch some po files (#218271 )
- add use_current_range option to pam_selinux (#220487 )
- improve the role selection in pam_selinux
- remove shortcut on Password: in ja locale (#218271 )
- revert to old euid and not ruid when setting euid in pam_keyinit
(#219486 )
- rename selinux-namespace patch to namespace-level
2007-01-16 20:14:28 +00:00
Daniel J Walsh
7ce306a7c7
- Fix selection of role
2007-01-03 19:18:27 +00:00
Tomáš Mráz
03d7f35c89
- autoreconf won't work with autoconf-2.61 as configure.in is not yet
...
adjusted for it
2006-11-30 13:00:48 +00:00
Tomáš Mráz
19a8f79ca1
- add select-context option to pam_selinux ( #213812 )
2006-11-30 09:40:03 +00:00
Tomáš Mráz
d589c9bdaf
- we don't need this yet
2006-11-13 21:15:30 +00:00
Tomáš Mráz
4f2fe36b29
- update internal db4 to 4.5.20 version
...
- move setgid before setuid in pam_keyinit (#212329 )
- make username check in pam_unix consistent with useradd (#212153 )
2006-11-13 21:05:40 +00:00
Tomáš Mráz
ab60a42b72
- add pam_namespace option no_unmount_on_close, required for newrole
2006-09-28 13:11:14 +00:00
Tomáš Mráz
355576d558
- silence pam_succeed_if in default system-auth ( #205067 )
...
- round the pam_timestamp_check sleep up to wake up at the start of the
wallclock second (#205068 )
2006-09-04 14:31:09 +00:00
Tomáš Mráz
10ddab4186
- upgrade to new upstream version, as there are mostly bugfixes except
...
improved documentation
- add support for session and password service for pam_access and
pam_succeed_if
- system-auth: skip session pam_unix for crond service
2006-08-31 20:51:59 +00:00
Daniel J Walsh
e3f2d52037
- Add new setkeycreatecon call to pam_selinux to make sure keyring has
...
correct context
2006-08-10 20:26:54 +00:00
Tomáš Mráz
685a1895f3
- revoke keyrings properly when pam_keyinit called as root ( #201048 )
...
- pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails
(#197748 )
2006-08-10 13:34:26 +00:00
Tomáš Mráz
0b27f99e23
- revoke keyrings properly when pam_keyinit called more than once ( #201048 )
...
patch by David Howells
2006-08-02 18:08:23 +00:00
Tomáš Mráz
3e0c7af627
- don't log pam_keyinit debug messages by default ( #199783 )
2006-07-21 22:36:15 +00:00
Tomáš Mráz
f81d37360c
- drop ainit from console.handlers ( #199561 )
2006-07-21 14:26:46 +00:00
Tomáš Mráz
2851cbe631
- drop ainit from console.handlers ( #199561 )
2006-07-21 14:22:56 +00:00
Tomáš Mráz
fce253b7c0
- don't report error in pam_selinux for nonexistent tty ( #188722 )
...
- add pam_keyinit to the default system-auth file (#198623 )
2006-07-17 11:03:29 +00:00
Jesse Keating
d649923c46
bumped for rebuild
2006-07-12 07:37:04 +00:00
Tomáš Mráz
95ebf27f94
- the patch should be applied with -p0
2006-07-03 13:19:35 +00:00
Tomáš Mráz
e019bcd126
- fixed network match in pam_access (patch by Dan Yefimov)
2006-07-03 12:45:13 +00:00
Tomáš Mráz
4fea4c98d9
- namespace.init was missing from EXTRA_DIST
2006-06-30 10:06:09 +00:00
Tomáš Mráz
00eddc0974
- updated to a new upstream release
...
- added service as value to be matched and list matching to pam_succeed_if
2006-06-30 09:20:33 +00:00
Tomáš Mráz
85a854521e
- a typo
2006-06-08 21:18:21 +00:00
Tomáš Mráz
da4d7fa8c5
- added buildrequires libtool
...
- fixed a few rpmlint warnings
2006-06-08 18:44:01 +00:00
Tomáš Mráz
7dffd3fb2d
- updated pam_namespace with latest patch by Janak Desai
...
- merged pam_namespace patches
2006-06-08 14:27:54 +00:00
Tomáš Mráz
e99dd3962b
- actually don't link to libssl as it is not used ( #191915 )
2006-05-24 09:05:18 +00:00
Tomáš Mráz
fa8c14fa63
- use md5 implementation from pam_unix in pam_namespace
...
- pam_namespace should call setexeccon only when selinux is enabled
2006-05-18 15:50:01 +00:00