rpms/pam
7
0
Fork 0
Code Issues Pull Requests Releases Activity
182 Commits 7 Branches 50 Tags 1.7 MiB
8938fa9767
Commit Graph

182 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tomáš Mráz
8938fa9767 - if shadow is readable for an user do not prevent him from authenticating 
any user with unix_chkpwd (#433459)
- call audit from unix_chkpwd when appropriate
 2008-02-22 15:49:55 +00:00
Tomáš Mráz
0533865ad8 - new upstream release 
- add default soft limit for nproc of 1024 to prevent accidental fork bombs
    (#432903)
 2008-02-15 17:27:28 +00:00
Tomáš Mráz
717cfde74b - allow the package to build without SELinux and audit support (#431415) 
- macro usage cleanup
 2008-02-04 13:06:18 +00:00
Tomáš Mráz
b6b1e29706 - test for setkeycreatecon correctly 
- add exclusive login mode of operation to pam_selinux_permit (original
    patch by Dan Walsh)
 2008-01-28 17:59:35 +00:00
Tomáš Mráz
de90b38383 - libpam.so is in libdir 2008-01-23 07:43:33 +00:00
Tomáš Mráz
2badd4f116 - add auditing to pam_access, pam_limits, and pam_time 
- moved sanity testing code to check script
 2008-01-22 21:52:13 +00:00
Tomáš Mráz
392622e8de - merge review fixes (#226228) 2008-01-14 12:49:56 +00:00
Tomáš Mráz
c5d3ee3a3f - support for sha256 and sha512 password hashes 
- account expiry checks moved to unix_chkpwd helper
 2008-01-08 18:56:11 +00:00
Tomáš Mráz
b99939ffb4 - wildcard match support in pam_tty_audit (by Miloslav Trmač) 2008-01-02 10:42:27 +00:00
Tomáš Mráz
a36aa37b04 - add pam_tty_audit module (#244352) - written by Miloslav Trmač 2007-11-29 13:20:28 +00:00
Tomáš Mráz
9ae80944c1 - add substack support 2007-11-07 11:41:49 +00:00
Bill Nottingham
c735fd6aa6 makefile update to properly grab makefile.common 2007-10-15 19:12:34 +00:00
Tomáš Mráz
991484aaf4 - apply db4 patch correctly 2007-09-25 20:26:29 +00:00
Tomáš Mráz
00939f1c06 - update db4 to 4.6.19 (#274661) 2007-09-25 20:15:45 +00:00
Tomáš Mráz
36d9a1c73d - do not preserve contexts when copying skel and other namespace.init fixes 
(#298941)
- do not free memory sent to putenv (#231698)
 2007-09-21 14:08:14 +00:00
Tomáš Mráz
790525d4ab - review 
- don't free/malloc when unnecessary
 2007-09-19 19:25:24 +00:00
Tomáš Mráz
43c3a5a46e - add pam_selinux_permit module 
- pam_succeed_if: fix in operator (#295151)
 2007-09-19 18:11:42 +00:00
Tomáš Mráz
ac8e934c7b - when SELinux enabled always run the helper binary instead of direct 
shadow access (#293181)
 2007-09-18 20:23:57 +00:00
Tomáš Mráz
66eb83163f - wrong orig code 2007-08-24 13:35:26 +00:00
Tomáš Mráz
9e1a698edf - do not ask for blank password when SELinux confined (#254044) 
- initialize homedirs in namespace init script (original patch by dwalsh)
 2007-08-24 13:15:01 +00:00
Tomáš Mráz
a47d5ca5e4 - multifunction scanner device support (#251468) 2007-08-22 19:30:39 +00:00
Tomáš Mráz
73ea19b4f7 - most devices are now handled by HAL and not pam_console (patch by davidz) 
- license tag fix
 2007-08-22 18:03:12 +00:00
Tomáš Mráz
81e34ba414 - fix auth regression when uid != 0 from previous build (#251804) 2007-08-13 09:05:04 +00:00
Tomáš Mráz
ecf62ebc17 - make db4 build with new glibc 2007-08-06 14:57:26 +00:00
Tomáš Mráz
8fa0463a67 - updated db4 to 4.6.18 (#249740) 
- added user and new instance parameters to namespace init
- document the new features of pam_namespace
- do not log an audit error when uid != 0 (#249870)
 2007-08-06 12:31:50 +00:00
Jeremy Katz
f6d27e9e3a - rebuild for toolchain bug 2007-07-25 17:52:58 +00:00
Tomáš Mráz
3f1e71cada - drop the merged patches 2007-07-23 19:07:42 +00:00
Tomáš Mráz
e632831daf - signature 2007-07-23 18:51:25 +00:00
Tomáš Mráz
9ba69a733e - removed merged patches 2007-07-23 18:48:43 +00:00
Tomáš Mráz
6c6453458a - upgrade to latest upstream version 
- add some firewire devices to default console perms (#240770)
 2007-07-23 18:46:31 +00:00
Tomáš Mráz
8e3ad05d67 - oops wrong patch version 2007-06-04 14:24:16 +00:00
Tomáš Mráz
09b44afcb6 - pam_namespace: better document behavior on failure (#237249) 
- pam_unix: split out passwd change to a new helper binary (#236316)
- pam_namespace: add support for temporary logons (#241226)
 2007-06-04 14:22:15 +00:00
Tomáš Mráz
33d3c087e3 - pam_selinux: improve context change auditing (#234781) 
- pam_namespace: fix parsing config file with unknown users (#234513)
 2007-04-13 16:14:38 +00:00
Tomáš Mráz
a28e30cbc4 - pam_console: always decrement use count (#230823) 
- pam_namespace: use raw context for poly dir name (#227345)
- pam_namespace: truncate long poly dir name (append hash) (#230120)
- we don't patch any po files anymore
 2007-03-23 11:02:35 +00:00
Tomáš Mráz
71ab958a92 - correctly relabel tty in the default case (#229542) 
- pam_unix: cleanup of bigcrypt support
- pam_unix: allow modification of '*' passwords to root
 2007-02-21 20:32:28 +00:00
Tomáš Mráz
504a3315ce - more X displays as consoles (#227462) 2007-02-06 15:58:27 +00:00
Tomáš Mráz
bbd6bf031f - upgrade to new upstream version resolving CVE-2007-0003 
- pam_namespace: unmount poly dir for override users
 2007-01-24 12:14:29 +00:00
Tomáš Mráz
d1daca3136 - add back min salt length requirement which was erroneously removed 
upstream
 2007-01-22 13:11:10 +00:00
Tomáš Mráz
0b9c1bae67 - upgrade to new upstream version 
- drop pam_stack module as it is obsolete
- some changes to silence rpmlint
 2007-01-19 17:42:21 +00:00
Tomáš Mráz
8a453fc0be - properly include /var/log/faillog and tallylog as ghosts and create them 
in post script (#209646)
- update gmo files as we patch some po files (#218271)
- add use_current_range option to pam_selinux (#220487)
- improve the role selection in pam_selinux
- remove shortcut on Password: in ja locale (#218271)
- revert to old euid and not ruid when setting euid in pam_keyinit
    (#219486)
- rename selinux-namespace patch to namespace-level
 2007-01-16 20:14:28 +00:00
Daniel J Walsh
7ce306a7c7 - Fix selection of role 2007-01-03 19:18:27 +00:00
Tomáš Mráz
03d7f35c89 - autoreconf won't work with autoconf-2.61 as configure.in is not yet 
adjusted for it
 2006-11-30 13:00:48 +00:00
Tomáš Mráz
19a8f79ca1 - add select-context option to pam_selinux (#213812) 2006-11-30 09:40:03 +00:00
Tomáš Mráz
d589c9bdaf - we don't need this yet 2006-11-13 21:15:30 +00:00
Tomáš Mráz
4f2fe36b29 - update internal db4 to 4.5.20 version 
- move setgid before setuid in pam_keyinit (#212329)
- make username check in pam_unix consistent with useradd (#212153)
 2006-11-13 21:05:40 +00:00
Tomáš Mráz
ab60a42b72 - add pam_namespace option no_unmount_on_close, required for newrole 2006-09-28 13:11:14 +00:00
Tomáš Mráz
355576d558 - silence pam_succeed_if in default system-auth (#205067) 
- round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)
 2006-09-04 14:31:09 +00:00
Tomáš Mráz
10ddab4186 - upgrade to new upstream version, as there are mostly bugfixes except 
improved documentation
- add support for session and password service for pam_access and
    pam_succeed_if
- system-auth: skip session pam_unix for crond service
 2006-08-31 20:51:59 +00:00
Daniel J Walsh
e3f2d52037 - Add new setkeycreatecon call to pam_selinux to make sure keyring has 
correct context
 2006-08-10 20:26:54 +00:00
Tomáš Mráz
685a1895f3 - revoke keyrings properly when pam_keyinit called as root (#201048) 
- pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails
    (#197748)
 2006-08-10 13:34:26 +00:00