Commit Graph

  • 1ba40631bf - update pam-redhat module tarball - update internal db4 Tomáš Mráz 2008-02-28 22:44:06 +0000
  • 8938fa9767 - if shadow is readable for an user do not prevent him from authenticating any user with unix_chkpwd (#433459) - call audit from unix_chkpwd when appropriate Tomáš Mráz 2008-02-22 15:49:55 +0000
  • 0533865ad8 - new upstream release - add default soft limit for nproc of 1024 to prevent accidental fork bombs (#432903) Tomáš Mráz 2008-02-15 17:27:28 +0000
  • 717cfde74b - allow the package to build without SELinux and audit support (#431415) - macro usage cleanup Tomáš Mráz 2008-02-04 13:06:18 +0000
  • b6b1e29706 - test for setkeycreatecon correctly - add exclusive login mode of operation to pam_selinux_permit (original patch by Dan Walsh) Tomáš Mráz 2008-01-28 17:59:35 +0000
  • de90b38383 - libpam.so is in libdir Tomáš Mráz 2008-01-23 07:43:33 +0000
  • 2badd4f116 - add auditing to pam_access, pam_limits, and pam_time - moved sanity testing code to check script Tomáš Mráz 2008-01-22 21:52:13 +0000
  • 392622e8de - merge review fixes (#226228) Tomáš Mráz 2008-01-14 12:49:56 +0000
  • c5d3ee3a3f - support for sha256 and sha512 password hashes - account expiry checks moved to unix_chkpwd helper Tomáš Mráz 2008-01-08 18:56:11 +0000
  • b99939ffb4 - wildcard match support in pam_tty_audit (by Miloslav Trmač) Tomáš Mráz 2008-01-02 10:42:27 +0000
  • a36aa37b04 - add pam_tty_audit module (#244352) - written by Miloslav Trmač Tomáš Mráz 2007-11-29 13:20:28 +0000
  • 9ae80944c1 - add substack support Tomáš Mráz 2007-11-07 11:41:49 +0000
  • c735fd6aa6 makefile update to properly grab makefile.common Bill Nottingham 2007-10-15 19:12:34 +0000
  • 991484aaf4 - apply db4 patch correctly Tomáš Mráz 2007-09-25 20:26:29 +0000
  • 00939f1c06 - update db4 to 4.6.19 (#274661) Tomáš Mráz 2007-09-25 20:15:45 +0000
  • 36d9a1c73d - do not preserve contexts when copying skel and other namespace.init fixes (#298941) - do not free memory sent to putenv (#231698) Tomáš Mráz 2007-09-21 14:08:14 +0000
  • 790525d4ab - review - don't free/malloc when unnecessary Tomáš Mráz 2007-09-19 19:25:24 +0000
  • 43c3a5a46e - add pam_selinux_permit module - pam_succeed_if: fix in operator (#295151) Tomáš Mráz 2007-09-19 18:11:42 +0000
  • ac8e934c7b - when SELinux enabled always run the helper binary instead of direct shadow access (#293181) Tomáš Mráz 2007-09-18 20:23:57 +0000
  • 66eb83163f - wrong orig code Tomáš Mráz 2007-08-24 13:35:26 +0000
  • 9e1a698edf - do not ask for blank password when SELinux confined (#254044) - initialize homedirs in namespace init script (original patch by dwalsh) Tomáš Mráz 2007-08-24 13:15:01 +0000
  • a47d5ca5e4 - multifunction scanner device support (#251468) Tomáš Mráz 2007-08-22 19:30:39 +0000
  • 73ea19b4f7 - most devices are now handled by HAL and not pam_console (patch by davidz) - license tag fix Tomáš Mráz 2007-08-22 18:03:12 +0000
  • 81e34ba414 - fix auth regression when uid != 0 from previous build (#251804) Tomáš Mráz 2007-08-13 09:05:04 +0000
  • ecf62ebc17 - make db4 build with new glibc Tomáš Mráz 2007-08-06 14:57:26 +0000
  • 8fa0463a67 - updated db4 to 4.6.18 (#249740) - added user and new instance parameters to namespace init - document the new features of pam_namespace - do not log an audit error when uid != 0 (#249870) Tomáš Mráz 2007-08-06 12:31:50 +0000
  • f6d27e9e3a - rebuild for toolchain bug Jeremy Katz 2007-07-25 17:52:58 +0000
  • 3f1e71cada - drop the merged patches Tomáš Mráz 2007-07-23 19:07:42 +0000
  • e632831daf - signature Tomáš Mráz 2007-07-23 18:51:25 +0000
  • 9ba69a733e - removed merged patches Tomáš Mráz 2007-07-23 18:48:43 +0000
  • 6c6453458a - upgrade to latest upstream version - add some firewire devices to default console perms (#240770) Tomáš Mráz 2007-07-23 18:46:31 +0000
  • 8e3ad05d67 - oops wrong patch version Tomáš Mráz 2007-06-04 14:24:16 +0000
  • 09b44afcb6 - pam_namespace: better document behavior on failure (#237249) - pam_unix: split out passwd change to a new helper binary (#236316) - pam_namespace: add support for temporary logons (#241226) Tomáš Mráz 2007-06-04 14:22:15 +0000
  • 33d3c087e3 - pam_selinux: improve context change auditing (#234781) - pam_namespace: fix parsing config file with unknown users (#234513) Tomáš Mráz 2007-04-13 16:14:38 +0000
  • a28e30cbc4 - pam_console: always decrement use count (#230823) - pam_namespace: use raw context for poly dir name (#227345) - pam_namespace: truncate long poly dir name (append hash) (#230120) - we don't patch any po files anymore Tomáš Mráz 2007-03-23 11:02:35 +0000
  • 71ab958a92 - correctly relabel tty in the default case (#229542) - pam_unix: cleanup of bigcrypt support - pam_unix: allow modification of '*' passwords to root Tomáš Mráz 2007-02-21 20:32:28 +0000
  • 504a3315ce - more X displays as consoles (#227462) Tomáš Mráz 2007-02-06 15:58:27 +0000
  • bbd6bf031f - upgrade to new upstream version resolving CVE-2007-0003 - pam_namespace: unmount poly dir for override users Tomáš Mráz 2007-01-24 12:14:29 +0000
  • d1daca3136 - add back min salt length requirement which was erroneously removed upstream Tomáš Mráz 2007-01-22 13:11:10 +0000
  • 0b9c1bae67 - upgrade to new upstream version - drop pam_stack module as it is obsolete - some changes to silence rpmlint Tomáš Mráz 2007-01-19 17:42:21 +0000
  • 8a453fc0be - properly include /var/log/faillog and tallylog as ghosts and create them in post script (#209646) - update gmo files as we patch some po files (#218271) - add use_current_range option to pam_selinux (#220487) - improve the role selection in pam_selinux - remove shortcut on Password: in ja locale (#218271) - revert to old euid and not ruid when setting euid in pam_keyinit (#219486) - rename selinux-namespace patch to namespace-level Tomáš Mráz 2007-01-16 20:14:28 +0000
  • 7ce306a7c7 - Fix selection of role Daniel J Walsh 2007-01-03 19:18:27 +0000
  • 03d7f35c89 - autoreconf won't work with autoconf-2.61 as configure.in is not yet adjusted for it Tomáš Mráz 2006-11-30 13:00:48 +0000
  • 19a8f79ca1 - add select-context option to pam_selinux (#213812) Tomáš Mráz 2006-11-30 09:40:03 +0000
  • d589c9bdaf - we don't need this yet Tomáš Mráz 2006-11-13 21:15:30 +0000
  • 4f2fe36b29 - update internal db4 to 4.5.20 version - move setgid before setuid in pam_keyinit (#212329) - make username check in pam_unix consistent with useradd (#212153) Tomáš Mráz 2006-11-13 21:05:40 +0000
  • ab60a42b72 - add pam_namespace option no_unmount_on_close, required for newrole Tomáš Mráz 2006-09-28 13:11:14 +0000
  • 355576d558 - silence pam_succeed_if in default system-auth (#205067) - round the pam_timestamp_check sleep up to wake up at the start of the wallclock second (#205068) Tomáš Mráz 2006-09-04 14:31:09 +0000
  • 10ddab4186 - upgrade to new upstream version, as there are mostly bugfixes except improved documentation - add support for session and password service for pam_access and pam_succeed_if - system-auth: skip session pam_unix for crond service Tomáš Mráz 2006-08-31 20:51:59 +0000
  • e3f2d52037 - Add new setkeycreatecon call to pam_selinux to make sure keyring has correct context Daniel J Walsh 2006-08-10 20:26:54 +0000
  • 685a1895f3 - revoke keyrings properly when pam_keyinit called as root (#201048) - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748) Tomáš Mráz 2006-08-10 13:34:26 +0000
  • 0b27f99e23 - revoke keyrings properly when pam_keyinit called more than once (#201048) patch by David Howells Tomáš Mráz 2006-08-02 18:08:23 +0000
  • 3e0c7af627 - don't log pam_keyinit debug messages by default (#199783) Tomáš Mráz 2006-07-21 22:36:15 +0000
  • f81d37360c - drop ainit from console.handlers (#199561) Tomáš Mráz 2006-07-21 14:26:46 +0000
  • 2851cbe631 - drop ainit from console.handlers (#199561) Tomáš Mráz 2006-07-21 14:22:56 +0000
  • fce253b7c0 - don't report error in pam_selinux for nonexistent tty (#188722) - add pam_keyinit to the default system-auth file (#198623) Tomáš Mráz 2006-07-17 11:03:29 +0000
  • d649923c46 bumped for rebuild Jesse Keating 2006-07-12 07:37:04 +0000
  • 95ebf27f94 - the patch should be applied with -p0 Tomáš Mráz 2006-07-03 13:19:35 +0000
  • e019bcd126 - fixed network match in pam_access (patch by Dan Yefimov) Tomáš Mráz 2006-07-03 12:45:13 +0000
  • 4fea4c98d9 - namespace.init was missing from EXTRA_DIST Tomáš Mráz 2006-06-30 10:06:09 +0000
  • 00eddc0974 - updated to a new upstream release - added service as value to be matched and list matching to pam_succeed_if Tomáš Mráz 2006-06-30 09:20:33 +0000
  • 85a854521e - a typo Tomáš Mráz 2006-06-08 21:18:21 +0000
  • da4d7fa8c5 - added buildrequires libtool - fixed a few rpmlint warnings Tomáš Mráz 2006-06-08 18:44:01 +0000
  • 7dffd3fb2d - updated pam_namespace with latest patch by Janak Desai - merged pam_namespace patches Tomáš Mráz 2006-06-08 14:27:54 +0000
  • e99dd3962b - actually don't link to libssl as it is not used (#191915) Tomáš Mráz 2006-05-24 09:05:18 +0000
  • fa8c14fa63 - use md5 implementation from pam_unix in pam_namespace - pam_namespace should call setexeccon only when selinux is enabled Tomáš Mráz 2006-05-18 15:50:01 +0000
  • 63f5c77f8b - don't build hmactest in pam_timestamp so openssl-devel is not required - add missing buildrequires (#191915) Tomáš Mráz 2006-05-16 17:06:29 +0000
  • 0730695ea0 - pam_console_apply shouldn't access /var when called with -r (#191401) - actually apply the large-uid patch Tomáš Mráz 2006-05-16 16:12:18 +0000
  • fda1b40256 - new module pam_exec Tomáš Mráz 2006-05-10 14:43:55 +0000
  • fbfca3562b - upgrade to new upstream version - make pam_console_apply not dependent on glib - support large uids in pam_tally, pam_tally2 Tomáš Mráz 2006-05-10 14:16:34 +0000
  • 5002e23046 - add namespace.init to %files Tomáš Mráz 2006-05-04 11:53:08 +0000
  • 94d78f5a6d - the namespace instance init script is now in /etc/security (#190148) - pam_namespace: added missing braces (#190026) - pam_tally(2): never call fclose twice on the same FILE (from upstream) Tomáš Mráz 2006-05-04 11:51:03 +0000
  • 4f1df63a4d - fixed console device class for irda (#189966) - make pam_console_apply fail gracefully when a class is missing Tomáš Mráz 2006-04-26 11:56:48 +0000
  • 54e490e814 - added pam_namespace module written by Janak Desai (per-user /tmp support) - new pam-redhat modules version Tomáš Mráz 2006-04-25 14:53:39 +0000
  • 48968f9a9f - added try_first_pass option to pam_cracklib - use try_first_pass for pam_unix and pam_cracklib in system-auth (#182350) Tomáš Mráz 2006-02-24 10:46:47 +0000
  • 222bbd42b7 bump for bug in double-long on ppc(64) Jesse Keating 2006-02-11 04:55:08 +0000
  • 65811c5fcf bump for new gcc/glibc Jesse Keating 2006-02-07 13:23:11 +0000
  • 46d6d056ab - new upstream version - updated db4 to 4.3.29 - added module pam_tally2 with auditing support - added manual pages for system-auth and config-util (#179584) Tomáš Mráz 2006-02-03 12:41:29 +0000
  • 05cc723970 - remove 'initscripts' dependency (#176508) - update pam-redhat modules, merged patches Tomáš Mráz 2006-01-03 16:23:10 +0000
  • 9c00b5da67 - fix dangling symlinks in -devel (#175929) - link libaudit only where necessary - actually compile in audit support Tomáš Mráz 2005-12-16 15:20:02 +0000
  • f06eb03db8 - support netgroup matching in pam_succeed_if - upgrade to new release - drop pam_pwdb as it was obsolete long ago - we don't build static libraries anymore Tomáš Mráz 2005-12-15 23:47:42 +0000
  • 9b4988bee0 gcc update bump Jesse Keating 2005-12-09 22:42:36 +0000
  • a74a5d22a6 - pam_stack is deprecated - log its usage Tomáš Mráz 2005-11-15 14:07:51 +0000
  • ea087a7d8d - forgot to update requirements on audit-libs Tomáš Mráz 2005-10-26 22:49:36 +0000
  • 30c2fd8c2e - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if run as root (#168181) - link pam_loginuid to libaudit - support no tty in pam_access (#170467) - updated audit patch (by Steve Grubb) - the previous pam_selinux change was not applied properly - pam_xauth: look for the xauth binary in multiple directories (#171164) Tomáš Mráz 2005-10-26 22:27:20 +0000
  • c678c06cf7 - Eliminate multiple in pam_selinux Daniel J Walsh 2005-10-26 19:23:04 +0000
  • dc2e11c86b - Eliminate fail over for getseuserbyname call Daniel J Walsh 2005-10-18 15:41:53 +0000
  • cf7b021d49 - Add getseuserbyname call for SELinux MCS/MLS policy Daniel J Walsh 2005-10-13 21:36:33 +0000
  • 97c6e8fa55 - Add getseuserbyname call for SELinux MCS/MLS policy Daniel J Walsh 2005-10-13 21:10:48 +0000
  • 9f1545ee2e - pam_console manpage fixes (#169373) Tomáš Mráz 2005-10-04 13:46:58 +0000
  • 84f70fb55d - don't include ps and pdf docs (#168823) - new common config file for configuration utilities - remove glib2 dependency (#166979) Tomáš Mráz 2005-09-30 13:52:28 +0000
  • 5cac4c86fa - pam_unix: always honor nis flag on password change (by Aaron Hope) Tomáš Mráz 2005-09-20 13:42:45 +0000
  • 6f66f1e5c6 - process limit values other than RLIMIT_NICE correctly (#168790) Tomáš Mráz 2005-09-20 12:34:48 +0000
  • efa997e610 - don't fail in audit code when audit is not compiled in on the newest kernels (#166422) Tomáš Mráz 2005-08-24 09:15:09 +0000
  • bc4cc2dea1 - add option to pam_loginuid to require auditd Tomáš Mráz 2005-08-01 09:14:07 +0000
  • a92b0ed73f - fix NULL dereference in pam_userdb (#164418) Tomáš Mráz 2005-07-28 09:40:49 +0000
  • 4c014b4ae5 - fix 64bit bug in pam_pwdb - don't crash in pam_unix if pam_get_data fail Tomáš Mráz 2005-07-26 08:36:20 +0000
  • 009a4f4368 - more pam_selinux permissive fixes (Dan Walsh) - make binaries PIE (#158938) Tomáš Mráz 2005-07-22 14:17:33 +0000
  • 21ad6a063b - fixed module tests so the pam doesn't require itself to build (#163502) - added buildprereq for building the documentation (#163503) - relaxed permissions of binaries (u+w) Tomáš Mráz 2005-07-18 16:00:41 +0000
  • f7c051ac6e - upgrade to new upstream sources - removed obsolete patches - pam_selinux module shouldn't fail on broken configs unless policy is set to enforcing (Dan Walsh) Tomáš Mráz 2005-07-14 14:21:56 +0000