lp://qastaging/pam

Branch merges

This import branch has no branches proposed for merge into it.

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

1029. By t8m on 2009-03-03

Relevant BUGIDs:

Purpose of commit: bugfix

Commit summary:
---------------
2009-03-03 Tomas Mraz <email address hidden>

        * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Test
        for abnormal exit of the helper binary.
        * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary): Likewise.
        * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.
        * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Likewise.

1028. By t8m on 2009-02-27

Relevant BUGIDs:

Purpose of commit: new feature

Commit summary:
---------------
2009-02-27 Tomas Mraz <email address hidden>

        * modules/pam_mkhomedir/pam_mkhomedir.c(create_homedir): Replace
        signal() with sigaction().
        * modules/pam_namespace/pam_namespace.c(inst_init, cleanup_tmpdirs):
        Likewise.
        * modules/pam_unix/pam_unix_acct.c(_unix_run_verify_binary): Likewise.
        * modules/pam_unix/pam_unix_passwd.c(_unix_run_update_binary):
        Likewise.
        * modules/pam_unix/passverify.c(su_sighandler): Likewise.
        * modules/pam_unix/support.c(_unix_run_helper_binary): Likewise.

        * modules/pam_tally2/Makefile.am: Link the pam_tally2 app to libpam
        for auxiliary functions.
        * modules/pam_tally2/pam_tally2.8.xml: Drop non-existing no_reset
        option. Document new serialize option.
        * modules/pam_tally2/pam_tally2.c: Add support for the new serialize
        option.
        (_cleanup, tally_set_data, tally_get_data): Add tally file handle to
        tally PAM data. Needed for fcntl() locking.
        (get_tally): Use low level file access instead of stdio buffered FILE.
        If serialize option is used lock the tally file access.
        (set_tally, tally_bump, tally_reset): Use low level file access instead
        of stdio buffered FILE. Close the file handle only when it is not owned
        by PAM data.
        (pam_sm_authenticate, pam_sm_setcred, pam_sm_acct_mgmt): Pass the tally
        file handle to tally_set_data(). Get it from tally_get_data().
        (main): Use low level file access instead of stdio buffered FILE.

1027. By t8m on 2009-02-26

Relevant BUGIDs: debian#514437 rhbz#487216

Purpose of commit: bugfix

Commit summary:
---------------
2009-02-26 Tomas Mraz <email address hidden>

        * xtests/Makefile.am: Add tst-pam_unix4.
        * xtests/tst-pam_unix4.c: New test for password change
        and shadow min days limit.
        * xtests/tst-pam_unix4.pamd: Likewise.
        * xtests/tst-pam_unix4.sh: Likewise.

        * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Ignore
        PAM_AUTHTOK_ERR on shadow verification.
        * modules/pam_unix/passverify.c (check_shadow_expiry): Return
        PAM_AUTHTOK_ERR if sp_min limit for password change is defied.

1026. By t8m on 2009-02-26

Relevant BUGIDs:

Purpose of commit: translation

Commit summary:
---------------
2009-02-26 Timur Birsh <email address hidden>

        * po/LINGUAS: New Kazakh translation.
        * po/kk.po: New Kazakh translation.

1025. By kukuk on 2009-02-25

Relevant BUGIDs:

Purpose of commit: bugfix

Commit summary:
---------------

2009-02-25 Thorsten Kukuk <email address hidden>

        * libpam/pam_misc.c (_pam_StrTok): Use unsigned char
        instead of int. Reported by Marcus Granado.
        * tests/Makefile.am (TESTS): Add tst-pam_mkargv.
        * tests/tst-pam_mkargv.c (main): Test case for
        _pam_mkargv.

        * po/de.po: Update fuzzy translations.

1024. By t8m on 2009-02-25

Relevant BUGIDs:

Purpose of commit: new feature

Commit summary:
---------------
2009-02-25 Tomas Mraz <email address hidden>

        * xtests/access.conf: Add a line for name resolution test case.
        * xtests/tst-pam_access4.c (main): Set PAM_RHOST for testing the LOCAL
        keyword. Add a test case for name resolution.

        * modules/pam_access/pam_access.c (from_match): Move name resolution
        to network_netmask_match().
        (network_netmask_match): Do a name resolution of the origin only if
        matching against a real network/netmask.

1023. By t8m on 2009-02-25

Relevant BUGIDs:

Purpose of commit: translations

Commit summary:
---------------
2009-02-25 Fabian Affolter <email address hidden>

        * po/de.po: Updated translations.

2009-02-25 Taylon Silmer Lacerda Silva <email address hidden>

        * po/pt_BR.po: Updated translations.

2009-02-25 Domingo Becker <email address hidden>

        * po/es.po: Updated translations.

1022. By kukuk on 2009-02-20

Relevant BUGIDs:

Purpose of commit: enhancement

Commit summary:
---------------

2009-02-20 Thorsten Kukuk <email address hidden>

        * modules/pam_limits/limits.conf.5.xml: Document that the kernel
        can refuse values out of range for the local system.
        * modules/pam_limits/pam_limits.c (setup_limits): Log if setrlimit
        fails.

1021. By kukuk on 2009-02-18

Relevant BUGIDs:

Purpose of commit: sanity check

Commit summary:
---------------

2009-02-18 Thorsten Kukuk <email address hidden>

        * libpam/pam_password.c (pam_chauthtok): Make sure applications
        don't set internal flags.

1020. By kukuk on 2009-02-17

Relevant BUGIDs: bugzilla.novell.com#470337

Purpose of commit: bugfix

Commit summary:
---------------

2009-02-17 Thorsten Kukuk <email address hidden>

        * doc/man/pam_sm_chauthtok.3.xml: Document that sufficient
        can break the PRELIM_CHECK chain.

        * libpam/pam_dispatch.c: Don't freeze chain for chauthtok
        [bugzilla.novell.com#470337]