427b60f288
* src/su.c: shell's name must be -su when a su fakes a login.
nekral-guest
2010-03-30 21:32:36 +00:00
902aad57af
* NEWS, configure.in, libmisc/copydir.c, man/useradd.8.xml, man/usermod.8.xml, src/Makefile.am: Added support for ACLs and Extended Attributes.
nekral-guest
2010-03-30 21:01:27 +00:00
6afd7859f8
* libmisc/copydir.c: Document the sections closed by #endif
nekral-guest
2010-03-30 21:00:43 +00:00
cfce9890fb
* etc/login.defs: Updated description of UMASK to indicate its usage by pam_umask. * man/login.defs.d/UMASK.xml: Likewise.
nekral-guest
2010-03-27 20:11:21 +00:00
ee3d411024
* etc/login.defs: Updated description of UMASK to indicate its usage by pam_umask.
nekral-guest
2010-03-26 11:53:06 +00:00
cd10fe20c5
* debian/login.defs: Updated description of UMASK (used by pam_umask).
nekral-guest
2010-03-26 11:51:51 +00:00
40d1598165
* man/login.1.xml: login does not check for new mails in PAM enabled versions. This is done by pam_mail.
nekral-guest
2010-03-25 20:38:31 +00:00
97961b8bee
* NEWS, src/chpasswd.c, man/chpasswd.8.xml, man/login.defs.5.xml: PAM enabled versions: restore the -e option to allow restoring passwords without knowing those passwords. Restore together the -m and -c options.
nekral-guest
2010-03-25 20:35:59 +00:00
31678f87d9
* New upstream release: - mail checking is no more mentioned in login(1) since it is done by PAM. Closes: #470059 - The -e (and -c and -m) option was restored in chpasswd (which still uses PAM by default). Closes: #539354
nekral-guest
2010-03-25 19:49:31 +00:00
b318b6721e
* New upstream release: - Fix interruption of su, newgrp, vipw with Ctrl-Z. Closes: 530231
nekral-guest
2010-03-23 13:07:12 +00:00
fcd5b38caf
* src/su.c, src/vipw.c, src/newgrp.c: When the child is interrupted, stop ourself with a SIGSTOP signal.
nekral-guest
2010-03-23 13:05:06 +00:00
052e9105f7
* src/newgrp.c: Limit the scope of variable pid. * src/login_nopam.c: Limit the scope of variables end, lineno, i, str_len. * src/logoutd.c: Limit the scope of variable c. * src/vipw.c: Re-indent. * src/vipw.c: Close the file after the creation of the backup. * src/useradd.c (set_default): Close input file on failure. * src/useradd.c: Limit the scope of variables spool, file, fd, gr, gid, mode. * src/passwd.c: Limit the scope of variables last and ok. * src/chage.c: Fix typo (non breaking space). * src/login.c: Limit the scope of variables erasechar killchar, c, failed. * src/groups.c: Limit the scope of variable ngroups, pri_grp, i. * src/id.c: Limit the scope of variable i.
nekral-guest
2010-03-23 11:26:34 +00:00
4375be4642
* lib/utent.c (getutline): Remove getutline(). This function is no more used. * lib/groupmem.c: Limit the scope of variable i. * lib/shadow.c: Avoid implicit conversion of pointers and integers to booleans. * lib/shadow.c: Added brackets. * libmisc/limits.c: Limit the scope of variable tmpmask. * libmisc/copydir.c: Close opened file on failure. * libmisc/loginprompt.c: Limit the scope of variable envc. * libmisc/find_new_uid.c, libmisc/find_new_gid.c: Limit the scope of variable id.
nekral-guest
2010-03-23 08:56:52 +00:00
5ebb35654b
* libmisc/find_new_gid.c, libmisc/find_new_uid.c: Detect some misconfigurations of UID_MIN, UID_MAX, SYS_UID_MIN, SYS_UID_MAX (and the GID equivalents)
nekral-guest
2010-03-21 01:20:50 +00:00
0fe9b6b867
* New upstream release: - pwck and grpck stop sorting at the first line which begins with a '+'. This will avoid messing up with NIS entries. Closes: #567836
nekral-guest
2010-03-20 22:10:26 +00:00
3a91912281
Apply patch already described in the curent changelog: * debian/login.pam: return back to mostly "requisite" for the pam_securetty PAM module, but ignore PAM_USER_UNKNOWN. This will avoid root from entering a password, and will also avoid user enumeration attacks. Mis-typed root login are not protected, only root can be blamed for mis-typing and entering a password on an insecure line. Users willing to protect against mis-typed root login can use "requisite", but will be vulnerable to user enumeration attacks on insecure lines, and should use pam 1.1.0-4 at least. Closes: #574082, #531341
nekral-guest
2010-03-20 10:57:44 +00:00
68fdd46a81
* debian/passwd.cron.daily: Handle the backups of the user and group databases so that it can be removed from the standard daily cron job. Closes: #554170
nekral-guest
2010-03-20 10:45:12 +00:00
a83124dade
* NEWS, configure.in: Next version will be 4.1.5.
nekral-guest
2010-03-20 10:31:36 +00:00
f729486b33
* libmisc/limits.c: Re-indent to make pmccabe happy.
nekral-guest
2010-03-20 10:29:27 +00:00
d1eae4c7e3
* man/generate_translations.mak, man/generate_mans.mak: Fix distcheck. All manpages generation code shall be enclosed in ENABLE_REGENERATE_MAN conditions.
nekral-guest
2010-03-20 10:25:34 +00:00
9b6beb496a
* man/useradd.8.xml: Do not document the features which are not working. * man/useradd.8.xml: Fix typo: -u was meant instead of -o. * man/useradd.8.xml: Document that the default behavior depends on CREATE_HOME.
nekral-guest
2010-03-20 10:23:57 +00:00
395914c162
Reverse comparison for consistency.
nekral-guest
2010-03-18 18:58:52 +00:00
8e2010a26c
* src/useradd.c: When exiting because of a failure, warn if an home directory created, but cannot be removed.
nekral-guest
2010-03-18 18:57:03 +00:00
86498400da
* libmisc/chowndir.c: Re-indent. * libmisc/chowndir.c: Avoid assignment in comparisons. * libmisc/chowndir.c: Added brackets and parenthesis.
nekral-guest
2010-03-18 18:52:53 +00:00
abffa73776
- add options -g / -G to specify alternative group / gshadow files
nekral-guest
2010-03-18 12:28:25 +00:00
76097618c2
- Fixed parsing of gshadow. This fix password support in newgrp. Closes: #569899
nekral-guest
2010-03-18 12:18:02 +00:00
fe99e0edd8
- This also allows, in the chage interactive mode, to specify -1 as the expiration date to disable it. Closes: #573018
nekral-guest
2010-03-18 12:10:09 +00:00
a000373d8d
- Added support for dates already specified as a number of days since Epoch in useradd, usermod and chage. Closes: #562221
nekral-guest
2010-03-18 11:56:44 +00:00
0cbbdb32c4
* libmisc/strtoday.c: Add support for numerical dates, assuming they are already specified in number of days since Epoch. Return -2 in case of errors to support the specification of -1. * src/usermod.c, src/useradd.c: Adapt to the new error value of strtoday(). * src/chage.c: Remove isnum(). Adapt to the new error value of strtoday(). Support for numerical dates is moved to strtoday().
nekral-guest
2010-03-18 11:53:49 +00:00
79fa4f3343
* man/po/fr.po: Harmonize name of parameters.
nekral-guest
2010-03-18 10:54:32 +00:00
ab50cd2bd8
* NEWS: Indicate which tools support TCB.
nekral-guest
2010-03-18 10:53:56 +00:00
27f67dcad0
* src/pwck.c: Unlock the password and shadow files when there is a failure to prepare the update in memory.
nekral-guest
2010-03-18 10:52:52 +00:00
6a1dea6602
* src/pwck.c: Only log to SYSLOG when acting on system files.
nekral-guest
2010-03-18 10:35:11 +00:00
657271eb04
* src/pwck.c: Remove the -s option from the usage when USE_TCB is enabled. The option is still supported, but has no effect, as documented in the manpage.
nekral-guest
2010-03-18 10:25:08 +00:00
2db82460b1
* src/pwck.c: Document the sections closed by #endif * src/pwck.c, man/pwck.8.xml: No alternative shadow file can be given when USE_TCB is enabled.
nekral-guest
2010-03-18 10:23:51 +00:00
07c6e99725
* src/pwck.c: Do not use pwd_file and spw_file. Always use the dbname() functions.
nekral-guest
2010-03-18 09:46:15 +00:00
51d181ca58
* lib/tcbfuncs.c: Avoid implicit conversion of pointers or integers to booleans.
nekral-guest
2010-03-18 00:01:30 +00:00
1bc0a303dc
* lib/tcbfuncs.c: Only FreeBSD specify that the returned buffer is NULL in case of failure. The return value of asprintf shall be checked.
nekral-guest
2010-03-18 00:01:00 +00:00
43211abb65
* lib/commonio.c: Ignore the return value of close when a failure is reported.
nekral-guest
2010-03-18 00:00:05 +00:00
8acf9cd11d
* lib/tcbfuncs.h: Added type shadowtcb_status. * lib/tcbfuncs.h, lib/tcbfuncs.c: Return a shadowtcb_status instead of an int. * lib/tcbfuncs.c: Do not return in OUT_OF_MEMORY.
nekral-guest
2010-03-17 23:59:55 +00:00
fe71812b1d
* lib/commonio.c: Avoid implicit conversion of pointers to booleans. * lib/commonio.c: Ignore the return value of close when a failure is reported.
nekral-guest
2010-03-17 23:59:47 +00:00
c0e7dcd2fd
* man/faillog.8.xml: Document the behavior in display mode of the -a option. * NEWS, man/faillog.8.xml, src/faillog.c: Extend the -a option to the non-display mode. This changes the default behavior of the -l, -m, -r, -t options when -a is not specified (restrict to existing users).
nekral-guest
2010-03-16 19:15:22 +00:00
5d6c314304
* man/chage.1.xml, man/login.defs.5.xml, man/pwck.8.xml, man/pwconv.8.xml, man/useradd.8.xml, man/userdel.8.xml, man/usermod.8.xml, man/vipw.8.xml: Document the usage of the TCB_AUTH_GROUP, TCB_SYMLINKS, and USE_TCB configuration parameters. * man/pwconv.8.xml, man/pwck.8.xml: Document the behavior when USE_TCB is enabled.
nekral-guest
2010-03-16 19:15:05 +00:00
c5fc8dd75d
* po/POTFILES.in, lib/tcbfuncs.c: Add more strings for translation. * lib/tcbfuncs.c: Indicate the name of the program in error messages. Avoid perror. * src/useradd.c: Re-indent. * src/useradd.c: Add more strings for translation. Indicate the name of the program in error messages. * src/userdel.c: Re-indent. * src/userdel.c: Add more strings for translation. Indicate the name of the program in error messages.
nekral-guest
2010-03-16 19:14:54 +00:00
ad694905be
* src/usermod.c: user_newname and user_newid cannot be used to test if the username or ID is changed. lflg and uflg should be used instead.
nekral-guest
2010-03-16 19:14:37 +00:00
6c4e2931ef
* src/userdel.c: Avoid perror. Give more verbose warnings.
nekral-guest
2010-03-16 19:13:53 +00:00
e7d57e1a77
* src/vipw.c: Document the sections closed by #endif * src/vipw.c: Avoid implicit conversion of pointers or integers to booleans. * src/vipw.c: Added brackets and parenthesis. * src/vipw.c: Limit the definition of some variables and macros to the WITH_TCB scope. * src/vipw.c: Avoid assignment in comparisons. * src/vipw.c: Replace PASSWD_FILE (resp. GROUP_FILE and SGROUP_FILE) by pw_dbname () (resp. gr_dbname () and sgr_dbname ()). This is more consistent with the shadow file handling and may be useful to allow edition of another partition's files.
nekral-guest
2010-03-11 22:03:37 +00:00
nekral-guest
bubulle