d8c9236a18
* NEWS, src/su.c: Preserve COLORTERM in addition to TERM when su is called with the -l option.
nekral-guest2009-01-06 20:13:31 +00:00
2bb7007fcb
* libmisc/chkname.c: Use a bool when possible instead of integers. * libmisc/chkname.c: Add brackets and parenthesis.
nekral-guest2008-12-23 22:42:22 +00:00
4c7d798307
* man/groupadd.8.xml, configure.in, man/config.xml.in: Use the real group name length limit in the documentation.
nekral-guest2008-12-23 22:36:44 +00:00
3cb730bcfe
* src/Makefile.am: Only link with the needed library. When compiled with PAM support, chfn, chsh, login, newgrp, passwd, and su do not need the libcrypt library.
nekral-guest2008-12-23 00:44:29 +00:00
1b0a32d71c
* libmisc/cleanup_group.c: Fix compilation when compiled without shadow group support.
nekral-guest2008-12-23 00:39:54 +00:00
ad7a108d60
* src/groupmod.c: Re-indent. * src/groupmod.c: Do not add the command synopsis to the main () documentation. This avoids outdated information.
nekral-guest2008-12-22 22:06:27 +00:00
5b8ff14caf
* libmisc/audit_help.c: Added audit_logger_message() to log messages not related to an account. * lib/prototypes.h, libmisc/cleanup.c, libmisc/cleanup_group.c, libmisc/cleanup_user.c, libmisc/Makefile.am: Added stack of cleanup functions to be executed on exit. * NEWS, src/groupadd.c, src/groupdel.c, src/groupmod.c: Only report success to audit and syslog when the changes are committed to the system. Do not log failure for on-memory changes to audit or syslog. Make sure failures and inconsistencies will be reported in case of unexpected failures (e.g. malloc failures). Only specify an audit message if it is not implicitly implied by the type argument. Removed fail_exit (replaced by atexit(do_cleanups)).
nekral-guest2008-12-22 21:52:43 +00:00
a438c2f184
* NEWS, src/gpasswd.c: Added support usernames with arbitrary length.
nekral-guest2008-12-15 21:54:53 +00:00
c28c443d8f
* NEWS, configure.in, libmisc/chkname.c: make group max length a configure option. The configure behavior encoded is: <no option> -> default of 16 (like today); --with-group-name-max-length -> default of 16; --without-group-name-max-length -> no max length; --with-group-name-max-length=n > max is set to n.
nekral-guest2008-11-30 01:29:40 +00:00
93358ac3de
* src/su.c: (!USE_PAM) Provide visible information indicating that su was denied.
nekral-guest2008-11-23 12:10:21 +00:00
0667aee3cc
* man/ja/login.1: Fix the path of the utmp and wtmp files.
nekral-guest2008-11-23 00:16:53 +00:00
2297508f13
* man/su.1.xml: Fix the su synopsis. username is referenced in the manpage, not LOGIN.
nekral-guest2008-11-23 00:16:10 +00:00
1a04bbb044
* libmisc/chowntty.c: Only closelog() when failure cause an exit.
nekral-guest2008-11-23 00:06:56 +00:00
cf31f05cfb
* libmisc/chowntty.c: Improve the logs for fchown and fchmod failures.
nekral-guest2008-11-23 00:05:39 +00:00
2b290e7abb
* libmisc/chowntty.c, src/login.c, lib/prototypes.h: Remove the tty argument from chown_tty. chown_tty always changes stdin and does not need this argument anymore.
nekral-guest2008-11-22 23:56:51 +00:00
a324a7f13f
* NEWS, libmisc/chowntty.c, libmisc/utmp.c: is_my_tty() moved from utmp.c to chowntty.c. checkutmp() now only uses an existing utmp entry if the pid matches and ut_line matches with the current tty. This fixes a possible DOS when entries can be forged in the utmp file. * libmisc/chowntty.c, src/login.c, lib/prototypes.h: Remove the tty argument from chown_tty. chown_tty always changes stdin and does not need this argument anymore.
nekral-guest2008-11-22 23:56:11 +00:00
eb4097180b
* NEWS, libmisc/chowntty.c: Fix a race condition that could lead to gaining ownership or changing mode of arbitrary files.
nekral-guest2008-11-22 23:22:16 +00:00
4d49f543dd
* src/login.c: Always check the return value of the pam_* APIs.
nekral-guest2008-09-20 21:17:26 +00:00
d400af51fa
* src/login.c, man/login.1.xml: the username is not an optional parameter of -f. Fix the getopt optstring, remove the parsing of username in the -f processing block, and remove unnecessary checks (username cannot be parsed twice anymore), better documentation of the synopsis.
nekral-guest2008-09-20 20:20:19 +00:00
c8d2175981
* src/login.c: Erase the username later since it it used for the fake password check (in case of empty password).
nekral-guest2008-09-20 20:05:22 +00:00
11c7543c76
* src/login.c: Explicitly tag the end of the #ifdef RLOGIN sections.
nekral-guest2008-09-20 20:03:04 +00:00
29d4533047
* src/login.c: Check that no username is specified with -r. * src/login.c: Make sure a username is specified with -f.
nekral-guest2008-09-20 20:00:51 +00:00
c813e692a2
* src/login.c: Copy the name of the user authenticated by PAM to username. This simplify later logging (avoid USE_PAM conditional).
nekral-guest2008-09-20 19:54:35 +00:00
65e32d850c
* src/login.c: Use a dynamic buffer for usernames.
nekral-guest2008-09-20 19:44:12 +00:00
9f2ce12b28
* src/login.c: Existence of pam_user was already checked. pwd was already copied to pwent. Remove duplicated code.
nekral-guest2008-09-20 16:23:04 +00:00
f4860274be
* src/login.c: check_flags() renamed process_flags(). All flag processing blocs moved to process_flags().
nekral-guest2008-09-20 16:21:46 +00:00
1e3f19ad89
* src/login.c: Add missing closing }. This was probably never noticed because UT_ADDR is never defined.
nekral-guest2008-09-20 14:21:51 +00:00
5b73a0492d
* src/login.c: Do not mix USE_PAM and !USE_PAM code.
nekral-guest2008-09-20 14:17:20 +00:00
9fa519c983
* src/login.c: Use failent_user to log to audit. username is the caller, not the user login tries to authenticate. * src/login.c: Use pwd->pw_name instead of pwd->pw_uid. This might be more precise (name must be unique, uid might not be).
nekral-guest2008-09-20 13:20:31 +00:00
c71e7861ed
* man/passwd.1.xml: passwd cannot change the full name of the user, the user's login shell; but it can change the account or password validity period. Thanks to Reuben Thomas.
nekral-guest2008-09-20 10:53:00 +00:00
21d6b34360
groupmems needs to be setuid, not setgid. include common-auth and common-account instead of pam_permit.so
nekral-guest2008-09-14 13:52:21 +00:00
f3df48ab4f
* src/useradd.c: Added missing declaration of Mflg. * src/pwck.c: Only unlock files if they were locked before (e.g. not in read-only mode). * src/pwck.c: Quote the username in error messages (harmonization with other messages). * libmisc/find_new_gid.c: Fixed typo (s/grp->gr_gid/group_id/). * libmisc/find_new_gid.c: Likewise.
nekral-guest2008-09-14 13:42:10 +00:00
5df1f2f683
* libmisc/setugid.c, src/login_nopam.c, src/suauth.c, lib/getdef.c: Replace the %m format string by strerror(). This avoids errno to be reset between the system call error and the report function.
nekral-guest2008-09-13 18:03:50 +00:00
ae59303366
* debian/patches/900_testsuite_groupmems, debian/patches/901_testsuite_gcov: Added patches, only intended to be used in the testsuite.
nekral-guest2008-09-13 17:38:04 +00:00
291b61a6c3
428_grpck_add_prune_option updated for upstream version 4.1.2.
nekral-guest2008-09-13 17:33:52 +00:00
f1fd47e349
* debian/patches/402_cppw_selinux: Add SE Linux support for cppw / cpgr.
nekral-guest2008-09-13 17:29:48 +00:00
d181848c75
* debian/patches/454_userdel_no_MAIL_FILE: Patch removed. If MAIL_FILE is defined, the mailbox is not in MAIL_SPOOL_DIR.
nekral-guest2008-09-13 17:27:12 +00:00
c0dda226c3
507_32char_grnames.dpatch updated for upstream version 4.1.2.
nekral-guest2008-09-13 17:24:05 +00:00
7c0c287396
429_login_FAILLOG_ENAB updated for upstream version 4.1.2.
nekral-guest2008-09-13 17:23:17 +00:00
6232365cea
008_login_log_failure_in_FTMP updated for upstream version 4.1.2.
nekral-guest2008-09-13 17:22:30 +00:00
455c9e8673
302_vim_selinux_support updated for upstream version 4.1.2.
nekral-guest2008-09-13 17:21:50 +00:00
3c064bcebb
008_su_get_PAM_username updated for upstream version 4.1.2.
nekral-guest2008-09-13 17:21:05 +00:00
3152fbd0d2
494_passwd_lock-no_account_lock updated for upstream 4.1.2. Mention that it is fixed in 4.1.3.
nekral-guest2008-09-13 17:19:29 +00:00
560095862a
Indicate the upstream version where the fix will be present.
nekral-guest2008-09-13 17:18:07 +00:00
126500c911
* debian/patches/504_undef_USE_PAM.dpatch: USE_PAM needs to be undef after inclusion of "defines.h". * added note about current upstream.
nekral-guest2008-09-13 17:17:21 +00:00
22a26e92e4
debian/patches/505_useradd_recommend_adduser was already included in 1:4.1.1-2
nekral-guest2008-09-13 17:02:03 +00:00
0833bc3cc0
* lib/commonio.c: Ignore the return value of umask() when the mask is set to the old value.
nekral-guest2008-09-13 11:55:50 +00:00
b18d46e68d
* NEWS, etc/login.defs: New CREATE_HOME variable to tell useradd to create a home directory for new users. * src/useradd.c, man/useradd.8.xml: New -M/--no-create-home option and CREATE_HOME usage. System accounts are not impacted by CREATE_HOME. * man/useradd.8.xml: Indicate that a new group is created by default. * src/useradd.c: Removed TODO item (moved to the TODO file).
nekral-guest2008-09-13 11:55:41 +00:00
d1f92a2225
* po/cs.po: Updated Czech translation. Thanks to Miroslav Kuře
nekral-guest2008-09-13 11:55:30 +00:00
a279244709
* man/login.defs.d/USERGROUPS_ENAB.xml: Fix typo: new <para> tag before the previous one is closed. This caused a missng explanation for USERGROUPS_ENAB.
nekral-guest2008-09-13 11:55:20 +00:00
b12db09e31
* man/groupadd.8.xml: Remove the list of (short) options from the SYNOPSIS. Replaced with [options] for consistency with other tools and maintainability.
nekral-guest2008-09-13 11:55:08 +00:00
4d6385633f
New TODO item. useradd: - Add support for -K in -D mode
nekral-guest2008-09-13 11:54:58 +00:00
8c060833c8
From RedHat's patch shadow-4.1.2-sysAccountDownhill.patch Thanks to Peter Vrabec. * NEWS, libmisc/find_new_gid.c, libmisc/find_new_uid.c: Build an index of used IDs to avoid a database request for each id in the allowed range (when the highest allowed ID is already used). This speedups the addition of users or groups when the highest allowed ID is already used. The additional memory usage of the tools should be acceptable when UID_MAX/SYS_UID_MAX are set to a reasonable number.
nekral-guest2008-09-13 11:54:49 +00:00
70c9eeff05
* configure.in: Fix the dependency of ACCT_TOOLS_SETUID on USE_PAM. Build failed with --without-libpam.
nekral-guest2008-09-07 20:40:41 +00:00
nekral-guest