shadow

Go to file

nekral-guest 3a91912281 Apply patch already described in the curent changelog:

* debian/login.pam: return back to mostly "requisite" for the pam_securetty
    PAM module, but ignore PAM_USER_UNKNOWN. This will avoid root from
    entering a password, and will also avoid user enumeration attacks.
    Mis-typed root login are not protected, only root can be blamed for
    mis-typing and entering a password on an insecure line. Users willing to
    protect against mis-typed root login can use "requisite", but will be
    vulnerable to user enumeration attacks on insecure lines, and should use
    pam 1.1.0-4 at least. Closes: #574082, #531341

2010-03-20 10:57:44 +00:00

debian

Apply patch already described in the curent changelog:

2010-03-20 10:57:44 +00:00

tests

Added new tests to the testsuite script.

2009-05-22 11:51:00 +00:00

bugs-usertags

105_zn_CN was just applied to upstream repository.

2007-10-27 12:51:13 +00:00

dependencies

105_zn_CN was just applied to upstream repository.