![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / src / external / bsd / openpam / dist / include / security
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.7 / (download) - annotate - [select for diffs], Fri Jun 30 21:46:20 2023 UTC (9 months, 2 weeks ago) by christos
Branch: MAIN
CVS Tags: HEAD
Changes since 1.6: +1 -3
lines
Diff to previous 1.6 (colored)
merge openpam ximenia
Revision 1.1.1.6 / (download) - annotate - [select for diffs] (vendor branch), Fri Jun 30 21:44:03 2023 UTC (9 months, 2 weeks ago) by christos
Branch: OPENPAM
CVS Tags: ximenia-2023-06-27
Changes since 1.1.1.5: +0 -2
lines
Diff to previous 1.1.1.5 (colored)
Import ximenia (last was tabebuia) - BUGFIX: Fix race condition in openpam_ttyconv(3) when used with expect scripts. - BUGFIX: In openpam_set_option(3), when removing an option, properly decrement the option count. - BUGFIX: In openpam_subst(3), avoid incrementing past the end of the template.
Revision 1.5.6.1 / (download) - annotate - [select for diffs], Thu May 11 02:58:31 2017 UTC (6 years, 11 months ago) by pgoyette
Branch: prg-localcount2
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored) next main 1.6 (colored)
Sync with HEAD
Revision 1.6 / (download) - annotate - [select for diffs], Sat May 6 19:50:09 2017 UTC (6 years, 11 months ago) by christos
Branch: MAIN
CVS Tags: prg-localcount2-base3,
prg-localcount2-base2,
phil-wifi-base,
phil-wifi-20200421,
phil-wifi-20200411,
phil-wifi-20200406,
phil-wifi-20191119,
phil-wifi-20190609,
phil-wifi,
pgoyette-compat-merge-20190127,
pgoyette-compat-base,
pgoyette-compat-20190127,
pgoyette-compat-20190118,
pgoyette-compat-1226,
pgoyette-compat-1126,
pgoyette-compat-1020,
pgoyette-compat-0930,
pgoyette-compat-0906,
pgoyette-compat-0728,
pgoyette-compat-0625,
pgoyette-compat-0521,
pgoyette-compat-0502,
pgoyette-compat-0422,
pgoyette-compat-0415,
pgoyette-compat-0407,
pgoyette-compat-0330,
pgoyette-compat-0322,
pgoyette-compat-0315,
pgoyette-compat,
perseant-stdc-iso10646-base,
perseant-stdc-iso10646,
netbsd-9-base,
netbsd-9-3-RELEASE,
netbsd-9-2-RELEASE,
netbsd-9-1-RELEASE,
netbsd-9-0-RELEASE,
netbsd-9-0-RC2,
netbsd-9-0-RC1,
netbsd-9,
netbsd-8-base,
netbsd-8-2-RELEASE,
netbsd-8-1-RELEASE,
netbsd-8-1-RC1,
netbsd-8-0-RELEASE,
netbsd-8-0-RC2,
netbsd-8-0-RC1,
netbsd-8,
netbsd-10-base,
netbsd-10-0-RELEASE,
netbsd-10-0-RC6,
netbsd-10-0-RC5,
netbsd-10-0-RC4,
netbsd-10-0-RC3,
netbsd-10-0-RC2,
netbsd-10-0-RC1,
netbsd-10,
matt-nb8-mediatek-base,
matt-nb8-mediatek,
is-mlppp-base,
is-mlppp,
cjep_sun2x-base1,
cjep_sun2x-base,
cjep_sun2x,
cjep_staticlib_x-base1,
cjep_staticlib_x-base,
cjep_staticlib_x
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored)
merge conflicts
Revision 1.1.1.5 / (download) - annotate - [select for diffs] (vendor branch), Sat May 6 19:32:39 2017 UTC (6 years, 11 months ago) by christos
Branch: OPENPAM
CVS Tags: tabebuia-20190224,
resedacea-20170430
Changes since 1.1.1.4: +1 -1
lines
Diff to previous 1.1.1.4 (colored)
OpenPAM Resedacea 2017-04-30 - BUGFIX: Reinstore the NULL check in pam_end(3) which was removed in OpenPAM Radula, as it breaks common error-handling constructs. - BUGFIX: Return PAM_SYMBOL_ERR instead of PAM_SYSTEM_ERR from the dispatcher when the required service function could not be found. - ENHANCE: Introduce the PAM_BAD_HANDLE error code for when pamh is NULL in API functions that have a NULL check. - ENHANCE: Introduce the PAM_BAD_ITEM, PAM_BAD_FEATURE and PAM_BAD_CONSTANT error codes for situations where we previously incorrectly used PAM_SYMBOL_ERR to denote that an invalid constant had been passed to an API function. - ENHANCE: Improve the RETURN VALUES section in API man pages, especially for functions that cannot fail, which were incorrectly documented as returning -1 on failure. ============================================================================ OpenPAM Radula 2017-02-19 - BUGFIX: Fix an inverted test which prevented pam_get_authtok(3) and pam_get_user(3) from using application-provided custom prompts. - BUGFIX: Plug a memory leak in pam_set_item(3). - BUGFIX: Plug a potential memory leak in openpam_readlinev(3). - BUGFIX: In openpam_readword(3), support line continuations within whitespace. - ENHANCE: Add a feature flag to control fallback to "other" policy. - ENHANCE: Add a pam_return(8) module which returns an arbitrary code specified in the module options. - ENHANCE: More and better unit tests.
Revision 1.5 / (download) - annotate - [select for diffs], Fri Oct 24 18:17:56 2014 UTC (9 years, 5 months ago) by christos
Branch: MAIN
CVS Tags: prg-localcount2-base1,
prg-localcount2-base,
pgoyette-localcount-base,
pgoyette-localcount-20170426,
pgoyette-localcount-20170320,
pgoyette-localcount-20170107,
pgoyette-localcount-20161104,
pgoyette-localcount-20160806,
pgoyette-localcount-20160726,
pgoyette-localcount,
localcount-20160914,
bouyer-socketcan-base1,
bouyer-socketcan-base,
bouyer-socketcan
Branch point for: prg-localcount2
Changes since 1.4: +0 -0
lines
Diff to previous 1.4 (colored)
merge conflicts
Revision 1.1.1.4 / (download) - annotate - [select for diffs] (vendor branch), Fri Oct 24 18:15:40 2014 UTC (9 years, 5 months ago) by christos
Branch: OPENPAM
CVS Tags: ourouparia-20140912
Changes since 1.1.1.3: +0 -2
lines
Diff to previous 1.1.1.3 (colored)
OpenPAM Ourouparia 2014-09-12 - ENHANCE: When executing a chain, require at least one service function to succeed. This mitigates fail-open scenarios caused by misconfigurations or missing modules. - ENHANCE: Make sure to overwrite buffers which may have contained an authentication token when they're no longer needed. - BUGFIX: Under certain circumstances, specifying a non-existent module (or misspelling the name of a module) in a policy could result in a fail-open scenario. (CVE-2014-3879) - FEATURE: Add a search path for modules. This was implemented in Nummularia but inadvertently left out of the release notes. - BUGFIX: The is_upper() predicate only accepted the letter A as an upper-case character instead of the entire A-Z range. As a result, service and module names containing upper-case letters other than A would be rejected.
Revision 1.2.8.2 / (download) - annotate - [select for diffs], Tue Aug 19 23:52:06 2014 UTC (9 years, 8 months ago) by tls
Branch: tls-maxphys
Changes since 1.2.8.1: +1 -1
lines
Diff to previous 1.2.8.1 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)
Rebase to HEAD as of a few days ago.
Revision 1.2.4.3 / (download) - annotate - [select for diffs], Thu May 22 15:50:47 2014 UTC (9 years, 10 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2.4.2: +2 -2
lines
Diff to previous 1.2.4.2 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)
sync with head.
for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.
this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")
Revision 1.4 / (download) - annotate - [select for diffs], Fri Dec 27 20:10:21 2013 UTC (10 years, 3 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base9,
tls-maxphys-base,
tls-earlyentropy-base,
tls-earlyentropy,
riastradh-xf86-video-intel-2-7-1-pre-2-21-15,
riastradh-drm2-base3,
netbsd-7-nhusb-base-20170116,
netbsd-7-nhusb-base,
netbsd-7-nhusb,
netbsd-7-base,
netbsd-7-2-RELEASE,
netbsd-7-1-RELEASE,
netbsd-7-1-RC2,
netbsd-7-1-RC1,
netbsd-7-1-2-RELEASE,
netbsd-7-1-1-RELEASE,
netbsd-7-1,
netbsd-7-0-RELEASE,
netbsd-7-0-RC3,
netbsd-7-0-RC2,
netbsd-7-0-RC1,
netbsd-7-0-2-RELEASE,
netbsd-7-0-1-RELEASE,
netbsd-7-0,
netbsd-7
Changes since 1.3: +2 -2
lines
Diff to previous 1.3 (colored)
merge conflicts
Revision 1.1.1.3 / (download) - annotate - [select for diffs] (vendor branch), Fri Dec 27 19:16:12 2013 UTC (10 years, 3 months ago) by christos
Branch: OPENPAM
CVS Tags: nummularia-20130907
Changes since 1.1.1.2: +1 -1
lines
Diff to previous 1.1.1.2 (colored)
Import openpam-20130907
Revision 1.2.8.1 / (download) - annotate - [select for diffs], Sun Jun 23 06:28:26 2013 UTC (10 years, 9 months ago) by tls
Branch: tls-maxphys
Changes since 1.2: +1 -1
lines
Diff to previous 1.2 (colored)
resync from head
Revision 1.3 / (download) - annotate - [select for diffs], Sat Apr 6 02:20:30 2013 UTC (11 years ago) by christos
Branch: MAIN
CVS Tags: riastradh-drm2-base2,
riastradh-drm2-base1,
riastradh-drm2-base,
riastradh-drm2,
khorben-n900
Changes since 1.2: +2 -2
lines
Diff to previous 1.2 (colored)
merge conflicts
Revision 1.1.1.2 / (download) - annotate - [select for diffs] (vendor branch), Sat Apr 6 01:23:32 2013 UTC (11 years ago) by christos
Branch: OPENPAM
CVS Tags: micrampelis-20120526
Changes since 1.1.1.1: +1 -1
lines
Diff to previous 1.1.1.1 (colored)
Import openpam-20120526
Revision 1.2.4.2 / (download) - annotate - [select for diffs], Tue Apr 17 00:03:58 2012 UTC (12 years ago) by yamt
Branch: yamt-pagecache
CVS Tags: yamt-pagecache-tag8
Changes since 1.2.4.1: +163 -0
lines
Diff to previous 1.2.4.1 (colored) to branchpoint 1.2 (colored)
sync with head
Revision 1.2.4.1, Sun Dec 25 22:27:55 2011 UTC (12 years, 3 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2: +0 -163
lines
FILE REMOVED
file pam_modules.h was added on branch yamt-pagecache on 2012-04-17 00:03:58 +0000
Revision 1.2 / (download) - annotate - [select for diffs], Sun Dec 25 22:27:55 2011 UTC (12 years, 3 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base8,
yamt-pagecache-base7,
yamt-pagecache-base6,
yamt-pagecache-base5,
yamt-pagecache-base4,
netbsd-6-base,
netbsd-6-1-RELEASE,
netbsd-6-1-RC4,
netbsd-6-1-RC3,
netbsd-6-1-RC2,
netbsd-6-1-RC1,
netbsd-6-1-5-RELEASE,
netbsd-6-1-4-RELEASE,
netbsd-6-1-3-RELEASE,
netbsd-6-1-2-RELEASE,
netbsd-6-1-1-RELEASE,
netbsd-6-1,
netbsd-6-0-RELEASE,
netbsd-6-0-RC2,
netbsd-6-0-RC1,
netbsd-6-0-6-RELEASE,
netbsd-6-0-5-RELEASE,
netbsd-6-0-4-RELEASE,
netbsd-6-0-3-RELEASE,
netbsd-6-0-2-RELEASE,
netbsd-6-0-1-RELEASE,
netbsd-6-0,
netbsd-6,
matt-nb6-plus-nbase,
matt-nb6-plus-base,
matt-nb6-plus,
agc-symver-base,
agc-symver
Branch point for: yamt-pagecache,
tls-maxphys
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored)
apply our changes.
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Sun Dec 25 21:42:55 2011 UTC (12 years, 3 months ago) by christos
Branch: OPENPAM
CVS Tags: lycopsida-20111218
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored)
from sourceforge ENHANCE: removed static build autodetection, which didn't work anyway. Use an explicit, user-specified preprocessor variable instead. ENHANCE: cleaned up the documentation a bit. ENHANCE: added openpam_subst(3), allowing certain PAM items to be embedded in strings such as prompts. Apply it to the prompts used by pam_get_user(3) and pam_get_authtok(3). ENHANCE: added support for the user_prompt, authtok_prompt and oldauthtok_prompt module options, which override the prompts passed by the module to pam_set_user(3) and pam_get_authtok(3). ENHANCE: rewrote the policy parser to support quoted option values. ENHANCE: added pamtest(1), a tool for testing modules and policies. ENHANCE: added code to check the ownership and permissions of a module before loading it. ENHANCE: added / improved input validation in many cases, including the policy file and some function arguments.
Revision 1.1 / (download) - annotate - [select for diffs], Sun Dec 25 21:42:55 2011 UTC (12 years, 3 months ago) by christos
Branch: MAIN
Initial revision