The NetBSD Project

CVS log for src/external/bsd/openpam/dist/modules/pam_unix/pam_unix.c

[BACK] Up to [cvs.NetBSD.org] / src / external / bsd / openpam / dist / modules / pam_unix

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.8 / (download) - annotate - [select for diffs], Fri Jun 30 21:46:21 2023 UTC (8 months ago) by christos
Branch: MAIN
CVS Tags: HEAD
Changes since 1.7: +1 -3 lines
Diff to previous 1.7 (colored)

merge openpam ximenia

Revision 1.1.1.6 / (download) - annotate - [select for diffs] (vendor branch), Fri Jun 30 21:44:03 2023 UTC (8 months ago) by christos
Branch: OPENPAM
CVS Tags: ximenia-2023-06-27
Changes since 1.1.1.5: +0 -2 lines
Diff to previous 1.1.1.5 (colored)

Import ximenia (last was tabebuia)

- BUGFIX: Fix race condition in openpam_ttyconv(3) when used with
  expect scripts.

- BUGFIX: In openpam_set_option(3), when removing an option, properly
  decrement the option count.

- BUGFIX: In openpam_subst(3), avoid incrementing past the end of the
  template.

Revision 1.6.6.1 / (download) - annotate - [select for diffs], Thu May 11 02:58:32 2017 UTC (6 years, 9 months ago) by pgoyette
Branch: prg-localcount2
Changes since 1.6: +5 -5 lines
Diff to previous 1.6 (colored) next main 1.7 (colored)

Sync with HEAD

Revision 1.7 / (download) - annotate - [select for diffs], Sat May 6 19:50:10 2017 UTC (6 years, 9 months ago) by christos
Branch: MAIN
CVS Tags: prg-localcount2-base3, prg-localcount2-base2, phil-wifi-base, phil-wifi-20200421, phil-wifi-20200411, phil-wifi-20200406, phil-wifi-20191119, phil-wifi-20190609, phil-wifi, pgoyette-compat-merge-20190127, pgoyette-compat-base, pgoyette-compat-20190127, pgoyette-compat-20190118, pgoyette-compat-1226, pgoyette-compat-1126, pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, pgoyette-compat-0728, pgoyette-compat-0625, pgoyette-compat-0521, pgoyette-compat-0502, pgoyette-compat-0422, pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315, pgoyette-compat, perseant-stdc-iso10646-base, perseant-stdc-iso10646, netbsd-9-base, netbsd-9-3-RELEASE, netbsd-9-2-RELEASE, netbsd-9-1-RELEASE, netbsd-9-0-RELEASE, netbsd-9-0-RC2, netbsd-9-0-RC1, netbsd-9, netbsd-8-base, netbsd-8-2-RELEASE, netbsd-8-1-RELEASE, netbsd-8-1-RC1, netbsd-8-0-RELEASE, netbsd-8-0-RC2, netbsd-8-0-RC1, netbsd-8, netbsd-10-base, netbsd-10-0-RC5, netbsd-10-0-RC4, netbsd-10-0-RC3, netbsd-10-0-RC2, netbsd-10-0-RC1, netbsd-10, matt-nb8-mediatek-base, matt-nb8-mediatek, is-mlppp-base, is-mlppp, cjep_sun2x-base1, cjep_sun2x-base, cjep_sun2x, cjep_staticlib_x-base1, cjep_staticlib_x-base, cjep_staticlib_x
Changes since 1.6: +5 -5 lines
Diff to previous 1.6 (colored)

merge conflicts

Revision 1.1.1.5 / (download) - annotate - [select for diffs] (vendor branch), Sat May 6 19:32:39 2017 UTC (6 years, 9 months ago) by christos
Branch: OPENPAM
CVS Tags: tabebuia-20190224, resedacea-20170430
Changes since 1.1.1.4: +4 -4 lines
Diff to previous 1.1.1.4 (colored)

OpenPAM Resedacea						2017-04-30

 - BUGFIX: Reinstore the NULL check in pam_end(3) which was removed in
   OpenPAM Radula, as it breaks common error-handling constructs.

 - BUGFIX: Return PAM_SYMBOL_ERR instead of PAM_SYSTEM_ERR from the
   dispatcher when the required service function could not be found.

 - ENHANCE: Introduce the PAM_BAD_HANDLE error code for when pamh is
   NULL in API functions that have a NULL check.

 - ENHANCE: Introduce the PAM_BAD_ITEM, PAM_BAD_FEATURE and
   PAM_BAD_CONSTANT error codes for situations where we previously
   incorrectly used PAM_SYMBOL_ERR to denote that an invalid constant
   had been passed to an API function.

 - ENHANCE: Improve the RETURN VALUES section in API man pages,
   especially for functions that cannot fail, which were incorrectly
   documented as returning -1 on failure.
============================================================================
OpenPAM Radula							2017-02-19

 - BUGFIX: Fix an inverted test which prevented pam_get_authtok(3) and
   pam_get_user(3) from using application-provided custom prompts.

 - BUGFIX: Plug a memory leak in pam_set_item(3).

 - BUGFIX: Plug a potential memory leak in openpam_readlinev(3).

 - BUGFIX: In openpam_readword(3), support line continuations within
   whitespace.

 - ENHANCE: Add a feature flag to control fallback to "other" policy.

 - ENHANCE: Add a pam_return(8) module which returns an arbitrary
   code specified in the module options.

 - ENHANCE: More and better unit tests.

Revision 1.6 / (download) - annotate - [select for diffs], Fri Oct 24 18:27:13 2014 UTC (9 years, 4 months ago) by christos
Branch: MAIN
CVS Tags: prg-localcount2-base1, prg-localcount2-base, pgoyette-localcount-base, pgoyette-localcount-20170426, pgoyette-localcount-20170320, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, pgoyette-localcount-20160726, pgoyette-localcount, localcount-20160914, bouyer-socketcan-base1, bouyer-socketcan-base, bouyer-socketcan
Branch point for: prg-localcount2
Changes since 1.5: +1 -4 lines
Diff to previous 1.5 (colored)

resolve conflicts

Revision 1.5 / (download) - annotate - [select for diffs], Fri Oct 24 18:17:57 2014 UTC (9 years, 4 months ago) by christos
Branch: MAIN
Changes since 1.4: +3 -0 lines
Diff to previous 1.4 (colored)

merge conflicts

Revision 1.1.1.4 / (download) - annotate - [select for diffs] (vendor branch), Fri Oct 24 18:15:40 2014 UTC (9 years, 4 months ago) by christos
Branch: OPENPAM
CVS Tags: ourouparia-20140912
Changes since 1.1.1.3: +0 -2 lines
Diff to previous 1.1.1.3 (colored)

OpenPAM Ourouparia                                              2014-09-12

 - ENHANCE: When executing a chain, require at least one service
   function to succeed.  This mitigates fail-open scenarios caused by
   misconfigurations or missing modules.

 - ENHANCE: Make sure to overwrite buffers which may have contained an
   authentication token when they're no longer needed.

 - BUGFIX: Under certain circumstances, specifying a non-existent
   module (or misspelling the name of a module) in a policy could
   result in a fail-open scenario.  (CVE-2014-3879)

 - FEATURE: Add a search path for modules.  This was implemented in
   Nummularia but inadvertently left out of the release notes.

 - BUGFIX: The is_upper() predicate only accepted the letter A as an
   upper-case character instead of the entire A-Z range.  As a result,
   service and module names containing upper-case letters other than A
   would be rejected.

Revision 1.2.8.2 / (download) - annotate - [select for diffs], Tue Aug 19 23:52:07 2014 UTC (9 years, 6 months ago) by tls
Branch: tls-maxphys
Changes since 1.2.8.1: +1 -1 lines
Diff to previous 1.2.8.1 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)

Rebase to HEAD as of a few days ago.

Revision 1.2.4.3 / (download) - annotate - [select for diffs], Thu May 22 15:50:48 2014 UTC (9 years, 9 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2.4.2: +2 -2 lines
Diff to previous 1.2.4.2 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs.  ("Protocol error: too many arguments")

Revision 1.4 / (download) - annotate - [select for diffs], Fri Dec 27 20:10:21 2013 UTC (10 years, 2 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base9, tls-maxphys-base, tls-earlyentropy-base, tls-earlyentropy, riastradh-xf86-video-intel-2-7-1-pre-2-21-15, riastradh-drm2-base3, netbsd-7-nhusb-base-20170116, netbsd-7-nhusb-base, netbsd-7-nhusb, netbsd-7-base, netbsd-7-2-RELEASE, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-RC1, netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE, netbsd-7-1, netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1, netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE, netbsd-7-0, netbsd-7
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)

merge conflicts

Revision 1.1.1.3 / (download) - annotate - [select for diffs] (vendor branch), Fri Dec 27 19:16:10 2013 UTC (10 years, 2 months ago) by christos
Branch: OPENPAM
CVS Tags: nummularia-20130907
Changes since 1.1.1.2: +1 -1 lines
Diff to previous 1.1.1.2 (colored)

Import openpam-20130907

Revision 1.2.8.1 / (download) - annotate - [select for diffs], Sun Jun 23 06:28:27 2013 UTC (10 years, 8 months ago) by tls
Branch: tls-maxphys
Changes since 1.2: +1 -1 lines
Diff to previous 1.2 (colored)

resync from head

Revision 1.3 / (download) - annotate - [select for diffs], Sat Apr 6 02:20:39 2013 UTC (10 years, 10 months ago) by christos
Branch: MAIN
CVS Tags: riastradh-drm2-base2, riastradh-drm2-base1, riastradh-drm2-base, riastradh-drm2, khorben-n900
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored)

merge conflicts

Revision 1.1.1.2 / (download) - annotate - [select for diffs] (vendor branch), Sat Apr 6 01:23:32 2013 UTC (10 years, 10 months ago) by christos
Branch: OPENPAM
CVS Tags: micrampelis-20120526
Changes since 1.1.1.1: +1 -1 lines
Diff to previous 1.1.1.1 (colored)

Import openpam-20120526

Revision 1.2.4.2 / (download) - annotate - [select for diffs], Tue Apr 17 00:04:01 2012 UTC (11 years, 10 months ago) by yamt
Branch: yamt-pagecache
CVS Tags: yamt-pagecache-tag8
Changes since 1.2.4.1: +198 -0 lines
Diff to previous 1.2.4.1 (colored) to branchpoint 1.2 (colored)

sync with head

Revision 1.2.4.1, Sun Dec 25 22:27:56 2011 UTC (12 years, 2 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2: +0 -198 lines
FILE REMOVED

file pam_unix.c was added on branch yamt-pagecache on 2012-04-17 00:04:01 +0000

Revision 1.2 / (download) - annotate - [select for diffs], Sun Dec 25 22:27:56 2011 UTC (12 years, 2 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base8, yamt-pagecache-base7, yamt-pagecache-base6, yamt-pagecache-base5, yamt-pagecache-base4, netbsd-6-base, netbsd-6-1-RELEASE, netbsd-6-1-RC4, netbsd-6-1-RC3, netbsd-6-1-RC2, netbsd-6-1-RC1, netbsd-6-1-5-RELEASE, netbsd-6-1-4-RELEASE, netbsd-6-1-3-RELEASE, netbsd-6-1-2-RELEASE, netbsd-6-1-1-RELEASE, netbsd-6-1, netbsd-6-0-RELEASE, netbsd-6-0-RC2, netbsd-6-0-RC1, netbsd-6-0-6-RELEASE, netbsd-6-0-5-RELEASE, netbsd-6-0-4-RELEASE, netbsd-6-0-3-RELEASE, netbsd-6-0-2-RELEASE, netbsd-6-0-1-RELEASE, netbsd-6-0, netbsd-6, matt-nb6-plus-nbase, matt-nb6-plus-base, matt-nb6-plus, agc-symver-base, agc-symver
Branch point for: yamt-pagecache, tls-maxphys
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

apply our changes.

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Sun Dec 25 21:42:54 2011 UTC (12 years, 2 months ago) by christos
Branch: OPENPAM
CVS Tags: lycopsida-20111218
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

from sourceforge

ENHANCE: removed static build autodetection, which didn't work anyway.
	 Use an explicit, user-specified preprocessor variable instead.
ENHANCE: cleaned up the documentation a bit.
ENHANCE: added openpam_subst(3), allowing certain PAM items to be embedded
	 in strings such as prompts. Apply it to the prompts used by
	 pam_get_user(3) and pam_get_authtok(3).
ENHANCE: added support for the user_prompt, authtok_prompt and
	 oldauthtok_prompt module options, which override the prompts passed
	 by the module to pam_set_user(3) and pam_get_authtok(3).
ENHANCE: rewrote the policy parser to support quoted option values.
ENHANCE: added pamtest(1), a tool for testing modules and policies.
ENHANCE: added code to check the ownership and permissions of a module before
	 loading it.
ENHANCE: added / improved input validation in many cases, including the policy
	 file and some function arguments.

Revision 1.1 / (download) - annotate - [select for diffs], Sun Dec 25 21:42:54 2011 UTC (12 years, 2 months ago) by christos
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>