Changelog for pam-0.75-14.i386.rpm :
Tue Sep 25 00:00:00 2001 Nalin Dahyabhai 0.75-14
- argh, compare entire salt, always

Sun Sep 9 00:00:00 2001 Bill Nottingham 0.75-13
- ship /lib/lib{pam,pam_misc}.so for legacy package builds

Fri Sep 7 00:00:00 2001 Nalin Dahyabhai 0.75-12
- noreplace configuration files in /etc/security
- pam_console: update pam_console_apply and man pages to reflect
/var/lock -> /var/run move

Thu Sep 6 00:00:00 2001 Nalin Dahyabhai 0.75-11
- pam_unix: fix the fix for #42394

Wed Sep 5 00:00:00 2001 Nalin Dahyabhai
- modules: use getpwnam_r and friends instead of non-reentrant versions
- pam_console: clear generated .c and .h files in \"clean\" makefile target

Fri Aug 31 00:00:00 2001 Nalin Dahyabhai
- pam_stack: perform deep copy of conversation structures
- include the static libpam in the -devel subpackage (#52321)
- move development .so and .a files to %{_libdir}
- pam_unix: don\'t barf on empty passwords (#51846)
- pam_unix: redo compatibility with \"hash,age\" data wrt bigcrypt (#42394)
- console.perms: add usb camera, scanner, and rio devices (#15528)
- pam_cracklib: initialize all options properly (#49613)

Thu Aug 23 00:00:00 2001 Nalin Dahyabhai
- pam_limits: don\'t rule out negative priorities

Tue Aug 14 00:00:00 2001 Nalin Dahyabhai 0.75-10
- pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
Choo)
- pam_xauth: random cleanups
- pam_console: use /var/run/console instead of /var/lock/console at install-time
- pam_unix: fix preserving of permissions on files which are manipulated

Sat Aug 11 00:00:00 2001 Bill Nottingham
- fix segfault in pam_securetty

Fri Aug 10 00:00:00 2001 Nalin Dahyabhai
- pam_console: use /var/run/console instead of /var/lock/console for lock files
- pam_issue: read the right number of bytes from the file

Tue Jul 10 00:00:00 2001 Nalin Dahyabhai
- pam_wheel: don\'t error out if the group has no members, but is the user\'s
primary GID (reported by David Vos)
- pam_unix: preserve permissions on files which are manipulated (#43706)
- pam_securetty: check if the user is the superuser before checking the tty,
thereby allowing regular users access to services which don\'t set the
PAM_TTY item (#39247)
- pam_access: define NIS and link with libnsl (#36864)

Fri Jul 6 00:00:00 2001 Nalin Dahyabhai
- link libpam_misc against libpam

Wed Jul 4 00:00:00 2001 Nalin Dahyabhai
- pam_chroot: chdir() before chroot()

Sat Jun 30 00:00:00 2001 Nalin Dahyabhai
- pam_console: fix logic bug when changing permissions on single
file and/or lists of files
- pam_console: return the proper error code (reported and patches
for both from Frederic Crozat)
- change deprecated Copyright: tag in .spec file to License:

Tue Jun 26 00:00:00 2001 Nalin Dahyabhai
- console.perms: change js
* to js[0-9]
*
- include pam_aconf.h in more modules (patches from Harald Welte)

Fri May 25 00:00:00 2001 Nalin Dahyabhai
- console.perms: add apm_bios to the list of devices the console owner can use
- console.perms: add beep to the list of sound devices

Tue May 8 00:00:00 2001 Nalin Dahyabhai
- link pam_console_apply statically with libglib (#38891)

Tue May 1 00:00:00 2001 Nalin Dahyabhai
- pam_access: compare IP addresses with the terminating \".\", as documented
(patch from Carlo Marcelo Arenas Belon, I think) (#16505)

Tue Apr 24 00:00:00 2001 Nalin Dahyabhai
- merge up to 0.75
- pam_unix: temporarily ignore SIGCHLD while running the helper
- pam_pwdb: temporarily ignore SIGCHLD while running the helper
- pam_dispatch: default to uncached behavior if the cached chain is empty

Sat Apr 7 00:00:00 2001 Nalin Dahyabhai
- correct speling errors in various debug messages and doc files (#33494)

Fri Apr 6 00:00:00 2001 Nalin Dahyabhai
- prereq sed, fileutils (used in %post)

Thu Apr 5 00:00:00 2001 Nalin Dahyabhai
- remove /dev/dri from console.perms -- XFree86 munges it, so it\'s outside of
our control (reminder from Daryll Strauss)
- add /dev/3dfx to console.perms

Fri Mar 23 23:00:00 2001 Nalin Dahyabhai
- pam_wheel: make \'trust\' and \'deny\' work together correctly
- pam_wheel: also check the user\'s primary gid
- pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED

Tue Mar 20 23:00:00 2001 Nalin Dahyabhai
- mention pam_console_apply in the see also section of the pam_console man pages

Fri Mar 16 23:00:00 2001 Nalin Dahyabhai
- console.perms: /dev/vc/
* should be a regexp, not a glob (thanks to
Charles Lopes)

Mon Mar 12 23:00:00 2001 Nalin Dahyabhai
- console.perms: /dev/cdroms/
* should belong to the user, from Douglas
Gilbert via Tim Waugh

Thu Mar 8 23:00:00 2001 Nalin Dahyabhai
- pam_console_apply: muck with devices even if the mount point doesn\'t exist

Wed Mar 7 23:00:00 2001 Nalin Dahyabhai
- pam_console: error out on undefined classes in pam_console config file
- console.perms: actually change the permissions on the new device classes
- pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
- pam_console: use g_log instead of g_critical when bailing out
- console.perms: logins on /dev/vc/
* are also console logins, from Douglas
Gilbert via Tim Waugh

Tue Mar 6 23:00:00 2001 Nalin Dahyabhai
- add pam_console_apply
- /dev/pilot\'s usually a serial port (or a USB serial port), so revert its
group to \'uucp\' instead of \'tty\' in console.perms
- change pam_console\'s behavior wrt directories -- directories which are
mount points according to /etc/fstab are taken to be synonymous with
their device special nodes, and directories which are not mount points
are ignored

Tue Feb 27 23:00:00 2001 Nalin Dahyabhai
- handle errors fork()ing in pam_xauth
- make the \"other\" config noreplace

Mon Feb 26 23:00:00 2001 Nalin Dahyabhai
- user should own the /dev/video directory, not the non-existent /dev/v4l
- tweak pam_limits doc

Wed Feb 21 23:00:00 2001 Nalin Dahyabhai
- own /etc/security
- be more descriptive when logging messages from pam_limits
- pam_listfile: remove some debugging code (#28346)

Mon Feb 19 23:00:00 2001 Nalin Dahyabhai
- pam_lastlog: don\'t pass NULL to logwtmp()

Fri Feb 16 23:00:00 2001 Nalin Dahyabhai
- pam_listfile: fix argument parser (#27773)
- pam_lastlog: link to libutil

Tue Feb 13 23:00:00 2001 Nalin Dahyabhai
- pam_limits: change the documented default config file to reflect the defaults
- pam_limits: you should be able to log in a total of maxlogins times, not
(maxlogins - 1)
- handle group limits on maxlogins correctly (#25690)

Mon Feb 12 23:00:00 2001 Nalin Dahyabhai
- change the pam_xauth default maximum \"system user\" ID from 499 to 99 (#26343)

Wed Feb 7 23:00:00 2001 Nalin Dahyabhai
- refresh the default system-auth file, pam_access is out

Mon Feb 5 23:00:00 2001 Nalin Dahyabhai
- actually time out when attempting to lckpwdf() (#25889)
- include time.h in pam_issue (#25923)
- update the default system-auth to the one generated by authconfig 4.1.1
- handle getpw??? and getgr??? failures more gracefully (#26115)
- get rid of some extraneous {set,end}{pw,gr}ent() calls

Tue Jan 30 23:00:00 2001 Nalin Dahyabhai
- overhaul pam_stack to account for abstraction libpam now provides

Tue Jan 23 23:00:00 2001 Nalin Dahyabhai
- remove pam_radius at request of author

Mon Jan 22 23:00:00 2001 Nalin Dahyabhai
- merge to 0.74
- make console.perms match perms set by MAKEDEV, and add some devfs device names
- add \'sed\' to the buildprereq list (#24666)

Sun Jan 21 23:00:00 2001 Matt Wilson
- added \"exit 0\" to the end of the %pre script

Fri Jan 19 23:00:00 2001 Nalin Dahyabhai
- self-hosting fix from Guy Streeter

Wed Jan 17 23:00:00 2001 Nalin Dahyabhai
- use gcc for LD_L to pull in intrinsic stuff on ia64

Fri Jan 12 23:00:00 2001 Nalin Dahyabhai
- take another whack at compatibility with \"hash,age\" data in pam_unix (#21603)

Wed Jan 10 23:00:00 2001 Nalin Dahyabhai
- make the -devel subpackage unconditional

Tue Jan 9 23:00:00 2001 Nalin Dahyabhai
- merge/update to 0.73

Mon Dec 18 23:00:00 2000 Nalin Dahyabhai
- refresh from CVS -- some weird stuff crept into pam_unix

Tue Dec 12 23:00:00 2000 Nalin Dahyabhai
- fix handling of \"nis\" when changing passwords by adding the checks for the
data source to the password-updating module in pam_unix
- add the original copyright for pam_access (fix from Michael Gerdts)

Thu Nov 30 23:00:00 2000 Nalin Dahyabhai
- redo similar() using a distance algorithm and drop the default dif_ok to 5
- readd -devel

Wed Nov 29 23:00:00 2000 Nalin Dahyabhai
- fix similar() function in pam_cracklib (#14740)
- fix example in access.conf (#21467)
- add conditional compilation for building for 6.2 (for pam_userdb)
- tweak post to not use USESHADOW any more

Tue Nov 28 23:00:00 2000 Nalin Dahyabhai
- make EINVAL setting lock limits in pam_limits non-fatal, because it\'s a 2.4ism

Tue Nov 21 23:00:00 2000 Nalin Dahyabhai
- revert to DB 3.1, which is what we were supposed to be using from the get-go

Mon Nov 20 23:00:00 2000 Nalin Dahyabhai
- add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
- link pam_userdb to Berkeley DB 2.x to match 6.2\'s setup correctly

Mon Nov 6 23:00:00 2000 Matt Wilson
- remove prereq on sh-utils, test ([) is built in to bash

Fri Oct 20 00:00:00 2000 Nalin Dahyabhai
- fix the pam_userdb module breaking

Thu Oct 19 00:00:00 2000 Nalin Dahyabhai
- fix pam_unix likeauth argument for authenticate(),setcred(),setcred()

Wed Oct 18 00:00:00 2000 Nalin Dahyabhai
- tweak pre script to be called in all upgrade cases
- get pam_unix to only care about the significant pieces of passwords it checks
- add /usr/include/db1/db.h as a build prereq to pull in the right include
files, no matter whether they\'re in glibc-devel or db1-devel
- pam_userdb.c: include db1/db.h instead of db.h

Thu Oct 12 00:00:00 2000 Nalin Dahyabhai
- add BuildPrereq for bison (suggested by Bryan Stillwell)

Sat Oct 7 00:00:00 2000 Nalin Dahyabhai
- patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
- roll back the README for pam_xauth to actually be the right one
- tweak pam_stack to use the parent\'s service name when calling the substack

Thu Oct 5 00:00:00 2000 Nalin Dahyabhai
- create /etc/sysconfig/authconfig at install-time if upgrading

Tue Oct 3 00:00:00 2000 Nalin Dahyabhai
- modify the files list to make sure #16456 stays fixed
- make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
- add pam_chroot module
- self-hosting fixes from the -devel split
- update generated docs in the tree

Wed Sep 13 00:00:00 2000 Nalin Dahyabhai
- split off a -devel subpackage
- install the developer man pages

Mon Sep 11 00:00:00 2000 Bill Nottingham
- build libraries before modules

Thu Sep 7 00:00:00 2000 Nalin Dahyabhai
- fix problems when looking for headers in /usr/include (#17236)
- clean up a couple of compile warnings

Wed Aug 23 00:00:00 2000 Nalin Dahyabhai
- give users /dev/cdrom
* instead of /dev/cdrom in console.perms (#16768)
- add nvidia control files to console.perms

Wed Aug 23 00:00:00 2000 Bill Nottingham
- add DRI devices to console.perms (#16731)

Fri Aug 18 00:00:00 2000 Nalin Dahyabhai
- move pam_filter modules to /lib/security/pam_filter (#16111)
- add pam_tally\'s application to allow counts to be reset (#16456)
- move README files to the txts subdirectory

Tue Aug 15 00:00:00 2000 Nalin Dahyabhai
- add a postun that runs ldconfig
- clean up logging in pam_xauth

Sat Aug 5 00:00:00 2000 Nalin Dahyabhai
- make the tarball include the release number in its name

Tue Aug 1 00:00:00 2000 Nalin Dahyabhai
- add a broken_shadow option to pam_unix
- add all module README files to the documentation list (#16456)

Wed Jul 26 00:00:00 2000 Nalin Dahyabhai
- fix pam_stack debug and losing-track-of-the-result bug

Tue Jul 25 00:00:00 2000 Nalin Dahyabhai
- rework pam_console\'s usage of syslog to actually be sane (#14646)

Sun Jul 23 00:00:00 2000 Nalin Dahyabhai
- take the LOG_ERR flag off of some of pam_console\'s new messages

Sat Jul 22 00:00:00 2000 Nalin Dahyabhai
- add pam_localuser

Thu Jul 13 00:00:00 2000 Nalin Dahyabhai
- need to make pam_console\'s checking a little stronger
- only pass data up from pam_stack if the parent didn\'t already define it

Thu Jul 13 00:00:00 2000 Prospector
- automatic rebuild

Wed Jul 12 00:00:00 2000 Nalin Dahyabhai
- make pam_console\'s extra checks disableable
- simplify extra check to just check if the device owner is root
- add a debug log when pam_stack comes across a NULL item
- have pam_stack hand items up to the parent from the child

Tue Jul 4 00:00:00 2000 Nalin Dahyabhai
- fix installation of pam_xauth man pages (#12417)
- forcibly strip helpers (#12430)
- try to make pam_console a little more discriminating

Tue Jun 20 00:00:00 2000 Nalin Dahyabhai
- symlink libpam.so to libpam.so.0.75, and likewise for libpam_misc
- reverse order of checks in _unix_getpwnam for pam_unix

Thu Jun 15 00:00:00 2000 Preston Brown
- include gpmctl in pam_console

Tue Jun 6 00:00:00 2000 Nalin Dahyabhai
- add MANDIR definition and use it when installing man pages

Tue Jun 6 00:00:00 2000 Preston Brown
- handle scanner and cdwriter devices in pam_console

Sun Jun 4 00:00:00 2000 Nalin Dahyabhai
- add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
pam_shells, and pam_wheel

Fri Jun 2 00:00:00 2000 Nalin Dahyabhai
- add system-auth control file
- let gethostname() call in pam_access.c be implicitly declared to avoid
conflicting types if unistd.c declares it

Tue May 16 00:00:00 2000 Nalin Dahyabhai
- fix problems compiling on Red Hat Linux 5.x (bug #11005)

Thu Apr 27 00:00:00 2000 Bill Nottingham
- fix size assumptions in pam_(pwdb|unix) md5 code

Mon Mar 20 23:00:00 2000 Nalin Dahyabhai
- Add new pam_stack module.
- Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds

Sat Feb 5 23:00:00 2000 Nalin Dahyabhai
- Fix pam_xauth bug #6191.

Thu Feb 3 23:00:00 2000 Elliot Lee
- Add a patch to accept \'pts/N\' in /etc/securetty as a match for tty \'5\'
(which is what other pieces of the system think it is). Fixes bug #7641.

Mon Jan 31 23:00:00 2000 Nalin Dahyabhai
- argh, turn off gratuitous debugging

Wed Jan 19 23:00:00 2000 Nalin Dahyabhai
- update to 0.72
- fix pam_unix password-changing bug
- fix pam_unix\'s cracklib support
- change package URL

Mon Jan 3 23:00:00 2000 Cristian Gafton
- don\'t allow \'/\' on service_name

Fri Oct 22 00:00:00 1999 Cristian Gafton
- enhance the pam_userdb module some more

Sat Sep 25 00:00:00 1999 Cristian Gafton
- add documenatation

Wed Sep 22 00:00:00 1999 Michael K. Johnson
- a tiny change to pam_console to make it not loose track of console users

Tue Sep 21 00:00:00 1999 Michael K. Johnson
- a few fixes to pam_xauth to make it more robust

Thu Jul 15 00:00:00 1999 Michael K. Johnson
- pam_console: added to manage /dev/console

Fri Jul 2 00:00:00 1999 Michael K. Johnson
- pam_xauth: New refcounting implementation based on idea from Stephen Tweedie

Sun Apr 18 00:00:00 1999 Michael K. Johnson
- added video4linux devices to /etc/security/console.perms

Sat Apr 17 00:00:00 1999 Michael K. Johnson
- added joystick lines to /etc/security/console.perms

Fri Apr 16 00:00:00 1999 Michael K. Johnson
- fixed a couple segfaults in pam_xauth uncovered by yesterday\'s fix...

Thu Apr 15 00:00:00 1999 Cristian Gafton
- use gcc -shared to link the shared libs

Thu Apr 15 00:00:00 1999 Michael K. Johnson
- many bug fixes in pam_xauth
- pam_console can now handle broken applications that do not set
the PAM_TTY item.

Wed Apr 14 00:00:00 1999 Michael K. Johnson
- fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
- added pam_xauth module

Sun Apr 11 00:00:00 1999 Cristian Gafton
- pam_lastlog does wtmp handling now

Fri Apr 9 00:00:00 1999 Michael K. Johnson
- added option parsing to pam_console
- added framebuffer devices to default console.perms settings

Thu Apr 8 00:00:00 1999 Cristian Gafton
- fixed empty passwd handling in pam_pwdb

Tue Mar 30 00:00:00 1999 Michael K. Johnson
- changed /dev/cdrom default user permissions back to 0600 in console.perms
because some cdrom players open O_RDWR.

Fri Mar 26 23:00:00 1999 Michael K. Johnson
- added /dev/jaz and /dev/zip to console.perms

Thu Mar 25 23:00:00 1999 Michael K. Johnson
- changed the default user permissions for /dev/cdrom to 0400 in console.perms

Fri Mar 19 23:00:00 1999 Michael K. Johnson
- fixed a few bugs in pam_console

Thu Mar 18 23:00:00 1999 Michael K. Johnson
- pam_console authentication working
- added /etc/security/console.apps directory

Mon Mar 15 23:00:00 1999 Michael K. Johnson
- added pam_console files to filelist

Fri Feb 12 23:00:00 1999 Cristian Gafton
- upgraded to 0.66, some source cleanups

Mon Dec 28 23:00:00 1998 Cristian Gafton
- add patch from Savochkin Andrey Vladimirovich for umask
security risk

Fri Dec 18 23:00:00 1998 Cristian Gafton
- upgrade to ver 0.65
- build the package out of internal CVS server