Changelog for SimplePAMApps-0.60-owl30.x86_64.rpm :

* Thu Jul 20 2006 Solar Designer 0.60-owl30- Changed the default control(8) setting for su from \"wheelonly\" to\"restricted\" (this change affects new installs only).
* Fri May 05 2006 Dmitry V. Levin 0.60-owl29- In su, do not ignore pam_acct_mgmt() return values except PAM_ACCT_EXPIREDand PAM_NEW_AUTHTOK_REQD even if executed by root.
* Tue Dec 27 2005 Dmitry V. Levin 0.60-owl28- Fixed build with Linux-PAM >= 0.81.- Added passwd to provides list for compatibility.
* Sat Oct 29 2005 Dmitry V. Levin 0.60-owl27- Changed PAM config files to include system-auth for PAM auth, account,password and session management.
* Fri Sep 02 2005 Dmitry V. Levin 0.60-owl26- Allow users with empty passwords to change their passwords.- Stripped /lib/security/ prefix from module pathnames in PAM config files.
* Tue Aug 23 2005 Dmitry V. Levin 0.60-owl25- Added system logger initialization, removed closelog() calls.
* Tue Jun 28 2005 Dmitry V. Levin 0.60-owl24- Fixed compilation warnings.
* Wed Jan 05 2005 (GalaxyMaster) 0.60-owl23- Removed verification of permissions and group owner from su and passwd,since we are controlling them through control.- Cleaned up the spec.
* Sun Feb 08 2004 Solar Designer 0.60-owl22- In login and su, generate ut_id\'s consistently with libutempter andopenssh (patch from Dmitry Levin of ALT Linux).
* Thu Oct 16 2003 Solar Designer 0.60-owl21- Invoke \"control passwd tcb\" when updating old installs; the invocationfrom owl-etc could have failed if the previous version of SimplePAMAppswas too old to even know of tcb as a possible setting for passwd.
* Thu May 29 2003 Solar Designer 0.60-owl20- write_to=tcb- passwd(1) file modes now default to tcb.
* Thu Apr 17 2003 Solar Designer 0.60-owl19- Pass prefix= and count= to pam_tcb also for authentication such that itcan use this information to reduce timing leaks.
* Tue Apr 15 2003 Solar Designer 0.60-owl18- Imported ALT Linux patches, most importantly replacing command line parsingin su, -- should now better match the behavior of other implementations.
* Sun Nov 03 2002 Solar Designer - Dump/restore the owl-control settings for passwd and su on package upgrades.- Support \"traditional\" and \"tcb\" settings for permissions on /usr/bin/passwdand /etc/pam.d/passwd.- Keep passwd and su at mode 700 (\"restricted\") in the package, but defaultthem to \"traditional\" and \"wheelonly\", respectively, in %post when the packageis first installed. This avoids a race and fail-open behavior.
* Thu Aug 22 2002 Solar Designer - Use pam_motd with login.
* Sun Mar 24 2002 Solar Designer - Group: System Environment/Base
* Fri Mar 01 2002 Solar Designer - Pick the best match utmp entry to replace when ut_id\'s don\'t match; ifthat was the case, leave ut_id at what it was in utmp such that the entrymay be manipulated with pututline(3).
* Mon Feb 04 2002 Solar Designer - Enforce our new spec file conventions.- Use the _mandir macro.
* Mon Nov 19 2001 Solar Designer - Use (the recently patched version of) pam_lastlog with login.- login: treat all PAM errors except PAM_NEW_AUTHTOK_REQD in the same way toreduce information leaks.- login: only chdir to the user\'s home directory after becoming the user.- su: don\'t set a fail delay (it made very little sense and may be enabledfrom within a PAM module anyway).- Re-arranged the patches such that we now have one patch file per program.
* Fri Nov 16 2001 Solar Designer - Use pam_tcb.- Dropped outdated documentation.
* Sun Apr 01 2001 Solar Designer - Use pam_limits with login and su.- passwd: line-buffer stdout.- passwd: don\'t require an utmp entry even when run on a tty.
* Mon Mar 19 2001 Solar Designer - passwd: don\'t require a tty.- passwd.pam and su.pam: \"nodelay\" for pam_pwdb.
* Wed Dec 20 2000 Solar Designer - Use pam_mktemp.
* Sun Oct 29 2000 Solar Designer - su: don\'t require that the tty can be determined when started by root.- su: don\'t require that getlogin() works to set PAM_RUSER.- #include in su.c (was needed, but missing).
* Fri Sep 22 2000 Solar Designer - Make use of the new pam_passwdqc option: min=99,... -> min=disabled,...
* Sat Sep 16 2000 Solar Designer - Use RPM_OPT_FLAGS correctly.
* Wed Aug 23 2000 Solar Designer - %config(noreplace) for /etc/pam.d files.
* Fri Aug 11 2000 Solar Designer - Added owl-control support for su and passwd.
* Sun Jul 09 2000 Solar Designer - Imported this spec file from SimplePAMApps-0.56-2.src.rpm and changed itso heavily that there isn\'t much left.- Added a bugfix patch for passwd and a bugfix and security patch forlogin. (In fact, login needs to be re-coded.)- login can now obtain the username from LOGNAME when started as root (notSUID), to be used by getty\'s.