Репозитории ALT
| S: | 1.2-alt2 |
| 5.1: | 1.0.5-alt1 |
| 4.1: | 1.0.2-alt1 |
| 4.0: | 1.0.2-alt1 |
| 3.0: | 0.9.8.9-alt1 |
Группа :: Система/Основа
Пакет: tcb
навигация по пакетам
Главная Изменения Спек Патчи Sources Загрузить Gear Bugs and FR Repocop
2 ноября 2006 Dmitry V. Levin <ldv at altlinux.org> 1.0.2-alt1
- In the PAM module and tcb_chkpwd helper, fixed memory leaks
reported by Alexander Kanevskiy.
- In the PAM module, hardened pam_sm_open_session() to fail for unknown users.
- Rebuilt for new style PAM dependencies generated by rpm-build-4.0.4-alt55.
- Updated to 1.0 (with all changes made in previous release applied).
- In the PAM module, changed conversation code to use pam_prompt.
- In the PAM module,
+ Fixed potential NULL dereferences in unix_verify_password_plain()
and pam_sm_chauthtok().
+ Disabled overriding default prompt in pam_get_user() calls.
+ Changed logging to use pam_syslog.
- Updated to 0.9.9 (with all changes made in previous release applied).
- Restricted list of global symbols exported by the library,
NSS and PAM modules. - In the PAM module, implemented "openlog" option and disabled
openlog/closelog calls for each logging function invocation,
according to new convention introduced in pam-0.80-alt1.
- Updated to 0.9.8.9 (with alt-warnings applied).
- tcb-utils: packaged /etc/tcb as %ghost.
- pam_tcb: removed obsolete pam_unix* provides.
- Redone alt-warnings and alt-openpam patches.
- In pam_tcb:
+ keep tcb_chkpwd at mode "restricted" in the package, but default
it to "tcb" in %post when the package is first installed.
This avoids a race and fail-open behavior.
+ Instructed RPM to not verify permissions and group ownership
of tcb_chkpwd file which is controlled via control(8) facility.
- Fixed multilib [take 2] (closes #4896).
- Fixed multilib (closes #4896).
- tcb_unconvert: Zero errno before each readdir(3) call.
- Deal with compilation warnings generated by new gcc compiler.
- Updated to 0.9.8.7:
* Sun Nov 02 2003 Solar Designer <solar@owl> 0.9.8.7-owl1 - Build the PAM module with -fPIC.
- Renamed FAKEROOT to DESTDIR.
- Rediffed patches.
- Updated to 0.9.8.6:
* Wed Oct 29 2003 Solar Designer <solar@owl> 0.9.8.6-owl1 - Don't depend on *BSD-style asprintf(3) semantics
as glibc upstream has rejected that patch.
- Fixed build with OpenPAM.
- Added Linux-PAM/OpenPAM multi-build support.
- Updated to 0.9.8.5:
* Fri Apr 18 2003 Solar Designer <solar@owl> 0.9.8.5-owl1 - Use bold face for component names in .SH NAME, but avoid *roff commands
to not confuse makewhatis and apropos(1).
- In pam_tcb, implemented proper fake salt creation to avoid a timing attack.
- Implemented proper dummy salt creation to avoid a timing attack.
- Updated to 0.9.8.3:
* Thu Oct 31 2002 Solar Designer <solar@owl> - Optimized unix_verify_password() a bit, from Dmitry V. Levin of ALT Linux.
* Wed Oct 30 2002 Solar Designer <solar@owl> - In tcb_convert.8, noted that /etc/shadow backups need to be removed as
well, with /etc/shadow- as the particular example. - Added control support for tcb_chkpwd, with three alternatives:
"tcb" (default), "traditional" (for shadow/nis) and "restricted" (root only).
- Updated to 0.9.8.1:
* Thu Oct 24 2002 Solar Designer <solar@owl> - Cleaned up the recent changes.
* Mon Aug 19 2002 Rafal Wojtczuk <nergal@owl> - Merged enhancements which remove 32K users limit.
- Added ENABLE_SETFSUGID.
- Pass the username to the helper binary such that it can handle
non-unique UIDs. - tcb_chkpwd: optimized unix_verify_password() a bit.
- Use subst instead of perl for build.
- Updated devel-static requirements.
- 0.9.7.4:
+ Moved the pam_tcb and pam_unix manual pages to section 8.
+ No longer let root enforced password changes (sp_lstchg == 0) take
precedence over expired accounts (sp_expire). - Moved static library to devel-static subpackage.
- Fixed libtcb.so symlink (appeared to be broken in previous release).
- 0.9.7.1: relocated helper:
/sbin/chkpwd.d/tcb_chkpwd --> /usr/lib/chkpwd/tcb_chkpwd.
- Refined fsuid patch.
- libtcb/tcb_{drop,gain}_priv_r: use fsuid instead of euid.
- tcb_convert: try auth group by default.
- ALT adaptions, libification.
- Various minor fixes from Dmitry V. Levin of ALT Linux.
- A GNU-style ChangeLog will now be maintained.
- Patches from Nergal to make delays on failure work with the "fork"
option and to not produce a warning when su'ing to pseudo-users from
root.
- Don't include the /sbin/chkpwd.d directory in this package as it's
provided by our pam package. - Use a trigger on shadow-utils for possibly creating and making use of
group shadow. This makes no difference on Owl as either the group is
provided by owl-etc (on new installs) or groupadd is already available
when this package is installed, but may be useful on hybrid systems.
- Provide compatibility symlinks and a man page for pam_unix.
- tcb_convert(8) man page fixes from Nergal.
- Moved all of pam_tcb's prompts and messages to support.h and made them
more consistent with those used by pam_passwdqc. - Improved logging.
- Changed everything all over the place during October. ;-)
- Makefiles and code layout rewrite.
- Added reentrant tcb_*_privs_r() functions, needed for nss.
- version 0.5
- man pages
- nis fixes
- removed ugly _unix_getpwnam(), clean replacement
- 0.4 packaged for Owl.