File pwaccess.changes of Package pwaccess
------------------------------------------------------------------- Sun Oct 19 19:42:41 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251019.82434bd: * systemd: use libexecdir as configured in meson to template binary paths * Fix double lib prefix * no_new_privs.h: include stdbool.h ------------------------------------------------------------------- Sat Oct 18 13:34:55 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251018.416c37e: * pam_debuginfo: fix open session and add test case ------------------------------------------------------------------- Sat Oct 18 08:56:27 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251018.b465a9e: * Add pam_debuginfo * pam_unix_ng: fix print format for uid_t * Add PAM_SILENT to BUGS * log failure: remove unused service ------------------------------------------------------------------- Fri Oct 17 08:47:03 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251017.97ccf32: * Use bool for is_known_shell() * Update BUGS list ------------------------------------------------------------------- Thu Oct 16 22:00:19 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251016.5d23ed8: * pam_unix_ng: print if run as root and fix NULL pointer access ------------------------------------------------------------------- Thu Oct 16 20:31:52 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251016.508b232: * pam_unix_ng: ignore root if no_new_privs is set * pwupd: don't call setuid with no_new_privs set * Log if no_new_privs is enabled * Add function to check for no_new_privs flag * Update docu * Fix typo in debug message ------------------------------------------------------------------- Thu Oct 16 17:04:43 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251016.8c63160: * Don't ask for old empty password if we change it. * Use errno_to_pam() * Add more checks for valid usernames in error case * get_value(): check for OOM * Update manual page * Make hash algorithm configurable * Document minlen= option * Introduce struct config_t * Move common functions to libcommon * pam_unix_ng: don't overwrite user with same entry ------------------------------------------------------------------- Wed Oct 15 16:36:12 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20251015.8aabc57: * Fix logic of prefix compare * Only compare pass_old with pass_new if not NULL * pam_unix_ng: implement updating shadow file * pam_unix_ng: implement changing password in passwd * Replace skip_prefix() with startswith() * pam_unix_ng(passwd): implement prelim check * Add get_local_user_record() function * Move common pam_unix_ng code to "common". * pam_unix_ng(auth): only log valid usernames * Make sure pw_passwd/sp_pwdp are not NULL * Move valid_name() to verify.c * pam_unix_ng: use pam_fail_delay with configureable time * pam_unix_ng.8: reword authtok_type * pm_unix_ng.8: fix typo * CI: add packages to build manpages * Add pam_unix_ng.8 manual page * Use LOGIN_NAME_MAX for getlogin_r() buffer * pwupdd: optimize error handling and check if shell is valid * varlink: add invalid shell error * chsh: add -h as option * CI: install libselinux-devel * pwupdd/chsh: finish updating passwd file * Add endswith()/startswith() functions * pwupdd: use parameter for PAM service name * Don't return error on end of loop * Don't print "password changed" ------------------------------------------------------------------- Wed Sep 24 13:15:15 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.3+git20250924.4c88a83: * Bump version to 0.3.0 * Add pwupdd, chsh and passwd * Move common varlink code to own file * Remove unused variable * pam_unix_ng: Add log_runtime_ms() to log runtime * README: document pam_unix_ng * Add fallback code for if pwaccess is not running * Remove include of unneeded config.h * Update shadow-pwaccess patch * Fix typos ------------------------------------------------------------------- Wed Sep 24 13:02:29 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.2+git20250924.cc0450a: * Add pwupdd, chsh and passwd * Move common varlink code to own file * Remove unused variable * pam_unix_ng: Add log_runtime_ms() to log runtime * README: document pam_unix_ng * Add fallback code for if pwaccess is not running * Remove include of unneeded config.h * Update shadow-pwaccess patch * Fix typos ------------------------------------------------------------------- Thu Aug 21 14:27:22 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.2+git20250821.ae49c44: * Enable tests in CI * Unify license header * Adjust pam_unix_ng name * pam_unix_ng: improve logging * pam-pwaccess.patch: new version merged upstream * Rename pam_unix-ng to pam_unix_ng * Add pam_unix-ng * Document return values of pwaccess_check_expired() * Remove two prototypes for non existing functions * Create enum from defines * Enhance README * pwaccessd: ExitCode must be negative ------------------------------------------------------------------- Tue Jul 15 11:49:13 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.2+git20250715.a8ee81e: * Release version 0.2.0 * Update patch for Linux-PAM * Move peer uid check before dispatch, fix Quit method * Introduce error_user_not_found() error handler * Fix syntax error * Change order of functions * Check that all account name characters are valid for logging * verify: correct checks for empty strings and shadow password ------------------------------------------------------------------- Fri Jul 11 08:30:06 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250711.423c68e: * pwaccessd: always guard p.name with strna * pwaccessd: use stroom more often * pwaccessd: use printf format attribute for log_msg * pwaccessd: fix typos * Extend interface description * Fix style in symbol comments * Update patch for Linux-PAM ------------------------------------------------------------------- Mon Jun 23 14:49:03 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250623.4c6aeb9: * Implement org.openSUSE.pwaccess.ExpiredCheck * example/get_user_record: allow account as argv * libpwaccess: fix check if shadow data is available ------------------------------------------------------------------- Fri Jun 20 11:47:36 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250620.3391c86: * Allow NULL as password * Use string macros ------------------------------------------------------------------- Fri Jun 20 08:51:10 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250620.b262975: * Add verify_password example * libpwaccess: add pwaccess_verify_password() * pwaccessd: fix nullok and add more debug logs ------------------------------------------------------------------- Fri Jun 20 06:37:06 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250620.158b0e5: * Add server side password verify * Add PoC patches for pam and shadow ------------------------------------------------------------------- Thu May 08 14:47:50 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250508.ccf8b83: * pwaccessd: decode UID correctly as int64 * libpwaccess: add missing NULL checks * Introduce stroom() * pwaccessd: return only Non-NULL entries ------------------------------------------------------------------- Thu May 08 13:27:32 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250508.ccc0834: * pwaccessd: implement error checks if getpwnam/getspnam fail * libpwaccess: return -ENOENT if entry not found ------------------------------------------------------------------- Thu May 08 10:18:47 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250508.f57950a: * pwaccess.h: include stdbool.h ------------------------------------------------------------------- Wed May 07 14:13:55 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250507.f0aeda0: * Add PWACCESS_IS_NOT_RUNNING macro to header file ------------------------------------------------------------------- Wed May 07 13:46:19 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> - Update to version 0.1+git20250507.0ac3823: * json: mark entries which can be NULL correct * Install pwaccessd in libexecdir
