Commit graph

8 commits

Author SHA1 Message Date
joerg
b6c7847ef0 Update OpenPAM to openpam-20130907 (Nummularia), including a fix for
CVE-2014-3879:

- Better dynamic loader, supports specifying modules without ".so"
  prefix.
- Improve documentation.
- openpam_subst, openpam_readword and openpam_readlinev helpers
- PAM_HOST item for better password prompts
- user_prompt, authtok_prompt and oldauthtok_prompt module options
- pamtest(1) program for testing policies and modules
2014-06-10 13:17:42 +00:00
spz
ff51a5bbfb added prevention of CVE-2011-4122 taken from NetBSD src 2011-12-13 15:57:08 +00:00
jlam
c788841be5 Add changes from NetBSD src that add casts to fix warnings on platforms
where size_t is unsigned long.
2008-02-18 18:22:18 +00:00
jlam
eb65092610 Update security/openpam to openpam-20071221 (Hydrangea). Changes from
version 20050616 (Figwort) include:

 - ENHANCE: API function arguments are now const where appropriate, to
   match corresponding changes in the Solaris PAM and Linux-PAM APIs.

 - ENHANCE: corrected a number of C namespace violations.

 - ENHANCE: the module cache has been removed, allowing long-lived
   applications to pick up module changes.  This also allows multiple
   threads to use PAM simultaneously (as long as they use separate PAM
   contexts), since the module cache was the only part of OpenPAM that
   was not thread-safe.
2008-02-18 16:48:12 +00:00
joerg
7ae978be7d Update to OpenPAM Figwort (20050616):
- BUGFIX: Correct several small signedness and initialization bugs
  discovered during review by the NetBSD team.

- BUGFIX: Modify gendoc.pl to sort cross-references in dictionary
  order within each section.

- ENHANCE: if a policy specifies a relative module path,
  prepend the
  module directory so we never call dlopen(3) with a relative
  path.

- ENHANCE: add a pam.conf(5) manual page.
2007-09-06 18:54:44 +00:00
jlam
49e316c551 Update security/openpam to 20050201 (Feterita). Changes from version
20040210 (Eelgrass) include:

 - BUGFIX: Correct numerous markup errors, invalid cross-references,
   and other issues in the manual pages, with kind assistance from
   Ruslan Ermilov <ru@freebsd.org>.

 - BUGFIX: Avoid multiple evaluation of macro arguments in ENTERX()
   and RETURNX() macros.

 - BUGFIX: Remove an unnecessary and non-portable pointer cast in
   pam_get_data(3).

 - BUGFIX: Fix identical typos in PAM_ACCT_EXPIRED case in
   pam_strerror(3) and gendoc.pl.

 - ENHANCE: Minor overhaul of the autoconf / build system.

 - ENHANCE: Add openpam_free_envlist(3).
2005-02-10 02:55:38 +00:00
jlam
1bff0aabdb Pass -DSYSCONFDIR="$sysconfdir" in the Makefile instead of the configure
script to avoid bizarre quoting problems within the configure script.
This also fixes the definition of SYSCONFDIR in the compiled library.
Bump the PKGREVISION to 1.
2005-01-22 16:22:25 +00:00
jlam
daa15ec0da Initial import of openpam-20040210 as security/openpam.
OpenPAM is an open source PAM library that focuses on simplicity,
correctness, and cleanliness.

OpenPAM aims to gather the best features of Solaris PAM, XSSO and
Linux-PAM, plus some innovations of its own.  In areas where these
implementations disagree, OpenPAM tries to remain compatible with
Solaris, at the expense of XSSO conformance and Linux-PAM
compatibility.

These are some of OpenPAM's features:

   - Implements the complete PAM API as described in the original PAM
     paper and in OSF-RFC 86.0; this corresponds to the full XSSO API
     except for mappings and secondary authentication.  Also
     implements some extensions found in Solaris 9.

   - Extends the API with several useful and time-saving functions.

   - Performs strict checking of return values from service modules.
2005-01-13 21:51:08 +00:00