aboutsummaryrefslogtreecommitdiff
path: root/lib/libpam/modules/pam_exec
Commit message (Collapse)AuthorAgeFilesLines
* Updated dependenciesSimon J. Gerraty2014-05-161-1/+1
| | | | Notes: svn path=/projects/bmake/; revision=266219
* Updated dependenciesSimon J. Gerraty2014-05-101-0/+2
| | | | Notes: svn path=/projects/bmake/; revision=265802
* Updated dependenciesSimon J. Gerraty2013-03-111-0/+1
| | | | Notes: svn path=/projects/bmake/; revision=248169
* Updated dependenciesSimon J. Gerraty2013-02-161-2/+0
| | | | Notes: svn path=/projects/bmake/; revision=246868
* Updated/new Makefile.dependSimon J. Gerraty2012-11-081-0/+4
| | | | Notes: svn path=/projects/bmake/; revision=242788
* Sync FreeBSD's bmake branch with Juniper's internal bmake branch.Marcel Moolenaar2012-08-221-0/+16
| | | | | | | Requested by: Simon Gerraty <sjg@juniper.net> Notes: svn path=/projects/bmake/; revision=239572
* Fixes to man8 groff mandoc style, usage mistakes, or typos.Warren Block2012-05-241-2/+2
| | | | | | | | | | PR: 168016 Submitted by: Nobuyuki Koganemaru Approved by: gjb MFC after: 3 days Notes: svn path=/head/; revision=235873
* Fix error messages containing the executed command nameJean-Sébastien Pédron2012-04-121-31/+77
| | | | | | | | | | | | | | | Before, we took the first argument to pam_exec(8). With the addition of options in front of the command, this could be wrong. Now, options are parsed before calling _pam_exec() and messages contain the proper command name. While here, fix a warning. Sponsored by: Yakaz (http://www.yakaz.com) Notes: svn path=/head/; revision=234184
* Use program exit status as pam_exec return code (optional)Jean-Sébastien Pédron2012-03-262-38/+362
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pam_exec(8) now accepts a new option "return_prog_exit_status". When set, the program exit status is used as the pam_exec return code. It allows the program to tell why the step failed (eg. user unknown). However, if it exits with a code not allowed by the calling PAM service module function (see $PAM_SM_FUNC below), a warning is logged and PAM_SERVICE_ERR is returned. The following changes are related to this new feature but they apply no matter if the "return_prog_exit_status" option is set or not. The environment passed to the program is extended: o $PAM_SM_FUNC contains the name of the PAM service module function (eg. pam_sm_authenticate). o All valid PAM return codes' numerical values are available through variables named after the return code name. For instance, $PAM_SUCCESS, $PAM_USER_UNKNOWN or $PAM_PERM_DENIED. pam_exec return code better reflects what went on: o If the program exits with !0, the return code is now PAM_PERM_DENIED, not PAM_SYSTEM_ERR. o If the program fails because of a signal (WIFSIGNALED) or doesn't terminate normally (!WIFEXITED), the return code is now PAM_SERVICE_ERR, not PAM_SYSTEM_ERR. o If a syscall in pam_exec fails, the return code remains PAM_SYSTEM_ERR. waitpid(2) is called in a loop. If it returns because of EINTR, do it again. Before, it would return PAM_SYSTEM_ERR without waiting for the child to exit. Several log messages now include the PAM service module function name. The man page is updated accordingly. Reviewed by: gleb@, des@ Sponsored by: Yakaz (http://www.yakaz.com) MFC after: 2 weeks Notes: svn path=/head/; revision=233507
* Build lib/ with WARNS=6 by default.Ed Schouten2010-01-021-1/+1
| | | | | | | | | | | | Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway. Notes: svn path=/head/; revision=201381
* Include <stdio.h> for asprintf().Ed Schouten2009-06-141-0/+1
| | | | | | | Submitted by: Pawel Worach Notes: svn path=/head/; revision=194188
* childerr needs to be volatile so gcc won't optimize it away.Dag-Erling Smørgrav2006-11-101-1/+2
| | | | | | | | PR: bin/85830 MFC after: 1 week Notes: svn path=/head/; revision=164154
* When (re)allocating space for an array of pointers to char, useColin Percival2005-09-191-1/+1
| | | | | | | | | | | | | | | sizeof(*list), not sizeof(**list). (i.e., sizeof(pointer) rather than sizeof(char)). It is possible that this buffer overflow is exploitable, but it was added after RELENG_5 forked and hasn't been MFCed, so this will not receive an advisory. Submitted by: Vitezslav Novy MFC after: 1 day Notes: svn path=/head/; revision=150339
* Assorted markup fixes.Ruslan Ermilov2005-06-151-1/+1
| | | | | | | Approved by: re Notes: svn path=/head/; revision=147402
* In addition to the PAM environment, export a handful of useful PAM items.Dag-Erling Smørgrav2005-02-012-8/+62
| | | | | | | Suggested by: Ed Maste <emaste@phaedrus.sandvine.ca> Notes: svn path=/head/; revision=141102
* Mechanically kill hard sentence breaks.Ruslan Ermilov2004-07-021-1/+1
| | | | Notes: svn path=/head/; revision=131504
* style.Makefile(5) policeDavid E. O'Brien2003-03-091-3/+5
| | | | | | | | | (I've tried to keep to the spirit of the original formatting) Reviewed by: des Notes: svn path=/head/; revision=112044
* Don't blame markm for what he didn't do - writing these man pages, forDag-Erling Smørgrav2003-02-061-3/+1
| | | | | | | | instance. Also bump the date since I made substantial modifications earlier today. Notes: svn path=/head/; revision=110451
* Update copyright.Dag-Erling Smørgrav2003-02-061-1/+1
| | | | Notes: svn path=/head/; revision=110448
* Export the PAM environment to the child process instead of the "normal"Dag-Erling Smørgrav2003-02-062-3/+12
| | | | | | | | | environment list, which may be unsafe and / or sensitive. Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=110446
* Just to show that PAM can do almost anything from the ridiculous to theDag-Erling Smørgrav2002-05-233-0/+219
obscene, or - as they say in New York - sophisticated, add pam_echo(8) and pam_exec(8) to our ever-lengthening roster of PAM modules. Sponsored by: DARPA, NAI Labs. Notes: svn path=/head/; revision=97182
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-10 21:14:46 +0000