summaryrefslogtreecommitdiff
path: root/etc/security
AgeCommit message (Expand)Author
2009-06-03Arla client rename from xfs to nnpfs for later upgrades. Tested on various ar...Janne Johansson
2009-05-24new variable SUIDSKIP to exclude paths from setuid and device checks,Ingo Schwarze
2009-05-18support shell globs on ^+ lines in changelist(5)Ingo Schwarze
2009-05-16fix a couple of obvious echo -> next_part conversions i forgot;Ingo Schwarze
2009-05-14replace the $OUTPUT idiom by the new next_part function from daily(8)Ingo Schwarze
2009-05-04The strings "x5y" and "-42" are not valid group IDs, so fix the regex,Ingo Schwarze
2009-03-23Small rewording to remove ambiguity.Antoine Jacoutot
2008-07-23Prevent warning about insecure hostnames where no /etc/hostname.*Stuart Henderson
2008-04-17Teach security(8) to check for world-readable hostname.if files.Stuart Henderson
2007-10-23list package changes in daily insecurity outputStuart Henderson
2007-08-22plural of ID is IDs, not ID's, ok mk jmcHenning Brauer
2006-10-31generate diffs for files listed in /etc/changelist as they are createdDavid Gwynne
2006-10-13changelist files are ascii, even if they contain a few funny chars.Otto Moerbeek
2006-03-21Fix for PR 5043: shell startup scripts might contain binary characters butDavid Krause
2005-12-06Remove fdescfsPedro Martelletto
2005-11-24Remove kernfs, okay deraadt@.Pedro Martelletto
2005-11-11do not scan afs/xfs directories; chris.kuetheTheo de Raadt
2005-02-22Avoid spurious "globally exported" warning. Noted by jared r r spiegel.Otto Moerbeek
2005-02-07indentation whitespace nitsDavid Krause
2005-01-06- document /etc/security's .secure hooksJason McIntyre
2004-08-25Use $file shorthand instead of specifying /var/backups/disklabel.$d.Todd C. Miller
2004-08-25store a copy of the disklabel for mounted filesystems and report changesTodd C. Miller
2003-12-28Update based on PR 2208:Otto Moerbeek
2003-11-28fix regexp for group namesNikolay Sturm
2003-07-07when testing passwd(5) expire field, force its value to an int beforeTodd C. Miller
2003-07-03Fix setting of umaskset. Also, there is no need to use TMP3 forTodd C. Miller
2003-07-01We need the "/ 10" in the group writability check after all; marc@Todd C. Miller
2003-07-01Make the test for unsafe umask more bullet-proof. With help from marc@Todd C. Miller
2003-06-30some more extra mktemp randomness; millert@ okAnil Madhavapeddy
2003-06-15The hyphen in regexp should really be escapedAlexander Yurchenko
2003-06-13Add dot ('.') in usernames too for consistency with adduser/useradd.Todd C. Miller
2003-06-12Don't complain about usernames that end in '$' which may be needed byTodd C. Miller
2003-04-08Use POSIX chown semantics (user:group); noted by Leandro CostaTodd C. Miller
2002-12-30put bin dirs before sbin dirs in PATH for consistency with other cron scriptsTodd C. Miller
2002-12-15writeable -> writable; torh at bogus dot netHenning Brauer
2002-07-23check account expiration time as well; from hamajima@nagoya.ydc.co.jp pr2835Peter Valchev
2002-07-17don't complain about our new usernames that start with underscoresjoshua stein
2002-05-22Check for S/Key entries in /etc/skey, not /etc/skeyeys; David KrauseTodd C. Miller
2002-02-18use mktemp; help & ok millertPeter Valchev
2001-10-01mtree -l (loose permissions check) on /etc/mtree/special. ok millert@.Jakob Schlyter
2001-04-06fix username and groupname length checks.Brad Smith
2001-04-05Skip entries starting with '+' in duplicate user ID check so we don'tTodd C. Miller
2001-03-25Don't provide diffs of sensitive files like ssh host keys. Instead,Todd C. Miller
2001-03-16Add ~/.ssh/id_dsa and ~/.ssh/id_rsa to the "must be owned by user andTodd C. Miller
2001-01-31more fat utmp; ianm@cit.uws.edu.auTheo de Raadt
2000-12-22gnupg ring/data ownership/permission checking added; ok millert@Todd T. Fries
2000-12-17Todd, Aaron, Dug, and me all prefer unidiffMarco S Hyman
2000-10-20Since sh's bulitin echo(1) supports /t and /n there is no reason toTodd C. Miller
2000-10-18printf(1) format string fixes! checked by theo.Hugh Graham
2000-10-06When including the listing of a directory in root's security mail, pass theAaron Campbell