| Age | Commit message (Expand) | Author |
|---|
| 2024-02-15 | change permit to be more bits away from deny, because rowhammer. | Ted Unangst |
| 2022-12-22 | Denote multiple arguments with 'arg ...' not 'args' | Klemens Nanni |
| 2022-03-22 | minor KNF cleanups during a re-read | Theo de Raadt |
| 2022-03-04 | Revert previous and add LOGIN_SETENV and LOGIN_SETRTABLE | Theo Buehler |
| 2022-02-25 | use setall for setusercontext, to make it simpler to inherit new changes. | Ted Unangst |
| 2022-02-10 | unveil _PATH_LOGIN_CONF_D | Robert Nagy |
| 2021-11-30 | Improved error handling in config parser. | Tobias Stoeckmann |
| 2021-10-13 | Fix fd leak of /dev/tty on auth failure, introduced in revision 1.91. | Todd C. Miller |
| 2021-09-07 | Retry up to 3 times on password authentication failure | Joshua Stein |
| 2021-07-12 | Change the error reporting pattern throughout the tree when unveil | Bob Beck |
| 2021-01-27 | Promote nrules/maxrules to size_t and make sure they can't overflow. | Todd C. Miller |
| 2021-01-21 | Revert r1.87 "Pledge before authentication when possible" | kn |
| 2021-01-20 | Pledge before authentication when possible | kn |
| 2021-01-16 | s/authorization/authentication/g | Martijn van Duren |
| 2021-01-13 | Pledge the "-C" code path | kn |
| 2020-10-09 | Add nolog option to avoid syslog(3) | kn |
| 2020-10-09 | Improve error message on missing permission | kn |
| 2019-10-18 | add some checks to avoid UID_MAX (-1) here. this is not problematic with | Ted Unangst |
| 2019-09-14 | correct some unveil(2) violations due to "login.conf.db" access (the .db version | Sebastien Marie |
| 2019-07-03 | snprintf/vsnprintf return < 0 on error, rather than -1. | Theo de Raadt |
| 2019-06-29 | fix some more fallout from setting path in setusercontext. restore | Ted Unangst |
| 2019-06-17 | setusercontext resets PATH (which we want). but then it becomes | Ted Unangst |
| 2019-06-16 | redo the environment inheritance to not inherit. it was intended to make | Ted Unangst |
| 2019-06-12 | a few cleanups and simplifications possible now that static pw is gone. | Ted Unangst |
| 2019-06-10 | use getpwuid_r to avoid problems with hidden static storage. | Ted Unangst |
| 2019-01-17 | clear the password even after a mismatch | Ted Unangst |
| 2018-08-08 | After authentication is complete, unveil login.conf "r" (to discover | Theo de Raadt |
| 2017-05-27 | for password failure, print Authorization failed instead of EPERM. | Ted Unangst |
| 2017-04-06 | a little const here and there to prevent rules from changing | Ted Unangst |
| 2017-03-09 | exit test for -L was reversed. spotted by Michael Forney | Ted Unangst |
| 2017-01-14 | add a geteuid check to make sure we're root before plowing into setauth. | Ted Unangst |
| 2016-10-05 | Add back the call to yyparse() that was accidentally dropped in the | Theo Buehler |
| 2016-10-05 | move yyparse decl next to yyfp | Ted Unangst |
| 2016-10-05 | as a result of the env rework, arraylen() is only used in parse.y. | Ted Unangst |
| 2016-09-15 | use static in the right places to seperate modules better | Theo de Raadt |
| 2016-09-03 | the sudo timeout was 5 minutes i believe, so we'll match that. | Ted Unangst |
| 2016-09-02 | add support for the verified auth ioctls using 'persist' rules. | Ted Unangst |
| 2016-09-01 | unconst these parameters; i won't be changing bsd auth today. | Ted Unangst |
| 2016-09-01 | move the authentication code to a function | Ted Unangst |
| 2016-07-18 | The string with path to shell could be taken directly from struct passwd. | Vadim Zhukov |
| 2016-07-12 | add "recvfd" to doas(1) for use with skey. | Sebastien Marie |
| 2016-06-24 | move a space to the correct spot | Ted Unangst |
| 2016-06-19 | Move the RB_ code from doas.h to env.c, and limit the environment interface to a | Martijn van Duren |
| 2016-06-16 | the environment handling code was showing its age. just because environ | Ted Unangst |
| 2016-06-07 | revert recent changes to allow setenv. everybody now has an idea about | Ted Unangst |
| 2016-06-07 | merge setenv feature into keepenv. less grammar, more better. | Ted Unangst |
| 2016-06-05 | add a doas.conf setenv directive that allows setting environment | Damien Miller |
| 2016-04-28 | set progname to doas so users can't create bizarro fake logs | Ted Unangst |
| 2016-02-15 | Do a carriage return before password prompt. | martijn |
| 2016-02-07 | require a tty for the password. | Ted Unangst |
