| Age | Commit message (Expand) | Author |
|---|
| 2022-03-22 | minor KNF cleanups during a re-read | Theo de Raadt |
| 2022-03-04 | Revert previous and add LOGIN_SETENV and LOGIN_SETRTABLE | Theo Buehler |
| 2022-02-25 | use setall for setusercontext, to make it simpler to inherit new changes. | Ted Unangst |
| 2022-02-10 | unveil _PATH_LOGIN_CONF_D | Robert Nagy |
| 2021-11-30 | Improved error handling in config parser. | Tobias Stoeckmann |
| 2021-10-13 | Fix fd leak of /dev/tty on auth failure, introduced in revision 1.91. | Todd C. Miller |
| 2021-09-07 | Retry up to 3 times on password authentication failure | Joshua Stein |
| 2021-07-12 | Change the error reporting pattern throughout the tree when unveil | Bob Beck |
| 2021-01-27 | Promote nrules/maxrules to size_t and make sure they can't overflow. | Todd C. Miller |
| 2021-01-21 | Revert r1.87 "Pledge before authentication when possible" | kn |
| 2021-01-20 | Pledge before authentication when possible | kn |
| 2021-01-16 | s/authorization/authentication/g | Martijn van Duren |
| 2021-01-15 | Be more explicit by stating that the -n flag is linked to the nopass option | Martijn van Duren |
| 2021-01-13 | Pledge the "-C" code path | kn |
| 2020-10-09 | fix SEE ALSO; | Jason McIntyre |
| 2020-10-09 | Add nolog option to avoid syslog(3) | kn |
| 2020-10-09 | Improve error message on missing permission | kn |
| 2020-05-16 | list example files in FILES with a short description: generally, "Example | Jason McIntyre |
| 2020-02-10 | briefly mention /etc/examples/ in the FILES section of all the | Ingo Schwarze |
| 2019-10-18 | add some checks to avoid UID_MAX (-1) here. this is not problematic with | Ted Unangst |
| 2019-09-14 | correct some unveil(2) violations due to "login.conf.db" access (the .db version | Sebastien Marie |
| 2019-07-07 | fix one last edge case regarding PATH, allows simpler config. | Ted Unangst |
| 2019-07-04 | note that authentication is required, unless otherwise configured. | Ted Unangst |
| 2019-07-03 | snprintf/vsnprintf return < 0 on error, rather than -1. | Theo de Raadt |
| 2019-06-29 | fix some more fallout from setting path in setusercontext. restore | Ted Unangst |
| 2019-06-24 | add an example hint that shows how original path can be retained | Ted Unangst |
| 2019-06-21 | tweak wording a bit. always talk about creating a new environment. | Ted Unangst |
| 2019-06-19 | more precisely describe what happens to the environment without keepenv; | Ingo Schwarze |
| 2019-06-19 | mention that doas(1) resets the umask(2); | Ingo Schwarze |
| 2019-06-17 | setusercontext resets PATH (which we want). but then it becomes | Ted Unangst |
| 2019-06-17 | mention environment resetting here as well. ok millert | Ted Unangst |
| 2019-06-17 | always reset the "su" variables, which is more consistent and predictable. | Ted Unangst |
| 2019-06-16 | redo the environment inheritance to not inherit. it was intended to make | Ted Unangst |
| 2019-06-12 | a few cleanups and simplifications possible now that static pw is gone. | Ted Unangst |
| 2019-06-10 | use getpwuid_r to avoid problems with hidden static storage. | Ted Unangst |
| 2019-01-17 | clear the password even after a mismatch | Ted Unangst |
| 2018-08-08 | After authentication is complete, unveil login.conf "r" (to discover | Theo de Raadt |
| 2018-07-11 | Do for most running out of memory err() what was done for most running | Kenneth R Westerback |
| 2018-02-07 | lowercase doas ee cummings style | Ted Unangst |
| 2018-02-07 | not necessarily the same name, but the indicated name | Ted Unangst |
| 2017-07-13 | man pages with pseudo synopses which list filenames end up creating | Jason McIntyre |
| 2017-07-03 | no need to generate y.tab.h if nothing uses it, set YFLAGS to nothing | Marc Espie |
| 2017-05-27 | for password failure, print Authorization failed instead of EPERM. | Ted Unangst |
| 2017-04-06 | a little const here and there to prevent rules from changing | Ted Unangst |
| 2017-04-06 | prepenv can take a const rule | Ted Unangst |
| 2017-03-20 | simplify example. list of ports variables was non-exahustive, which means | Ted Unangst |
| 2017-03-09 | exit test for -L was reversed. spotted by Michael Forney | Ted Unangst |
| 2017-01-14 | add a geteuid check to make sure we're root before plowing into setauth. | Ted Unangst |
| 2017-01-02 | envlist and arglist are both string lists; simplify | Ted Unangst |
| 2016-12-29 | it has been six months and two days... remove keepenv { obsolete } syntax | Ted Unangst |
