Age | Commit message (Expand) | Author |
2021-10-24 | For open/openat, if the flags parameter does not contain O_CREAT, the | Theo de Raadt |
2021-08-29 | notify the user about a successful password change; ok millert@ | Robert Nagy |
2021-08-28 | use stderr for printing error and informational messages | Robert Nagy |
2021-07-12 | Change the error reporting pattern throughout the tree when unveil | Bob Beck |
2021-04-14 | _PASSWORD_LEN is no longer the limit for an unencrypted password. | Todd C. Miller |
2019-10-24 | add missing unveil of /etc/shells; ok benno@ deraadt@ mestre@ tb@ | anton |
2019-09-14 | correct some unveil(2) violations due to "login.conf.db" access (the .db version | Sebastien Marie |
2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
2019-04-23 | add some missing "pp." to .%P macros; | Ingo Schwarze |
2018-11-08 | unveil(2) obvious _PATH_LOGIN_CONF with read permission to use login_get*(3) | Ricardo Mestre |
2018-10-25 | unveil(2) the following files for passwd(1) with their corresponding | Ricardo Mestre |
2017-08-21 | Use waitpid()/EINTR idiom for the specific pid, rather than generic wait(), | Theo de Raadt |
2016-12-30 | Use explicit_bzero() to clear the buffer used when the user retypes | Todd C. Miller |
2016-09-02 | _PASSWORD_LEN is length that comes out of crypt(), not a meaningful | Ted Unangst |
2016-09-02 | make sure to explicitly clear memory that is used for password input. | Gleydson Soares |
2016-08-31 | replace obsolete getpass with readpassphrase. | Ted Unangst |
2016-08-31 | nicer format strings and use dprintf instead of write | Ted Unangst |
2016-08-19 | update man pages now that login.conf uses auto rounds | Daniel Jakots |
2016-08-15 | Trust the login_getcaptime() declaration and don't cast the arguments to | Philip Guenther |
2016-05-08 | Switch to getpwnam_shadow() now that getpwnam() no longer opens the shadow | Tim van der Molen |
2015-12-09 | Remove NULL-checks before free(). ok tb@ | mmcc |
2015-11-26 | Delete YP password related code. As a result, these can also be | Theo de Raadt |
2015-10-25 | No need to declare pwd_gensalt; it's unused and gone. | Antoine Jacoutot |
2015-10-24 | the last user of gensalt has been removed. remove the file. | Ted Unangst |
2015-09-14 | Supply DEF_WEAK() macro to suppress warnings during compilation via | Philip Guenther |
2015-08-20 | Do not cast result of malloc/calloc/realloc* if stdlib.h is in scope | Theo de Raadt |
2015-07-27 | use file system path (.Pa) semantic markup macros where appropriate. | Igor Sobrado |
2015-07-15 | Describe the behavior when no user is specified. OK jca@ deraadt@ | Todd C. Miller |
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
2014-11-21 | change prototype for crypt_newhash. the login_cap_t is a holdover from its | Ted Unangst |
2014-11-20 | switch to using crypt_newhash interface. ok deraadt | Ted Unangst |
2014-11-11 | use crypt_checkpass instead of crypt/strcmp | Ted Unangst |
2014-11-02 | update documentation regarding localcipher only | Ted Unangst |
2014-11-01 | remove support for creating any password style that's not blowfish. | Ted Unangst |
2014-09-17 | Increase number of blowfish rounds to 8 by default when not specified in | Kent R. Spillner |
2014-05-19 | no more -K; | Jason McIntyre |
2014-05-19 | kerberos leftovers | Ted Unangst |
2014-04-24 | no more kinit(1); | Jason McIntyre |
2014-04-22 | Remove KERBEROS5 from the Makefiles (except ssh for now, where it is | Reyk Floeter |
2014-04-15 | Remove workarounds for ld reaching MAXDSIZ on vax, now that MAXDSIZ is | Miod Vallat |
2014-02-16 | fix bibliographical references; from Jan Stary <hans at stare dot cz> | Ingo Schwarze |
2013-08-06 | Switch vax to gcc 3.3.6. | Miod Vallat |
2013-06-23 | Stop using deprecated functions from Kerberos. | Antoine Jacoutot |
2013-06-19 | don't link to hx509, pthread and ntlm related libraries | Robert Nagy |
2013-06-18 | Shuffle library link order to appease the static arch deities. | Miod Vallat |
2013-06-17 | link to the new kerberos libraries | Robert Nagy |
2013-04-20 | Xr encrypt(1) to give people a hint if they just want a password string | Ted Unangst |
2013-03-02 | When using an external password quality check program, do not run the | Antoine Jacoutot |
2013-01-18 | Use open(O_CLOEXEC) instead of a separate fcntl(FD_CLOEXEC) call. | Philip Guenther |
2012-06-20 | Correct English just like jsing@ did it in passwd/local_passwd.c rev. 1.38 | Ingo Schwarze |