| Age | Commit message (Expand) | Author |
|---|
| 2019-07-03 | snprintf/vsnprintf return < 0 on error, rather than -1. | Theo de Raadt |
| 2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
| 2019-06-28 | mkstemp() returns -1 on failure | Theo de Raadt |
| 2018-12-31 | A bad uid range on the command line should be a fatal error. | Todd C. Miller |
| 2018-10-15 | Use user_from_uid(), uid_from_user(), group_from_gid() and | Todd C. Miller |
| 2018-09-26 | Fix segfault in usermod -l by swapping one of the getpwnam(3) with | Ricardo Mestre |
| 2018-09-13 | Fix warnings caused by user_from_uid() and group_from_gid() now | Todd C. Miller |
| 2017-05-24 | Remove 2 unused parameters from copydotfiles function | Ricardo Mestre |
| 2017-05-12 | Replace memset(3) with explicit_bzero(3) on user(8) on sensitive data | Ricardo Mestre |
| 2016-11-30 | Since pwp->pw_gid is equal to pwp->pw_uid then use the former instead in | Ricardo Mestre |
| 2016-11-30 | Mitigate some fd leaks on user(8) | Ricardo Mestre |
| 2016-11-30 | note that no group is created if a group already exists when using =uid; | Jason McIntyre |
| 2016-11-30 | According to usermod(8) manpage if -g =uid is used it should create a new group | Ricardo Mestre |
| 2016-11-29 | remove all the (void) casts which are irrelevant. The remaining ones | Theo de Raadt |
| 2016-11-29 | Correct a bit test introduced in user.c rev 1.111 that made it impossible | Jonathan Gray |
| 2016-11-29 | Alistair Crooks rescinded the advertising clause of his user(8) | Jonathan Gray |
| 2016-08-16 | Xr encrypt(1) here as well to be consistent with useradd(8). | Theo Buehler |
| 2016-08-14 | Xr encrypt(1) in the explanation of the -p option. | Theo Buehler |
| 2016-08-10 | Remove the encrypted password length check. The admin should be | Todd C. Miller |
| 2016-05-03 | Fix regression on usermod/userdel by calling getpwnam_shadow(3) and saving | Ricardo Mestre |
| 2016-05-02 | When writing master.password entries, use %lld for time_t and cast | Todd C. Miller |
| 2016-04-26 | Add pledge(2) promises independently on each user(8)'s functions as follows: | Ricardo Mestre |
| 2016-03-30 | for some time now mandoc has not required MLINKS to function | Jason McIntyre |
| 2016-03-29 | If program cannot reserve memory then the user doesn't need to know exactly how | Ricardo Mestre |
| 2016-03-29 | -Remove function #defines from defs.h and use the actual code accordingly in | Ricardo Mestre |
| 2016-03-28 | Remove cast from free(3) | Ricardo Mestre |
| 2016-03-28 | Remove handrolled #define FREE and use free(3) directly without wrapping | Ricardo Mestre |
| 2016-01-08 | Zap extraneous SYNOPSIS sections. | Vadim Zhukov |
| 2015-11-30 | pledge regression: some operations appear to want to getpwent from | Theo de Raadt |
| 2015-11-15 | pledge "stdio rpath wpath cpath fattr getpw flock id proc exec" at the | Theo de Raadt |
| 2015-11-15 | Really silly to chmod "st_mode & 07777" when making a copy of the | Theo de Raadt |
| 2015-09-12 | use .Cm for fixed string arguments | Ingo Schwarze |
| 2015-08-20 | stdlib.h is in scope; do not cast malloc/calloc/realloc* | Theo de Raadt |
| 2015-04-24 | read_defaults has the thing for strtonum to chew on in cp, not | David Gwynne |
| 2015-04-23 | Replace atoi() usage with strtonum(). OK deraadt@ | Todd C. Miller |
| 2015-03-13 | remove the first comma from constructs like ", and," and ", or,": you can use | Jason McIntyre |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2014-12-01 | use reallocarray() deep inside an macro ugly as sin | Theo de Raadt |
| 2014-08-27 | Add missing capability to handle new $2b version of blowfish password | Sebastian Reitenbach |
| 2014-07-20 | Make sure the correct errno is reported by warn* or err* and not | Philip Guenther |
| 2013-11-23 | unsigned char casts for ctype; ok jca | Theo de Raadt |
| 2013-09-10 | Move the chown and chmod out of copydotfiles() and add an explicit | Todd C. Miller |
| 2013-08-06 | Write uids/gids as unsigned in the passwd file and error messages. | Todd C. Miller |
| 2013-07-16 | use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ | Ingo Schwarze |
| 2013-04-02 | for parsing time values, fall back to atoll() for time_t | Theo de Raadt |
| 2013-03-04 | When locking/unlocking an account, never touch passwords that are "*" | Antoine Jacoutot |
| 2013-02-16 | Fix unlocking on 32bits arch where it would fuck up the shell... | Antoine Jacoutot |
| 2012-09-20 | Be consistent with what the installer and useradd(8) do and put newly | Antoine Jacoutot |
| 2012-09-18 | Add 2 new knobs to usermod(8): | Antoine Jacoutot |
| 2012-01-29 | fix previous: grp is unused here just check the return value | Antoine Jacoutot |
