head 1.4; access; symbols pkgsrc-2014Q1:1.3.0.90 pkgsrc-2014Q1-base:1.3 pkgsrc-2013Q4:1.3.0.88 pkgsrc-2013Q4-base:1.3 pkgsrc-2013Q3:1.3.0.86 pkgsrc-2013Q3-base:1.3 pkgsrc-2013Q2:1.3.0.84 pkgsrc-2013Q2-base:1.3 pkgsrc-2013Q1:1.3.0.82 pkgsrc-2013Q1-base:1.3 pkgsrc-2012Q4:1.3.0.80 pkgsrc-2012Q4-base:1.3 pkgsrc-2012Q3:1.3.0.78 pkgsrc-2012Q3-base:1.3 pkgsrc-2012Q2:1.3.0.76 pkgsrc-2012Q2-base:1.3 pkgsrc-2012Q1:1.3.0.74 pkgsrc-2012Q1-base:1.3 pkgsrc-2011Q4:1.3.0.72 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q3:1.3.0.70 pkgsrc-2011Q3-base:1.3 pkgsrc-2011Q2:1.3.0.68 pkgsrc-2011Q2-base:1.3 pkgsrc-2011Q1:1.3.0.66 pkgsrc-2011Q1-base:1.3 pkgsrc-2010Q4:1.3.0.64 pkgsrc-2010Q4-base:1.3 pkgsrc-2010Q3:1.3.0.62 pkgsrc-2010Q3-base:1.3 pkgsrc-2010Q2:1.3.0.60 pkgsrc-2010Q2-base:1.3 pkgsrc-2010Q1:1.3.0.58 pkgsrc-2010Q1-base:1.3 pkgsrc-2009Q4:1.3.0.56 pkgsrc-2009Q4-base:1.3 pkgsrc-2009Q3:1.3.0.54 pkgsrc-2009Q3-base:1.3 pkgsrc-2009Q2:1.3.0.52 pkgsrc-2009Q2-base:1.3 pkgsrc-2009Q1:1.3.0.50 pkgsrc-2009Q1-base:1.3 pkgsrc-2008Q4:1.3.0.48 pkgsrc-2008Q4-base:1.3 pkgsrc-2008Q3:1.3.0.46 pkgsrc-2008Q3-base:1.3 cube-native-xorg:1.3.0.44 cube-native-xorg-base:1.3 pkgsrc-2008Q2:1.3.0.42 pkgsrc-2008Q2-base:1.3 cwrapper:1.3.0.40 pkgsrc-2008Q1:1.3.0.38 pkgsrc-2008Q1-base:1.3 pkgsrc-2007Q4:1.3.0.36 pkgsrc-2007Q4-base:1.3 pkgsrc-2007Q3:1.3.0.34 pkgsrc-2007Q3-base:1.3 pkgsrc-2007Q2:1.3.0.32 pkgsrc-2007Q2-base:1.3 pkgsrc-2007Q1:1.3.0.30 pkgsrc-2007Q1-base:1.3 pkgsrc-2006Q4:1.3.0.28 pkgsrc-2006Q4-base:1.3 pkgsrc-2006Q3:1.3.0.26 pkgsrc-2006Q3-base:1.3 pkgsrc-2006Q2:1.3.0.24 pkgsrc-2006Q2-base:1.3 pkgsrc-2006Q1:1.3.0.22 pkgsrc-2006Q1-base:1.3 pkgsrc-2005Q4:1.3.0.20 pkgsrc-2005Q4-base:1.3 pkgsrc-2005Q3:1.3.0.18 pkgsrc-2005Q3-base:1.3 pkgsrc-2005Q2:1.3.0.16 pkgsrc-2005Q2-base:1.3 pkgsrc-2005Q1:1.3.0.14 pkgsrc-2005Q1-base:1.3 pkgsrc-2004Q4:1.3.0.12 pkgsrc-2004Q4-base:1.3 pkgsrc-2004Q3:1.3.0.10 pkgsrc-2004Q3-base:1.3 pkgsrc-2004Q2:1.3.0.8 pkgsrc-2004Q2-base:1.3 pkgsrc-2004Q1:1.3.0.6 pkgsrc-2004Q1-base:1.3 pkgsrc-2003Q4:1.3.0.4 pkgsrc-2003Q4-base:1.3 netbsd-1-6-1:1.3.0.2 netbsd-1-6-1-base:1.3 netbsd-1-6:1.2.0.8 netbsd-1-6-RELEASE-base:1.2 pkgviews:1.2.0.4 pkgviews-base:1.2 buildlink2:1.2.0.2 buildlink2-base:1.2 netbsd-1-5-PATCH003:1.2 netbsd-1-5-PATCH001:1.1.1.1 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.4 date 2014.06.10.13.54.30; author joerg; state dead; branches; next 1.3; commitid Bfz6AmAQXMitTYDx; 1.3 date 2002.12.23.21.23.59; author jlam; state Exp; branches; next 1.2; 1.2 date 2002.01.29.17.10.11; author jlam; state Exp; branches; next 1.1; 1.1 date 2000.10.21.18.41.54; author rh; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2000.10.21.18.41.54; author rh; state Exp; branches; next ; desc @@ 1.4 log @Remove outdated security/PAM. @ text @$NetBSD: patch-aj,v 1.3 2002/12/23 21:23:59 jlam Exp $ --- modules/pam_env/Makefile.orig Sun Nov 19 18:54:03 2000 +++ modules/pam_env/Makefile @@@@ -15,8 +15,4 @@@@ INSTALLED_CONFILE=$(SCONFIGD)/pam_env.co DEFS=-DDEFAULT_CONF_FILE=\"$(INSTALLED_CONFILE)\" CFLAGS += $(DEFS) -MODULE_SIMPLE_INSTALL=bash -f ../install_conf "$(FAKEROOT)" "$(SCONFIGD)" "$(INSTALLED_CONFILE)" "$(TITLE)" "$(LOCAL_CONFILE)" -MODULE_SIMPLE_REMOVE=rm -f $(FAKEROOT)$(INSTALLED_CONFILE) -MODULE_SIMPLE_CLEAN=rm -f ./.ignore_age - include ../Simple.Rules @ 1.3 log @Update security/PAM to 0.77. Changes from version 0.75 include: * Numerous bug fixes for most of the PAM modules, including several string length checks and fixes (update recommended!). * fix for legacy behavior of pam_setcred and pam_close_session in the case that pam_authenticate and pam_open_session hadn't been called * pam_unix: - don't zero out password strings during password changing function * pam_wheel: - feature: can use the module to provide wheel access to non-root accounts. * pam_limits: - added '%' domain for maxlogins limiting, now '*' and @@group have the old meaning (every) and '%' the new one (all) - handle negative priority limits (which can apply to the superuser too). * pam_userdb: - require that all of typed password matches that in database * pam_access: - added the 'fieldsep=' argument, made a PAM_RHOST of "" equivalent to NULL Incidentally, cups-1.1.18 will once again do PAM authentication using pam_unix.so if built against PAM-0.77. @ text @d1 1 a1 1 $NetBSD$ @ 1.2 log @Update security/PAM to 0.75. Note that this release contains backwardly incompatible changes to libpam.so; prior versions were buggy so upgrading is highly recommended. Pkgsrc changes from version 0.72 include: * Honor ${PKG_SYSCONFDIR}: the config files are now found in /etc/pam.conf and /etc/pam/*.conf, or in the appropriate ${PKG_SYSCONFBASE} directory. * Convert to use the general INSTALL/DEINSTALL scripts. Changes from version 0.72 include: * bug fixes to almost every PAM module * pam_pwdb replaced with pam_unix * fixed a small security hole (more of a user confusion issue) with the unix and pwdb password helper binaries. * improved handling of the setcred/close_session and update chauthtok stack. *Warning* This is a backwardly incompatible change, but 'more sane' than before. (Bug 129775 - agmorgan) * added support for '/' symbols in pam_time and pam_group config files (support for modern terminal devices). Fixed infinite loop problem with '\\[^\n]' in these files. * added accessconf= feature to pam_access @ text @d3 11 a13 84 --- modules/pam_filter/pam_filter.c.orig Sun Nov 19 18:54:03 2000 +++ modules/pam_filter/pam_filter.c @@@@ -21,7 +21,7 @@@@ #include #include #include -#include +#include #include @@@@ -278,7 +278,7 @@@@ { int status=-1; char terminal[TERMINAL_LEN]; - struct termio stored_mode; /* initial terminal mode settings */ + struct termios stored_mode; /* initial terminal mode settings */ int fd[2], child=0, child2=0, aterminal; if (filtername == NULL || *filtername != '/') { @@@@ -305,28 +305,32 @@@@ /* set terminal into raw mode.. remember old mode so that we can revert to it after the child has quit. */ - /* this is termio terminal handling... */ + /* this is termios terminal handling... */ - if (ioctl(STDIN_FILENO, TCGETA, (char *) &stored_mode ) < 0) { + if (tcgetattr(STDIN_FILENO, &stored_mode ) < 0) { /* in trouble, so close down */ close(fd[0]); _pam_log(LOG_CRIT, "couldn't copy terminal mode"); return PAM_ABORT; } else { - struct termio t_mode = stored_mode; + struct termios t_mode = stored_mode; t_mode.c_iflag = 0; /* no input control */ t_mode.c_oflag &= ~OPOST; /* no ouput post processing */ /* no signals, canonical input, echoing, upper/lower output */ +#ifdef XCASE t_mode.c_lflag &= ~(ISIG|ICANON|ECHO|XCASE); +#else + t_mode.c_lflag &= ~(ISIG|ICANON|ECHO); +#endif t_mode.c_cflag &= ~(CSIZE|PARENB); /* no parity */ t_mode.c_cflag |= CS8; /* 8 bit chars */ t_mode.c_cc[VMIN] = 1; /* number of chars to satisfy a read */ t_mode.c_cc[VTIME] = 0; /* 0/10th second for chars */ - if (ioctl(STDIN_FILENO, TCSETA, (char *) &t_mode) < 0) { + if (tcsetattr(STDIN_FILENO, TCSANOW, &t_mode) < 0) { close(fd[0]); _pam_log(LOG_WARNING, "couldn't put terminal in RAW mode"); return PAM_ABORT; @@@@ -356,7 +360,7 @@@@ _pam_log(LOG_WARNING,"first fork failed"); if (aterminal) { - (void) ioctl(STDIN_FILENO, TCSETA, (char *) &stored_mode); + (void) tcsetattr(STDIN_FILENO, TCSANOW, &stored_mode); } return PAM_AUTH_ERR; @@@@ -398,7 +402,7 @@@@ /* initialize the child's terminal to be the way the parent's was before we set it into RAW mode */ - if (ioctl(fd[1], TCSETA, (char *) &stored_mode) < 0) { + if (tcsetattr(fd[1], TCSANOW, &stored_mode) < 0) { _pam_log(LOG_WARNING,"cannot set slave terminal mode; %s" ,terminal); close(fd[1]); @@@@ -572,7 +576,7 @@@@ if (aterminal) { /* reset to initial terminal mode */ - (void) ioctl(STDIN_FILENO, TCSETA, (char *) &stored_mode); + (void) tcsetattr(STDIN_FILENO, TCSANOW, &stored_mode); } if (ctrl & FILTER_DEBUG) { @ 1.1 log @Initial revision @ text @d3 1 a3 1 --- modules/pam_filter/pam_filter.c.orig Sat Oct 21 11:39:55 2000 d5 1 a5 8 @@@@ -18,13 +18,18 @@@@ #include #include +#include #include #include #include a10 4 + +#if (defined(BSD) && BSD >= 199306) +#define termio termios +#endif d14 12 a25 1 @@@@ -310,7 +315,7 @@@@ d27 2 a28 1 /* this is termio terminal handling... */ d35 6 a40 1 @@@@ -322,14 +327,18 @@@@ d56 1 a56 1 + if (tcsetattr(STDIN_FILENO, TCSANOW, &t_mode ) < 0) { d60 1 a60 1 @@@@ -359,7 +368,7 @@@@ d69 1 a69 1 @@@@ -401,7 +410,7 @@@@ d78 1 a78 1 @@@@ -575,7 +584,7 @@@@ @ 1.1.1.1 log @Initial import of PAM-0.72, a pluggable authentication module mechanism @ text @@