CVS commit: [netbsd-5] src/usr.bin/passwd

["Jeff Rizzo" <riz%netbsd.org@localhost>]

Module Name:    src
Committed By:   riz
Date:           Sat Nov 20 00:12:37 UTC 2010

Modified Files:
        src/usr.bin/passwd [netbsd-5]: local_passwd.c pam_passwd.c

Log Message:
Pull up following revision(s) (requested by gdt in ticket #1360):
        usr.bin/passwd/pam_passwd.c: revision 1.5
        usr.bin/passwd/local_passwd.c: revision 1.34
Log successful and unsuccessful attempts to change passwords, via -l
or pam, to ease IT audit guideline compliance.  Patch from Richard
Hansen of BBN in private mail.
Proposed on tech-kern with positive comments, except a suggestion I
didn't implement:
A possible future enhancement is refraining from logging if the old
password is empty, as some people abort password changing that way.
However, it's not clear if this complies with most guidelines that
require password change logging, and at first glance that appears to
be a fairly difficult change.


To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.31.10.1 src/usr.bin/passwd/local_passwd.c
cvs rdiff -u -r1.4.18.1 -r1.4.18.2 src/usr.bin/passwd/pam_passwd.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.