CVS import: src/external/bsd/openpam/dist

["Christos Zoulas" <christos%netbsd.org@localhost>]

Module Name:    src
Committed By:   christos
Date:           Fri Oct 24 18:15:41 UTC 2014

Update of /cvsroot/src/external/bsd/openpam/dist
In directory ivanova.netbsd.org:/tmp/cvs-serv3477

Log Message:
OpenPAM Ourouparia                                              2014-09-12

 - ENHANCE: When executing a chain, require at least one service
   function to succeed.  This mitigates fail-open scenarios caused by
   misconfigurations or missing modules.

 - ENHANCE: Make sure to overwrite buffers which may have contained an
   authentication token when they're no longer needed.

 - BUGFIX: Under certain circumstances, specifying a non-existent
   module (or misspelling the name of a module) in a policy could
   result in a fail-open scenario.  (CVE-2014-3879)

 - FEATURE: Add a search path for modules.  This was implemented in
   Nummularia but inadvertently left out of the release notes.

 - BUGFIX: The is_upper() predicate only accepted the letter A as an
   upper-case character instead of the entire A-Z range.  As a result,
   service and module names containing upper-case letters other than A
   would be rejected.


Status:

Vendor Tag:     OPENPAM
Release Tags:   ourouparia-20140912
                
U src/external/bsd/openpam/dist/depcomp
U src/external/bsd/openpam/dist/autogen.sh
U src/external/bsd/openpam/dist/pamgdb.in
U src/external/bsd/openpam/dist/config.h.in
U src/external/bsd/openpam/dist/CREDITS
U src/external/bsd/openpam/dist/configure
U src/external/bsd/openpam/dist/missing
U src/external/bsd/openpam/dist/config.sub
U src/external/bsd/openpam/dist/RELNOTES
U src/external/bsd/openpam/dist/configure.ac
U src/external/bsd/openpam/dist/compile
U src/external/bsd/openpam/dist/ltmain.sh
U src/external/bsd/openpam/dist/HISTORY
U src/external/bsd/openpam/dist/config.guess
U src/external/bsd/openpam/dist/LICENSE
U src/external/bsd/openpam/dist/TODO
U src/external/bsd/openpam/dist/mkpkgng.in
U src/external/bsd/openpam/dist/README
U src/external/bsd/openpam/dist/Makefile.in
U src/external/bsd/openpam/dist/test-driver
U src/external/bsd/openpam/dist/install-sh
U src/external/bsd/openpam/dist/INSTALL
U src/external/bsd/openpam/dist/Makefile.am
U src/external/bsd/openpam/dist/aclocal.m4
U src/external/bsd/openpam/dist/lib/Makefile.am
U src/external/bsd/openpam/dist/lib/Makefile.in
N src/external/bsd/openpam/dist/lib/libpam/openpam_readword.c
N src/external/bsd/openpam/dist/lib/libpam/pam_strerror.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_set_feature.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_chauthtok.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_readlinev.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_nullconv.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_constants.c
N src/external/bsd/openpam/dist/lib/libpam/pam_vinfo.c
N src/external/bsd/openpam/dist/lib/libpam/pam_vprompt.c
N src/external/bsd/openpam/dist/lib/libpam/pam_acct_mgmt.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_set_option.c
N src/external/bsd/openpam/dist/lib/libpam/pam_set_data.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_dlfunc.h
N src/external/bsd/openpam/dist/lib/libpam/pam_get_item.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_debug.h
N src/external/bsd/openpam/dist/lib/libpam/openpam_static.c
N src/external/bsd/openpam/dist/lib/libpam/pam_getenv.c
N src/external/bsd/openpam/dist/lib/libpam/pam_get_mapped_username.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_strlcat.h
N src/external/bsd/openpam/dist/lib/libpam/pam_start.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_open_session.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_vasprintf.h
N src/external/bsd/openpam/dist/lib/libpam/openpam_restore_cred.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_asprintf.h
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_setcred.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_check_owner_perms.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_ttyconv.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_set_mapped_authtok.c
N src/external/bsd/openpam/dist/lib/libpam/pam_authenticate.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_strlset.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_straddch.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_configure.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_authenticate.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_strlcmp.h
N src/external/bsd/openpam/dist/lib/libpam/pam_get_user.c
N src/external/bsd/openpam/dist/lib/libpam/Makefile.in
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_set_mapped_username.c
N src/external/bsd/openpam/dist/lib/libpam/pam_get_mapped_authtok.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_features.h
N src/external/bsd/openpam/dist/lib/libpam/openpam_vasprintf.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_authenticate_secondary.c
N src/external/bsd/openpam/dist/lib/libpam/pam_get_authtok.c
N src/external/bsd/openpam/dist/lib/libpam/pam_prompt.c
N src/external/bsd/openpam/dist/lib/libpam/pam_open_session.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_free_data.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_strlcpy.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_get_mapped_authtok.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_get_option.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_subst.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_free_envlist.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_readline.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_findenv.c
N src/external/bsd/openpam/dist/lib/libpam/pam_chauthtok.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_dynamic.c
N src/external/bsd/openpam/dist/lib/libpam/pam_set_mapped_authtok.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_asprintf.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_borrow_cred.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_acct_mgmt.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_get_feature.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_strlcat.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_constants.h
N src/external/bsd/openpam/dist/lib/libpam/openpam_log.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_impl.h
N src/external/bsd/openpam/dist/lib/libpam/pam_set_mapped_username.c
N src/external/bsd/openpam/dist/lib/libpam/pam_set_item.c
N src/external/bsd/openpam/dist/lib/libpam/pam_error.c
N src/external/bsd/openpam/dist/lib/libpam/pam_get_data.c
N src/external/bsd/openpam/dist/lib/libpam/pam_putenv.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_strlcpy.h
N src/external/bsd/openpam/dist/lib/libpam/pam_setcred.c
N src/external/bsd/openpam/dist/lib/libpam/pam_verror.c
N src/external/bsd/openpam/dist/lib/libpam/Makefile.am
N src/external/bsd/openpam/dist/lib/libpam/pam_setenv.c
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_get_mapped_username.c
N src/external/bsd/openpam/dist/lib/libpam/pam_getenvlist.c
N src/external/bsd/openpam/dist/lib/libpam/pam_authenticate_secondary.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_features.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_load.c
N src/external/bsd/openpam/dist/lib/libpam/pam_info.c
N src/external/bsd/openpam/dist/lib/libpam/pam_close_session.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_dispatch.c
N src/external/bsd/openpam/dist/lib/libpam/pam_end.c
N src/external/bsd/openpam/dist/lib/libpam/openpam_strlset.h
N src/external/bsd/openpam/dist/lib/libpam/openpam_ctype.h
N src/external/bsd/openpam/dist/lib/libpam/openpam_cred.h
N src/external/bsd/openpam/dist/lib/libpam/pam_sm_close_session.c
U src/external/bsd/openpam/dist/modules/Makefile.in
U src/external/bsd/openpam/dist/modules/Makefile.am
U src/external/bsd/openpam/dist/modules/pam_unix/Makefile.am
C src/external/bsd/openpam/dist/modules/pam_unix/pam_unix.c
U src/external/bsd/openpam/dist/modules/pam_unix/Makefile.in
C src/external/bsd/openpam/dist/modules/pam_permit/pam_permit.c
U src/external/bsd/openpam/dist/modules/pam_permit/Makefile.in
U src/external/bsd/openpam/dist/modules/pam_permit/Makefile.am
U src/external/bsd/openpam/dist/modules/pam_deny/Makefile.in
C src/external/bsd/openpam/dist/modules/pam_deny/pam_deny.c
U src/external/bsd/openpam/dist/modules/pam_deny/Makefile.am
U src/external/bsd/openpam/dist/include/Makefile.am
U src/external/bsd/openpam/dist/include/Makefile.in
C src/external/bsd/openpam/dist/include/security/openpam_attr.h
U src/external/bsd/openpam/dist/include/security/Makefile.in
C src/external/bsd/openpam/dist/include/security/openpam_version.h
C src/external/bsd/openpam/dist/include/security/pam_constants.h
U src/external/bsd/openpam/dist/include/security/Makefile.am
C src/external/bsd/openpam/dist/include/security/pam_modules.h
C src/external/bsd/openpam/dist/include/security/pam_appl.h
C src/external/bsd/openpam/dist/include/security/pam_types.h
C src/external/bsd/openpam/dist/include/security/openpam.h
U src/external/bsd/openpam/dist/misc/gendoc.pl
U src/external/bsd/openpam/dist/bin/Makefile.am
U src/external/bsd/openpam/dist/bin/Makefile.in
U src/external/bsd/openpam/dist/bin/su/Makefile.in
C src/external/bsd/openpam/dist/bin/su/su.1
U src/external/bsd/openpam/dist/bin/su/Makefile.am
C src/external/bsd/openpam/dist/bin/su/su.c
U src/external/bsd/openpam/dist/bin/pamtest/Makefile.am
U src/external/bsd/openpam/dist/bin/pamtest/Makefile.in
C src/external/bsd/openpam/dist/bin/pamtest/pamtest.c
C src/external/bsd/openpam/dist/bin/pamtest/pamtest.1
U src/external/bsd/openpam/dist/bin/openpam_dump_policy/openpam_dump_policy.c
U src/external/bsd/openpam/dist/bin/openpam_dump_policy/Makefile.in
U src/external/bsd/openpam/dist/bin/openpam_dump_policy/Makefile.am
U src/external/bsd/openpam/dist/doc/Makefile.in
U src/external/bsd/openpam/dist/doc/Makefile.am
C src/external/bsd/openpam/dist/doc/man/pam_sm_close_session.3
C src/external/bsd/openpam/dist/doc/man/pam_strerror.3
U src/external/bsd/openpam/dist/doc/man/Makefile.in
C src/external/bsd/openpam/dist/doc/man/openpam_borrow_cred.3
C src/external/bsd/openpam/dist/doc/man/pam_get_authtok.3
C src/external/bsd/openpam/dist/doc/man/pam_conv.3
C src/external/bsd/openpam/dist/doc/man/pam_sm_acct_mgmt.3
C src/external/bsd/openpam/dist/doc/man/pam_verror.3
C src/external/bsd/openpam/dist/doc/man/pam_get_item.3
C src/external/bsd/openpam/dist/doc/man/pam_set_data.3
C src/external/bsd/openpam/dist/doc/man/pam_getenvlist.3
C src/external/bsd/openpam/dist/doc/man/pam_setenv.3
C src/external/bsd/openpam/dist/doc/man/openpam_get_option.3
C src/external/bsd/openpam/dist/doc/man/pam_error.3
U src/external/bsd/openpam/dist/doc/man/pam.man
C src/external/bsd/openpam/dist/doc/man/pam_vprompt.3
C src/external/bsd/openpam/dist/doc/man/pam.3
C src/external/bsd/openpam/dist/doc/man/pam_get_user.3
C src/external/bsd/openpam/dist/doc/man/pam_putenv.3
U src/external/bsd/openpam/dist/doc/man/Makefile.am
C src/external/bsd/openpam/dist/doc/man/pam_close_session.3
C src/external/bsd/openpam/dist/doc/man/openpam_set_option.3
C src/external/bsd/openpam/dist/doc/man/pam_chauthtok.3
C src/external/bsd/openpam/dist/doc/man/openpam_get_feature.3
U src/external/bsd/openpam/dist/doc/man/openpam.man
C src/external/bsd/openpam/dist/doc/man/openpam_ttyconv.3
C src/external/bsd/openpam/dist/doc/man/pam_sm_chauthtok.3
C src/external/bsd/openpam/dist/doc/man/pam.conf.5
C src/external/bsd/openpam/dist/doc/man/openpam_readword.3
C src/external/bsd/openpam/dist/doc/man/openpam_log.3
C src/external/bsd/openpam/dist/doc/man/openpam_subst.3
C src/external/bsd/openpam/dist/doc/man/pam_setcred.3
C src/external/bsd/openpam/dist/doc/man/openpam_nullconv.3
C src/external/bsd/openpam/dist/doc/man/openpam_free_envlist.3
C src/external/bsd/openpam/dist/doc/man/pam_vinfo.3
C src/external/bsd/openpam/dist/doc/man/pam_sm_authenticate.3
C src/external/bsd/openpam/dist/doc/man/pam_get_data.3
C src/external/bsd/openpam/dist/doc/man/pam_start.3
C src/external/bsd/openpam/dist/doc/man/openpam_readlinev.3
C src/external/bsd/openpam/dist/doc/man/pam_set_item.3
C src/external/bsd/openpam/dist/doc/man/pam_authenticate.3
C src/external/bsd/openpam/dist/doc/man/pam_prompt.3
C src/external/bsd/openpam/dist/doc/man/pam_info.3
C src/external/bsd/openpam/dist/doc/man/pam_sm_open_session.3
C src/external/bsd/openpam/dist/doc/man/openpam_restore_cred.3
C src/external/bsd/openpam/dist/doc/man/pam_getenv.3
C src/external/bsd/openpam/dist/doc/man/openpam_straddch.3
C src/external/bsd/openpam/dist/doc/man/pam_open_session.3
C src/external/bsd/openpam/dist/doc/man/pam_sm_setcred.3
C src/external/bsd/openpam/dist/doc/man/openpam_free_data.3
C src/external/bsd/openpam/dist/doc/man/pam_end.3
C src/external/bsd/openpam/dist/doc/man/openpam.3
C src/external/bsd/openpam/dist/doc/man/openpam_readline.3
C src/external/bsd/openpam/dist/doc/man/pam_acct_mgmt.3
C src/external/bsd/openpam/dist/doc/man/openpam_set_feature.3
U src/external/bsd/openpam/dist/t/t_file.c
U src/external/bsd/openpam/dist/t/t.h
N src/external/bsd/openpam/dist/t/t_openpam_ctype.c
U src/external/bsd/openpam/dist/t/t_openpam_readlinev.c
U src/external/bsd/openpam/dist/t/t_openpam_readword.c
U src/external/bsd/openpam/dist/t/Makefile.am
U src/external/bsd/openpam/dist/t/t_main.c
U src/external/bsd/openpam/dist/t/Makefile.in

65 conflicts created by this import.
Use the following command to help the merge:

        cvs checkout -jOPENPAM:yesterday -jOPENPAM src/external/bsd/openpam/dist