Module Name:	pkgsrc
Committed By:	jlam
Date:		Tue May 16 04:01:28 UTC 2006

Modified Files:
	pkgsrc/sysutils/webmin: DEINSTALL Makefile PLIST distinfo
	pkgsrc/sysutils/webmin/files: webmin.sh
	pkgsrc/sysutils/webmin/patches: patch-aa
Added Files:
	pkgsrc/sysutils/webmin: wbm.mk
	pkgsrc/sysutils/webmin/files: setup-pre.sh
Removed Files:
	pkgsrc/sysutils/webmin: MESSAGE
	pkgsrc/sysutils/webmin/patches: patch-ab

Log Message:
Update sysutils/webmin to 1.270.  Changes from version 1.170 include:

+ Add a wbm.mk makefile fragment which can be used to create pkgsrc-managed
  Webmin modules.

! Fixed a possible remotely exploitable security hole caused by a bug
  Webmin's use of the Perl syslog function.

* Multiple Webmin users and groups can be deleted at once.
* The Webmin Servers Index module can automatically scan for new servers
  on the local network on a regular schedule.
* The idle automatic logout time can be configured on a per-user basis
  in the Webmin Users and Usermin Configuration modules.
* Increased the speed of Webmin configuration reloads done by the
  Webmin Users and Webmin Configuration module. This also prevents any
  down-time while the config is being re-read.
* Improved the timeout detection in HTTP requests, to reduce the ability
  of incorrect or malicious clients to tie up the Webmin webserver
  process.
* Enhanced the Unix User Authentication feature to allow different
  users and group members to be treated as different Webmin users.
* Improved the way the OS is detected at install time, so that new
  versions will be automatically supported.
* Different SSL certificates for virtual IP interfaces can be specified
  in the Webmin and Usermin modules, for sites doing SSL virtual hosting.
* Fixed a nasty bug that could cause configuration file permissions
  and ownership to be changed when they are modified.
* An option has been added in the Webmin Configuration module to enable
  full PAM conversations when logging in. This is necessary for systems
  on which PAM asks for more than just a username and password.
* All modules now use a new API for writing to configuration files,
  which ensures that the file does not get written to or truncated if
  the system is out of disk space.
* Added a button to the Webmin Actions Log module for rolling back
  configuration files to before an action was taken.
* Password timeouts are now enabled by default, to prevent brute-force
  password guessing attacks.


To generate a diff of this commit:
cvs rdiff -r1.3 -r1.4 pkgsrc/sysutils/webmin/DEINSTALL
cvs rdiff -r1.2 -r0 pkgsrc/sysutils/webmin/MESSAGE
cvs rdiff -r1.13 -r1.14 pkgsrc/sysutils/webmin/Makefile
cvs rdiff -r1.2 -r1.3 pkgsrc/sysutils/webmin/PLIST
cvs rdiff -r1.5 -r1.6 pkgsrc/sysutils/webmin/distinfo
cvs rdiff -r0 -r1.1 pkgsrc/sysutils/webmin/wbm.mk
cvs rdiff -r0 -r1.1 pkgsrc/sysutils/webmin/files/setup-pre.sh
cvs rdiff -r1.2 -r1.3 pkgsrc/sysutils/webmin/files/webmin.sh
cvs rdiff -r1.3 -r1.4 pkgsrc/sysutils/webmin/patches/patch-aa
cvs rdiff -r1.1 -r0 pkgsrc/sysutils/webmin/patches/patch-ab

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.