shadow/ChangeLog

2011-06-02  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/xmalloc.c: Harmonize message.

2011-06-02  Peter Vrabec  <pvrabec@redhat.com>

	* libmisc/find_new_uid.c, libmisc/find_new_gid.c: Add missing
	memory allocation check.

2011-06-02  Cal Peake  <cp@absolutedigital.net>

	* NEWS, libmisc/addgrps.c: Fix allocator loop. Continue to
	getgroups() when getgroups fails (-1) with errno==EINVAL.

2011-06-01  Simon Brandmair  <sbrandmair@gmx.net>

	* man/newusers.8.xml, man/suauth.5.xml, man/suauth.5.xml,
	  man/logoutd.8.xml, man/chgpasswd.8.xml, man/groups.1.xml,
	  man/faillog.5.xml, man/login.defs.d/MD5_CRYPT_ENAB.xml,
	  man/login.defs.d/DEFAULT_HOME.xml,
	  man/login.defs.d/LOGIN_RETRIES.xml,
	  man/login.defs.d/MD5_CRYPT_ENAB.xml,
	  man/login.defs.d/PORTTIME_CHECKS_ENAB.xml, 
	  man/login.defs.d/SHA_CRYPT_MIN_ROUNDS.xml:
	  Fix typos
	* man/po/de.po: German translation of manpages completed

2011-05-23  Innocent De Marchi  <tangram.peces@gmail.com>

	* po/ca.po: Catalan translation completed

2011-04-22  Miguel Figueiredo  <elmig@debianpt.org>

	* po/pt.po: Portuguese translation completed

2011-04-22  Thomas Blein  <tblein@tblein.eu>

	* po/fr.po: French translation completed

2011-04-16  Holger Wansing  <linux@wansing-online.de>

	* po/de.po: German translation completed

2011-04-15  Fred Maranhão  <fred.maranhao@gmail.com>

	* po/pt_BR.po: Brazilian Portuguese translation completed

2011-04-10  Yuri Kozlov  <yuray@komyakino.ru>

	* po/ru.po: Russian translation completed

2011-04-07  Daniel Nylander  <po@danielnylander.se>

	* po/sv.po: Swedish translation completed

2011-04-07  Joe Dalton  <joedalton2@yahoo.dk>

	* po/da.po: Danish translation completed

2011-04-05  Timur Birsh  <taem@linukz.org>

	* po/kk.po: Kazakh translation completed

2011-04-05  NAKANO Takeo  <nakano@st.seikei.ac.jp>

	* po/ja.po: Japanese translation completed

2011-03-30  YunQiang Su  <wzssyqa@gmail.com>

	* man/po/zh_CN.po: convert Simplified Chinese translation 
	  of manpages to gettext
	* po/zh_CN.po: Simplified Chinese translation completed

2010-02-15  Nicolas François  <nicolas.francois@centraliens.net>

	* man/ru/Makefile.am: Remove double inclusion of $(man_nopam)

2010-02-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/user_busy.c, src/userdel.c, src/usermod.c: Warn in
	user_busy() rather than in src/userdel.c or src/usermod.c to
	provide more accurate failure cause (user is logged in or user
	still executes processes).

2010-02-15  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c, lib/sgroupio.c, lib/shadowio.c, lib/pwio.c: Check
	entry validity before commits to databases.
	* libmisc/fields.c, libmisc/Makefile.am, lib/fields.c,
	lib/Makefile.am, po/POTFILES.in: fields.c moved from libmisc to
	lib.
	* lib/fields.c: Fail if input pointer is NULL.

2010-02-13  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/chfn.c, src/chsh.c: Fix CVE-2011-0721: forbid \n in
	gecos or shell.

2011-02-12  Nicolas François  <nicolas.francois@centraliens.net>

	* autogen.sh: Restore original autoreconf (see 2010-08-29's change
	for autogen.sh)
	* configure.in, man/po/Makefile.in.in, man/po/Makefile.in:
	Makefile.in.in replaced by Makefile.in to avoid config.status
	issues when there are multiple po directories.
	* man/po/LINGUAS: Adapted to above change.
	* man/po/POTFILES.in, man/po/XMLFILES: POTFILES.in replaced by
	XMLFILES.
	* man/Makefile.am: generate_mans.deps shall be included by make,
	not automake.

2010-11-19  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, libmisc/console.c: Fix CONSOLE parser. This caused login
	to hang when CONSOLE was configured with a colon separated list of
	TTYs.  See http://bugs.gentoo.org/show_bug.cgi?id=324419

2010-09-05  Nicolas François  <nicolas.francois@centraliens.net>

	Integrate review comments from Julien Cristau
	* libmisc/copydir.c: Missing parenthesis in comment.
	* libmisc/chowndir.c: Fixed memory leak on failed realloc().
	* libmisc/chowndir.c: Make sure the buffer for the path is large
	enough.
	* libmisc/remove_tree.c: Remove check for NULL before free().

2010-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Fix 2 fuzzy strings.

2010-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/usermod.c: Accept options in any order (username not
	necessarily at the end)

2010-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* autogen.sh: Expand autoreconf to avoid running autopoint.

2010-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2010-08-28  Brian M. Carlson  <sandals@crustytoothpaste.ath.cx>

	* man/chsh.1.xml: Fix comma splice.

2010-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/protoypes.h, libmisc/copydir.c, src/useradd.c:
	selinux_file_context renamed set_selinux_file_context.
	* lib/protoypes.h, libmisc/copydir.c, src/useradd.c:
	Added reset_selinux_file_context.
	* src/useradd.c: Check the return value of
	set_selinux_file_context and reset_selinux_file_context.
	* libmisc/copydir.c: Check the return value of
	reset_selinux_file_context.

2010-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Fix handling of environment variables when
	the environment is not changed. In particular, this makes su
	behave as documented regarding PATH and IFS (i.e. they are reset)
	when -p is provided.

2010-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* man/su.1.xml: Fix typo.

2010-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c, src/userdel.c, src/grpck.c, src/gpasswd.c,
	src/newusers.c, src/pwconv.c, src/chpasswd.c, src/logoutd.c,
	src/chfn.c, src/groupmems.c, src/usermod.c, src/pwunconv.c,
	src/expiry.c, src/groupdel.c, src/chgpasswd.c, src/useradd.c,
	src/su.c, src/groupmod.c, src/passwd.c, src/pwck.c, src/chage.c,
	src/groupadd.c, src/login.c, src/grpconv.c, src/groups.c,
	src/grpunconv.c, src/chsh.c: Prog changed to a constant string.

2010-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/limits.c: Avoid implicit conversion of integer to
	boolean.
	* libmisc/basename.c: Avoid implicit conversion of pointer to
	boolean.
	* libmisc/basename.c, lib/prototypes.h (Basename): Return a
	constant string.
	* libmisc/basename.c, libmisc/obscure.c, lib/prototypes.h,
	libmisc/xmalloc.c, libmisc/getdate.h, libmisc/system.c,
	libmisc/getgr_nam_gid.c, libmisc/failure.c, libmisc/valid.c: Add
	splint annotations.
	* libmisc/chowndir.c: Avoid memory leak.
	* libmisc/chowndir.c: Do not check *printf/*puts return value.
	* libmisc/chowntty.c: Avoid implicit conversion between integer
	types.
	* libmisc/obscure.c: Return a bool when possible instead of int.
	* libmisc/shell.c: Do not check *printf/*puts return value.
	* libmisc/shell.c: Do not check execle return value.
	* libmisc/setupenv.c: Avoid implicit conversion between integer
	types.
	* libmisc/xmalloc.c: size should not be zero to avoid returning
	NULL pointers.
	* libmisc/hushed.c: Do not check *printf/*puts return value.
	* libmisc/system.c: Avoid implicit conversion of integer to
	boolean. safe_system last argument is a boolean.
	* libmisc/system.c: Check return value of dup2.
	* libmisc/system.c: Do not check *printf/*puts return value.
	* libmisc/system.c: Do not check execve return value. 
	* libmisc/salt.c: Do not check *printf/*puts return value.
	* libmisc/loginprompt.c: Do not check gethostname return value.
	* libmisc/find_new_gid.c, libmisc/find_new_uid.c: Do not check
	gr_rewind/pw_rewind return value.
	* libmisc/ttytype.c: Limit the number of parsed characters in the
	sscanf format.
	* libmisc/ttytype.c: Test if a type was really read.
	* libmisc/sub.c: Do not check *printf/*puts return value.
	* libmisc/sub.c: Avoid implicit conversion of integer to boolean.
	* src/userdel.c: Fix typo in comment.
	* src/userdel.c: Avoid implicit conversion of boolean to integer.
	* src/userdel.c: safe_system last argument is a boolean.
	* src/newusers.c: Avoid implicit conversion of boolean to integer.
	* src/newusers.c: Avoid implicit conversion of integer to boolean.
	* src/usermod.c: Add brackets.
	* src/usermod.c: Avoid implicit conversion of characters or
	integers to booleans.
	* src/vipw.c: Avoid implicit conversion of integer to boolean.
	* src/su.c: Avoid implicit conversion of integer to boolean.
	* src/su.c: Add brackets.
	* src/useradd.c: Avoid implicit conversion of characters or
	integers to booleans.

2010-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/obscure.c, lib/prototypes.h (obscure): Return a bool
	instead of an int.
	* libmisc/obscure.c, libmisc/tz.c, src/passwd.c, lib/encrypt.c,
	libmisc/copydir.c, lib/prototypes.h: Add splint annotations.
	* libmisc/tz.c: Fix some const issues.
	* libmisc/tz.c: Avoid multi-statements lines.
	* libmisc/tz.c: Add brackets.
	* libmisc/copydir.c: Do not check *printf/*puts return value.
	* libmisc/copydir.c: Fail if we cannot set or reset the SELinux
	fscreate context.
	* libmisc/copydir.c: Use xmalloc instead of malloc.
	* libmisc/copydir.c: Do not check lutimes return value
	* src/vipw.c: Avoid implicit conversion of integer to boolean.
	* src/su.c (iswheel): Return a bool instead of an int.
	* src/passwd.c: Remove insert_crypt_passwd(). Use xstrdup instead.
	* src/passwd.c: Return constant strings when sufficient.
	* src/passwd.c: Do not check *printf/*puts return value.
	* src/passwd.c: Avoid implicit conversion of character to boolean.
	* src/passwd.c: Do not check sleep return value.
	* src/sulogin.c: Do not check *printf/*puts return value.
	* lib/encrypt.c: Do not check fprintf return value.

2010-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Fix a const issue.
	* src/passwd.c: Avoid multi-statements lines.
	* src/sulogin.c: Fix a const issue.

2010-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c, lib/prototypes.h: Caller can choose not to
	copy the extended attributes (the SELinux context is hence reset)
	* src/usermod.c: Copy the extended attributes.
	* src/useradd.c: Only reset the SELinux context.

2010-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Fixed typo.

2010-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/console.c, libmisc/motd.c, libmisc/setupenv.c,
	libmisc/sulog.c, libmisc/hushed.c, libmisc/failure.c,
	libmisc/loginprompt.c, libmisc/ttytype.c, libmisc/obscure.c,
	libmisc/pam_pass_non_interractive.c, src/userdel.c, src/login.c,
	lib/commonio.c, lib/commonio.h, libmisc/setugid.c,
	libmisc/setupenv.c: Fix some const issues.
	* libmisc/motd.c: Avoid multi-statements lines.
	* libmisc/motd.c: Support long MOTD_FILE.
	* libmisc/list.c, lib/prototypes.h: Revert previous change.
	dup_list and is_on_list are used with members as defined for the
	group structure, and thus even if the list is not modified, the
	list elements cannot be constant strings.
	* libmisc/system.c: Avoid C++ comments.
	* src/vipw.c: WITH_TCB cannot be tested inside a gettextized
	string. Split the Usage string.
	* lib/commonio.h: Re-indent.

2010-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/audit_help.c (audit_logger):pgname is not used. We let
	audit find out the name of the program.
	* libmisc/audit_help.c: Re-indent.

2010-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c: Avoid implicit conversion from signed to unsigned.

2010-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Make sure there are no NULL pointer dereference.

2010-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/remove_tree.c: Ignore snprintf return value.

2010-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h, libmisc/list.c: dup_list() and is_on_list() do
	not change the members of the list they receive. Added const
	qualifiers.

2010-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Re-indent.

2010-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Avoid multi-statements lines.

2010-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Fix a typo.

2010-06-24  Baurzhan Muftakhidinov  <baurthefirst@gmail.com>

	* NEWS, po/kk.po: Updated Kazakh translation.

2010-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Fix some typos. Minor updates: 886t70f187u.

2010-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2010-04-05  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newusers.8.xml, man/useradd.8.xml, man/groupadd.8.xml,
	man/login.defs.d/UMASK.xml, man/login.defs.d/CREATE_HOME.xml,
	man/login.defs.d/LOGIN_RETRIES.xml: Fix typos: choosen, overriden,
	bahavior.

2010-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: Document changes of ownerships.

2010-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* man/vipw.8.xml: Fix formatting typo.
	* man/vipw.8.xml: Document the login.defs parameters only when tcb
	is enabled.

2010-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: spool is a constant string.
	* src/useradd.c: Set the new copy_tree's paramater 'copy_root' to false 

2010-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: move_home() is only called if mflg is set.
	* src/usermod.c: Fail is -m is provided but the old home directory
	is not a directory.
	* src/usermod.c: Use the previous improvement of copy_tree to
	provide better error diagnosis.
	* src/usermod.c: When rename() is used, also change the ownership.
	* src/usermod.c: Do not change the ownership of the root directory
	twice.
	* src/usermod.c: When -u is provided, only change the ownership of
	the home directory if it is a directory.
	* src/usermod.c: Also change ownerships when -g is used.

2010-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h, libmisc/copydir.c: Add the old UID and GID to
	copy_tree to detect when ownership shall be changed.
	* libmisc/copydir.c: Document the behavior when the IDs are set to
	-1.
	* lib/prototypes.h, libmisc/copydir.c (copy_tree): Add parameter
	copy_root.
	* libmisc/copydir.c: error() and ctx can be static.
	* libmisc/copydir.c (copy_hardlink): Remove parameter src.

2010-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chowndir.c: Dynamically allocate memory to support
	path longer than 1024 characters.
	* libmisc/chowndir.c: Fix typos in documentation.
	* libmisc/chowndir.c: Support and document the behavior when a old
	or new ID is set to -1.
	* libmisc/chowndir.c: Improved error detection when chown fails.
	* libmisc/chowndir.c: Harmonize error handling strategy when an
	error occurs: stop changing ownership as soon as an error was
	detected.

2010-04-03  Nicolas François  <nicolas.francois@centraliens.net>

	* man/hu/passwd.5: Fix formatting typo.
	* man/id/login.1: Likewise.

2010-03-31  Nicolas François  <nicolas.francois@centraliens.net>

	* man/vipw.8.xml: When TCB is enabled, vipw uses login.defs.

2010-03-31  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, libmisc/copydir.c: When a hardlink is detected, the
	original hardlink should not be removed.

2010-03-30  Nicolas François  <nicolas.francois@centraliens.net>

	* po/POTFILES.in, libmisc/Makefile.am, lib/prototypes.h,
	libmisc/remove_tree.c, libmisc/copydir.c: Split remove_tree()
	outside of copydir.c to avoid linking against libacl or libattr.

2010-03-30  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: shell's name must be -su when a su fakes a login.

2010-03-30  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in, libmisc/copydir.c, man/useradd.8.xml,
	man/usermod.8.xml, src/Makefile.am: Added support for ACLs and
	Extended Attributes.

2010-03-30  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c: Document the sections closed by #endif

2010-03-27  Nicolas François  <nicolas.francois@centraliens.net>

	* man/vipw.8.xml: Add section ENVIRONMENT.

2010-03-26  Nicolas François  <nicolas.francois@centraliens.net>

	* etc/login.defs: Updated description of UMASK to indicate its
	usage by pam_umask.
	* man/login.defs.d/UMASK.xml: Likewise.

2010-03-25  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.1.xml: login does not check for new mails in PAM
	enabled versions. This is done by pam_mail.

2010-03-25  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/chpasswd.c, man/chpasswd.8.xml, man/login.defs.5.xml:
	PAM enabled versions: restore the -e option to allow restoring
	passwords without knowing those passwords. Restore together the -m
	and -c options.

2010-03-23  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c, src/vipw.c, src/newgrp.c: When the child is
	interrupted, stop ourself with a SIGSTOP signal.

2010-03-23  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c: Limit the scope of variable pid.
	* src/login_nopam.c: Limit the scope of variables end, lineno, i,
	str_len.
	* src/logoutd.c: Limit the scope of variable c.
	* src/vipw.c: Re-indent.
	* src/vipw.c: Close the file after the creation of the backup.
	* src/useradd.c (set_default): Close input file on failure.
	* src/useradd.c: Limit the scope of variables spool, file, fd, gr,
	gid, mode.
	* src/passwd.c: Limit the scope of variables last and ok.
	* src/chage.c: Fix typo (non breaking space).
	* src/login.c: Limit the scope of variables erasechar killchar, c,
	failed.
	* src/groups.c: Limit the scope of variable ngroups, pri_grp, i.
	* src/id.c: Limit the scope of variable i.

2010-03-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/utent.c (getutline): Remove getutline(). This function is
	no more used.
	* lib/groupmem.c: Limit the scope of variable i.
	* lib/shadow.c: Avoid implicit conversion of pointers and integers
	to booleans.
	* lib/shadow.c: Added brackets.
	* libmisc/limits.c: Limit the scope of variable tmpmask.
	* libmisc/copydir.c: Close opened file on failure.
	* libmisc/loginprompt.c: Limit the scope of variable envc.
	* libmisc/find_new_uid.c, libmisc/find_new_gid.c: Limit the scope
	of variable id.

2010-03-21  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_gid.c, libmisc/find_new_uid.c: Detect some
	misconfigurations of UID_MIN, UID_MAX, SYS_UID_MIN, SYS_UID_MAX (and
	the GID equivalents)

2010-03-20  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in: Next version will be 4.1.5.
	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2010-03-20  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/limits.c: Re-indent to make pmccabe happy.

2010-03-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/generate_translations.mak, man/generate_mans.mak: Fix
	distcheck. All manpages generation code shall be enclosed in
	ENABLE_REGENERATE_MAN conditions.

2010-03-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/useradd.8.xml: Do not document the features which are not
	working.
	* man/useradd.8.xml: Fix typo: -u was meant instead of -o.
	* man/useradd.8.xml: Document that the default behavior depends on
	CREATE_HOME.

2010-03-20  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c: Fix memory management insplit_groups().

2010-03-20  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/strtoday.c: Empty dates indicate a disabled date, this is
	not an error.

2010-03-19  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c, lib/commonio.c, po/POTFILES.in: Fix typos.
	* libmisc/limits.c: Removed unused variable.

2010-03-19  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Stop sorting entries when we reach the first
	NIS line.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chsh.c: Even for root, warn if an invalid shell is
	specified. Alioth#311305

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/limits.5.xml: Document the selection of the limits when
	multiple lines match the user.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/limits.c: Re-indent.
	* libmisc/limits.c: Reformat the documentation. Avoid personal
	comments.
	* man/limits.5.xml: Document the new features.

2010-03-18  Thomas Orgis  <thomas@orgis.org>

	* NEWS, libmisc/limits.c: Fix parsing of limits.
	* NEWS, libmisc/limits.c: Add support for infinite limits.
	* NEWS, libmisc/limits.c: Add support for @group syntax.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/tcbfuncs.h: Re-indent.
	* lib/tcbfuncs.h: Explicitly indicate function taking a void
	parameter.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: When exiting because of a failure, warn if an
	home directory created, but cannot be removed.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chowndir.c: Re-indent.
	* libmisc/chowndir.c: Avoid assignment in comparisons.
	* libmisc/chowndir.c: Added brackets and parenthesis.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/strtoday.c: Add support for numerical dates, assuming
	they are already specified in number of days since Epoch. Return
	-2 in case of errors to support the specification of -1.
	* src/usermod.c, src/useradd.c: Adapt to the new error value of
	strtoday().
	* src/chage.c:  Remove isnum(). Adapt to the new error value of
	strtoday(). Support for numerical dates is moved to strtoday().

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Harmonize name of parameters.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: Indicate which tools support TCB.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Unlock the password and shadow files when there is a
	failure to prepare the update in memory.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Only log to SYSLOG when acting on system files.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Document the sections closed by #endif
	* src/pwck.c, man/pwck.8.xml: No alternative shadow file can be
	given when USE_TCB is enabled.
	* src/pwck.c: Remove the -s option from the usage when USE_TCB is
	enabled. The option is still supported, but has no effect, as
	documented in the manpage.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Do not use pwd_file and spw_file. Always use the
	dbname() functions.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Re-indent.

2010-03-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c, src/usermod.c, src/vipw.c, src/useradd.c,
	src/pwck.c, src/chage.c, lib/shadowio.c: Explicitly use the
	SHADOWTCB_FAILURE return code instead of 0 or implicit conversion
	to booleans.

2010-03-18  Paweł Hajdan, Jr.  <phajdan.jr@gentoo.org>

	* src/pwck.c: Add support for TCB.
	* src/pwck.c: Use spw_dbname() instead of spw_file since TCB
	changes from a file to another depending on the user. Also use
	pw_dbname() for consistency.

2010-03-17  Nicolas François  <nicolas.francois@centraliens.net>

	* src/faillog.c: Re-indent.

2010-03-17  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/tcbfuncs.h: Added type shadowtcb_status.
	* lib/tcbfuncs.h, lib/tcbfuncs.c: Return a shadowtcb_status
	instead of an int.
	* lib/tcbfuncs.c: Do not return in OUT_OF_MEMORY.
	* lib/tcbfuncs.c: Only FreeBSD specify that the returned buffer is
	NULL in case of failure. The return value of asprintf shall be
	checked.
	* lib/tcbfuncs.c: Avoid implicit conversion of pointers or
	integers to booleans.
	* lib/tcbfuncs.c: Avoid assignments in comparisons.
	* lib/tcbfuncs.c: Do not free path before its last use.
	* lib/tcbfuncs.c: Include shadowio.h, needed for the
	spw_setdbname's prototype.
	* lib/tcbfuncs.c: Ignore fflush() return value.
	* lib/tcbfuncs.c: Avoid implicit signed to unsigned conversions.
	* lib/tcbfuncs.c: Avoid integer to char conversions.
	* lib/tcbfuncs.c: Include prototypes.h for the definition of Prog.
	* lib/tcbfuncs.c: Removed dead return.
	* lib/tcbfuncs.c: move_dir() and shadowtcb_move() need a non NULL
	stored_tcb_user.
	* lib/tcbfuncs.c: Avoid implicit int to mode_t conversion.
	* lib/tcbfuncs.c: Added brackets and parenthesis.
	* lib/tcbfuncs.c: Re-indent.

2010-03-17  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Avoid implicit conversion of pointers to
	booleans.
	* lib/commonio.c: Ignore the return value of close when a
	failure is reported.

2010-03-16  Nicolas François  <nicolas.francois@centraliens.net>

	* man/faillog.8.xml: Document the behavior in display mode of the
	-a option.
	* NEWS, man/faillog.8.xml, src/faillog.c: Extend the -a option to
	the non-display mode. This changes the default behavior of the -l,
	-m, -r, -t options when -a is not specified (restrict to existing
	users).

2010-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* man/chage.1.xml, man/login.defs.5.xml, man/pwck.8.xml,
	man/pwconv.8.xml, man/useradd.8.xml, man/userdel.8.xml,
	man/usermod.8.xml, man/vipw.8.xml: Document the usage of the
	TCB_AUTH_GROUP, TCB_SYMLINKS, and USE_TCB configuration
	parameters.
	* man/pwconv.8.xml, man/pwck.8.xml: Document the behavior when
	USE_TCB is enabled.

2010-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* po/POTFILES.in, lib/tcbfuncs.c: Add more strings for
	translation.
	* lib/tcbfuncs.c: Indicate the name of the program in error
	messages. Avoid perror.
	* src/useradd.c: Re-indent.
	* src/useradd.c: Add more strings for translation. Indicate the
	name of the program in error messages.
	* src/userdel.c: Re-indent.
	* src/userdel.c: Add more strings for translation. Indicate the
	name of the program in error messages.

2010-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: user_newname and user_newid cannot be used to
	test if the username or ID is changed. lflg and uflg should be
	used instead.

2010-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: Avoid perror. Give more verbose warnings.

2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/Makefile.am: Indicate that man/generate_mans.deps is
	generated.

2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Re-indent.
	* lib/commonio.c: Document the sections closed by #endif
	* lib/commonio.c: Added brackets.
	* lib/commonio.c: Avoid implicit conversion of integer to
	booleans.

2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: Re-indent.
	* src/userdel.c: Added brackets.
	* src/userdel.c: Avoid implicit conversion of pointers to
	booleans.

2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/shadowio.c: Re-indent.
	* lib/shadowio.c: Added brackets and parenthesis.
	* lib/shadowio.c: Document the sections closed by #endif
	* lib/shadowio.c: Avoid negation of comparisons.
	* lib/shadowio.c: Avoid implicit conversion of integer to booleans
	and booleans to integers.

2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Re-indent.
	* src/useradd.c: Added brackets.
	* src/useradd.c: Avoid implicit conversion of integers to
	booleans.
	* src/useradd.c: Harmonize error messages.

2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: Document the sections closed by #endif
	* src/vipw.c: Avoid implicit conversion of pointers or integers to
	booleans.
	* src/vipw.c: Added brackets and parenthesis.
	* src/vipw.c: Limit the definition of some variables and macros to
	the WITH_TCB scope.
	* src/vipw.c: Avoid assignment in comparisons.
	* src/vipw.c: Replace PASSWD_FILE (resp. GROUP_FILE and
	SGROUP_FILE) by pw_dbname () (resp. gr_dbname () and sgr_dbname ()).
	This is more consistent with the shadow file handling and may be
	useful to allow edition of another partition's files.


2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Re-indent.
	* src/usermod.c: Avoid implicit conversion of pointers to
	booleans.
	* src/usermod.c: Added parenthesis.

2010-03-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwunconv.c: Only check USE_TCB if configured WITH_TCB.

2010-03-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: Re-indent.
	* src/userdel.c: Avoid implicit conversion of pointers to
	booleans.
	* src/userdel.c: Document the sections closed by #endif

2010-03-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwconv.c: Only check USE_TCB if configured WITH_TCB.

2010-03-10  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c: Added parenthesis.

2010-02-14  Michael Bunk  <mb@computer-leipzig.com>

	* NEWS, lib/gshadow.c: Fix parsing of gshadow entries.

2010-01-30  Paweł Hajdan, Jr.  <phajdan.jr@gentoo.org>

	* NEWS: Add support for TCB.
	* lib/tcbfuncs.h, lib/tcbfuncs.c, lib/Makefile.am: New library to
	support TCB.
	* lib/prototypes, libmisc/copydir.c (remove_tree): Add boolean
	parameter remove_root.
	* configure.in: Add conditional WITH_TCB.
	* src/userdel.c, src/usermod.c: Add support for TCB. Update call to
	remove_tree().
	* src/pwconv.c, src/pwunconv.c: Should not be used with TCB enabled.
	* src/vipw.c: Add support for TCB. Update call to remove_tree().
	* src/useradd.c: Add support for TCB. Open the shadow file outside
	of open_files().
	* src/chage.c: Add support for TCB.
	* src/Makefile.am: Install passwd sgid shadow when TCB is enabled.
	* lib/getdefs.c, man/vipw.8.xml, man/login.defs.5.xml,
	man/login.defs/TCB_AUTH_GROUP.xml, man/login.defs/USE_TCB.xml,
	man/login.defs/TCB_SYMLINKS.xml, man/generate_mans.mak,
	man/generate_mans.deps, man/Makefile.am: New configuration
	parameters: TCB_AUTH_GROUP, TCB_SYMLINKS, USE_TCB.
	* lib/shadowio.c, lib/commonio.c: Add support for TCB.

2010-01-24  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/env.c: Fix sanitize_env() noslash support. This fixes
	Alioth#311740.

2010-01-24  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Do not sanitize the environment. This breaks
	--preserve-environment. This sanitation was disabled on Debian
	since quite some time with no reported issues, and sanitize_env()
	documentation agrees that it should be useless as all modern
	Unixes will handle setuid executables properly. This fixes
	Alioth#312287.

2010-01-24  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setupenv.c: Fix typo from 2009-11-01.

2010-01-24  Paweł Hajdan, Jr.  <phajdan.jr@gentoo.org>

	* configure.in: Add support for TCB in configure.in. Actual TCB
	support will follow.

2009-11-05  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/groupmod.c: Fixed groupmod when configured with
	--enable-account-tools-setuid.

2009-11-01  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, man/login.defs.d/ENV_SUPATH.xml, libmisc/setupenv.c:
	Harmonize other paths and documentation with previous
	change.

2009-11-01  Michel Hermier  <michel.hermier@gmail.com>

	* src/su.c: Set the default ENV_SUPATH to
	/sbin:/bin:/usr/sbin:/usr/bin (i.e. PATH when no ENV_SUPATH is
	specified).

2009-10-15  Thorsten Kukuk  <kukuk@suse.de>

	* src/faillog.c, man/faillog.8.xml: Harmonize long option in code
	and documentation. Use --lock-secs instead of --lock-time.

2009-10-05  Miroslav Kure  <kurem@upcase.inf.upol.cz>

	* po/cs.po: updated to 412t

2009-09-29  Clytie Siddall  <clytie@riverland.net.au>

	* po/vi.po: updated to 412t

2009-09-27  Miroslav Kure  <kurem@upcase.inf.upol.cz>

	* po/cs.po: updated to 411t1f

2009-09-24  Christian Perrier  <bubulle@debian.org>

	* man/po/fr.po: Updated French translation to 835t99f165

2009-09-24  Clytie Siddall  <clytie@riverland.net.au>

	* po/vi.po: updated to 348t30f34u

2009-09-08  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Avoid pre-decrement operator (--n). Add some
	comments.
	* libmisc/cleanup.c: Fix off by one in an assertion.

2009-09-08  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Fix indentation.
	* src/su.c: Add more messages for translation.
	* src/su.c: Ignore kill() return value when sending the TERM
	signal. If it fails, a KILL should be sent anyway.

2009-09-08  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/su.c: When su receives a signal, wait for the child to
	terminate (after sending a SIGTERM), and kill it only if it did
	not terminate by itself. No delay will be enforced if the child
	cooperates. See http://bugs.gentoo.org/282094
	* NEWS, man/su.1.xml: Document su's exit values.

2009-09-08  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: The default value for the CREATE_MAIL_SPOOL
	variable (i.e. if CREATE_MAIL_SPOOL= is specified without any
	values) is "no", not DCREATE_MAIL_SPOOL ("CREATE_MAIL_SPOOL=").

2009-09-08  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Avoid redefinition of SHELL. Use DSHELL instead.
	For consistency, change HOME, INACT, EXPIRE, SKEL, and
	CREATE_MAIL_SPOOL to DHOME, DINACT, DEXPIRE, DSKEL, and
	DCREATE_MAIL_SPOOL.

2009-09-08  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newusers.c: Prefer #ifdef over #if.

2009-09-08  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: We do not use SETPGRP_VOID, and already assume
	that setpgrp has a void argument. Remove AC_FUNC_SETPGRP to ease
	cross compiling.

2009-09-07  Nicolas François  <nicolas.francois@centraliens.net>

	* man/generate_translations.mak, man/generate_mans.mak,
	po/Makefile.in.in: Removing and restoring the config.xml file
	broke parallel builds. Build the manpages based on *.xml-config
	files instead of *.xml files.  The *.xml do not include config.xml
	anymore, which permits to run xml2po without needing to remove
	config.xml. The config.xml is restored in the *.xml-config files.
	* man/groupadd.8.xml: Implementation of the above.
	* man/generate_mans.deps: Updated dependencies

2009-09-07  Steve Grubb  <sgrubb@redhat.com>

	* libmisc/limits.c: Fix the format to match the unsigned long
	variable in argument.
	* libmisc/utmp.c: Fix tests. tmptty is a variable stack. ut_host
	is an array of the ut structure. None of them can be NULL.

2009-09-07  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/shadowmem.c: Only copy the required fields of the struct
	spwd. (start with the primitive types)
	* lib/shadowmem.c: Avoid memzero() on a possibly NULL pointer.
	* lib/groupmem.c: Only copy the required fields of the struct
	group. (start with the primitive types)
	* lib/groupmem.c: Avoid memzero() on a possibly NULL pointer.
	* lib/groupmem.c: Free gr_mem in addition to its elements.
	* lib/sgroupio.c: The struct sgrp has no primitive types to be
	copied initially.
	* lib/sgroupio.c: Avoid memzero() on a possibly NULL pointer.
	* lib/sgroupio.c: Free sg_mem and sg_add in addition to their
	elements.
	* lib/pwmem.c: Only copy the required fields of the struct
	passwd. (start with the primitive types)

2009-09-07  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgroupio.h: Harmonize splint annotations of sgr_locate()
	prototype with the one used in its definition.

2009-09-07  Steve Grubb  <sgrubb@redhat.com>

	* libmisc/copydir.c, lib/shadowmem.c, lib/groupmem.c, lib/pwmem.c:
	Fix some memory leaks.

2009-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c, src/lastlog.c, src/gpasswd.c, src/newusers.c,
	src/chpasswd.c, src/groupmems.c, src/usermod.c, src/chgpasswd.c,
	src/vipw.c, src/su.c, src/useradd.c, src/groupmod.c, src/passwd.c,
	src/groupadd.c, src/chage.c, src/faillog.c, src/chsh.c: Use
	booleans for tests.
	* src/userdel.c, src/gpasswd.c, src/groupmems.c, src/usermod.c,
	src/groupmod.c, src/passwd.c: Use a break even after usage().

2009-09-05  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c, src/groupmems.c: Split the groupmems and gpasswd
	Usage string. It was changed anyway to add the --help option.

2009-09-05  Mike Frysinger  <vapier@gentoo.org>

	* NEWS, src/userdel.c, src/lastlog.c, src/gpasswd.c,
	src/newusers.c, src/chpasswd.c, src/groupmems.c, src/usermod.c,
	src/chgpasswd.c, src/vipw.c, src/su.c, src/useradd.c,
	src/groupmod.c, src/passwd.c, src/groupadd.c, src/chage.c,
	src/faillog.c, src/chsh.c: If someone uses the -h/--help options,
	the usage should not go to stderr nor should the utility exit with
	non-zero status. All of the shadow utils do just this
	unfortunately, so convert them over to sanity.
	* man/groupmems.8.xml, man/gpasswd.1.xml: Added option -h/--help.

2009-09-05  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Fixed wrong format string.
	* lib/gshadow.c: Removed declaration of unused variable.

2009-08-30  Mike Frysinger  <vapier@gentoo.org>

	* man/generate_mans.mak, man/generate_translations.mak: Provide an
	useful error message when --enable-man is not enabled and the
	translated manpages are not generated.

2009-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/ENCRYPT_METHOD.xml: Avoid using sub-lists. They
	break the groff formatting.

2009-07-24  Nicolas François  <nicolas.francois@centraliens.net>

	* po/fr.po: Fix typos, based on reviews by the Debian French
	translation team.

2009-07-24  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in: Prepare for the next release 4.1.4.2.
	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2009-07-23  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Fixed definition of the SHELL configuration.

2009-07-23  Nicolas François  <nicolas.francois@centraliens.net>

	* etc/login.defs: SYS_GID_MIN /SYS_UID_MIN changed from 100 to
	101. GID 100 seems to be used statically.

2009-07-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/shell.c, src/su.c: Execute the scripts with "sh -"
	rather than "sh".

2009-07-22  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in, libmisc/shell.c, libmisc/setupenv.c, src/newgrp.c,
	src/su.c: Let the system shell be configurable.

2009-07-20  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/su.c, libmisc/shell.c: Added support for shells being a
	shell script without a shebang.

2009-07-19  Jean-Louis Dupond  <info@dupondje.be>

	* po/nl.po: Fix obvious mistake in Dutch translation.

2009-07-18  Peter Vrabec  <pvrabec@redhat.com>

	* NEWS, libmisc/find_new_gid.c, libmisc/find_new_uid.c: Do not use
	getpwent / getgrent for system accounts. Trying the low-IDs with
	getpwuid / getgrgid should be more efficient on LDAP configured
	systems with many accounts.
	* NEWS, libmisc/find_new_gid.c, libmisc/find_new_uid.c: Since
	system accounts are allocated from SYS_?ID_MIN to SYS_?ID_MAX in
	reverse order, accounts are packed close to SYS_?ID_MAX if
	SYS_?ID_MIN is already used but there are still dome gaps.

2009-07-05  Piarres Beobide  <pi+debian@beobide.net>

	* po/eu.po: Updated Basque translation.

2009-06-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/fi/Makefile.am: Stop distributing the Finnish translation of
	passwd.1 (outdated).

2009-06-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/pwck.8.xml: The shadow file is optional.
	* man/pwck.8.xml: Updated description of the checks. Added
	description of the shadow checks.
	* man/pwck.8.xml: Updated description of the checks.

2009-06-12  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Fixed typo (forunis)

2009-06-12  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/fputsx.c: Compare the result of fgets() with the provided
	buffer instead of NULL.

2009-06-12  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/gshadow.c: Removed limitation on the length of the gshadow
	lines.
	* lib/gshadow.c: Compare the result of fgetsx() with the provided
	buffer instead of NULL.

2009-06-11  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/xgetXXbyYY.c, libmisc/xgetpwnam.c, libmisc/xgetgrnam.c,
	libmisc/xgetpwuid.c, libmisc/xgetgrgid.c, libmisc/xgetspnam.c: Do
	not limit the size of the buffer to hold the group or user
	structure. It used to be limited to 16k, which caused issues with
	groups having many users.

2009-06-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c, man/su.1.xml: The default behavior (without -p or
	--login) is to copy most of the environment variables. Revert a
	previous change and update the documentation.

2009-06-06  Nicolas François  <nicolas.francois@centraliens.net>

	* man/passwd.5.xml, man/shadow.5.xml: Document the passwd- and
	shadow- files.

2009-06-06  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/su.c: Preserve the DISPLAY and XAUTHORITY environment
	variables, even with --login. This was not the case before in the
	PAM version.

2009-06-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c, src/groupmod.c, src/groupadd.c, src/faillog.c:
	Fix typos. Take this opportunity to split the usage messages into
	smaller messages (one per option).
	* src/pwck.c: Fix typo.

2009-06-05  Petri Koistinen  <petri.koistinen@iki.fi>

	* man/passwd.1.xml: The short option for --mindays is -n, not -m.

2009-06-04  Mike Frysinger  <vapier@gentoo.org>

	* .gitignore, man/.gitignore, src/.gitignore: Added .gitignore
	files.

2009-06-04  Nicolas François  <nicolas.francois@centraliens.net>

	* man/su.1.xml: Use <option> for the login.defs options.
	* man/su.1.xml: Improve the documentation of the su behavior
	regarding environment variables.
	* man/su.1.xml: Document that the login.defs file is used.

2009-06-04  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.1.xml: Document that the login.defs file is used.

2009-06-04  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/ENVIRON_FILE.xml: Document the format for
	comments.

2009-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* man/gpasswd.1.xml: Ease the translation of the refpurpose.
	* man/gpasswd.1.xml: Fix typo, shorten sentences.

2009-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* man/pwck.8.xml, man/grpck.8.xml: Move the SEE ALSO section at
	the end.

2009-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: Make sure opened files are closed.

2009-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* man/chpasswd.8.xml, man/grpck.8.xml, man/newgrp.1.xml,
	man/passwd.1.xml, man/sg.1.xml: Avoid a spurious comma.

2009-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: New placeholder for the next release.

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* po/fr.po: Updated French translation.

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: Prepare the next release.
	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/passwd.1.xml: passwd -u does not reset the expiry field.

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Updated some strings.

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/newgrp.c: Return the exit status of the child. Thanks
	to Lionel Elie Mamane.

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Added warnings for absolute symlinks which could
	be broken by rename().

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/userdel.c: Report errors to remove the user's mailbox.
	* NEWS, src/userdel.c: When USERGROUPS_ENAB is enabled, remove the
	user's group when the user was the only member. This is still not
	complete, as the user could have been specified twice in the
	members.
	* NEWS, src/userdel.c: Do not fail when -r is used and the home
	directory does not exist.

2009-05-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c: Added warning for relative symlinks.
	* libmisc/copydir.c (remove_tree): There is no need to check if
	the root argument exist. opendir() will report this.

2009-05-21  Nicolas François  <nicolas.francois@centraliens.net>

	* man/faillog.8.xml: Minor updates.

2009-05-21  Nicolas François  <nicolas.francois@centraliens.net>

	* man/faillog.5.xml: Split a long paragraph. Typo fixes.

2009-05-21  Nicolas François  <nicolas.francois@centraliens.net>

	* man/gpasswd.1.xml: Minor updates.

2009-05-21  Nicolas François  <nicolas.francois@centraliens.net>

	* man/gshadow.5.xml: Updated documentation.

2009-05-21  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml, man/userdel.8.xml, man/useradd.8.xml:
	Harmonize formatting of login.defs and default/useradd variables.
	Use an <option> tag.
	* man/usermod.8.xml: Added reference to gshadow(5).
	* man/login.defs.d/USERDEL_CMD.xml: Shorten the lines of the
	USERDEL_CMD example.

2009-05-21  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Use a boolean instead of 0.

2009-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: Fixed typos.

2009-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Next version will be 4.1.4.1.

2009-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newusers.8.xml: Added notes regarding the ownership of
	files.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupmod.8.xml: Split the -g option description into smaller
	paragraphs.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: Ownership of the mailbox is also changed with
	the -u option.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/useradd.8.xml: When no passwords are provided, the password
	is disabled, not the account.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newusers.8.xml, man/chpasswd.8.xml, man/useradd.8.xml,
	man/groupadd.8.xml, man/usermod.8.xml, man/chgpasswd.8.xml,
	man/groupmod.8.xml: Added warning: passwords set with these tools
	may not respect the password policy.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupadd.8.xml: Fixed formatting issue.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/userdel.8.xml: Added warning for files that could remain
	owner by the removed user.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/useradd.8.xml: Fix formatting typo.

2009-05-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupdel.8.xml: Move the warning on filesystems checks to
	the CAVEAT section.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/GID_MAX.xml: Fixed typo. useradd was specified
	twice.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupadd.8.xml, man/useradd.8.xml: names may also contain
	digits.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/shadow.5.xml: What is important in shadow is not the
	encryption, but that the file is not world readable.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Updated French translation. Thanks to ABBAS
	Belkacem for the login.defs update.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: Split the CAVEAT section in paragraphs.
	Updated information on the user_busy check.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/userdel.8.xml: Document tat -f may force teh deletion of a
	busy user.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/usermod.c: Check if the user is busy when the user's
	UID, name or home directory is changed.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c, libmisc/user_busy.c, libmisc/Makefile.am,
	lib/prototypes.h: Move user_busy() to libmisc/user_busy.c.
	* NEWS, libmisc/user_busy.c: On Linux, do not check if an user is
	logged in with utmp, but check if the user is running some
	processes. If not on Linux, continue to search for an utmp record,
	but make sure the process recorded in the utmp entry is still
	running.

2009-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: Document the -m/--move-home option.

2009-05-17  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c (user_busy): Check if the process registered in
	utmp is still running. This avoids rejecting the removal of an
	user when UTMP was not updated and indicate that the user is still
	logged in.

2009-05-16  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, libmisc/console.c (console): Remove the leading /dev/ from
	the tty before comparing with the lines specified by CONSOLE.
	* src/su.c: Do not remove the /dev/ prefix since it is done by
	console().

2009-05-16  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/CONSOLE.xml: Document the format of the CONSOLE
	file.

2009-05-16  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/login.c: Fix failure of non PAM enabled versions when
	an empty username is entered after a first prompt.

2009-05-16  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Added missing end of line at the end of success
	messages.

2009-05-16  sacha  <sachall@infonie.fr>

	* po/fr.po: Fixed typo in the vipw usage string.

2009-05-12  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/shell.c: Removed invalid code that executed the user's
	shell as a shell script when the direct execution of the user's
	shell failed with ENOEXEC and the user's shell has a shebang. The
	interpreter might not be the right one.  Executing the user's
	shell with sh -c might be better, but I'm not sure we should try
	harder when there is a failure. Note: the removed code was only
	included #ifndef __linux__.

2009-05-12  Nicolas François  <nicolas.francois@centraliens.net>

	* man/userdel.8.xml: The USERGROUPS_ENAB group may not be removed
	when the group is used by other users, not the user.

2009-05-12  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c, man/login.defs.d/USERDEL_CMD.xml: Move the
	USERDEL_CMD script example from the source code to the
	documentation.

2009-05-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newusers.8.xml: PAM enabled version: describe how passwords
	are updated and how newusers behave in case of error.

2009-05-10  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in: New release will be 4.1.4.
	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2009-05-10  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c: Added prototype of readlink_malloc(), and
	readlink_malloc() changed to static.

2009-05-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Avoid redeclaration of root_pw.

2009-05-10  NAKANO Takeo  <nakano@webmasters.gr.jp>

	* po/ja.po: Updated Japanese translation.

2009-05-10  Jean-Luc Coulon (f5ibh)  <jean-luc.coulon@wanadoo.fr>

	* po/fr.po: Updated French translation.

2009-05-10  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Avoid PATH_MAX. On glibc, we can use realpath
	with a NULL argument.
	* src/useradd.c: Replace PATH_MAX by a fixed constant. The buffer
	was not meant as a storage for a path.
	* src/useradd.c, src/newusers.c, src/chpasswd.c: Better detection
	of fgets errors. Lines shall end with a \n, unless we reached the
	end of file.
	* libmisc/copydir.c: Avoid PATH_MAX. Support file paths with any
	length. Added readlink_malloc().

2009-05-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Warn if an user has an entry in passwd and shadow,
	and the password field in passwd is not 'x'.
	* src/grpck.c: Warn if a group has an entry in group and gshadow,
	and the password field in group is not 'x'.

2009-05-09  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/ENCRYPT_METHOD.xml,
	man/login.defs.d/MD5_CRYPT_ENAB.xml,
	man/login.defs.d/SHA_CRYPT_MIN_ROUNDS.xml: Updated note for PAM
	enabled versions. These variables are only used for group
	passwords in this case.

2009-05-09  Nicolas François  <nicolas.francois@centraliens.net>

	* man/chpasswd.8.xml: Sorted options alphabetically.

2009-05-09  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/newusers.c, src/Makefile.am: Added support for
	changing the passwords with PAM.
	* src/newusers.c: Split the usage string in smaller parts to
	allow enabling single parts.
	* man/newusers.8.xml: Indicate the options and configuration
	variables valid for PAM and non-PAM versions.
	* man/newusers.8.xml: Added pointer to /etc/pam.d/chpasswd.

2009-05-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: Remove duplicate definitions of exit codes.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/non_interactive_pam_conv.c,
	libmisc/pam_pass_non_interractive.c, libmisc/Makefile.am: Renamed.
	* libmisc/pam_pass_non_interractive.c, lib/prototypes.h:
	non_interactive_password and non_interactive_pam_conv do not need
	to be externally visible.
	* libmisc/pam_pass_non_interractive.c: Added declaration of
	ni_conv.
	* libmisc/pam_pass_non_interractive.c: Only compile ifdef USE_PAM.
	* libmisc/pam_pass_non_interractive.c, lib/prototypes.h:
	Added do_pam_passwd_non_interractive().
	* src/chpasswd.c: Use do_pam_passwd_non_interractive().

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/pam_pass.c: Removed comment regarding pam_misc. This is
	checked by configure.in.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.5.xml: PAM enabled chpasswd do not use any
	configuration variable from login.defs.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* man/passwd.1.xml: Differentiate the files used for PAM and
	non-PAM versions.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* man/chpasswd.8.xml: Describe how chpasswd behaves in case of error.
	* man/chpasswd.8.xml: Describe the PAM enabled chpasswd behavior.
	* man/chpasswd.8.xml: Differentiate the files and configurations
	used for PAM and non-PAM versions.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: failcount does not need to be signed.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/Makefile.am: PAM enabled chpasswd now needs to be linked to
	the PAM library, even if --enable-account-tools-setuid is not
	used.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chpasswd.c: Added the line number when an error is reported
	instead of only the username.
	* src/chpasswd.c: PAM enabled chpasswd may change the password
	database (for the user where the password update succeeded) even
	if there were a failure for one user. Do not indicate that changes
	were ignored.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Exit immediately when unlocking a password would
	result in a passwordless account. This avoid printing a success
	message after the warning.

2009-05-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/nologin.c: Include <stdlib.h> to get EXIT_FAILURE.

2009-05-04  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in: Fix build failure on non-PAM enabled system
	when --without-pam is not specified.

2009-04-30  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Ignore the return values of fclose() and
	unlink() in case of failure of fopen_set_perms() or
	create_backup().
	* lib/commonio.c: Should the backup file be unlink'ed in case of
	failure of create_backup()?

2009-04-30  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/getulong.c: Added splint annotations.

2009-04-30  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c, src/chfn.c, src/groupmems.c, src/usermod.c,
	src/userdel.c, src/chpasswd.c, src/grpck.c, src/gpasswd.c,
	src/groupdel.c, src/chgpasswd.c, src/vipw.c, src/useradd.c,
	src/su.c, src/groupmod.c, src/passwd.c, src/pwck.c,
	src/groupadd.c, src/chage.c, src/login.c, src/faillog.c,
	src/sulogin.c, src/chsh.c, src/pwconv.c: Added splint annotations.
	* src/userdel.c, src/pwconv.c, src/lastlog.c, src/grpck.c,
	src/vipw.c, src/groupmod.c, src/passwd.c, src/pwck.c, src/login.c,
	src/sulogin.c, src/usermod.c: Use return instead of exit at the
	end of main().
	* src/gpasswd.c, src/passwd.c, src/faillog.c: Use the exitcodes.h
	exit codes.
	* src/chpasswd.c: Added missing ||.
	* src/nologin.c: Do not include exitcodes.h.
	* src/nologin.c: Added brackets.
	* src/nologin.c: Avoid assignments in comparisons.

2009-04-30  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/getgr_nam_gid.c, lib/get_gid.c, lib/get_pid.c,
	lib/get_uid.c: Added splint annotations.

2009-04-30  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/exitcodes.h: Define E_SUCCESS as EXIT_SUCCESS. Added FIXMEs.
	* libmisc/chowntty.c, libmisc/rlogin.c, libmisc/sub.c,
	src/newusers.c, libmisc/sulog.c, libmisc/system.c, src/logoutd.c,
	src/groups.c, src/id.c, lib/encrypt.c, libmisc/audit_help.c,
	libmisc/limits.c: Return EXIT_FAILURE instead of 1, and
	EXIT_SUCCESS instead of 0.
	* libmisc/audit_help.c: Replace an fprintf() by fputs().
	* libmisc/audit_help.c: Remove documentation of the audit_logger
	returned values. The function returns void.
	* libmisc/system.c: Only return status if waitpid succeeded.
	Return -1 otherwise.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/chpasswd.c: Added support for changing the passwords
	with PAM.
	* src/chpasswd.c: Split the usage string in smaller parts to
	allow enabling single parts.
	* src/chpasswd.c: Do not set a global lock on the password files.
	This is done by PAM each time a password is updated.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Include <utmpx.h> and <utmp.h> to define
	USER_NAME_MAX_LENGTH.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Change a snprintf() to strncpy(). There are no
	format.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Harmonize status report at the end of passwd.
	Prefix the messages with "passwd: ", only indicate a password
	change if the password was actually changed, and password
	properties changed otherwise.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chgpasswd.c, src/newusers.c: There is no need to test for 0
	after getopt_long. No options have flag != NULL.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Replace #if by #ifdef
	* libmisc/Makefile.am, lib/prototypes.h,
	libmisc/non_interactive_pam_conv.c: Added
	non_interactive_pam_conv() and non_interactive_password.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c, src/userdel.c, src/logoutd.c: Replace #if by #ifdef

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: Harmonize messages.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/lastlog.c: Replace atoi() by getulong().

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.h: Replace HAVE_UTMPX_H by USE_UTMPX.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/rlogin.c: Replace atoi() by getulong().

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.c: Replace HAVE_UTMPX_H by USE_UTMPX.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chkname.c: Do not include <utmp.h> and <utmpx.h>. There
	are no more needed.

2009-04-28  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/limits.c: Replace strtol() by getlong().
	* libmisc/limits.c: Replace HAVE_UTMPX_H by USE_UTMPX.

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupmod.8.xml, man/usermod.8.xml, man/groupadd.8.xml,
	man/useradd.8.xml: Added note to warn about insecurity in using
	--password.
	* man/groupmod.8.xml: Removed not regarding default if --password
	is not used. This was a cut&paste from groupadd.8.xml.
	* man/passwd.1.xml: Split some paragraphs.
	* man/passwd.1.xml: Recommend other encryption methods than DES.

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Move update_utmp() after the PID or session ID
	changed in order to get more accurate data in UTMP. This also
	fixes "exec login" when login in installed setuid.

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Reuse a string and avoid an untranslated message
	"Login incorrect".

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Replace HAVE_UTMPX_H by USE_UTMPX.
	* src/login.c: Avoid name clash between global variables and the
	update_utmp() arguments.

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupadd.c, lib/commonio.c, lib/groupio.c: Added missing
	include of <assert.h>

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Replace HAVE_UTMPX_H by USE_UTMPX.
	* lib/prototypes.h, libmisc/log.c: Added splint annotations.
	* libmisc/log.c: Added SYSLOG warning when lseek fails (should not
	happen).

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/mail.c, libmisc/copydir.c: Added missing include of
	<assert.h>

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/env.c: Added assertions on the snprintf results.

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in: Added configure option --enable-utmpx,
	disabled by default. This defines USE_UTMPX, which should be used
	instead of HAVE_UTMPX_H.
	* libmisc/utmp.c: Replace HAVE_UTMPX_H by USE_UTMPX.
	* libmisc/utmp.c: Removed old comment on HAVE_STRUCT_UTMP_UT_ID
	and UTMPX support.

2009-04-27  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Fix typo.

2009-04-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c: Close the databases before changing the UDI and
	GID.

2009-04-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/myname.c: Updated splint annotations.

2009-04-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Added splint annotations.
	* lib/commonio.c: old_context should be local to commonio_close(),
	not global.

2009-04-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Do not freecon strings duplicated with strdup.
	Also avoid allocation of memory.
	* src/passwd.c: Use SYSLOG instead of syslog.

2009-04-25  Miroslav Kure  <kurem@upcase.inf.upol.cz>

	* po/cs.po: Updated to 352T7f8u

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.h, lib/commonio.c: Added splint annotations.
	* lib/commonio.c: Do not assumes eptr is always notnull.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, po/pt.po: Updated Portuguese translation.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c: Added splint annotations.
	* libmisc/copydir.c: Added assert to help splint.
	* libmisc/copydir.c: Free allocated structures in cas of failure.
	* libmisc/copydir.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/copydir.c: Use buffers of size PATH_MAX instead of 1024
	for filenames.
	* libmisc/copydir.c: Use fchmod and fchown to change the mode of
	the opened file.
	* libmisc/copydir.c: Indicate the mode to open(), even if we chmod
	later.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Added prototypes of getulong() and get_pid().
	* lib/prototypes.h: Added splint annotations.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Use get_pid() instead of strtol.
	* lib/commonio.c: Replace an int by a size_t.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.h: Added splint annotations.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgroupio.c: Free allocated structures on failure.
	* lib/sgroupio.c: Added splint annotations.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/Makefile.am, lib/get_pid.c, lib/getulong.c: Added get_pid()
	and getulong().

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/getlong.c: Do not check for NULL string but empty string.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c: Updated splint annotations.
	* lib/groupio.c: Added assert to help splint.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Check assumptions on snprintf().
	* src/useradd.c: Replace peror by an strerror and avoid an
	intermediate buffer.
	* src/useradd.c: Save errno between the failure and the report by
	perror/strerror.
	* src/useradd.c: Prefer xmalloc to malloc.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* src/lastlog.c: Remove function calls from within assert().

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/obscure.c: Change some int to size_t.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/console.c: Use a less disturbing construct for splint.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/limits.c: Parse the limits, umask, nice, maxlogin, file
	limit with getlog() / getulong(). This also means, in case of
	non-PAM enabled systems, that the umask specified on the GECOS
	fields should start with a 0 if specified in octal. (it used to be
	force to octal). Do the appropriate cast and range checking.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/salt.c: In case gettimeofday() fails, get some entropy
	from the PID.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setupenv.c: Prefer snprintf to sprintf, even if a small
	context indicates no issues.
	* libmisc/setupenv.c: Avoid implicit conversion of pointers to
	booleans.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/loginprompt.c: Prefer snprintf to sprintf, even if a
	small context indicates no issues.

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* src/faillog.c: Remove function calls from within assert().

2009-04-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/mail.c: Ignore the return value of puts().
	* libmisc/mail.c: Prefer snprintf to sprintf, even if a small
	context indicates no issues.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c, lib/commonio.h, lib/groupio.c, lib/groupio.h,
	lib/pwio.c, lib/pwio.h, lib/shadowio.c, lib/shadowio.h: Added
	splint annotations. The *_locate() and *_next() functions
	currently return an observer. As the structure are often modified
	by the caller, it could maybe be changed to exposed later. (and
	non-const)

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/pwauth.c: Use a boolean for wipe_clear_pass and use_skey.
	* lib/pwauth.c: Added splint annotations.
	* lib/pwauth.c: Added brackets and parenthesis.
	* lib/pwauth.c: Avoid assignments in comparisons.
	* lib/pwauth.c: Avoid implicit conversion of pointers or
	characters to booleans.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmod.c: Cast ID to ulongs and use ulong formats for IDs.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c: Added splint annotations.
	* src/newgrp.c: audit_buf is only used in newgrp. Make it static.
	* src/newgrp.c: Ignore the return value of fputs().
	* src/newgrp.c: Use exit(EXIT_FAILURE) instead of exit(1).

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/pwdcheck.c (passwd_check): The progname is not used.
	* libmisc/pwdcheck.c: Ignore the return value of sleep().
	* libmisc/pwdcheck.c: Use exit(EXIT_FAILURE) instead of exit(1).

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setupenv.c: Avoid assignments in comparisons.
	* libmisc/setupenv.c: Added brackets and parenthesis.
	* libmisc/setupenv.c: Ignore the return value of fclose (file
	opened read-only)
	* libmisc/setupenv.c: Ignore the return value of puts().
	* libmisc/setupenv.c: Avoid implicit conversion of pointers to
	booleans.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_gid.c, libmisc/find_new_uid.c,
	libmisc/isexpired.c, src/groupadd.c, lib/pwauth.h, lib/groupmem.c,
	lib/shadowmem.c, lib/pwmem.c, lib/prototypes.h: Added splint
	annotations.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/loginprompt.c: Use exit(EXIT_FAILURE) instead of
	exit(1).
	* libmisc/loginprompt.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/loginprompt.c: Ignore return value of putc().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/env.c, libmisc/age.c: Added splint annotations.
	* libmisc/age.c: Added brackets and parenthesis.
	* libmisc/age.c: Ignore the return value of fclose (file opened
	read-only)
	* libmisc/age.c: Ignore puts() return value.
	* libmisc/age.c: Use exit(EXIT_FAILURE) instead of exit(1).
	* libmisc/age.c: Avoid assignments in comparisons.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/fputsx.c, lib/gshadow.c, lib/commonio.h: Added splint
	annotations.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/get_gid.c: gidstr should not be NULL, but the check was
	meant to make sure it is not empty.
	* lib/get_uid.c: Likewise.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/getdef.c: Added splint annotations.
	* lib/getdef.c: Ignore fputs() return value.
	* lib/getdef.c: Use EXIT_FAILURE / EXIT_SUCCESS for exit()

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/faillog.c: Added splint annotations.
	* src/faillog.c: Cast ID to ulongs and use ulong formats for IDs.
	* src/faillog.c: Ignore fflush() return value.
	* src/faillog.c: Added parenthesis.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpck.c: Ignore puts return value.
	* src/grpck.c: Avoid variable format string.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/lastlog.c: Use EXIT_FAILURE / EXIT_SUCCESS for exit()
	* src/lastlog.c: Added splint annotations.
	* src/lastlog.c: Avoid global pwent.
	* src/lastlog.c: Cast ID to ulongs and use ulong formats for IDs.
	* src/lastlog.c: Avoid assignment in comparisons.
	* src/lastlog.c: Ignore fclose() return value since the file is
	only opened for reading.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c: Added assertion to guide splint (and me).

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_gid.c: Use booleans instead of char fo
	used_gids.
	* libmisc/find_new_gid.c: Use getdef_ulong and cast to git_t to
	get GID values.
	* libmisc/find_new_gid.c: Use UL as a prefix for ulong values.
	* libmisc/find_new_uid.c: Likewise.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/yesno.c: Ignore the return value of puts.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/age.c: Use exit(EXIT_FAILURE) instead of exit(1).
	* libmisc/age.c: The return value of execl() is not used.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/xgetXXbyYY.c, libmisc/myname.c, libmisc/getgr_nam_gid.c,
	libmisc/salt.c, libmisc/list.c, libmisc/cleanup.c, src/login.c,
	lib/getdef.h, lib/groupio.c, lib/getlong.c, lib/gshadow_.h,
	lib/sgroupio.c, lib/shadowio.c, lib/pwio.c, lib/commonio.h,
	lib/fputsx.c, lib/prototypes.h: Added splint annotations.
	* lib/groupio.c: Avoid implicit conversion of pointers to
	booleans.
	* lib/groupio.c: Free allocated buffers in case of failure.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Added splint definitions to replace <locale.h>

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c, libmisc/age.c, libmisc/shell.c, lib/groupio.c,
	lib/groupio.h, lib/sgroupio.c, lib/sgroupio.h, lib/shadowio.c,
	lib/pwio.c, lib/commonio.c, lib/shadowio.h, lib/pwio.h,
	lib/commonio.h, lib/prototypes.h: Added splint annotations.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Only set ut_time and ut_tv if gettimeofday()
	succeeds.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Fix the check for empty host in prepare_utmp()
	and prepare_utmpx().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: The ut argument of prepare_utmp() and
	prepare_utmpx () might be NULL. ut_id needs to be forged in that
	case.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Removed old documentation of setutmp().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Use xmalloc() rather than malloc().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: The name returned by ttyame() needs to be copied
	locally.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Added assert()s for NULL (or ! NULL) username, and
	pwd. This helps splint.
	* src/login.c: Added splint annotations.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: After login_prompt(), do not check for unset
	username, but for empty username.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Define USER_NAME_MAX_LENGTH, based on utmp and
	default to 32.
	* libmisc/chkname.c: Use USER_NAME_MAX_LENGTH.
	* src/login.c: Use USER_NAME_MAX_LENGTH instead of the default 32.
	username also needs to be bigger than USER_NAME_MAX_LENGTH because
	it has to be nul-terminated.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Use xmalloc() instead of malloc().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Ignore the return value of puts(), fputs(),
	strftime().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: timeout, delay, and retries should be unsigned.
	* src/login.c: Ignore the return value of alarm() and sleep().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: If we cannot get the terminal configuration, do not
	change the terminal configuration. setup_tty() is just a best
	effort configuration of the terminal.
	* src/login.c: Ignore failures when setting the terminal
	configuration.
	* src/login.c: Fail if the ERASECHAR or KILLCHAR configurations
	are not compatible with a cc_t type.

2009-04-22  Paul Szabo  <psz@maths.usyd.edu.au>

	* src/login.c: utent might be NULL after get_current_utmp().

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Removed temp_shell. No more used.
	* src/login.c: lastlog is only used #ifndef USE_PAM
	* src/login.c: Rename lastlog to ll to avoid name clash with the
	lastlog type.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Added update_utmp() to group the prepare_utmp and
	setutmp (and the utmpx versions).

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Do not include netdb.h. gethostbyname() is no more
	called from within login.c. Also UT_ADDR does not exist anymore.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Check if login is run with effective root
	privileges. This should be more helpful to users than a failure to
	find an utmp entry or failure to access a file.

2009-04-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Reworked. Get rid of Linux specific stuff. Get rid
	of global utent/utxent variables. Only reuse the ut_id and maybe
	the ut_host fields from utmp.
	* lib/prototypes.h, libmisc/utmp.c: Removed checkutmp(),
	setutmp(), setutmpx().
	* lib/prototypes.h, libmisc/utmp.c: Added get_current_utmp(),
	prepare_utmp(), prepare_utmpx(), setutmp(), setutmpx().
	* libmisc/utmp.c (is_my_tty): Only compare the name of the utmp
	line with ttyname(). (No stat of the two terminals to compare the
	devices).
	* libmisc/utmp.c: Use getaddrinfo() to get the address of the
	host.
	* configure.in: Check for getaddrinfo().
	* configure.in: Use AC_CHECK_MEMBERS to check for the existence of
	fields in the utmp/utmpx structures.
	* configure.in: Reject systems with utmpx support but no ut_id
	field in utmp. This could be fixed later if needed.
	* src/login.c: Use the new utmp functions. This also simplifies
	the failtmp() handling.
	* src/login.c: passwd_free() renamed to pw_free() and
	shadow_free() renamed to spw_free()

2009-04-21  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in: Enable --enable-account-tools-setuid by
	default for PAM builds, as it used to be before the introduction
	of this option.

2009-04-21  Nicolas François  <nicolas.francois@centraliens.net>

	* etc/pam.d/Makefile.am: Distribute all pam.d files, even if
	ACCT_TOOLS_SETUID is not enabled.

2009-04-21  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/shadowmem.c: Added spw_free().
	* lib/shadowio.c: Use spw_free() for shadow_free().
	* lib/groupmem.c: Added gr_free().
	* lib/groupio.c: Use gr_free() for group_free().
	* lib/pwmem.c: Include define.h before prototypes.h
	* lib/pwmem.c: Added pw_free().
	* lib/pwio.c: Use pw_free() for passwd_free().
	* lib/sgroupio.c: Added sgr_free().
	* lib/sgroupio.c: Use sgr_free() for gshadow_free().
	* lib/prototypes.h: Added gr_free(), pw_free(), sgr_free(),
	spw_free().

2009-04-21  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/shell.c: Add brackets and parenthesis.
	* libmisc/shell.c: Avoid assignments in comparisons.
	* libmisc/shell.c: Re-indent.

2009-04-21  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Added MIN and MAX macros.
	* libmisc/salt.c: Removed MIN and MAX macros.

2009-04-20  Sven Joachim  <svenjoac@gmx.de>

	* NEWS, src/lastlog.c: Fix regression causing empty reports.
	Get the size of the file before printing the entries.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Get rid of pwent. pwd is sufficient as long as it
	is always coming from xgetpwnam. There is no need to copy pwd to
	pwent, this was not a good idea anyway as the strings from pwd
	were not duplicated.
	* src/login.c: Always free the pwd and spwd structure when we
	retrieve a new one. This will clear the password of the previous
	user from the memory.
	* src/login.c: user_passwd is used to keep point to the password
	of the user being authenticated.
	* src/login.c: (non PAM) Fail if the user's entry cannot be found
	after the user updated her password (if expire() requested an
	update).
	* src/login.c: If the user does not exist on the system, there is
	no need to build a pwd structure (with shell).

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: ttytype already checks for TTYTYPE_FILE and TERM.
	Just call ttytype.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Open the PAM session before pam_setcred and before
	initgroups. This is more consistent with rfc86.0.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Added helper functions get_pam_user() and
	get_failent_user().

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Added parameter to check_nologin. This will help
	getting rid of the global pwent variable.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Added comments.
	* src/login.c: Close the user and group files before dropping root
	privileges.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: We do not need to keep the old umask. Discard the
	umask() return value.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/hushed.c, lib/prototypes.h, src/login.c: Change the
	hushed() prototype to take a username instead of a passwd
	structure in argument. The passwd entry is retrieved withing
	hushed().

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setugid.c: Updated comments.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.h, libmisc/failure.c, src/login.c: Added
	username as first parameter of failtmp to avoid issues with
	non-null terminated ut_user, unavailability of ut_user, incomplete
	username (that should not happen currently).

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/ttytype.c: Add brackets and parenthesis.
	* libmisc/ttytype.c: Avoid assignments in comparisons.

2009-04-20  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/pwio.c, lib/shadowio.c, lib/groupio.c, lib/sgroupio.c: Fill
	the password fields with zeros before they are freed.

2009-04-19  Changwoo Ryu  <cwryu@debian.org>

	* po/ko.po: Updated Korean translation.

2009-04-19  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/login.c: Also check if the authentication token of the
	user has to be updated in case the user was already authenticated.

2009-04-19  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: fflg is already restricted to root. Move
	pam_acct_mgmt(), in case of fflg, earlier. This is equivalent and
	simplifies the code.

2009-04-19  Paul Szabo  <psz@maths.usyd.edu.au>

	* libmisc/utmp.c: Always call endutent or endutxent when setutent
	or setutxent were used.

2009-04-19  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Added comment to make sure PAM_RHOST or PAM_TTY do
	not get set to unsanitized values.

2009-04-17  Paul Szabo  <psz@maths.usyd.edu.au>

	* NEWS, src/login.c: Do not trust the current utmp entry's ut_line
	to set PAM_TTY.
	* libmisc/utmp.c: Do not trust the current utmp entry's ut_line.
	Always set ut_line based on ttyname(0).

2009-04-15  Nicolas François  <nicolas.francois@centraliens.net>

	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.
	* configure.in: Updated version number.

2009-04-15  Peter Vrabec  <pvrabec@redhat.com>

	* NEWS, src/userdel.c: Fixed SE Linux support. semanage should be
	called at the end.
	* src/useradd.c: Always call selinux_update_mapping() (i.e.
	semanage), not only when -Z is used.

2009-04-15  Peter Vrabec  <pvrabec@redhat.com>

	* NEWS, srclib/getlong.c: Fix parsing of octal numbers.

2009-04-15  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/login.c: Fix segfault when no user is provided on the
	command line.

2009-04-15  Nicolas François  <nicolas.francois@centraliens.net>

	* README, libmisc/system.c: Was contributed by Dan Walsh.

2009-04-15  Nicolas François  <nicolas.francois@centraliens.net>

	* NEW, src/vipw.c: SE Linux: Set the default context to the
	context of the file being edited. This ensures that the backup
	file inherit from the file's context.

2009-04-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: There are no default values for --inactive
	and --gid. If the options are no provided, the original values are
	not changed.

2009-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2009-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: If there are no root account, or if the root account
	has an UID != 0, default to the first UID 0 account.

2009-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Restore the echoctl, echoke, onclr flags to the
	terminal termio flags. Reset echoprt, noflsh, tostop. This
	behavior seems to have change by mistake in earlier releases
	(4.0.8, for no obvious reason).

2009-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Fix the count of failures before login exits in
	case of PAM enabled configurations.

2009-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* man/passwd.1.xml: Document that passwd uses PAM to authenticate
	and change passwords on PAM-enabled builds.

2009-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newusers.c: Add more information to the mkdir and chown
	failure messages.

2009-04-12  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Updated some login.defs entries. Thanks to
	Belkacem Abbas.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/MAX_MEMBERS_PER_GROUP.xml,
	man/login.defs.d/CONSOLE_GROUPS.xml: Fix typos.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/es/Makefile.am: Disable the distribution of Spanish
	manpages. They are outdated. Please contact
	pkg-shadow-devel@lists.alioth.debian.org if you wish to provide
	updates.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c, src/useraddd.c: Fix the usage string so that it
	does not change depending on the configure option. Use a format.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Fix the usage of the unused macro.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h, libmisc/age.c, src/expiry.c, src/login.c: A
	shadow entry is now sufficient for agecheck. Remove the first
	passwd entry parameter.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c, src/usermod.c: Only call selinux_update_mapping()
	if Zflg is set.
	* src/userdel.c: Rename argv to args to avoid nameclash with the
	main() parameters.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/getgr_nam_gid.c: Added support for NULL argument.
	* libmisc/chowntty.c: Reuse getgr_nam_gid(), and get rid of atol().

2009-04-11  Peter Vrabec  <pvrabec@redhat.com>

	* libmisc/find_new_gid.c, libmisc/find_new_uid.c: For system
	accounts, return the first unused ID, starting from the max value.
	This could be useful later to increase the static IDs range.

2009-04-11  Peter Vrabec  <pvrabec@redhat.com>

	* NEWS, src/useradd.c, man/useradd.8.xml: add -Z option to map
	SELinux user for user's login.
	* NEWS, src/usermod.c, man/usermod.8.xml: Likewise.
	* libmisc/system.c, libmisc/Makefile.am, lib/prototypes.h: Added
	safe_system(). Used to run semanage.
	* lib/prototypes.h, libmisc/copydir.c: Make a
	selinux_file_context() an extern function.
	* libmisc/copydir.c: Reset SELinux to create files with default
	contexts at the end of copy_tree().
	* NEWS, src/userdel.c: Delete the SELinux user mapping for user's
	login.

2009-04-11  Peter Vrabec  <pvrabec@redhat.com>

	* src/useradd.c (get_defaults): Close the default file after the
	default values were read.

2009-04-11  Christian Perrier  <bubulle@debian.org>

	* po/sk.po: Slovak translation updated. Thanks to Ivan Masár

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/Makefile.am, lib/prototypes.h: Added sgetspent.c.

2009-04-11  Nicolas François  <nicolas.francois@centraliens.net>

	* po/POTFILES.in: Added missing files. Sorted.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/getdef.c: Use getlong instead of strtol/strtoul.
	* libmisc/getlong, lib/getlong.c, libmisc/Makefile.am,
	lib/Makefile.am: getlong.c moved from libmisc/ to lib/.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/shadow.c: Replace strtol() by getlong(). Also detect more
	issues in a numerical shadow entry field.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgetspent.c: Only compile ifndef HAVE_SGETSPENT

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgetspent.c: Replace strtol() by getlong(). Also detect more
	issues in a numerical shadow entry field.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c: More strtol() replaced by getlong().
	* src/chage.c: expdays renamed to expdate. It is a date, even if
	expressed in a number of days since Jan 1, 1970.
	* src/chage.c: Likewise: lastday renamed to lstchgdate. Also fix
	the --lastday documentation.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: pwd_to_spwd() should be declared if USE_PAM is
	NOT defined.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Replace getnumber() by getlong(). This permits to
	get rid of another strtol().

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/getlong.c: Include both <stdlib.h> and <errno.h> needed
	for strtol and errno, and do not include "defines.h" (not needed).

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c, src/usermod.c, libmisc/getgr_nam_gid.c,
	libmisc/Makefile.am, lib/prototypes.h: Moved getgr_nam_gid() from
	src/useradd.c and src/usermod.c to libmisc/getgr_nam_gid.c.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Re-indent.
	* src/useradd.c: Use getlong instead of get_number.
	* src/useradd.c: Get rid of strtol.
	* src/useradd.c: Provide better warning in case a default GROUP or
	INACTIVE value is not valid in /etc/default/useradd.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Re-indent.
	* src/usermod.c: Specifying a inactivity value < -1 is not valid.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Prepare the next 4.1.3 release.
	* po/*.po, man/po/*.po: Updated PO files.

2009-04-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h, libmisc/addgrps.c: restrict add_groups() to
	ifndef USE_PAM.
	* lib/prototypes.h: Remove the declaration of add_cons_grps(). The
	function does not exist.
	* libmisc/setugid.c libmisc/age.c (setup_uid_gid): is_console is
	never set ifndef USE_PAM. Change the prototype of setup_uid_gid()
	when USE_PAM is not defined. This permits to remove add_groups
	from PAM builds.  setup_uid_gid is already subject to
	HAVE_INITGROUPS.
	* libmisc/pwd2spwd.c (pwd_to_spwd): pwd_to_spwd() is not used in
	PAM builds.

2009-04-05  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: do_update_age is only used ifndef USE_PAM. Make it
	more explicit.

2009-04-05  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Set errno to 0 before calling strtol.

2009-04-05  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/isexpired.c: If there are no shadow entry, there is no
	need to convert the password entry to a shadow entry. The password
	is valid.

2009-04-05  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: Split some paragraphs into smaller units.

2009-04-05  Nicolas François  <nicolas.francois@centraliens.net>

	* man/shadow.5.xml: Rewrote to mention the meaning of special
	values.

2009-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/pwd2spwd.c, src/chpasswd.c, src/newusers.c,
	src/passwd.c, src/pwck.c, src/pwconv.c, src/useradd.c,
	src/usermod.c: On Jan 01, 1970, do not set the sp_lstchg field to
	0 (which means that the password shall be changed during the next
	login), but use -1 (password aging disabled).
	* src/passwd.c: Do not check sp_min if sp_lstchg is null or -1.

2009-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c: When no shadow entry exist, the default sp_lstchg
	value should be -1 (no aging) rather than 0 (password must be
	changed).
	* src/chage.c: For password expiration and inactivity, indicate
	that the password must be changed when sp_lstchg is null rather
	than indicating that expiration and inactivity are not enabled.

2009-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/isexpired.c: Document the isexpired return value.

2009-04-04  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/age.c: Return a specific message when sp_lstchg is null.

2009-03-21  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgetpwent.c, lib/sgetgrent.c: Use get_uid and get_gid to
	validate the UIDs or GIDs instead of atoi/strtol.

2009-03-21  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/get_gid.c, libmisc/get_uid.c, libmisc/Makefile.am,
	lib/get_gid.c, lib/get_uid.c, lib/Makefile.am: get_uid.c and
	get_gid.c moved from libmisc/ to lib/.

2009-03-21  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpck.c (check_members): When a member is removed, do not
	increase the index.
	* src/grpck.c: Fix typo in messages and comments.

2009-03-21  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Call fsync before closing the backup file. This
	ensures that the backup file is flushed to the storage medium.
	* src/useradd.c: Likewise for the default file, faillog, lastlog,
	and mail spool.
	* src/usermod.c: Likewise for the faillog and lastlog file.
	* src/vipw.c: Likewise for the backup file.
	* libmisc/sulog.c: Likewise for the su log.

2009-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmod.c: Embed gshadow related cleanup in #ifdef
	SHADOWGRP.

2009-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: get_number() replaced by getlong().
	* src/usermod.c: When the user is renamed, make sure we do not
	override an user with the same name (in passwd or shadow).

2009-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: log_gpasswd_success_gshadow is in the cleanup
	stack only when the shadow group file is present.

2009-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/userdel.c: Make sure the user exists in the shadow
	database before calling spw_remove().
	* NEWS, src/userdel.c: When the user's group is removed, make sure
	the group is in the gshadow database before calling sgr_remove().
	* src/userdel.c: Improve warning's wording.

2009-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/cleanup.c: Fix del_cleanup. The arguments were not
	desynchronized with the cleanup functions.
	* libmisc/cleanup.c: cleanup_function_args is an array of void
	pointer, not strings.

2009-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_gid.c: Fix find_new_gid() the current group
	database was not taken into account.

2009-03-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/addgrps.c: Fix compilation warnings.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/Makefile.in.in: xml2po cannot exclude one entity for
	expansion. Make sure config.xml does not exist when the POT file
	is created in order to keep the configurations in the POT file
	* man/generate_translations.mak: make sure config.xml does not
	exist neither when the translated XML is generated. Add the
	missing %config; (strip out by xml2po). and make sure config.xml
	is present when the translated manpage is generated.
	* man/generate_mans.mak: config.xml is needed for the generation
	of manpages (already in the .deps for the English manpages, but
	needed for the translations).
	* man/Makefile.am: Added missing CREATE_HOME.xml.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* etc/login.defs: Added note for PAM enabled configurations.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/Makefile.am: Compute the dependencies for building the
	manpages.
	* man/generate_mans.deps: Added Makefile dependency rules.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/addgrps.c: Fix warnings.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/fr.po: Added missing space.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/lastlog.8.xml: Document that there might be entries, for
	deleted users, that are not displayed.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/chgpasswd.8.xml, man/chpasswd.8.xml: Fix the man page in
	case SHA crypt is not supported.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/vipw.8.xml: MAX_MEMBERS_PER_GROUP is not used by vipw and
	vigr.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.5.xml: Indicate that sg uses the same variables
	as newgrp.
	* man/login.defs.5.xml: vipw does not use any variable.
	* man/login.defs.5.xml: In PAM enabled configurations, login still
	uses some login.defs variables.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: use a <replaceable> instead of a
	<emphasis remap='I'>.

2009-03-14  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newusers.8.xml: Document the behavior of newusers for each
	field.
	* man/newusers.8.xml: Do not add the note on PAM on non-PAM
	enabled configurations.

2009-03-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newusers.c: Make sure the SHA related variables are not
	compiled when disabled at configuration time.
	* src/newusers.c: Added FIXME
	* src/chpasswd.c: Make sure the SHA related variables is not
	compiled when disabled at configuration time.
	* src/chgpasswd.c: Make sure the SHA related variables is not
	compiled when disabled at configuration time.
	* src/chgpasswd.c: Fix the test for getlong() failure.
	* src/useradd.c, man/useradd.8.xml: Added long name for the -l
	option: --no-log-init.
	* src/faillog.c: Added support for the specification of a range of
	users with -u.
	* src/faillog.c: Do not call print_one() for users which do not
	exist.
	* src/faillog.c: Make sure the user's entry is not outside the
	faillog file and initialize the faillog structure in that case.
	* src/faillog.c: Move print_one() closer to print().
	* src/faillog.c: reset(), setmax(), set_locktime() can also change
	entries of user which do not exist.
	* src/faillog.c: reset(), setmax() and set_locktime() shall not
	create entries for users which have no entries if the value has to
	be set to 0.
	* src/faillog.c: reset(), setmax() and set_locktime(): better
	handling of users whose entry is outside the faillog file.
	* src/faillog.c: Improved option handling. Options can now be
	specified in any order.
	* src/faillog.c: Improved warnings when options are not
	compatible or when the faillog cannot be open with the right mode.
	* src/faillog.c: Only fstat the faillog file once.
	* man/faillog.8.xml: Improved documentation.

2009-03-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Remove the documentation of options from the
	main() documentation. It will always be outdated here.

2009-03-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/lastlog.c: lastlog variable renamed to ll to avoid name
	clash with the structure.
	* src/lastlog.c: check the offset in print_one() so that it is
	used for the display of one entry or a set of entries.
	* src/lastlog.c: Do not loop over the whole user database when -u
	is used with a single user.
	* src/lastlog.c: Check the size of the lastlog file so that we
	can identify failures to read.

2009-03-13  Mike Frysinger  <vapier@gentoo.org>

	* libmisc/salt.c: Removed l64a prototype. The libc declaration is
	non static, but the internal definition is static.

2009-03-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: log_gpasswd_success_gshadow only exists ifdef
	SHADOWGRP.

2009-03-08  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/getlong.c: Make sure the getlong argument is not empty.
	* libmisc/get_gid.c, libmisc/get_uid.c, libmisc/Makefile.am,
	lib/prototypes.h: Added get_uid() and get_gid() to parse user and
	group IDs.
	* NEWS, src/grpck.c, src/pwck.c: Issue a warning if an ID is set
	to -1.
	* NEWS, src/newusers.c, src/usermod.c, src/useradd.c,
	src/groupmod.c, src/groupadd.c: Make sure no user or group are
	created with an ID set to -1.

2009-03-07  Nicolas François  <nicolas.francois@centraliens.net>

	* contrib/adduser-old.c, contrib/adduser.c: Do not use the target
	of snprintf in one of the format's parameters.

2009-03-07  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupmems.8.xml: groupmems does not create new user.

2009-03-03  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, po/LINGUAS, po/kk.po: Added Kazakh translation. Thanks to
	Timur Birsh <taem@linukz.org>.

2009-02-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_gid.c, libmisc/find_new_uid.c: Avoid calling
	getgrent()/getpwent() after they return NULL. This caused LDAP to
	return at the beginning of the group/user entries.

2009-01-27  Nicolas François  <nicolas.francois@centraliens.net>

	* man/nologin.8.xml: Fix typo (HYSTORY -> HISTORY).

2009-01-26  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/gpasswd.c: Only report success to audit and syslog
	when the changes are committed to the system. Do not log failure
	for on-memory changes to audit or syslog. Make sure failures and
	inconsistencies will be reported in case of unexpected failures
	(e.g. malloc failures). Only specify an audit message if it is not
	implicitly implied by the type argument. Removed fail_exit
	(replaced by atexit(do_cleanups)). Log failures in case of
	permission denied.

2009-01-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/UMASK.xml: Indicate how UMASK is used and
	limitations.
	* man/limits.5.xml: Remove space before an end of tag.
	* man/useradd.8.xml, man/login.defs.d/CREATE_HOME.xml,
	man/login.defs.5.xml: Document the CREATE_HOME variable.
	* etc/login.defs: Improve the documentation of UMASK.

2009-01-06  Sebastian Rick Rijkers  <srrijkers@gmail.com>

	* NEWS, src/su.c: Preserve COLORTERM in addition to TERM when su
	is called with the -l option.

2008-12-23  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chkname.c: Use a bool when possible instead of integers.
	* libmisc/chkname.c: Add brackets and parenthesis.

2008-12-23  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupadd.8.xml, configure.in, man/config.xml.in: Use the
	real group name length limit in the documentation.

2008-12-23  Nicolas François  <nicolas.francois@centraliens.net>

	* src/Makefile.am: Only link with the needed library. When
	compiled with PAM support, chfn, chsh, login, newgrp, passwd, and
	su do not need the libcrypt library.

2008-12-23  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/cleanup_group.c: Fix compilation when compiled without
	shadow group support.

2008-12-23  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupdel.c: Remove the fail_exit () declaration.

2008-12-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Fix the support for usernames with arbitrary
	length.

2008-12-22  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupadd.c, src/groupdel.c, src/groupmod.c: Re-indent.
	* src/groupmod.c: Do not add the command synopsis to the main ()
	documentation. This avoids outdated information.
	* libmisc/chkname.c: Remove outdated comments.

2008-12-22  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/audit_help.c: Added audit_logger_message() to log
	messages not related to an account.
	* lib/prototypes.h, libmisc/cleanup.c, libmisc/cleanup_group.c,
	libmisc/cleanup_user.c, libmisc/Makefile.am: Added stack of
	cleanup functions to be executed on exit.
	* NEWS, src/groupadd.c, src/groupdel.c, src/groupmod.c: Only
	report success to audit and syslog when the changes are committed
	to the system. Do not log failure for on-memory changes to audit
	or syslog. Make sure failures and inconsistencies will be reported
	in case of unexpected failures (e.g. malloc failures). Only
	specify an audit message if it is not implicitly implied by the
	type argument. Removed fail_exit (replaced by atexit(do_cleanups)).

2008-12-15  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/gpasswd.c: Added support usernames with arbitrary
	length.

2008-11-27  Mike Frysinger  <vapier@gentoo.org>

	* configure.in: Fix the "$enable_acct_tools_setuid" = "yes" test.

2008-11-27  Mike Frysinger  <vapier@gentoo.org>

	* NEWS, configure.in, libmisc/chkname.c: make group max length a
	configure option.  The configure behavior encoded is:
	<no option> -> default of 16 (like today);
	--with-group-name-max-length -> default of 16;
	--without-group-name-max-length -> no max length;
	--with-group-name-max-length=n > max is set to n.

2008-11-23  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: (!USE_PAM) Provide visible information indicating that
	su was denied.

2008-11-23  Nicolas François  <nicolas.francois@centraliens.net>

	* man/su.1.xml: Fix the su synopsis. username is referenced in the
	manpage, not LOGIN.
	* man/ja/login.1: Fix the path of the utmp and wtmp files.

2008-11-23  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chowntty.c: Improve the logs for fchown and fchmod
	failures.
	* libmisc/chowntty.c: Only closelog() when failure cause an exit.

2008-11-23  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, libmisc/chowntty.c: Fix a race condition that could lead to
	gaining ownership or changing mode of arbitrary files.
	* NEWS, libmisc/chowntty.c, libmisc/utmp.c: is_my_tty() moved from
	utmp.c to chowntty.c. checkutmp() now only uses an existing utmp
	entry if the pid matches and ut_line matches with the current tty.
	This fixes a possible DOS when entries can be forged in the utmp
	file.
	* libmisc/chowntty.c, src/login.c, lib/prototypes.h: Remove the
	tty argument from chown_tty. chown_tty always changes stdin and
	does not need this argument anymore.

2008-10-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/gshadow.5.xml, man/shadow.5.xml, man/passwd.5.xml,
	man/grpck.8.xml: Sorted SEE ALSO references.
	* man/gshadow.5.xml: Added reference to grpck(8) and grpconv(8).
	* man/pwck.8.xml: Added reference to grpck(8).
	* man/shadow.5.xml: Added reference to pwck(8).
	* man/passwd.5.xml: Added reference to pwck(8).
	* man/grpck.8.xml: Added reference to pwck(8).

2008-10-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/*.xml, man/login.defs.d/*.xml: Added copyright and licence
	header.

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Always check the return value of the pam_* APIs.

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Use a dynamic buffer for usernames.
	* src/login.c: Copy the name of the user authenticated by PAM to
	username. This simplify later logging (avoid USE_PAM
	conditional).
	* src/login.c: Check that no username is specified with -r.
	* src/login.c: Make sure a username is specified with -f.
	* src/login.c: Explicitly tag the end of the #ifdef RLOGIN
	sections.
	* src/login.c: Erase the username later since it it used for the
	fake password check (in case of empty password).
	* src/login.c, man/login.1.xml: the username is not an optional
	parameter of -f. Fix the getopt optstring, remove the parsing of
	username in the -f processing block, and remove unnecessary checks
	(username cannot be parsed twice anymore), better documentation of
	the synopsis.

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Existence of pam_user was already checked. pwd was
	already copied to pwent. Remove duplicated code.

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: check_flags() renamed process_flags(). All flag
	processing blocs moved to process_flags().

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/logoutd.c, src/userdel.c: Re-indent. This helps pmccabe.

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Add missing closing }. This was probably never
	noticed because UT_ADDR is never defined.
	* src/login.c: Re-indent.

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Do not mix USE_PAM and !USE_PAM code.

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Use failent_user to log to audit. username is the
	caller, not the user login tries to authenticate.
	* src/login.c: Use pwd->pw_name instead of pwd->pw_uid. This might
	be more precise (name must be unique, uid might not be).

2008-09-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/passwd.1.xml: passwd cannot change the full name of the
	user, the user's login shell; but it can change the account or
	password validity period. Thanks to Reuben Thomas.

2008-09-14  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Added missing declaration of Mflg.
	* src/pwck.c: Only unlock files if they were locked before (e.g.
	not in read-only mode).
	* src/pwck.c: Quote the username in error messages (harmonization
	with other messages).
	* libmisc/find_new_gid.c: Fixed typo (s/grp->gr_gid/group_id/).
	* libmisc/find_new_gid.c: Likewise.

2008-09-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setugid.c, src/login_nopam.c, src/suauth.c,
	lib/getdef.c: Replace the %m format string by strerror(). This
	avoids errno to be reset between the system call error and the
	report function.

2008-09-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Ignore the return value of umask() when the mask
	is set to the old value.

2008-09-11  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, etc/login.defs: New CREATE_HOME variable to tell useradd
	to create a home directory for new users.
	* src/useradd.c, man/useradd.8.xml: New -M/--no-create-home option
	and CREATE_HOME usage. System accounts are not impacted by
	CREATE_HOME.
	* man/useradd.8.xml: Indicate that a new group is created by
	default.
	* src/useradd.c: Removed TODO item (moved to the TODO file).

2008-09-11  Miroslav Kuře  <kurem@debian.cz>

	* po/cs.po: Updated Czech translation.

2008-09-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/USERGROUPS_ENAB.xml: Fix typo: new <para> tag
	before the previous one is closed. This caused a missng
	explanation for USERGROUPS_ENAB.

2008-09-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupadd.8.xml: Remove the list of (short) options from the
	SYNOPSIS. Replaced with [options] for consistency with other tools
	and maintainability.

2008-09-07  Nicolas François  <nicolas.francois@centraliens.net>

	From RedHat's patch shadow-4.1.2-sysAccountDownhill.patch
	Thanks to Peter Vrabec.
	* NEWS, libmisc/find_new_gid.c, libmisc/find_new_uid.c: Build an
	index of used IDs to avoid a database request for each id in the
	allowed range (when the highest allowed ID is already used).
	This speedups the addition of users or groups when the highest
	allowed ID is already used. The additional memory usage of the
	tools should be acceptable when UID_MAX/SYS_UID_MAX are set to a
	reasonable number.

2008-09-07  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Fix the dependency of ACCT_TOOLS_SETUID on
	USE_PAM. Build failed with --without-libpam.

2008-09-07  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c, configure.in: Check for the presence of
	st_mtim and st_mtimensec, as for st_atim and st_atimensec.
	* libmisc/copydir.c: Call utimes() after closing the file.

2008-09-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Document the long options in the usage.

2008-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: Added configure --enable-account-tools-setuid (default) /
	--disable-account-tools-setuid options. This permits to disable
	the PAM authentication of the caller for chage, chgpasswd,
	chpasswd, groupadd, groupdel, groupmod, newusers, useradd,
	userdel, and usermod.  This authentication is not necessary when
	these tools are not installed setuid root.
	* configure.in: Added option --enable-account-tools-setuid to
	enable/disable the usage of PAM to authenticate the callers of
	account management tools: chage, chgpasswd, chpasswd, groupadd,
	groupdel, groupmod, useradd, userdel, usermod.
	* src/Makefile.am: Do not link the above tools with libpam if
	account-tools-setuid is disabled.
	* src/userdel.c, src/newusers.c, src/chpasswd.c, src/usermod.c,
	src/groupdel.c, src/chgpasswd.c, src/useradd.c, src/groupmod.c,
	src/groupadd.c, src/chage.c: Implement ACCT_TOOLS_SETUID
	(--enable-account-tools-setuid).
	* etc/pam.d/Makefile.am: Install the pam service file for the
	above tools only when needed.

2008-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/tz.c: tz() is only used when USE_PAM is not defined.
	* lib/prototypes.h: Indicate functions whose presence depends on
	the USE_PAM flag.

2008-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Call open_files() and close_files().
	* src/groupmems.c: Always call check_perms(), which takes care of
	checking if --list is used.

2008-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/obscure.c: Compare characters to '\0', not NULL.

2008-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Do not include <config.h>. This complicate
	undefining some configuration macros when the file is included
	multiple times.
	* libmisc/xgetXXbyYY.c, libmisc/xgetpwnam.c, libmisc/xgetpwuid.c,
	libmisc/xgetgrgid.c, libmisc/xgetgrnam.c, libmisc/xgetspnam.c:
	Include <config.h> from teh compiled C file, not the included
	getXXbyYY.c.

2008-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c, src/newusers.c, src/chpasswd.c, src/chfn.c,
	src/groupmems.c, src/usermod.c, src/groupdel.c, src/chgpasswd.c,
	src/useradd.c, src/groupmod.c, src/groupadd.c, src/chage.c,
	src/chsh.c: Simplify the PAM error handling. Do not keep the pamh
	handle, but terminate the PAM transaction as soon as possible if
	there are no PAM session opened. If the username cannot be
	determined, report it as such (not a PAM authentication failure).
	* src/useradd.c, src/userdel.c, src/usermod.c: It is no more
	needed to initialize retval to PAM_SUCCESS.

2008-09-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c, src/userdel.c, src/grpck.c, src/gpasswd.c,
	src/newusers.c, src/pwconv.c, src/chpasswd.c, src/logoutd.c,
	src/chfn.c, src/groupmems.c, src/usermod.c, src/pwunconv.c,
	src/expiry.c, src/groupdel.c, src/chgpasswd.c, src/useradd.c,
	src/su.c, src/groupmod.c, src/passwd.c, src/pwck.c,
	src/groupadd.c, src/chage.c, src/login.c, src/grpconv.c,
	src/groups.c, src/grpunconv.c, src/chsh.c: Prog is now global (not
	static to the file) so that it can be used by the helper functions
	of libmisc.
	* lib/prototypes.h: Added extern char *Prog.
	* libmisc/find_new_gid.c, libmisc/find_new_uid.c: Indicate the
	program name with the warning.

2008-09-05  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Check if AUDIT_ADD_USER, AUDIT_DEL_USER,
	AUDIT_ADD_GROUP, and AUDIT_DEL_GROUP are defined in <libaudit.h>.

2008-09-04  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Fix comment of lflg: it is also used for faillog.

2008-09-04  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/groupmems.c, man/groupmems.8.xml: Document the long
	options.

2008-09-03  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h, libmisc/audit_help.c: Define new type
	shadow_audit_result for the result argument of audit_logger().
	This permits stronger type checking and a better readability of
	the results (SHADOW_AUDIT_FAILURE/SHADOW_AUDIT_SUCCESS constants).
	* src/groupadd.c, src/groupdel.c, src/useradd.c, src/userdel.c:
	Use the SHADOW_AUDIT_FAILURE/SHADOW_AUDIT_SUCCESS results instead
	of 0 or 1 in audit_logger().

2008-09-03  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: Log failures to remove the mailbox to syslog and
	audit.
	* src/userdel.c: Log successful removal of home directory to audit
	only in case of success.
	* src/userdel.c: Move the audit log of failure to remove the home
	directory before the call to function that may exit.
	* src/userdel.c: Document that errors is only used to count errors
	during the removal of the home directory.

2008-09-03  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Log errors to syslog in grp_update() since
	changes have started to be reported to syslog.
	* src/userdel.c: Fix some result parameters sent to
	audit_logger().

2008-09-02  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: Following changes from a patch contributed by Steve Grubb
	<sgrubb@redhat.com>
	* src/groupadd.c: Log to audit with type AUDIT_ADD_GROUP instead
	of AUDIT_USER_CHAUTHTOK.
	* src/groupdel.c: Log to audit with type AUDIT_DEL_GROUP instead 
	of AUDIT_USER_CHAUTHTOK.
	* src/useradd.c: Log to audit with type AUDIT_ADD_USER /
	AUDIT_ADD_GROUP / AUDIT_USYS_CONFIG instead of
	AUDIT_USER_CHAUTHTOK.
	* src/useradd.c: Add missing logs to audit.
	* src/userdel.c: Log to audit with type AUDIT_DEL_USER /
	AUDIT_DEL_GROUP instead of AUDIT_USER_CHAUTHTOK.
	* src/userdel.c: Add missing logs to audit.

2008-08-31  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Remove duplicated gr_open().

2008-08-30  Nicolas François  <nicolas.francois@centraliens.net>

	* man/useradd.8.xml: Document the /etc/default/useradd variables.
	* man/useradd.8.xml: Fix the documentation of the GROUP variable
	(and -g/--gid option).
	* man/useradd.8.xml: Document that -o is only valid with -u

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* shadow.spec.in: Fix the source (new FTP).

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Add brackets and parenthesis.
	* src/su.c: Avoid implicit conversion of pointers to booleans.

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/list.c: Remove historical comment.
	* libmisc/list.c: Added assertions for non NULL parameters.

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwconv.c, src/pwunconv.c: Fail if unexpected parameters are
	provided.

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Add brackets and parenthesis.
	* src/passwd.c: Avoid implicit conversion of pointers to booleans.
	* src/passwd.c: Avoid assignments in comparisons.

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/groupmems.c, man/groupmems.8.xml: Added support for
	shadow groups.
	* src/groupmems.c: Use fail_exit() instead of exit().

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: The grp structure returned by gr_locate is a
	const. Duplicate this structure before working on it.
	* src/groupmems.c: Do not fail and do not display warnings if a
	close failure happens with the --list option. (Files are opened
	read-only).
	* src/groupmems.c: Avoid mixed declarations and code.

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Replace the 'valid' variable by is_valid to avoid
	clashes with the valid() function.

2008-08-29  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/obscure.c: Add brackets and parenthesis.
	* libmisc/obscure.c: Avoid implicit conversion of pointers / chars to
	booleans.
	* libmisc/obscure.c: Simplify the list of if.

2008-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Fix a typo in the Usage string.

2008-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpconv.c, src/groups.c: Name the parameters in the
	prototypes of the static functions.
	* src/grpconv.c, src/grpunconv.c, src/logoutd.c: Fail if
	unexpected parameters are provided.
	* src/grpconv.c, src/grpunconv.c: Indicate that argc is not used
	in the no SHADOWGRP version.

2008-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chgpasswd.c, src/chpasswd.c: Removed variable ok, which is
	no more used.

2008-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c: Fix the format for long integers (from %ul to %lu).

2008-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Mark the line and host arguments of setutmp() as
	not used in the __linux__ version.

2008-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/nscd.c: Avoid redefinition of _GNU_SOURCE.

2008-08-28  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Indentation fix.
	* configure.in, src/login.c: Do not use HAVE_PAM_FAIL_DELAY, but
	HAS_PAM_FAIL_DELAY, to avoid a redefinition with Linux PAM.

2008-08-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Added functions add_user(), remove_user(), and
	purge_members() to ease the support of gshadow.

2008-08-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/expiry.c: Use Basename for Prog.
	* src/expiry.c: Added missing OPENLOG.

2008-08-27  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/nscd.c: Make sure the file is not empty when configured
	without nscd support.

2008-08-27  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Remove the USE_NSCD AM_CONDITIONAL (USE_NSCD is
	not used in any Makefile.am).
	* configure.in: Make sure posix_spawn is present when configured
	with nscd support.

2008-08-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupmem.c, lib/pwmem.c, lib/shadowmem.c: Added brackets and
	parenthesis.
	* lib/groupmem.c, lib/pwmem.c, lib/shadowmem.c: Avoid assignments
	in comparisons.

2008-08-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/mail.c: Added brackets and parenthesis.
	* libmisc/mail.c: Avoid assignments in comparisons.

2008-08-26  Tobias Poschwatta  <tp@fonz.de>

	* NEWS: Added support for uclibc.
	* configure.in, libmisc/copydir.c: futimes() and lutimes() are not
	standard. Check if they are implemented before using them. Do not
	set the time of links if lutimes() does not exist, and use
	utimes() as a replacement for futimes().
	* configure.in, lib/nscd.h, lib/nscd.c: Added --with-nscd and
	--without-nscd flags to support systems without nscd.
	* lib/groupio.h, lib/prototypes.h, lib/pwio.h, lib/sgetgrent.c:
	Include <sys/types.h> before <pwd.h> and <grp.h>. It is necessary
	for the definition of uid_t and gid_t.
	* lib/pwmem.c: do not include <pwd.h>, "pwio.h" is sufficient
	here.
	* configure.in: Check if the stat structure has a st_atim or
	st_atimensec field.
	* libmisc/copydir.c: Conditionally use the stat's st_atim and
	st_atimensec fields.

2008-08-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Handle the options alphabetically.

2008-08-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: When removing an user, check if deluser is on
	the list, not adduser. This fixes a segmentation fault for every
	call of groupmems -d.
	* libmisc/list.c: Add assertions to help identifying these issues.
	* libmisc/list.c: Avoid implicit conversion of pointers to
	booleans.

2008-08-26  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/groupmems.c: Use the "groupmems" PAM service name
	instead of "groupmod".

2008-08-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chfn.c: Merge some translated messages.
	* src/groupmems.c, src/groupadd.c, src/gpasswd.c, src/chsh.c,
	src/chfn.c: Harmonize *_update() failure messages.
	* src/groupmems.c: Harmonize gr_close() failure messages.
	* src/newgrp.c: Harmonize "unknown GID" messages.
	* src/newusers.c: Move the pwd declaration to a inner block scope.

2008-08-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Harmonize some error messages.
	* src/userdel.c: Add log to syslog when the mail file could not be
	removed.
	* src/userdel.c: Give more context an error message (merge with
	perror()).
	* src/usermod.c: Harmonize some error messages.

2008-08-25  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Check the return value of gr_update().
	* src/chage.c, src/chfn.c, src/chgpasswd.c, src/chpasswd.c,
	src/chsh.c, src/gpasswd.c, src/groupadd.c, src/groupmems.c,
	src/groupmod.c, src/grpck.c, src/grpconv.c, src/grpunconv.c,
	src/passwd.c, src/pwck.c, src/pwconv.c, src/pwunconv.c,
	src/useradd.c, src/userdel.c, src/usermod.c: Harmonize the error
	message sent to stderr in case of *_update () failure.
	* src/chage.c, src/chsh.c, src/groupadd.c, src/passwd.c: Do not
	log to syslog when pw_update() or spw_update() fail.
	* src/newusers.c: Do not log specific error message to stderr when
	sgr_update() fails.
	* src/pwconv.c: Remove duplicated definition of Prog.

2008-08-25  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chfn.c, src/chsh.c, src/expiry.c, src/gpasswd.c,
	src/newgrp.c, src/passwd.c, src/su.c: Use the same stderr and
	syslog warnings when the username cannot be determined.
	* src/newgrp.c: Reuse the same stderr message for groups which do
	not exist in the system.

2008-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Log errors while *_close to syslog.

2008-08-21  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpconv.c: Use Basename for the definition of Prog. Prog
	needs a file visibility.
	* src/grpunconv.c: Likewise.

2008-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chfn.c: Do not exit on pw_unlock failures.
	* src/grpconv.c, src/grpunconv.c, src/pwconv.c, src/pwunconv.c,
	src/vipw.c: Open syslog with the right identification name.
	* src/vipw.c: Log unlock errors to syslog.
	* src/vipw.c: Log edits to syslog.
	* src/chage.c, src/chfn.c, src/chsh.c, src/gpasswd.c,
	src/groupadd.c, src/groupdel.c, src/groupmod.c, src/grpconv.c,
	src/grpunconv.c, src/passwd.c, src/pwck.c, src/pwunconv.c,
	src/useradd.c, src/usermod.c: Harmonize the syslog levels. Failure
	to close or unlock are errors. Failure to open files are warnings.

2008-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newusers.c: Open syslog with the right identification name.
	* src/newusers.c: Mark the files as locked only if they are really
	locked (i.e. if shadow is not enabled, the files are not locked).

2008-08-20  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/gpasswd.c: Use getopt_long instead of getopt. Added
	support for long options --add (-a), --delete (-d),
	--remove-password (-r), --restrict (-R), --administrators (-A),
	and --members (-M) 
	* man/gpasswd.1.xml: Document the new long options.
	* src/gpasswd.c: The sgrp structure is only used if SHADOWGRP is
	defined.

2008-08-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpck.c: Added function fail_exit(). Check failure to unlock
	files. Report errors to stderr and syslog, but continue.
	* src/grpconv.c: Check failure to unlock files. Report errors to
	stderr and syslog, but continue.

2008-08-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Check failure to unlock files. Report errors to
	stderr and syslog, but continue.

2008-08-17  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chfn.c, src/chgpasswd.c, src/chpasswd.c, src/gpasswd.c,
	src/groupadd.c, src/groupdel.c, src/groupmems.c, src/groupmod.c,
	src/grpconv.c, src/grpunconv.c, src/newusers.c, src/pwconv.c,
	src/pwunconv.c, src/useradd.c, src/userdel.c: Harmonize the name
	of the variables keeping the lock status, to match the shadow
	library prefixes.

2008-08-17  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c, src/chgpasswd.c, src/chpasswd.c, src/chsh.c,
	src/gpasswd.c, src/groupadd.c, src/groupdel.c, src/groupmems.c,
	src/groupmod.c, src/grpck.c, src/grpconv.c, src/grpunconv.c,
	src/newusers.c, src/passwd.c, src/pwck.c, src/pwconv.c,
	src/pwunconv.c, src/useradd.c, src/userdel.c, src/usermod.c: In
	case of a lock failure, indicate to the user that she can try
	again later. Do not log to syslog.

2008-08-17  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/passwd.c: For compatibility with other passwd version,
	the --lock an --unlock options do not lock or unlock the user
	account anymore.  They only lock or unlock the user's password.
	* man/passwd.1.xml: Document above change. Document how an account
	can be locked and what a password lock means.

2008-08-15  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupadd.8.xml: Fix the regular expression for group policy.
	The final $ character is optional.
	* man/groupadd.8.xml: Likewise.
	* man/groupadd.8.xml: Indicate the maximum size of usernames.

2008-08-15  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/pl.po: Fix typo in the Polish translation (see
	http://bugs.debian.org/491460)

2008-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* man/pl/Makefile.am: Do not build the Polish translation of
	login.1 and su.1 (not enough translated). See
	http://bugs.debian.org/491460

2008-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* man/shadow.5.xml: Fix typo. The password must be changed before
	the maximum number of days, not after.

2008-08-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Harmonize the unlock failure messages.

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Added fail_exit().
	* src/pwck.c: Report failure to unlock files to stderr and
	syslog.
	* src/pwck.c: Report failure to sort to stderr, and exit with
	E_CANTSORT.
	* man/pwck.8.xml: Document return code 6 (E_CANTSORT).

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: Report failures to remove files to stderr.
	* src/vipw.c: Report failures to unlock files to stderr.

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/groupmems.c: Added syslog support.
	* src/groupmems.c: members() renamed display_members() to
	avoid name clash with its members argument.
	* src/groupmems.c: Report failure to unlock to syslog.
	* src/groupmems.c: Harmonize error messages.
	* src/groupmems.c: Report failures to write the new group file to
	syslog (gr_close() failure).
	* src/groupmems.c: Don't use fail_exit for non-failure exit.

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chsh.c: Added fail_exit().
	* src/chsh.c: Use fail_exit() instead of exit(), this avoid
	calling closelog() every times.
	* src/chsh.c: Ignore the return value or pam_end().
	* src/chsh.c: Simplify the PAM error handling.
	* src/chsh.c: Report failure to unlock files to stderr and
	syslog.

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chpasswd.c: Added fail_exit().
	* src/chpasswd.c: Added support for syslog.
	* src/chpasswd.c: Report failure to unlock files to stderr and
	syslog.
	* src/chpasswd.c: Simplify the PAM error handling.
	* src/chpasswd.c: Report failure during *_close() to syslog.
	* src/chpasswd.c: Ignore the return value or pam_end().

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chgpasswd.c: Added fail_exit().
	* src/chgpasswd.c: Added support for syslog.
	* src/chgpasswd.c: Report failure to unlock files to stderr and
	syslog.
	* src/chgpasswd.c: Simplify the PAM error handling.
	* src/chgpasswd.c: Report failure during *_close() to syslog.
	* src/chgpasswd.c: Ignore the return value or pam_end().

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: Report failure to remove entries from group or
	gshadow to stderr.
	* src/userdel.c: Fail in case of failure during the write of a
	user or group database. Report errors to syslog.
	* src/userdel.c: Do not unlock non locked files.
	* src/userdel.c: Report failure to unlock the passwd or shadow
	file to stderr and syslog.

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwunconv.c: Report failure to unlock the passwd or shadow
	file to stderr and syslog.

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Report failure to unlock files to stderr and
	syslog.

2008-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newusers.c: Report failure to unlock files to stderr and
	syslog.
	* src/newusers.c: In case of error when files are open or closed,
	indicate the failing file.
	* src/newusers.c: Do not try to unlock the files manually since
	this is done in fail_exit.

2008-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c: Report failure to unlock the passwd or shadow file
	to stderr and syslog.

2008-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwconv.c: Report failure to unlock the passwd or shadow file
	to stderr and syslog.
	* src/pwconv.c: Report failure to chmod the backup file.

2008-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpunconv.c: Report failure to unlock the group or gshadow
	files to stderr and syslog.

2008-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chfn.c: Added fail_exit(). Check if the passwd file is
	locked. Report failures to unlock to stderr and syslog.
	* src/chfn.c: Is case of failure, use fail_exit() rather than
	exit().
	* src/chfn.c: Ignore the return value of pam_end().

2008-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c, lib/groupio.h, lib/pwio.c, lib/pwio.h,
	lib/sgroupio.c, lib/sgroupio.h, lib/shadowio.c, lib/shadowio.h:
	Added *_dbname() functions to retrieve the name of the databases.
	* lib/groupio.c, lib/groupio.h, lib/pwio.c, lib/pwio.h,
	lib/sgroupio.c, lib/sgroupio.h, lib/shadowio.c, lib/shadowio.h:
	*_name() functions renamed *setname().
	* src/grpck.c, src/pwck.c: Likewise.
	* lib/groupio.h, lib/pwio.h, lib/sgroupio.h, lib/shadowio.h: Added
	the name of the arguments to the prototypes.
	* src/chage, src/chfn.c, src/chgpasswd.c, src/chpasswd.c,
	src/chsh.c, src/gpasswd.c, src/groupadd.c, src/groupdel.c,
	src/groupmod.c, src/grpck.c, src/grpconv.c, src/grpunconv.c,
	src/newusers.c, src/passwd.c, src/pwck.c, src/pwconv.c,
	src/pwunconv.c, src/useradd.c, src/userdel.c, src/usermod.c:
	Harmonize the erro & syslog messages in case of failure of the
	*_lock(), *_open(), *_close(), *_unlock(), *_remove() functions.
	* src/chgpasswd.c, src/chpasswd.c, src/usermod.c: Avoid
	capitalized messages.
	* src/chpasswd.c, src/useradd.c, src/usermod.c: Harmonize messages
	in case of inexistent entries.
	* src/usermod.c:  Harmonize messages in case of already existing
	entries.
	* src/newusers.c, src/useradd.c: Simplify PAM error handling.
	* src/useradd.c: Report failures to unlock files (stderr, syslog,
	and audit). But do not fail (continue).
	* src/useradd.c (open_files): Do not report to syslog & audit
	failures to lock or open the databases. This might be harmless,
	and the logs were not already informed that a change was
	requested.
	* src/usermod.c: It's not the account which is unlocked, but its
	password.

2008-08-02  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupadd.c: Harmonize error & syslog messages.
	* src/groupadd.c: Add logging to syslog & audit on lock/unlock
	failures.
	* src/groupadd.c: Only call gr_unlock() and sgr_unlock() in the
	group or gshadow files were previously locked.
	* src/groupadd.c: Make sure failures are reported to syslog/audit
	after the change is mentioned.
	* src/groupmod.c: Harmonize error & syslog messages.
	* src/groupmod.c: Add logging to syslog & audit on lock/unlock
	failures.
	* src/groupmod.c: Make sure issues are reported to syslog or audit
	after the change is mentioned.
	* src/groupdel.c: Harmonize error & syslog messages.
	* src/groupdel.c: Add logging to syslog & audit on lock/unlock
	failures.
	* src/groupdel.c: Only call gr_unlock() and sgr_unlock() in the
	group or gshadow files were previously locked.
	* src/groupdel.c: Simplify the handling of PAM errors.

2008-08-01  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Harmonize error & syslog messages.
	* src/gpasswd.c: Warn and log to syslog and audit when group or
	gshadow cannot be unlocked, but do not fail.

2008-08-01  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chfn.c, src/chsh.c, src/groupdel.c, src/groupmems.c,
	src/groupmod.c, src/grpck.c, src/login.c, src/logoutd.c,
	src/newgrp.c, src/newusers.c, src/passwd.c, src/pwck.c,
	src/suauth.c, src/useradd.c, src/userdel.c, src/usermod.c,
	src/vipw.c: Complete the switch from the `' quotation style to ''.
	Do it also in SYSLOG messages. Quote some parameters. All this
	permits to merge some messages.

2008-07-30  Lukáš Kuklínek  <lkukline@redhat.com>

	* src/groupmems.c: Only check if the adduser user exists when an
	user is specified with -a.

2008-07-30  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Fix the groupmems' usage message. The -D option
	is in fact -p.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Replace an if test by an else.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Ignore the return value of fputs().

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c (whoami): Make sure usr and grp are not NULL
	before dereferencing them.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Use xstrdup() rather than strdup().

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Add parenthesis.
	* src/groupmems.c: Avoid implicit conversion of pointers / chars to
	booleans.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/groupmems.c: Allow everybody to list the users of a group.
	This information is publicly available in /etc/group.
	* NEWS, src/groupmems.c: Open /etc/group read only for the -l option.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* man/groupmems.8.xml: Sort options alphabetically.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c (check_perms): Simplify. Always call pam_end()
	at the end of the authentication.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Add fail_exit() to remove the group lock file
	in case of failure. Replace the calls to exit() by fail_exit().

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Reduce the number of checks. Isolate the
	parameters setting and permissions checking.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Add functions process_flags() and check_perms()
	from code of main().
	* src/groupmems.c: Harmonize the failure message in case of PAM
	failure with the other programs.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Remove isgroup(), which always returns TRUE.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Reuse the functions from libmisc/list.c to deal
	with user lists. addtogroup() was broken when realloc() move the
	memory area.
	* src/groupmems.c: Report failures with the name of the program.

2008-07-27  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: EXIT_READ_GROUP changed to EXIT_INVALID_GROUP.
	* src/groupmems.c: EXIT_INVALID_USERNAME changed to EXIT_INVALID_USER.

2008-07-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Really use booleans.
	* src/groupmems.c: Change isroot() to a macro that returns a
	boolean.

2008-07-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Make sure the booleans are defined before using
	them.

2008-07-26  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Added Prog global variable to indicate the name
	of the program in error messages.

2008-07-22  Lukáš Kuklínek  <lkukline@redhat.com>

	* NEWS, src/groupmems.c: Check if the user added to group actually
	exist. RedHat bug #455603
	* NEWS, src/groupmems.c: Check if the group exists in the group
	local database (/etc/group). RedHat bug #456088

2008-07-22  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Fix getrange prototype.

2008-07-21  Seraphim Mellos  <mellos@ceid.upatras.gr>

	* README, NEWS, configure.in, lib/pam_defs.h, src/login.c: Add
	support for OpenPAM.

2008-07-12  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c: Ignore the return value of pam_end() before exiting.
	* src/chage.c: Ignore return values of strftime(), snprintf(),
	puts(), printf(), and fputs().
	* src/chage.c: Check the return value of asctime().

2008-07-12  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/gshadow.c: Avoid assignments in comparison.

2008-07-12  Nicolas François  <nicolas.francois@centraliens.net>

	* ChangeLog, NEWS, src/login.c: Re-inject the changes from 4.1.2.1.

2008-07-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Do not call usr_update() if it will have no
	effects. This avoid checking if the user exists in the local passwd
	file if not necessary, and thus allow to add LDAP users to local
	groups. (The user is already checked against the system
	configuration with getpwnam()). Thanks to Dan Kopecek.

2008-07-11  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Split update_files() into update_lastlog() and
	update_faillog(). Report errors (but don't fail) if the file
	exist, but open(), lseek(), read(), write(), or close() fails.
	* src/usermod.c: Add brackets and parenthesis.
	* src/usermod.c: Ignore the return value of pam_end() before
	exiting.
	* src/usermod.c: Ignore the return value of strftime(),
	snprintf(), and puts().
	* src/usermod.c: Check the return value of gmtime() and asctime(),
	and output the raw time_t on failures.

2008-07-11  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setugid.c: Add brackets.

2008-06-17  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/env.c: Avoid implicit conversion of pointers / chars to
	booleans.
	* libmisc/env.c: Add brackets and parenthesis.
	* libmisc/env.c: Ignore the return value of puts() and fputs().
	* libmisc/env.c: Avoid multi-statements lines.

2008-06-17  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Avoid implicit conversion of pointers / chars to
	booleans.
	* libmisc/utmp.c: Add brackets and parenthesis.
	* libmisc/utmp.c: Exit with the EXIT_FAILURE status code in case
	of failure.
	* libmisc/utmp.c: Avoid assignments in comparisons.
	* lib/prototypes.h, libmisc/utmp.c: Change setutmp()'s prototype
	to return an int because pututline() and pututxline() may fail.

2008-06-17  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/audit_help.c: Added one string for translation.
	* po/POTFILES.in: Added libmisc/audit_help.c,
	libmisc/find_new_gid.c, libmisc/find_new_uid.c, libmisc/getlong.c,
	libmisc/getrange.c, libmisc/xgetXXbyYY.c, and libmisc/yesno.c.
	Removed libmisc/find_new_ids.c

2008-06-16  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: If the faillog file exist, warn in case of
	failure when open(), lssek(), write() or close() fails when the
	new user's faillog entry is reset.
	* src/useradd.c: Ditto for the lastlog entry.

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/limits.c: Add brackets and parenthesis.
	* libmisc/limits.c: Avoid implicit conversion of pointers /
	integers to booleans.
	* libmisc/limits.c: Ignore the return value of umask(). We will
	never return to the original umask.
	* libmisc/limits.c: Avoid multi-statements lines.
	* libmisc/limits.c: Added default to a switch(). Report invalid
	limit strings to syslog.
	* libmisc/limits.c: Ignore the return value of fclose().
	/etc/limits is open read-only.
	* libmisc/limits.c: Ignore the return value of fputs() and
	sleep().
	* libmisc/limits.c: Check the return value of nice() and
	set_filesize_limit(), and report errors to syslog.

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/ulimit.c, lib/prototypes.h: Return failures of
	set_filesize_limit(). Change the prototype to return an int
	instead of void.

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.c: Try to close the open file if a failure
	occured during lseek(), read() or write().

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/log.c: Check return values. If lseek() failed, avoid
	reading or writing at an unspecified location. Log to syslog in
	case of failure.
	* libmisc/log.c: Use the right casts.

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_ids.c, libmisc/find_new_gid.c,
	libmisc/find_new_uid.c, libmisc/Makefile.am, lib/prototypes.h:
	Split find_new_ids.c into find_new_gid.c and find_new_uid.c to
	ease the description of login.defs variables in the different
	tools.

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.c: Ignore the return value of strftime() and
	printf().
	* libmisc/failure.c: Fix syslog call. The UID is not available.
	User the username specified in the utmp/utmpx entry.

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Avoid implicit conversion of pointers to
	booleans.
	* lib/defines.h: Ignore return values of setlocale() except the
	first call.
	* lib/defines.h: Fix a splint observer warning by using an
	intermediate variable (old_locale).

2008-06-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.c: Check return values. If lseek() failed, avoid
	reading or writing at an unspecified location. Log to syslog in
	case of failure when reading a faillog entry or writing in
	faillog or btmp.
	* libmisc/failure.c: Check if the file exist before opening it.
	* libmisc/failure.c: Log failures of open() and close() when
	necessary.

2008-06-14  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Add the getrange() prototype.
	* lib/prototypes.h: Fix the valid_field() prototype (does not
	return an bool).
	* lib/prototypes.h: Fix the valid() prototype (it does return a
	bool).

2008-06-14  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/getdef.c: Fix the getdef_ulong() prototype.
	* lib/getdef.h: Fix the getdef_ulong() prototype.

2008-06-14  Nicolas François  <nicolas.francois@centraliens.net>

	* src/lastlog.c: Use getrange to parse the range of users.
	* src/lastlog.c: umin and umax do not need to be signed long. Use
	an unsigned long which might be needed to parse a GID or UID. Add
	the has_umin and has_umax to replace the -1 values.
	* src/lastlog.c: Cast dates to time_t.
	* src/lastlog.c: Prefix lastlog errors with "lastlog: ".

2008-06-14  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/getlong.c: Reset errno before calling strtol().
	Otherwise, errno could be already set to ERANGE.

2008-06-14  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/Makefile.am, libmisc/getrange.c: Added function to parse
	a range (useful for lastlog).

2008-06-14  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chsh.c: <signal.h> is not needed.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Define AUDIT_NO_ID to (unsigned int) -1. This
	value should be used when the ID should not be considered.
	* lib/prototypes.h: Fix the prototype of do_rlogin() according to
	earlier changes.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/shadow.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of spwd.sp_flag.
	* lib/shadow.c: Add brackets.
	* lib/shadow.c: Avoid implicit conversion of pointers to
	booleans.
	* lib/shadow.c: The size argument of fgets is an int, not a
	size_t.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: len should be typed ssize_t as it is the return
	of read(), and is compared to 0. Cast to size_t when necessary.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_ids.c: Use getdef_ulong to retrieve UIDs/GIDs
	from login.defs. Type constants to long integers.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/gshadow.c: Use a bool when possible instead of int integers.
	* lib/gshadow.c: Remove __setsgNIS() -never used).
	* lib/gshadow.c: Avoid multi-statements lines.
	* lib/gshadow.c: Avoid assignments in comparisons.
	* lib/gshadow.c: ptr[nelem] is a string. Initialize it to NULL
	instead of '\0'.
	* lib/gshadow.c: Add brackets and parenthesis.
	* lib/gshadow.c: The size argument of strncpy is a size_t and the
	size argument of fgets is an int.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c: Add brackets.
	* lib/groupio.c: Make sure malloc receives a size_t.
	* lib/groupio.c: Avoid multi-statements lines.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgetspent.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of spwd.sp_flag.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/getdef.h, lib/getdef.c: Add getdef_ulong().
	* lib/getdef.c: Added TODOs because of lack of error checking.
	* lib/getdef.c: The size argument of fgets is an int, not a
	size_t.
	* lib/getdef.c: Avoid multi-statements lines.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/id.c: Make sure malloc receives a size_t.
	* src/id.c: Use a %lu format and cast group and user IDs to
	unsigned long integers.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/sulogin.c: Ignore the return value of signal().

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groups.c: sys_ngroups is only used when HAVE_GETGROUPS is
	defined.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/faillog.c: Ignore return value of time() when use with a
	non NULL argument.
	* src/faillog.c: Use a %lu format and cast number of days to
	unsigned long integers.
	* src/faillog.c: Cast dates to time_t.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Ignore the return value of signal().
	* src/login.c: Use a %lu format and cast group and user IDs to
	unsigned long integers.
	* src/login.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c: Add the arguments' names in the functions
	prototypes.
	* src/chage.c: The ID argument of audit_logger is an unsigned
	int. Use AUDIT_NO_ID instead of -1.
	* src/chage.c: print_date() received a time_t.
	* src/chage.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of spwent.sp_flag.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupadd.c: The ID argument of audit_logger is an unsigned
	int. Use AUDIT_NO_ID instead of -1.
	* src/groupadd.c: Cast the parsed GID/UID to a gid_t/uid_t.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Use a %lu format and cast group and user IDs to
	unsigned long integers.
	* src/pwck.c: Cast number of days to a long integer.
	* src/pwck.c: Use the SCALE macro instead of (24L * 3600L)
	for the values to be set in /etc/shadow.
	* src/pwck.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of spent.sp_flag.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Ignore return value of time() when use with a
	non NULL argument.
	* src/passwd.c: Cast number of days to a long integer.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmod.c: The ID argument of audit_logger is an unsigned
	int. Use AUDIT_NO_ID instead of -1.
	* src/groupmod.c:  Use a %lu format and cast group and user IDs to
	unsigned long integers.
	* src/groupmod.c: Cast the parsed GID/UID to a gid_t/uid_t.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: The ID argument of audit_logger is an unsigned
	int. Use AUDIT_NO_ID instead of -1.
	* src/useradd.c: Cast the parsed GID/UID to a gid_t/uid_t.
	* src/useradd.c: The size argument of fgets is an int, not a
	size_t.
	* src/useradd.c: Cast number of days to a long integer.
	* src/useradd.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of spent.sp_flag.
	* src/useradd.c: Use a %lu format and cast group and user IDs to
	unsigned long integers.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: fork() and waitpid() return a pid_t, not an int.
	* src/su.c: Add brackets and parenthesis.
	* src/su.c: Ignore the return value of signal().

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupdel.c: The ID argument of audit_logger is an unsigned
	int. Use AUDIT_NO_ID instead of -1.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/expiry.c: Ignore the return value of signal().

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newusers.c: Fix the check for GID/UID validity.
	* src/newusers.c: Comment why we use both getgrgid() and
	gr_locate_gid().
	* src/newusers.c: Cast the parsed GID/UID to a gid_t/uid_t.
	* src/newusers.c: Cast the number of days to a long integer.
	* src/newusers.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of spent.sp_flag.
	* src/newusers.c: The size argument of fgets is an int, not a
	size_t.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Cast dates to time_t, and number of days to a
	long integer.
	* src/usermod.c: Cast UIDs and GIDs to uid_t and gid_t after
	checking the ranges.
	* src/usermod.c: The ID argument of audit_logger is an unsigned
	int.
	* src/usermod.c: read() returns a ssize_t.
	* src/usermod.c: Cast the return value of malloc and make sure it
	receives a size_t.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/logoutd.c: Ignore return value of time() when use with a
	non NULL argument.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwconv.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of sp.sp_flag.
	* src/pwconv.c: Cast number of days to a long integer.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: The ID argument of audit_logger is an unsigned
	int.
	* src/gpasswd.c: Ignore the return value of signal(). The signal
	handlers are only changed for the last steps of gpasswd, and there
	is no need to restore them.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: The ID argument of audit_logger is an unsigned
	int.
	* src/userdel.c: fork() and wait() return a pid_t, not an int.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c: Use a %lu format and cast group and user IDs to
	unsigned long integers.
	* src/newgrp.c: The ID argument of audit_logger is an unsigned
	int.
	* src/newgrp.c: Ignore the return value of signal() (the signal
	handlers are assumed to be the default one and are restored
	later).
	* src/newgrp.c: Do not checl if a pid_t is < 0, check if equal
	to (pid_t)-1.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/isexpired.c: Cast number of days to a long integer.
	* libmisc/isexpired.c: Add brackets and parenthesis.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c: Do not specify a size of arrays in the
	prototypes.
	* libmisc/copydir.c: Use a size_t for the length of strings.
	* libmisc/copydir.c: Cast the return value of malloc().
	* libmisc/copydir.c: The size argument of write() is a size_t.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/pwd2spwd.c: Cast number of days to a long integer.
	* libmisc/pwd2spwd.c: Use SHADOW_SP_FLAG_UNSET for the initial
	value of sp.sp_flag.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/defines.h: Include <config.h> since it uses the macro that
	might be defined in this header file.
	* lib/defines.h: Prefer checking if HAVE_LOCALE_H or ENABLE_NLS
	are defined (rather than set to non 0).
	* lib/defines.h: The dummy implementations of bindtextdomain() and
	textdomain() should return a pointer. Return NULL instead of
	/* empty */
	* lib/defines.h: Define SHADOW_SP_FLAG_UNSET, to be used for the
	initialization of sp_flag field of the shadow structures.
	* lib/defines.h: Define LC_ALL, needed even if HAVE_LOCALE_H is
	not defined.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/sulog.c: Ignore the return value of umask() when the
	mask is restored.
	* libmisc/sulog.c: Add brackets.
	* libmisc/sulog.c: Ignore return value of time() when use with a
	non NULL argument.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/log.c: Avoid assignments in comparisons.
	* libmisc/log.c: Add brackets and parenthesis.
	* libmisc/log.c: read() returns a ssize_t (note size_t).
	* libmisc/log.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/log.c: Ignore return value of time() when use with a
	non NULL argument.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/strtoday.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/strtoday.c: Add brackets and parenthesis.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/salt.c: Use a size_t for the size of strings instead of
	unsigned int.
	* libmisc/salt.c: Add brackets and parenthesis.
	* libmisc/salt.c: Avoid assignments in comparisons.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/age.c: fork() and wait() return a pid_t, not an int.
	* libmisc/age.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/age.c: Avoid assignments in comparisons.
	* libmisc/age.c: Ignore the return value of printf(), puts(),
	fputs() and fflush().
	* libmisc/age.c: Add brackets and parenthesis.
	* libmisc/age.c: Cast the return value of time() to long and
	converted to a date.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/rlogin.c: The size argument of read() is a size_t.
	Propagate this time to the callers (the get_remote_string() and
	do_rlogin() functions).
	* libmisc/rlogin.c: Add brackets and parenthesis.
	* libmisc/rlogin.c: Avoid multi-statements lines.
	* libmisc/rlogin.c: Avoid assignments in comparisons.
	* libmisc/rlogin.c: Avoid implicit conversion of pointers to
	booleans.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.c: Avoid assignments in comparisons.
	* libmisc/failure.c: read() returns a ssize_t.
	* libmisc/failure.c: Add brackets and parenthesis.
	* libmisc/failure.c: Ignore return value of time() when use with a
	non NULL argument.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chowntty.c: Avoid assignments in comparisons.
	* libmisc/chowntty.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/chowntty.c: Add brackets and parenthesis.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/audit_help.c: Add brackets.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/addgrps.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/addgrps.c: Add brackets.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Avoid implicit conversion of pointers to
	booleans.

2008-06-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/console.c, libmisc/hushed.c, libmisc/yesno.c,
	libmisc/loginprompt.c, libmisc/ttytype.c, libmisc/tz.c,
	src/login_nopam.c, src/chpasswd.c, src/chgpasswd.c, lib/port.c:
	The size argument of fgets is an int, not a size_t.
	* libmisc/loginprompt.c: Ignore the return value from signal()
	when the signal handlers are restored.
	* src/chpasswd.c: Cast the return value of time() to a long
	integer.
	* src/chpasswd.c: Use the SCALE macro instead of (24L * 3600L)
	for the values to be set in /etc/shadow.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Use a bool when possible instead of int integers.
	* src/pwck.c: Avoid implicit conversion of integers to booleans.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Use a bool when possible instead of int integers.
	* src/su.c: Add brackets and parenthesis.
	* src/su.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/su.c: Ignore the return value of pam_end() before
	exiting.
	* src/su.c: Avoid assignments in comparisons.
	* src/su.c: Avoid multi-statements lines.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h, libmisc/valid.c: Change the prototype of
	valid() to return a bool.
	* libmisc/valid.c: Add parenthesis.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.c: Add brackets and parenthesis.
	* lib/commonio.c: Check the result of fgets().
	* lib/commonio.c: Avoid implicit conversion of pointers to
	booleans.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Fix the prototypes to match earlier changes.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/nscd.c: Include defines.h.
	* lib/nscd.c: Always warn when the nscd cache cannot be flushed.
	* lib/nscd.c: Avoid assignments in comparisons.
	* lib/nscd.c: Ignore the return value of fputs() when printing
	errors.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/port.c: Add brackets and parenthesis.
	* lib/port.c: Change isttytime() prototype to return a bool.
	* lib/port.c: Ignore the return value of fclose () (file open
	read-only).
	* lib/port.c: Avoid multi-statements lines.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/id.c: Ignore the return value of fputs(), puts(), putchar(),
	and printf().
	* src/id.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/id.c: Add brackets and parenthesis.
	* src/id.c: Avoid implicit conversion of pointers / integers
	to booleans.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chsh.c: Use a bool when possible instead of int integers.
	* src/chsh.c: restricted_shell() renamed is_restricted_shell().
	check_shell() renamed shell_is_listed().
	* src/chsh.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/chsh.c: Avoid implicit conversion of pointers / integers
	to booleans.
	* src/chsh.c: Ignore the return value of pam_end() before
	exiting.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpunconv.c: Use a bool when possible instead of int
	integers.
	* src/grpunconv.c: Add brackets and parenthesis.
	* src/grpunconv.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/grpunconv.c: Avoid implicit conversion of pointers / integers
	to booleans.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/sulogin.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/sulogin.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/sulogin.c: Avoid assignments in comparisons.
	* src/sulogin.c: Ignore the return value of alarm().

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groups.c: Use a bool when possible instead of int integers.
	* src/groups.c: Add brackets and parenthesis.
	* src/groups.c: Avoid implicit conversion of pointers / integers
	to booleans.
	* src/groups.c: Avoid assignments in comparisons.
	* src/groups.c: Ignore the return value of putchar(), printf()
	* src/groups.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpconv.c: Use a bool when possible instead of int integers.
	* src/grpconv.c: Add brackets and parenthesis.
	* src/grpconv.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/grpconv.c: Avoid implicit conversion of pointers / integers
	to booleans.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/faillog.c: Use a bool when possible instead of int integers.
	* src/faillog.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/faillog.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/faillog.c: Add brackets and parenthesis.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login.c: Avoid multi-statements lines.
	* src/login.c: Ignore the return value of pam_end() before
	exiting.
	* src/login.c: Use a bool when possible instead of int integers.
	* src/login.c: Add brackets and parenthesis.
	* src/login.c: Ignore the return values of fflush(), putchar(), puts().
	* src/login.c: Ignore the return value of fclose() for read-only
	files.
	* src/login.c: Avoid assignments in comparisons.
	* src/login.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/login.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chage.c: Use a bool when possible instead of int integers.
	* src/chage.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupadd.c: Use a bool when possible instead of int
	integers.
	* src/groupadd.c: Add brackets and parenthesis.
	* src/groupadd.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/groupadd.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/groupadd.c: Ignore the return value of pam_end() before
	exiting.

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwck.c: Use a bool when possible instead of int integers.
	* src/pwck.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/passwd.c: Use a bool when possible instead of int integers.
	* src/passwd.c: Avoid assignments in comparisons.
	* src/passwd.c: Add brackets and parenthesis.
	* src/passwd.c: Avoid implicit conversion of pointers / integers /
	chars to booleans.
	* src/passwd.c: Move the "context_t c" declaration at the
	beginning check_selinux_access.
	* src/passwd.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-10  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmod.c: Use a bool when possible instead of int
	integers.
	* src/groupmod.c: Avoid assignments in comparisons.
	* src/groupmod.c: Add brackets and parenthesis.
	* src/groupmod.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/groupmod.c: Use a %lu format to print GIDs, and cast the GID
	to (unsigned long int).
	* src/groupmod.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/groupmod.c: Ignore the return value of pam_end() before
	exiting.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Use a bool when possible instead of int integers.
	* src/useradd.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/useradd.c: Add brackets and parenthesis.
	* src/useradd.c: Avoid assignments in comparisons.
	* src/useradd.c: Ignore the return value of fclose() for read-only
	files.
	* src/useradd.c: Ignore the return value of fflush() before
	closing the files.
	* src/useradd.c: Avoid multi-statements lines.
	* src/useradd.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/useradd.c: Ignore the return value of pam_end() before
	exiting.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: Use a bool when possible instead of int integers.
	* src/vipw.c: Ignore the return value of umask(), when the mask is
	set again to the old value.
	* src/vipw.c: Avoid implicit conversion of pointers / integers to
	booleans.
	* src/vipw.c: Add brackets and parenthesis.
	* src/vipw.c: Avoid assignments in comparisons.
	* src/vipw.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/vipw.c: Add missing termination of the longopts parameter
	for getopt_long().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chgpasswd.c: Use a bool when possible instead of int
	integers.
	* src/chgpasswd.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/chgpasswd.c: Avoid implicit conversion of integers to
	booleans.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupdel.c: Use a bool when possible instead of int
	integers.
	* src/groupdel.c: Avoid implicit conversion of pointers / integers to
	booleans.
	* src/groupdel.c: Avoid assignments in comparisons.
	* src/groupdel.c: Ignore the return value of pam_end() before
	exiting.
	* src/groupdel.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/expiry.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/expiry.c: Add brackets and parenthesis.
	* src/expiry.c: Avoid assignments in comparisons.
	* src/expiry.c: Avoid implicit conversion of pointers to booleans.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwunconv.c: Use a bool when possible instead of int
	integers.
	* src/pwunconv.c: Add brackets and parenthesis.
	* src/pwunconv.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/pwunconv.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/pwunconv.c: Avoid assignments in comparisons.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Use a bool when possible instead of int integers.
	* src/usermod.c: Add brackets and parenthesis.
	* src/usermod.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/usermod.c: Avoid assignments in comparisons.
	* src/usermod.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/usermod.c: Ignore the return value of pam_end() before
	exiting.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/groupmems.c: Move the declaration of option_index and
	long_options before the blocks of code.
	* src/groupmems.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/groupmems.c: Ignore the return value of pam_end() before
	exiting.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chfn.c: Use a bool when possible instead of int integers.
	* src/chfn.c: Avoid implicit conversion of integers / chars to
	booleans.
	* src/chfn.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/logoutd.c: Use a bool when possible instead of int integers.
	* src/logoutd.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/logoutd.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/logoutd.c: Add brackets and parenthesis.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/chpasswd.c: Use a bool when possible instead of int
	integers.
	* src/chpasswd.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/chpasswd.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwconv.c: Use a bool when possible instead of int integers.
	* src/pwconv.c: Add brackets and parenthesis.
	* src/pwconv.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/pwconv.c: Avoid implicit conversion of pointers / integers /
	chars to booleans.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/newusers.c: Implement the -r, --system option.
	* src/newusers.c: Use a bool when possible instead of int
	integers.
	* src/newusers.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/newusers.c: Ignore the return value of pam_end() before
	exiting.
	* src/newusers.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/newusers.c: Avoid multi-statements lines.
	* src/newusers.c: Add brackets and parenthesis.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Use a bool when possible instead of int integers.
	* src/gpasswd.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/gpasswd.c: Ignore the return value of putchar() and fflush()
	before exiting.
	* src/gpasswd.c: check_list() renamed is_valid_user_list(), and
	return a bool.
	* src/gpasswd.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/grpck.c: Use a bool when possible instead of int integers.
	* src/grpck.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/lastlog.c: Use a bool when possible instead of int integers.
	* src/lastlog.c: Avoid implicit conversion of pointers / integers
	/ chars to booleans.
	* src/lastlog.c: Add brackets and parenthesis.
	* src/lastlog.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/userdel.c: Use a bool for the is_shadow_pwd, is_shadow_grp,
	deleted_user_group, was_member, was_admin, and the
	options' flags.
	* src/userdel.c: Change path_prefix() prototype to return a bool.
	* src/userdel.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/userdel.c: Ignore the return value from pam_end() since we
	are exiting anyway just afterwards.
	* src/userdel.c: Avoid implicit conversion of pointers /
	integers / chars to booleans.
	* src/userdel.c: Add brackets and parenthesis.
	* src/userdel.c: Avoid assignments in comparisons.
	* src/userdel.c: Do not ignore the return value of the *_unlock()
	functions.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/login_nopam.c: Do not use the YES and NO macros. Use the
	booleans true and false instead. Change the prototypes of
	list_match(), user_match(), from_match(), and string_match()
	accordingly. Also use booleans internally.
	* src/login_nopam.c: Add brackets and parenthesis.
	* src/login_nopam.c: Avoid implicit conversion of pointers /
	integers / chars to booleans.
	* src/login_nopam.c: Avoid assignments in comparisons.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newgrp.c: Use a bool for is_newgrp, notfound, needspasswd,
	initflag, and cflag.
	* src/newgrp.c: Add brackets and parenthesis.
	* src/newgrp.c: Avoid implicit conversion of pointers / integers /
	chars to booleans.
	* src/newgrp.c: Avoid multi-statements lines.
	* src/newgrp.c: Ignore return value of setlocale(),
	bindtextdomain(), and textdomain().
	* src/newgrp.c: Avoid assignments in comparisons.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/list.c: Change is_on_list() prototype to return a bool.

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_ids.c: Change find_new_uid() and find_new_gid()
	prototypes to use a bool for their first argument (sys_user /
	sys_group).

2008-06-09  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/console.c: Change is_listed() prototype to return a bool.
	The default parameter should also be a bool.
	* libmisc/console.c: Add brackets and parenthesis.
	* libmisc/console.c: Avoid assignments in comparisons.
	* libmisc/console.c: Change console() prototype to return a bool.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgetspent.c: Add brackets and parenthesis.
	* lib/sgetspent.c: Avoid assignments in comparisons.
	* lib/sgetspent.c: Avoid implicit conversion of pointers / chars
	to booleans.
	* lib/sgetspent.c: Avoid multi-statements lines.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgetpwent.c: Avoid implicit conversion of pointers / chars to
	booleans.
	* lib/sgetpwent.c: Add brackets and parenthesis.
	* lib/sgetpwent.c: Return NULL instead of 0.
	* lib/sgetpwent.c: Do not check twice if fields[2] and fields[3]
	are not empty.
	* lib/sgetpwent.c: Avoid assignments in comparisons.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/getdate.y: abbrev is a bool.
	* libmisc/getdate.y: Avoid implicit conversion of pointers / chars /
	integers to booleans.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Fix prototypes according to earlier changes
	(usage of the bool type).
	* lib/prototypes.h: Add the arguments' name to the prototypes.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.h: Add protection against multiple inclusions.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/pwio.h: Add protection against multiple inclusions.
	* lib/pwio.c: The changed, isopen, locked, and readonly fields
	of the db are booleans.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/shadowio.h, lib/shadowio.c: spw_file_present returns a bool.
	* lib/shadowio.h: Add protection against multiple inclusions.
	* lib/shadowio.c: The changed, isopen, locked, and readonly fields
	of the db are booleans.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgroupio.c: Avoid assignments in comparisons.
	* lib/sgroupio.c: Add brackets.
	* lib/sgroupio.c: Avoid implicit conversion of pointers / integers
	to booleans.
	* lib/sgroupio.c: The changed, isopen, locked, and readonly fields
	of the db are booleans.
	* lib/sgroupio.h, lib/sgroupio.c: sgr_file_present returns a bool.
	* lib/sgroupio.h: Add protection against multiple inclusions.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/gshadow.c: nis_used and nis_bound are booleans.
	* lib/gshadow.c: Avoid implicit conversion of pointers / integers
	to booleans.
	* lib/gshadow.c: Avoid assignments in comparisons.
	* lib/gshadow.c: Add brackets.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c: The changed, isopen, locked, and readonly fields
	of the db are booleans.
	* lib/groupio.h: Add protection against multiple inclusion.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/sgetgrent.c: Avoid implicit conversion of pointers / chars
	to booleans.
	* lib/sgetgrent.c: Avoid assignments in comparisons.
	* lib/sgetgrent.c: Add brackets.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/encrypt.c: Avoid implicit conversion of pointers to
	booleans.
	* lib/encrypt.c: Add parenthesis.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/port.c: Avoid implicit conversion of pointers / integers /
	chars to booleans.
	* lib/port.c: Avoid multiple statement on the same line.
	* lib/port.c: Add brackets and parenthesis.
	* lib/port.c: Avoid assignments in comparisons.
	* lib/port.c: Fix typo comparision -> comparison (in comment).

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/fputsx.c: Add brackets.
	* lib/fputsx.c: Avoid assignments in comparisons.
	* lib/fputsx.c: Avoid implicit conversion of pointers / integers /
	chars to booleans.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/commonio.h: commonio_entry.changed, commonio_db.changed,
	commonio_db.isopen, commonio_db.locked, and commonio_db.readonly
	are no booleans.
	* lib/commonio.h: Include defines.h to get the definition of bool.
	* lib/commonio.h: commonio_present returns a bool
	* lib/commonio.c: Implement above changes.
	* lib/commonio.c: add argument names in prototypes.
	* lib/commonio.c: name_is_nis returns a bool.
	* lib/commonio.c: nscd_need_reload is a bool.
	* lib/commonio.c: Improve types (use size_t / pid_t when needed
	instead of int).
	* lib/commonio.c: Avoid assignments in comparisons.
	* lib/commonio.c: Add brackets and parenthesis.
	* lib/commonio.c: Avoid implicit conversion of pointers / integers
	to booleans
	* lib/commonio.c: The return values of utime is not checked on
	purpose.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/isexpired.c: ARGSUSED is no more needed (shadow is
	always supported).
	* libmisc/isexpired.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/isexpired.c: Add brackets and parenthesis.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/sulog.c (sulog): The success argument is a bool.
	* libmisc/sulog.c: The return values of fflush is not checked on
	purpose.
	* libmisc/sulog.c: Indicate that some return values should be
	checked.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/ttytype.c: Avoid implicit conversion of pointers /
	integers to booleans.
	* libmisc/ttytype.c: Avoid assignments in comparisons.
	* libmisc/ttytype.c: Add brackets and parenthesis.
	* libmisc/ttytype.c: The return values of fclose is not checked on
	purpose.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/mail.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/mail.c: Avoid assignments in comparisons.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/loginprompt.c: Avoid implicit conversion of pointers /
	chars to booleans.
	* libmisc/loginprompt.c: Add brackets.
	* libmisc/loginprompt.c: Avoid assignments in comparisons.
	* libmisc/loginprompt.c: The return values of fclose and fflush
	are not checked on purpose.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setupenv.c: Avoid implicit conversion of chars to
	booleans.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/copydir.c: selinux_checked, selinux_enabled, and set_orig
	are now booleans.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setugid.c (setup_uid_gid): The is_console argument is now
	a bool.
	* libmisc/setugid.c: Avoid implicit conversion of integers /
	pointers to booleans.
	* libmisc/setugid.c: Add brackets.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/pam_pass.c (do_pam_passwd): The silent and
	change_expired are no booleans instead of int.
	* libmisc/pam_pass.c: The return value of pam_end is not checked
	on purpose.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/getlong.c: Avoid implicit conversion of pointers / chars
	to booleans.
	* libmisc/getlong.c: Add brackets.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/valid.c: Avoid implicit conversion of pointers / chars
	to booleans.
	* libmisc/valid.c: Add brackets.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/yesno.c: yes_or_no returns a bool instead of int.
	* libmisc/yesno.c: Avoid implicit conversion of pointers to
	booleans.
	* libmisc/yesno.c: The return value of fflush is not checked
	on purpose.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/age.c: Avoid implicit conversion of integers to
	booleans.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/rlogin.c: Avoid assignments in comparisons.
	* libmisc/rlogin.c: Avoid implicit conversion of integers to
	booleans.
	* libmisc/rlogin.c: Add brackets.

2008-05-26  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/failure.c (failcheck): The failed argument is a bool.
	* libmisc/failure.h: Likewise.
	* libmisc/failure.c (too_many_failures): too_many_failures returns
	a bool.
	* libmisc/failure.c: Add notes about unchecked return values.
	* libmisc/failure.c: Avoid assignments in comparisons.
	* libmisc/failure.c: Add brackets.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/myname.c: Avoid assignments in comparisons.
	* libmisc/myname.c: Avoid implicit conversion of pointers / chars
	to booleans.
	* libmisc/myname.c: Add brackets.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c (checkutmp): Change picky argument's type to
	bool.
	* libmisc/utmp.c: Use bool when possible (found_utmpx,
	found_utmp).
	* libmisc/utmp.c: Add note about unchecked return values.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/addgrps.c: Change type of added to bool.
	* libmisc/addgrps.c: Avoid implicit conversion of pointers to
	booleans.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/hushed.c: hushed returns a bool instead of int.
	* libmisc/hushed.c: Avoid assignments in comparisons.
	* libmisc/hushed.c (hushed): Change type of found to bool.
	* libmisc/hushed.c: Add brackets.
	* libmisc/hushed.c: Always check if the user or the shell is in
	the file. Do not check the first character of the line first. This
	is simpler and match better with the HUSHLOGIN_FILE documentation.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/getdef.h, lib/getdef.c: getdef_bool returns a bool instead
	of int.
	* lib/getdef.c: Change typo of def_loaded to bool.
	* lib/getdef.c: Add brackets.
	* lib/getdef.c: Avoid assignments in comparisons.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chowntty.c: is_my_tty returns a bool.
	* libmisc/chowntty.c: Avoid implicit conversion of integers to
	booleans.
	* libmisc/chowntty.c: Add brackets.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chowndir.c: Avoid assignment in comparisons, implicit
	comparison of integers to booleans.
	* libmisc/chowndir.c: The return value of closedir is not checked
	on purpose.
	* libmisc/chowndir.c: Add brackets.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/chkname.h, libmisc/chkname.c: check_group_name (resp.
	check_user_name) renamed to is_valid_user_name (resp.
	is_valid_group_name). is_valid_user_name and is_valid_group_name
	return a bool.
	* src/grpck.c, src/newusers.c, src/usermod.c, src/useradd.c,
	src/groupmod.c, src/pwck.c, src/groupadd.c: Use is_valid_user_name
	and is_valid_group_name, following above change.
	* libmisc/chkname.c: Avoid implicit conversion of chars to
	booleans. Add brackets and parenthesis.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/xmalloc.c: Avoid implicit conversion of integers /
	pointers to booleans.
	* libmisc/xgetXXbyYY.c: Likewise.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in, lib/defines.h: Allow usage of booleans in the
	source.

2008-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Allow --disable-man and --enable-man=no.

2008-06-26  Nicolas François  <nicolas.francois@centraliens.net>

	Prepare the 4.1.2.1 release
	* NEWS: set the release date.
	* man/po/*.po, po/*.po: Updated PO files.