nekral-guest a917ba4fb9 *** security: ...

- generation of SHA encrypted passwords (chpasswd, gpasswd, newusers,
  chgpasswd; and also passwd if configured without PAM support).
  The number of rounds and number of salt bytes was fixed to their lower
  allowed values (resp. configurable and 8), hence voiding some of the
  advantages of this encryption method. Dictionary attacks with
  precomputed tables were easier than expected, but still harder than with
  the MD5 (or DES) methods.

	* NEWS, libmisc/salt.c (SHA_salt_size): Seed the RNG, and fix a
	overflow. These caused the SHA salt size to always be 8 bytes,
	instead of being in the 8-16 range. Thanks to Peter Vrabec
	pvrabec@redhat.com for noticing.
	* NEWS, libmisc/salt.c (SHA_salt_rounds): Seed the RNG with
	seedRNG instead of srand, and fix the same overflow. This caused
	the number of rounds to always be the smallest one.

2008-05-20 13:34:06 +00:00

..

.indent.pro

Commit the last version from the PLD CVS repository.

2007-10-07 14:36:51 +00:00

addgrps.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

age.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

audit_help.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

basename.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

chkname.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

chkname.h

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

chowndir.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

chowntty.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

console.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

copydir.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

entry.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

env.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

failure.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

failure.h

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

fields.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

find_new_ids.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

getdate.h

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

getdate.y

* libmisc/obscure.c: Tag the `old' parameter of palindrome(),

2008-01-06 13:20:25 +00:00

getlong.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

hushed.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

isexpired.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

limits.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

list.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

log.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

loginprompt.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

mail.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

Makefile.am

Add libmisc/find_new_ids.c to the sources of the libmisc library.

2008-02-03 16:57:21 +00:00

motd.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

myname.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

obscure.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

pam_pass.c

Import Debian patch 487_passwd_chauthtok_failed_message

2008-05-18 15:06:51 +00:00

pwd2spwd.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

pwd_init.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

pwdcheck.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

rlogin.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

salt.c

*** security:

2008-05-20 13:34:06 +00:00

setugid.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

setupenv.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

shell.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

strtoday.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

sub.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

sulog.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

ttytype.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

tz.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

ulimit.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

utmp.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

valid.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

xgetgrgid.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

xgetgrnam.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

xgetpwnam.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

xgetpwuid.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

xgetspnam.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

xgetXXbyYY.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

xmalloc.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00

yesno.c

Make sure every source files are distributed with a copyright and license.

2008-04-27 00:40:09 +00:00