From owner-cvs-src@FreeBSD.ORG Thu Jul 12 14:11:57 2007 Return-Path: X-Original-To: cvs-src@FreeBSD.org Delivered-To: cvs-src@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id CF9A416A400; Thu, 12 Jul 2007 14:11:57 +0000 (UTC) (envelope-from yar@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [69.147.83.41]) by mx1.freebsd.org (Postfix) with ESMTP id C105D13C458; Thu, 12 Jul 2007 14:11:57 +0000 (UTC) (envelope-from yar@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.8/8.13.8) with ESMTP id l6CEBvqw043895; Thu, 12 Jul 2007 14:11:57 GMT (envelope-from yar@repoman.freebsd.org) Received: (from yar@localhost) by repoman.freebsd.org (8.13.8/8.13.8/Submit) id l6CEBvbs043894; Thu, 12 Jul 2007 14:11:57 GMT (envelope-from yar) Message-Id: <200707121411.l6CEBvbs043894@repoman.freebsd.org> From: Yar Tikhiy Date: Thu, 12 Jul 2007 14:11:57 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: RELENG_6 Cc: Subject: cvs commit: src/lib/libpam/modules/pam_nologin pam_nologin.8 pam_nologin.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2007 14:11:57 -0000 yar 2007-07-12 14:11:57 UTC FreeBSD src repository Modified files: (Branch: RELENG_6) lib/libpam/modules/pam_nologin pam_nologin.8 pam_nologin.c Log: MFC: Use the current user's login class for the decisions about where the nologin(5) file is located and whether the user may bypass its restriction. Add some error checks. Revision Changes Path 1.7 +16 -15 src/lib/libpam/modules/pam_nologin/pam_nologin.8 1.13 +42 -29 src/lib/libpam/modules/pam_nologin/pam_nologin.c Note: To avoid POLA violation, the merged module still lets root in irrespective of login.conf settings. In HEAD, root has to have an explicit "ignorenologin" capability to bypass nologin(5). PR: bin/107612 Revision Changes Path 1.5.14.1 +17 -16 src/lib/libpam/modules/pam_nologin/pam_nologin.8 1.10.14.1 +47 -28 src/lib/libpam/modules/pam_nologin/pam_nologin.c