1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226
|
2008-05-14 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2.2
* Fix and improve build system: use LDLIBS instead of LDFLAGS where
appropriate and provide EXTRA_CFLAGS/EXTRA_LDFLAGS parameters in ./configure.
* Display number of authentication tries on exit.
2008-03-26 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2.1
* Fix a script handling bug.
2008-03-21 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2
* Small plugin documentation update.
2008-01-15 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 rc5
* Fixed snprintf() corner case in "new" module.
* Restore timeout if select() was interrupted by a signal in prompt().
2007-12-29 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 rc4
* Slightly changed the fix for the previous security issue: directory parts
are now silently stripped from erroneous names instead of reported as errors.
* Fixed a file descriptor leak in script handling.
* Fixed a bug where vlock would run in an infinite loop if not started from
a terminal. Now it simply exits.
* Added unit tests (using cunit).
2007-11-28 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 rc3
* A critical security problem (local root exploit) was fixed:
Previous versions of vlock (since 2.2 alpha1) contained a serious flaw
that allowed any user to execute arbitrary code as root . This was
possible because plugin names could contain "../" thus escaping the
pre-defined plugin directory. All users of vlock 2.2 development versions
are advised to update.
* Improved script handling.
* Added two more scripts.
2007-11-26 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 rc2
* Fixed man page installation error.
2007-11-17 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 rc1
* Updated documentation.
2007-11-04 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 beta2
* Improved error handling and error messages.
* Fixed portability bugs.
* Fixed dependency handling bug.
2007-10-16 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 beta1
* Documentation update.
* Improved error handling.
2007-10-03 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 alpha3
* Added ./configure script.
* Improved plugin handling.
* Improved error handling.
* Improved child process handling.
2007-09-21 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 alpha2
* Added libcaca based screen saver module.
* Miscellaneous minor fixes.
2007-09-19 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.2 alpha1
* Medium rewrite was undertaken.
* Support for plugins (modules and scripts) was added.
* vlock-all, vlock-new, and vlock-nosysrq were converted to modules.
* Other sample modules and scripts were added.
* vlock now tries to terminale cleanly if killed by SIGTERM and on errors.
2007-09-08 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.1
* Documentation update.
2007-08-29 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.1 rc1
* Really tiny cleanups.
2007-08-23 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.1 beta1
* Fix compilation on Debian/kFreeBSD.
2007-08-16 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.1 alpha2
* Locking message now configurable.
* Added configuration file support: ~/.vlockrc.
* "vlock --new" now works even if stdin is not a terminal.
* Improved documentation.
2007-08-11 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.1 alpha1
* Added FreeBSD support. Build with PAM_LIBS=-lpam, install with
INSTALL=ginstall.
* Improved signal handling.
* Added timeout support to password prompts.
2007-08-09 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.0
* No changes since vlock 2.0 rc2.
2007-08-06 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.0 rc2
* Improved man page and error messages.
* Fixed bug that prevented shadow authentication from working.
* vlock can now only be killed by root. This will probably be
fixed in future releases.
2007-08-05 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.0 rc1
* Code cleanups (comments, style).
* Fixed two merely theoretical security problems.
2007-08-02 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.0 beta2
* Many improvements to security.
* General cleanup to source tree.
* ChangeLog added.
* Manpages updated.
* LICENSE file updated, license terms unchanged.
* README updated.
* Added a SECURITY blurb.
* -n,--new option now implies -a,--all instead of requiring it.
2007-07-30 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.0 beta1
* Added manpages for all tools.
* Enter key must be pressed before authentication is started.
* When run as root, vlock now locks as the user given by the
$USER environment variable.
* Add -n,--new option to run vlock on a new virtual console.
2007-07-28 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.0 alpha2
* Shadow authentication added.
2007-07-25 Frank Benkstein <frank-vlock@benkstein.net>
vlock 2.0 alpha1
* Complete rewrite. vlock is now made of several tools called
from a shell script.
2007-05-23 Frank Benkstein <frank-vlock@benkstein.net>
vlock 1.4
* No changes since rc2.
2007-05-10 Frank Benkstein <frank-vlock@benkstein.net>
vlock 1.4 rc2
* Make install rule made more friendly to packagers.
* Updated license declarations: sources now clearly
state "GNU General Public License version 2".
2007-05-09 Frank Benkstein <frank-vlock@benkstein.net>
vlock 1.4 rc1
* Some compile time warnings fixed..
* Support for SysRq disabling added.
1999-01-13 Michael Johnson <johnsonm@redhat.com>
vlock 1.3
1998-03-12 Michael Johnson <johnsonm@redhat.com>
vlock 1.2
|