13195 would like roleauth user_attr
Reviewed by: Jason King <jason.king@joyent.com>
Reviewed by: Marco van Wieringen <mvw@planets.elm.net>
Approved by: Robert Mustacchi <rm@fingolfin.org>

5110 want pam_timestamp module
Reviewed by: Garrett D'Amore <garrett@damore.org>
Reviewed by: Jason King <jason.brian.king@gmail.com>
Approved by: Gordon Ross <gwr@nexenta.com>

2933 compiler warning gags need better granularity
Reviewed by: Eric Schrock <eric.schrock@delphix.com>
Approved by: Garrett D'Amore <garrett@damore.org>

344 su fails to check malloc's return value
Reviewed by: Albert Lee <trisk@nexenta.com>
Reviewed by: Enrico Papi <enricop@computer.org>
Reviewed by: Garrett D'Amore <garrett@damore.org>

344 su fails to check malloc's return value
Reviewed by: Albert Lee <trisk@nexenta.com>
Reviewed by: Enrico Papi <enricop@computer.org>
Reviewed by: Garrett D'Amore <garrett@damore.org>
Approved by: Garrett D'Amore <garrett@damore.org>

show more ...

6937808 su suspend hangs when auditing is enabled

PSARC 2009/686 Improving the use and debugging of the basic privilege set.
PSARC/2009/685 Basic Network Privilege
6434380 Expanding the basic privilege set in order to restrict network access

PSARC 2009/686 Improving the use and debugging of the basic privilege set.
PSARC/2009/685 Basic Network Privilege
6434380 Expanding the basic privilege set in order to restrict network access and IPC
6912229 Multiple applications mishandle privilege operations, particular they ignore the basic set
6915243 dladm mishandles basic privileges
6915244 in.tftpd mishandles privileges operations
6915250 NDMP mishandles basic privileges
6915257 smbd mishandles basic privileges
6915277 login audit mishandles basic privileges
6915284 su audit mishandles basic privileges
6915778 lpd-port mishandles basic privileges
6915782 zlogin mishandles basic privileges

show more ...

6864230 hiho, hiho, it'ch chtime for CH to go
Portions contributed by Rich Lowe

6754514 su(1M) uses wrong facility level to record syslog message

PSARC 2007/700 Enforcement of PASSREQ=YES
4652487 pam_unix_account does not honor PAM_DISALLOW_NULL_AUTHTOK for root
5070350 pam_unix account allows users with blank passwords if aging preven

PSARC 2007/700 Enforcement of PASSREQ=YES
4652487 pam_unix_account does not honor PAM_DISALLOW_NULL_AUTHTOK for root
5070350 pam_unix account allows users with blank passwords if aging prevents change
6494527 PASSREQ not always enforced

show more ...

6439874 login.c logout auditing should be done with reduced privileges.
6471150 "zlogin zonename utility" always returns 0 when auditing is on

PSARC 2006/561 libcmd must die
6480998 libcmd must die

--HG--
rename : usr/src/lib/libcmd/common/deflt.c => usr/src/lib/libc/port/gen/deflt.c

4009445 su exit should be audited
6405557 su(1M) should audit role assumption in addition to straight su.
6405677 adt_xml.txt needs a cleanup
6411227 failed su login for user found should

4009445 su exit should be audited
6405557 su(1M) should audit role assumption in addition to straight su.
6405677 adt_xml.txt needs a cleanup
6411227 failed su login for user found should include that user.

show more ...

6382160 login(1)/su(1m) not passing PAM_CHANGE_EXPIRED_AUTHTOK to pam_chauthtok

4533144 ON needs a single set of rules for installing default files
6281095 /etc/default files have inconsistent permissions
6288958 findunref's exception_list has become bloated

--H

4533144 ON needs a single set of rules for installing default files
6281095 /etc/default files have inconsistent permissions
6288958 findunref's exception_list has become bloated

--HG--
rename : usr/src/cmd/cmd-inet/etc/default/inetinit => usr/src/cmd/cmd-inet/etc/default/inetinit.dfl
rename : usr/src/cmd/cmd-inet/etc/default/ipsec => usr/src/cmd/cmd-inet/etc/default/ipsec.dfl
rename : usr/src/cmd/fs.d/autofs/autofs => usr/src/cmd/fs.d/autofs/autofs.dfl
rename : usr/src/cmd/fs.d/nfs/etc/nfs => usr/src/cmd/fs.d/nfs/etc/nfs.dfl
rename : usr/src/cmd/lvm/metassist/sysfiles/metassist.xml => usr/src/cmd/lvm/metassist/sysfiles/metassist.xml.dfl
rename : usr/src/cmd/netfiles/nss => usr/src/cmd/netfiles/nss.dfl
rename : usr/src/cmd/rpcsvc/nis/rpc.nisd/configs/rpc.nisd => usr/src/cmd/rpcsvc/nis/rpc.nisd/configs/rpc.nisd.dfl

show more ...

6281912 su doesn't correctly implement PAM requirements
6287039 su.c should use the new adt_ audit interfaces.

--HG--
rename : usr/src/lib/libbsm/common/audit_su.c => deleted_files/u

6281912 su doesn't correctly implement PAM requirements
6287039 su.c should use the new adt_ audit interfaces.

--HG--
rename : usr/src/lib/libbsm/common/audit_su.c => deleted_files/usr/src/lib/libbsm/common/audit_su.c

show more ...

OpenSolaris Launch