Changeset 55

Show
Ignore:
Timestamp:
05/25/07 10:05:35 (2 years ago)
Author:
csellers
Message:

rename to pam_tally3

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/RHEL5/pam_tally2/Makefile.am

    r37 r55  
    1515AM_LDFLAGS = -no-undefined -L$(top_builddir)/libpam -lpam $(LIBAUDIT) 
    1616 
    17 pam_tally2_la_LDFLAGS = -avoid-version -module 
     17pam_tally3_la_LDFLAGS = -avoid-version -module 
    1818if HAVE_VERSIONING 
    19   pam_tally2_la_LDFLAGS += -Wl,--version-script=$(srcdir)/../modules.map 
     19  pam_tally3_la_LDFLAGS += -Wl,--version-script=$(srcdir)/../modules.map 
    2020endif 
    2121 
    22 securelib_LTLIBRARIES = pam_tally2.la 
    23 sbin_PROGRAMS = pam_tally2 
     22securelib_LTLIBRARIES = pam_tally3.la 
     23sbin_PROGRAMS = pam_tally3 
    2424 
    25 pam_tally2_la_SOURCES = pam_tally.c 
    26 pam_tally2_SOURCES = pam_tally_app.c 
     25pam_tally3_la_SOURCES = pam_tally.c 
     26pam_tally3_SOURCES = pam_tally_app.c 

  • trunk/RHEL5/pam_tally2/README

    r47 r55  
    11SUMMARY: 
    2   pam_tally2.so: 
     2  pam_tally3.so: 
    33 
    44        Maintains a count of attempted accesses, can reset count on success, 
    …… 
    6464LONGER: 
    6565 
    66 pam_tally2 comes in two parts: pam_tally2.so and pam_tally2. 
     66pam_tally3 comes in two parts: pam_tally3.so and pam_tally3. 
    6767 
    68 pam_tally2.so sits in a pam config file, in the auth and account sections. 
     68pam_tally3.so sits in a pam config file, in the auth and account sections. 
    6969 
    7070In the auth section, it denies access if attempted logins exceed some 
    …… 
    8989blocked for some given service, use even_deny_root_account. 
    9090 
    91 pam_tally2 is an (optional) application which can be used to interrogate and  
     91pam_tally3 is an (optional) application which can be used to interrogate and  
    9292manipulate the counter file. It can display users' counts, set individual  
    9393counts, or clear all counts. Setting artificially high counts may be useful  
    …… 
    101101BUGS: 
    102102 
    103 pam_tally2 is not compatible with the old pam_tally faillog file format. 
     103pam_tally3 is not compatible with the old pam_tally faillog file format. 
    104104 
    105105There is no setuid wrapper for access to the data file such as when the 
    106 pam_tally2 module is called from xscreensaver. As this would make it 
     106pam_tally3 module is called from xscreensaver. As this would make it 
    107107impossible to share PAM configuration with such services the following 
    108108workaround is used: If the data file cannot be opened because of insufficient 
    …… 
    117117 
    118118The pam_tally was also incompatible between 32bit and 64bit versions because 
    119 the faillog format was architecture dependent. The new pam_tally2 uses a new 
     119the faillog format was architecture dependent. The new pam_tally3 uses a new 
    120120data file format and thus the file was renamed to /var/log/tallylog. 

  • trunk/RHEL5/pam_tally2/pam_tally.c

    r47 r55  
    8585/*---------------------------------------------------------------------*/ 
    8686 
    87 #define DEFAULT_LOGFILE "/var/log/tallylog" 
    88 #define MODULE_NAME     "pam_tally2" 
     87#define DEFAULT_LOGFILE "/var/log/tallylog3" 
     88#define MODULE_NAME     "pam_tally3" 
    8989 
    9090#define tally_t    uint16_t 
    …… 
    464464        if (tally->fail_cnt == opts->deny+1) { 
    465465            /* First say that max number was hit. */ 
    466             snprintf(buf, sizeof(buf), "pam_tally2 uid=%u ", uid); 
     466            snprintf(buf, sizeof(buf), "pam_tally3 uid=%u ", uid); 
    467467            audit_log_user_message(audit_fd, AUDIT_ANOM_LOGIN_FAILURES, buf, 
    468468                                   NULL, NULL, NULL, 1); 
    …… 
    475475                    /* ignore deny check after unlock_time elapsed */ 
    476476#ifdef HAVE_LIBAUDIT 
    477                     snprintf(buf, sizeof(buf), "pam_tally2 uid=%u ", uid); 
     477                    snprintf(buf, sizeof(buf), "pam_tally3 uid=%u ", uid); 
    478478                    audit_log_user_message(audit_fd, AUDIT_RESP_ACCT_UNLOCK_TIMED, buf, 
    479479                                   NULL, NULL, NULL, 1); 
    …… 
    489489                    /* ignore deny check after unlock_time elapsed */ 
    490490#ifdef HAVE_LIBAUDIT 
    491                     snprintf(buf, sizeof(buf), "pam_tally2 uid=%u ", uid); 
     491                    snprintf(buf, sizeof(buf), "pam_tally3 uid=%u ", uid); 
    492492                    audit_log_user_message(audit_fd, AUDIT_RESP_ACCT_UNLOCK_TIMED, buf, 
    493493                                   NULL, NULL, NULL, 1); 
    …… 
    932932        char buf[64]; 
    933933        int audit_fd = audit_open(); 
    934         snprintf(buf, sizeof(buf), "pam_tally2 uid=%u reset=%hu", uid, cline_reset); 
     934        snprintf(buf, sizeof(buf), "pam_tally3 uid=%u reset=%hu", uid, cline_reset); 
    935935        audit_log_user_message(audit_fd, AUDIT_USER_ACCT, 
    936936                buf, NULL, NULL, NULL, 1); 
    …… 
    977977      char buf[64]; 
    978978      int audit_fd = audit_open(); 
    979       snprintf(buf, sizeof(buf), "pam_tally2 uid=all reset=0"); 
     979      snprintf(buf, sizeof(buf), "pam_tally3 uid=all reset=0"); 
    980980      audit_log_user_message(audit_fd, AUDIT_USER_ACCT, 
    981981              buf, NULL, NULL, NULL, 1);