head 1.1; branch 1.1.1; access; symbols netbsd-11-0-RC5:1.1.1.1 netbsd-11-0-RC4:1.1.1.1 netbsd-11-0-RC3:1.1.1.1 netbsd-11-0-RC2:1.1.1.1 netbsd-11-0-RC1:1.1.1.1 perseant-exfatfs:1.1.1.1.0.4 perseant-exfatfs-base-20250801:1.1.1.1 netbsd-11:1.1.1.1.0.2 netbsd-11-base:1.1.1.1 pam-u2f-1-3-1:1.1.1.1 YUBICO:1.1.1; locks; strict; comment @# @; 1.1 date 2025.01.15.14.22.48; author christos; state Exp; branches 1.1.1.1; next ; commitid 9pjzxdbIGWVKzAFF; 1.1.1.1 date 2025.01.15.14.22.48; author christos; state Exp; branches 1.1.1.1.4.1; next ; commitid 9pjzxdbIGWVKzAFF; 1.1.1.1.4.1 date 2025.01.15.14.22.48; author perseant; state dead; branches; next 1.1.1.1.4.2; commitid 23j6GFaDws3O875G; 1.1.1.1.4.2 date 2025.08.02.05.23.09; author perseant; state Exp; branches; next ; commitid 23j6GFaDws3O875G; desc @@ 1.1 log @Initial revision @ text @pam_sm_authenticate pam_sm_setcred @ 1.1.1.1 log @Import pam-u2f 1.3.1 (previous was 1.2.0) Version 1.3.1 (released 2025-01-14) - Fix incorrect usage of PAM_IGNORE (YSA-2025-01, CVE-2025-23013). - Changed return value when nouserok is enabled and the user has no credentials, PAM_IGNORE is used instead of PAM_SUCCESS. - Hardened checks of authfile permissions. - Hardened checks for nouserok. - Improved debug messages. - Improved documentation. Version 1.3.0 (released 2023-03-14) - Add sanity checking of UV options to pamu2fcfg. - Add support for username expansion in the authfile path. - Improvements to the documentation. Version 1.2.1 (released 2022-05-11) - Fixed an issue where native credentials could be truncated, resulting in failure to authenticate or successful authentication with missing options. - Stricter parsing of sshformat credentials. - pamu2fcfg now allows a combination of the --username and --nouser options. - Improved documentation on FIDO2 options. @ text @@ 1.1.1.1.4.1 log @file export.sym was added on branch perseant-exfatfs on 2025-08-02 05:23:09 +0000 @ text @d1 2 @ 1.1.1.1.4.2 log @Sync with HEAD @ text @a0 2 pam_sm_authenticate pam_sm_setcred @