Relevant BUGIDs:

Purpose of commit: new feature

Commit summary:
---------------

2006-06-06  Thorsten Kukuk  <kukuk@thkukuk.de>

        * modules/pam_shells/Makefile.am: Include Make.xml.rules.
        * modules/pam_shells/pam_shells.8.xml: New.
        * modules/pam_shells/pam_shells.8: New, generated from xml file.
        * modules/pam_shells/README.xml: New.
        * modules/pam_shells/README: Regenerated from xml file.
This commit is contained in:
Thorsten Kukuk 2006-06-06 16:03:10 +00:00
parent 2f42cd380c
commit deda060dfb
7 changed files with 259 additions and 9 deletions

View File

@ -1,3 +1,11 @@
2006-06-06 Thorsten Kukuk <kukuk@suse.de>
* modules/pam_shells/Makefile.am: Include Make.xml.rules.
* modules/pam_shells/pam_shells.8.xml: New.
* modules/pam_shells/pam_shells.8: New, generated from xml file.
* modules/pam_shells/README.xml: New.
* modules/pam_shells/README: Regenerated from xml file.
2006-06-06 Thorsten Kukuk <kukuk@thkukuk.de>
* libpam/include/security/pam_malloc.h: Add missing license

2
NEWS
View File

@ -6,7 +6,7 @@ Linux-PAM NEWS -- history of user-visible changes.
* Add manual page for pam_mkhomedir, pam_umask, pam_filter,
pam_issue, pam_ftp, pam_group, pam_lastlog, pam_listfile,
pam_localuser, pam_mail, pam_motd, pam_nologin, pam_permit,
pam_rootok, pam_securetty
pam_rootok, pam_securetty, pam_shells
Release 0.99.4.0

View File

@ -4,7 +4,10 @@
CLEANFILES = *~
EXTRA_DIST = README tst-pam_shells
EXTRA_DIST = README $(MANS) $(XMLS) tst-pam_shells
man_MANS = pam_shells.8
XMLS = README.xml pam_shells.8.xml
TESTS = tst-pam_shells
@ -19,3 +22,10 @@ if HAVE_VERSIONING
endif
securelib_LTLIBRARIES = pam_shells.la
if ENABLE_REGENERATE_MAN
noinst_DATA = README
README: pam_shells.8.xml
-include $(top_srcdir)/Make.xml.rules
endif

View File

@ -1,9 +1,24 @@
pam_shells:
Authentication is granted if the users shell is listed in
/etc/shells.
pam_shells — PAM module to check for valid login shell
Also checks to make sure that /etc/shells is a plain
file and not world writable.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
DESCRIPTION
pam_shells is a PAM module that only allows access to the system if the users
shell is listed in /etc/shells.
It also checks if /etc/shells is a plain file and not world writable.
OPTIONS
This module does not recognice any options.
EXAMPLES
auth required pam_shells.so
AUTHOR
pam_shells was written by Erik Troan <ewt@redhat.com>.
- Erik Troan <ewt@redhat.com>, Red Hat Software.
August 5, 1996.

View File

@ -0,0 +1,41 @@
<?xml version="1.0" encoding='UTF-8'?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
"http://www.docbook.org/xml/4.3/docbookx.dtd"
[
<!--
<!ENTITY pamaccess SYSTEM "pam_shells.8.xml">
-->
]>
<article>
<articleinfo>
<title>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="pam_shells.8.xml" xpointer='xpointer(//refnamediv[@id = "pam_shells-name"]/*)'/>
</title>
</articleinfo>
<section>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="pam_shells.8.xml" xpointer='xpointer(//refsect1[@id = "pam_shells-description"]/*)'/>
</section>
<section>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="pam_shells.8.xml" xpointer='xpointer(//refsect1[@id = "pam_shells-options"]/*)'/>
</section>
<section>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="pam_shells.8.xml" xpointer='xpointer(//refsect1[@id = "pam_shells-examples"]/*)'/>
</section>
<section>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="pam_shells.8.xml" xpointer='xpointer(//refsect1[@id = "pam_shells-author"]/*)'/>
</section>
</article>

View File

@ -0,0 +1,59 @@
.\" ** You probably do not want to edit this file directly **
.\" It was generated using the DocBook XSL Stylesheets (version 1.69.1).
.\" Instead of manually editing it, you probably should edit the DocBook XML
.\" source for it and then use the DocBook XSL Stylesheets to regenerate it.
.TH "PAM_SHELLS" "8" "06/06/2006" "Linux\-PAM Manual" "Linux\-PAM Manual"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.SH "NAME"
pam_shells \- PAM module to check for valid login shell
.SH "SYNOPSIS"
.HP 14
\fBpam_shells.so\fR
.SH "DESCRIPTION"
.PP
pam_shells is a PAM module that only allows access to the system if the users shell is listed in
\fI/etc/shells\fR.
.PP
It also checks if
\fI/etc/shells\fR
is a plain file and not world writable.
.SH "OPTIONS"
.PP
This module does not recognice any options.
.SH "MODULE SERVICES PROVIDED"
.PP
The services
\fBauth\fR
and
\fBaccount\fR
are supported.
.SH "RETURN VALUES"
.TP
PAM_AUTH_ERR
Access to the system was denied.
.TP
PAM_SUCCESS
The users login shell was listed as valid shell in
\fI/etc/shells\fR.
.TP
PAM_SERVICE_ERR
The module was not able to get the name of the user.
.SH "EXAMPLES"
.PP
.nf
auth required pam_shells.so
.fi
.sp
.SH "SEE ALSO"
.PP
\fBshells\fR(5),
\fBpam.conf\fR(5),
\fBpam.d\fR(8),
\fBpam\fR(8)
.SH "AUTHOR"
.PP
pam_shells was written by Erik Troan <ewt@redhat.com>.

View File

@ -0,0 +1,117 @@
<?xml version="1.0" encoding='UTF-8'?>
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
"http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd">
<refentry id="pam_shells">
<refmeta>
<refentrytitle>pam_shells</refentrytitle>
<manvolnum>8</manvolnum>
<refmiscinfo class="sectdesc">Linux-PAM Manual</refmiscinfo>
</refmeta>
<refnamediv id="pam_shells-name">
<refname>pam_shells</refname>
<refpurpose>PAM module to check for valid login shell</refpurpose>
</refnamediv>
<refsynopsisdiv>
<cmdsynopsis id="pam_shells-cmdsynopsis">
<command>pam_shells.so</command>
</cmdsynopsis>
</refsynopsisdiv>
<refsect1 id="pam_shells-description">
<title>DESCRIPTION</title>
<para>
pam_shells is a PAM module that only allows access to the
system if the users shell is listed in <filename>/etc/shells</filename>.
</para>
<para>
It also checks if <filename>/etc/shells</filename> is a plain
file and not world writable.
</para>
</refsect1>
<refsect1 id="pam_shells-options">
<title>OPTIONS</title>
<para> This module does not recognice any options.</para>
</refsect1>
<refsect1 id="pam_shells-services">
<title>MODULE SERVICES PROVIDED</title>
<para>
The services <option>auth</option> and <option>account</option>
are supported.
</para>
</refsect1>
<refsect1 id='pam_shells-return_values'>
<title>RETURN VALUES</title>
<variablelist>
<varlistentry>
<term>PAM_AUTH_ERR</term>
<listitem>
<para>
Access to the system was denied.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>PAM_SUCCESS</term>
<listitem>
<para>
The users login shell was listed as valid shell in
<filename>/etc/shells</filename>.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>PAM_SERVICE_ERR</term>
<listitem>
<para>
The module was not able to get the name of the user.
</para>
</listitem>
</varlistentry>
</variablelist>
</refsect1>
<refsect1 id='pam_shells-examples'>
<title>EXAMPLES</title>
<para>
<programlisting>
auth required pam_shells.so
</programlisting>
</para>
</refsect1>
<refsect1 id='pam_shells-see_also'>
<title>SEE ALSO</title>
<para>
<citerefentry>
<refentrytitle>shells</refentrytitle><manvolnum>5</manvolnum>
</citerefentry>,
<citerefentry>
<refentrytitle>pam.conf</refentrytitle><manvolnum>5</manvolnum>
</citerefentry>,
<citerefentry>
<refentrytitle>pam.d</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citerefentry>
<refentrytitle>pam</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>
</para>
</refsect1>
<refsect1 id='pam_shells-author'>
<title>AUTHOR</title>
<para>
pam_shells was written by Erik Troan &lt;ewt@redhat.com&gt;.
</para>
</refsect1>
</refentry>