mirror of
https://github.com/linux-pam/linux-pam.git
synced 2024-11-27 11:43:38 +08:00
e89d4c9738
Security fix: CVE-2015-3238 If the process executing pam_sm_authenticate or pam_sm_chauthtok method of pam_unix is not privileged enough to check the password, e.g. if selinux is enabled, the _unix_run_helper_binary function is called. When a long enough password is supplied (16 pages or more, i.e. 65536+ bytes on a system with 4K pages), this helper function hangs indefinitely, blocked in the write(2) call while writing to a blocking pipe that has a limited capacity. With this fix, the verifiable password length will be limited to PAM_MAX_RESP_SIZE bytes (i.e. 512 bytes) for pam_exec and pam_unix. * NEWS: Update * configure.ac: Bump version * modules/pam_exec/pam_exec.8.xml: document limitation of password length * modules/pam_exec/pam_exec.c: limit password length to PAM_MAX_RESP_SIZE * modules/pam_unix/pam_unix.8.xml: document limitation of password length * modules/pam_unix/pam_unix_passwd.c: limit password length * modules/pam_unix/passverify.c: Likewise * modules/pam_unix/passverify.h: Likewise * modules/pam_unix/support.c: Likewise
576 lines
13 KiB
Plaintext
576 lines
13 KiB
Plaintext
# SOME DESCRIPTIVE TITLE.
|
|
# Copyright (C) YEAR Linux-PAM Project
|
|
# This file is distributed under the same license as the PACKAGE package.
|
|
#
|
|
# Translators:
|
|
msgid ""
|
|
msgstr ""
|
|
"Project-Id-Version: Linux-PAM\n"
|
|
"Report-Msgid-Bugs-To: http://sourceforge.net/projects/pam\n"
|
|
"POT-Creation-Date: 2015-06-22 14:16+0200\n"
|
|
"PO-Revision-Date: 2011-11-30 11:56+0000\n"
|
|
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
|
|
"Language-Team: Romanian (http://www.transifex.com/projects/p/fedora/language/"
|
|
"ro/)\n"
|
|
"Language: ro\n"
|
|
"MIME-Version: 1.0\n"
|
|
"Content-Type: text/plain; charset=UTF-8\n"
|
|
"Content-Transfer-Encoding: 8bit\n"
|
|
"Plural-Forms: nplurals=3; plural=(n==1?0:(((n%100>19)||((n%100==0)&&(n!=0)))?"
|
|
"2:1));\n"
|
|
|
|
#: libpam_misc/misc_conv.c:33
|
|
msgid "...Time is running out...\n"
|
|
msgstr ""
|
|
|
|
#: libpam_misc/misc_conv.c:34
|
|
msgid "...Sorry, your time is up!\n"
|
|
msgstr ""
|
|
|
|
#: libpam_misc/misc_conv.c:346
|
|
#, c-format
|
|
msgid "erroneous conversation (%d)\n"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_get_authtok.c:39 modules/pam_exec/pam_exec.c:170
|
|
#: modules/pam_unix/pam_unix_auth.c:160 modules/pam_userdb/pam_userdb.c:64
|
|
msgid "Password: "
|
|
msgstr ""
|
|
|
|
#: libpam/pam_get_authtok.c:41 modules/pam_cracklib/pam_cracklib.c:68
|
|
#, c-format
|
|
msgid "New %s%spassword: "
|
|
msgstr ""
|
|
|
|
#: libpam/pam_get_authtok.c:43 modules/pam_cracklib/pam_cracklib.c:70
|
|
#, c-format
|
|
msgid "Retype new %s%spassword: "
|
|
msgstr ""
|
|
|
|
#: libpam/pam_get_authtok.c:44 modules/pam_cracklib/pam_cracklib.c:71
|
|
msgid "Sorry, passwords do not match."
|
|
msgstr ""
|
|
|
|
#: libpam/pam_get_authtok.c:135 libpam/pam_get_authtok.c:212
|
|
#, c-format
|
|
msgid "Retype %s"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_get_authtok.c:156 libpam/pam_get_authtok.c:228
|
|
msgid "Password change aborted."
|
|
msgstr ""
|
|
|
|
#: libpam/pam_item.c:311
|
|
msgid "login:"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:40
|
|
msgid "Success"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:42
|
|
msgid "Critical error - immediate abort"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:44
|
|
msgid "Failed to load module"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:46
|
|
msgid "Symbol not found"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:48
|
|
msgid "Error in service module"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:50
|
|
msgid "System error"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:52
|
|
msgid "Memory buffer error"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:54
|
|
msgid "Permission denied"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:56
|
|
msgid "Authentication failure"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:58
|
|
msgid "Insufficient credentials to access authentication data"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:60
|
|
msgid "Authentication service cannot retrieve authentication info"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:62
|
|
msgid "User not known to the underlying authentication module"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:64
|
|
msgid "Have exhausted maximum number of retries for service"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:66
|
|
msgid "Authentication token is no longer valid; new one required"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:68
|
|
msgid "User account has expired"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:70
|
|
msgid "Cannot make/remove an entry for the specified session"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:72
|
|
msgid "Authentication service cannot retrieve user credentials"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:74
|
|
msgid "User credentials expired"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:76
|
|
msgid "Failure setting user credentials"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:78
|
|
msgid "No module specific data is present"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:80
|
|
msgid "Bad item passed to pam_*_item()"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:82
|
|
msgid "Conversation error"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:84
|
|
msgid "Authentication token manipulation error"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:86
|
|
msgid "Authentication information cannot be recovered"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:88
|
|
msgid "Authentication token lock busy"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:90
|
|
msgid "Authentication token aging disabled"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:92
|
|
msgid "Failed preliminary check by password service"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:94
|
|
msgid "The return value should be ignored by PAM dispatch"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:96
|
|
msgid "Module is unknown"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:98
|
|
msgid "Authentication token expired"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:100
|
|
msgid "Conversation is waiting for event"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:102
|
|
msgid "Application needs to call libpam again"
|
|
msgstr ""
|
|
|
|
#: libpam/pam_strerror.c:105
|
|
msgid "Unknown PAM error"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:618
|
|
msgid "is the same as the old one"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:624
|
|
#: modules/pam_cracklib/pam_cracklib.c:628
|
|
#: modules/pam_cracklib/pam_cracklib.c:638
|
|
msgid "memory allocation error"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:643
|
|
msgid "is a palindrome"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:646
|
|
msgid "case changes only"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:649
|
|
msgid "is too similar to the old one"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:652
|
|
msgid "is too simple"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:655
|
|
msgid "is rotated"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:658
|
|
msgid "not enough character classes"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:661
|
|
msgid "contains too many same characters consecutively"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:664
|
|
msgid "contains too long of a monotonic character sequence"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:667
|
|
msgid "contains the user name in some form"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:701
|
|
#: modules/pam_unix/pam_unix_passwd.c:501
|
|
msgid "No password supplied"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:701
|
|
#: modules/pam_unix/pam_unix_passwd.c:501
|
|
msgid "Password unchanged"
|
|
msgstr ""
|
|
|
|
#: modules/pam_cracklib/pam_cracklib.c:721
|
|
#: modules/pam_cracklib/pam_cracklib.c:803
|
|
#, c-format
|
|
msgid "BAD PASSWORD: %s"
|
|
msgstr ""
|
|
|
|
#: modules/pam_exec/pam_exec.c:273
|
|
#, c-format
|
|
msgid "%s failed: exit code %d"
|
|
msgstr ""
|
|
|
|
#: modules/pam_exec/pam_exec.c:282
|
|
#, c-format
|
|
msgid "%s failed: caught signal %d%s"
|
|
msgstr ""
|
|
|
|
#: modules/pam_exec/pam_exec.c:291
|
|
#, c-format
|
|
msgid "%s failed: unknown status 0x%x"
|
|
msgstr ""
|
|
|
|
#. TRANSLATORS: "strftime options for date of last login"
|
|
#: modules/pam_lastlog/pam_lastlog.c:282 modules/pam_lastlog/pam_lastlog.c:496
|
|
msgid " %a %b %e %H:%M:%S %Z %Y"
|
|
msgstr ""
|
|
|
|
#. TRANSLATORS: " from <host>"
|
|
#: modules/pam_lastlog/pam_lastlog.c:291 modules/pam_lastlog/pam_lastlog.c:505
|
|
#, c-format
|
|
msgid " from %.*s"
|
|
msgstr ""
|
|
|
|
#. TRANSLATORS: " on <terminal>"
|
|
#: modules/pam_lastlog/pam_lastlog.c:303 modules/pam_lastlog/pam_lastlog.c:517
|
|
#, c-format
|
|
msgid " on %.*s"
|
|
msgstr ""
|
|
|
|
#. TRANSLATORS: "Last login: <date> from <host> on <terminal>"
|
|
#: modules/pam_lastlog/pam_lastlog.c:313
|
|
#, c-format
|
|
msgid "Last login:%s%s%s"
|
|
msgstr ""
|
|
|
|
#: modules/pam_lastlog/pam_lastlog.c:319
|
|
msgid "Welcome to your new account!"
|
|
msgstr ""
|
|
|
|
#. TRANSLATORS: "Last failed login: <date> from <host> on <terminal>"
|
|
#: modules/pam_lastlog/pam_lastlog.c:527
|
|
#, c-format
|
|
msgid "Last failed login:%s%s%s"
|
|
msgstr ""
|
|
|
|
#: modules/pam_lastlog/pam_lastlog.c:536 modules/pam_lastlog/pam_lastlog.c:543
|
|
#, c-format
|
|
msgid "There was %d failed login attempt since the last successful login."
|
|
msgid_plural ""
|
|
"There were %d failed login attempts since the last successful login."
|
|
msgstr[0] ""
|
|
msgstr[1] ""
|
|
msgstr[2] ""
|
|
|
|
#. TRANSLATORS: only used if dngettext is not supported
|
|
#: modules/pam_lastlog/pam_lastlog.c:548
|
|
#, c-format
|
|
msgid "There were %d failed login attempts since the last successful login."
|
|
msgstr ""
|
|
|
|
#: modules/pam_limits/pam_limits.c:1091
|
|
#, c-format
|
|
msgid "Too many logins for '%s'."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:297
|
|
msgid "No mail."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:300
|
|
msgid "You have new mail."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:303
|
|
msgid "You have old mail."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:307
|
|
msgid "You have mail."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:314
|
|
#, c-format
|
|
msgid "You have no mail in folder %s."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:318
|
|
#, c-format
|
|
msgid "You have new mail in folder %s."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:322
|
|
#, c-format
|
|
msgid "You have old mail in folder %s."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mail/pam_mail.c:327
|
|
#, c-format
|
|
msgid "You have mail in folder %s."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mkhomedir/pam_mkhomedir.c:111
|
|
#, c-format
|
|
msgid "Creating directory '%s'."
|
|
msgstr ""
|
|
|
|
#: modules/pam_mkhomedir/pam_mkhomedir.c:176
|
|
#, c-format
|
|
msgid "Unable to create and initialize directory '%s'."
|
|
msgstr ""
|
|
|
|
#: modules/pam_pwhistory/pam_pwhistory.c:217
|
|
#: modules/pam_unix/pam_unix_passwd.c:522
|
|
msgid "Password has been already used. Choose another."
|
|
msgstr ""
|
|
|
|
#: modules/pam_pwhistory/pam_pwhistory.c:224
|
|
msgid "Password has been already used."
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:210
|
|
#, c-format
|
|
msgid "Default Security Context %s\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:214
|
|
msgid "Would you like to enter a different role or level?"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:227
|
|
msgid "role:"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:230
|
|
#, c-format
|
|
msgid "No default type for role %s\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:262
|
|
msgid "level:"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:295
|
|
msgid "Not a valid security context"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:544
|
|
#, c-format
|
|
msgid "Unable to get valid context for %s"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:663
|
|
#, c-format
|
|
msgid "Security Context %s Assigned"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux.c:679
|
|
#, c-format
|
|
msgid "Key Creation Context %s Assigned"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux_check.c:99
|
|
#, c-format
|
|
msgid "failed to initialize PAM\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux_check.c:105
|
|
#, c-format
|
|
msgid "failed to pam_set_item()\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_selinux/pam_selinux_check.c:133
|
|
#, c-format
|
|
msgid "login: failure forking: %m"
|
|
msgstr ""
|
|
|
|
#: modules/pam_stress/pam_stress.c:476
|
|
#, c-format
|
|
msgid "Changing STRESS password for %s."
|
|
msgstr ""
|
|
|
|
#: modules/pam_stress/pam_stress.c:490
|
|
msgid "Enter new STRESS password: "
|
|
msgstr ""
|
|
|
|
#: modules/pam_stress/pam_stress.c:493
|
|
msgid "Retype new STRESS password: "
|
|
msgstr ""
|
|
|
|
#: modules/pam_stress/pam_stress.c:522
|
|
msgid "Verification mis-typed; password unchanged"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:541 modules/pam_tally2/pam_tally2.c:596
|
|
#, c-format
|
|
msgid "Account temporary locked (%ld seconds left)"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:566 modules/pam_tally2/pam_tally2.c:575
|
|
#, c-format
|
|
msgid "Account locked due to %u failed logins"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:777 modules/pam_tally2/pam_tally2.c:884
|
|
msgid "Authentication error"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:778 modules/pam_tally2/pam_tally2.c:885
|
|
msgid "Service error"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:779 modules/pam_tally2/pam_tally2.c:886
|
|
msgid "Unknown user"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:780 modules/pam_tally2/pam_tally2.c:887
|
|
msgid "Unknown error"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:796 modules/pam_tally2/pam_tally2.c:906
|
|
#, c-format
|
|
msgid "%s: Bad number given to --reset=\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:800 modules/pam_tally2/pam_tally2.c:910
|
|
#, c-format
|
|
msgid "%s: Unrecognised option %s\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:812
|
|
#, c-format
|
|
msgid ""
|
|
"%s: [--file rooted-filename] [--user username] [--reset[=n]] [--quiet]\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally/pam_tally.c:886 modules/pam_tally2/pam_tally2.c:1036
|
|
#, c-format
|
|
msgid "%s: Can't reset all users to non-zero\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally2/pam_tally2.c:937
|
|
#, c-format
|
|
msgid "Login Failures Latest failure From\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_tally2/pam_tally2.c:953
|
|
#, c-format
|
|
msgid ""
|
|
"%s: [-f rooted-filename] [--file rooted-filename]\n"
|
|
" [-u username] [--user username]\n"
|
|
" [-r] [--reset[=n]] [--quiet]\n"
|
|
msgstr ""
|
|
|
|
#: modules/pam_timestamp/pam_timestamp.c:357
|
|
#, c-format
|
|
msgid "Access granted (last access was %ld seconds ago)."
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_acct.c:244 modules/pam_unix/pam_unix_acct.c:266
|
|
msgid "Your account has expired; please contact your system administrator"
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_acct.c:252
|
|
msgid "You are required to change your password immediately (root enforced)"
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_acct.c:258
|
|
msgid "You are required to change your password immediately (password aged)"
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_acct.c:279 modules/pam_unix/pam_unix_acct.c:286
|
|
#, c-format
|
|
msgid "Warning: your password will expire in %d day"
|
|
msgid_plural "Warning: your password will expire in %d days"
|
|
msgstr[0] ""
|
|
msgstr[1] ""
|
|
msgstr[2] ""
|
|
|
|
#. TRANSLATORS: only used if dngettext is not supported
|
|
#: modules/pam_unix/pam_unix_acct.c:291
|
|
#, c-format
|
|
msgid "Warning: your password will expire in %d days"
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_passwd.c:403
|
|
msgid "NIS password could not be changed."
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_passwd.c:518
|
|
msgid "You must choose a longer password"
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_passwd.c:625
|
|
#, c-format
|
|
msgid "Changing password for %s."
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_passwd.c:636
|
|
msgid "(current) UNIX password: "
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_passwd.c:671
|
|
msgid "You must wait longer to change your password"
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_passwd.c:731
|
|
msgid "Enter new UNIX password: "
|
|
msgstr ""
|
|
|
|
#: modules/pam_unix/pam_unix_passwd.c:732
|
|
msgid "Retype new UNIX password: "
|
|
msgstr ""
|