Commit graph

2693 commits

Author SHA1 Message Date
Patrick Schleizer
ace45d7c95
bumped changelog version 2025-05-21 22:06:02 +00:00
Patrick Schleizer
142ea21189
fix 2025-05-21 12:42:16 -04:00
Patrick Schleizer
a969fa350e
fix 2025-05-21 12:40:27 -04:00
Patrick Schleizer
f023651c98
nounset 2025-05-21 12:35:37 -04:00
Patrick Schleizer
f086787464
fix 2025-05-21 12:35:23 -04:00
Patrick Schleizer
d7643954d1
minor 2025-05-21 12:33:50 -04:00
Patrick Schleizer
aa905fc887
further validation of output of faillock 2025-05-21 12:32:16 -04:00
Patrick Schleizer
92d3a36a0f
fix 2025-05-21 12:29:01 -04:00
Patrick Schleizer
2c1abb23e0
output 2025-05-21 12:26:46 -04:00
Patrick Schleizer
0801b96ae7
output 2025-05-21 12:25:49 -04:00
Patrick Schleizer
ef8515ba82
improve error handling 2025-05-21 12:23:45 -04:00
Patrick Schleizer
784867e24b
fix 2025-05-21 12:21:45 -04:00
Patrick Schleizer
0eea681ce8
bumped changelog version 2025-05-21 15:52:16 +00:00
Patrick Schleizer
e1bae1c68a
fix 2025-05-21 11:50:59 -04:00
Patrick Schleizer
bd01a68305
bumped changelog version 2025-05-21 13:58:18 +00:00
Patrick Schleizer
14cf205579
fix 2025-05-21 08:36:16 -04:00
Patrick Schleizer
ff6bc5d5b6
bumped changelog version 2025-05-21 11:23:39 +00:00
Patrick Schleizer
353b6e83c5
test that wc is functional
https://github.com/Kicksecure/security-misc/pull/305#issuecomment-2892378246
2025-05-21 07:20:13 -04:00
Patrick Schleizer
5930e27052
pam-info: improve error handling
https://github.com/Kicksecure/security-misc/pull/305#issuecomment-2892378246
2025-05-21 07:05:25 -04:00
Patrick Schleizer
5c981e0891
pam-info: fix, consistently write errors and warnings to stderr 2025-05-21 06:55:09 -04:00
Patrick Schleizer
19d7e1af5d
bumped changelog version 2025-05-20 11:40:27 +00:00
Patrick Schleizer
405880e63b
handle case of non-existence of /proc/cmdline 2025-05-18 06:44:42 -04:00
Patrick Schleizer
88235cc97b
refactoring 2025-05-18 06:44:04 -04:00
Patrick Schleizer
601ea77b00
end-of-options 2025-05-18 06:42:39 -04:00
Patrick Schleizer
d8feca1276
printf 2025-05-18 06:41:41 -04:00
Patrick Schleizer
7f2ba0980d
refactoring 2025-05-18 06:40:50 -04:00
Patrick Schleizer
4d1f8c44d2
Merge remote-tracking branch 'github-kicksecure/master' 2025-05-18 06:36:08 -04:00
Patrick Schleizer
e478750814
Merge pull request #305 from DMHalford/pam-info-failed_login_counter-fix
Prevent erroneous "Login blocked after [negative number] attempts" errors
2025-05-18 06:35:23 -04:00
DMHalford
91a76db66b
Prevent erroneous "Login blocked after [negative number] attempts" errors
For root, faillock appears to always* return an empty string (i.e. no table headers are present), yielding a zero-initialized pam_faillock_output_count and thus resulting in the calculation of a negative failed_login_counter value.

This can cause erroneous errors of the form "ERROR: Login blocked after [negative number] attempts" during sudo-ing and screen unlocking.

This commit modifies the initialization of failed_login_counter such that it cannot be negative and prevents the display of these incorrect warnings.

* Only rudimentary local tests were conducted
2025-05-15 15:42:50 -04:00
DMHalford
6c3be9ced0
Prevent erroneous "Login blocked after [negative number] attempts" errors
For root, faillock appears to always* return an empty string (i.e. no table headers are present), yielding a zero-initialized pam_faillock_output_count and thus resulting in the calculation of a negative failed_login_counter value.

This can cause erroneous errors of the form "ERROR: Login blocked after [negative number] attempts" during sudo-ing and screen unlocking.

This commit modifies the initialization of failed_login_counter such that it cannot be negative and prevents the display of these incorrect warnings.

* Only rudimentary tests were conducted
2025-05-15 15:06:10 -04:00
Patrick Schleizer
341dce33fb
bumped changelog version 2025-04-25 09:54:23 +00:00
Patrick Schleizer
06e1e44b00
comments 2025-04-25 05:51:21 -04:00
Patrick Schleizer
ba1012ca87
bumped changelog version 2025-04-25 08:19:35 +00:00
Patrick Schleizer
a8f6132bec
output 2025-04-25 03:11:39 -04:00
Patrick Schleizer
1d14a9f324
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/fix-pkexec-umask' 2025-04-25 02:59:09 -04:00
Aaron Rainbolt
612f5f92fd
Fix umask for pkexec-run commands 2025-04-24 20:01:35 -05:00
Patrick Schleizer
e154d0af6d
bumped changelog version 2025-04-21 10:21:54 +00:00
Patrick Schleizer
4bf0e3a636
comments 2025-04-21 04:57:07 -04:00
Patrick Schleizer
502f5953c7
comments 2025-04-21 04:55:19 -04:00
Patrick Schleizer
abb0c83619
comments 2025-04-21 04:54:06 -04:00
Patrick Schleizer
efa2967fca
comments 2025-04-21 04:53:04 -04:00
Patrick Schleizer
dc7e857904
bumped changelog version 2025-04-19 17:33:56 +00:00
Patrick Schleizer
9948ae114d
fix 2025-04-19 13:24:17 -04:00
Patrick Schleizer
4aca622706
fix 2025-04-19 13:23:26 -04:00
Patrick Schleizer
701f4a0e88
output 2025-04-19 13:20:04 -04:00
Patrick Schleizer
a670c0d873
comment 2025-04-19 13:18:23 -04:00
Patrick Schleizer
4799f3ce02
make /usr/libexec/security-misc/apt-get-update more reliable 2025-04-19 13:17:28 -04:00
Patrick Schleizer
c4f0e1d16f
refactoring 2025-04-19 12:57:14 -04:00
Patrick Schleizer
81634930fa
refactoring 2025-04-19 12:55:32 -04:00
Patrick Schleizer
90330a1ec9
refactoring 2025-04-19 12:49:18 -04:00