12011-09-18 Frank Benkstein <frank-vlock@benkstein.net> 2 3 vlock 2.2.3 4 5 * Fix vlock not reacting to input when started in the background 6 from bash. (Thanks to Amy Fong for the report.) 7 82008-05-14 Frank Benkstein <frank-vlock@benkstein.net> 9 10 vlock 2.2.2 11 12 * Fix and improve build system: use LDLIBS instead of LDFLAGS where 13 appropriate and provide EXTRA_CFLAGS/EXTRA_LDFLAGS parameters in ./configure. 14 * Display number of authentication tries on exit. 15 162008-03-26 Frank Benkstein <frank-vlock@benkstein.net> 17 18 vlock 2.2.1 19 20 * Fix a script handling bug. 21 222008-03-21 Frank Benkstein <frank-vlock@benkstein.net> 23 24 vlock 2.2 25 26 * Small plugin documentation update. 27 282008-01-15 Frank Benkstein <frank-vlock@benkstein.net> 29 30 vlock 2.2 rc5 31 32 * Fixed snprintf() corner case in "new" module. 33 * Restore timeout if select() was interrupted by a signal in prompt(). 34 352007-12-29 Frank Benkstein <frank-vlock@benkstein.net> 36 37 vlock 2.2 rc4 38 39 * Slightly changed the fix for the previous security issue: directory parts 40 are now silently stripped from erroneous names instead of reported as errors. 41 * Fixed a file descriptor leak in script handling. 42 * Fixed a bug where vlock would run in an infinite loop if not started from 43 a terminal. Now it simply exits. 44 * Added unit tests (using cunit). 45 462007-11-28 Frank Benkstein <frank-vlock@benkstein.net> 47 48 vlock 2.2 rc3 49 50 * A critical security problem (local root exploit) was fixed: 51 Previous versions of vlock (since 2.2 alpha1) contained a serious flaw 52 that allowed any user to execute arbitrary code as root . This was 53 possible because plugin names could contain "../" thus escaping the 54 pre-defined plugin directory. All users of vlock 2.2 development versions 55 are advised to update. 56 * Improved script handling. 57 * Added two more scripts. 58 592007-11-26 Frank Benkstein <frank-vlock@benkstein.net> 60 61 vlock 2.2 rc2 62 63 * Fixed man page installation error. 64 652007-11-17 Frank Benkstein <frank-vlock@benkstein.net> 66 67 vlock 2.2 rc1 68 69 * Updated documentation. 70 712007-11-04 Frank Benkstein <frank-vlock@benkstein.net> 72 73 vlock 2.2 beta2 74 75 * Improved error handling and error messages. 76 * Fixed portability bugs. 77 * Fixed dependency handling bug. 78 792007-10-16 Frank Benkstein <frank-vlock@benkstein.net> 80 81 vlock 2.2 beta1 82 83 * Documentation update. 84 * Improved error handling. 85 862007-10-03 Frank Benkstein <frank-vlock@benkstein.net> 87 88 vlock 2.2 alpha3 89 90 * Added ./configure script. 91 * Improved plugin handling. 92 * Improved error handling. 93 * Improved child process handling. 94 952007-09-21 Frank Benkstein <frank-vlock@benkstein.net> 96 97 vlock 2.2 alpha2 98 99 * Added libcaca based screen saver module. 100 * Miscellaneous minor fixes. 101 1022007-09-19 Frank Benkstein <frank-vlock@benkstein.net> 103 104 vlock 2.2 alpha1 105 106 * Medium rewrite was undertaken. 107 * Support for plugins (modules and scripts) was added. 108 * vlock-all, vlock-new, and vlock-nosysrq were converted to modules. 109 * Other sample modules and scripts were added. 110 * vlock now tries to terminale cleanly if killed by SIGTERM and on errors. 111 1122007-09-08 Frank Benkstein <frank-vlock@benkstein.net> 113 114 vlock 2.1 115 116 * Documentation update. 117 1182007-08-29 Frank Benkstein <frank-vlock@benkstein.net> 119 120 vlock 2.1 rc1 121 122 * Really tiny cleanups. 123 1242007-08-23 Frank Benkstein <frank-vlock@benkstein.net> 125 126 vlock 2.1 beta1 127 128 * Fix compilation on Debian/kFreeBSD. 129 1302007-08-16 Frank Benkstein <frank-vlock@benkstein.net> 131 132 vlock 2.1 alpha2 133 134 * Locking message now configurable. 135 * Added configuration file support: ~/.vlockrc. 136 * "vlock --new" now works even if stdin is not a terminal. 137 * Improved documentation. 138 1392007-08-11 Frank Benkstein <frank-vlock@benkstein.net> 140 141 vlock 2.1 alpha1 142 143 * Added FreeBSD support. Build with PAM_LIBS=-lpam, install with 144 INSTALL=ginstall. 145 * Improved signal handling. 146 * Added timeout support to password prompts. 147 1482007-08-09 Frank Benkstein <frank-vlock@benkstein.net> 149 150 vlock 2.0 151 152 * No changes since vlock 2.0 rc2. 153 1542007-08-06 Frank Benkstein <frank-vlock@benkstein.net> 155 156 vlock 2.0 rc2 157 158 * Improved man page and error messages. 159 * Fixed bug that prevented shadow authentication from working. 160 * vlock can now only be killed by root. This will probably be 161 fixed in future releases. 162 1632007-08-05 Frank Benkstein <frank-vlock@benkstein.net> 164 165 vlock 2.0 rc1 166 167 * Code cleanups (comments, style). 168 * Fixed two merely theoretical security problems. 169 1702007-08-02 Frank Benkstein <frank-vlock@benkstein.net> 171 172 vlock 2.0 beta2 173 174 * Many improvements to security. 175 * General cleanup to source tree. 176 * ChangeLog added. 177 * Manpages updated. 178 * LICENSE file updated, license terms unchanged. 179 * README updated. 180 * Added a SECURITY blurb. 181 * -n,--new option now implies -a,--all instead of requiring it. 182 1832007-07-30 Frank Benkstein <frank-vlock@benkstein.net> 184 185 vlock 2.0 beta1 186 187 * Added manpages for all tools. 188 * Enter key must be pressed before authentication is started. 189 * When run as root, vlock now locks as the user given by the 190 $USER environment variable. 191 * Add -n,--new option to run vlock on a new virtual console. 192 1932007-07-28 Frank Benkstein <frank-vlock@benkstein.net> 194 195 vlock 2.0 alpha2 196 197 * Shadow authentication added. 198 1992007-07-25 Frank Benkstein <frank-vlock@benkstein.net> 200 201 vlock 2.0 alpha1 202 203 * Complete rewrite. vlock is now made of several tools called 204 from a shell script. 205 2062007-05-23 Frank Benkstein <frank-vlock@benkstein.net> 207 208 vlock 1.4 209 210 * No changes since rc2. 211 2122007-05-10 Frank Benkstein <frank-vlock@benkstein.net> 213 214 vlock 1.4 rc2 215 216 * Make install rule made more friendly to packagers. 217 * Updated license declarations: sources now clearly 218 state "GNU General Public License version 2". 219 2202007-05-09 Frank Benkstein <frank-vlock@benkstein.net> 221 222 vlock 1.4 rc1 223 224 * Some compile time warnings fixed.. 225 * Support for SysRq disabling added. 226 2271999-01-13 Michael Johnson <johnsonm@redhat.com> 228 229 vlock 1.3 230 2311998-03-12 Michael Johnson <johnsonm@redhat.com> 232 233 vlock 1.2 234