| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
characters in a username: where it was inserted into a regexp.
Fix it by escaping metacharacters in the name with \Q-\E.
|
|
|
|
| |
inside the function that verifies username validity.
|
|
|
|
|
|
|
| |
Previously, a truth check instead if defined() check erroneously
allowed that.
PR: bin/8745
|
|
|
|
|
|
|
|
| |
into usernames: Make the regular expression to check usernames
against configurable.
PR: bin/22860 bin/31049
Reviewed by: sheldonh
|
|
|
|
|
|
|
| |
less robust to possible errors of the user/admin while adduser(8)
had been intended to minimize their possibility.
An alternative way of introducing strange symbols into usernames
to be committed really soon.
|
|
|
|
|
|
|
|
| |
the skeleton directory are chown'd to the new user.
PR: bin/10601
Submitted by: Adrian Filipi-Martin <adrian2ubergeeks.com@gosub.cstone.net>
MFC after: 1 month
|
|
|
|
| |
PR: docs/30797
|
| |
|
|
|
|
|
| |
Now it should be @pwd_mkdb since we moved to Perl's
safe system() not using /bin/sh.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
a) Convert all the remaining older Perl system() calls to the new,
more secure LIST format so they are robust to whitespace and
shell metacharacters in their arguments.
b) Add a new option: -force, which allows adding usernames containing
characters that are otherwise illegal.
PR: bin/22860 bin/31049
|
|
|
|
| |
in the code and what the warning message reads.
|
|
|
|
|
| |
Previously, it was possible due to 0 and "0" being
equivalent in Perl.
|
|
|
|
| |
locale settings: allow any date and time separator characters.
|
|
|
|
|
| |
Don't print "Removing at jobs" if there are no jobs to remove.
Add a whitespace before "done." so the output looks better.
|
|
|
|
| |
Reported by: ryan beasley <ryanb@goddamnbastard.org>
|
| |
|
|
|
|
| |
Submitted by: Brian Poole <raj@cerias.purdue.edu>
|
|
|
|
|
|
|
|
| |
mail, if configured to do so. Some sites have setups where the user's
mail is delivered to their home directory, so sending mail before is
exists didn't work.
PR: 29892
|
|
|
|
|
|
|
|
| |
assignment of `l' in `gr_update' to the return value of snprintf. It
claimed to have fixed the case where snprintf returned -1--in fact, it
broke the entire routine. Not setting `l' here causes fileupdate() to
invariably fail with EINVAL because it does its own check to assert
that the parameter isn't -1.
|
|
|
|
|
|
|
| |
Right now, the automatically generated passwords have been rather
predictable. :-(
MFC after: 1 day
|
|
|
|
|
|
| |
USE_MD5RAND.
MFC after: 2 days
|
|
|
|
| |
MFC after: 2 weeks
|
|
|
|
| |
MFC after: 2 weeks
|
|
|
|
|
|
|
| |
have to regenerate the entire database.
PR: 25798
Submitted by: Domas Mituzas <domas.mituzas@delfi.lt>
|
| |
|
|
|
|
|
|
| |
new sysopen call.
PR: 29366 (in part)
|
|
|
|
| |
PR: 29366 (in part)
|
|
|
|
|
|
|
|
| |
inconsistently named "ptmp" and "etc_ptmp". This commit changes
it to "passwd_tmp" for consistency and to match OpenBSD's name
for the variable.
Consulted with: jedgar
|
|
|
|
|
|
| |
Submitted by: dynamo@harvard.net
Obtained from: OpenBSD
MFC after: 3 days
|
|
|
|
|
|
| |
PR: bin/23052
Submitted by: Mike Sellenschuetter <mike.sellenschuetter@bankofamerica.com>
MFC after: 1 week
|
|
|
|
|
| |
These are not perfectly in agreement with each other style-wise, but they
are orders of orders of magnitude more consistent style-wise than before.
|
| |
|
|
|
|
|
|
|
| |
properly, and doesn't hurt the other algorithms.
PR: 28991
Submitted by: Yoshihiro Koya <Yoshihiro.Koya@math.yokohama-cu.ac.jp>
|
| |
|
| |
|
| |
|
|
|
|
| |
Idea from: Theo de Raadt <deraadt@openbsd.org>
|
|
|
|
| |
Submitted by: bde
|
|
|
|
|
|
|
| |
There is still one instance of non-constant format string use inside that
function, but it's hard to fix.
MFC after: 1 week
|
|
|
|
| |
builtints (e.g., exit, strcmp).
|
|
|
|
|
|
|
| |
years; remove them from CFLAGS.
PR: 23712
Submitted by: Volker Stolz <stolz@i2.informatik.rwth-aachen.de>
|
|
|
|
| |
PR: 26674
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
account at creation, create accounts with a "*" password (so you can
use alternate authentication schemes without fearing a "default" password
biting you later), and blank passwords.
Yes, adduser could create a blank password account, but this makes it
slightly more difficult to shoot yourself in the foot.
The /etc/adduser.conf entries are:
# use password-based authentication for new users
# defaultusepassword = "yes" | "no"
defaultusepassword = "yes"
# enable account password at creation
# (the password will be prepended with a star if the account isn't enabled)
# defaultenableaccount = "yes" | "no"
defaultenableaccount = "yes"
# allow blank passwords
# defaultemptypassword = "yes" | "no"
defaultemptypassword = "no"
Requested by: alfred
Reviewed by: alfred
|
|
|
|
|
|
| |
group file. Because of the way the group sorting works while printing
out the new file it's not possible at this time to restore comments
in other locations, but at least they won't just disappear altogether.
|
|
|
|
|
|
|
|
|
|
| |
one user who differs only by case. The other perl tools assume (or enforce)
the all lowercase requirement, therefore making the search through
master.passwd case insensitive seemed a reasonable optimization, IMO.
I understand, although I do not sympathize with, the argument that someone
might want to do this on purpose, and might subsequently want to use the
wrong tool for the job. So, this fix should hopefully satisfy both camps.
|
|
|
|
|
|
|
| |
username to rm.
PR: 25961
Submitted by: Linh Pham <lplist@closedsrc.org>
|
| |
|
|
|
|
| |
- MAN[1-9] -> MAN.
|
| |
|