1 2007-12-29 Frank Benkstein <frank-vlock@benkstein.net>
5 * Slightly changed the fix for the previous security issue: directory parts
6 are now silently stripped from erroneous names instead of reported as errors.
7 * Fixed a file descriptor leak in script handling.
8 * Fixed a bug where vlock would run in an infinite loop if not started from
9 a terminal. Now it simply exits.
10 * Added unit tests (using cunit).
12 2007-11-28 Frank Benkstein <frank-vlock@benkstein.net>
16 * A critical security problem (local root exploit) was fixed:
17 Previous versions of vlock (since 2.2 alpha1) contained a serious flaw
18 that allowed any user to execute arbitrary code as root . This was
19 possible because plugin names could contain "../" thus escaping the
20 pre-defined plugin directory. All users of vlock 2.2 development versions
21 are advised to update.
22 * Improved script handling.
23 * Added two more scripts.
25 2007-11-26 Frank Benkstein <frank-vlock@benkstein.net>
29 * Fixed man page installation error.
31 2007-11-17 Frank Benkstein <frank-vlock@benkstein.net>
35 * Updated documentation.
37 2007-11-04 Frank Benkstein <frank-vlock@benkstein.net>
41 * Improved error handling and error messages.
42 * Fixed portability bugs.
43 * Fixed dependency handling bug.
45 2007-10-16 Frank Benkstein <frank-vlock@benkstein.net>
49 * Documentation update.
50 * Improved error handling.
52 2007-10-03 Frank Benkstein <frank-vlock@benkstein.net>
56 * Added ./configure script.
57 * Improved plugin handling.
58 * Improved error handling.
59 * Improved child process handling.
61 2007-09-21 Frank Benkstein <frank-vlock@benkstein.net>
65 * Added libcaca based screen saver module.
66 * Miscellaneous minor fixes.
68 2007-09-19 Frank Benkstein <frank-vlock@benkstein.net>
72 * Medium rewrite was undertaken.
73 * Support for plugins (modules and scripts) was added.
74 * vlock-all, vlock-new, and vlock-nosysrq were converted to modules.
75 * Other sample modules and scripts were added.
76 * vlock now tries to terminale cleanly if killed by SIGTERM and on errors.
78 2007-09-08 Frank Benkstein <frank-vlock@benkstein.net>
82 * Documentation update.
84 2007-08-29 Frank Benkstein <frank-vlock@benkstein.net>
88 * Really tiny cleanups.
90 2007-08-23 Frank Benkstein <frank-vlock@benkstein.net>
94 * Fix compilation on Debian/kFreeBSD.
96 2007-08-16 Frank Benkstein <frank-vlock@benkstein.net>
100 * Locking message now configurable.
101 * Added configuration file support: ~/.vlockrc.
102 * "vlock --new" now works even if stdin is not a terminal.
103 * Improved documentation.
105 2007-08-11 Frank Benkstein <frank-vlock@benkstein.net>
109 * Added FreeBSD support. Build with PAM_LIBS=-lpam, install with
111 * Improved signal handling.
112 * Added timeout support to password prompts.
114 2007-08-09 Frank Benkstein <frank-vlock@benkstein.net>
118 * No changes since vlock 2.0 rc2.
120 2007-08-06 Frank Benkstein <frank-vlock@benkstein.net>
124 * Improved man page and error messages.
125 * Fixed bug that prevented shadow authentication from working.
126 * vlock can now only be killed by root. This will probably be
127 fixed in future releases.
129 2007-08-05 Frank Benkstein <frank-vlock@benkstein.net>
133 * Code cleanups (comments, style).
134 * Fixed two merely theoretical security problems.
136 2007-08-02 Frank Benkstein <frank-vlock@benkstein.net>
140 * Many improvements to security.
141 * General cleanup to source tree.
144 * LICENSE file updated, license terms unchanged.
146 * Added a SECURITY blurb.
147 * -n,--new option now implies -a,--all instead of requiring it.
149 2007-07-30 Frank Benkstein <frank-vlock@benkstein.net>
153 * Added manpages for all tools.
154 * Enter key must be pressed before authentication is started.
155 * When run as root, vlock now locks as the user given by the
156 $USER environment variable.
157 * Add -n,--new option to run vlock on a new virtual console.
159 2007-07-28 Frank Benkstein <frank-vlock@benkstein.net>
163 * Shadow authentication added.
165 2007-07-25 Frank Benkstein <frank-vlock@benkstein.net>
169 * Complete rewrite. vlock is now made of several tools called
172 2007-05-23 Frank Benkstein <frank-vlock@benkstein.net>
176 * No changes since rc2.
178 2007-05-10 Frank Benkstein <frank-vlock@benkstein.net>
182 * Make install rule made more friendly to packagers.
183 * Updated license declarations: sources now clearly
184 state "GNU General Public License version 2".
186 2007-05-09 Frank Benkstein <frank-vlock@benkstein.net>
190 * Some compile time warnings fixed..
191 * Support for SysRq disabling added.
193 1999-01-13 Michael Johnson <johnsonm@redhat.com>
197 1998-03-12 Michael Johnson <johnsonm@redhat.com>