1 2008-03-26 Frank Benkstein <frank-vlock@benkstein.net>
5 * Fix a script handling bug.
7 2008-03-21 Frank Benkstein <frank-vlock@benkstein.net>
11 * Small plugin documentation update.
13 2008-01-15 Frank Benkstein <frank-vlock@benkstein.net>
17 * Fixed snprintf() corner case in "new" module.
18 * Restore timeout if select() was interrupted by a signal in prompt().
20 2007-12-29 Frank Benkstein <frank-vlock@benkstein.net>
24 * Slightly changed the fix for the previous security issue: directory parts
25 are now silently stripped from erroneous names instead of reported as errors.
26 * Fixed a file descriptor leak in script handling.
27 * Fixed a bug where vlock would run in an infinite loop if not started from
28 a terminal. Now it simply exits.
29 * Added unit tests (using cunit).
31 2007-11-28 Frank Benkstein <frank-vlock@benkstein.net>
35 * A critical security problem (local root exploit) was fixed:
36 Previous versions of vlock (since 2.2 alpha1) contained a serious flaw
37 that allowed any user to execute arbitrary code as root . This was
38 possible because plugin names could contain "../" thus escaping the
39 pre-defined plugin directory. All users of vlock 2.2 development versions
40 are advised to update.
41 * Improved script handling.
42 * Added two more scripts.
44 2007-11-26 Frank Benkstein <frank-vlock@benkstein.net>
48 * Fixed man page installation error.
50 2007-11-17 Frank Benkstein <frank-vlock@benkstein.net>
54 * Updated documentation.
56 2007-11-04 Frank Benkstein <frank-vlock@benkstein.net>
60 * Improved error handling and error messages.
61 * Fixed portability bugs.
62 * Fixed dependency handling bug.
64 2007-10-16 Frank Benkstein <frank-vlock@benkstein.net>
68 * Documentation update.
69 * Improved error handling.
71 2007-10-03 Frank Benkstein <frank-vlock@benkstein.net>
75 * Added ./configure script.
76 * Improved plugin handling.
77 * Improved error handling.
78 * Improved child process handling.
80 2007-09-21 Frank Benkstein <frank-vlock@benkstein.net>
84 * Added libcaca based screen saver module.
85 * Miscellaneous minor fixes.
87 2007-09-19 Frank Benkstein <frank-vlock@benkstein.net>
91 * Medium rewrite was undertaken.
92 * Support for plugins (modules and scripts) was added.
93 * vlock-all, vlock-new, and vlock-nosysrq were converted to modules.
94 * Other sample modules and scripts were added.
95 * vlock now tries to terminale cleanly if killed by SIGTERM and on errors.
97 2007-09-08 Frank Benkstein <frank-vlock@benkstein.net>
101 * Documentation update.
103 2007-08-29 Frank Benkstein <frank-vlock@benkstein.net>
107 * Really tiny cleanups.
109 2007-08-23 Frank Benkstein <frank-vlock@benkstein.net>
113 * Fix compilation on Debian/kFreeBSD.
115 2007-08-16 Frank Benkstein <frank-vlock@benkstein.net>
119 * Locking message now configurable.
120 * Added configuration file support: ~/.vlockrc.
121 * "vlock --new" now works even if stdin is not a terminal.
122 * Improved documentation.
124 2007-08-11 Frank Benkstein <frank-vlock@benkstein.net>
128 * Added FreeBSD support. Build with PAM_LIBS=-lpam, install with
130 * Improved signal handling.
131 * Added timeout support to password prompts.
133 2007-08-09 Frank Benkstein <frank-vlock@benkstein.net>
137 * No changes since vlock 2.0 rc2.
139 2007-08-06 Frank Benkstein <frank-vlock@benkstein.net>
143 * Improved man page and error messages.
144 * Fixed bug that prevented shadow authentication from working.
145 * vlock can now only be killed by root. This will probably be
146 fixed in future releases.
148 2007-08-05 Frank Benkstein <frank-vlock@benkstein.net>
152 * Code cleanups (comments, style).
153 * Fixed two merely theoretical security problems.
155 2007-08-02 Frank Benkstein <frank-vlock@benkstein.net>
159 * Many improvements to security.
160 * General cleanup to source tree.
163 * LICENSE file updated, license terms unchanged.
165 * Added a SECURITY blurb.
166 * -n,--new option now implies -a,--all instead of requiring it.
168 2007-07-30 Frank Benkstein <frank-vlock@benkstein.net>
172 * Added manpages for all tools.
173 * Enter key must be pressed before authentication is started.
174 * When run as root, vlock now locks as the user given by the
175 $USER environment variable.
176 * Add -n,--new option to run vlock on a new virtual console.
178 2007-07-28 Frank Benkstein <frank-vlock@benkstein.net>
182 * Shadow authentication added.
184 2007-07-25 Frank Benkstein <frank-vlock@benkstein.net>
188 * Complete rewrite. vlock is now made of several tools called
191 2007-05-23 Frank Benkstein <frank-vlock@benkstein.net>
195 * No changes since rc2.
197 2007-05-10 Frank Benkstein <frank-vlock@benkstein.net>
201 * Make install rule made more friendly to packagers.
202 * Updated license declarations: sources now clearly
203 state "GNU General Public License version 2".
205 2007-05-09 Frank Benkstein <frank-vlock@benkstein.net>
209 * Some compile time warnings fixed..
210 * Support for SysRq disabling added.
212 1999-01-13 Michael Johnson <johnsonm@redhat.com>
216 1998-03-12 Michael Johnson <johnsonm@redhat.com>