3
I Use This!
Very Low Activity

Commits : Listings

Analyzed about 18 hours ago. based on code collected about 22 hours ago.
Apr 24, 2023 — Apr 24, 2024
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
wordset_4k: Move 2 previously added replacement words out of 4k More... about 3 years ago
wordset_4k: Add extra words to the end More... about 3 years ago
wordset_4k: Move many inappropriate words to end of list More... about 3 years ago
wordset_4k: Move 5 words out of 4k into the multiple spellings list More... about 3 years ago
passwdqc 1.4.1 More... about 3 years ago
Drop the CVS Id tags More... over 3 years ago
Merge changes needed for building with Visual Studio on Windows More... over 3 years ago
passwdqc_filter_lookup(): Hash computation self-test, overwrite memory More... over 3 years ago
Add support for external wordlist, denylist, and binary filter More... over 3 years ago
Set default for "max" to 72 (was 40) More... over 3 years ago
Document "similar" in pwqcheck print_help() and man page More... over 3 years ago
passwdqc 1.4.0 More... over 4 years ago
Document the ability to build pam_passwdqc with i18n and audit support More... over 4 years ago
Add copyright statements for the recent contributions More... over 4 years ago
passwdqc.conf.5: update the document date More... over 4 years ago
passwdqc_i18n.h: add #include guard More... over 4 years ago
Suppress two new "unused parameter" warnings when building without libaudit More... over 4 years ago
pam_passwdqc: log audit events if user tried to change their password More... over 4 years ago
pam_passwdqc: implement i18n support More... over 4 years ago
passwdqc 1.3.2: - Define _DEFAULT_SOURCE for our use of crypt(3) on newer glibc. The problem was identified and this change tested by Dmitry V. Levin. - Clarified in the man pages that /etc/passwdqc.conf is not read unless this suggested file location is specified with the config= option. - Clarified the OpenBSD configuration example. - Escape the minus sign in the OpenBSD configuration example to make the manpage linter happy, patch by Jackson Doak via Unit 193: https://www.openwall.com/lists/passwdqc-users/2019/04/16/1 More... over 4 years ago
Clarified that /etc/passwdqc.conf is "not read unless this suggested file location is specified with the config=/etc/passwdqc.conf option". More... over 4 years ago
Define _DEFAULT_SOURCE for our use of crypt(3) on newer glibc. The problem was identified and this change tested by Dmitry V. Levin. More... over 4 years ago
Clarified the OpenBSD configuration example More... over 4 years ago
Drop the stale reference to popa3d, as the concat() code in here is newer More... over 4 years ago
https URLs More... over 4 years ago
Escape the minus sign in the OpenBSD configuration example to make the manpage linter happy, patch by Jackson Doak via Unit 193: https://www.openwall.com/lists/passwdqc-users/2019/04/16/1 More... over 4 years ago
Unexport _passwdqc_memzero in libpasswdqc More... almost 8 years ago
1.3.1: - With "non-unix", initialize the pw_dir field in fake_pw now that (since passwdqc 1.1.3 in 2009) passwdqc_check.c uses that field. Bug reported by Jim Paris via Debian: https://bugs.debian.org/831356 - Use size_t for variables holding strlen() return values. - Cap "max" at 10000 (in case a config set it higher; the default remains 40). - Check against the shortest allowed password length prior to checking against the old password (this affects reporting when the old password is empty). - For zeroization of sensitive data, use a wrapper around memset() called via a function pointer to reduce the likelihood of a compiler optimizing those calls out and to allow for overriding of this function with an OS-specific "secure" memory zeroization function. - In pwqgen, set stdout to non-buffered, and zeroize and free our own buffer holding the generated password. More... almost 8 years ago
Updated copyright years More... almost 8 years ago
Set stdout to non-buffered, and zeroize and free our own buffer holding the generated password prior to exiting. (The freeing of memory is just to keep memory leak detectors happy.) More... almost 8 years ago