安全协议与标准aLinux安全.pptVIP

* * * Pluggable authentication modules, or PAM, is a mechanism to integrate multiple low-level authentication schemes into a high-level application programming interface (API). It allows programs that rely on authentication to be written independently of the underlying authentication scheme. * !!! The XSSO standard differs from both the original RFC, and from the Linux and Sun APIs — from most other implementations. Also, they are not implemented similarly. For these and other reasons, OpenBSD has chosen to adopt BSD Authentication, which is an alternative authentication framework, originally from BSD/OS. * * gcc -c say.car -r say.a say.ogcc test.c say.a -o testldd test gcc -fPIC -shared say.c -o say.sogcc test.c say.so -o testldd test * * * * * http://www.thkukuk.de/pam/pam_login/ChangeLog 2003-10-07 Thorsten Kukuk kukuk@suse.de * release version 3.14 * configure.in: Add --enable-selinux options, check for selinux library. 2003-10-03 Thorsten Kukuk kukuk@suse.de * src/login.c: Remove duplicate utmp.h include, add SELinux support (based on patch from Chris PeBenito pebenito@) 2003-07-15 Thorsten Kukuk kukuk@suse.de * release version 3.12 * etc/Makefile.am: Install pam.d/login and login.defs * etc/login.pamd: Moved from here ... * etc/pam.d/login: ... to here. * etc/login.defs: Remove all variables not used by login. * src/getdef.c: Remove all variables not used by login. 2003-07-10 Thorsten Kukuk kukuk@suse.de * configure.in: Add AC_SYS_LARGEFILE 2003-05-28 Thorsten Kukuk kukuk@suse.de * src/login.c (main): pam_setcred() should be called before pam_open_session(). 2003-05-12 Thorsten Kukuk kukuk@suse.de * release version 3.11 * src/login.c: Dont mark functions as inline, gcc 3.3 has big problems with this. (PAM_FAIL_CHECK): Add sleep(FAIL_DELAY), so that user has a chance to read the error message. 2002-12-12 Thorsten Kukuk kukuk@suse.de * release version 3.10 * src/login.c (main): Only child should own