Attachment 678234 Details for Bug 894191 – [Patch] handle usernames correctly

[patch] [Patch] handle usernames correctly

logwatch-7.3.6-secure-username.patch (text/plain), 1.04 KB, created by Jan Synacek on 2013-01-14 13:39:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Synacek

Created: 2013-01-14 13:39:16 UTC

Size: 1.04 KB

patch

obsolete

>Weaken username regexp restriction. Usernames can include more characters than
>just letters (e.g. _ or [0-9]).
>
>Author: Jan Synacek <jsynacek@redhat.com>
>Reported-By: Robert Scheck
>RH-Bugzilla: #894191
>
>--- logwatch-7.3.6/scripts/services/secure.orig	2013-01-14 14:31:03.000000000 +0100
>+++ logwatch-7.3.6/scripts/services/secure	2013-01-14 14:32:04.020649889 +0100
>@@ -209,7 +209,7 @@
>       ( $ThisLine =~ /userhelper\[\d+\]: running '([^ ]+)' with [^ ]+ context/) or
>       ( $ThisLine =~ /pam_timestamp$.*:session$: updated timestamp file `\/var\/run\/sudo.*'/) or
>       ( $ThisLine =~ /[^ ]*: pam_keyinit(.*:.*): Unable to change GID to [0-9]* temporarily/) or 
>-      ( $ThisLine =~ /password check failed for user $[a-zA-Z]*$/) or
>+      ( $ThisLine =~ /password check failed for user $\S*$/) or
>       ( $ThisLine =~ /PAM pam_set_item: attempt to set conv to NULL/) or
>       ( $ThisLine =~ /PAM pam_get_item: nowhere to place requested item/) or
>       ( $ThisLine =~ /pam_succeed_if$.*:.*$: error retrieving information about user [a-zA-Z]*/ ) or

Actions: View | Diff

Attachments on bug 894191: 678234