| Commit message (Expand) | Author | Age | Files | Lines |
| * | Don't skip file systems just because the parent fs is nodev and nosuid. |  millert | 2020-10-11 | 1 | -8/+13 |
| * | afs, nnpfs, and procfs are no longer supported, |  schwarze | 2020-09-17 | 1 | -3/+3 |
| * | Do not bother scanning file systems that are both nodev and nosuid |  schwarze | 2020-09-14 | 1 | -3/+4 |
| * | Remove user uucp and group news from base. |  jca | 2016-12-27 | 1 | -3/+2 |
| * | When checking ownership and modes of files in /var/mail/, |  schwarze | 2016-10-22 | 1 | -1/+2 |
| * | When reading untrusted user files, don't risk blocking, such that |  schwarze | 2015-07-21 | 1 | -3/+6 |
| * | When diff(1) finds differences, it returns an exit status of 1. |  schwarze | 2015-04-21 | 1 | -2/+6 |
| * | In mount(8) output, do not misparse lines where fs_spec ends with the |  schwarze | 2015-03-27 | 1 | -2/+2 |
| * | If /etc/passwd contains incomplete lines ending before the |  schwarze | 2015-03-27 | 1 | -3/+12 |
| * | AnonCVS is designed to work with a user account that has no password and a |  schwarze | 2014-12-04 | 1 | -2/+3 |
| * | The file /etc/exports is now optional and not installed by default, |  schwarze | 2014-07-14 | 1 | -1/+2 |
| * | Do not redirect STDERR of the main security(8) script to /dev/null, |  schwarze | 2014-06-26 | 1 | -7/+3 |
| * | The Perl close() function, when called on pipe file descriptors, |  schwarze | 2014-06-24 | 1 | -9/+17 |
| * | Do not try to pass potentially non-existent array elements into |  schwarze | 2014-06-24 | 1 | -8/+10 |
| * | tedu ~/.klogin |  dcoppa | 2014-04-29 | 1 | -3/+3 |
| * | check perms on .ssh/id_ed25519; Fritjof Bornebusch |  sthen | 2014-04-21 | 1 | -2/+2 |
| * | check_hosts_equiv -> check_hosts_lpd |  ajacoutot | 2014-04-20 | 1 | -15/+11 |
| * | don't check ftpusers in security(8), from gsoares@, ok afresh1@ schwarze@ |  sthen | 2014-03-23 | 1 | -16/+1 |
| * | Correct the last change to untaint $fmt; it caused the final parameter of |  sthen | 2013-03-21 | 1 | -3/+3 |
| * | Untaint a variable used in an sprintf format string by using a regex and back- |  sthen | 2013-03-19 | 1 | -2/+2 |
| * | create an empty %skip even if SUIDSKIP is not set, newer perl complains. |  sthen | 2013-03-18 | 1 | -2/+4 |
| * | Enclose qw()...) literals in parentheses where required; this was historically |  sthen | 2013-03-18 | 1 | -8/+8 |
| * | To detect changes of system files, use SHA-256 rather than MD5, |  schwarze | 2012-07-08 | 1 | -24/+25 |
| * | Also check permissions of .ssh/id_ecdsa. |  pascal | 2012-05-17 | 1 | -2/+3 |
| * | During mailbox and special file checks, skip all files that can't |  schwarze | 2011-07-20 | 1 | -7/+10 |
| * | In lists of setuid/setgid files and devices, do not pad the last column |  schwarze | 2011-07-20 | 1 | -1/+2 |
| * | Restore changelist(5) wildcard support that we inadvertently killed |  schwarze | 2011-06-20 | 1 | -10/+27 |
| * | Fix two bugs where race conditions might cause stat(2) to fail, |  schwarze | 2011-05-25 | 1 | -7/+9 |
| * | Do not complain about an /etc/group line "+\n" as "wrong number of fields", |  schwarze | 2011-05-10 | 1 | -2/+9 |
| * | When a device or setuid file is owned by a nonexistent user or group, |  schwarze | 2011-04-23 | 1 | -8/+8 |
| * | Very nice bugfix from Andrew Fresh, who writes: |  schwarze | 2011-04-23 | 1 | -11/+10 |
| * | remove a bogus blank line; from Andrew Fresh |  schwarze | 2011-04-17 | 1 | -2/+2 |
| * | Keep the exact format of the message: |  schwarze | 2011-04-17 | 1 | -4/+5 |
| * | Reviewing my version of the code, Andrew Fresh found an elegant way to |  schwarze | 2011-04-10 | 1 | -4/+9 |
| * | implement one last check that Andrew overlooked |  schwarze | 2011-04-09 | 1 | -8/+26 |
| * | implementation of the remaining checks; |  schwarze | 2011-04-09 | 1 | -22/+432 |
| * | style cleanup: |  schwarze | 2011-03-30 | 1 | -14/+14 |
| * | umask and path checks; |  schwarze | 2011-03-26 | 1 | -1/+126 |
| * | home directory checks; |  schwarze | 2011-03-25 | 1 | -1/+89 |
| * | fix "german" typo; from <markus dot lude at gmx dot de> |  schwarze | 2011-03-24 | 1 | -2/+2 |
| * | Work in progress to replace /etc/security, not yet linked to the build. |  schwarze | 2011-03-23 | 2 | -0/+262 |