src/lib/libpam/modules/pam_exec/pam_exec.c, branch releng/12.4

Apply tentative fix for clang 11 warning in pam_exec(8):

2021-12-22T10:01:30Z

lib/libpam/modules/pam_exec/pam_exec.c:222:56: error: format specifies type 'char *' but the argument has type 'const void *' [-Werror,-Wformat] if (asprintf(&envstr, "%s=%s", pam_item_env[i].name, item) < 0) ~~ ^~~~ (cherry picked from commit 228005931ca9c800e306e7b7d4aa0803197fea7d)

For full Linux-PAM compatibility, add a trailing NUL character when

2018-09-04T10:51:41Z

passing the authentication token to the external program. Approved by: re (kib) Submitted by: Thomas Munro MFC after: 1 week Differential Revision: D16950

Add support for Linux-PAM's badly named expose_authtok option.

2018-08-14T00:14:17Z

Submitted by: Thomas Munro MFC after: 1 week Differential Revision: D16171

lib: further adoption of SPDX licensing ID tags.

2017-11-26T02:00:33Z

Mainly focus on files that use BSD 2-Clause license, however the tool I was using mis-identified many licenses so this was mostly a manual - error prone - task. The Software Package Data Exchange (SPDX) group provides a specification to make it easier for automated tools to detect and summarize well known opensource licenses. We are gradually adopting the specification, noting that the tags are considered only advisory and do not, in any way, superceed or replace the license texts.

Add options to capture stdout and / or stderr and pass the output on

2017-03-22T13:16:04Z

to the user. There is currently no buffering, so the result may be somewhat unpredictable if the conversation function adds a newline, like openpam_ttyconv() does. Clean up and simplify the environment handling code, which triggered an inexplicable bug on some systems. MFC after: 2 weeks

Revert r314780

2017-03-12T17:41:51Z

libpam: extra bounds checking through reallocarray(3). It appears to be causing brokenness when reporting PAM_* environment variables. This requires more investigation. Reported by: lstewart

libpam: extra bounds checking through reallocarray(3).

2017-03-06T15:45:46Z

Reviewed by: des MFC after: 1 week

Revert r314777: wrong log, the change was to libpam.

2017-03-06T15:42:03Z

libfetch: extra bounds checking through reallocarray(3).

2017-03-06T15:37:34Z

Reviewed by: des MFC after: 1 week

Fix error messages containing the executed command name

2012-04-12T14:02:59Z

Before, we took the first argument to pam_exec(8). With the addition of options in front of the command, this could be wrong. Now, options are parsed before calling _pam_exec() and messages contain the proper command name. While here, fix a warning. Sponsored by: Yakaz (http://www.yakaz.com)