Replace use of the old BSD st_*timespec members in struct stat with
the POSIX-standard st_*tim members.

ok millert@

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

unsigned char casts for ctype
ok krw

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

Call endusershell() at the end of ok_shell(), making a copy of the
(possibly) expanded shell as needed. OK deraadt@

Use mtimespec instead of mtime when comparing the timestamp of the edited
file. OK miod@

remove some bogus *p tests from charles longeau
ok deraadt millert

use size_t where needed; ok deraadt@

use asprintf

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

Deal with files w/o a trailing newline before EOF. Found by mpech@

More paranoia, make sure temp file owner matches real uid.

More paranoia when opening temp file; don't follow symlinks and
require that the link count be one. Prompted by a report from Marc
Bevand. deraadt@ OK

When I got removed the use of atexit() I missed the fact that edit()
calls pw_error() which in turn calls exit(). Now edit() returns
its status so the temp file gets cleaned up nicely if the user makes
no changes or if an error occurred. Problem noticed by deraadt@

cleanup; mpech & millert ok

first pass at a -Wall cleanup

Do not permit non-printable characters in the passwd file; deraadt@ ok

Change prompt string from "Location:" to "Office Location:", to disambiguate
from what is expected, and to be consistent with finger(1); from FreeBSD.

Fix temp file unlinking. We use atexit() since the libutil passwd
routines do their own exit.

Check for size change as well as change in time. Scripted changes
usually finish in less than a second. ('vipw' already does this.)

uid_t and gid_t, and use %u

unlink tmpfile; noted by chris@dqc.org

permit any gecos field to be empty

Y2K fixes from Andreas.Gunnarsson@emw.ericsson.se; culled from various places

(foo *)NULL -> NULL

for errors, tell which line #

limit to around 1024 chars post expansion

constrain & expansion to LINE_MAX for safety

kill leaks; help from das33@cornell.edu

typo

watch for slimy link races, improvement by das33@cornell.edu & i

mem leak

slight clarification

rcsid

libutil

branches: 1.1.1;
Initial revision

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

unsigned char casts for ctype
ok krw

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

Call endusershell() at the end of ok_shell(), making a copy of the
(possibly) expanded shell as needed. OK deraadt@

Use mtimespec instead of mtime when comparing the timestamp of the edited
file. OK miod@

remove some bogus *p tests from charles longeau
ok deraadt millert

use size_t where needed; ok deraadt@

use asprintf

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

Deal with files w/o a trailing newline before EOF. Found by mpech@

More paranoia, make sure temp file owner matches real uid.

More paranoia when opening temp file; don't follow symlinks and
require that the link count be one. Prompted by a report from Marc
Bevand. deraadt@ OK

When I got removed the use of atexit() I missed the fact that edit()
calls pw_error() which in turn calls exit(). Now edit() returns
its status so the temp file gets cleaned up nicely if the user makes
no changes or if an error occurred. Problem noticed by deraadt@

cleanup; mpech & millert ok

first pass at a -Wall cleanup

Do not permit non-printable characters in the passwd file; deraadt@ ok

Change prompt string from "Location:" to "Office Location:", to disambiguate
from what is expected, and to be consistent with finger(1); from FreeBSD.

Fix temp file unlinking. We use atexit() since the libutil passwd
routines do their own exit.

Check for size change as well as change in time. Scripted changes
usually finish in less than a second. ('vipw' already does this.)

uid_t and gid_t, and use %u

unlink tmpfile; noted by chris@dqc.org

permit any gecos field to be empty

Y2K fixes from Andreas.Gunnarsson@emw.ericsson.se; culled from various places

(foo *)NULL -> NULL

for errors, tell which line #

limit to around 1024 chars post expansion

constrain & expansion to LINE_MAX for safety

kill leaks; help from das33@cornell.edu

typo

watch for slimy link races, improvement by das33@cornell.edu & i

mem leak

slight clarification

rcsid

libutil

branches: 1.1.1;
Initial revision