Get rid of 2 left-overs from commit ccda6f21 and in addition remove a misleading comment.
Signed-off-by: Toralf Förster <toralf.foerster@gmx.de>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
When generating passwords using the default phonemes mechanism,
--capitalize isn't reliably supported when ambiguous characters are
removed. Fix this.
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Update the debian/control and debian/copyright files to point at the
pwgen repository on github.
Addresses-Debian-Bug: #454500, #855495, #846517
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
The --remove-chars (or -r) option removes characters from the set of
characters used to generate passwords.
This feature was suggested in Florian Lohoff in the Debian Bug
arguments to remove that would cause the original patch to hang in an
infinite loop. The algorithm used is also more efficient than the
original patch.
Addresses-Debian-Bug: #836334
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
This fixes a bug which casued:
pwgen --no-vowels --no-capitalize
and
pwgen --no-capitalize --no-vowels
to have different results.
Addresses-Debian-Bug: #791908
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
For password lengths of 1 and 2, the generated passwords were all
lower case, or one lower case and one number, respetively. This is
not terribly "secure", although how passwords of lengths less than 3
are hardly secure anyway.
Addresses-Debian-Bug: #666725
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Specifying -s overwrites other flags without this fix
(i.e. -s -y not the same as -y -s)
Addresses-Debian-Bug: #436912
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Also remove the outdated Changelog file, and fix up the makefile
target for source_tar_file so it works properly given the new source
tree layout.
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
This was considered a security vulnerability, so let's nuke it and be
done with it. It was original there to provide backwards
compatibility for old web cgi scripts, but at this point, they deserve
to be broken. :-)
Patch supplied by Adam Borowski <kilobyte@angband.pl>
Addresses: CVE-2013-4440
Addresses-Debian-Bug: #725507
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
This makes "secure" passwords more secure, without breaking backwards
compatibility with older pwgen programs. The exact definition of
"more secure" was never defined in the man pages, so this gives us
some more wiggle room.
Update the pwgen man page to make it clear that the future behavior of
pwgen when stdout is not a tty may change further.
Addresses-Debian-Bug: #427969
Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
The combination of omitting ambiguous characters and secure password
generation did not work correctly.
Addresses-Debian-Bug: #368010
Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
