From 8ba42a9e885fe200a50967d902e894d33e1fc000791645983226f2647a254a79 Mon Sep 17 00:00:00 2001 From: Thorsten Kukuk Date: Fri, 18 Jun 2010 10:45:27 +0000 Subject: [PATCH] - Last part of fix for [bnc#533249]: Don't run account part of PAM stack for su as root. Requires pam > 1.1.1. OBS-URL: https://build.opensuse.org/package/show/Base:System/coreutils?expand=0&rev=10 --- coreutils.changes | 6 ++++++ coreutils.spec | 1 + su.pamd | 1 + 3 files changed, 8 insertions(+) diff --git a/coreutils.changes b/coreutils.changes index 59c33d3..26139e2 100644 --- a/coreutils.changes +++ b/coreutils.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Fri Jun 18 11:57:47 CEST 2010 - kukuk@suse.de + +- Last part of fix for [bnc#533249]: Don't run account part of + PAM stack for su as root. Requires pam > 1.1.1. + ------------------------------------------------------------------- Fri May 7 15:44:53 UTC 2010 - pth@novell.com diff --git a/coreutils.spec b/coreutils.spec index 35c3da7..7a646c3 100644 --- a/coreutils.spec +++ b/coreutils.spec @@ -31,6 +31,7 @@ Obsoletes: libselinux <= 1.23.11-3 libselinux-32bit = 9 libselinux-64bit = AutoReqProv: on PreReq: %{install_info_prereq} Requires: %{name}-lang = %version +Requires: pam >= 1.1.1.90 Source: coreutils-%{version}.tar.xz Source1: su.pamd Source2: su.default diff --git a/su.pamd b/su.pamd index b729046..88ddbaf 100644 --- a/su.pamd +++ b/su.pamd @@ -1,6 +1,7 @@ #%PAM-1.0 auth sufficient pam_rootok.so auth include common-auth +account sufficient pam_rootok.so account include common-account password include common-password session include common-session