From bffbb6cb52d2f6f1602acbbbd0800d4392c4ef912f487abc55707bba7a71bd04 Mon Sep 17 00:00:00 2001 From: Torsten Gruner Date: Sun, 2 May 2021 19:10:09 +0000 Subject: [PATCH] Accepting request 889828 from home:mnhauke - Update to version 2.6.7 * pam_oath: Support variables in usersfile string parameter. These changes introduce the ${USER} and ${HOME} placeholder values for the usersfile string in the pam_oath configuration file. The placeholder values allow the user credentials file to be stored in a file path that is relative to the user, and mimics similar behavior found in google-authenticator-libpam. The motivation for these changes is to allow for non-privileged processes to use pam_oath (e.g., for 2FA with xscreensaver). Non-privileged and non-suid programs are unable to use pam_oath. These changes are a proposed alternative to a suid helper binary as well. * doc: Fix project URL in man pages. * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config. * build: Modernize autotools usage. Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE to make rebuilding from source more safe with future automake versions. * Updated gnulib files. OBS-URL: https://build.opensuse.org/request/show/889828 OBS-URL: https://build.opensuse.org/package/show/security/oath-toolkit?expand=0&rev=29 --- oath-toolkit-2.6.6.tar.gz | 3 --- oath-toolkit-2.6.6.tar.gz.sig | Bin 119 -> 0 bytes oath-toolkit-2.6.7.tar.gz | 3 +++ oath-toolkit-2.6.7.tar.gz.sig | Bin 0 -> 119 bytes oath-toolkit.changes | 23 +++++++++++++++++++++++ oath-toolkit.spec | 2 +- 6 files changed, 27 insertions(+), 4 deletions(-) delete mode 100644 oath-toolkit-2.6.6.tar.gz delete mode 100644 oath-toolkit-2.6.6.tar.gz.sig create mode 100644 oath-toolkit-2.6.7.tar.gz create mode 100644 oath-toolkit-2.6.7.tar.gz.sig diff --git a/oath-toolkit-2.6.6.tar.gz b/oath-toolkit-2.6.6.tar.gz deleted file mode 100644 index 623660c..0000000 --- a/oath-toolkit-2.6.6.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:fd68b315c71ba1db47bcc6e67f598568db4131afc33abd23ed682170e3cb946c -size 5571980 diff --git a/oath-toolkit-2.6.6.tar.gz.sig b/oath-toolkit-2.6.6.tar.gz.sig deleted file mode 100644 index c3128a6f1205396f859ecf2d1bf867b49b474bbd07665fd21e2c6c278046237a..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 119 zcmeAuWnmEGV2~A4WLbP>PCNHpL#|y{&g%yjX>PCNHpL#|y{&g%yjX> + +- Update to version 2.6.7 + * pam_oath: Support variables in usersfile string parameter. + These changes introduce the ${USER} and ${HOME} placeholder + values for the usersfile string in the pam_oath configuration + file. The placeholder values allow the user credentials file + to be stored in a file path that is relative to the user, and + mimics similar behavior found in google-authenticator-libpam. + The motivation for these changes is to allow for + non-privileged processes to use pam_oath (e.g., for 2FA with + xscreensaver). Non-privileged and non-suid programs are + unable to use pam_oath. These changes are a proposed + alternative to a suid helper binary as well. + * doc: Fix project URL in man pages. + * build: Drop use of libxml's AM_PATH_XML2 in favor of pkg-config. + * build: Modernize autotools usage. + Most importantly, no longer use -Werror with AM_INIT_AUTOMAKE + to make rebuilding from source more safe with future automake + versions. + * Updated gnulib files. + ------------------------------------------------------------------- Wed Jan 20 21:40:44 UTC 2021 - Martin Hauke diff --git a/oath-toolkit.spec b/oath-toolkit.spec index d92e579..e7ab16e 100644 --- a/oath-toolkit.spec +++ b/oath-toolkit.spec @@ -17,7 +17,7 @@ Name: oath-toolkit -Version: 2.6.6 +Version: 2.6.7 Release: 0 Summary: Toolkit for one-time password authentication systems License: GPL-3.0-or-later AND LGPL-2.1-or-later