pool/pam
SHA256
3
0
Fork 2
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Add post 1.6.0 release fixes for pam_env and pam_unix:

Browse Source 
- pam_unix-fix-password-aging-disabled.patch

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=287
This commit is contained in:
Thorsten Kukuk 2024-01-19 09:49:30 +00:00 committed by Git OBS Bridge
parent bafc211753
commit 538371760f
3 changed files with 32 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pam.changes
View File

@ -1,10 +1,11 @@
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Jan 19 09:11:30 UTC 2024 - Thorsten Kukuk <kukuk@suse.com> Fri Jan 19 09:11:30 UTC 2024 - Thorsten Kukuk <kukuk@suse.com>
- Add post 1.6.0 release fixes for pam_env: - Add post 1.6.0 release fixes for pam_env and pam_unix:
- pam_env-fix-enable-vendordir-fallback.patch - pam_env-fix-enable-vendordir-fallback.patch
- pam_env-fix_vendordir.patch - pam_env-fix_vendordir.patch
- pam_env-remove-escaped-newlines.patch - pam_env-remove-escaped-newlines.patch
- pam_unix-fix-password-aging-disabled.patch
- Update to version 1.6.0 - Update to version 1.6.0
- Added support of configuration files with arbitrarily long lines. - Added support of configuration files with arbitrarily long lines.
- build: fixed build outside of the source tree. - build: fixed build outside of the source tree.

3
pam.spec
View File

@ -102,6 +102,8 @@ Patch2: pam_env-fix_vendordir.patch
Patch3: pam_env-fix-enable-vendordir-fallback.patch Patch3: pam_env-fix-enable-vendordir-fallback.patch
# https://github.com/linux-pam/linux-pam/pull/741 # https://github.com/linux-pam/linux-pam/pull/741
Patch4: pam_env-remove-escaped-newlines.patch Patch4: pam_env-remove-escaped-newlines.patch
# https://github.com/linux-pam/linux-pam/pull/744
Patch5: pam_unix-fix-password-aging-disabled.patch
BuildRequires: audit-devel BuildRequires: audit-devel
BuildRequires: bison BuildRequires: bison
BuildRequires: flex BuildRequires: flex
@ -217,6 +219,7 @@ cp -a %{SOURCE12} .
%patch2 -p1 %patch2 -p1
%patch3 -p1 %patch3 -p1
%patch4 -p1 %patch4 -p1
%patch5 -p1
%build %build
bash ./pam-login_defs-check.sh bash ./pam-login_defs-check.sh

27
pam_unix-fix-password-aging-disabled.patch Normal file
View File

@ -0,0 +1,27 @@
From 9d40f55216b2de60ccb9b617c79b9280b9f29ead Mon Sep 17 00:00:00 2001
From: Tobias Stoeckmann <tobias@stoeckmann.org>
Date: Fri, 19 Jan 2024 10:09:00 +0100
Subject: [PATCH] pam_unix: do not warn if password aging disabled
Later checks will print a warning if daysleft is 0. If password
aging is disabled, leave daysleft at -1.
Fixes 9ebc14085a3ba253598cfaa0d3f0d76ea5ee8ccb.
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
---
modules/pam_unix/passverify.c | 1 -
1 file changed, 1 deletion(-)
diff --git a/modules/pam_unix/passverify.c b/modules/pam_unix/passverify.c
index 5c4f862e7..1bc98fa25 100644
--- a/modules/pam_unix/passverify.c
+++ b/modules/pam_unix/passverify.c
@@ -314,7 +314,6 @@ PAMH_ARG_DECL(int check_shadow_expiry,
}
if (spent->sp_lstchg < 0) {
D(("password aging disabled"));
- *daysleft = 0;
return PAM_SUCCESS;
}
if (curdays < spent->sp_lstchg) {