pool/pam
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 643661 from home:jmoellers:branches:Linux-PAM

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/643661
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=184
This commit is contained in:
Josef Möllers 2018-10-22 12:46:59 +00:00 committed by Git OBS Bridge
parent a5f3c5b6d5
commit 93d4e897d1
8 changed files with 37 additions and 91 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Linux-PAM-1.3.0-docs.tar.bz2
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:8610b48703f036f6755c1d2bd8bcdeaddd9d99a1631f2d7668ec69b444d972a0
size 492805

3
Linux-PAM-1.3.0.tar.bz2
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:241aed1ef522f66ed672719ecf2205ec513fd0075ed80cda8e086a5b1a01d1bb
size 1302820

3
Linux-PAM-1.3.1-docs.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3bb80257cc61f23956d8df43ea31cadeeb3b4cdb69d46006a70b377c139e37ca
size 459552

3
Linux-PAM-1.3.1.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:eff47a4ecd833fbf18de9686632a70ee8d0794b79aecb217ebd0ce11db4cd0db
size 912332

71
pam-fix-config-order-in-manpage.patch
View File

@ -1,71 +0,0 @@
Index: Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8.xml
===================================================================
--- Linux-PAM-1.3.0.orig/modules/pam_umask/pam_umask.8.xml
+++ Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8.xml
@@ -48,22 +48,22 @@
<itemizedlist>
<listitem>
<para>
- umask= argument
+ umask= entry in the user's GECOS field
</para>
</listitem>
<listitem>
<para>
- umask= entry in the user's GECOS field
+ umask= argument
</para>
</listitem>
<listitem>
<para>
- UMASK= entry from /etc/default/login
+ UMASK= entry from /etc/login.defs
</para>
</listitem>
<listitem>
<para>
- UMASK entry from /etc/login.defs
+ UMASK= entry from /etc/default/login
</para>
</listitem>
</itemizedlist>
Index: Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8
===================================================================
--- Linux-PAM-1.3.0.orig/modules/pam_umask/pam_umask.8
+++ Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8
@@ -46,7 +46,7 @@ The PAM module tries to get the umask va
.sp -1
.IP \(bu 2.3
.\}
-umask= argument
+umask= entry in the user\*(Aqs GECOS field
.RE
.sp
.RS 4
@@ -57,7 +57,7 @@ umask= argument
.sp -1
.IP \(bu 2.3
.\}
-umask= entry in the user\*(Aqs GECOS field
+umask= argument
.RE
.sp
.RS 4
@@ -68,7 +68,7 @@ umask= entry in the user\*(Aqs GECOS fie
.sp -1
.IP \(bu 2.3
.\}
-UMASK= entry from /etc/default/login
+UMASK= entry from /etc/login\&.defs
.RE
.sp
.RS 4
@@ -79,7 +79,7 @@ UMASK= entry from /etc/default/login
.sp -1
.IP \(bu 2.3
.\}
-UMASK entry from /etc/login\&.defs
+UMASK= entry from /etc/default/login
.RE
.PP
The GECOS field is split on comma \*(Aq,\*(Aq characters\&. The module also in addition to the umask= entry recognizes pri= entry, which sets the nice priority value for the session, and ulimit= entry, which sets the maximum size of files the processes in the session can create\&.

14
pam-limit-nproc.patch
View File

@ -1,15 +1,11 @@
Index: Linux-PAM-1.3.0/modules/pam_limits/limits.conf
Index: Linux-PAM-1.3.1/modules/pam_limits/limits.conf
===================================================================
--- Linux-PAM-1.3.0.orig/modules/pam_limits/limits.conf
+++ Linux-PAM-1.3.0/modules/pam_limits/limits.conf
@@ -47,4 +47,10 @@
--- Linux-PAM-1.3.1.orig/modules/pam_limits/limits.conf
+++ Linux-PAM-1.3.1/modules/pam_limits/limits.conf
@@ -47,4 +47,6 @@
#ftp hard nproc 0
#@student - maxlogins 4
+# harden against fork-bombs
+* hard nproc 16384
+* soft nproc 4096
+# root hard nproc 3000
+# root soft nproc 1850
+# No limits for nproc, use systemd configuration instead
+
# End of file

22
pam.changes
View File

@ -1,3 +1,25 @@
-------------------------------------------------------------------
Mon Oct 22 07:42:19 UTC 2018 - josef.moellers@suse.com
- Upgrade to 1.3.1
* pam_motd: add support for a motd.d directory
* pam_umask: Fix documentation to align with order of loading umask
* pam_get_user.3: Fix missing word in documentation
* pam_tally2 --reset: avoid creating a missing tallylog file
* pam_mkhomedir: Allow creating parent of homedir under /
* access.conf.5: Add note about spaces around ':'
* pam.8: Workaround formatting problem
* pam_unix: Check return value of malloc used for setcred data
* pam_cracklib: Drop unused prompt macros
* pam_tty_audit: Support matching users by uid range
* pam_access: support parsing files in /etc/security/access.d/*.conf
* pam_localuser: Correct documentation
* pam_issue: Fix no prompting in parse escape codes mode
* Unification and cleanup of syslog log levels
Also: removed nproc limit, referred to systemd instead.
Patch5 (pam-fix-config-order-in-manpage.patch) not needed any more.
[bsc#1112508, pam-fix-config-order-in-manpage.patch]
-------------------------------------------------------------------
Fri Aug 24 09:35:18 UTC 2018 - psimons@suse.com

9
pam.spec
View File

@ -27,6 +27,7 @@ BuildRequires: cracklib-devel
BuildRequires: flex
%if 0%{?suse_version} > 1320
BuildRequires: libdb-4_8-devel
BuildRequires: xz
BuildRequires: pkgconfig(libnsl)
BuildRequires: pkgconfig(libtirpc)
%endif
@ -37,7 +38,7 @@ BuildRequires: libselinux-devel
%define libpam_misc_so_version 0.82.1
%define libpamc_so_version 0.82.1
#
Version: 1.3.0
Version: 1.3.1
Release: 0
Summary: A Security Tool that Provides Authentication for Applications
License: GPL-2.0-or-later OR BSD-3-Clause
@ -49,8 +50,8 @@ Requires(pre): user(root)
%endif
#DL-URL: https://fedorahosted.org/releases/l/i/linux-pam/
Source: Linux-PAM-%{version}.tar.bz2
Source1: Linux-PAM-%{version}-docs.tar.bz2
Source: Linux-PAM-%{version}.tar.xz
Source1: Linux-PAM-%{version}-docs.tar.xz
Source2: securetty
Source3: other.pamd
Source4: common-auth.pamd
@ -65,7 +66,6 @@ Patch0: fix-man-links.dif
Patch2: pam-limit-nproc.patch
Patch3: encryption_method_nis.diff
Patch4: pam-hostnames-in-access_conf.patch
Patch5: pam-fix-config-order-in-manpage.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: libdb-4_8-devel
# Remove with next version update:
@ -118,7 +118,6 @@ building both PAM-aware applications and modules for use with PAM.
%patch2 -p1
%patch3 -p0
%patch4 -p0
%patch5 -p1
%build
autoreconf -fiv