From 93d4e897d1268b82df012522f0aeae614c06aa857a54760e19870b89388ebda0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Josef=20M=C3=B6llers?= Date: Mon, 22 Oct 2018 12:46:59 +0000 Subject: [PATCH] Accepting request 643661 from home:jmoellers:branches:Linux-PAM OBS-URL: https://build.opensuse.org/request/show/643661 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=184 --- Linux-PAM-1.3.0-docs.tar.bz2 | 3 -- Linux-PAM-1.3.0.tar.bz2 | 3 -- Linux-PAM-1.3.1-docs.tar.xz | 3 ++ Linux-PAM-1.3.1.tar.xz | 3 ++ pam-fix-config-order-in-manpage.patch | 71 --------------------------- pam-limit-nproc.patch | 14 ++---- pam.changes | 22 +++++++++ pam.spec | 9 ++-- 8 files changed, 37 insertions(+), 91 deletions(-) delete mode 100644 Linux-PAM-1.3.0-docs.tar.bz2 delete mode 100644 Linux-PAM-1.3.0.tar.bz2 create mode 100644 Linux-PAM-1.3.1-docs.tar.xz create mode 100644 Linux-PAM-1.3.1.tar.xz delete mode 100644 pam-fix-config-order-in-manpage.patch diff --git a/Linux-PAM-1.3.0-docs.tar.bz2 b/Linux-PAM-1.3.0-docs.tar.bz2 deleted file mode 100644 index 7baca1f..0000000 --- a/Linux-PAM-1.3.0-docs.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8610b48703f036f6755c1d2bd8bcdeaddd9d99a1631f2d7668ec69b444d972a0 -size 492805 diff --git a/Linux-PAM-1.3.0.tar.bz2 b/Linux-PAM-1.3.0.tar.bz2 deleted file mode 100644 index 8ad625a..0000000 --- a/Linux-PAM-1.3.0.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:241aed1ef522f66ed672719ecf2205ec513fd0075ed80cda8e086a5b1a01d1bb -size 1302820 diff --git a/Linux-PAM-1.3.1-docs.tar.xz b/Linux-PAM-1.3.1-docs.tar.xz new file mode 100644 index 0000000..6317d16 --- /dev/null +++ b/Linux-PAM-1.3.1-docs.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3bb80257cc61f23956d8df43ea31cadeeb3b4cdb69d46006a70b377c139e37ca +size 459552 diff --git a/Linux-PAM-1.3.1.tar.xz b/Linux-PAM-1.3.1.tar.xz new file mode 100644 index 0000000..506f7a9 --- /dev/null +++ b/Linux-PAM-1.3.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:eff47a4ecd833fbf18de9686632a70ee8d0794b79aecb217ebd0ce11db4cd0db +size 912332 diff --git a/pam-fix-config-order-in-manpage.patch b/pam-fix-config-order-in-manpage.patch deleted file mode 100644 index acd4eca..0000000 --- a/pam-fix-config-order-in-manpage.patch +++ /dev/null @@ -1,71 +0,0 @@ -Index: Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8.xml -=================================================================== ---- Linux-PAM-1.3.0.orig/modules/pam_umask/pam_umask.8.xml -+++ Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8.xml -@@ -48,22 +48,22 @@ - - - -- umask= argument -+ umask= entry in the user's GECOS field - - - - -- umask= entry in the user's GECOS field -+ umask= argument - - - - -- UMASK= entry from /etc/default/login -+ UMASK= entry from /etc/login.defs - - - - -- UMASK entry from /etc/login.defs -+ UMASK= entry from /etc/default/login - - - -Index: Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8 -=================================================================== ---- Linux-PAM-1.3.0.orig/modules/pam_umask/pam_umask.8 -+++ Linux-PAM-1.3.0/modules/pam_umask/pam_umask.8 -@@ -46,7 +46,7 @@ The PAM module tries to get the umask va - .sp -1 - .IP \(bu 2.3 - .\} --umask= argument -+umask= entry in the user\*(Aqs GECOS field - .RE - .sp - .RS 4 -@@ -57,7 +57,7 @@ umask= argument - .sp -1 - .IP \(bu 2.3 - .\} --umask= entry in the user\*(Aqs GECOS field -+umask= argument - .RE - .sp - .RS 4 -@@ -68,7 +68,7 @@ umask= entry in the user\*(Aqs GECOS fie - .sp -1 - .IP \(bu 2.3 - .\} --UMASK= entry from /etc/default/login -+UMASK= entry from /etc/login\&.defs - .RE - .sp - .RS 4 -@@ -79,7 +79,7 @@ UMASK= entry from /etc/default/login - .sp -1 - .IP \(bu 2.3 - .\} --UMASK entry from /etc/login\&.defs -+UMASK= entry from /etc/default/login - .RE - .PP - The GECOS field is split on comma \*(Aq,\*(Aq characters\&. The module also in addition to the umask= entry recognizes pri= entry, which sets the nice priority value for the session, and ulimit= entry, which sets the maximum size of files the processes in the session can create\&. diff --git a/pam-limit-nproc.patch b/pam-limit-nproc.patch index 2553e5c..db06758 100644 --- a/pam-limit-nproc.patch +++ b/pam-limit-nproc.patch @@ -1,15 +1,11 @@ -Index: Linux-PAM-1.3.0/modules/pam_limits/limits.conf +Index: Linux-PAM-1.3.1/modules/pam_limits/limits.conf =================================================================== ---- Linux-PAM-1.3.0.orig/modules/pam_limits/limits.conf -+++ Linux-PAM-1.3.0/modules/pam_limits/limits.conf -@@ -47,4 +47,10 @@ +--- Linux-PAM-1.3.1.orig/modules/pam_limits/limits.conf ++++ Linux-PAM-1.3.1/modules/pam_limits/limits.conf +@@ -47,4 +47,6 @@ #ftp hard nproc 0 #@student - maxlogins 4 -+# harden against fork-bombs -+* hard nproc 16384 -+* soft nproc 4096 -+# root hard nproc 3000 -+# root soft nproc 1850 ++# No limits for nproc, use systemd configuration instead + # End of file diff --git a/pam.changes b/pam.changes index 2c59cb3..eb7f846 100644 --- a/pam.changes +++ b/pam.changes @@ -1,3 +1,25 @@ +------------------------------------------------------------------- +Mon Oct 22 07:42:19 UTC 2018 - josef.moellers@suse.com + +- Upgrade to 1.3.1 + * pam_motd: add support for a motd.d directory + * pam_umask: Fix documentation to align with order of loading umask + * pam_get_user.3: Fix missing word in documentation + * pam_tally2 --reset: avoid creating a missing tallylog file + * pam_mkhomedir: Allow creating parent of homedir under / + * access.conf.5: Add note about spaces around ':' + * pam.8: Workaround formatting problem + * pam_unix: Check return value of malloc used for setcred data + * pam_cracklib: Drop unused prompt macros + * pam_tty_audit: Support matching users by uid range + * pam_access: support parsing files in /etc/security/access.d/*.conf + * pam_localuser: Correct documentation + * pam_issue: Fix no prompting in parse escape codes mode + * Unification and cleanup of syslog log levels + Also: removed nproc limit, referred to systemd instead. + Patch5 (pam-fix-config-order-in-manpage.patch) not needed any more. + [bsc#1112508, pam-fix-config-order-in-manpage.patch] + ------------------------------------------------------------------- Fri Aug 24 09:35:18 UTC 2018 - psimons@suse.com diff --git a/pam.spec b/pam.spec index eba743f..a0098c4 100644 --- a/pam.spec +++ b/pam.spec @@ -27,6 +27,7 @@ BuildRequires: cracklib-devel BuildRequires: flex %if 0%{?suse_version} > 1320 BuildRequires: libdb-4_8-devel +BuildRequires: xz BuildRequires: pkgconfig(libnsl) BuildRequires: pkgconfig(libtirpc) %endif @@ -37,7 +38,7 @@ BuildRequires: libselinux-devel %define libpam_misc_so_version 0.82.1 %define libpamc_so_version 0.82.1 # -Version: 1.3.0 +Version: 1.3.1 Release: 0 Summary: A Security Tool that Provides Authentication for Applications License: GPL-2.0-or-later OR BSD-3-Clause @@ -49,8 +50,8 @@ Requires(pre): user(root) %endif #DL-URL: https://fedorahosted.org/releases/l/i/linux-pam/ -Source: Linux-PAM-%{version}.tar.bz2 -Source1: Linux-PAM-%{version}-docs.tar.bz2 +Source: Linux-PAM-%{version}.tar.xz +Source1: Linux-PAM-%{version}-docs.tar.xz Source2: securetty Source3: other.pamd Source4: common-auth.pamd @@ -65,7 +66,6 @@ Patch0: fix-man-links.dif Patch2: pam-limit-nproc.patch Patch3: encryption_method_nis.diff Patch4: pam-hostnames-in-access_conf.patch -Patch5: pam-fix-config-order-in-manpage.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: libdb-4_8-devel # Remove with next version update: @@ -118,7 +118,6 @@ building both PAM-aware applications and modules for use with PAM. %patch2 -p1 %patch3 -p0 %patch4 -p0 -%patch5 -p1 %build autoreconf -fiv