Commit Graph

93 Commits

Author SHA256 Message Date
Josef Möllers
78441ed37b Accepting request 724569 from home:kukuk:branches:Linux-PAM
- encryption_method_nis.diff: obsolete, NIS clients shouldn't
  require DES anymore.
- etc.environment: removed, the sources contain the same

- Update to version 1.3.1+git20190807.e31dd6c:
  * pam_tty_audit: Manual page clarification about password logging
  * pam_get_authtok_verify: Avoid duplicate password verification
  * Mention that ./autogen.sh is needeed to be run if you check out the sources from git
  * pam_unix: Correct MAXPASS define name in the previous two commits.
  * Restrict password length when changing password
  * Trim password at PAM_MAX_RESP_SIZE chars
  * pam_succeed_if: Request user data only when needed
  * pam_tally2: Remove unnecessary fsync()
  * Fixed a grammer mistake
  * Fix documentation for pam_wheel
  * Fix a typo in the documentation
  * pam_lastlog: Improve silent option documentation
  * pam_lastlog: Respect PAM_SILENT flag
  * Fix regressions from the last commits.
  * Replace strndupa with strncpy
  * build: ignore pam_lastlog when logwtmp is not available.
  * build: ignore pam_rhosts if neither ruserok nor ruserok_af is available.
  * pam_motd: Cleanup the code and avoid unnecessary logging
  * pam_lastlog: Limit lastlog file use by LASTLOG_UID_MAX option in login.defs.
  * Move the duplicated search_key function to pam_modutil.
  * pam_unix: Use pam_syslog instead of helper_log_err.
  * pam_unix: Report unusable hashes found by checksalt to syslog.
  * Revert "pam_unix: Add crypt_default method, if supported."
  * pam_unix: Add crypt_default method, if supported.
  * Revert part of the commit 4da9febc

OBS-URL: https://build.opensuse.org/request/show/724569
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=191
2019-08-19 12:43:33 +00:00
Josef Möllers
bf578882d8 Accepting request 700497 from home:sbrabec:branches:util-linux-2.33.1
Depends on https://build.opensuse.org/request/show/700494!
- Add virtual symbols for login.defs compatibility (bsc#1121197).
- Add login.defs safety check pam-login_defs-check.sh
  (bsc#1121197).

OBS-URL: https://build.opensuse.org/request/show/700497
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=189
2019-05-06 07:09:44 +00:00
Josef Möllers
c0c76f0a22 Accepting request 649542 from home:jmoellers:branches:Linux-PAM
OBS-URL: https://build.opensuse.org/request/show/649542
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=186
2018-11-16 17:08:18 +00:00
Josef Möllers
93d4e897d1 Accepting request 643661 from home:jmoellers:branches:Linux-PAM
OBS-URL: https://build.opensuse.org/request/show/643661
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=184
2018-10-22 12:46:59 +00:00
Josef Möllers
a5f3c5b6d5 Accepting request 631383 from home:psimons:branches:Linux-PAM
Add libdb as build-time dependency to enable pam_userdb module.
This module is useful for implementing virtual user support for
vsftpd and possibly other daemons, too. [bsc#929711, fate#322538]

OBS-URL: https://build.opensuse.org/request/show/631383
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=182
2018-08-24 14:33:21 +00:00
Josef Möllers
0aad24ee3c OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=181 2018-08-24 14:29:54 +00:00
Josef Möllers
d323a04890 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=180 2018-08-24 14:25:24 +00:00
Josef Möllers
eacf67827e Accepting request 622479 from home:sbrabec:branches:Linux-PAM
- Install empty directory /etc/security/namespace.d for
  pam_namespace.so iscript.

OBS-URL: https://build.opensuse.org/request/show/622479
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=178
2018-07-13 15:28:53 +00:00
Josef Möllers
74bd51166b Accepting request 603146 from home:jmoellers:branches:Linux-PAM
OBS-URL: https://build.opensuse.org/request/show/603146
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=175
2018-05-02 14:44:06 +00:00
Thorsten Kukuk
bd76b462a6 Accepting request 580113 from home:favogt:licensetag
Use %license (boo#1082318). Please forward to SLE, if possible

OBS-URL: https://build.opensuse.org/request/show/580113
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=173
2018-03-06 12:55:08 +00:00
Thorsten Kukuk
0e07293a0f Accepting request 534911 from home:Andreas_Schwab:Factory
- Prerequire group(shadow), user(root)

OBS-URL: https://build.opensuse.org/request/show/534911
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=171
2017-11-06 15:05:24 +00:00
Thorsten Kukuk
acb196a316 Accepting request 476771 from home:jmoellers:branches:Linux-PAM
OBS-URL: https://build.opensuse.org/request/show/476771
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=169
2017-03-03 19:50:43 +00:00
Thorsten Kukuk
c31c12f192 Accepting request 444873 from home:jmoellers:branches:Linux-PAM
OBS-URL: https://build.opensuse.org/request/show/444873
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=167
2016-12-15 09:44:44 +00:00
Thorsten Kukuk
fe6ab534dc - Add doc directory to filelist.
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=163
2016-07-28 12:29:55 +00:00
Thorsten Kukuk
7bd1cebe62 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=161 2016-05-02 09:28:49 +00:00
Thorsten Kukuk
8722ee21ea - Remove obsolete README.pam_tally [bsc#977973]
- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff

- Add /sbin/unix2_chkpwd (moved from pam-modules)

- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=159
2016-05-02 08:45:43 +00:00
Thorsten Kukuk
dff8159e4f - Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
- Replace IPv4 only functions

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=158
2016-04-01 13:33:36 +00:00
Thorsten Kukuk
bde5d076f9 - Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
- readd PAM_EXTERN for external PAM modules

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=155
2016-03-29 12:25:43 +00:00
Thorsten Kukuk
a118ec1963 - Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=154
2016-03-23 14:37:11 +00:00
Thorsten Kukuk
c640f626d0 - Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=153
2016-03-23 10:21:53 +00:00
Michael Calmer
8bde79bedc Accepting request 318619 from home:endzone:branches:Linux-PAM
Add folder /etc/security/limits.d as mentioned in 'man pam_limits'

OBS-URL: https://build.opensuse.org/request/show/318619
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=151
2015-07-25 17:48:00 +00:00
Thorsten Kukuk
170456c6aa - Update to version 1.2.1
- security update for CVE-2015-3238

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=149
2015-06-26 07:43:40 +00:00
Thorsten Kukuk
b4f483f8bc - Update to version 1.2.0
- obsoletes Linux-PAM-git-20150109.diff

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=147
2015-04-27 15:17:47 +00:00
Thorsten Kukuk
aaa66694cf - Re-add lost patch encryption_method_nis.diff [bnc#906660]
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=144
2015-01-09 14:38:05 +00:00
Thorsten Kukuk
dc953fdb0f - Update to current git:
- Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=143
2015-01-09 14:23:58 +00:00
Tomáš Chvátal
bdcad7ea0f Accepting request 242966 from home:bmwiedemann:branches:Linux-PAM
limit number of processes to 700 by default to harden against fork-bombs

OBS-URL: https://build.opensuse.org/request/show/242966
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=141
2014-12-25 17:01:00 +00:00
Christian Kornacker
9b92f7495c - Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
bug-870433_pam_timestamp-fix-directory-traversal.patch

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=139
2014-04-09 16:56:48 +00:00
Christian Kornacker
00a548aec5 - adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=137
2014-04-01 15:39:24 +00:00
Thorsten Kukuk
52e0c1287c - Add pam_loginuid-log_write_errors.diff: log significant loginuid
write errors
- pam_xauth-sigpipe.diff: avoid potential SIGPIPE when writing to
  xauth process

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=135
2014-01-27 16:10:16 +00:00
Thorsten Kukuk
fbe6371c54 - Update to current git (Linux-PAM-git-20140127.diff), which
obsoletes pam_loginuid-part1.diff, pam_loginuid-part2.diff and
  Linux-PAM-git-20140109.diff.
  - Fix gratuitous use of strdup and x_strdup
  - pam_xauth: log fatal errors preventing xauth process execution
  - pam_loginuid: cleanup loginuid buffer initialization
  - libpam_misc: fix an inconsistency in handling memory allocation errors
  - pam_limits: fix utmp->ut_user handling
  - pam_mkhomedir: check and create home directory for the same user
  - pam_limits: detect and ignore stale utmp entries
- Disable pam_userdb (remove db-devel from build requires)

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=134
2014-01-27 14:48:02 +00:00
Thorsten Kukuk
9e8981cb04 - Add pam_loginuid-part1.diff: Ignore missing /proc/self/loginuid
- Add pam_loginuid-part2.diff: Workaround to run pam_loginuid inside lxc

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=132
2014-01-10 10:58:11 +00:00
Thorsten Kukuk
33a265dc7c - Update to current git (Linux-PAM-git-20140109.diff, which
replaces pam_unix.diff and encryption_method_nis.diff)
  - pam_access: fix debug level logging
  - pam_warn: log flags passed to the module
  - pam_securetty: check return value of fgets
  - pam_lastlog: fix format string
  - pam_loginuid: If the correct loginuid is already set, skip writing it

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=131
2014-01-09 16:43:05 +00:00
Thorsten Kukuk
54b459547e - Remove libtrpc support to solve dependency/build cycles, plain
glibc is enough for now.

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=127
2013-11-28 11:01:38 +00:00
Thorsten Kukuk
e2cdd21691 - Add encryption_method_nis.diff:
- implement pam_unix2 functionality to use another hash for
    NIS passwords.

- Add pam_unix.diff:
  - fix if /etc/login.defs uses DES
  - ask always for old password if a NIS password will be changed

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=125
2013-11-12 12:46:50 +00:00
Michael Calmer
0ac08f4017 - fix manpages links (bnc#842872) [fix-man-links.dif]
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=123
2013-09-28 09:29:22 +00:00
Thorsten Kukuk
6916c2ed44 - Update to official release 1.1.8 (1.1.7 + git-20130916.diff)
- Remove needless pam_tally-deprecated.diff patch

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=119
2013-09-20 07:47:31 +00:00
Thorsten Kukuk
7e0a049e63 - Replace fix-compiler-warnings.diff with current git snapshot
(git-20130916.diff) for pam_unix.so:
  - fix glibc warnings
  - fix syntax error in SELinux code
  - fix crash at login

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=117
2013-09-16 09:59:31 +00:00
Thorsten Kukuk
0539a57d53 - Remove pam_unix-login.defs.diff, not needed anymore
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=115
2013-09-12 08:06:49 +00:00
Michael Calmer
ecd568a2d8 - adding hvc0-hvc7 to /etc/securetty on s390 (bnc#718516)
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=110
2013-08-06 08:36:19 +00:00
Michael Calmer
859183f330 Accepting request 173486 from openSUSE:Factory:Staging:Automake
- Added libtool as BuildRequire, and autoreconf -i option to fix 
  build with new automake

OBS-URL: https://build.opensuse.org/request/show/173486
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=105
2013-04-28 14:35:39 +00:00
Thorsten Kukuk
158efa6eb7 Fix Typo
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=103
2013-02-05 16:29:29 +00:00
Thorsten Kukuk
9c8c5632c1 - Adjust URL
- Add set_permission macro and PreReq
- Read default encryption method from /etc/login.defs
  (pam_unix-login.defs.diff)

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=101
2013-02-05 13:10:24 +00:00
Thorsten Kukuk
f64850a148 - Remove deprecated pam_tally.so module, it's too buggy and can
destroy config and log files.

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=99
2013-01-25 13:50:35 +00:00
Thorsten Kukuk
0c8101438e - Fix building in Factory
- Update to Linux-PAM 1.1.6
  - Update translations
  - pam_cracklib: Add more checks for weak passwords
  - pam_lastlog: Never lock out root
  - Lot of bug fixes and smaller enhancements

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=92
2012-09-19 12:21:10 +00:00
Thorsten Kukuk
73ec5dd486 Accepting request 125670 from home:a_jaeger:devel-glibc
Include correct headers for getrlimit.

OBS-URL: https://build.opensuse.org/request/show/125670
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=90
2012-06-22 07:40:29 +00:00
eded56e30d Accepting request 115130 from home:jengelh:dev
- Update homepage URL in specfile

OBS-URL: https://build.opensuse.org/request/show/115130
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=88
2012-05-10 03:15:08 +00:00
04ace596ec Accepting request 107892 from home:jengelh:branches:Linux-PAM
- Update to new upstream release 1.1.5
* pam_env: Fix CVE-2011-3148: correctly count leading whitespace
  when parsing environment file in pam_env
* Fix CVE-2011-3149: when overflowing, exit with PAM_BUF_ERR in
  pam_env
* pam_access: Add hostname resolution cache

OBS-URL: https://build.opensuse.org/request/show/107892
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=86
2012-03-19 12:00:58 +00:00
Michael Calmer
28de8ae255 - pam_tally2: remove invalid options from manpage (bnc#726071)
- fix possible overflow and DOS in pam_env (bnc#724480)
  CVE-2011-3148, CVE-2011-3149

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=83
2011-10-25 12:29:41 +00:00
Thorsten Kukuk
a9c0827316 - Update to version 1.1.4
* pam_securetty: Honour console= kernel option, add noconsole option
  * pam_limits: Add %group syntax, drop change_uid option, add set_all option
  * Lot of small bug fixes
  * Add support for libtirpc
- Build against libtirpc

OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=81
2011-06-27 13:45:48 +00:00
OBS User buildservice-autocommit
bfd33af5db Updating link to change in openSUSE:Factory/pam revision 46.0
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=103286a3bed4d3cad097bab011dddcfa
2011-05-26 14:17:43 +00:00