035f728da8Accepting request 1228723 from Linux-PAM
factory
Ana Guerrero
2024-12-08 10:36:05 +00:00
a01288951c- pam_access: rework resolving of tokens as hostname - separate resolving of IP addresses from hostnames. Don't resolve TTYs or display variables as hostname. - Add "nodns" option to disallow resolving of tokens as hostname. - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078, CVE-2024-10963]
devel
Thorsten Kukuk
2024-12-06 09:32:46 +00:00
95ff3dbfc4Accepting request 1218188 from Linux-PAM
Ana Guerrero
2024-10-27 10:24:03 +00:00
8f4235636c- Update to version 1.7.0 - build: changed build system from autotools to meson. - libpam_misc: use ECHOCTL in the terminal input - pam_access: support UID and GID in access.conf - pam_env: install environment file in vendordir if vendordir is enabled - pam_issue: only count class user if logind support is enabled - pam_limits: use systemd-logind instead of utmp if logind support is enabled - pam_unix: compare password hashes in constant time - Multiple minor bug fixes, build fixes, portability fixes, documentation improvements, and translation updates. - Drop upstream patches: - pam-bsc1194818-cursor-escape.patch - pam_limits-systemd.patch - pam_issue-systemd.patch
Thorsten Kukuk
2024-10-24 12:22:19 +00:00
57200379e7Accepting request 1200265 from Linux-PAM
Ana Guerrero
2024-09-18 13:26:01 +00:00
af312c25cf- pam_limits-systemd.patch: update to final PR
Thorsten Kukuk
2024-09-10 08:22:27 +00:00
0f70ad3ce6- Add systemd-logind support to pam_limits (pam_limits-systemd.patch) - Remove /usr/etc/pam.d, everything should be migrated - Remove pam_limits from default common-sessions* files. pam_limits is now part of pam-extra and not in our default generated config. - pam_issue-systemd.patch: only count class user sessions
Thorsten Kukuk
2024-09-09 08:32:13 +00:00
08dcec89bdAccepting request 1192585 from Linux-PAM
Dominique Leuenberger
2024-08-09 14:15:05 +00:00
04d4b5da95No real change. Just use upstream patch reference, as it was just accepted by the upstream.Valentin Lefebvre2024-08-08 10:24:54 +00:00
25d4e8e01eAccepting request 1191852 from Linux-PAM
Dominique Leuenberger
2024-08-07 07:15:01 +00:00
ddbfd22f64Accepting request 1191618 from home:vlefebvre:Linux-PAMValentin Lefebvre2024-08-06 12:08:23 +00:00
dea9f3048cAccepting request 1166585 from Linux-PAM
Ana Guerrero
2024-04-12 15:33:37 +00:00
810c4f59c1- Update to version 1.6.1 - pam_env: fixed --disable-econf --enable-vendordir support. - pam_unix: do not warn if password aging is disabled. - pam_unix: try to set uid to 0 before unix_chkpwd invocation. - pam_unix: allow empty passwords with non-empty hashes. - Multiple minor bug fixes, build fixes, portability fixes, documentation improvements, and translation updates. - Remove backports: - pam_env-fix_vendordir.patch - pam_env-fix-enable-vendordir-fallback.patch - pam_env-remove-escaped-newlines.patch - pam_unix-fix-password-aging-disabled.patch
Thorsten Kukuk
2024-04-10 07:30:15 +00:00
c1e2ac3a9fAccepting request 1149714 from Linux-PAM
Ana Guerrero
2024-02-25 13:04:39 +00:00
0158e751abAccepting request 1149618 from home:vlefebvre:branches:Linux-PAMValentin Lefebvre2024-02-23 08:28:16 +00:00
55613a9b61Accepting request 1145173 from Linux-PAM
Ana Guerrero
2024-02-11 14:45:03 +00:00
42e12ae97c- pam.tmpfiles: Make sure the content of the /run directories get removed in case of a soft-reboot
Thorsten Kukuk
2024-02-07 13:33:52 +00:00
fa2fb3c9eaAccepting request 1143388 from Linux-PAM
Ana Guerrero
2024-02-04 18:07:11 +00:00
182f702c59- disable-pam_env-test.patch: disable tst-pam_env-retval.c as it is broken
Thorsten Kukuk
2024-01-18 16:09:06 +00:00
e352b2c661- Update to version 1.6.0 - Added support of configuration files with arbitrarily long lines. - build: fixed build outside of the source tree. - libpam: added use of getrandom(2) as a source of randomness if available. - libpam: fixed calculation of fail delay with very long delays. - libpam: fixed potential infinite recursion with includes. - libpam: implemented string to number conversions validation when parsing controls in configuration. - pam_access: added quiet_log option. - pam_access: fixed truncation of very long group names. - pam_canonicalize_user: new module to canonicalize user name. - pam_echo: fixed file handling to prevent overflows and short reads. - pam_env: added support of '\' character in environment variable values. - pam_exec: allowed expose_authtok for password PAM_TYPE. - pam_exec: fixed stack overflow with binary output of programs. - pam_faildelay: implemented parameter ranges validation. - pam_listfile: changed to treat \r and \n exactly the same in configuration. - pam_mkhomedir: hardened directory creation against timing attacks. - Please note that using *at functions leads to more open file handles during creation. - pam_namespace: fixed potential local DoS (CVE-2024-22365). - pam_nologin: fixed file handling to prevent short reads. - pam_pwhistory: helper binary is now built only if SELinux support is enabled. - pam_pwhistory: implemented reliable usernames handling when remembering passwords. - pam_shells: changed to allow shell entries with absolute paths only. - pam_succeed_if: fixed treating empty strings as numerical value 0. - pam_unix: added support of disabled password aging. - pam_unix: synchronized password aging with shadow.
Thorsten Kukuk
2024-01-18 09:18:10 +00:00
6ea3349808Accepting request 1108086 from Linux-PAM
Ana Guerrero
2023-09-01 12:19:14 +00:00
add873f61eAccepting request 1105450 from home:kukuk:no-utmp
Thorsten Kukuk
2023-08-23 09:38:24 +00:00
f7d843d9b6Accepting request 1102711 from Linux-PAM
Dominique Leuenberger
2023-08-09 15:23:52 +00:00
8fc5e81cde- pam_access backports from upstream: - pam_access-doc-IPv6-link-local.patch: Document only partial supported IPv6 link local addresses - pam_access-hostname-debug.patch: Don't print error if we cannot resolve a hostname, does not need to be a hostname - pam_shells-fix-econf-memory-leak.patch: Free econf keys variable - disable-examples.patch: Don't build examples
Thorsten Kukuk
2023-08-07 10:24:04 +00:00
99cb8ac03cAccepting request 1085766 from Linux-PAM
Dominique Leuenberger
2023-05-13 15:16:51 +00:00
3aaba5773b- pam-login_defs-check.sh: adjust for new login.defs variable usages pam_tally2 has been removed upstream, remove pam_tally2-removal.patch
Thorsten Kukuk
2021-09-10 10:28:05 +00:00
dc65a6a40aAccepting request 917897 from home:jmoellers:branches:Linux-PAM
Thorsten Kukuk
2021-09-10 09:48:01 +00:00
ab4c48fadaAccepting request 911843 from Linux-PAM
Richard Brown
2021-08-18 06:55:09 +00:00
c6cae773e2- pam_umask-usergroups-login_defs.patch: Deprecate pam_umask explicit "usergroups" option and instead read it from login.def's "USERGROUP_ENAB" option if umask is only defined there. [bsc#1189139]
Thorsten Kukuk
2021-08-12 14:45:10 +00:00
39b8fe8e87Accepting request 909931 from home:pgajdos
Thorsten Kukuk
2021-08-09 08:32:39 +00:00
b414537429Accepting request 906153 from Linux-PAM
Dominique Leuenberger
2021-07-17 21:36:20 +00:00