Commit Graph

6 Commits

Author SHA256 Message Date
Franck Bui
c4b124bd24 - Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1365
2023-03-31 13:08:07 +00:00
Franck Bui
aac1af997d - Call pam_loginuid when creating user@.service (bsc#1198507)
It's a backport of upstream commit 1000522a60ceade446773c67031b47a566d4a70d.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1280
2022-04-29 15:36:28 +00:00
Franck Bui
23183f8142 - Update systemd-user PAM service again
Change the default implementation of pam_setcred() again, previously
  customized to run the full "auth" PAM stack and only call pam_deny.so which is
  basically the SUSE default behavior without pam_warn.so.
  This is considered safer, especially on SLE where a regression was spotted by
  QA.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1217
2022-01-04 08:30:42 +00:00
Franck Bui
cd997c9722 update systemd-user to get the potential extended creds via common-auth
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1198
2021-10-08 08:31:22 +00:00
Franck Bui
70a02e7977 - Suppress PAM warning when the credentials for user@.service service
are established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
  is used, which consists of pam_warn.so + pam_deny.so, and will throw
  a warning each time a user logs in.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1197
2021-10-06 08:03:55 +00:00
Franck Bui
283cee5cbe Accepting request 501636 from home:fbui:systemd:Factory
- Make sure dracut (if installed) will embed the new compat rule (bsc#982303)
  The new compat rule must be embedded in the initramfs so make sure
  that the installed dracut supports it.

- Upgrade to v233 (commit 330b55d5e28d17f361062dba66426e46fb7d7857)
  - package new systemd-umount binary
  - package new environment generator stuff
  - drop /dev/root symlink support
  - /etc/pam.d/systemd-user is not patched anymore but we ship a
    dedicated file for SUSE now.
  - manage compat symlink generation in a dedicated branch (bsc#1040153)

- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.

- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.

- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.

OBS-URL: https://build.opensuse.org/request/show/501636
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=977
2017-06-07 10:48:51 +00:00