From 6d0ece2a50a5322fab0236c8d743f334e0c2c64bafa8fa9bd3f9324523a92ed9 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Mon, 27 Mar 2023 09:02:37 +0000 Subject: [PATCH] Accepting request 1074606 from home:kukuk:branches:Base:System - login.pamd, remote.pamd: include postlogin-* rules - runuser.pamd, su.pamd: Include common-session-nonlogin instead of common-session OBS-URL: https://build.opensuse.org/request/show/1074606 OBS-URL: https://build.opensuse.org/package/show/Base:System/util-linux?expand=0&rev=506 --- login.pamd | 12 ++++++++---- remote.pamd | 12 ++++++++---- runuser.pamd | 2 +- util-linux.changes | 7 +++++++ 4 files changed, 24 insertions(+), 9 deletions(-) diff --git a/login.pamd b/login.pamd index c164e3d..0379ae3 100644 --- a/login.pamd +++ b/login.pamd @@ -1,10 +1,14 @@ #%PAM-1.0 auth requisite pam_nologin.so -auth include common-auth -account include common-account -password include common-password +auth substack common-auth +auth include postlogin-auth +account substack common-account +account include postlogin-account +password substack common-password +password include postlogin-password session required pam_loginuid.so session optional pam_keyinit.so force revoke -session include common-session +session substack common-session +session include postlogin-session session optional pam_motd.so session optional pam_mail.so standard diff --git a/remote.pamd b/remote.pamd index 9819af2..795f019 100644 --- a/remote.pamd +++ b/remote.pamd @@ -3,10 +3,14 @@ # the -h option is used). auth requisite pam_nologin.so auth [user_unknown=ignore success=ok ignore=ignore auth_err=die default=bad] pam_securetty.so -auth include common-auth -account include common-account -password include common-password +auth substack common-auth +auth include postlogin-auth +account substack common-account +account include postlogin-account +password substack common-password +password include postlogin-password session required pam_loginuid.so session optional pam_keyinit.so force revoke -session include common-session +session substack common-session +session include postlogin-session session optional pam_mail.so standard diff --git a/runuser.pamd b/runuser.pamd index e71ab51..77501b4 100644 --- a/runuser.pamd +++ b/runuser.pamd @@ -3,5 +3,5 @@ # "auth sufficient pam_rootok.so" dummy line). auth sufficient pam_rootok.so session optional pam_keyinit.so revoke -session include common-session +session include common-session-nonlogin session optional pam_xauth.so diff --git a/util-linux.changes b/util-linux.changes index a8f9cad..1c3da9b 100644 --- a/util-linux.changes +++ b/util-linux.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Mon Mar 27 08:10:15 UTC 2023 - Thorsten Kukuk + +- login.pamd, remote.pamd: include postlogin-* rules +- runuser.pamd, su.pamd: Include common-session-nonlogin instead + of common-session + ------------------------------------------------------------------- Mon Mar 13 12:40:13 UTC 2023 - Daniel Garcia