diff --git a/common-account-pc b/common-account-pc new file mode 100644 index 0000000..240557b --- /dev/null +++ b/common-account-pc @@ -0,0 +1,13 @@ +#%PAM-1.0 +# +# This file is autogenerated by pam-config. All changes +# will be overwritten. +# +# Account-related modules common to all services +# +# This file is included from other service-specific PAM config files, +# and should contain a list of the account modules that define +# the central access policy for use on the system. The default is to +# only deny service to users whose accounts are expired. +# +account required pam_unix.so try_first_pass diff --git a/common-auth-pc b/common-auth-pc new file mode 100644 index 0000000..ebfea9b --- /dev/null +++ b/common-auth-pc @@ -0,0 +1,15 @@ +#%PAM-1.0 +# +# This file is autogenerated by pam-config. All changes +# will be overwritten. +# +# Authentication-related modules common to all services +# +# This file is included from other service-specific PAM config files, +# and should contain a list of the authentication modules that define +# the central authentication scheme for use on the system +# (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the +# traditional Unix authentication mechanisms. +# +auth required pam_env.so +auth required pam_unix.so try_first_pass diff --git a/common-password-pc b/common-password-pc new file mode 100644 index 0000000..f7d9736 --- /dev/null +++ b/common-password-pc @@ -0,0 +1,13 @@ +#%PAM-1.0 +# +# This file is autogenerated by pam-config. All changes +# will be overwritten. +# +# Password-related modules common to all services +# +# This file is included from other service-specific PAM config files, +# and should contain a list of modules that define the services to be +# used to change user passwords. +# +password requisite pam_cracklib.so +password required pam_unix.so use_authtok nullok shadow try_first_pass diff --git a/common-session-pc b/common-session-pc new file mode 100644 index 0000000..870749b --- /dev/null +++ b/common-session-pc @@ -0,0 +1,16 @@ +#%PAM-1.0 +# +# This file is autogenerated by pam-config. All changes +# will be overwritten. +# +# Session-related modules common to all services +# +# This file is included from other service-specific PAM config files, +# and should contain a list of modules that define tasks to be performed +# at the start and end of sessions of *any* kind (both interactive and +# non-interactive +# +session required pam_limits.so +session required pam_unix.so try_first_pass +session optional pam_umask.so +session optional pam_env.so diff --git a/pam-config-0.89.tar.bz2 b/pam-config-0.89.tar.bz2 deleted file mode 100644 index 8b8de58..0000000 --- a/pam-config-0.89.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:e7f5226b37831b6d97ba8d95379561d9569d788575016b41fb5e4104f54a2b34 -size 334488 diff --git a/pam-config-0.91.tar.bz2 b/pam-config-0.91.tar.bz2 new file mode 100644 index 0000000..7e58d60 --- /dev/null +++ b/pam-config-0.91.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ed70b81cdf3ae34134eb312b44306942bbf0cdcfc4467c8ce2df4ea8589abd78 +size 321326 diff --git a/pam-config.changes b/pam-config.changes index b166719..a2b47a4 100644 --- a/pam-config.changes +++ b/pam-config.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Tue May 31 15:41:15 CEST 2016 - kukuk@suse.de + +- No %ghost entries anymore, common-*-pc files are now real config + files for better tracking of modifications. +- Update to version 0.91 + - Adjust for Linux-PAM 1.3.0 + - Automatically replace obsolete PAM modules no longer installed + - Extend error messages + ------------------------------------------------------------------- Fri Apr 1 11:37:05 CEST 2016 - kukuk@suse.de diff --git a/pam-config.spec b/pam-config.spec index 3dce522..0725ca5 100644 --- a/pam-config.spec +++ b/pam-config.spec @@ -20,10 +20,15 @@ Name: pam-config Summary: Modify common PAM configuration files License: GPL-2.0 Group: System/Management -Version: 0.89 +Version: 0.91 Release: 0 -PreReq: pam >= 0.99 +PreReq: pam >= 1.3.0 +Url: https://github.com/SUSE/pam-config Source: %{name}-%{version}.tar.bz2 +Source1: common-account-pc +Source2: common-auth-pc +Source3: common-password-pc +Source4: common-session-pc BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -45,13 +50,14 @@ make %{?_smp_mflags} %install make install DESTDIR=$RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d -for i in account auth password session ; do - touch $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/common-$i-pc -done +install -m 644 %SOURCE1 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ +install -m 644 %SOURCE2 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ +install -m 644 %SOURCE3 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ +install -m 644 %SOURCE4 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ %{find_lang} pam-config %post -if [ ! -f /etc/pam.d/common-auth-pc ] ; then +if [ "$1" = "1" ]; then pam-config --debug --create --force else pam-config --debug --update ||: @@ -82,9 +88,9 @@ fi %defattr(-,root,root) %{_sbindir}/pam-config %doc %{_mandir}/man8/pam-config.8* -%ghost %config %{_sysconfdir}/pam.d/common-account-pc -%ghost %config %{_sysconfdir}/pam.d/common-auth-pc -%ghost %config %{_sysconfdir}/pam.d/common-password-pc -%ghost %config %{_sysconfdir}/pam.d/common-session-pc +%config %{_sysconfdir}/pam.d/common-account-pc +%config %{_sysconfdir}/pam.d/common-auth-pc +%config %{_sysconfdir}/pam.d/common-password-pc +%config %{_sysconfdir}/pam.d/common-session-pc %changelog