From 5a74f9155bc9e4ff0329ee60186115be88872acc8f4f8016c7609d7cc0344045 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Fri, 30 Jan 2015 05:00:58 +0000 Subject: [PATCH] Accepting request 281410 from Base:System 1 OBS-URL: https://build.opensuse.org/request/show/281410 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/util-linux?expand=0&rev=196 --- login.pamd | 1 - python-libmount.changes | 10 ++++++++++ python-libmount.spec | 2 +- util-linux-systemd.changes | 10 ++++++++++ util-linux-systemd.spec | 2 +- util-linux.changes | 10 ++++++++++ util-linux.spec | 2 +- 7 files changed, 33 insertions(+), 4 deletions(-) diff --git a/login.pamd b/login.pamd index 13df590..93fc60e 100644 --- a/login.pamd +++ b/login.pamd @@ -1,6 +1,5 @@ #%PAM-1.0 auth requisite pam_nologin.so -auth [user_unknown=ignore success=ok ignore=ignore auth_err=die default=bad] pam_securetty.so auth include common-auth account include common-account password include common-password diff --git a/python-libmount.changes b/python-libmount.changes index 8189eb9..aefa97f 100644 --- a/python-libmount.changes +++ b/python-libmount.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Sat Jan 10 02:24:25 UTC 2015 - jengelh@inai.de + +- Remove pam_securetty.so from /etc/pam.d/login. By definition, + local logins are always secure. Remote logins actually use + /etc/pam.d/remote by way of `/bin/login -h` (such as rlogind). + This solves the problem that root logins are erroneously rejected + when using kmscon(8) or `machinectl login`, because they use + ptys. + ------------------------------------------------------------------- Tue Nov 11 10:57:12 UTC 2014 - schwab@suse.de diff --git a/python-libmount.spec b/python-libmount.spec index a9f3c16..08b1d77 100644 --- a/python-libmount.spec +++ b/python-libmount.spec @@ -1,7 +1,7 @@ # # spec file for package python-libmount # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed diff --git a/util-linux-systemd.changes b/util-linux-systemd.changes index 8189eb9..aefa97f 100644 --- a/util-linux-systemd.changes +++ b/util-linux-systemd.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Sat Jan 10 02:24:25 UTC 2015 - jengelh@inai.de + +- Remove pam_securetty.so from /etc/pam.d/login. By definition, + local logins are always secure. Remote logins actually use + /etc/pam.d/remote by way of `/bin/login -h` (such as rlogind). + This solves the problem that root logins are erroneously rejected + when using kmscon(8) or `machinectl login`, because they use + ptys. + ------------------------------------------------------------------- Tue Nov 11 10:57:12 UTC 2014 - schwab@suse.de diff --git a/util-linux-systemd.spec b/util-linux-systemd.spec index ce65f8b..7fb79f5 100644 --- a/util-linux-systemd.spec +++ b/util-linux-systemd.spec @@ -1,7 +1,7 @@ # # spec file for package util-linux-systemd # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed diff --git a/util-linux.changes b/util-linux.changes index 8189eb9..aefa97f 100644 --- a/util-linux.changes +++ b/util-linux.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Sat Jan 10 02:24:25 UTC 2015 - jengelh@inai.de + +- Remove pam_securetty.so from /etc/pam.d/login. By definition, + local logins are always secure. Remote logins actually use + /etc/pam.d/remote by way of `/bin/login -h` (such as rlogind). + This solves the problem that root logins are erroneously rejected + when using kmscon(8) or `machinectl login`, because they use + ptys. + ------------------------------------------------------------------- Tue Nov 11 10:57:12 UTC 2014 - schwab@suse.de diff --git a/util-linux.spec b/util-linux.spec index 4368b74..802815b 100644 --- a/util-linux.spec +++ b/util-linux.spec @@ -1,7 +1,7 @@ # # spec file for package util-linux # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed