openssh/openssh-4.2p1-pam-no-stack.patch

--- openssh-4.2p1/contrib/redhat/sshd.pam.stack	2004-07-21 03:01:41.000000000 +0200
+++ openssh-4.2p1/contrib/redhat/sshd.pam	2005-10-07 14:18:50.000000000 +0200
@@ -1,6 +1,8 @@
 #%PAM-1.0
-auth       required     pam_stack.so service=system-auth
-auth       required     pam_nologin.so
-account    required     pam_stack.so service=system-auth
-password   required     pam_stack.so service=system-auth
-session    required     pam_stack.so service=system-auth
+auth       include      system-auth
+account    required     pam_nologin.so
+account    include      system-auth
+password   include      system-auth
+session    optional     pam_keyinit.so force revoke
+session    include      system-auth
+session    required     pam_loginuid.so
- use include instead of pam_stack in pam config - use fork+exec instead of system in scp (#168167) - upstream patch for displaying authentication errors 2005-10-07 12:46:20 +00:00			`--- openssh-4.2p1/contrib/redhat/sshd.pam.stack 2004-07-21 03:01:41.000000000 +0200`
			`+++ openssh-4.2p1/contrib/redhat/sshd.pam 2005-10-07 14:18:50.000000000 +0200`
- improve selinux patch (by Jan Kiszka) - upstream patch for buffer append space error (#191940) - fixed typo in configure.ac (#198986) - added pam_keyinit to pam configuration (#198628) - improved error message when askpass dialog cannot grab keyboard input (#198332) - buildrequires xauth instead of xorg-x11-xauth - fixed a few rpmlint warnings 2006-07-17 14:09:15 +00:00			`@@ -1,6 +1,8 @@`
- use include instead of pam_stack in pam config - use fork+exec instead of system in scp (#168167) - upstream patch for displaying authentication errors 2005-10-07 12:46:20 +00:00			`#%PAM-1.0`
			`-auth required pam_stack.so service=system-auth`
			`-auth required pam_nologin.so`
			`-account required pam_stack.so service=system-auth`
			`-password required pam_stack.so service=system-auth`
			`-session required pam_stack.so service=system-auth`
			`+auth include system-auth`
			`+account required pam_nologin.so`
			`+account include system-auth`
			`+password include system-auth`
- improve selinux patch (by Jan Kiszka) - upstream patch for buffer append space error (#191940) - fixed typo in configure.ac (#198986) - added pam_keyinit to pam configuration (#198628) - improved error message when askpass dialog cannot grab keyboard input (#198332) - buildrequires xauth instead of xorg-x11-xauth - fixed a few rpmlint warnings 2006-07-17 14:09:15 +00:00			`+session optional pam_keyinit.so force revoke`
- use include instead of pam_stack in pam config - use fork+exec instead of system in scp (#168167) - upstream patch for displaying authentication errors 2005-10-07 12:46:20 +00:00			`+session include system-auth`
			`+session required pam_loginuid.so`