- most devices are now handled by HAL and not pam_console (patch by davidz)

- license tag fix
This commit is contained in:
Tomáš Mráz 2007-08-22 18:03:12 +00:00
parent 81e34ba414
commit 73ea19b4f7
2 changed files with 81 additions and 3 deletions

View File

@ -0,0 +1,71 @@
Written-by: David Zeuthen <davidz@redhat.com>
Reviewed-by: Tomas Mraz <tmraz@redhat.com>
diff -up Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms.hal-handled Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms
--- Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms.hal-handled 2007-07-23 14:48:41.000000000 +0200
+++ Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms 2007-08-22 16:25:54.000000000 +0200
@@ -1,65 +1,32 @@
# device classes -- these are shell-style globs
-<floppy>=/dev/fd[0-1]* \
- /dev/floppy* /mnt/floppy*
-<sound>=/dev/dsp* /dev/audio* /dev/midi* \
- /dev/mixer* /dev/sequencer* \
- /dev/sound/* /dev/beep \
- /dev/snd/* /dev/adsp*
-<cdrom>=/dev/cdrom* /dev/cdroms/* /dev/cdwriter* /mnt/cdrom*
<pilot>=/dev/pilot
-<jaz>=/mnt/jaz*
-<zip>=/mnt/pocketzip* /mnt/zip* /dev/zip*
-<ls120>=/dev/ls120 /mnt/ls120*
<scanner>=/dev/scanner* /dev/usb/scanner*
<rio500>=/dev/usb/rio500
-<camera>=/mnt/camera* /dev/usb/dc2xx* /dev/usb/mdc800*
-<memstick>=/mnt/memstick*
-<flash>=/mnt/flash* /dev/flash*
-<diskonkey>=/mnt/diskonkey*
-<rem_ide>=/mnt/microdrive*
<fb>=/dev/fb /dev/fb[0-9]* \
/dev/fb/*
<kbd>=/dev/kbd
<joystick>=/dev/js[0-9]*
-<v4l>=/dev/video* /dev/radio* /dev/winradio* /dev/vtx* /dev/vbi* \
- /dev/video/*
<gpm>=/dev/gpmctl
<dri>=/dev/nvidia* /dev/3dfx* /dev/dri/card*
<mainboard>=/dev/apm_bios
<pmu>=/dev/pmu
<bluetooth>=/dev/rfcomm*
-<raw1394>=/dev/raw1394
<irda>=/dev/ircomm*
<dvb>=/dev/dvb/adapter*/*
-<firewire>=/dev/iidc* /dev/vendorfw* /dev/avc*
# permission definitions
-<console> 0660 <floppy> 0660 root.floppy
-<console> 0600 <sound> 0600 root
-<console> 0600 <cdrom> 0660 root.disk
<console> 0600 <pilot> 0660 root.uucp
-<console> 0600 <jaz> 0660 root.disk
-<console> 0600 <zip> 0660 root.disk
-<console> 0600 <ls120> 0660 root.disk
<console> 0600 <scanner> 0600 root
-<console> 0600 <camera> 0600 root.disk
-<console> 0600 <memstick> 0600 root.disk
-<console> 0600 <flash> 0600 root.disk
-<console> 0600 <diskonkey> 0660 root.disk
-<console> 0600 <rem_ide> 0660 root.disk
<console> 0600 <fb> 0600 root
<console> 0600 <kbd> 0600 root
<console> 0600 <joystick> 0600 root
-<console> 0600 <v4l> 0600 root
<console> 0700 <gpm> 0700 root
<console> 0600 <mainboard> 0600 root
<console> 0600 <rio500> 0600 root
<console> 0600 <pmu> 0600 root
<console> 0600 <bluetooth> 0600 root
-<console> 0600 <raw1394> 0600 root
<console> 0600 <irda> 0600 root
<console> 0600 <dvb> 0600 root
-<console> 0600 <firewire> 0600 root
<xconsole> 0600 /dev/console 0600 root.root
<console> 0600 <dri> 0600 root

View File

@ -11,10 +11,11 @@
Summary: A security tool which provides authentication for applications
Name: pam
Version: 0.99.8.1
Release: 4%{?dist}
Release: 5%{?dist}
# The library is BSD licensed with option to relicense as GPLv2+ - this option is redundant
# as the BSD license allows that anyway. pam_timestamp and pam_console modules are GPLv2+
License: BSD and GPLv2+
# as the BSD license allows that anyway. pam_timestamp and pam_console modules are GPLv2+,
# pam_rhosts_auth module is BSD with advertising
License: BSD and GPLv2+ and BSD with advertising
Group: System Environment/Base
Source0: http://ftp.us.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-%{version}.tar.bz2
Source1: http://ftp.us.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-%{version}.tar.bz2.sign
@ -36,6 +37,7 @@ Patch31: pam-0.99.3.0-cracklib-try-first-pass.patch
Patch32: pam-0.99.3.0-tally-fail-close.patch
Patch40: pam-0.99.7.1-namespace-temp-logon.patch
Patch41: pam-0.99.8.1-namespace-init.patch
Patch42: pam-0.99.8.1-console-hal-handled.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
Requires: cracklib, cracklib-dicts >= 2.8
@ -98,6 +100,7 @@ cp %{SOURCE7} .
%patch32 -p1 -b .fail-close
%patch40 -p1 -b .temp-logon
%patch41 -p1 -b .ns-init
%patch42 -p1 -b .hal-handled
autoreconf
@ -388,6 +391,10 @@ fi
%doc doc/adg/*.txt doc/adg/html
%changelog
* Wed Aug 22 2007 Tomas Mraz <tmraz@redhat.com> 0.99.8.1-5
- most devices are now handled by HAL and not pam_console (patch by davidz)
- license tag fix
* Mon Aug 13 2007 Tomas Mraz <tmraz@redhat.com> 0.99.8.1-4
- fix auth regression when uid != 0 from previous build (#251804)