diff --git a/pam.spec b/pam.spec index 25deb7d..cc38d4a 100644 --- a/pam.spec +++ b/pam.spec @@ -3,7 +3,7 @@ Summary: An extensible library which provides authentication for applications Name: pam Version: 1.3.1 -Release: 25%{?dist} +Release: 26%{?dist} # The library is BSD licensed with option to relicense as GPLv2+ # - this option is redundant as the BSD license allows that anyway. # pam_timestamp, pam_loginuid, and pam_console modules are GPLv2+. @@ -462,6 +462,9 @@ done %doc doc/specs/rfc86.0.txt %changelog +* Tue May 16 2022 Iker Pedrosa - 1.3.1-26 +- smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 + * Tue Nov 29 2022 Iker Pedrosa - 1.3.1-25 - pam_motd: avoid unnecessary logging. Resolves: #2091062 - pam_lastlog: check localtime_r() return value. Resolves: #2012871 diff --git a/smartcard-auth.pamd b/smartcard-auth.pamd index 9572770..e8a6745 100644 --- a/smartcard-auth.pamd +++ b/smartcard-auth.pamd @@ -1,19 +1,4 @@ #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authselect is run. -auth required pam_env.so -auth [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card -auth required pam_deny.so - -account required pam_unix.so -account sufficient pam_localuser.so -account sufficient pam_succeed_if.so uid < 500 quiet -account required pam_permit.so - -password optional pam_pkcs11.so - -session optional pam_keyinit.so revoke -session required pam_limits.so --session optional pam_systemd.so -session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid -session required pam_unix.so +auth sufficient pam_sss.so allow_missing_name