Commit Graph

467 Commits

Author SHA1 Message Date
Iker Pedrosa
3720304984 pam_access: always match local address and clarify LOCAL keyword behaviour
Resolves: RHEL-65223

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-11-04 09:58:27 +01:00
Troy Dawson
0b8a09f49e Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
2024-10-29 08:53:50 -07:00
Iker Pedrosa
a57af1caf4 spec: Use Requires(meta): authselect
Resolves: RHEL-56703

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-08-30 09:41:18 +02:00
Troy Dawson
ce98152b50 Bump release for June 2024 mass rebuild 2024-06-24 09:06:48 -07:00
Iker Pedrosa
8cc986a906 Fix static analyzer detected issues
pam_env: fixes for NULL environment variables

Resolves: RHEL-36475

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-06-18 12:56:40 +02:00
Iker Pedrosa
8c4a8fc39d - Rebase to release 1.6.1
- Disable nis support

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-04-24 10:01:47 +02:00
Jakub Vavra
59eb6f7f14 Add gating for c10s 2024-04-02 13:32:18 +02:00
Iker Pedrosa
6e02380a0f pam_unix: do not warn if password aging is disabled
Resolves: #2263689

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-02-15 12:59:05 +01:00
Iker Pedrosa
0243c7bff9 Rebase to release 1.6.0
Resolves: #2258964

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-01-24 10:10:36 +01:00
Fedora Release Engineering
ca0f1de7dd Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 11:44:24 +00:00
Ding-Yi Chen
375d803c75 pam.conf: Remove tallylog (#2253817) 2023-12-18 09:50:31 +10:00
Iker Pedrosa
d528fb77e1 Suggest libdb-convert-util (#2245149 and #1788543)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-11-21 12:04:12 +01:00
Iker Pedrosa
0feef2b94b Include openssl-devel build dependency
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-11-07 09:27:24 +01:00
Iker Pedrosa
1b8a16d7d3 Drop explicit dependencies (#2247250)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-11-03 09:29:53 +01:00
Iker Pedrosa
34870a4110 Explicitly state package dependencies and reorganize them
This will help find out dependencies with packages like `rpm`.

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-10-30 10:07:13 +01:00
Iker Pedrosa
557fe26951 Switch pam_userdb from BerkeleyDB to GDBM (#2245149 and #1788543)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-10-23 12:42:35 +02:00
Iker Pedrosa
ef58d71cf1 pam_pwhistory: fix passing NULL filename argument to pwhistory helper
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-10-19 17:21:30 +02:00
Fedora Release Engineering
554dc12e3d Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 18:32:22 +00:00
Iker Pedrosa
6253749fca spec: Enable (deprecated) pam_lastlog module
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-05-26 11:35:16 +02:00
Iker Pedrosa
767d329677 spec: Remove --enable-vendordir from configuration
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-05-26 11:32:58 +02:00
Iker Pedrosa
7a4a2dff79 spec: Update build requirements for documentation (docbook5)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-05-26 11:31:54 +02:00
Björn Esser
0cfcd0d503
Realign left-over patches
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2023-05-19 22:59:26 +02:00
Björn Esser
4a01b974a1
Drop pam-1.5.2-pwhistory-config.patch and pam-1.5.2-configure-c99.patch,
as those patches are implemented upstream

Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2023-05-19 22:48:35 +02:00
Björn Esser
67d3ea2e03
Rebase to release 1.5.3
Resolves: #2196709

Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2023-05-19 22:45:30 +02:00
Björn Esser
0dbd0156df
Replace deprecated '%%patchN' with '%%patch -P N' 2023-04-25 17:38:43 +02:00
Arjun Shankar
bfff0f23a8 Port configure script to C99
Related to:

  <https://fedoraproject.org/wiki/Changes/PortingToModernC>
  <https://fedoraproject.org/wiki/Toolchain/PortingToModernC>
2023-04-25 16:57:09 +02:00
Iker Pedrosa
c66885bc84 - Remove pam_console (#2166692)
- Rebase to pam-redhat-1.2.0
- Remove reference to /var/run/console in spec (#1666627)

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-03-06 09:30:15 +01:00
Fedora Release Engineering
5183d62a98 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 23:16:54 +00:00
Iker Pedrosa
ebfe08c05e SPDX license migration
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-12-19 13:25:54 +01:00
Fedora Release Engineering
a1608ecf6f Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 02:34:49 +00:00
Iker Pedrosa
715212ba98 pam_pwhistory: load config from file
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-07-18 11:58:55 +02:00
Zbigniew Jędrzejewski-Szmek
bb75480a15 Add Conflicts for pam version before the split
I had an upgrade failure where pam itself was blocked:
 Problem: cannot install both libnsl2-2.0.0-3.fc36.x86_64 and libnsl2-1.3.0-4.fc35.x86_64
  - package pam-1.5.2-11.fc36.x86_64 requires libnsl.so.3()(64bit), but none of the providers can be installed
  - package pam-1.5.2-11.fc36.x86_64 requires libnsl.so.3(LIBNSL_2.0)(64bit), but none of the providers can be installed
  - package python26-2.6.9-21.fc31.x86_64 requires libnsl.so.2()(64bit), but none of the providers can be installed
  - package python26-2.6.9-21.fc31.x86_64 requires libnsl.so.2(LIBNSL_1.0)(64bit), but none of the providers can be installed
  - cannot install the best update candidate for package pam-1.5.2-7.fc35.x86_64
  - problem with installed package python26-2.6.9-21.fc31.x86_64

So dnf would try to just install pam-libs, and that failed in the transaction
test after downloading all the packages. Let's try to fail early in such a case.

With the Conflicts:
 Problem 1: cannot install both libnsl2-2.0.0-3.fc36.x86_64 and libnsl2-1.3.0-4.fc35.x86_64
  - package pam-1.5.2-12.fc36.x86_64 requires libnsl.so.3()(64bit), but none of the providers can be installed
  - package pam-1.5.2-12.fc36.x86_64 requires libnsl.so.3(LIBNSL_2.0)(64bit), but none of the providers can be installed
  - package python26-2.6.9-21.fc31.x86_64 requires libnsl.so.2()(64bit), but none of the providers can be installed
  - package python26-2.6.9-21.fc31.x86_64 requires libnsl.so.2(LIBNSL_1.0)(64bit), but none of the providers can be installed
  - cannot install the best update candidate for package pam-1.5.2-7.fc35.x86_64
  - problem with installed package python26-2.6.9-21.fc31.x86_64
 Problem 2: problem with installed package pam-devel-1.5.2-7.fc35.i686
  - pam-devel-1.5.2-7.fc35.i686 has inferior architecture
  - pam-devel-1.5.2-11.fc36.i686 has inferior architecture
  - cannot install both pam-devel-1.5.2-12.fc36.x86_64 and pam-devel-1.5.2-7.fc35.x86_64
  - cannot install both pam-devel-1.5.2-12.fc36.x86_64 and pam-devel-1.5.2-11.fc36.x86_64
  - cannot install the best update candidate for package pam-devel-1.5.2-7.fc35.x86_64
===========================================================================================
 Package             Architecture     Version                 Repository              Size
===========================================================================================
Skipping packages with conflicts:
(add '--best --allowerasing' to command line to force their upgrade):
 libnsl2             x86_64           2.0.0-3.fc36            fedora                  30 k
 pam-devel           x86_64           1.5.2-11.fc36           fedora                  97 k
 pam-devel           x86_64           1.5.2-12.fc36           @commandline            97 k
Skipping packages with broken dependencies:
 pam                 x86_64           1.5.2-12.fc36           @commandline           519 k
2022-02-27 17:00:55 +01:00
Björn Esser
f769973015
Split shared libraries into pam-libs package (#2055572)
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2022-02-17 20:24:27 +01:00
Fedora Release Engineering
44b60c5643 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 22:47:35 +00:00
Ondrej Mosnacek
95e7fc0739 Remove conflicting ownership of motd.d directories
They are owned by the `setup` package [1], which `pam` requires, so
owning these directories by `pam` is wrong and unnecessary.

Also remove the /run/motd.d line from pamtmp.conf, which is also already
present in the `setup` package's tmpfiles config file.

Should fix warnings like this during package updates:
```
  Running scriptlet: libsepol-3.3-2.fc35.x86_64                                                  16/16
/usr/lib/tmpfiles.d/pam.conf:4: Duplicate line for path "/run/motd.d", ignoring.
/usr/lib/tmpfiles.d/setup.conf:2: Duplicate line for path "/run/motd.d", ignoring.
```

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2022-01-11 13:20:37 +01:00
Pavel Březina
743dc9ca3b spec: remove fprintd snippet
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory

This snippet is no longer required:
1) Users are supposed to upgrade to F35 first which will fix the file
2) Users are now expected to use authselect for configuration
2021-12-06 15:12:17 +01:00
Pavel Březina
ff21ecd192 spec: require authselect
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory

system-auth, smartcard-auth, fingerprint-auth, password-auth and
postlogin are now owned by authselect. Authselect is now a hard
dependency for pam. Users are now expected to use authselect to
configure the system and packages should no longer support
non-authselect configurations.

Resolves: rhbz#2023738
2021-12-06 15:12:17 +01:00
Björn Esser
52766bc401
Rebuild(libnsl2)
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-11-12 22:01:51 +01:00
Björn Esser
c3ee4c26f3
Constantly use spaces for indentation
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-07 13:54:56 +02:00
Björn Esser
4886bd212f
Move documentation to %{_pkgdocdir}
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-07 13:54:55 +02:00
Björn Esser
b3e1d168dd
Replace $RPM_BUILD_ROOT with %{buildroot}
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-07 13:54:55 +02:00
Björn Esser
4d6342409b
Rename docs sub-package to doc
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-07 13:54:55 +02:00
Björn Esser
ca98dae9da
Remove old cruft from spec file
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-07 13:54:54 +02:00
Björn Esser
05a476841e
Remove trailing white-spaces from config-util.5
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-04 16:31:18 +02:00
Björn Esser
a0fe9943ec
Realign pam-1.5.0-redhat-modules.patch
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-04 16:25:33 +02:00
Björn Esser
0012d59db0
Remove trailing white-spaces from spec file
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-10-01 06:18:18 +02:00
Björn Esser
9f38c534db
Conditionalize BR: openssl >= 3.0.0 to supported distributions
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-09-23 11:54:37 +02:00
Björn Esser
64abd3f105
Drop explicit dependency on openssl, as auto-deps will pull it in
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-09-23 11:54:35 +02:00
Björn Esser
75bbb9a525
Rebase to pam-redhat-1.1.5
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-09-23 11:39:42 +02:00
Iker Pedrosa
b025ee55c1 - Remove the /etc/motd.d directory to exclude its ownership from pam (#1968131)
- pam_timestamp: enable openssl hmac authentication (#1947294)
- Clean spec file: organize dependencies and move URL location

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-09-23 11:01:19 +02:00