rpms/pam
7
0
Fork 0
Code Issues Pull Requests Releases Activity
434 Commits 7 Branches 50 Tags 1.7 MiB
44b60c5643
Commit Graph

389 Commits

Author SHA1 Message Date
Fedora Release Engineering
44b60c5643 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-01-20 22:47:35 +00:00
Ondrej Mosnacek
95e7fc0739 Remove conflicting ownership of motd.d directories 
They are owned by the `setup` package [1], which `pam` requires, so
owning these directories by `pam` is wrong and unnecessary.

Also remove the /run/motd.d line from pamtmp.conf, which is also already
present in the `setup` package's tmpfiles config file.

Should fix warnings like this during package updates:
```
  Running scriptlet: libsepol-3.3-2.fc35.x86_64                                                  16/16
/usr/lib/tmpfiles.d/pam.conf:4: Duplicate line for path "/run/motd.d", ignoring.
/usr/lib/tmpfiles.d/setup.conf:2: Duplicate line for path "/run/motd.d", ignoring.
```

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
 2022-01-11 13:20:37 +01:00
Pavel Březina
743dc9ca3b spec: remove fprintd snippet 
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory

This snippet is no longer required:
1) Users are supposed to upgrade to F35 first which will fix the file
2) Users are now expected to use authselect for configuration
 2021-12-06 15:12:17 +01:00
Pavel Březina
ff21ecd192 spec: require authselect 
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory

system-auth, smartcard-auth, fingerprint-auth, password-auth and
postlogin are now owned by authselect. Authselect is now a hard
dependency for pam. Users are now expected to use authselect to
configure the system and packages should no longer support
non-authselect configurations.

Resolves: rhbz#2023738
 2021-12-06 15:12:17 +01:00
Björn Esser
52766bc401
Rebuild(libnsl2) 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-11-12 22:01:51 +01:00
Björn Esser
c3ee4c26f3
Constantly use spaces for indentation 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:56 +02:00
Björn Esser
4886bd212f
Move documentation to %{_pkgdocdir} 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:55 +02:00
Björn Esser
b3e1d168dd
Replace $RPM_BUILD_ROOT with %{buildroot} 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:55 +02:00
Björn Esser
4d6342409b
Rename docs sub-package to doc 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:55 +02:00
Björn Esser
ca98dae9da
Remove old cruft from spec file 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:54 +02:00
Björn Esser
0012d59db0
Remove trailing white-spaces from spec file 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-01 06:18:18 +02:00
Björn Esser
9f38c534db
Conditionalize BR: openssl >= 3.0.0 to supported distributions 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 11:54:37 +02:00
Björn Esser
64abd3f105
Drop explicit dependency on openssl, as auto-deps will pull it in 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 11:54:35 +02:00
Björn Esser
75bbb9a525
Rebase to pam-redhat-1.1.5 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 11:39:42 +02:00
Iker Pedrosa
b025ee55c1 - Remove the /etc/motd.d directory to exclude its ownership from pam (#1968131) 
- pam_timestamp: enable openssl hmac authentication (#1947294)
- Clean spec file: organize dependencies and move URL location

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
 2021-09-23 11:01:19 +02:00
Björn Esser
360b2d3288
Update patch for parallel build 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 10:03:11 +02:00
Björn Esser
38c8f7482a
Add a patch to fix parallel builds with autgenerated sources 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-22 18:28:02 +02:00
Björn Esser
c5ec6f9ed9
Add a patch to fix a missing header include in pam_console 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-13 10:57:06 +02:00
Björn Esser
7c7dec2bc1
Add so_ver macro to avoid accidental soname bumps 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-13 10:40:46 +02:00
Björn Esser
b5205aee6b
Rebase to release 1.5.2 
Resolves: #2001208

Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-13 10:24:29 +02:00
Iker Pedrosa
06d409fea6 Add macros file to allow other packages to stop hardcoding directory names 
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
 2021-07-22 12:43:41 +02:00
Iker Pedrosa
d335a7441d Fix issues detected by covscan tool 2021-07-09 12:13:54 +02:00
Björn Esser
9ba9b6c09d
Change the default password hash method to yescrypt 2021-06-10 21:23:06 +02:00
Björn Esser
3b25774300
Add a patch to not use crypt_checksalt for password expiration 
Resolves: #1965345, #1967150
 2021-06-10 21:11:26 +02:00
Benjamin Berg
1d8ac5d19c Add script to avoid fingerprint-auth issues for long term Fedora users 
Resolves: #1942443
 2021-04-16 15:56:47 +02:00
Iker Pedrosa
ea80571848 Clean auto-generated message from pam stack files 2021-04-12 13:08:18 +02:00
Fedora Release Engineering
ada898394e - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-26 22:52:14 +00:00
ipedrosa
a880e5be1e Add BuildRequires: make (#1902520) 2020-11-30 16:05:15 +01:00
ipedrosa
15ec0223ed - Rebase to release 1.5.1 
- fix CVE-2020-27780: authentication bypass when the user doesn't exist
  and root password is blank (#1901173)
 2020-11-26 10:02:41 +01:00
ipedrosa
bcd73c678e - Rebase to release 1.5.0 
- Rebase to pam-redhat-1.1.4
- Remove pam_cracklib, pam_tally and pam_tally2
- spec file cleanup
 2020-11-11 15:18:15 +01:00
ipedrosa
f35e0f9f10 libpam: fix memory leak in pam_start (#1894630) 2020-11-06 09:21:10 +01:00
ipedrosa
75940340ad - pam_unix: fix missing initialization of daysleft (#1887077) 
- pam_motd: change privilege message prompt to default (#1861640)
 2020-10-26 11:03:08 +01:00
ipedrosa
767f761a2d - pam_motd: read motd files with target user credentials skipping unreadable ones (#1861640) 
- Clarify upstreamed patches
 2020-10-14 15:01:34 +02:00
Tom Stellard
8f7e444c74 Add BuildRequires: gcc 
https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging
 2020-08-04 04:26:20 +00:00
Fedora Release Engineering
96f5e6908b - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-07-28 13:05:10 +00:00
ipedrosa
6989bc7495 Added new pam-redhat tarball to lookaside cache 2020-07-02 12:46:54 +02:00
ipedrosa
e739be9b4c Enable layered configuration with distribution configs in /usr/share/pam.d 2020-07-02 10:59:55 +02:00
ipedrosa
aad6db4b92 Rebased to release 1.4.0 
Rebased to pam-redhat-1.1.3
Removed pam_cracklib as it has been deprecated
 2020-06-25 13:07:15 +02:00
ipedrosa
aea1c2fa66 pam_faillock: change /run/faillock/$USER permissions to 0660 2020-06-22 10:14:08 +02:00
ipedrosa
7d1e156168 pam_unix and pam_usertype: avoid determining if user exists 2020-06-17 16:04:16 +02:00
ipedrosa
9d21ac175c pam_tty_audit: if kernel audit is disabled return PAM_IGNORE 
pam_modutil_sanitize_helper_fds: fix SIGPIPE effect of PAM_MODUTIL_PIPE_FD
 2020-05-14 13:17:06 +02:00
ipedrosa
403090086b docs: splitted documentation in subpackage -docs 2020-04-23 11:50:24 +02:00
ikerexxe
055b81078c pam_selinux: check unknown object classes or permissions in current policy 2020-03-11 16:42:15 +01:00
Pavel Březina
a346ac13e2 add pam_usertype 2020-02-06 13:13:13 +01:00
Fedora Release Engineering
966d010ebd - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-01-29 20:46:33 +00:00
Tomas Mraz
a41ddb867b Fix date in changelog 2019-12-18 14:09:17 +01:00
Tomas Mraz
4957e6ce68 pam_faillock: Fix regression in admin_group support 2019-12-18 13:36:44 +01:00
Tomas Mraz
a9ef7f8676 Multiple fixes and enhancements 
pam_namespace: Support noexec, nosuid and nodev flags for tmpfs mounts
Drop tallylog and pam_tally documentation
pam_faillock: Support local_users_only option
pam_lastlog: Do not display failed attempts with PAM_SILENT flag
pam_lastlog: Support unlimited option to override fsize limit
pam_unix: Log if user authenticated without password
pam_tty_audit: Improve manual page
Optimize closing fds when spawning helpers
Fix duplicate password verification in pam_authtok_verify()
 2019-10-16 16:35:57 +02:00
Tomas Mraz
b0eec480a1 pam_faillock: Support configuration file /etc/security/faillock.conf 2019-09-09 12:39:07 +02:00
Fedora Release Engineering
daf508b4d6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-07-25 23:56:12 +00:00