rpms/pam
7
0
Fork 0
Code Issues Pull Requests Releases Activity
376 Commits 7 Branches 54 Tags 985 KiB
94c0a4fee4
Commit Graph

376 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Björn Esser
94c0a4fee4
Backport upstream commit fixing syslog for disabled or invalid hashes 2018-12-02 20:17:59 +01:00
Björn Esser
f3b728d2c9
Backport upstream commit reporting disabled or invalid hashes to syslog 2018-12-02 20:17:06 +01:00
rfairley
8bab4e7fac Backport upstream commit for pam_motd multiple motd paths 2018-11-28 12:35:18 -05:00
Tomas Mraz
eb01a2d4d8 Completely drop the check of invalid or disabled salt via crypt_checksalt 2018-11-26 12:58:54 +01:00
Björn Esser
d82342266e
Fix passphraseless sudo with crypt_checksalt (#1653023) 
Upstream commit 4da9feb introduced a regression that made
passphraseless sudo fail when it was invoked from a user with
a locked passphrase.  Thus we should check for such a scenario
when evaluating the return value of crypt_checksalt(3).
 2018-11-25 07:36:29 +01:00
Björn Esser
ae8e396328
Update the no-MD5-fallback patch for alignment 2018-11-23 17:49:20 +01:00
Björn Esser
2842b2a1ee
Backport upstream commit adding support for (gost-)yescrypt 2018-11-23 17:49:20 +01:00
Björn Esser
65c004f604
Backport upstream commit using crypt_checksalt for password aging 2018-11-23 10:17:17 +01:00
Björn Esser
a0fce7ff9b
Backport upstream commit preferring gensalt with autoentropy 2018-11-23 10:14:03 +01:00
Björn Esser
6eff6819b8
Backport upstream commit preferring bcrypt_b ($2b$) for blowfish 2018-11-23 10:11:51 +01:00
Björn Esser
da68a05bc8
Backport upstream commit removing an obsolete prototype 2018-11-23 10:07:51 +01:00
Björn Esser
239b1317eb
Prefer %%global over %%define 2018-11-16 11:28:35 +01:00
Björn Esser
80eff59d99
Drop Requires(post), not needed anymore 2018-11-16 11:27:00 +01:00
Björn Esser
19dc42903b
Use %%ldconfig_scriptlets 2018-11-16 11:26:11 +01:00
Björn Esser
11e9d6fdf2
Add BuildRequires: libxcrypt >= 4.3.3-2 
When building against libxcrypt >= 4.3.3-2, we can
avoid the explicit dependency on libxcrypt >= 4.3.3-1.
 2018-11-13 14:34:17 +01:00
Björn Esser
da5343b789
Add explicit (Build)Requires for libxcrypt >= 4.3.3-1 
This is needed to ensure working updates from previous builds.

It should have been in my previous commit, but I overlooked to
add it then.
 2018-11-12 11:38:23 +01:00
Björn Esser
47165fb66c
Rebuilt against libxcrypt-4.3.3 to enable the use of crypt_gensalt_r 
PAM preferes the crypt_gensalt_r function over its internal
crypt_make_salt function, when this function is provided by
the system's crypt library.

libxcrypt now ships (and used to ship it until v3.1.1) such an
alias for its crypt_gensalt_rn function, which features the
same semantics and the same prototype as the crypt_gensalt_r
function existing on some systems.
 2018-11-12 11:07:09 +01:00
Tomas Mraz
fd5858157e Make it build 2018-09-10 16:24:16 +02:00
Tomas Mraz
786ce63f9d Coverity fixes, pam_umask added to postlogin 
add pam_umask to postlogin PAM configuration file
fix some issues found by Coverity scan
 2018-09-10 14:25:15 +02:00
Colin Walters
dc7f2be86b Convert tallylog to tmpfiles.d 
This will make it compatible with the rpm-ostree model, which
has `/var` start out empty (or supports doing so).

More information in https://bugzilla.redhat.com/show_bug.cgi?id=1352154
 2018-07-27 14:30:59 -04:00
Fedora Release Engineering
48595acee5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-13 15:25:36 +00:00
Jason Tibbitts
db03b40e8b Remove needless use of %defattr 2018-07-10 02:15:00 -05:00
Tomas Mraz
ae699035e9 use /run instead of /var/run in pamtmp.conf (#1588612) 2018-06-08 10:24:42 +02:00
Tomas Mraz
48538add1f new upstream release 1.3.1 with multiple improvements 2018-05-18 15:43:48 +02:00
Fedora Release Engineering
eebe54598c - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-02-08 18:11:21 +00:00
Tomas Mraz
8f94d6252d and the NIS support now also requires libnsl2 2018-01-30 16:55:42 +01:00
Björn Esser
95ff4ad1c4
Rebuilt for switch to libxcrypt 2018-01-20 23:07:26 +01:00
Tomas Mraz
13115d331d the NIS support now requires libtirpc 2018-01-11 14:25:59 +01:00
Serhii Turivny
4dc6ede4b5 Add CI tests using the standard test interface 
Adds tests according to the CI wiki [0] specifically the standard test interface in the spec [1].

[0] https://fedoraproject.org/wiki/CI
[1] https://fedoraproject.org/wiki/Changes/InvokingTests
 2017-10-04 17:57:38 +03:00
Tomas Mraz
64bde25a45 add admin_group option to pam_faillock (#1285550) 2017-08-21 16:47:47 +02:00
Fedora Release Engineering
a6e4462d0d - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 04:46:07 +00:00
Fedora Release Engineering
8f2c8f16a3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 02:06:32 +00:00
Petr Písař
cc34b72802 perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> 2017-07-12 14:35:54 +02:00
Tomas Mraz
629a67bec4 drop superfluous 'Changing password' message from pam_unix (#658289) 2017-04-20 16:55:25 +02:00
Fedora Release Engineering
d6023f89c8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 01:11:40 +00:00
Tomas Mraz
96b935efa5 Make install of tallylog non-fatal. 2017-01-03 10:17:58 +01:00
Tomas Mraz
26153ac92d new upstream release with multiple improvements 2016-05-06 15:28:27 +02:00
Tomas Mraz
be55e6d98b pam_faillock: Add more documentation about unlock_time=never option. 2016-04-28 17:10:18 +02:00
Tomas Mraz
e1caf9a021 make cracklib-dicts dependency weak (#1323172) 2016-04-11 13:27:13 +02:00
Tomas Mraz
492bcabc07 do not drop PAM_OLDAUTHTOK if mismatched - can be used by further modules 2016-04-06 14:37:35 +02:00
Tomas Mraz
ef5646f9ed pam_unix: use pam_get_authtok() and improve prompting 2016-04-04 18:54:12 +02:00
Tomas Mraz
89812cadd9 fix console device name in console.handlers (#1270224) 2016-02-05 17:50:26 +01:00
Fedora Release Engineering
6aff3ecdef - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 11:51:15 +00:00
Tomas Mraz
d55e35278c pam_faillock: add possibility to set unlock_time to never 2015-10-16 15:31:12 +02:00
Tomas Mraz
6818550d2a drop the nproc limit setting, it is causing more harm than it solves 2015-08-12 17:27:54 +02:00
Tomas Mraz
364259c23f Move autoreconf call to %prep 2015-07-15 12:03:10 +02:00
Tomas Mraz
230a2ffa1f Fix changelog date. 2015-06-26 13:57:56 +02:00
Tomas Mraz
aef85b12f8 new upstream release fixing security issue with unlimited password length 2015-06-26 13:56:40 +02:00
Dennis Gilmore
a12c25884e - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-18 00:38:08 +00:00
Tomas Mraz
6ccbfce566 Minor security and bugfix updates 
- fix CVE-2014-2583: potential path traversal issue in pam_timestamp
- fix CVE-2013-7041: use case sensitive comparison in pam_userdb
- be tolerant to corrupted opasswd file
 2015-05-15 16:39:21 +02:00