rpms/pam
7
0
Fork 0
Code Issues Pull Requests Releases Activity
433 Commits 7 Branches 51 Tags 1.7 MiB
95e7fc0739
Commit Graph

433 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ondrej Mosnacek
95e7fc0739 Remove conflicting ownership of motd.d directories 
They are owned by the `setup` package [1], which `pam` requires, so
owning these directories by `pam` is wrong and unnecessary.

Also remove the /run/motd.d line from pamtmp.conf, which is also already
present in the `setup` package's tmpfiles config file.

Should fix warnings like this during package updates:
```
  Running scriptlet: libsepol-3.3-2.fc35.x86_64                                                  16/16
/usr/lib/tmpfiles.d/pam.conf:4: Duplicate line for path "/run/motd.d", ignoring.
/usr/lib/tmpfiles.d/setup.conf:2: Duplicate line for path "/run/motd.d", ignoring.
```

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
 2022-01-11 13:20:37 +01:00
Pavel Březina
743dc9ca3b spec: remove fprintd snippet 
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory

This snippet is no longer required:
1) Users are supposed to upgrade to F35 first which will fix the file
2) Users are now expected to use authselect for configuration
 2021-12-06 15:12:17 +01:00
Pavel Březina
ff21ecd192 spec: require authselect 
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory

system-auth, smartcard-auth, fingerprint-auth, password-auth and
postlogin are now owned by authselect. Authselect is now a hard
dependency for pam. Users are now expected to use authselect to
configure the system and packages should no longer support
non-authselect configurations.

Resolves: rhbz#2023738
 2021-12-06 15:12:17 +01:00
Björn Esser
52766bc401
Rebuild(libnsl2) 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-11-12 22:01:51 +01:00
Björn Esser
c3ee4c26f3
Constantly use spaces for indentation 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:56 +02:00
Björn Esser
4886bd212f
Move documentation to %{_pkgdocdir} 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:55 +02:00
Björn Esser
b3e1d168dd
Replace $RPM_BUILD_ROOT with %{buildroot} 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:55 +02:00
Björn Esser
4d6342409b
Rename docs sub-package to doc 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:55 +02:00
Björn Esser
ca98dae9da
Remove old cruft from spec file 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-07 13:54:54 +02:00
Björn Esser
05a476841e
Remove trailing white-spaces from config-util.5 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-04 16:31:18 +02:00
Björn Esser
a0fe9943ec
Realign pam-1.5.0-redhat-modules.patch 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-04 16:25:33 +02:00
Björn Esser
0012d59db0
Remove trailing white-spaces from spec file 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-10-01 06:18:18 +02:00
Björn Esser
9f38c534db
Conditionalize BR: openssl >= 3.0.0 to supported distributions 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 11:54:37 +02:00
Björn Esser
64abd3f105
Drop explicit dependency on openssl, as auto-deps will pull it in 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 11:54:35 +02:00
Björn Esser
75bbb9a525
Rebase to pam-redhat-1.1.5 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 11:39:42 +02:00
Iker Pedrosa
b025ee55c1 - Remove the /etc/motd.d directory to exclude its ownership from pam (#1968131) 
- pam_timestamp: enable openssl hmac authentication (#1947294)
- Clean spec file: organize dependencies and move URL location

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
 2021-09-23 11:01:19 +02:00
Björn Esser
360b2d3288
Update patch for parallel build 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-23 10:03:11 +02:00
Björn Esser
38c8f7482a
Add a patch to fix parallel builds with autgenerated sources 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-22 18:28:02 +02:00
Björn Esser
c5ec6f9ed9
Add a patch to fix a missing header include in pam_console 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-13 10:57:06 +02:00
Björn Esser
7c7dec2bc1
Add so_ver macro to avoid accidental soname bumps 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-13 10:40:46 +02:00
Björn Esser
b5205aee6b
Rebase to release 1.5.2 
Resolves: #2001208

Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2021-09-13 10:24:29 +02:00
Iker Pedrosa
06d409fea6 Add macros file to allow other packages to stop hardcoding directory names 
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
 2021-07-22 12:43:41 +02:00
Iker Pedrosa
d335a7441d Fix issues detected by covscan tool 2021-07-09 12:13:54 +02:00
Björn Esser
9ba9b6c09d
Change the default password hash method to yescrypt 2021-06-10 21:23:06 +02:00
Björn Esser
3b25774300
Add a patch to not use crypt_checksalt for password expiration 
Resolves: #1965345, #1967150
 2021-06-10 21:11:26 +02:00
Benjamin Berg
1d8ac5d19c Add script to avoid fingerprint-auth issues for long term Fedora users 
Resolves: #1942443
 2021-04-16 15:56:47 +02:00
Iker Pedrosa
ea80571848 Clean auto-generated message from pam stack files 2021-04-12 13:08:18 +02:00
Benjamin Berg
dff39dc42d Return PAM_AUTHINFO_UNAVAIL from pam_fprintd.so 
GDM/gnome-shell expects being able to tell apart various failure modes
from the pam_fprintd.so. However, using "sufficient" means that the
generic error code from pam_deny.so will be returned.

Use default=bad, to ensure that the failing error code from
pam_fprintd.so is correctly exposed to GDM.
 2021-04-09 17:00:15 +02:00
Fedora Release Engineering
ada898394e - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-26 22:52:14 +00:00
ipedrosa
a880e5be1e Add BuildRequires: make (#1902520) 2020-11-30 16:05:15 +01:00
ipedrosa
15ec0223ed - Rebase to release 1.5.1 
- fix CVE-2020-27780: authentication bypass when the user doesn't exist
  and root password is blank (#1901173)
 2020-11-26 10:02:41 +01:00
ipedrosa
bcd73c678e - Rebase to release 1.5.0 
- Rebase to pam-redhat-1.1.4
- Remove pam_cracklib, pam_tally and pam_tally2
- spec file cleanup
 2020-11-11 15:18:15 +01:00
ipedrosa
f35e0f9f10 libpam: fix memory leak in pam_start (#1894630) 2020-11-06 09:21:10 +01:00
ipedrosa
75940340ad - pam_unix: fix missing initialization of daysleft (#1887077) 
- pam_motd: change privilege message prompt to default (#1861640)
 2020-10-26 11:03:08 +01:00
ipedrosa
767f761a2d - pam_motd: read motd files with target user credentials skipping unreadable ones (#1861640) 
- Clarify upstreamed patches
 2020-10-14 15:01:34 +02:00
Tom Stellard
8f7e444c74 Add BuildRequires: gcc 
https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging
 2020-08-04 04:26:20 +00:00
Fedora Release Engineering
96f5e6908b - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-07-28 13:05:10 +00:00
ipedrosa
6989bc7495 Added new pam-redhat tarball to lookaside cache 2020-07-02 12:46:54 +02:00
ipedrosa
e739be9b4c Enable layered configuration with distribution configs in /usr/share/pam.d 2020-07-02 10:59:55 +02:00
ipedrosa
aad6db4b92 Rebased to release 1.4.0 
Rebased to pam-redhat-1.1.3
Removed pam_cracklib as it has been deprecated
 2020-06-25 13:07:15 +02:00
ipedrosa
aea1c2fa66 pam_faillock: change /run/faillock/$USER permissions to 0660 2020-06-22 10:14:08 +02:00
ipedrosa
7d1e156168 pam_unix and pam_usertype: avoid determining if user exists 2020-06-17 16:04:16 +02:00
ipedrosa
9d21ac175c pam_tty_audit: if kernel audit is disabled return PAM_IGNORE 
pam_modutil_sanitize_helper_fds: fix SIGPIPE effect of PAM_MODUTIL_PIPE_FD
 2020-05-14 13:17:06 +02:00
ipedrosa
403090086b docs: splitted documentation in subpackage -docs 2020-04-23 11:50:24 +02:00
ikerexxe
055b81078c pam_selinux: check unknown object classes or permissions in current policy 2020-03-11 16:42:15 +01:00
Pavel Březina
a346ac13e2 add pam_usertype 2020-02-06 13:13:13 +01:00
Fedora Release Engineering
966d010ebd - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-01-29 20:46:33 +00:00
Tomas Mraz
a41ddb867b Fix date in changelog 2019-12-18 14:09:17 +01:00
Tomas Mraz
4957e6ce68 pam_faillock: Fix regression in admin_group support 2019-12-18 13:36:44 +01:00
Tomas Mraz
a9ef7f8676 Multiple fixes and enhancements 
pam_namespace: Support noexec, nosuid and nodev flags for tmpfs mounts
Drop tallylog and pam_tally documentation
pam_faillock: Support local_users_only option
pam_lastlog: Do not display failed attempts with PAM_SILENT flag
pam_lastlog: Support unlimited option to override fsize limit
pam_unix: Log if user authenticated without password
pam_tty_audit: Improve manual page
Optimize closing fds when spawning helpers
Fix duplicate password verification in pam_authtok_verify()
 2019-10-16 16:35:57 +02:00