Commit Graph

282 Commits

Author SHA1 Message Date
Tomas Mraz
d47b309a1d add support for tmpfs mount options in pam_namespace 2012-10-15 18:45:16 +02:00
Tomas Mraz
72401d341e Autotools hackery to make it build. 2012-09-05 19:09:56 +02:00
Tomas Mraz
725d09d8bf Drop libtoolize call. 2012-09-04 11:20:38 +02:00
Tomas Mraz
010ed2b452 link setuid binaries with full relro (#853158)
- add rhost and tty to auditing data in modules (#677664)
2012-09-03 15:36:31 +02:00
Tomas Mraz
8a0ba11ae1 new upstream release 2012-08-17 15:24:18 +02:00
Tomas Mraz
a0cd63d48e make the pam_lastlog module in postlogin 'optional' (#846843) 2012-08-09 17:57:58 +02:00
Tomas Mraz
0e79701521 Build against libdb-5 2012-08-06 21:49:23 +02:00
Tomas Mraz
e5af413406 Fix the getrlimit includes at more places. 2012-07-23 18:57:15 +02:00
Tomas Mraz
28a93ad826 fix build failure in pam_unix
- add display of previous bad login attempts to postlogin.pamd
- put the tmpfiles.d config to /usr/lib and rename it to pam.conf
2012-07-23 18:51:15 +02:00
Dennis Gilmore
017fb41875 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-20 02:49:29 -05:00
Tomas Mraz
3933be0355 forgotten $(DESTDIR) 2012-05-09 14:00:32 +02:00
Tomas Mraz
14f4737e81 install empty directories 2012-05-09 12:30:33 +02:00
Tomas Mraz
7f16b85d54 multiple backported fixes
- add inactive account lock out functionality to pam_lastlog
- fix pam_unix remember user name matching
- add gecoscheck and maxclassrepeat functionality to pam_cracklib
- correctly check for crypt() returning NULL in pam_unix
- pam_unix - do not fallback to MD5 on password change
  if requested algorithm not supported by crypt() (#818741)
2012-05-09 11:58:27 +02:00
Tomas Mraz
882ad81ab3 add pam_systemd to session modules 2012-05-09 11:12:48 +02:00
Tomas Mraz
92f3acf6be fix pam_namespace leaking the protect mounts to parent namespace (#755216) 2012-01-31 17:19:23 +01:00
Dennis Gilmore
87d3951c7d - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-13 05:54:44 -06:00
Tomas Mraz
d3bb594db9 add a note to limits.conf (#754285) 2011-12-21 09:13:05 +01:00
Tomas Mraz
0e4d0dbd64 use pam_pwquality instead of pam_cracklib 2011-11-24 15:05:57 +01:00
Tomas Mraz
0c02cd5bb7 upgrade to new upstream release 2011-11-24 14:33:55 +01:00
Tomas Mraz
1ba74b3572 Fix description - no static libpam for a long time. 2011-10-03 15:20:33 +02:00
Tomas Mraz
be34bed1eb Remove mistakenly added patch (it is already there as pam-1.1.0-console-fixes.patch) 2011-08-25 16:28:06 +02:00
Tomas Mraz
39bef6c743 Merge branch 'master' of ssh://pkgs.fedoraproject.org/pam
Conflicts:
	pam.spec
2011-08-25 16:10:53 +02:00
Tomas Mraz
9f29655908 fix dereference in pam_env
fix wrong parse of user@host pattern in pam_access (#732081)
2011-08-25 16:09:08 +02:00
Ville Skyttä
de3812c9a2 Rebuild to fix trailing slashes in provided dirs added by rpm 4.9.1.
http://lists.fedoraproject.org/pipermail/devel/2011-July/154658.html
2011-07-23 16:34:01 +03:00
Tomas Mraz
05c4e69a7b Remove trailing / 2011-07-15 15:28:24 +02:00
Tomas Mraz
8de0245233 clear supplementary groups in pam_console handler execution 2011-07-15 14:55:38 +02:00
Tomas Mraz
412141d627 upgrade to new upstream release 2011-06-27 17:24:51 +02:00
Tomas Mraz
d31d5587d4 detect the shared / and make the polydir mounts private based on that
fix memory leak and other small errors in pam_namespace
2011-06-07 17:31:12 +02:00
Tomas Mraz
6a48d1491e add support for explicit marking of the polydir mount private (#623522) 2011-06-02 22:23:52 +02:00
Dennis Gilmore
20d38d82f9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 08:02:09 -06:00
Tomas Mraz
a050086a24 - add postlogin common PAM configuration file (#665059) 2010-12-22 18:22:11 +01:00
Tomas Mraz
7a9b998bb8 - add a missing docfix 2010-12-14 12:35:57 +01:00
Tomas Mraz
de4fdba40b - include patches recently submitted and applied to upstream CVS 2010-12-14 12:02:26 +01:00
Tomas Mraz
a526ddfed4 - add config for autocreation of subdirectories in /var/run (#656655)
- automatically enable kernel console in pam_securetty
2010-11-25 18:14:01 +01:00
Tomas Mraz
fdfa166654 - fix segfault in faillock utility
- remove some cases where the information of existence of
  an user account could be leaked by the pam_faillock,
  document the remaining case
2010-11-10 17:15:18 +01:00
Tomas Mraz
5310fecf62 - fix segfault in faillock utility
- remove some cases where the information of existence of
  an user account could be leaked by the pam_faillock,
  document the remaining case
2010-11-10 15:15:03 +01:00
Tomas Mraz
a4d4d78281 - fix a mistake in the abstract X-socket connect
- make pam_faillock work with screensaver
2010-11-05 19:03:35 +01:00
Tomas Mraz
b9075b4f0b Initial pseudo merge for dist-git setup 2010-11-05 15:14:02 +01:00
Tomas Mraz
777d84fae4 Merge branch 'f13' into f12
Conflicts:
	pam.spec
2010-11-02 14:26:24 +01:00
Tomas Mraz
04b1daa1c1 Merge branch 'f14' into f13 2010-11-02 14:18:03 +01:00
Tomas Mraz
57bfa4578c - fix insecure dropping of priviledges in pam_xauth, pam_env,
and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
- fix insecure executing of scripts with user supplied environment
  variables in pam_namespace - CVE-2010-3853 (#643043)
2010-11-02 13:24:28 +01:00
Tomas Mraz
5bcbeb6870 Merge branch 'master' of ssh://pkgs.fedoraproject.org/pam
Conflicts:
	pam.spec
2010-11-01 23:44:04 +01:00
Tomas Mraz
4baf0f6949 - upgrade to new upstream release fixing CVE-2010-3316 CVE-2010-3435
CVE-2010-3853
- try to connect to an abstract X-socket first to verify we are
  at real console (#647191)
2010-11-01 23:42:26 +01:00
Jesse Keating
9a28cb58ea - Rebuilt for gcc bug 634757 2010-09-29 14:57:32 -07:00
Tomas Mraz
acc35880d3 - do not build some auxiliary tools that are not installed that require
flex-static to build
2010-09-20 12:16:26 +02:00
Tomas Mraz
b1302cff9c - add pam_faillock module implementing temporary account lock out based
on authentication failures during a specified interval
- upgrade to new upstream release
2010-09-17 18:12:22 +02:00
Tomas Mraz
360abdf2a1 - add pam_faillock module implementing temporary account lock out based
on authentication failures during a specified interval
- upgrade to new upstream release
2010-09-17 18:01:19 +02:00
Tomas Mraz
ca3ead6784 - add pam_faillock module implementing temporary account lock out based
on authentication failures during a specified interval
- upgrade to new upstream release
2010-09-17 17:37:07 +02:00
Fedora Release Engineering
f9b1a585ea dist-git conversion 2010-07-29 05:27:04 +00:00
Fedora Release Engineering
4f698e411f dist-git conversion 2010-07-29 05:26:40 +00:00