Auto sync2gitlab import of usermode-1.113-2.el8.src.rpm

This commit is contained in:
James Antill 2022-05-26 15:46:38 -04:00
parent 441b8e0b0d
commit 63b4f54f98
7 changed files with 1090 additions and 1 deletions

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
/usermode-1.113.tar.xz

1
EMPTY
View File

@ -1 +0,0 @@

2
config-util Normal file
View File

@ -0,0 +1,2 @@
USER=root
UGROUPS=wheel

1
sources Normal file
View File

@ -0,0 +1 @@
SHA512 (usermode-1.113.tar.xz) = 0653da8cff94b86bd67ca1bed50bb77a929f5da1c047e6c627273fc319cc3bf6df7c5af1b5be160b2068632199d194bd00bcf43f702927a34b884149800c7f21

View File

@ -0,0 +1,22 @@
From 79c1ddd9fbea9cdc2bc973a3d271e9c9617d5eb7 Mon Sep 17 00:00:00 2001
From: Jiri Kucera <jkucera@redhat.com>
Date: Apr 28 2021 08:24:20 +0000
Subject: Fix typo
---
diff --git a/pam-panel-icon.1 b/pam-panel-icon.1
index 5f891dc..2563627 100644
--- a/pam-panel-icon.1
+++ b/pam-panel-icon.1
@@ -40,7 +40,7 @@ timestamp status.
If the
.B pam_timestamp
authorization is active,
-allowing an unprivileted user to temporarily authenticate as the
+allowing an unprivileged user to temporarily authenticate as the
.B root
user without providing a password,
an icon in the notification area of the panel is displayed.

View File

@ -0,0 +1,65 @@
From 48c4085004caad1ec928fa103b7f3e3fe684c826 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Apr 07 2020 11:16:48 +0000
Subject: Do not use deprecated flask.h and av_permissions.h
selinux/flask.h and selinux/av_permissions.h will be completely dropped in the
next SELinux release.
Use string_to_security_class() and string_to_av_perm() to get class and
permission values. The original hardcoded values could be invalid and are
deprecated as the whole flask.h and av_permissions.h header files.
---
diff --git a/userhelper.c b/userhelper.c
index 4177c89..f2afde7 100644
--- a/userhelper.c
+++ b/userhelper.c
@@ -48,8 +48,6 @@
#ifdef WITH_SELINUX
#include <selinux/selinux.h>
-#include <selinux/flask.h>
-#include <selinux/av_permissions.h>
#endif
#include "shvar.h"
@@ -111,7 +109,7 @@ static int checkAccess(unsigned int selaccess) {
struct av_decision avd;
int retval = security_compute_av(user_context,
user_context,
- SECCLASS_PASSWD,
+ string_to_security_class("passwd"),
selaccess,
&avd);
@@ -2267,7 +2265,8 @@ main(int argc, char **argv)
const char *new_home_phone;
const char *new_shell;
#ifdef WITH_SELINUX
- unsigned perm;
+ security_class_t class;
+ access_vector_t perm;
#endif
/* State variable we pass around. */
@@ -2426,12 +2425,13 @@ main(int argc, char **argv)
user_name = g_strdup(argv[optind]);
#ifdef WITH_SELINUX
+ class = string_to_security_class("passwd");
if (c_flag)
- perm = PASSWD__PASSWD;
+ perm = string_to_av_perm(class, "passwd");
else if (s_flag)
- perm = PASSWD__CHSH;
+ perm = string_to_av_perm(class, "chsh");
else
- perm = PASSWD__CHFN;
+ perm = string_to_av_perm(class, "chfn");
if (is_selinux_enabled() > 0 &&
checkAccess(perm)!= 0) {

999
usermode.spec Normal file
View File

@ -0,0 +1,999 @@
Summary: Tools for certain user account management tasks
Name: usermode
Version: 1.113
Release: 2%{?dist}
License: GPLv2+
Group: Applications/System
URL: https://pagure.io/%{name}/
Source: https://releases.pagure.org/%{name}/%{name}-%{version}.tar.xz
Source1: config-util
# Do not use deprecated API
Patch1: usermode-1.113-selinux.patch
Patch2: usermode-1.113-manpage_typo.patch
Requires: pam, passwd, util-linux
# https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/IJFYI5Q2BYZKIGDFS2WLOBDUSEGWHIKV/
BuildRequires: gcc
BuildRequires: desktop-file-utils, gettext, glib2-devel, gtk2-devel, intltool
BuildRequires: libblkid-devel, libSM-devel, libselinux-devel, libuser-devel
BuildRequires: pam-devel, perl-XML-Parser, startup-notification-devel
BuildRequires: util-linux
%package gtk
Summary: Graphical tools for certain user account management tasks
Group: Applications/System
Requires: %{name} = %{version}-%{release}
%global _hardened_build 1
%description
The usermode package contains the userhelper program, which can be
used to allow configured programs to be run with superuser privileges
by ordinary users.
%description gtk
The usermode-gtk package contains several graphical tools for users:
userinfo, usermount and userpasswd. Userinfo allows users to change
their finger information. Usermount lets users mount, unmount, and
format file systems. Userpasswd allows users to change their
passwords.
Install the usermode-gtk package if you would like to provide users with
graphical tools for certain account management tasks.
%prep
%setup -q
%patch1 -p1
%patch2 -p1
%build
%configure --with-fexecve=no --with-selinux
make %{?_smp_mflags}
%install
make install DESTDIR=$RPM_BUILD_ROOT INSTALL='install -p'
# make userformat symlink to usermount
ln -sf usermount $RPM_BUILD_ROOT%{_bindir}/userformat
ln -s usermount.1 $RPM_BUILD_ROOT%{_mandir}/man1/userformat.1
mkdir -p $RPM_BUILD_ROOT/etc/security/console.apps
install -p -m 644 %{SOURCE1} \
$RPM_BUILD_ROOT/etc/security/console.apps/config-util
for i in redhat-userinfo.desktop redhat-userpasswd.desktop \
redhat-usermount.desktop; do
echo 'NotShowIn=GNOME;KDE;' >>$RPM_BUILD_ROOT%{_datadir}/applications/$i
desktop-file-install --vendor redhat --delete-original \
--dir $RPM_BUILD_ROOT%{_datadir}/applications \
$RPM_BUILD_ROOT%{_datadir}/applications/$i
done
%find_lang %{name}
%files -f %{name}.lang
%doc COPYING ChangeLog NEWS README
%attr(4711,root,root) /usr/sbin/userhelper
%{_bindir}/consolehelper
%{_mandir}/man8/userhelper.8*
%{_mandir}/man8/consolehelper.8*
%config(noreplace) /etc/security/console.apps/config-util
%files gtk
%{_bindir}/usermount
%{_mandir}/man1/usermount.1*
%{_bindir}/userformat
%{_mandir}/man1/userformat.1*
%{_bindir}/userinfo
%{_mandir}/man1/userinfo.1*
%{_bindir}/userpasswd
%{_mandir}/man1/userpasswd.1*
%{_bindir}/consolehelper-gtk
%{_mandir}/man8/consolehelper-gtk.8*
%{_bindir}/pam-panel-icon
%{_mandir}/man1/pam-panel-icon.1*
%{_datadir}/%{name}
%{_datadir}/pixmaps/*
%{_datadir}/applications/*
%changelog
* Tue Aug 03 2021 Jiri Kucera <jkucera@redhat.com> - 1.113-2
- Fix typo in pam-panel-icon manpage
Do not use deprecated selinux API
Do not use fexecve
Resolves: #1775931
* Mon Nov 05 2018 Jiri Kucera <jkucera@redhat.com> - 1.113-1
- Rebase to usermode-1.113 (fixes static scanner issues)
Resolves #1602722
* Wed Aug 08 2018 Jiri Kucera <jkucera@redhat.com> - 1.112-2
- Dropped need to run autotools
- <sys/sysmacros.h> must be now included manually
Resolves #1611752
- Fixed bad FSF address
* Thu Feb 22 2018 Jiri Kucera <jkucera@redhat.com> - 1.112-1
- Update to usermode-1.112
Resolves #1269643
* Wed Feb 21 2018 Jiri Kucera <jkucera@redhat.com> - 1.111-14
- Added missing gcc dependency
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.111-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.111-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.111-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon Apr 24 2017 Miloslav Trmač <mitr@redhat.com> - 1.111-10
- Fix a FBFS with -Werror=format-security
Resolves #1444750
- Fix inconsistent dates in %%changelog
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.111-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.111-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.111-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.111-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.111-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.111-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Tue May 21 2013 Miloslav Trmač <mitr@redhat.com> - 1.111-3
- Enable hardened build
Resolves: #965471
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.111-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Sat Sep 22 2012 Miloslav Trmač <mitr@redhat.com> - 1.111-1
- Update to usermode-1.111
* Tue Aug 21 2012 Miloslav Trmač <mitr@redhat.com> - 1.110-2
- Drop no longer necessary %%clean and %%defattr commands.
* Mon Aug 20 2012 Miloslav Trmač <mitr@redhat.com> - 1.110-1
- Update to usermode-1.110.
Note that this drops halt/poweroff/reboot helpers, the respective
implementations in systemd now include PolicyKit support. Spec file change
based on a patch by Lennart Poettering <lpoetter@redhat.com>.
Resolves: #804088, #849208
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.109-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Mar 3 2012 Miloslav Trmač <mitr@redhat.com> - 1.109-1
- Update to usermode-1.109
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.108-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Mon Oct 3 2011 Miloslav Trmač <mitr@redhat.com> - 1.108-1
- Update to usermode-1.108
Resolves: #622813, #716524
* Thu Mar 31 2011 Miloslav Trmač <mitr@redhat.com> - 1.107-1
- Update to usermode-1.107
Resolves: #668731
- Add UGROUPS=wheel to config-util
Resolves: #688690
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.106.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Sep 29 2010 jkeating - 1.106.1-2
- Rebuilt for gcc bug 634757
* Tue Sep 14 2010 Miloslav Trmač <mitr@redhat.com> - 1.106.1-1
- Update to usermode-1.106.1
* Thu Aug 26 2010 Miloslav Trmač <mitr@redhat.com> - 1.106-1
- Update to usermode-1.106
* Thu Apr 8 2010 Miloslav Trmač <mitr@redhat.com> - 1.105-1
- Update to usermode-1.105
Resolves: #578124
Resolves: #580481
* Fri Mar 26 2010 Miloslav Trmač <mitr@redhat.com> - 1.104.2-1
- Update to usermode-1.104.2
* Thu Mar 4 2010 Miloslav Trmač <mitr@redhat.com> - 1.104.1-1
- Update to usermode-1.104.1
- Drop no longer necessary references to BuildRoot:
* Thu Feb 25 2010 Miloslav Trmač <mitr@redhat.com> - 1.104-1
- Update to usermode-1.104
Resolves: #567117
* Tue Feb 16 2010 Miloslav Trmač <mitr@redhat.com> - 1.103-1
- Update to usermode-1.103
* Fri Feb 5 2010 Miloslav Trmač <mitr@redhat.com> - 1.102-2
- Use %%{?_smp_mflags}
- Use the four-parameter version of %%defattr
- Be more paranoid about dropping privileges
Resolves: #562194
- Set PAM_TTY
Resolves: #562195
* Mon Oct 5 2009 Miloslav Trmač <mitr@redhat.com> - 1.102-1
- Update to usermode-1.102
* Tue Sep 15 2009 Miloslav Trmač <mitr@redhat.com> - 1.101-1
- Update to usermode-1.101
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.100-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Mon Jun 29 2009 Miloslav Trmač <mitr@redhat.com> - 1.100-3
- Require libblkid-devel instead of e2fsprogs-devel
* Tue Apr 14 2009 Miloslav Trmač <mitr@redhat.com> - 1.100-2
- Add BuildRequires: intltool
* Tue Apr 14 2009 Miloslav Trmač <mitr@redhat.com> - 1.100-1
- Update to usermode-1.100
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.99-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Wed Jan 14 2009 Miloslav Trmač <mitr@redhat.com> - 1.99-2
- Fix problems pointed out in merge review:
- Drop Conflicts: SysVinit < very-old
- Remove very old version requirements from Requires and BuildRequires
- Make /etc/security/console.apps/* %%config(noreplace)
- Update BuildRoot
* Tue Nov 11 2008 Miloslav Trmač <mitr@redhat.com> - 1.99-1
- Update to usermode-1.99
Resolves: #470834
* Thu Nov 6 2008 Miloslav Trmač <mitr@redhat.com> - 1.98.1-2
- Hide usermount from GNOME and KDE menus
Resolves: #440029
- Only hide userinfo and userpasswd in GNOME and KDE
* Tue Oct 28 2008 Miloslav Trmač <mitr@redhat.com> - 1.98.1-1
- Update to usermode-1.98.1-1
* Sun Aug 3 2008 Miloslav Trmač <mitr@redhat.com> - 1.98-1
- Support dialogs with no text entries
- Preserve timestamps of some installed files
Resolves: #456749
- Remove /usr/X11R6/bin from the default path.
Resolves: #446849
- Left-justify messages
- Preserve file timestamps where possible.
* Thu May 1 2008 Miloslav Trmač <mitr@redhat.com> - 1.97-1
- Fix display of '_' in prompts
Resolves: #444545
* Thu Apr 10 2008 Miloslav Trmač <mitr@redhat.com> - 1.96.1-1
- New release with updated translations
* Fri Feb 29 2008 Miloslav Trmač <mitr@redhat.com> - 1.96-1
- Remove code that overrides SELinux contexts of processes started by
userhelper.
Related: #247967
- Delete the WITH_SELINUX variable.
* Mon Feb 25 2008 Miloslav Trmač <mitr@redhat.com> - 1.95-1
- New home page at https://fedorahosted.org/usermode/
- Correctly preserve exit code when SESSION=yes
- Fix minor errors in the .desktop files
- Ship documentation
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.94-2
- Autorebuild for GCC 4.3
* Thu Jan 10 2008 Miloslav Trmač <mitr@redhat.com> - 1.94-1
- Add support for including files from wrapper configuration files. Original
patch by Carlo de Wolf.
Resolves: #426095
- Add /etc/security/console.apps/config-util for use by system-config-*
- Rename sr@Latn.po to sr@latin.po
Resolves: #425842
* Tue Oct 16 2007 Miloslav Trmač <mitr@redhat.com> - 1.93.1-1
- New release with updated translations
Resolves: #332441
- Build with startup notification
Resolves: #294591
* Wed Sep 5 2007 Miloslav Trmač <mitr@redhat.com> - 1.93-1
- Fix handling of PAM conversations with no questions
Resolves: #267361
- Update License:
* Mon Jun 11 2007 Miloslav Trmač <mitr@redhat.com> - 1.92-1
- Fix userhelper hangs in non-UTF8 locales
Resolves: #242420
- Clean up menu categories in desktop files
* Sat Jun 9 2007 Miloslav Trmač <mitr@redhat.com> - 1.91.2-1
- Show the user we're authenticating as in an i18n-safe way.
Resolves: #233210
- Remove BuildRequires: libattr-devel
* Thu Apr 19 2007 Miloslav Trmac <mitr@redhat.com> - 1.91.1-1
- New release with updated translations
* Tue Mar 27 2007 Matthias Clasen <mclasen@redhat.com> 1.91-2
- Clean up desktop files
* Mon Mar 19 2007 Miloslav Trmac <mitr@redhat.com> - 1.91-1
- Preserve environment variables in consolehelper if specified in the service
config file
Related: #213402
* Wed Mar 14 2007 Miloslav Trmac <mitr@redhat.com> - 1.90-1
- Fix GUI=no handling
Resolves: #110701
- Add a dialog caption when changing user password
Resolves: #154861
- Fix an use of PAM data after free
Resolves: #176992
- Support "user", "users", LABEL= and UUID= in usermount and userformat
Resolves: #189907
- Use less memory in pam-panel-icon until the icon is actually displayed
- Don't use deprecated GTK+ widgets
* Fri Mar 9 2007 Miloslav Trmac <mitr@redhat.com> - 1.89-1
- Preserve application exit code in consolehelper
Resolves: #178991, #210893
- Drop the historical build6x spec file variable
- Fix some rpmlint warnings
* Mon Dec 11 2006 Martin Bacovsky <mbacovsk@redhat.com> - 1.88-3.el5
- Updated translations
- Resolves: #216622
* Fri Dec 1 2006 Martin Bacovsky <mbacovsk@redhat.com> - 1.88-2.el5
- Updated translations
- Resolves: #216622
* Thu Nov 30 2006 Martin Bacovsky <mbacovsk@redhat.com> - 1.88-1.el5
- Updated translations
- Resolves: #216622
* Tue Oct 3 2006 Martin Bacovsky <mbacovsky@redhat.com> 1.87-3
- Repackaging with new translations
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 1.87-2
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
* Wed Sep 20 2006 Martin Bacovsky <mbacovsky@redhat.com> 1.87-1
- pam-panel-icon is now transparent on GTK+ >2.10 (#207181),
thanks to Bill Nottingham
* Wed Aug 30 2006 Martin Bacovsky <mbacovsky@redhat.com> 1.86-1
- fix userpasswd - Query window pops up three times if cancelling passwd (#202924)
- Serbian latin script translation added (#203003)
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.85-2.2.1
- rebuild
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.85-2.2
- bump again for double-long bug on ppc(64)
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.85-2.1
- rebuilt for new gcc4.1 snapshot and glibc changes
* Tue Jan 31 2006 Jindrich Novy <jnovy@redhat.com> 1.85-2
- add gettext, libattr-devel, libSM-devel dependencies
* Tue Jan 3 2006 Jindrich Novy <jnovy@redhat.com> 1.85-1
- fix userpasswd - don't crash if pam produces multi-line output (#175735)
Thanks to toddp@bestweb.net
- added Serbian translation (#176152)
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
- rebuilt
* Thu Dec 1 2005 Jindrich Novy <jnovy@redhat.com> 1.84-1
- usermode-gtk dialog stays always on top, thanks to Pierre Ossman (#80634)
* Tue Nov 15 2005 Jindrich Novy <jnovy@redhat.com> 1.83-1
- accept gecos information on commandline for userinfo,
patch by mclasen@redhat.com (#173232)
- update translations
* Wed Oct 26 2005 Jindrich Novy <jnovy@redhat.com> 1.82-1
- don't use pam_stack.so
- introduce userformat to better handle device formatting
and removing usermount from menus (#132559)
* Tue Aug 16 2005 Jindrich Novy <jnovy@redhat.com> 1.81-1
- apply SELinux functionality enhancement patch from Dan Walsh
- rebuilt because of the new cairo
* Thu Aug 11 2005 Ray Strode <rstrode@redhat.com> 1.80-4
- rebuild
* Tue Jul 12 2005 Jindrich Novy <jnovy@redhat.com> 1.80-3
- rebuild again because of libwnck change
* Tue Jul 12 2005 Jindrich Novy <jnovy@redhat.com> 1.80-2
- rebuild because of broken libwnck dependency
* Wed May 11 2005 Jindrich Novy <jnovy@redhat.com> 1.80-1
- fix "Unknown error" when password is mistyped in userpasswd (#135500)
- add icons to windows for usermode-gtk applications (#155867)
- add missing checks for some PAM error codes
- fix ungettextized error message
- update translations
* Tue Mar 15 2005 Matthias Clasen <mclasen@redhat.com> 1.79-2
- rebuild against new libwnck
* Wed Mar 02 2005 Jindrich Novy <jnovy@rdhat.com> 1.79-1
- fix problem with root passwords starting with space (#124980)
* Wed Feb 16 2005 Jindrich Novy <jnovy@rdhat.com> 1.78-2
- add $RPM_OPT_FLAGS to CFLAGS
* Thu Jan 27 2005 Jindrich Novy <jnovy@redhat.com> 1.78-1
- pam-panel-icon has popup menu to choose to forget/keep
authentization by right clicking as usual for other panel applets (#75845)
- fix race condition (#142254)
* Thu Jan 20 2005 Jindrich Novy <jnovy@redhat.com> 1.77-1
- preserve LANGUAGE environment variable in userhelper (#82300)
- use badge instead of keyring icon for pam-panel-icon (#122487)
- icon is not showed in the panel when logged as root (#75234)
- use new environment variable USERHELPER_UID to identify
an user who executed an application via userhelper (#116186)
* Thu Dec 02 2004 Jindrich Novy <jnovy@redhat.com> 1.76-1
- fix dependencies to Perl-XML-Parser #124170
- use pamconsole instead of user in /etc/fstab to let
usermount work with hal #139820
* Tue Nov 16 2004 Jindrich Novy <jnovy@redhat.com>
- update libuser interface to libuser-0.6
* Wed Nov 10 2004 Jindrich Novy <jnovy@redhat.com> 1.75-1
- make pam-panel-icon using localized strings (#138609)
- update translations
- fix usermount to use "-I" option only for vfat and msdos fs
- fix Makefile.am to not to use "Release" from spec to name dist tarballs
* Wed Oct 20 2004 Jindrich Novy <jnovy@redhat.com> 1.74-1
- add patch from Mathew Miller (mattdm@mattdm.org) to use
own user's password instead of root's in authentization
(the user must be a member of specific group to enable it)
* Mon Oct 04 2004 Jindrich Novy <jnovy@redhat.com> 1.73-1
- add support to configure.in for more languages
- update translations from upstream
- generate build scripts by autogen.sh
* Tue Sep 28 2004 Rik van Riel <riel@redhat.com> 1.72-2
- add dependency on passwd (bz #125010)
- make sure the Release: isn't part of the path name and tarball name
* Mon Sep 27 2004 Ray Strode <rstrode@redhat.com> 1.72-1
- remove X-Red-Hat-Base category from userinfo.desktop
- fix `make distcheck'
- use proper value types for Terminal keys in desktop entries
- remove upstreamed mkfs patch
* Fri Sep 24 2004 Jindrich Novy <jnovy@redhat.com> 1.71-4
- updated dependencies to SELinux
* Wed Sep 22 2004 Jindrich Novy <jnovy@redhat.com> 1.71-3
- installation to Preferences/More Preferences as a request
of Ray Strode (rstrode@redhat.com) and #131605
* Mon Sep 20 2004 Jindrich Novy <jnovy@redhat.com> 1.71-2
- added "-I" option to mkfs in the .mkfs patch (#117793)
* Thu Aug 26 2004 Alexander Larsson <alexl@redhat.com> - 1.71-1
- consolehelper: work if root is readonly
* Mon Jul 12 2004 Dan Walsh <dwalsh@redhat.com> 1.70-8
- Additional diffs from NSA
- Clean up comments
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.70-7
- More fixes for SELinux. roll back to only use root for auth.
- Add getenforce checks
- Add root_passwd check
* Thu Jul 1 2004 Dan Walsh <dwalsh@redhat.com> 1.70-6
- More fixes to make targeted policy work correctly
* Thu Jul 1 2004 Dan Walsh <dwalsh@redhat.com> 1.70-5
- Fix to use root if user not defined
* Tue May 25 2004 Dan Walsh <dwalsh@redhat.com> 1.70-4
- Support new policy files
* Thu May 20 2004 Dan Walsh <dwalsh@redhat.com> 1.70-3
- Change user context to default name if username context not in passwd file
* Thu Apr 1 2004 Dan Walsh <dwalsh@redhat.com> 1.70-1
- Change user context to "root" if username context "user_t" not in passwd file
* Wed Mar 31 2004 Nalin Dahyabhai <nalin@redhat.com> 1.70-1
- fix accidental mixup of role and type setting up new selinux context
- log the new selinux context if we're running an app in a new selinux context
* Sat Feb 21 2004 Dan Walsh <dwalsh@redhat.com> 1.69-5
- Change to fall back to root auth if selinux user does not exist
* Tue Jan 27 2004 Dan Walsh <dwalsh@redhat.com> 1.69-4
- fix call to is_selinux_enabled
* Mon Dec 8 2003 Nalin Dahyabhai <nalin@redhat.com>
- fix warning in userinfo which would cause random early exit (#111409)
- clean up warnings
* Tue Nov 25 2003 Dan Walsh <dwalsh@redhat.com> 1.69-3.sel
- Fix handling of roles from console file
* Fri Nov 14 2003 Nalin Dahyabhai <nalin@redhat.com>
- don't disable use of deprecated GLib and GTK+ APIs, reported by the
mysterious Pierre-with-no-last-name
* Thu Oct 30 2003 Dan Walsh <dwalsh@redhat.com> 1.69-2.sel
- Turn on sleinux
* Thu Oct 23 2003 Nalin Dahyabhai <nalin@redhat.com> 1.69-1
- all around: cleanups
- consolehelper: coalesce multiple messages from PAM again
- usermount: handle user-not-allowed-to-control-mounts error correctly (#100457)
- userhelper: trim off terminating commas when changing chfn info
* Mon Oct 6 2003 Dan Walsh <dwalsh@redhat.com> 1.68-8
* Wed Oct 1 2003 Dan Walsh <dwalsh@redhat.com> 1.68-7.sel
- Fix to use /etc instead of /usr/etc
* Thu Sep 25 2003 Dan Walsh <dwalsh@redhat.com> 1.68-6.sel
- turn on selinux
- add default userhelper context file
* Thu Sep 25 2003 Nalin Dahyabhai <nalin@redhat.com> 1.68-6
- make selinux a configure option to avoid screwing with makefiles
* Thu Sep 25 2003 Nalin Dahyabhai <nalin@redhat.com> 1.68-5
- rebuild
* Mon Sep 8 2003 Dan Walsh <dwalsh@redhat.com> 1.68-4
- turn off selinux
* Fri Sep 5 2003 Dan Walsh <dwalsh@redhat.com> 1.68-3.sel
- turn on selinux
* Tue Jul 29 2003 Dan Walsh <dwalsh@redhat.com> 1.68-2
- Add SELinux support
* Wed Apr 16 2003 Nalin Dahyabhai <nalin@redhat.com> 1.68-1
- update translations
- suppress the error dialog from user cancel
* Mon Feb 24 2003 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Thu Feb 20 2003 Nalin Dahyabhai <nalin@redhat.com> 1.67-1
- work around GTK+ clearing DESKTOP_STARTUP_ID at gtk_init() time, so that
startup notification actually works (#84684)
* Wed Feb 19 2003 Nalin Dahyabhai <nalin@redhat.com> 1.66-1
- consolehelper-gtk: complete startup notification at startup
- userhelper: pass startup notification data to consolehelper-gtk
- consolehelper-gtk: setup startup notification for children if userhelper
requests it
* Mon Jan 27 2003 Nalin Dahyabhai <nalin@redhat.com> 1.65-2
- rebuild
* Mon Jan 20 2003 Nalin Dahyabhai <nalin@redhat.com> 1.65-1
- pass-through DESKTOP_STARTUP_ID
* Mon Jan 6 2003 Nalin Dahyabhai <nalin@redhat.com> 1.64-1
- set the requesting user PAM item to the invoking user's name (#81255)
* Mon Nov 11 2002 Nalin Dahyabhai <nalin@redhat.com> 1.63-2
- remove directory names from PAM config files, allowing the same config
files to work for both arches on multilib boxes
- translation updates
* Wed Sep 4 2002 Nalin Dahyabhai <nalin@redhat.com> 1.63-1
- userhelper: swallow the exec'd program's exit status, which would be
misinterpreted by consolehelper anyway
* Tue Sep 3 2002 Nalin Dahyabhai <nalin@redhat.com> 1.62-1
- consolehelper: suppress dialog on successful execution
- userhelper: return 0 on success, not 1 (what was I *thinking*?)
* Mon Sep 2 2002 Nalin Dahyabhai <nalin@redhat.com> 1.61-1
- userinfo: exit properly on escape. handle site_info field properly. go
insensitive while running child process.
- userpasswd: exit properly on cancel.
- all of the above: reap the child instead of checking for pipe close -- this
way is more robust (#68578,72684).
- usermount: run mount/umount synchronously. capture stderr and display in a
dialog. desensitize action buttons when no filesystems are selected.
- consolehelper: display errors if we're attempting to run bogus programs
(#72127)
- translation updates (#70278)
* Wed Aug 14 2002 Nalin Dahyabhai <nalin@redhat.com> 1.60-1
- reconnect the "cancel" and "ok" buttons in userinfo
- heed the cancel button when prompting for passwords in userinfo (#68578)
- translation update
* Wed Aug 14 2002 Nalin Dahyabhai <nalin@redhat.com> 1.59-2
- change "forget password" to "forget authorization", because we don't actually
remember the password (that would be scary, #71476)
- translation update
* Tue Aug 13 2002 Nalin Dahyabhai <nalin@redhat.com> 1.59-1
- pam-panel-icon: overhaul, change the 'locked' icon to keyring-small, nix the
'unlocked' icon
- consolehelper-gtk: properly set up the dialog buttons (should be 'cancel/ok'
when we're asking questions, was always 'close')
- disappear pam_timestamp_init
* Wed Aug 7 2002 Nalin Dahyabhai <nalin@redhat.com> 1.58-2
- install the new 'unlocked' icon
* Tue Aug 6 2002 Jonathan Blandford <jrb@redhat.com>
- New version.
* Mon Aug 5 2002 Nalin Dahyabhai <nalin@redhat.com> 1.57-1
- add support for BANNER and BANNER_DOMAIN in the userhelper configuration
* Mon Aug 5 2002 Nalin Dahyabhai <nalin@redhat.com> 1.56-4
- mark strings in the .glade file as translatable (#70278)
- translation updates
* Wed Jul 31 2002 Nalin Dahyabhai <nalin@redhat.com> 1.56-3
- add icons for userpasswd and usermount
* Wed Jul 24 2002 Nalin Dahyabhai <nalin@redhat.com> 1.56-2
- actually include the icons
- translation updates
* Tue Jul 23 2002 Nalin Dahyabhai <nalin@redhat.com> 1.56-1
- userinfo: prevent users from selecting "nologin" as a shell (#68579)
- don't strip binaries by default; leave that to the buildroot policy
- use desktop-file-install
* Wed Jun 19 2002 Havoc Pennington <hp@redhat.com>
- put pam-panel-icon in file list
* Mon May 20 2002 Nalin Dahyabhai <nalin@redhat.com> 1.55-2
- don't strip binaries which have no special privileges
* Wed May 15 2002 Nalin Dahyabhai <nalin@redhat.com> 1.55-1
- remove the pixmap we don't use any more (we use stock pixmaps now)
- update translations
* Tue Apr 16 2002 Nalin Dahyabhai <nalin@redhat.com> 1.54-1
- suppress even error messages from Xlib when consolehelper calls
gtk_init_check() to see if the display is available
* Mon Apr 15 2002 Nalin Dahyabhai <nalin@redhat.com> 1.53-2
- refresh translations
* Thu Apr 11 2002 Nalin Dahyabhai <nalin@redhat.com> 1.53-1
- refresh shell variable code from authconfig (#63175)
* Tue Apr 9 2002 Nalin Dahyabhai <nalin@redhat.com> 1.52-2
- refresh translations
* Mon Apr 1 2002 Nalin Dahyabhai <nalin@redhat.com> 1.52-1
- attempt to make prompts at the console more meaningful
- when falling back, reset the entire environment to the user's
* Thu Mar 28 2002 Nalin Dahyabhai <nalin@redhat.com>
- stop giving the user chances to enter the right password if we get a
conversation error reading a response (appears to be masked by libpam)
(#62195)
- always center consolehelper dialog windows
* Wed Mar 27 2002 Nalin Dahyabhai <nalin@redhat.com> 1.51-1
- patch to make gettext give us UTF-8 strings (which GTK needs) from ynakai
* Fri Mar 22 2002 Nalin Dahyabhai <nalin@redhat.com> 1.50-6
- update translations
- actually include the glade files (#61665)
* Mon Mar 11 2002 Nalin Dahyabhai <nalin@redhat.com> 1.50-5
- update translations
* Mon Feb 25 2002 Nalin Dahyabhai <nalin@redhat.com> 1.50-4
- rebuild
* Fri Feb 22 2002 Nalin Dahyabhai <nalin@redhat.com> 1.50-3
- update translations
* Thu Jan 31 2002 Nalin Dahyabhai <nalin@redhat.com> 1.50-2
- rebuild to fix dependencies
* Thu Jan 31 2002 Nalin Dahyabhai <nalin@redhat.com> 1.50-1
- fix userpasswd dialog message being incorrect for password changes
- use a dumb conversation function when text mode is invoked without a tty -- if
the service's configuration doesn't call for prompts, then it'll still work
- port from pwdb to libuser
- catch child-exit errors correctly again
- fix keyboard-grabbing
* Wed Jan 23 2002 Nalin Dahyabhai <nalin@redhat.com> 1.49-3
- add default locations for certain binaries to configure.in
* Thu Jan 3 2002 Nalin Dahyabhai <nalin@redhat.com> 1.49-2
- munge glade file to use stock items for buttons where possible
* Mon Dec 10 2001 Nalin Dahyabhai <nalin@redhat.com> 1.49-1
- the console.apps configs shouldn't be missingok
- fix buildprereqs for gtk2/libglade2
* Tue Dec 4 2001 Nalin Dahyabhai <nalin@redhat.com>
- more gtk2 changes
- split off a -gtk subpackage with all of the gtk-specific functionality
* Wed Nov 28 2001 Nalin Dahyabhai <nalin@redhat.com>
- the grand libglade/gtk2 overhaul
- allow disabling display of GUI windows by setting "GUI=false" in the
console.apps configuration file (default: TRUE)
- allow disabling display of GUI windows by recognizing a magic option
on the command-line of the program being wrapped (NOXOPTION, no default)
* Fri Nov 9 2001 Nalin Dahyabhai <nalin@redhat.com> 1.46-1
- restore the previous XAUTHORITY setting before opening PAM sessions
* Fri Nov 2 2001 Nalin Dahyabhai <nalin@redhat.com> 1.45-1
- propagate environment variables from libpam to applications
* Wed Oct 3 2001 Nalin Dahyabhai <nalin@redhat.com> 1.44-1
- only try to call gtk_main_quit() if we've got a loop to get out of (#54109)
- obey RPM_OPT_FLAGS, obey
* Tue Aug 28 2001 Trond Eivind Glomsrød <teg@redhat.com> 1.43-1
- Update translations
* Mon Aug 6 2001 Nalin Dahyabhai <nalin@redhat.com>
- add build requirements on glib-devel, gtk+-devel, pam-devel (#49726)
* Sun Jun 24 2001 Elliot Lee <sopwith@redhat.com>
- Bump release + rebuild.
* Wed Feb 14 2001 Preston Brown <pbrown@redhat.com>
- final translation merge.
* Wed Feb 14 2001 Nalin Dahyabhai <nalin@redhat.com>
- clear the supplemental groups list before running binaries as root (#26851)
* Wed Feb 7 2001 Nalin Dahyabhai <nalin@redhat.com>
- set XAUTHORITY if we fall back to regular behavior (#26343)
- make the suid helper 04711 instead of 04755
* Mon Feb 5 2001 Nalin Dahyabhai <nalin@redhat.com>
- refresh translations
* Mon Jan 29 2001 Preston Brown <pbrown@redhat.com>
- use lang finding script.
* Thu Jan 25 2001 Yukihiro Nakai <ynakai@redhat.com>
- Some fix for Japanese environment.
- Use gtk_set_locale() instead of setlocale()
- Copyright update.
* Sun Jan 7 2001 Yukihiro Nakai <ynakai@redhat.com>
- Add gettextized
* Thu Nov 2 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix segfault in userhelper (#20027)
* Tue Oct 24 2000 Nalin Dahyabhai <nalin@redhat.com>
- /sbin/shutdown, not /usr/sbin/shutdown (#19034)
* Fri Oct 6 2000 Nalin Dahyabhai <nalin@redhat.com>
- don't pass on arguments to halt and reboot, because they error out
* Thu Oct 5 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix the /usr/bin/shutdown wrapper so that root can call shutdown
- only include the /usr/bin/shutdown wrapper on 6.x
- also sanitize LC_MESSAGES
- tweak sanitizing checks (from mkj)
* Wed Oct 4 2000 Jakub Jelinek <jakub@redhat.com>
- fix a security bug with LC_ALL/LANG variables (#18046)
* Mon Aug 28 2000 Nalin Dahyabhai <nalin@redhat.com>
- mark defined strings translateable (#17006)
* Thu Aug 24 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix incorrect user name
- add a shell wrapper version of /usr/bin/shutdown
- build for 6.x errata
- bump revision to upgrade the errata
* Wed Aug 23 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix stdin/stdout redirection shenanigans (#11706)
- fix authentication and execution as users other than root
- make sure the right descriptors are terminals before dup2()ing them
- cut out an extra-large CPU waster that breaks GUI apps
* Mon Aug 21 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix typo (#16664)
* Sun Aug 20 2000 Nalin Dahyabhai <nalin@redhat.com>
- previous fix, part two
* Sat Aug 19 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix inadvertent breakage of the shell-changing code
* Fri Aug 18 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix the "run unprivileged" option
* Mon Aug 14 2000 Nalin Dahyabhai <nalin@redhat.com>
- actually use the right set of translations
* Fri Aug 11 2000 Nalin Dahyabhai <nalin@redhat.com>
- remove the shutdown command from the list of honored commands
* Wed Aug 9 2000 Nalin Dahyabhai <nalin@redhat.com>
- merge in updated translations
- set XAUTHORITY after successful authentication (#11006)
* Wed Aug 2 2000 Nalin Dahyabhai <nalin@redhat.com>
- install translations
- fixup a messy text string
- make "Mount"/"Unmount" translatable
- stop prompting for passwords to shut down -- we can hit ctrl-alt-del anyway,
and gdm users can just shut down without logging in
* Mon Jul 31 2000 Nalin Dahyabhai <nalin@redhat.com>
- attempt to add i18n support
* Wed Jul 12 2000 Nalin Dahyabhai <nalin@redhat.com>
- attempt to get a usable icon for userhelper-wrap (#13616, #13768)
* Wed Jul 5 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix them right this time
* Mon Jul 3 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix verbosity problems
* Mon Jun 19 2000 Nalin Dahyabhai <nalin@redhat.com>
- strip all binaries by default
- add the name of the program being run to the userhelper dialog
- add a graphic to the userhelper-wrap package
- add a button to jump straight to nonprivileged operation when supported
* Sun Jun 18 2000 Matt Wilson <msw@redhat.com>
- rebuilt to see if we get stripped binaries
* Mon Jun 5 2000 Nalin Dahyabhai <nalin@redhat.com>
- move man pages to %%{_mandir}
* Thu Jun 1 2000 Nalin Dahyabhai <nalin@redhat.com>
- modify PAM setup to use system-auth
- bzip2 compress tarball
* Fri Mar 17 2000 Ngo Than <than@redhat.de>
- fix problem with LANG and LC_ALL
- compress source with bzip2
* Thu Mar 09 2000 Nalin Dahyabhai <nalin@redhat.com>
- fix problem parsing userhelper's -w flag with other args
* Wed Mar 08 2000 Nalin Dahyabhai <nalin@redhat.com>
- ignore read() == 0 because the child exits
* Tue Mar 07 2000 Nalin Dahyabhai <nalin@redhat.com>
- queue notice messages until we get prompts in userhelper to fix bug #8745
* Thu Feb 03 2000 Nalin Dahyabhai <nalin@redhat.com>
- free trip through the build system
* Tue Jan 11 2000 Nalin Dahyabhai <nalin@redhat.com>
- grab keyboard input focus for dialogs
* Fri Jan 07 2000 Michael K. Johnson <johnsonm@redhat.com>
- The root exploit fix created a bug that only showed up in certain
circumstances. Unfortunately, we didn't test in those circumstances...
* Mon Jan 03 2000 Michael K. Johnson <johnsonm@redhat.com>
- fixed local root exploit
* Thu Sep 30 1999 Michael K. Johnson <johnsonm@redhat.com>
- fixed old complex broken gecos parsing, replaced with simple working parsing
- can now blank fields (was broken by previous fix for something else...)
* Tue Sep 21 1999 Michael K. Johnson <johnsonm@redhat.com>
- FALLBACK/RETRY in consolehelper/userhelper
- session management fixed for consolehelper/userhelper SESSION=true
- fix memory leak and failure to close in error condition (#3614)
- fix various bugs where not all elements in userinfo got set
* Mon Sep 20 1999 Michael K. Johnson <johnsonm@redhat.com>
- set $HOME when acting as consolehelper
- rebuild against new pwdb
* Tue Sep 14 1999 Michael K. Johnson <johnsonm@redhat.com>
- honor "owner" flag to mount
- ask for passwords with username
* Tue Jul 06 1999 Bill Nottingham <notting@redhat.com>
- import pam_console wrappers from SysVinit, since they require usermode
* Mon Apr 12 1999 Michael K. Johnson <johnsonm@redhat.com>
- even better check for X availability
* Wed Apr 07 1999 Michael K. Johnson <johnsonm@redhat.com>
- better check for X availability
- center windows to make authentication easier (improve later with
transients and embedded windows where possible)
- applink -> applnk
- added a little padding, especially important when running without
a window manager, as happens when running from session manager at
logout time
* Wed Mar 31 1999 Michael K. Johnson <johnsonm@redhat.com>
- hm, need to be root...
* Fri Mar 19 1999 Michael K. Johnson <johnsonm@redhat.com>
- updated userhelper.8 man page for consolehelper capabilities
- moved from wmconfig to desktop entries
* Thu Mar 18 1999 Michael K. Johnson <johnsonm@redhat.com>
- added consolehelper
- Changed conversation architecture to follow PAM spec
* Wed Mar 17 1999 Bill Nottingham <notting@redhat.com>
- remove gdk_input_remove (causing segfaults)
* Tue Jan 12 1999 Michael K. Johnson <johnsonm@redhat.com>
- fix missing include files
* Mon Oct 12 1998 Cristian Gafton <gafton@redhat.com>
- strip binaries
- use defattr
- fix spec file ( rm -rf $(RPM_BUILD_ROOT) is a stupid thing to do ! )
* Tue Oct 06 1998 Preston Brown <pbrown@redhat.com>
- fixed so that the close button on window managers quits the program properly
* Thu Apr 16 1998 Erik Troan <ewt@redhat.com>
- use gtk-config during build
- added make archive rule to Makefile
- uses a build root
* Fri Nov 7 1997 Otto Hammersmith <otto@redhat.com>
- new version that fixed memory leak bug.
* Mon Nov 3 1997 Otto Hammersmith <otto@redhat.com>
- updated version to fix bugs
* Fri Oct 17 1997 Otto Hammersmith <otto@redhat.com>
- Wrote man pages for userpasswd and userhelper.
* Tue Oct 14 1997 Otto Hammersmith <otto@redhat.com>
- Updated the packages... now includes userpasswd for changing passwords
and newer versions of usermount and userinfo. No known bugs or
misfeatures.
- Fixed the file list...
* Mon Oct 6 1997 Otto Hammersmith <otto@redhat.com>
- Created the spec file.