- new upstream version

- updated db4 to 4.3.29
- added module pam_tally2 with auditing support
- added manual pages for system-auth and config-util (#179584)

.cvsignore

@@ -1,3 +1,3 @@
-db-4.3.27.tar.gz
+Linux-PAM-0.99.3.0.tar.bz2
-Linux-PAM-0.99.2.1.tar.bz2
+db-4.3.29.tar.gz
-pam-redhat-0.99.2-1.tar.bz2
+pam-redhat-0.99.3-1.tar.bz2

config-util.5

@@ -0,0 +1,36 @@
+.TH SYSTEM-AUTH 5 "2006 Feb 3" "Red Hat" "Linux-PAM Manual"
+.SH NAME
+
+config-util \- Common PAM configuration file for configuration utilities
+
+.SH SYNOPSIS
+.B /etc/pam.d/config-util
+.sp 2
+.SH DESCRIPTION
+
+The purpose of this configuration file is to provide common 
+configuration file for all configuration utilities which must be run
+from the supervisor account and use the userhelper wrapper application.
+
+.sp
+The
+.BR config-util
+configuration file is included from all individual configuration
+files of such utilities with the help of the
+.BR include
+directive.
+There are not usually any other modules in the individual configuration
+files of these utilities.
+
+.sp
+It is possible for example to modify duration of the validity of the 
+authentication timestamp there. See
+.BR pam_timestamp(8)
+for details.
+
+.SH BUGS
+.sp 2
+None known.
+
+.SH "SEE ALSO"
+pam(8), config-util(5), pam_timestamp(8)

pam.spec

@@ -4,14 +4,14 @@
 %define _sysconfdir /etc
 
 %define pwdb_version 0.62
-%define db_version 4.3.27
+%define db_version 4.3.29
 %define db_conflicting_version 4.4.0
-%define pam_redhat_version 0.99.2-1
+%define pam_redhat_version 0.99.3-1
 
 Summary: A security tool which provides authentication for applications.
 Name: pam
-Version: 0.99.2.1
+Version: 0.99.3.0
-Release: 3
+Release: 1
 License: GPL or BSD
 Group: System Environment/Base
 Source0: ftp.us.kernel.org:/pub/linux/libs/pam/pre/library/Linux-PAM-%{version}.tar.bz2
@@ -22,16 +22,15 @@ Source5: other.pamd
 Source6: system-auth.pamd
 Source7: config-util.pamd
 Source8: dlopen.sh
+Source9: system-auth.5
+Source10: config-util.5
 Patch1: pam-0.99.2.1-redhat-modules.patch
 Patch21: pam-0.78-unix-hpux-aging.patch
 Patch28: pam-0.75-sgml2latex.patch
 Patch34: pam-0.99.2.1-dbpam.patch
-Patch65: pam-0.99.2.1-audit.patch
 Patch70: pam-0.99.2.1-selinux-nofail.patch
-Patch72: pam-0.99.2.1-pie.patch
+Patch72: pam-0.99.3.0-pie.patch
 Patch80: pam-0.99.2.1-selinux-drop-multiple.patch
-Patch83: pam-0.77-succif-netgroup.patch
-Patch84: pam-0.99.2.1-lastlog-fixes.patch
 
 BuildRoot: %{_tmppath}/%{name}-root
 Requires: cracklib, cracklib-dicts >= 2.8
@@ -84,14 +83,9 @@ cp $RPM_SOURCE_DIR/config-util.pamd .
 %patch21 -p1 -b .unix-hpux-aging
 %patch28 -p1 -b .doc
 %patch34 -p1 -b .dbpam
-%if %{WITH_AUDIT}
-%patch65 -p1 -b .audit
-%endif
 %patch70 -p1 -b .nofail
 %patch72 -p1 -b .pie
 %patch80 -p1 -b .drop-multiple
-%patch83 -p1 -b .succif-netgroup
-%patch84 -p0 -b .lastlog-fixes
 
 for readme in modules/pam_*/README ; do
 	cp -f ${readme} doc/txts/README.`dirname ${readme} | sed -e 's|^modules/||'`
@@ -155,9 +149,7 @@ strip $RPM_BUILD_ROOT%{_sbindir}/* ||:
 rm doc/*/*pam_pwdb*
 
 # Install man pages.
-install -d -m 755 $RPM_BUILD_ROOT%{_mandir}/man{3,5,8}
+install -m 644 %{SOURCE9} %{SOURCE10} $RPM_BUILD_ROOT%{_mandir}/man5/
-install -m 644 doc/man/*.3 $RPM_BUILD_ROOT%{_mandir}/man3/
-install -m 644 doc/man/*.8 $RPM_BUILD_ROOT%{_mandir}/man8/
 
 # Remove pam_pwdb so it won't error out
 rm -rf modules/pam_pwdb
@@ -279,6 +271,7 @@ fi
 /%{_lib}/libpam_misc.so.*
 %{_sbindir}/pam_console_apply
 %{_sbindir}/pam_tally
+%{_sbindir}/pam_tally2
 %attr(4755,root,root) %{_sbindir}/pam_timestamp_check
 %attr(4755,root,root) %{_sbindir}/unix_chkpwd
 %if %{_lib} != lib
@@ -318,6 +311,7 @@ fi
 /%{_lib}/security/pam_stress.so
 /%{_lib}/security/pam_succeed_if.so
 /%{_lib}/security/pam_tally.so
+/%{_lib}/security/pam_tally2.so
 /%{_lib}/security/pam_time.so
 /%{_lib}/security/pam_timestamp.so
 /%{_lib}/security/pam_umask.so
@@ -357,6 +351,12 @@ fi
 %{_libdir}/libpam_misc.so
 
 %changelog
+* Fri Feb  3 2006 Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
+- new upstream version
+- updated db4 to 4.3.29
+- added module pam_tally2 with auditing support
+- added manual pages for system-auth and config-util (#179584)
+
 * Tue Jan  3 2006 Tomas Mraz <tmraz@redhat.com> 0.99.2.1-3
 - remove 'initscripts' dependency (#176508)
 - update pam-redhat modules, merged patches

sources

@@ -1,3 +1,3 @@
-fcc481d52c3b80e20a328f8c0cb042bd  db-4.3.27.tar.gz
+aabed0543f57dc3e4eebbb0779daf898  Linux-PAM-0.99.3.0.tar.bz2
-9e564161c3a5f36bf0678ef227b2a897  Linux-PAM-0.99.2.1.tar.bz2
+13585a20ce32f113b8e8cdb57f52e3bb  db-4.3.29.tar.gz
-6feaf6d9f735ced6372c892db71e27a1  pam-redhat-0.99.2-1.tar.bz2
+d1a3f1190c8c9b7ce3cf27660f59a2ab  pam-redhat-0.99.3-1.tar.bz2

system-auth.5

@@ -0,0 +1,61 @@
+.TH SYSTEM-AUTH 5 "2006 Feb 3" "Red Hat" "Linux-PAM Manual"
+.SH NAME
+
+system-auth \- Common configuration file for PAMified services
+
+.SH SYNOPSIS
+.B /etc/pam.d/system-auth
+.sp 2
+.SH DESCRIPTION
+
+The purpose of this configuration file is to provide common 
+configuration file for all applications and service daemons
+calling PAM library.
+
+.sp
+The
+.BR system-auth
+configuration file is included from all individual service configuration
+files with the help of the
+.BR include
+directive.
+
+.SH NOTES
+There should be no
+.BR sufficient
+modules in the
+.BR session
+part of
+.BR system-auth
+file because individual services may add session modules after
+.BR include
+of the
+.BR system-auth
+file. Execution of these modules would be skipped if there were sufficient
+modules in
+.BR system-auth
+file.
+
+.sp
+Conversely there should not be any modules after
+.BR include
+directive in the individual service files in
+.BR auth account
+and
+.BR password
+sections otherwise they could be bypassed.
+
+.SH BUGS
+.sp 2
+None known.
+
+.SH "SEE ALSO"
+pam(8), config-util(5)
+
+The three
+.BR Linux-PAM
+Guides, for
+.BR "system administrators" ", "
+.BR "module developers" ", "
+and
+.BR "application developers" ". "