Commit Graph

188 Commits

Author SHA1 Message Date
Tomáš Mráz
4f2fe36b29 - update internal db4 to 4.5.20 version
- move setgid before setuid in pam_keyinit (#212329)
- make username check in pam_unix consistent with useradd (#212153)
2006-11-13 21:05:40 +00:00
Tomáš Mráz
ab60a42b72 - add pam_namespace option no_unmount_on_close, required for newrole 2006-09-28 13:11:14 +00:00
Tomáš Mráz
355576d558 - silence pam_succeed_if in default system-auth (#205067)
- round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)
2006-09-04 14:31:09 +00:00
Tomáš Mráz
10ddab4186 - upgrade to new upstream version, as there are mostly bugfixes except
improved documentation
- add support for session and password service for pam_access and
    pam_succeed_if
- system-auth: skip session pam_unix for crond service
2006-08-31 20:51:59 +00:00
Daniel J Walsh
e3f2d52037 - Add new setkeycreatecon call to pam_selinux to make sure keyring has
correct context
2006-08-10 20:26:54 +00:00
Tomáš Mráz
685a1895f3 - revoke keyrings properly when pam_keyinit called as root (#201048)
- pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails
    (#197748)
2006-08-10 13:34:26 +00:00
Tomáš Mráz
0b27f99e23 - revoke keyrings properly when pam_keyinit called more than once (#201048)
patch by David Howells
2006-08-02 18:08:23 +00:00
Tomáš Mráz
3e0c7af627 - don't log pam_keyinit debug messages by default (#199783) 2006-07-21 22:36:15 +00:00
Tomáš Mráz
f81d37360c - drop ainit from console.handlers (#199561) 2006-07-21 14:26:46 +00:00
Tomáš Mráz
2851cbe631 - drop ainit from console.handlers (#199561) 2006-07-21 14:22:56 +00:00
Tomáš Mráz
fce253b7c0 - don't report error in pam_selinux for nonexistent tty (#188722)
- add pam_keyinit to the default system-auth file (#198623)
2006-07-17 11:03:29 +00:00
Jesse Keating
d649923c46 bumped for rebuild 2006-07-12 07:37:04 +00:00
Tomáš Mráz
95ebf27f94 - the patch should be applied with -p0 2006-07-03 13:19:35 +00:00
Tomáš Mráz
e019bcd126 - fixed network match in pam_access (patch by Dan Yefimov) 2006-07-03 12:45:13 +00:00
Tomáš Mráz
4fea4c98d9 - namespace.init was missing from EXTRA_DIST 2006-06-30 10:06:09 +00:00
Tomáš Mráz
00eddc0974 - updated to a new upstream release
- added service as value to be matched and list matching to pam_succeed_if
2006-06-30 09:20:33 +00:00
Tomáš Mráz
85a854521e - a typo 2006-06-08 21:18:21 +00:00
Tomáš Mráz
da4d7fa8c5 - added buildrequires libtool
- fixed a few rpmlint warnings
2006-06-08 18:44:01 +00:00
Tomáš Mráz
7dffd3fb2d - updated pam_namespace with latest patch by Janak Desai
- merged pam_namespace patches
2006-06-08 14:27:54 +00:00
Tomáš Mráz
e99dd3962b - actually don't link to libssl as it is not used (#191915) 2006-05-24 09:05:18 +00:00
Tomáš Mráz
fa8c14fa63 - use md5 implementation from pam_unix in pam_namespace
- pam_namespace should call setexeccon only when selinux is enabled
2006-05-18 15:50:01 +00:00
Tomáš Mráz
63f5c77f8b - don't build hmactest in pam_timestamp so openssl-devel is not required
- add missing buildrequires (#191915)
2006-05-16 17:06:29 +00:00
Tomáš Mráz
0730695ea0 - pam_console_apply shouldn't access /var when called with -r (#191401)
- actually apply the large-uid patch
2006-05-16 16:12:18 +00:00
Tomáš Mráz
fda1b40256 - new module pam_exec 2006-05-10 14:43:55 +00:00
Tomáš Mráz
fbfca3562b - upgrade to new upstream version
- make pam_console_apply not dependent on glib
- support large uids in pam_tally, pam_tally2
2006-05-10 14:16:34 +00:00
Tomáš Mráz
5002e23046 - add namespace.init to %files 2006-05-04 11:53:08 +00:00
Tomáš Mráz
94d78f5a6d - the namespace instance init script is now in /etc/security (#190148)
- pam_namespace: added missing braces (#190026)
- pam_tally(2): never call fclose twice on the same FILE (from upstream)
2006-05-04 11:51:03 +00:00
Tomáš Mráz
4f1df63a4d - fixed console device class for irda (#189966)
- make pam_console_apply fail gracefully when a class is missing
2006-04-26 11:56:48 +00:00
Tomáš Mráz
54e490e814 - added pam_namespace module written by Janak Desai (per-user /tmp support)
- new pam-redhat modules version
2006-04-25 14:53:39 +00:00
Tomáš Mráz
48968f9a9f - added try_first_pass option to pam_cracklib
- use try_first_pass for pam_unix and pam_cracklib in system-auth (#182350)
2006-02-24 10:46:47 +00:00
Jesse Keating
222bbd42b7 bump for bug in double-long on ppc(64) 2006-02-11 04:55:08 +00:00
Jesse Keating
65811c5fcf bump for new gcc/glibc 2006-02-07 13:23:11 +00:00
Tomáš Mráz
46d6d056ab - new upstream version
- updated db4 to 4.3.29
- added module pam_tally2 with auditing support
- added manual pages for system-auth and config-util (#179584)
2006-02-03 12:41:29 +00:00
Tomáš Mráz
05cc723970 - remove 'initscripts' dependency (#176508)
- update pam-redhat modules, merged patches
2006-01-03 16:23:10 +00:00
Tomáš Mráz
9c00b5da67 - fix dangling symlinks in -devel (#175929)
- link libaudit only where necessary
- actually compile in audit support
2005-12-16 15:20:02 +00:00
Tomáš Mráz
f06eb03db8 - support netgroup matching in pam_succeed_if
- upgrade to new release
- drop pam_pwdb as it was obsolete long ago
- we don't build static libraries anymore
2005-12-15 23:47:42 +00:00
Jesse Keating
9b4988bee0 gcc update bump 2005-12-09 22:42:36 +00:00
Tomáš Mráz
a74a5d22a6 - pam_stack is deprecated - log its usage 2005-11-15 14:07:51 +00:00
Tomáš Mráz
ea087a7d8d - forgot to update requirements on audit-libs 2005-10-26 22:49:36 +00:00
Tomáš Mráz
30c2fd8c2e - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if run
as root (#168181)
- link pam_loginuid to libaudit
- support no tty in pam_access (#170467)
- updated audit patch (by Steve Grubb)
- the previous pam_selinux change was not applied properly
- pam_xauth: look for the xauth binary in multiple directories (#171164)
2005-10-26 22:27:20 +00:00
Daniel J Walsh
c678c06cf7 - Eliminate multiple in pam_selinux 2005-10-26 19:23:04 +00:00
Daniel J Walsh
dc2e11c86b - Eliminate fail over for getseuserbyname call 2005-10-18 15:41:53 +00:00
Daniel J Walsh
cf7b021d49 - Add getseuserbyname call for SELinux MCS/MLS policy 2005-10-13 21:36:33 +00:00
Daniel J Walsh
97c6e8fa55 - Add getseuserbyname call for SELinux MCS/MLS policy 2005-10-13 21:10:48 +00:00
Tomáš Mráz
9f1545ee2e - pam_console manpage fixes (#169373) 2005-10-04 13:46:58 +00:00
Tomáš Mráz
84f70fb55d - don't include ps and pdf docs (#168823)
- new common config file for configuration utilities
- remove glib2 dependency (#166979)
2005-09-30 13:52:28 +00:00
Tomáš Mráz
5cac4c86fa - pam_unix: always honor nis flag on password change (by Aaron Hope) 2005-09-20 13:42:45 +00:00
Tomáš Mráz
6f66f1e5c6 - process limit values other than RLIMIT_NICE correctly (#168790) 2005-09-20 12:34:48 +00:00
Tomáš Mráz
efa997e610 - don't fail in audit code when audit is not compiled in on the newest
kernels (#166422)
2005-08-24 09:15:09 +00:00
Tomáš Mráz
bc4cc2dea1 - add option to pam_loginuid to require auditd 2005-08-01 09:14:07 +00:00