diff options
| -rw-r--r-- | debian/README.debian | 25 | ||||
| -rw-r--r-- | debian/changelog | 3 |
2 files changed, 4 insertions, 24 deletions
diff --git a/debian/README.debian b/debian/README.debian index 276cc55e..b5360492 100644 --- a/debian/README.debian +++ b/debian/README.debian @@ -1,4 +1,4 @@ -PAM for DEBIAN +PAM for Debian -------------- PAM (Pluggable Authentication Modules) provides system administrators with a @@ -11,26 +11,3 @@ Application Developers' Guide" and "The Linux-PAM Module Writers' Guide". The Debian default configuration is to emulate the old UNIX authentication. -The Debian PAM packages live at svn://svn.debian.org/pkg-pam/. The -current version is in the trunk directory; previous versions live in -the tags directory. - -Changes Since Debian 3.0 ------------------------- - -The pam_securetty module used to prompt for a password when it was -going to fail access. This Debian-specific patch defeats one of the -key uses of this module: to deny access to privileged accounts soon -enough in the PAM stack that the password is never requested and is -not compromised over insecure network links. If you want to ask for -the password use required not requisite in your PAM config. - -Previously, pam_rhosts allowed the .rhosts file to be a symlink. This -was a debian specific change that has been dropped because it is not -the upstream behavior nor is it the documented behavior of ruserok(3). - -Similarly, pam_listfile used to allow the user file to be a symlink. -This is no longer allowed because upstream seems to be against the -change. Please see discussion started by Sam Hartman on -pam-list@redhat.com during the May 2002 time frame. - diff --git a/debian/changelog b/debian/changelog index 70daac23..6869e5bb 100644 --- a/debian/changelog +++ b/debian/changelog @@ -10,6 +10,9 @@ pam (1.1.0-3) UNRELEASED; urgency=low * Drop ./configure options that are no-ops * Drop the /lib/security/pam_unix_*.so symlinks, which have been deprecated now for 10 years and are not used at all if pam-auth-update is in play. + * Drop stale content from README.debian: some of this should have been in + NEWS.Debian instead (but is so old it's not worth putting it there now), + some of it is obsolete by the change in package VCS. -- Steve Langasek <vorlon@debian.org> Tue, 01 Sep 2009 22:23:47 -0700 |