aboutsummaryrefslogtreecommitdiff
path: root/debian/local
Commit message (Collapse)AuthorAgeFilesLines
* Add new common-session-* templates to pam-auth-update.Sam Hartman2024-01-151-0/+2
|
* Enable usergroups in pam_umask by defaultSam Hartman2024-01-152-0/+4
|\ | | | | | | Also, include pam_umask in common-session.
| * Use pam_umask.so in common-session{-noninteractive}Andreas Henriksson2020-12-312-0/+4
| | | | | | | | | | | | | | | | This resets the umask when creating a new session to the default value instead of possibly inheriting the umask, eg. when using 'su -'. Closes: #711104
* | pam-auth-update: Session-Interactive-Only set to anything other thanSam Hartman2023-10-271-1/+1
| | | | | | | | yes counts as undefined/no, thanks Lucas Nussbaum, Closes: #982309
* | Fix pam-auth-update --disable logic error, Closes: #1039873Sam Hartman2023-08-161-1/+3
| |
* | pam-auth-update: --enable and --disableSam Hartman2023-01-042-4/+24
| | | | | | | | | | | | | | | | | | | | * Implement --disable option * Process --enable before we decide whether @enabled is empty, so that if we are called with --enable and all previously enabled profiles have disappeared, we do not need to prompt * Document --disable and update synopsis
* | pam-auth-update: read config after processing cli arguments to not ignore ↵Johannes Schauer Marin Rodrigues2023-01-031-10/+10
| | | | | | | | --root for $inputdir
* | remove version references for ancient versions of packagesMarc Haber2022-02-061-3/+3
| |
* | More whitespaceSteve Langasek2021-10-261-2/+2
| |
* | pam-auth-update: support DPKG_ROOTSam Hartman2021-09-151-0/+5
| | | | | | | | | | | | | | | | Patch from Johannes 'josch' Schauer to implement a --root argument to pam-auth-update and to use it in the call in libpam-runtime. * debian/local/pam-auth-update: support --root * debian/libpam-runtime.postinst: call with --root $DPKG_ROOT
* | Document that common-session is only for interactive sessionsSam Hartman2021-09-152-2/+2
| |
* | Commit common-password md5sum introduced in 1.4.0-4Sam Hartman2021-09-151-0/+1
| |
* | debian/local/pam-auth-update: detect pam_tallySam Hartman2021-09-151-0/+7
| | | | | | | | | | | | Create a mechanism for tracking modules that have been removed. Disable profiles containing those modules so they do not appear in the list of available modules. Use this mechanism for pam_tally.
* | debian/local/common-password: Document switch to yescryptSam Hartman2021-09-151-8/+8
|/
* Import Debian changes 1.1.8-3.8Niels Thykier2019-01-081-10/+13
| | | | | | | | | | | | | | | | | | | | | pam (1.1.8-3.8) unstable; urgency=medium * Non-maintainer upload. * Set Rules-Requires-Root to binary-targets as pam relies on chgrp in debian/rules. * Update pam-auth-update to detect write errors and properly fail when that happens. (Closes: #880501) * Remove Roger Leigh from uploaders as he has restired from Debian. (Closes: #869348) * Reduce priority of libpam0g to optional. * Rebuild with a recent version of dpkg-source, which ensures that the Build-Depends are correct in the .dsc file. (Closes: #890602) * Apply patch from Felix Lechner to make pam-auth-update ignore editor backup files. (Closes: #519361) * Apply update to Brazilian Portuguese translations of the debconf templates. Thanks to Adriano Rafael Gomes. (Closes: #799417)
* Import Debian changes 1.1.8-3.7Timo Aaltonen2019-01-082-1/+16
| | | | | | | | | | pam (1.1.8-3.7) unstable; urgency=medium * Non-maintainer upload. * libpam-modules: Added a config for pam_mkhomedir, disabled by default. (Closes: #568577) * pam-auth-update: Add support for --enable option which is useful for enabling non-default configs without prompting the admin. (LP: #1192719)
* Import Debian changes 1.1.8-3.5Adam Borowski2019-01-081-1/+1
| | | | | | | | | pam (1.1.8-3.5) unstable; urgency=medium * Non-maintainer upload. * Build-Depend on libfl-dev:native as well, for cross builds. Re-closes: #846459 * Fix "Unescaped left brace in regex" with Perl 5.22. Closes: #810873
* Import Debian changes 1.1.8-3.3Laurent Bigonville2019-01-081-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pam (1.1.8-3.3) unstable; urgency=low * Non-maintainer upload. [ Steve Langasek ] * Updated Swedish translation to correct a typo, thanks to Anders Jonsson and Martin Bagge. Closes: #743875 * Updated Turkish translation, thanks to Mert Dirik <mertdirik@gmail.com>. (closes: #756756) * d/applied-patches/pam-limits-nofile-fd-setsize-cap: cap the default soft nofile limit read from pid 1 to FD_SETSIZE. Thanks to Robie Basak <robie.basak@ubuntu.com> for the patch. Closes: #783105. * Acknowledge security NMU. * pam-auth-update: don't mishandle trailing whitespace in profiles. LP: #1487103. [ Laurent Bigonville ] * debian/control: Fix Vcs-* and Homepage fields (Closes: #752343) * debian/watch: Update watch file and point it to http://www.linux-pam.org * debian/patches-applied/pam_namespace_fix_bashism.patch: Fix bashism in namespace.init script (Closes: #624842) * debian/control: Build-depends against debhelper (>= 9) to match the defined debhelper compatibility * Rename the cve-2011-4708.patch to cve-2010-4708.patch to match reality, thanks to Jakub Wilk <jwilk@debian.org> for noticing (Closes: #761594) * debian/control: Bump Standards-Version to 3.9.8 (no further changes) * debian/libpam-doc.doc-base.applications-guide: Fix spelling * debian/libpam0g-dev.examples: Do not use shell brace expansion * debian/patches-applied/pam-loginuid-in-containers: Updated with the version from Ubuntu, this should fix logins in containers (Closes: #726661) * debian/patches-applied/update-motd: Updated with the version from Ubuntu: use /run/motd.dynamic instead of /var/run/motd, nothing in the archive uses the later (Closes: #743286) * debian/patches-applied/make_documentation_reproducible.patch: Make the build reproducible, removes differences when building with different locale values (Closes: #792127)
* Disable libaudit for stage1 bootstrap.Steve Langasek2019-01-081-0/+0
|
* Fix pam-auth-update handling of trailing blank lines in the fields ofSteve Langasek2019-01-081-1/+1
| | | | profiles. LP: #1160288.
* debian/libpam-runtime.templates, debian/local/pam-auth-update: add aSteve Langasek2019-01-081-0/+3
| | | | | new 'title' template, so pam-auth-update doesn't give a blank title when called outside of a maintainer script. LP: #882794.
* debian/local/pam-auth-update: sort additional module options beforeSteve Langasek2019-01-081-1/+1
| | | | | | writing them out, so that we don't wind up with a different config file on every invocation. Thanks to Jim Paris <jim@jtan.com> for the patch. Closes: #594123.
* debian/local/pam-auth-update: Don't try to pass embedded newlines toSteve Langasek2019-01-081-2/+2
| | | | debconf; backslash-escape them instead and use CAPB escape.
* pam-auth-update: fix a bug in our handling of module options when theSteve Langasek2019-01-081-1/+1
| | | | | module name contains digits, caused by a buggy regexp. :/ Partially addresses LP #369575.
* debian/local/pam-auth-update: only reset the seen flag on the templateSteve Langasek2019-01-081-7/+18
| | | | | | when there's new information; this avoids reprompting users for the same information on upgrade, regardless of the debconf priority used. Closes: #544805.
* record the new md5sum for common-passwordSteve Langasek2019-01-082-1/+3
|
* debian/local/common-password, debian/pam-configs/unix: switch from "md5"Kees Cook2019-01-081-2/+2
| | | | to "sha512" as password crypt default.
* fix the PAM mini-policy to not tell app maintainers that they don't needSteve Langasek2019-01-081-5/+10
| | | | to depend on libpam-modules if they reference modules from there.
* consistent capitalizationSteve Langasek2019-01-081-1/+1
|
* drop references to pam_stack, which is long deadSteve Langasek2019-01-081-10/+0
|
* proofread / reflow the mini-policySteve Langasek2019-01-081-37/+37
|
* document common-session-noninteractive in the Debian PAM policySteve Langasek2019-01-081-5/+20
|
* add a comment to the md5sum so we know what version it's fromSteve Langasek2019-01-081-1/+1
|
* debian/local/pam-auth-update: prune md5sums for unsupported upgradeSteve Langasek2019-01-081-2/+0
| | | | paths (intrepid pre-release -> karmic/lenny)
* debian/local/common-session-noninteractive{,.md5sums},Steve Langasek2019-01-083-4/+45
| | | | | | | debian/local/pam-auth-update: split out a session-noninteractive include file, so that we can at last distinguish between interactive and non-interactive PAM sessions at a policy level. Closes: #169930, LP: #287715.
* debian/local/common-{auth,account,session,password}.md5sums: documentSteve Langasek2019-01-084-0/+6
| | | | the known md5sums for the new managed files.
* When no profiles are chosen in pam-auth-update, throw an error messageSteve Langasek2019-01-081-1/+5
| | | | | and prompt again instead of letting the user end up with an insecure system. This introduces a new debconf template. Closes: #519927.
* pam-auth-update: set the umask, so we don't accidentally markSteve Langasek2019-01-081-0/+2
|\ | | | | | | | | /etc/pam.d/common-* unreadable. Thanks to Martin Krafft for catching. Closes: #518042.
| * pam-auth-update: set the umask, so we don't accidentally mark ↵Steve Langasek2019-01-031-0/+2
| | | | | | | | /etc/pam.d/common-* unreadable.
* | pam-auth-update: swap out known md5sums from intrepid pre-release Steve Langasek2019-01-081-1/+2
|/ | | | versions with the md5sums from the released intrepid version
* also update the md5sums in response to the template version bumps...Steve Langasek2019-01-031-4/+4
|
* bump the version number for what should really be the last time: no more pamSteve Langasek2019-01-034-4/+4
| | | | uploads are anticipated before the lenny release (again).
* factor out the duplicate code used for returning the lines for a given moduleSteve Langasek2019-01-031-26/+14
|
* trim leading whitespace from multiline fields when parsing PAM profilesSteve Langasek2019-01-031-0/+1
|
* ignore removed profiles when detecting an empty setGreg Price2019-01-031-2/+4
|
* If /var/lib/pam/seen is absent, handle it the same as if the file wereGreg Price2019-01-031-16/+20
| | | | | present but empty.
* skip over the 'deny' in our no-primary-modules caseSteve Langasek2019-01-031-2/+2
|
* get rid of the double pam_permit in common-password, the stack will handleSteve Langasek2019-01-032-3/+2
| | | | this correctly now
* get rid of the double pam_permit in common-session, the stack will handle thisSteve Langasek2019-01-032-3/+2
| | | | right now
* tune the whitespaceSteve Langasek2019-01-031-2/+2
|
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-15 03:43:21 +0000