mbox

pam: Update to 1.2.1

Message ID 1447001446-9252-1-git-send-email-matthias.fischer@ipfire.org
State Superseded
Headers

Message

Matthias Fischer Nov. 9, 2015, 3:50 a.m. UTC 
  pam: Update to 1.2.1

Changes: https://git.fedorahosted.org/cgit/linux-pam.git/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
 config/rootfiles/common/pam | 26 ++++++++++++++++++++------
 lfs/pam                     | 12 ++++++------
 2 files changed, 26 insertions(+), 12 deletions(-)

Comments

Michael Tremer Nov. 10, 2015, 5:37 a.m. UTC | #1 
Hi,

the patch looks good.

I wonder if you have tested this on a clean installation. Because of
the many so-bumps, the new libraries would probably not be used in an
upgraded system and that won't find us the bugs :)

Best,
-Michael

On Sun, 2015-11-08 at 17:50 +0100, Matthias Fischer wrote:
> pam: Update to 1.2.1
> 
> Changes: https://git.fedorahosted.org/cgit/linux-pam.git/
> 
> Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
> ---
>  config/rootfiles/common/pam | 26 ++++++++++++++++++++------
>  lfs/pam                     | 12 ++++++------
>  2 files changed, 26 insertions(+), 12 deletions(-)
> 
> diff --git a/config/rootfiles/common/pam
> b/config/rootfiles/common/pam
> index 3335a54..e7e1d3a 100644
> --- a/config/rootfiles/common/pam
> +++ b/config/rootfiles/common/pam
> @@ -17,12 +17,13 @@ etc/security
>  #etc/security/pam_env.conf
>  #etc/security/time.conf
>  lib/libpam.so.0
> -lib/libpam.so.0.81.10
> +lib/libpam.so.0.84.1
>  lib/libpam_misc.so.0
> -lib/libpam_misc.so.0.81.3
> +lib/libpam_misc.so.0.82.1
>  lib/libpamc.so.0
> -lib/libpamc.so.0.81.0
> +lib/libpamc.so.0.82.1
>  #lib/security
> +lib/security/mkhomedir_helper
>  #lib/security/pam_access.la
>  lib/security/pam_access.so
>  #lib/security/pam_debug.la
> @@ -71,6 +72,8 @@ lib/security/pam_mail.so
>  lib/security/pam_nologin.so
>  #lib/security/pam_permit.la
>  lib/security/pam_permit.so
> +lib/security/pam_pwhistory.la
> +#lib/security/pam_pwhistory.so
>  #lib/security/pam_rhosts.la
>  lib/security/pam_rhosts.so
>  #lib/security/pam_rootok.la
> @@ -85,8 +88,14 @@ lib/security/pam_shells.so
>  #lib/security/pam_succeed_if.so
>  #lib/security/pam_tally.la
>  #lib/security/pam_tally.so
> +#lib/security/pam_tally2
> +#lib/security/pam_tally2.la
> +#lib/security/pam_tally2.so
>  #lib/security/pam_time.la
>  #lib/security/pam_time.so
> +#lib/security/pam_timestamp.la
> +#lib/security/pam_timestamp.so
> +#lib/security/pam_timestamp_check
>  #lib/security/pam_umask.la
>  #lib/security/pam_umask.so
>  #lib/security/pam_unix.la
> @@ -133,6 +142,9 @@ usr/lib/libpamc.so
>  #usr/share/man/man3/pam_end.3
>  #usr/share/man/man3/pam_error.3
>  #usr/share/man/man3/pam_fail_delay.3
> +#usr/share/man/man3/pam_get_authtok.3
> +#usr/share/man/man3/pam_get_authtok_noverify.3
> +#usr/share/man/man3/pam_get_authtok_verify.3
>  #usr/share/man/man3/pam_get_data.3
>  #usr/share/man/man3/pam_get_item.3
>  #usr/share/man/man3/pam_get_user.3
> @@ -171,9 +183,9 @@ usr/lib/libpamc.so
>  #usr/share/man/man5/pam_env.conf.5
>  #usr/share/man/man5/time.conf.5
>  #usr/share/man/man8/PAM.8
> +#usr/share/man/man8/mkhomedir_helper.8
>  #usr/share/man/man8/pam.8
>  #usr/share/man/man8/pam_access.8
> -#usr/share/man/man8/pam_cracklib.8
>  #usr/share/man/man8/pam_debug.8
>  #usr/share/man/man8/pam_deny.8
>  #usr/share/man/man8/pam_echo.8
> @@ -196,14 +208,17 @@ usr/lib/libpamc.so
>  #usr/share/man/man8/pam_namespace.8
>  #usr/share/man/man8/pam_nologin.8
>  #usr/share/man/man8/pam_permit.8
> +#usr/share/man/man8/pam_pwhistory.8
>  #usr/share/man/man8/pam_rhosts.8
>  #usr/share/man/man8/pam_rootok.8
>  #usr/share/man/man8/pam_securetty.8
>  #usr/share/man/man8/pam_shells.8
>  #usr/share/man/man8/pam_succeed_if.8
>  #usr/share/man/man8/pam_tally.8
> +#usr/share/man/man8/pam_tally2.8
>  #usr/share/man/man8/pam_time.8
> -#usr/share/man/man8/pam_tty_audit.8
> +#usr/share/man/man8/pam_timestamp.8
> +#usr/share/man/man8/pam_timestamp_check.8
>  #usr/share/man/man8/pam_umask.8
>  #usr/share/man/man8/pam_unix.8
>  #usr/share/man/man8/pam_userdb.8
> @@ -212,4 +227,3 @@ usr/lib/libpamc.so
>  #usr/share/man/man8/pam_xauth.8
>  #usr/share/man/man8/unix_chkpwd.8
>  #usr/share/man/man8/unix_update.8
> -#var/run/sepermit
> diff --git a/lfs/pam b/lfs/pam
> index 75557a4..606e65c 100644
> --- a/lfs/pam
> +++ b/lfs/pam
> @@ -1,7 +1,7 @@
>  ####################################################################
> ###########
>  #                                                                   
>           #
>  # IPFire.org - A linux based firewall                               
>           #
> -# Copyright (C) 2007  Michael Tremer & Christian Schmidt            
>           #
> +# Copyright (C) 2015  Michael Tremer & Christian Schmidt            
>           #
>  #                                                                   
>           #
>  # This program is free software: you can redistribute it and/or
> modify        #
>  # it under the terms of the GNU General Public License as published
> by        #
> @@ -24,7 +24,7 @@
>  
>  include Config
>  
> -VER        = 0.99.10.0
> +VER        = 1.2.1
>  
>  THISAPP    = Linux-PAM-$(VER)
>  DL_FILE    = $(THISAPP).tar.bz2
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>  
>  $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>  
> -$(DL_FILE)_MD5 = be4dd1d34ac5933408e13e48f3eb710a
> +$(DL_FILE)_MD5 = 9dc53067556d2dd567808fd509519dd6
>  
>  install : $(TARGET)
>  
> @@ -80,9 +80,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
>  	chmod -v 4755 /lib/security/unix_chkpwd
>  	mv -v /lib/security/pam_tally /sbin
>  	mv -v /usr/lib/libpam*.so.0* /lib
> -	ln -v -sf ../../lib/libpam.so.0.81.10 /usr/lib/libpam.so
> -	ln -v -sf ../../lib/libpamc.so.0.81.0 /usr/lib/libpamc.so
> -	ln -v -sf ../../lib/libpam_misc.so.0.81.3
> /usr/lib/libpam_misc.so
> +	ln -v -sf ../../lib/libpam.so.0.84.1 /usr/lib/libpam.so
> +	ln -v -sf ../../lib/libpamc.so.0.82.1 /usr/lib/libpamc.so
> +	ln -v -sf ../../lib/libpam_misc.so.0.82.1
> /usr/lib/libpam_misc.so
>  	-mkdir -p /etc/pam.d
>  	cp $(DIR_SRC)/config/pam/* /etc/pam.d
>  	chown root.root -R /etc/pam.d
Matthias Fischer Nov. 15, 2015, 11:07 p.m. UTC | #2 
On 09.11.2015 19:37, Michael Tremer wrote:
> I wonder if you have tested this on a clean installation. Because of
> the many so-bumps, the new libraries would probably not be used in an
> upgraded system and that won't find us the bugs

Hi Michael,

You're probably right - sorry if I was a bit too fast with pushing this 
update! I'm having a tough time with a lot of work. "So much to do, but 
not much time for it..." ;-)

In in the meantime I ran a few tests, maybe this helps:

1. Installed on testmachine (an old(!) Core 92), no noticeable problems 
during/after reboot:

Deleted old pam-libraries, restarted, no noticeable problems either:

***SNIP***
...
[root@ipfiretest ~]# ps ax|grep pam
1527 ? Ss 0:00 /usr/sbin/saslauthd -n 2 -a pam
1528 ? S 0:00 /usr/sbin/saslauthd -n 2 -a pam
2463 pts/0 R+ 0:00 grep pam
...
***SNAP***

Started / stopped / restarted various services without problems.

2. Clean install on testmachine: (Core 96, "Development Build: 
pam/eeb83132-dirty", compiled 15.11.2015, with pam 1.2.1), no 
eye-catching events.

What else could I test?

Best,
Matthias
Michael Tremer Nov. 18, 2015, 11:36 p.m. UTC | #3 
Hi,

On Sun, 2015-11-15 at 13:07 +0100, Matthias Fischer wrote:
> On 09.11.2015 19:37, Michael Tremer wrote:
> > I wonder if you have tested this on a clean installation. Because
> > of
> > the many so-bumps, the new libraries would probably not be used in
> > an
> > upgraded system and that won't find us the bugs
> 
> Hi Michael,
> 
> You're probably right - sorry if I was a bit too fast with pushing
> this 
> update! I'm having a tough time with a lot of work. "So much to do,
> but 
> not much time for it..." ;-)
> 
> In in the meantime I ran a few tests, maybe this helps:
> 
> 1. Installed on testmachine (an old(!) Core 92), no noticeable
> problems 
> during/after reboot:
> 
> Deleted old pam-libraries, restarted, no noticeable problems either:
> 
> ***SNIP***
> ...
> [root@ipfiretest ~]# ps ax|grep pam
> 1527 ? Ss 0:00 /usr/sbin/saslauthd -n 2 -a pam
> 1528 ? S 0:00 /usr/sbin/saslauthd -n 2 -a pam
> 2463 pts/0 R+ 0:00 grep pam
> ...
> ***SNAP***
> 
> Started / stopped / restarted various services without problems.
> 
> 2. Clean install on testmachine: (Core 96, "Development Build: 
> pam/eeb83132-dirty", compiled 15.11.2015, with pam 1.2.1), no 
> eye-catching events.
> 
> What else could I test?

as far as I understand, this is working for you? In that case, I guess
we should merge the patch..

-Michael

> 
> Best,
> Matthias
Matthias Fischer Nov. 20, 2015, 4:33 a.m. UTC | #4 
Hi,

On 18.11.2015 13:36, Michael Tremer wrote:
> as far as I understand, this is working for you?  In that case, I guess
> we should merge the patch..

Nevertheless, I think it would be nice if someone else could test this, 
too: ;-)

http://people.ipfire.org/~mfischer/pam-1.2.1-for-ipfire.tar.gz

MD5SUM: 18EC666C6515C2536F6BFC93B200081D

Copy to root, install with 'tar xvf pam-1.2.1-for-ipfire.tar.gz -C /'

Regards,
Matthias
Michael Tremer Dec. 2, 2015, 10:10 a.m. UTC | #5 
Any feedback from anyone, yet?

On Thu, 2015-11-19 at 18:33 +0100, Matthias Fischer wrote:
> Hi,
> 
> On 18.11.2015 13:36, Michael Tremer wrote:
> > as far as I understand, this is working for you?  In that case, I
> > guess
> > we should merge the patch..
> 
> Nevertheless, I think it would be nice if someone else could test
> this, 
> too: ;-)
> 
> http://people.ipfire.org/~mfischer/pam-1.2.1-for-ipfire.tar.gz
> 
> MD5SUM: 18EC666C6515C2536F6BFC93B200081D
> 
> Copy to root, install with 'tar xvf pam-1.2.1-for-ipfire.tar.gz -C /'
> 
> Regards,
> Matthias
Matthias Fischer Dec. 3, 2015, 5:50 a.m. UTC | #6 
Hi,

been a bit silent because of too much work in Cologne mainly with the 
continuously growing refugee camps (sorry, but we're extremely busy 
these days) - I didn't here anything, too...

Best,
Matthias

On 02.12.2015 00:10, Michael Tremer wrote:
> Any feedback from anyone, yet?
>
> On Thu, 2015-11-19 at 18:33 +0100, Matthias Fischer wrote:
>> Hi,
>>
>> On 18.11.2015 13:36, Michael Tremer wrote:
>> > as far as I understand, this is working for you?  In that case, I
>> > guess
>> > we should merge the patch..
>>
>> Nevertheless, I think it would be nice if someone else could test
>> this,
>> too: ;-)
>>
>> http://people.ipfire.org/~mfischer/pam-1.2.1-for-ipfire.tar.gz
>>
>> MD5SUM: 18EC666C6515C2536F6BFC93B200081D
>>
>> Copy to root, install with 'tar xvf pam-1.2.1-for-ipfire.tar.gz -C /'
>>
>> Regards,
>> Matthias
>
Matthias Fischer Dec. 6, 2015, 9:27 p.m. UTC | #7 
Hi,

On 02.12.2015 00:10, Michael Tremer wrote:
> Any feedback from anyone, yet?

No.

Last feedback from me:

I updated the following components:

pam	=> 1.2.1
rrdtool	=> 1.5.5
clamav	=> 0.99
Fix for libnet 1.1.6 (Bug #10996)

Several reboots, to make sure things are running.

No seen problems until now...

Best,
Matthias

> On Thu, 2015-11-19 at 18:33 +0100, Matthias Fischer wrote:
>> Hi,
>>
>> On 18.11.2015 13:36, Michael Tremer wrote:
>> > as far as I understand, this is working for you?  In that case, I
>> > guess
>> > we should merge the patch..
>>
>> Nevertheless, I think it would be nice if someone else could test
>> this,
>> too: ;-)
>>
>> http://people.ipfire.org/~mfischer/pam-1.2.1-for-ipfire.tar.gz
>>
>> MD5SUM: 18EC666C6515C2536F6BFC93B200081D
>>
>> Copy to root, install with 'tar xvf pam-1.2.1-for-ipfire.tar.gz -C /'
>>
>> Regards,
>> Matthias
>
Michael Tremer Dec. 12, 2015, 5:50 a.m. UTC | #8 
Hi,

On Sun, 2015-12-06 at 11:27 +0100, Matthias Fischer wrote:
> Hi,
> 
> On 02.12.2015 00:10, Michael Tremer wrote:
> > Any feedback from anyone, yet?
> 
> No.
> 
> Last feedback from me:
> 
> I updated the following components:
> 
> pam	=> 1.2.1
> rrdtool	=> 1.5.5
> clamav	=> 0.99
> Fix for libnet 1.1.6 (Bug #10996)

All but PAM is merged so far.

Should we wait for more feedback? I am a bit disappointed that it is so
silent on this list.

Best,
-Michael

> 
> Several reboots, to make sure things are running.
> 
> No seen problems until now...
> 
> Best,
> Matthias
> 
> > On Thu, 2015-11-19 at 18:33 +0100, Matthias Fischer wrote:
> > > Hi,
> > > 
> > > On 18.11.2015 13:36, Michael Tremer wrote:
> > > > as far as I understand, this is working for you?  In that case,
> > > > I
> > > > guess
> > > > we should merge the patch..
> > > 
> > > Nevertheless, I think it would be nice if someone else could test
> > > this,
> > > too: ;-)
> > > 
> > > http://people.ipfire.org/~mfischer/pam-1.2.1-for-ipfire.tar.gz
> > > 
> > > MD5SUM: 18EC666C6515C2536F6BFC93B200081D
> > > 
> > > Copy to root, install with 'tar xvf pam-1.2.1-for-ipfire.tar.gz 
> > > -C /'
> > > 
> > > Regards,
> > > Matthias
> > 
>
Matthias Fischer Dec. 12, 2015, 8:46 a.m. UTC | #9 
Hi Michael,

On 11.12.2015 19:50, Michael Tremer wrote:
>> >On 02.12.2015 00:10, Michael Tremer wrote:
>>> > >Any feedback from anyone, yet?
>> >
>> >No.
>> >
>> >Last feedback from me:
>> >
>> >I updated the following components:
>> >
>> >pam	=> 1.2.1
>> >rrdtool	=> 1.5.5
>> >clamav	=> 0.99
>> >Fix for libnet 1.1.6 (Bug #10996)
> All but PAM is merged so far.

Regarding the missing sources - I can't explain that, sorry. As far as I 
know, I made an upload for each new source. Next time I'll look twice!

> Should we wait for more feedback? I am a bit disappointed that it is so
> silent on this list.

If you'd like to wait: no problem for me! I'm also a bit ~bewildered, 
but nevertheless...

Best,
Matthias