From patchwork Fri May 19 11:47:53 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 6885 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4QN4py15Zkz3wlp for ; Fri, 19 May 2023 11:48:10 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4QN4pp2fMGz9Vt; Fri, 19 May 2023 11:48:02 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4QN4pn56xfz30LF; Fri, 19 May 2023 11:48:01 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4QN4pl49pXz2ydF for ; Fri, 19 May 2023 11:47:59 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4QN4pl2ZlBzhT; Fri, 19 May 2023 11:47:59 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1684496879; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=6SK3PERcs8lEycgnfoAn6ZhxYPJUoTeOpTofkbQdXlg=; b=f2WUI44pMqdSYTjbY3qDX/QZKNPyi1Yo7SVB3d3G5w3aaYBIifXLynn8y2Z4nNw8AleNjU MHFLH3CFwBMxgmDw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1684496879; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=6SK3PERcs8lEycgnfoAn6ZhxYPJUoTeOpTofkbQdXlg=; b=tJu6PGM+cE7IqF61lRAni/s37lKf8UTn+LMeOSk10uOugNaPgTuSKpzmbOnyN8iqpnQPqQ JlNQT3XoAg8Mqfbol846Brm9LeIgiaV1uOC6Sqj3Alf5DBWqudFsZPpmx2h5Xy2cdNT9AM 80eDSv2rbRY3iiBGytVyyQUEodBD29IJka871U+ukP7xzdEO9sSH/tvDiGD97Ex2sWHUAc NPUV4FwM2eiB+Z6kSLDDtIkU/RZYwiPsAamXuybrRUdxsEAnLMnaTlzF+KItSZRT3i7ljz gROwD1sE28s47n/nkD1YmESLiNTP9VLHvAEwNp8y+laEB8KspgZjpUxdUOOqdw== From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] pam: Update to version 1.5.3 Date: Fri, 19 May 2023 13:47:53 +0200 Message-Id: <20230519114753.8468-7-adolf.belka@ipfire.org> In-Reply-To: <20230519114753.8468-1-adolf.belka@ipfire.org> References: <20230519114753.8468-1-adolf.belka@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" - Update from version 1.5.2 to 1.5.3 - Update of rootfile - Changelog Release 1.5.3 * configure: added options to configure stylesheets. * configure: added --enable-logind option to use logind instead of utmp in pam_issue and pam_timestamp. * pam_modutil_getlogin: changed to use getlogin() from libc instead of parsing utmp. * Added libeconf support to pam_env and pam_shells. * Added vendor directory support to pam_access, pam_env, pam_group, pam_faillock, pam_limits, pam_namespace, pam_pwhistory, pam_sepermit, pam_shells, and pam_time. * pam_limits: changed to not fail on missing config files. * pam_pwhistory: added conf= option to specify config file location. * pam_pwhistory: added file= option to specify password history file location. * pam_shells: added shells.d support when libeconf and vendordir are enabled. * Deprecated pam_lastlog: this module is no longer built by default because it uses utmp, wtmp, btmp and lastlog, but none of them are Y2038 safe, even on 64bit architectures. pam_lastlog will be removed in one of the next releases, consider using pam_lastlog2 (from https://github.com/thkukuk/lastlog2) and/or pam_wtmpdb (from https://github.com/thkukuk/wtmpdb) instead. * Deprecated _pam_overwrite(), _pam_overwrite_n(), and _pam_drop_reply() macros provided by _pam_macros.h; the memory override performed by these macros can be optimized out by the compiler and therefore can no longer be relied upon. * Multiple minor bug fixes, portability fixes, documentation improvements, and translation updates. Signed-off-by: Adolf Belka --- config/rootfiles/common/pam | 5 ++--- lfs/pam | 6 +++--- 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/common/pam b/config/rootfiles/common/pam index 88e155f77..e25fc9c26 100644 --- a/config/rootfiles/common/pam +++ b/config/rootfiles/common/pam @@ -10,6 +10,7 @@ etc/security #etc/security/namespace.d #etc/security/namespace.init #etc/security/pam_env.conf +#etc/security/pwhistory.conf #etc/security/time.conf #lib/security #lib/security/faillock @@ -42,8 +43,6 @@ lib/security/pam_group.so lib/security/pam_issue.so #lib/security/pam_keyinit.la lib/security/pam_keyinit.so -#lib/security/pam_lastlog.la -#lib/security/pam_lastlog.so #lib/security/pam_limits.la lib/security/pam_limits.so #lib/security/pam_listfile.la @@ -187,6 +186,7 @@ usr/lib/libpamc.so.0.82.1 #usr/share/man/man5/pam.conf.5 #usr/share/man/man5/pam.d.5 #usr/share/man/man5/pam_env.conf.5 +#usr/share/man/man5/pwhistory.conf.5 #usr/share/man/man5/time.conf.5 #usr/share/man/man8/PAM.8 #usr/share/man/man8/faillock.8 @@ -205,7 +205,6 @@ usr/lib/libpamc.so.0.82.1 #usr/share/man/man8/pam_group.8 #usr/share/man/man8/pam_issue.8 #usr/share/man/man8/pam_keyinit.8 -#usr/share/man/man8/pam_lastlog.8 #usr/share/man/man8/pam_limits.8 #usr/share/man/man8/pam_listfile.8 #usr/share/man/man8/pam_localuser.8 diff --git a/lfs/pam b/lfs/pam index b810f787d..020de981c 100644 --- a/lfs/pam +++ b/lfs/pam @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team # +# Copyright (C) 2007-2023 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.5.2 +VER = 1.5.3 THISAPP = Linux-PAM-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = a835034cd239bc9377419c13dda45276e8e64a33fcf714a1957ff41112fbb6dce0be8e9773afc82458a04d54bf146a0c26117d7170521fecdc0c98184cef5f4f +$(DL_FILE)_BLAKE2 = 362c939f3afc343e6f4e78e7f6ba6f7a9c6ee0a9948bb5a4fc34cecfd29e9fa974082534d4ceedd04d8d3e34c7b3ef43d2a07ba5f41d26da04ec8330fc3790fb install : $(TARGET)