From patchwork Thu Jan 29 11:05:29 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 9465 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4f1xC63GVRz3xnK for ; Thu, 29 Jan 2026 11:05:54 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E8" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4f1xC30F67z5kN for ; Thu, 29 Jan 2026 11:05:51 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4f1xBz3NMZz34RQ for ; Thu, 29 Jan 2026 11:05:47 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4f1xBr2ZPXz33tk for ; Thu, 29 Jan 2026 11:05:40 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4f1xBq6mtWz2Vt; Thu, 29 Jan 2026 11:05:39 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1769684740; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SJv4Zyo5MwypmBneIBjPoaEPMDOkkrkxunOVbz+1QmI=; b=f93oNZpWhENIMOy9zm20u10Grd43wiQMXX6PJ8cOh1iTv5m6NQqHCfvyNE1pjBX9nfi2XH ZMganUQHAsLhemAA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1769684740; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SJv4Zyo5MwypmBneIBjPoaEPMDOkkrkxunOVbz+1QmI=; b=i3uN/iTg5AnsVsAkAgzhUo+dzYg4TQJcKCW0nfV40VStTA77qiBhKoR0quj9/n82Pk+MzF PPQvDSHBgL2NOKfYQNZySpsL1AEYrBj3Mn3QARIxRCUy22UioQUlMgmpnjtTlwVcZ2yyQ7 Kdni6J9vfXm+OIf36Dvgu5iuRXiVHMfS9HRiARk8oNogFWL5aaFdv0hpmA1S247Qgzqvvk 2xte2UeUOvkGCXzN/PCTS/2u8SsyRyD+N4YpKA1pwfM2QNDBSWRdaZdVdcoeGg650ZsFr8 tXMjBslcwJZ1iYhSvmZ5CMB/rEgM+2FXgOmi2o/1vDcoFTcHRpZ4jqnRZGFjiw== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] pam: Update to version 1.7.2 Date: Thu, 29 Jan 2026 12:05:29 +0100 Message-ID: <20260129110532.61228-14-adolf.belka@ipfire.org> In-Reply-To: <20260129110532.61228-1-adolf.belka@ipfire.org> References: <20260129110532.61228-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 1.7.1 to 1.7.2 - Update of rootfile - Changelog 1.7.2 * build: enabled vendordir by default. * pam_access: fixed stack overflow with huge configuration files. * pam_env: enhanced error diagnostics when ignoring backslash at end of string. * pam_faillock: skip clearing user's failed attempt when auth stack is not run. * pam_mkhomedir: added support for vendordir skeleton directory. * pam_unix: added support for pwaccessd. * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK. * pam_unix: fixed password expiration warnings for large day values. * pam_unix: hardened temporary file handling. * Multiple minor bug fixes, build fixes, portability fixes, documentation improvements, and translation updates. Signed-off-by: Adolf Belka --- config/rootfiles/common/pam | 22 ++++++++++++---------- lfs/pam | 6 +++--- 2 files changed, 15 insertions(+), 13 deletions(-) diff --git a/config/rootfiles/common/pam b/config/rootfiles/common/pam index b98913526..18826b21e 100644 --- a/config/rootfiles/common/pam +++ b/config/rootfiles/common/pam @@ -1,17 +1,7 @@ -#etc/environment etc/pam.d etc/security -#etc/security/access.conf -#etc/security/faillock.conf -#etc/security/group.conf -#etc/security/limits.conf #etc/security/limits.d -#etc/security/namespace.conf #etc/security/namespace.d -#etc/security/namespace.init -#etc/security/pam_env.conf -#etc/security/pwhistory.conf -#etc/security/time.conf #lib/security #lib/security/faillock #lib/security/mkhomedir_helper @@ -238,3 +228,15 @@ usr/lib/libpamc.so.0.82.1 #usr/share/locale/zu #usr/share/locale/zu/LC_MESSAGES #usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo +#usr/share/pam +#usr/share/pam/environment +#usr/share/pam/security +#usr/share/pam/security/access.conf +#usr/share/pam/security/faillock.conf +#usr/share/pam/security/group.conf +#usr/share/pam/security/limits.conf +#usr/share/pam/security/namespace.conf +#usr/share/pam/security/namespace.init +#usr/share/pam/security/pam_env.conf +#usr/share/pam/security/pwhistory.conf +#usr/share/pam/security/time.conf diff --git a/lfs/pam b/lfs/pam index 577d40aa1..e2d635480 100644 --- a/lfs/pam +++ b/lfs/pam @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2025 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.7.1 +VER = 1.7.2 THISAPP = Linux-PAM-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0a64d7dbf6bb7e3d2c36ea1f29c3217d3e43a1cc0ba8adf2ee8a117946a53bd26634ebd70ff3b99a72f7373df6694ee054dc7eddab04e43bbc8f5b0e9e56b3bc +$(DL_FILE)_BLAKE2 = d7ebfac4393af3f889fef973946f1e6d60f118f2e048448708c5fdf0ef7fa7780945cda3b0abf6e0e2e15bbc2dd23be52389efabd00647381b3bc971f1aadcd8 install : $(TARGET)