Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Jeremy Blosser (0de2a4ccfd61dff951248832d22a5eba45f7be4b)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Jeremy Blosser <scm AT mail.sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Jeremy Blosser (0de2a4ccfd61dff951248832d22a5eba45f7be4b)
  • Date: Thu, 8 Feb 2007 22:11:38 -0600

GIT changes to master grimoire by Jeremy Blosser <jblosser-smgl AT firinn.org>:

security-libs/linux-pam/CONFIGURE | 18 ++++++++++++++++--
security-libs/linux-pam/DETAILS | 2 +-
security-libs/linux-pam/HISTORY | 6 ++++++
security-libs/linux-pam/INSTALL | 4 ++++
4 files changed, 27 insertions(+), 3 deletions(-)

New commits:
commit f8a1a13f6a70e9037a38743059792fc2d89d5e96
Author: Jeremy Blosser <jblosser-smgl AT firinn.org>
Commit: Jeremy Blosser <jblosser-smgl AT firinn.org>

linux-pam: add a query to make unix_chkpwd suid root like older PAMs did

diff --git a/security-libs/linux-pam/CONFIGURE
b/security-libs/linux-pam/CONFIGURE
index 361d7d9..7be2652 100755
--- a/security-libs/linux-pam/CONFIGURE
+++ b/security-libs/linux-pam/CONFIGURE
@@ -1,3 +1,17 @@
-config_query PAM_SECTTY "Install a default /etc/securetty?" n &&
-config_query PAM_SELINUX "Enable selinux support?" n &&
+PATH=$PATH:/lib/security
+
+local chkpwd_suid_default &&
+
+if hash unix_chkpwd >&/dev/null && [ -u $(hash -t unix_chkpwd) ]; then
+ chkpwd_suid_default=y
+else
+ chkpwd_suid_default=n
+fi &&
+
+config_query PAM_CHKPWD_SUID \
+ "Install unix_chkpwd suid root so non-root programs can authenticate?" \
+ $chkpwd_suid_default &&
+
+config_query PAM_SECTTY "Install a default /etc/securetty?" n &&
+config_query PAM_SELINUX "Enable selinux support?" n &&
config_query PAM_DOCS "Build documentation?" n
diff --git a/security-libs/linux-pam/DETAILS b/security-libs/linux-pam/DETAILS
index 4708d66..849c3c3 100755
--- a/security-libs/linux-pam/DETAILS
+++ b/security-libs/linux-pam/DETAILS
@@ -15,7 +15,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/Linux-
WEB_SITE=http://www.us.kernel.org/pub/linux/libs/pam
ENTERED=20010922
LICENSE[0]=GPL
- PATCHLEVEL=4
+ PATCHLEVEL=5
KEYWORDS="security libs"
SHORT="Linux-PAM provides a flexibile authentication mechanism."
cat << EOF
diff --git a/security-libs/linux-pam/HISTORY b/security-libs/linux-pam/HISTORY
index ef1c8c7..07ee9c6 100644
--- a/security-libs/linux-pam/HISTORY
+++ b/security-libs/linux-pam/HISTORY
@@ -1,3 +1,9 @@
+2007-02-08 Jeremy Blosser <jblosser-smgl AT firinn.org>
+ * CONFIGURE, INSTALL: Add a query to set unix_chkpwd suid root like
+ older PAM versions did. Non-root apps can't use shadow passwords
+ otherwise. Bug #13509.
+ * DETAILS: PATCHLEVEL++.
+
2007-01-14 Thomas Orgis <sobukus AT sourcemage.org>
* BUILD: install libs to /lib instead of /usr/lib as they are
needed by the essential su, (refer to FHS and common sense)
diff --git a/security-libs/linux-pam/INSTALL b/security-libs/linux-pam/INSTALL
index 545479f..05d02bc 100755
--- a/security-libs/linux-pam/INSTALL
+++ b/security-libs/linux-pam/INSTALL
@@ -1,5 +1,9 @@
make install &&

+if [ "$PAM_CHKPWD_SUID" == "y" ]; then
+ chmod u+s $INSTALL_ROOT/lib/security/unix_chkpwd
+fi &&
+
# this is a BUG, the SA should decide if/when selinux is configured
# properly. Activating it before that breaks login, which is BAD.
#if [ "$PAM_SELINUX" == "y" ]; then



  • [SM-Commit] GIT changes to master grimoire by Jeremy Blosser (0de2a4ccfd61dff951248832d22a5eba45f7be4b), Jeremy Blosser, 02/08/2007

Archive powered by MHonArc 2.6.24.

Top of Page