Source Mage code commit list

[Jeremy Blosser <scm AT mail.sourcemage.org>]

GIT changes to master grimoire by Jeremy Blosser <jblosser-smgl AT firinn.org>:

 security-libs/linux-pam/CONFIGURE |   18 ++++++++++++++++--
 security-libs/linux-pam/DETAILS   |    2 +-
 security-libs/linux-pam/HISTORY   |    6 ++++++
 security-libs/linux-pam/INSTALL   |    4 ++++
 4 files changed, 27 insertions(+), 3 deletions(-)

New commits:
commit f8a1a13f6a70e9037a38743059792fc2d89d5e96
Author: Jeremy Blosser <jblosser-smgl AT firinn.org>
Commit: Jeremy Blosser <jblosser-smgl AT firinn.org>

    linux-pam: add a query to make unix_chkpwd suid root like older PAMs did

diff --git a/security-libs/linux-pam/CONFIGURE 
b/security-libs/linux-pam/CONFIGURE
index 361d7d9..7be2652 100755
--- a/security-libs/linux-pam/CONFIGURE
+++ b/security-libs/linux-pam/CONFIGURE
@@ -1,3 +1,17 @@
-config_query PAM_SECTTY "Install a default /etc/securetty?" n &&
-config_query PAM_SELINUX "Enable selinux support?" n          &&
+PATH=$PATH:/lib/security
+
+local chkpwd_suid_default  &&
+
+if  hash unix_chkpwd >&/dev/null  &&  [ -u $(hash -t unix_chkpwd) ];  then
+  chkpwd_suid_default=y
+else
+  chkpwd_suid_default=n
+fi  &&
+
+config_query PAM_CHKPWD_SUID                                              \
+  "Install unix_chkpwd suid root so non-root programs can authenticate?"  \
+  $chkpwd_suid_default                                                    &&
+
+config_query PAM_SECTTY "Install a default /etc/securetty?" n             &&
+config_query PAM_SELINUX "Enable selinux support?" n                      &&
 config_query PAM_DOCS "Build documentation?" n
diff --git a/security-libs/linux-pam/DETAILS b/security-libs/linux-pam/DETAILS
index 4708d66..849c3c3 100755
--- a/security-libs/linux-pam/DETAILS
+++ b/security-libs/linux-pam/DETAILS
@@ -15,7 +15,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/Linux-
         WEB_SITE=http://www.us.kernel.org/pub/linux/libs/pam
          ENTERED=20010922
       LICENSE[0]=GPL
-      PATCHLEVEL=4
+      PATCHLEVEL=5
         KEYWORDS="security libs"
            SHORT="Linux-PAM provides a flexibile authentication mechanism."
 cat << EOF
diff --git a/security-libs/linux-pam/HISTORY b/security-libs/linux-pam/HISTORY
index ef1c8c7..07ee9c6 100644
--- a/security-libs/linux-pam/HISTORY
+++ b/security-libs/linux-pam/HISTORY
@@ -1,3 +1,9 @@
+2007-02-08 Jeremy Blosser <jblosser-smgl AT firinn.org>
+       * CONFIGURE, INSTALL: Add a query to set unix_chkpwd suid root like
+         older PAM versions did.  Non-root apps can't use shadow passwords
+         otherwise.  Bug #13509.
+       * DETAILS: PATCHLEVEL++.
+
 2007-01-14 Thomas Orgis <sobukus AT sourcemage.org>
        * BUILD: install libs to /lib instead of /usr/lib as they are
          needed by the essential su, (refer to FHS and common sense)
diff --git a/security-libs/linux-pam/INSTALL b/security-libs/linux-pam/INSTALL
index 545479f..05d02bc 100755
--- a/security-libs/linux-pam/INSTALL
+++ b/security-libs/linux-pam/INSTALL
@@ -1,5 +1,9 @@
 make  install  &&
 
+if  [ "$PAM_CHKPWD_SUID" == "y" ];  then
+  chmod u+s $INSTALL_ROOT/lib/security/unix_chkpwd
+fi  &&
+
 # this is a BUG, the SA should decide if/when selinux is configured
 # properly. Activating it before that breaks login, which is BAD.
 #if [ "$PAM_SELINUX" == "y" ]; then