...
 
Commits (17)
  • Florian Vessaz's avatar
    15e68581
  • Andreas Henriksson's avatar
    Refresh patches using quilt · 4285a428
    Andreas Henriksson authored
    4285a428
  • Andreas Henriksson's avatar
    Update debian/watch for new location (github) · 706fc656
    Andreas Henriksson authored
    The old download location isn't being kept up to date and only
    has up to version 1.3.0, while the latest release is 1.3.1.
    706fc656
  • Andreas Henriksson's avatar
    New upstream version 1.3.1 · f51af83d
    Andreas Henriksson authored
    f51af83d
  • Andreas Henriksson's avatar
    Merge tag 'upstream/1.3.1' · 1c72f37f
    Andreas Henriksson authored
    Upstream version 1.3.1
    1c72f37f
  • Andreas Henriksson's avatar
    Mangle patches to apply and refresh them. · cd9a5b8d
    Andreas Henriksson authored
    (Beware of non-trivial changes to a few of them.)
    - drop all generated manpages changes (now only xmls)
    
    Gbp-Dch: Full
    cd9a5b8d
  • Andreas Henriksson's avatar
    Drop patches merged or obsolete by upstream · 519ab21f
    Andreas Henriksson authored
    - 021_nis_cleanup, obsoleted by upstream.
    - pam-loginuid-in-containers, merged upstream.
    - cve-2013-7041.patch, merged upstream.
    - cve-2014-2583.patch, merged upstream.
    - cve-2015-3238.patch, merged upstream.
    - pam_namespace_fix_bashism.patch, merged upstream.
    
    Gbp-Dch: Full
    519ab21f
  • Andreas Henriksson's avatar
    145db461
  • Andreas Henriksson's avatar
    Add build-dependency on bison · 262cbfd6
    Andreas Henriksson authored
    262cbfd6
  • Andreas Henriksson's avatar
    Install PAM.7 rather than PAM.8 · c39c8a9f
    Andreas Henriksson authored
    c39c8a9f
  • Andreas Henriksson's avatar
    Update debian/libpam0g.symbols · d5398b01
    Andreas Henriksson authored
    d5398b01
  • Florian Vessaz's avatar
    Handle missing ChangeLog file · e2b74c03
    Florian Vessaz authored
    e2b74c03
  • Florian Vessaz's avatar
    Fix lintian warnings · b080f003
    Florian Vessaz authored
    Corrected:
    * libpam0g-dev: package-contains-vcs-control-file
    * libpam0g: excessive-priority-for-library-package
    * pam soruce: build-depends-on-1-revision build-depends: quilt (>= 0.48-1)
    * pam source: debian-rules-sets-dpkg-architecture-variable
    * pam source: dh-quilt-addon-but-quilt-source-format dh
    * pam source: missing-debian-source-format
    
    Ignored:
    * libpam-modules: library-not-linked-against-libc pam_deny.so
      pam_deny.so does not use symbols from libc.
    b080f003
  • Florian Vessaz's avatar
    Remove unnecessary lintian overrides · 01554486
    Florian Vessaz authored
    01554486
  • Florian Vessaz's avatar
  • Andreas Henriksson's avatar
    Update debian/changelog · 7bc7e74e
    Andreas Henriksson authored
    7bc7e74e
  • Andreas Henriksson's avatar
    gbp pq import && gbp pq export · 53b121b8
    Andreas Henriksson authored
     gbp pq import
    gbp:info: Trying to apply patches at '7bc7e74e'
    gbp:warning: Patch 'pam_unix_fix_sgid_shadow_auth.patch' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch 'pam_unix_dont_trust_chkpwd_caller.patch' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '007_modules_pam_unix' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '008_modules_pam_limits_chroot' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '022_pam_unix_group_time_miscfixes' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch 'do_not_check_nis_accidentally' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '031_pam_include' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '032_pam_limits_EPERM_NOT_FATAL' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '036_pam_wheel_getlogin_considered_harmful' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch 'hurd_no_setfsuid' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '040_pam_limits_log_failure' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '045_pam_dispatch_jump_is_ignore' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '054_pam_security_abstract_securetty_handling' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch '055_pam_unix_nullok_secure' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch 'cve-2010-4708.patch' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch 'PAM-manpage-section' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch 'update-motd' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:warning: Patch 'lib_security_multiarch_compat' has no authorship information, using 'Steve Langasek <vorlon@debian.org>'
    gbp:info: 24 patches listed in 'debian/patches/series' imported on 'patch-queue/master'
    53b121b8
*.3
*.5
*.8
*.a
*.bak
*.fo
*.la
*.lo
*.log
*.o
*.pdf
*.so
*.trs
*~
.deps/
.libs/
/ABOUT-NLS
/ChangeLog
/INSTALL
/Linux-PAM-*.tar.*
/aclocal.m4
/autom4te.cache
/build-aux/
/config.h
/config.h.in
/config.log
/config.status
/configure
/doc/*/*.txt
/doc/*/html/
/libtool
/modules/pam_*/README
/stamp-h1
Makefile
Makefile.in
lex.yy.c
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
......@@ -2,7 +2,7 @@
# Copyright (c) 2005, 2006, 2007 Thorsten Kukuk <kukuk@thkukuk.de>
#
AUTOMAKE_OPTIONS = 1.9 gnu dist-bzip2 check-news
AUTOMAKE_OPTIONS = 1.9 gnu dist-bzip2 dist-xz check-news
SUBDIRS = libpam tests libpamc libpam_misc modules po conf doc examples xtests
......@@ -24,6 +24,8 @@ releasedocs:
Linux-PAM-$(VERSION)/doc
tar jfc Linux-PAM-$(VERSION)-docs.tar.bz2 \
Linux-PAM-$(VERSION)/doc
tar Jfc Linux-PAM-$(VERSION)-docs.tar.xz \
Linux-PAM-$(VERSION)/doc
rm -rf Linux-PAM-$(VERSION)
xtests:
......
This diff is collapsed.
Linux-PAM NEWS -- history of user-visible changes.
Release 1.3.1
* pam_motd: add support for a motd.d directory
* pam_umask: Fix documentation to align with order of loading umask
* pam_get_user.3: Fix missing word in documentation
* pam_tally2 --reset: avoid creating a missing tallylog file
* pam_mkhomedir: Allow creating parent of homedir under /
* access.conf.5: Add note about spaces around ':'
* pam.8: Workaround formatting problem
* pam_unix: Check return value of malloc used for setcred data
* pam_cracklib: Drop unused prompt macros
* pam_tty_audit: Support matching users by uid range
* pam_access: support parsing files in /etc/security/access.d/*.conf
* pam_localuser: Correct documentation
* pam_issue: Fix no prompting in parse escape codes mode
* Unification and cleanup of syslog log levels
Release 1.3.0
* Remove of static modules support
* pam_unix: pass_not_set was removed
* Lot of documentation fixes
* Use TI-RPC function calls if we build against libtirpc
* Add support for new, IPv6 enabled libnsl
* Lot of bug fixes
* Use fedora.zanata.org for translations
Release 1.2.1
* Fix CVE-2015-3238, affected PAM modules are pam_unix and pam_exec
Release 1.2.0
* Update documentation
* Update translations
* pam_unix: add quiet option
* libpam: support alternative configuration files in /usr/lib/pam.d
as fallback
* pam_env: add support for @{HOME} and @{SHELL}
* libpam: add grantor field to audit records
* libpam: Introduce pam_modutil_sanitize_helper_fds
Release 1.1.8
* pam_unix: bug fix for compiling with SELinux, fix crash at login time
......
No more ChangeLog file
======================
Do not create or modify the ChangeLog files. Starting at 2011-10-26, the
policy changed. Before, we would insert the exact same text (or worse,
sometimes slightly differing) into both the ChangeLog file and the commit
log. Now we put that information only in the commit log, and generate
the ChangeLog file from logs at "make dist" time. As such, there are
strict requirements on the form of the commit log messages.
Commit log requirements
=======================
Each commit log should always start with a one-line summary, the second
line should be blank, and the remaining lines are usually ChangeLog-style
entries for all affected files, except the leading TABs which should
be omitted. It's OK to write a few lines of prose describing the change,
when the summary and ChangeLog entries don't give enough of the big picture.
This diff is collapsed.
#!/bin/sh -x
umask 022
touch ChangeLog
autoreconf -fiv
#! /bin/sh
# Wrapper for compilers which do not understand `-c -o'.
scriptversion=2009-10-06.20; # UTC
# Copyright (C) 1999, 2000, 2003, 2004, 2005, 2009 Free Software
# Foundation, Inc.
# Written by Tom Tromey <tromey@cygnus.com>.
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2, or (at your option)
# any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
# As a special exception to the GNU General Public License, if you
# distribute this file as part of a program that contains a
# configuration script generated by Autoconf, you may include it under
# the same distribution terms that you use for the rest of that program.
# This file is maintained in Automake, please report
# bugs to <bug-automake@gnu.org> or send patches to
# <automake-patches@gnu.org>.
case $1 in
'')
echo "$0: No command. Try \`$0 --help' for more information." 1>&2
exit 1;
;;
-h | --h*)
cat <<\EOF
Usage: compile [--help] [--version] PROGRAM [ARGS]
Wrapper for compilers which do not understand `-c -o'.
Remove `-o dest.o' from ARGS, run PROGRAM with the remaining
arguments, and rename the output as expected.
If you are trying to build a whole package this is not the
right script to run: please start by reading the file `INSTALL'.
Report bugs to <bug-automake@gnu.org>.
EOF
exit $?
;;
-v | --v*)
echo "compile $scriptversion"
exit $?
;;
esac
ofile=
cfile=
eat=
for arg
do
if test -n "$eat"; then
eat=
else
case $1 in
-o)
# configure might choose to run compile as `compile cc -o foo foo.c'.
# So we strip `-o arg' only if arg is an object.
eat=1
case $2 in
*.o | *.obj)
ofile=$2
;;
*)
set x "$@" -o "$2"
shift
;;
esac
;;
*.c)
cfile=$1
set x "$@" "$1"
shift
;;
*)
set x "$@" "$1"
shift
;;
esac
fi
shift
done
if test -z "$ofile" || test -z "$cfile"; then
# If no `-o' option was seen then we might have been invoked from a
# pattern rule where we don't need one. That is ok -- this is a
# normal compilation that the losing compiler can handle. If no
# `.c' file was seen then we are probably linking. That is also
# ok.
exec "$@"
fi
# Name of file we expect compiler to create.
cofile=`echo "$cfile" | sed 's|^.*[\\/]||; s|^[a-zA-Z]:||; s/\.c$/.o/'`
# Create the lock directory.
# Note: use `[/\\:.-]' here to ensure that we don't use the same name
# that we are using for the .o file. Also, base the name on the expected
# object file name, since that is what matters with a parallel build.
lockdir=`echo "$cofile" | sed -e 's|[/\\:.-]|_|g'`.d
while true; do
if mkdir "$lockdir" >/dev/null 2>&1; then
break
fi
sleep 1
done
# FIXME: race condition here if user kills between mkdir and trap.
trap "rmdir '$lockdir'; exit 1" 1 2 15
# Run the compile.
"$@"
ret=$?
if test -f "$cofile"; then
test "$cofile" = "$ofile" || mv "$cofile" "$ofile"
elif test -f "${cofile}bj"; then
test "${cofile}bj" = "$ofile" || mv "${cofile}bj" "$ofile"
fi
rmdir "$lockdir"
exit $ret
# Local Variables:
# mode: shell-script
# sh-indentation: 2
# eval: (add-hook 'write-file-hooks 'time-stamp)
# time-stamp-start: "scriptversion="
# time-stamp-format: "%:y-%02m-%02d.%02H"
# time-stamp-time-zone: "UTC"
# time-stamp-end: "; # UTC"
# End:
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
.ignore_age
.md5sum
This diff is collapsed.
pam_conv.tab.c
pam_conv1
pam_conv.c
pam_conv_l.c
pam_conv_y.c
pam_conv_y.h
......@@ -13,5 +13,3 @@ BUILT_SOURCES = pam_conv_y.h
noinst_PROGRAMS = pam_conv1
pam_conv1_SOURCES = pam_conv_l.l pam_conv_y.y
pam_conv1_LDADD = @LEXLIB@
This diff is collapsed.
This diff is collapsed.
......@@ -24,6 +24,7 @@
extern int current_line;
%}
%option noyywrap
%%
"#"[^\n]* ; /* skip comments (sorry) */
......
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
# This is afalse positive because it doesn't use any functions that need
# fortifying. Since we know we have hardening turned on globally, suppress
# this. If we ever see this warning again for *other* modules, then we know
# there's a real problem.
libpam-cracklib: hardening-no-fortify-functions lib/*/security/pam_cracklib.so
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
m4/.gitignore 0 → 100644