~ubuntu-branches/ubuntu/lucid/pam/lucid : changes

~ubuntu-branches/ubuntu/lucid/pam/lucid » Changes from revision 63

From Revision 54 to 35

Rev	Summary	Authors	Tags	Date
54	* Merge from Debian, remaining changes: * Merge from Debian, remaining changes: - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not present there or in /etc/security/pam_env.conf. (should send to Debian). - debian/libpam0g.postinst: only ask questions during update-manager when there are non-default services running. - debian/patches-applied/series: Ubuntu patches are as below ... - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t type rather than __u8. - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic module option 'missingok' which will suppress logging of errors by libpam if the module is not found. - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for password on bad username. - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly initialise RLIMIT_NICE rather than relying on the kernel limits. - debian/patches-applied/ubuntu-user_defined_environment: Look at ~/.pam_environment too, with the same format as /etc/security/pam_env.conf. (Originally patch 100; converted to quilt.) - Change Vcs-Bzr to point at the Ubuntu branch. - debian/local/common-password, debian/pam-configs/unix: switch from "md5" to "sha512" as password crypt default. - Make libpam-modules depend on base-files (>= 5.0.0ubuntu6), to ensure run-parts does the right thing in /etc/update-motd.d. - debian/patches-applied/pam_motd-legal-notice: display the contents of /etc/legal once, then set a flag in the user's homedir to prevent showing it again.	Steve Langasek	1.0.1-10ubuntu1	15 years ago
53	Make libpam-modules depend on base-files (>= 5.0.0ubuntu6), ... Make libpam-modules depend on base-files (>= 5.0.0ubuntu6), to ensure run-parts does the right thing in /etc/update-motd.d.	Steve Langasek	1.0.1-9ubuntu3	15 years ago
52	[ Dustin Kirkland ] [ Dustin Kirkland ] * debian/patches/update-motd: run the update-motd scripts in pam_motd; render update-motd obsolete, LP: #399071 * debian/patches-applied/pam_motd-legal-notice: display the contents of /etc/legal once, then set a flag in the user's homedir to prevent showing it again.	Steve Langasek	1.0.1-9ubuntu2	15 years ago
51	* Merge from Debian unstable * Merge from Debian unstable * Remaining changes: - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not present there or in /etc/security/pam_env.conf. (should send to Debian). - debian/libpam0g.postinst: only ask questions during update-manager when there are non-default services running. - debian/patches-applied/series: Ubuntu patches are as below ... - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t type rather than __u8. - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic module option 'missingok' which will suppress logging of errors by libpam if the module is not found. - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for password on bad username. - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly initialise RLIMIT_NICE rather than relying on the kernel limits. - debian/patches-applied/ubuntu-user_defined_environment: Look at ~/.pam_environment too, with the same format as /etc/security/pam_env.conf. (Originally patch 100; converted to quilt.) - Change Vcs-Bzr to point at the Ubuntu branch. - debian/local/common-password, debian/pam-configs/unix: switch from "md5" to "sha512" as password crypt default.	Steve Langasek	1.0.1-9ubuntu1	15 years ago
50	* Merge from Debian unstable * Merge from Debian unstable * Remaining changes: - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not present there or in /etc/security/pam_env.conf. (should send to Debian). - debian/libpam0g.postinst: only ask questions during update-manager when there are non-default services running. - debian/patches-applied/series: Ubuntu patches are as below ... - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t type rather than __u8. - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic module option 'missingok' which will suppress logging of errors by libpam if the module is not found. - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for password on bad username. - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly initialise RLIMIT_NICE rather than relying on the kernel limits. - debian/patches-applied/ubuntu-user_defined_environment: Look at ~/.pam_environment too, with the same format as /etc/security/pam_env.conf. (Originally patch 100; converted to quilt.) - Change Vcs-Bzr to point at the Ubuntu branch. - debian/local/common-password, debian/pam-configs/unix: switch from "md5" to "sha512" as password crypt default. * Dropped changes, merged in Debian: - debian/local/pam-auth-update (et al): new interface for managing /etc/pam.d/common-, using drop-in config snippets provided by module packages. - New patch dont_freeze_password_chain, cherry-picked from upstream: don't always follow the same path through the password stack on the PAM_UPDATE_AUTHTOK pass as was used in the PAM_PRELIM_CHECK pass; this Linux-PAM deviation from the original PAM spec causes a number of problems, in particular causing wrong return values when using the refactored pam-auth-update stack. LP: #303515, #305882. - debian/patches/027_pam_limits_better_init_allow_explicit_root: Add documentation to the patch showing how to set limits for root. Bump the libpam-cracklib dependency on libpam-runtime to 1.0.1-6, reducing the delta with Debian. * Drop upgrade handling code from libpam-runtime.postinst that's only needed when upgrading from 1.0.1-2ubuntu1, a superseded intrepid pre-release version of the package. * pam-auth-update: swap out known md5sums from intrepid pre-release versions with the md5sums from the released intrepid version * pam-auth-update: drop some md5sums that will only be seen on upgrade from pre-intrepid versions; skipping over the 8.10 final release is not supported, and upgrading via 8.10 means those config files will be replaced so the old md5sums will never be seen again.	Steve Langasek	1.0.1-7ubuntu1	15 years ago
49	New patch dont_freeze_password_chain, cherry-picked from ups... New patch dont_freeze_password_chain, cherry-picked from upstream: don't always follow the same path through the password stack on the PAM_UPDATE_AUTHTOK pass as was used in the PAM_PRELIM_CHECK pass; this Linux-PAM deviation from the original PAM spec causes a number of problems, in particular causing wrong return values when using the refactored pam-auth-update stack. LP: #303515, #305882.	Steve Langasek	1.0.1-5ubuntu2	15 years ago
48	* Merge from Debian unstable * Merge from Debian unstable * Remaining changes: - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not present there or in /etc/security/pam_env.conf. (should send to Debian). - debian/libpam0g.postinst: only ask questions during update-manager when there are non-default services running. - debian/patches-applied/series: Ubuntu patches are as below ... - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t type rather than __u8. - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic module option 'missingok' which will suppress logging of errors by libpam if the module is not found. - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for password on bad username. - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly initialise RLIMIT_NICE rather than relying on the kernel limits. - debian/patches-applied/ubuntu-user_defined_environment: Look at ~/.pam_environment too, with the same format as /etc/security/pam_env.conf. (Originally patch 100; converted to quilt.) - Change Vcs-Bzr to point at the Ubuntu branch. - debian/local/pam-auth-update (et al): new interface for managing /etc/pam.d/common-, using drop-in config snippets provided by module packages. - debian/local/common-password, debian/pam-configs/unix: switch from "md5" to "sha512" as password crypt default. Bump the version numbers referenced in the config files, again, as pam has revved in Debian and moved the bar. * pam-auth-update: If /var/lib/pam/seen is absent, treat this the same as a present but empty file; thanks to Greg Price for the patch. LP: #294513. * pam-auth-update: Ignore removed profiles when detecting an empty set of currently-enabled modules. Thanks to Greg Price for this as well. * debian/control: libpam-runtime needs a versioned dependency on debconf, because it uses the x_loadtemplatefile extension that's not supported by debconf versions before hardy. LP: #295135. * pam-auth-update: trim leading whitespace from multiline fields when parsing PAM profiles. LP: #295441. * pam-auth-update: factor out the duplicate code used for returning the lines for a given module [ Jonathan Marsden ] * debian/patches/027_pam_limits_better_init_allow_explicit_root: Add to patch, documenting how to set limits for root user. Include an example. Alters limits.conf, limits.conf.5.xml, and limits.conf.5 . (LP: #65244)	Steve Langasek	1.0.1-5ubuntu1	16 years ago
47	No-change upload to jaunty to fix publication on armel. No-change upload to jaunty to fix publication on armel.	Colin Watson	1.0.1-4ubuntu5.4	16 years ago
46	No-change upload of 1.0.1-4ubuntu5.1 to -updates. -proposed ... No-change upload of 1.0.1-4ubuntu5.1 to -updates. -proposed package was copied while some ports were not built yet.	Martin Pitt	1.0.1-4ubuntu5.3	16 years ago
45	No-change rebuild because the archive admin (me) copied the ... No-change rebuild because the archive admin (me) copied the package to jaunty too soon.	Steve Langasek	1.0.1-4ubuntu5.2	16 years ago
44	Allow passwords to change on expired accounts, by passing Allow passwords to change on expired accounts, by passing new_authtok_reqd return codes immediately (LP: #291091).	Kees Cook	1.0.1-4ubuntu5.1	16 years ago
43	* debian/libpam0g.postinst: change 'cupsys' to 'cups' in the... * debian/libpam0g.postinst: change 'cupsys' to 'cups' in the list of default desktop services that are ignored in deciding whether to prompt for service restarts on upgrade. Partially addresses LP #278117. * debian/libpam0g.postinst: also filter out samba, which may be installed on the desktop to enable filesharing. * debian/libpam-cracklib.prerm, debian/libpam-runtime.prerm: add the ubiquitous debhelper tokens (currently a no-op) * pam-auth-update: Use -Initial only for the first profile, even when there's no explicit -Initial config for that first profile * fix common-session/common-password to use the same overall stack structure as auth/account, so that we get the correct behavior when all password modules fail. LP: #272232.	Steve Langasek	1.0.1-4ubuntu5	16 years ago
42	Fix a bug in the parser that caused spewing of errors when t... Fix a bug in the parser that caused spewing of errors when there were more lines in the config file following the managed block. LP: #270328.	Steve Langasek	1.0.1-4ubuntu4	16 years ago
41	Fix up the code that saves state to /var/lib/pam, so that it... Fix up the code that saves state to /var/lib/pam, so that it matches what's expected by the code which later compares the saved and active profiles in the case that there are both primary and additional modules present.	Steve Langasek	1.0.1-4ubuntu3	16 years ago
40	Brown paper bag bug: fix a missing comma in pam-auth-update. Brown paper bag bug: fix a missing comma in pam-auth-update.	Steve Langasek	1.0.1-4ubuntu2	16 years ago
39	* Merge from Debian unstable * Merge from Debian unstable * Remaining changes: - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not present there or in /etc/security/pam_env.conf. (should send to Debian). - debian/libpam0g.postinst: only ask questions during update-manager when there are non-default services running. - debian/patches-applied/series: Ubuntu patches are as below ... - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t type rather than __u8. - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic module option 'missingok' which will suppress logging of errors by libpam if the module is not found. - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for password on bad username. - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly initialise RLIMIT_NICE rather than relying on the kernel limits. - debian/patches-applied/ubuntu-user_defined_environment: Look at ~/.pam_environment too, with the same format as /etc/security/pam_env.conf. (Originally patch 100; converted to quilt.) - Change Vcs-Bzr to point at the Ubuntu branch. - debian/local/pam-auth-update (et al): new interface for managing /etc/pam.d/common-, using drop-in config snippets provided by module packages. - debian/local/common-password, debian/pam-configs/unix: switch from "md5" to "sha512" as password crypt default. Bump the version numbers referenced in the config files, again, as pam has revved in Debian and moved the bar. * debian/pam-config/: refine the password profiles to use a 'primary' block, to better parallel the auth structure. Drop '-Final' from the field names in /usr/share/pam-configs, supporting these field names for backwards compatibility only * Bump the dependency version requirement to 1.0.1-4ubuntu1 for the above change	Steve Langasek	1.0.1-4ubuntu1	16 years ago
38	[ Steve Langasek ] [ Steve Langasek ] * Never remove the .pam-old files; just avoid creating them if --force isn't set. * Add a manpage for pam-auth-update. * Automatically upgrade the boilerplate for /etc/pam.d/common-* if we detect that they have not been locally modified. [ Kees Cook ] * debian/local/common-password, debian/pam-configs/unix: switch from "md5" to "sha512" as password crypt default.	Steve Langasek	1.0.1-3ubuntu5	16 years ago
37	If two profiles have the same Priority, sort by the profile ... If two profiles have the same Priority, sort by the profile name to ensure a complete sort so we can filter out all the duplicates from the list and not write out broken configs. LP: #260371.	Steve Langasek	1.0.1-3ubuntu4	16 years ago
36	* s/pam-auth-config/pam-auth-update/ in the source, I can't ... * s/pam-auth-config/pam-auth-update/ in the source, I can't seem to get this name consistent to save my life - I'm starting to think I named it wrong... * Fix the regex used when suppressing jump counts when reading the saved config, so that we don't clobber module options with numbers in them. * If the target doesn't already exist, don't try to copy it. * Filter the config list to exclude configs that no longer exist. LP: #260122. * Avoid unnecessary sort/grep in the case where we already have a sorted list. * Implement pam-auth-update --remove, for use in package prerms when called with "remove".	Steve Langasek	1.0.1-3ubuntu3	16 years ago
35	* debian/local/common-session: the session stack needs to be... * debian/local/common-session: the session stack needs to be handled the same way as the password stack, with the possibility of zero primary modules; required to fix build failures on the Ubuntu buildds due to su not being able to open sessions by default. LP: #259867. * debian/libpam-runtime.postinst: when upgrading from the broken 1.0.1-2ubuntu1 version, manually edit /etc/pam.d/common-session to recover.	Steve Langasek	1.0.1-3ubuntu2	16 years ago

Older »