From: "Dmitry V. Levin" <ldv@altlinux.org> To: ALT Devel discussion list <devel@altlinux.ru> Subject: [devel] I: PAM configuration policy change Date: Mon, 26 May 2003 13:50:59 +0400 Message-ID: <20030526095059.GG1973@basalt.office.altlinux.org> (raw) [-- Attachment #1.1: Type: text/plain, Size: 1259 bytes --] Greetings! FYI: $ rpmquery pam --changes-since 0.75-alt18 2>/dev/null |sed -e 's/@[^>]*>/@>/g' |grep -v '^$' * Fri May 23 2003 Dmitry V. Levin <ldv@> 0.75-alt20 - Implemented pam include config support. - Moved pam_stack to separate subpackage. * Fri May 23 2003 Dmitry V. Levin <ldv@> 0.75-alt19 - Cleaned up build a bit. - Build with --disable-read-both-confs (when /etc/pam.d/ exists, don't look at /etc/pam.conf). - Moved pam_timestamp to separate subpackage. - Relocated Linux-PAM documentation to /usr/share/doc/Linux-PAM-0.75. Итак, начиная с pam-0.75-alt20, libpam поддерживает новую директиву управления в конфигурационных файлах, include. Начиная с rpm-build-4.0.4-alt20, brp-cleanup осуществляет PAM configuration policy enforcement и создает необходимые зависимости при использовании include. Типовой pam config теперь выглядит так: #%PAM-1.0 auth include system-auth account include system-auth password include system-auth session include system-auth Скрипт для нормализации pam config'ов прилагается. Зависимость на pam_stack.so теперь является запрещённой для новых пакетов в Сизиф. Спасибо Debian project'у за Debian-PAM-MiniPolicy, которая была взята за основу при подготовке /usr/share/doc/Linux-PAM-0.75/Policy.ALT -- ldv [-- Attachment #1.2: cleanup_pamd --] [-- Type: text/plain, Size: 1169 bytes --] #!/bin/sh -e # # $Id$ # Copyright (C) 2003 Dmitry V. Levin <ldv@altlinux.org> # # Attempts to cleanup given pam.d configuration files. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. # subst ' s,^\(#\?\)auth[[:space:]]\+,\1auth ,g s,^\(#\?\)account[[:space:]]\+,\1account ,g s,^\(#\?\)password[[:space:]]\+,\1password ,g s,^\(#\?\)session[[:space:]]\+,\1session ,g s,\([[:space:]]\)/lib/security/\(pam_\),\1\2,g s,\([[:space:]]\)required[[:space:]]\+pam_stack.so[[:space:]]\+service=,\1include ,g ' -- "$@" [-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
next reply other threads:[~2003-05-26 9:50 UTC|newest] Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top 2003-05-26 9:50 Dmitry V. Levin [this message] 2003-06-09 16:33 ` [devel] I: PAM modules " Dmitry V. Levin
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20030526095059.GG1973@basalt.office.altlinux.org \ --to=ldv@altlinux.org \ --cc=devel@altlinux.ru \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
ALT Linux Team development discussions This inbox may be cloned and mirrored by anyone: git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git # If you have public-inbox 1.1+ installed, you may # initialize and index your mirror using the following commands: public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \ devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru public-inbox-index devel Example config snippet for mirrors. Newsgroup available over NNTP: nntp://lore.altlinux.org/org.altlinux.lists.devel AGPL code for this site: git clone https://public-inbox.org/public-inbox.git