From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Mon, 26 May 2003 13:50:59 +0400 From: "Dmitry V. Levin" To: ALT Devel discussion list Message-ID: <20030526095059.GG1973@basalt.office.altlinux.org> Mail-Followup-To: ALT Devel discussion list Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="fmEUq8M7S0s+Fl0V" Content-Disposition: inline X-fingerprint: 9658 398D 181B 1200 8FC5 26B8 F6F8 846B C1E2 3429 Subject: [devel] I: PAM configuration policy change Sender: devel-admin@altlinux.ru Errors-To: devel-admin@altlinux.ru X-BeenThere: devel@altlinux.ru X-Mailman-Version: 2.0.9 Precedence: bulk Reply-To: devel@altlinux.ru List-Unsubscribe: , List-Id: List-Post: List-Help: List-Subscribe: , List-Archive: Archived-At: List-Archive: List-Post: --fmEUq8M7S0s+Fl0V Content-Type: multipart/mixed; boundary="9Iq5ULCa7nGtWwZS" Content-Disposition: inline Content-Transfer-Encoding: 8bit --9Iq5ULCa7nGtWwZS Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: 8bit Greetings! FYI: $ rpmquery pam --changes-since 0.75-alt18 2>/dev/null |sed -e 's/@[^>]*>/@>/g' |grep -v '^$' * Fri May 23 2003 Dmitry V. Levin 0.75-alt20 - Implemented pam include config support. - Moved pam_stack to separate subpackage. * Fri May 23 2003 Dmitry V. Levin 0.75-alt19 - Cleaned up build a bit. - Build with --disable-read-both-confs (when /etc/pam.d/ exists, don't look at /etc/pam.conf). - Moved pam_timestamp to separate subpackage. - Relocated Linux-PAM documentation to /usr/share/doc/Linux-PAM-0.75. Итак, начиная с pam-0.75-alt20, libpam поддерживает новую директиву управления в конфигурационных файлах, include. Начиная с rpm-build-4.0.4-alt20, brp-cleanup осуществляет PAM configuration policy enforcement и создает необходимые зависимости при использовании include. Типовой pam config теперь выглядит так: #%PAM-1.0 auth include system-auth account include system-auth password include system-auth session include system-auth Скрипт для нормализации pam config'ов прилагается. Зависимость на pam_stack.so теперь является запрещённой для новых пакетов в Сизиф. Спасибо Debian project'у за Debian-PAM-MiniPolicy, которая была взята за основу при подготовке /usr/share/doc/Linux-PAM-0.75/Policy.ALT -- ldv --9Iq5ULCa7nGtWwZS Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename=cleanup_pamd #!/bin/sh -e # # $Id$ # Copyright (C) 2003 Dmitry V. Levin # # Attempts to cleanup given pam.d configuration files. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. # subst ' s,^\(#\?\)auth[[:space:]]\+,\1auth ,g s,^\(#\?\)account[[:space:]]\+,\1account ,g s,^\(#\?\)password[[:space:]]\+,\1password ,g s,^\(#\?\)session[[:space:]]\+,\1session ,g s,\([[:space:]]\)/lib/security/\(pam_\),\1\2,g s,\([[:space:]]\)required[[:space:]]\+pam_stack.so[[:space:]]\+service=,\1include ,g ' -- "$@" --9Iq5ULCa7nGtWwZS-- --fmEUq8M7S0s+Fl0V Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE+0eOD9viEa8HiNCkRAmjaAJ9rN+z83FL+XDyfJtFawOY1CWisVwCfd4Y4 76eiJikVC77WL3uFZHQYC04= =tfLb -----END PGP SIGNATURE----- --fmEUq8M7S0s+Fl0V--