[devel] I: PAM configuration policy change

[devel] I: PAM configuration policy change

[Dmitry V. Levin]

[-- Attachment #1.1: Type: text/plain, Size: 1259 bytes --]

Greetings!

FYI:
$ rpmquery pam --changes-since 0.75-alt18 2>/dev/null |sed -e 's/@[^>]*>/@>/g' |grep -v '^$' 
* Fri May 23 2003 Dmitry V. Levin <ldv@> 0.75-alt20
- Implemented pam include config support.
- Moved pam_stack to separate subpackage.
* Fri May 23 2003 Dmitry V. Levin <ldv@> 0.75-alt19
- Cleaned up build a bit.
- Build with --disable-read-both-confs
 (when /etc/pam.d/ exists, don't look at /etc/pam.conf).
- Moved pam_timestamp to separate subpackage.
- Relocated Linux-PAM documentation to /usr/share/doc/Linux-PAM-0.75.

Итак, начиная с pam-0.75-alt20, libpam поддерживает новую директиву
управления в конфигурационных файлах, include.

Начиная с rpm-build-4.0.4-alt20, brp-cleanup осуществляет
PAM configuration policy enforcement и создает необходимые зависимости
при использовании include.

Типовой pam config теперь выглядит так:
#%PAM-1.0
auth     include	system-auth
account  include	system-auth
password include	system-auth
session  include	system-auth

Скрипт для нормализации pam config'ов прилагается.

Зависимость на pam_stack.so теперь является запрещённой для новых пакетов
в Сизиф.

Спасибо Debian project'у за Debian-PAM-MiniPolicy, которая была взята за
основу при подготовке /usr/share/doc/Linux-PAM-0.75/Policy.ALT


--
ldv

[-- Attachment #1.2: cleanup_pamd --]
[-- Type: text/plain, Size: 1169 bytes --]

#!/bin/sh -e
#
# $Id$
# Copyright (C) 2003  Dmitry V. Levin <ldv@altlinux.org>
#
# Attempts to cleanup given pam.d configuration files.
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
#

subst '
s,^\(#\?\)auth[[:space:]]\+,\1auth     ,g
s,^\(#\?\)account[[:space:]]\+,\1account  ,g
s,^\(#\?\)password[[:space:]]\+,\1password ,g
s,^\(#\?\)session[[:space:]]\+,\1session  ,g
s,\([[:space:]]\)/lib/security/\(pam_\),\1\2,g
s,\([[:space:]]\)required[[:space:]]\+pam_stack.so[[:space:]]\+service=,\1include	,g
' -- "$@"

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

[devel] I: PAM modules policy change

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 763 bytes --]

Greetings!

FYI:
$ rpmquery --lastchange pam |sed -e 's/@[^>]*>/@>/g' |grep -v '^$'
* Thu May 29 2003 Dmitry V. Levin <ldv@> 0.75-alt21
- Renamed:
  libpam -> libpam0
  libpam-devel -> libpam0-devel
  libpam-devel-static -> libpam0-devel-static
  pam_console -> pam_console0
  pam_stack -> pam_stack0
  pam_timestamp -> pam_timestamp0
- Relocated /etc/pam.d/other from this package to pam-common.
- Relocated pam_{deny,permit}.so modules to libpam0 subpackage.
- Added Linux-PAM-specific rpm macros file.
- Updated PAM Policy file.

Изменения в policy, в частности, затрагивают правила именования модулей
и проходят в рамках подготовки к возможной миграции с Linux-PAM на OpenPAM.

Примеры pam-модулей, собранных по новой схеме, скоро появятся в Сизифе.


--
ldv

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]