June 2009 - YaST Commits - openSUSE Mailing Lists

[yast-commit] r57406 - in /trunk/storage: bindings/ bindings/Makefile.am bindings/bindings/ycp/ bindings/src/Makefile.am bindings/ycp/ bindings/ycp/Makefile.am libstorage/
by aschnell＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: aschnell Date: Wed Jun 3 00:20:26 2009 New Revision: 57406 URL: http://svn.opensuse.org/viewcvs/yast?rev=57406&view=rev Log: - libstorage bindings restructuring Added: trunk/storage/bindings/ (props changed) - copied from r57399, trunk/storage/libstorage/ trunk/storage/bindings/ycp/ (props changed) - copied from r57399, trunk/storage/libstorage/bindings/ycp/ Removed: trunk/storage/bindings/bindings/ycp/ trunk/storage/libstorage/ Modified: trunk/storage/bindings/Makefile.am trunk/storage/bindings/src/Makefile.am trunk/storage/bindings/ycp/Makefile.am Modified: trunk/storage/bindings/Makefile.am URL: http://svn.opensuse.org/viewcvs/yast/trunk/storage/bindings/Makefile.am?rev… ============================================================================== --- trunk/storage/bindings/Makefile.am (original) +++ trunk/storage/bindings/Makefile.am Wed Jun 3 00:20:26 2009 @@ -1,5 +1,5 @@ # -# Makefile.am for libstorage +# Makefile.am for storage/bindings # -SUBDIRS = src bindings +SUBDIRS = ycp src Modified: trunk/storage/bindings/src/Makefile.am URL: http://svn.opensuse.org/viewcvs/yast/trunk/storage/bindings/src/Makefile.am… ============================================================================== --- trunk/storage/bindings/src/Makefile.am (original) +++ trunk/storage/bindings/src/Makefile.am Wed Jun 3 00:20:26 2009 @@ -1,15 +1,10 @@ # -# Makefile.am for libstorage/src +# Makefile.am for storage/bindings/src # INCLUDES = -I$(includedir) -storage: - ln -sf . storage - mkdir .libs - ln -sf . .libs/plugin - -BUILT_SOURCES = storage StorageCallbacksBuiltinTable.h StorageCallbacksBuiltinCalls.h +BUILT_SOURCES = StorageCallbacksBuiltinTable.h StorageCallbacksBuiltinCalls.h StorageCallbacksBuiltinTable.h : StorageCallbacks.h y2tool generateYCPWrappers StorageCallbacks.h StorageCallbacksBuiltinCalls.h StorageCallbacksBuiltinTable.h Modified: trunk/storage/bindings/ycp/Makefile.am URL: http://svn.opensuse.org/viewcvs/yast/trunk/storage/bindings/ycp/Makefile.am… ============================================================================== --- trunk/storage/bindings/ycp/Makefile.am (original) +++ trunk/storage/bindings/ycp/Makefile.am Wed Jun 3 00:20:26 2009 @@ -1,5 +1,5 @@ # -# Makefile.am for libstorage/bindings/ycp +# Makefile.am for storage/bindings/ycp # PLUGLIB_MODULE = LibStorage -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57405 - /tags/stable-2_18_4/users/
by jsuchome＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsuchome Date: Tue Jun 2 22:52:31 2009 New Revision: 57405 URL: http://svn.opensuse.org/viewcvs/yast?rev=57405&view=rev Log: Created tag stable-2_18_4 for users Added: tags/stable-2_18_4/users/ - copied from r57404, trunk/users/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57404 - in /trunk/users: VERSION package/yast2-users.changes src/Users.pm src/UsersSimple.pm
by jsuchome＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsuchome Date: Tue Jun 2 22:50:39 2009 New Revision: 57404 URL: http://svn.opensuse.org/viewcvs/yast?rev=57404&view=rev Log: - OBSCURE_CHECKS_ENAB not available from PAM since yast2-security-2.18.0, making related functionality YaST specific - 2.18.4 Modified: trunk/users/VERSION trunk/users/package/yast2-users.changes trunk/users/src/Users.pm trunk/users/src/UsersSimple.pm Modified: trunk/users/VERSION URL: http://svn.opensuse.org/viewcvs/yast/trunk/users/VERSION?rev=57404&r1=57403… ============================================================================== --- trunk/users/VERSION (original) +++ trunk/users/VERSION Tue Jun 2 22:50:39 2009 @@ -1 +1 @@ -2.18.3 +2.18.4 Modified: trunk/users/package/yast2-users.changes URL: http://svn.opensuse.org/viewcvs/yast/trunk/users/package/yast2-users.change… ============================================================================== --- trunk/users/package/yast2-users.changes (original) +++ trunk/users/package/yast2-users.changes Tue Jun 2 22:50:39 2009 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Tue Jun 2 22:42:58 CEST 2009 - jsuchome(a)suse.cz + +- OBSCURE_CHECKS_ENAB not available from PAM since + yast2-security-2.18.0, making related functionality YaST specific +- 2.18.4 + +------------------------------------------------------------------- Tue Jun 2 13:39:34 CEST 2009 - ug(a)suse.de - RNC file is less strict for <user_defaults> Modified: trunk/users/src/Users.pm URL: http://svn.opensuse.org/viewcvs/yast/trunk/users/src/Users.pm?rev=57404&r1=… ============================================================================== --- trunk/users/src/Users.pm (original) +++ trunk/users/src/Users.pm Tue Jun 2 22:50:39 2009 @@ -1315,7 +1315,6 @@ UsersSimple->SetCrackLibDictPath ($security{"CRACKLIB_DICTPATH"} || ""); UsersSimple->UseCrackLib ($security{"PASSWD_USE_CRACKLIB"} eq "yes"); - UsersSimple->UseObscureChecks ($security{"OBSCURE_CHECKS_ENAB"} eq "yes"); if (defined $security{"PASS_MIN_LEN"}) { UsersSimple->SetMinPasswordLength ("local", $security{"PASS_MIN_LEN"}); Modified: trunk/users/src/UsersSimple.pm URL: http://svn.opensuse.org/viewcvs/yast/trunk/users/src/UsersSimple.pm?rev=574… ============================================================================== --- trunk/users/src/UsersSimple.pm (original) +++ trunk/users/src/UsersSimple.pm Tue Jun 2 22:50:39 2009 @@ -81,6 +81,7 @@ # if cracklib is used for password checking my $use_cracklib = 1; +# this is yast2-users internal check now, feature was removed from PAM my $obscure_checks = 1; # User/group names must match the following regex expression. (/etc/login.defs) -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57403 - /tags/stable-2_18_0/security/
by jsuchome＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsuchome Date: Tue Jun 2 22:40:18 2009 New Revision: 57403 URL: http://svn.opensuse.org/viewcvs/yast?rev=57403&view=rev Log: Created tag stable-2_18_0 for security Added: tags/stable-2_18_0/security/ - copied from r57402, trunk/security/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57402 - in /trunk/security: ./ package/ src/ testsuite/tests/
by jsuchome＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsuchome Date: Tue Jun 2 22:40:08 2009 New Revision: 57402 URL: http://svn.opensuse.org/viewcvs/yast?rev=57402&view=rev Log: - pam_pwcheck calls replaced with pam_cracklib/pam_pwhistory, removed obsolete "obscure checks" settings (fate#305468) - 2.18.0 Modified: trunk/security/VERSION trunk/security/package/yast2-security.changes trunk/security/src/Security.ycp trunk/security/src/dialogs.ycp trunk/security/src/helps.ycp trunk/security/src/levels.ycp trunk/security/src/routines.ycp trunk/security/src/security.ycp trunk/security/src/widgets.ycp trunk/security/testsuite/tests/Level1.out trunk/security/testsuite/tests/Level2.out trunk/security/testsuite/tests/Level3.out trunk/security/testsuite/tests/Read.out trunk/security/testsuite/tests/Read.ycp trunk/security/testsuite/tests/Write.out trunk/security/testsuite/tests/Write.ycp Modified: trunk/security/VERSION URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/VERSION?rev=57402&r1=57… ============================================================================== --- trunk/security/VERSION (original) +++ trunk/security/VERSION Tue Jun 2 22:40:08 2009 @@ -1 +1 @@ -2.17.12 +2.18.0 Modified: trunk/security/package/yast2-security.changes URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/package/yast2-security.… ============================================================================== --- trunk/security/package/yast2-security.changes (original) +++ trunk/security/package/yast2-security.changes Tue Jun 2 22:40:08 2009 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Tue Jun 2 22:26:15 CEST 2009 - jsuchome(a)suse.cz + +- pam_pwcheck calls replaced with pam_cracklib/pam_pwhistory, + removed obsolete "obscure checks" settings (fate#305468) +- 2.18.0 + +------------------------------------------------------------------- Mon Feb 9 11:58:17 CET 2009 - lslezak(a)suse.cz - added "SuSEfirewall" and "earlysyslog" service to ignore list Modified: trunk/security/src/Security.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/src/Security.ycp?rev=57… ============================================================================== --- trunk/security/src/Security.ycp (original) +++ trunk/security/src/Security.ycp Tue Jun 2 22:40:08 2009 @@ -121,7 +121,6 @@ "GID_MIN" : "1000", "DISPLAYMANAGER_SHUTDOWN" : "all", "LASTLOG_ENAB" : "yes", - "OBSCURE_CHECKS_ENAB" : "yes", "PASSWD_ENCRYPTION" : "blowfish", "GROUP_ENCRYPTION" : "md5", "PASSWD_USE_CRACKLIB" : "yes", @@ -377,11 +376,7 @@ /* Read pam settings */ - /* pam stuff */ - map pwcheck = Pam::Query ("pwcheck"); - list<string> pam_check_settings = pwcheck["password"]:[]; - - /* read the password hash settings */ + // read the password hash settings string method = PamSettings::GetDefaultValue ("CRYPT_FILES"); if (method == nil || method == "" || !contains (["des","md5","blowfish"],method)) @@ -393,23 +388,26 @@ Settings["PASSWD_ENCRYPTION"] = method; Settings["GROUP_ENCRYPTION"] = PamSettings::GetGroupHashMethod (); - /* obscure checks */ - boolean obscure = !contains (pam_check_settings, "no_obscure_checks"); - Settings["OBSCURE_CHECKS_ENAB"] = obscure? "yes":"no"; - - /* other pam_pwcheck settings */ + // cracklib and pwhistory settings Settings ["PASS_MIN_LEN"] = "5"; Settings ["PASSWD_USE_CRACKLIB"] = "no"; Settings ["PASSWD_REMEMBER_HISTORY"] = "0"; - foreach (string val, pam_check_settings, { + + map pam_cracklib = Pam::Query ("cracklib"); + if (size (pam_cracklib) > 0) + Settings ["PASSWD_USE_CRACKLIB"] = "yes"; + foreach (string val, pam_cracklib["password"]:[], { list lval = splitstring (val, "="); - if (issubstring (val, "minlen") && lval[1]:"" != "") - Settings ["PASS_MIN_LEN"] = lval[1]:"5"; - /* use cracklib? */ - if (issubstring (val, "cracklib")) { + if (issubstring (val, "dictpath=")) { Settings ["CRACKLIB_DICT_PATH"] = lval[1]:"/usr/lib/cracklib_dict"; - Settings ["PASSWD_USE_CRACKLIB"] = "yes"; } + if (issubstring (val, "minlen=") && lval[1]:"" != "") + Settings ["PASS_MIN_LEN"] = lval[1]:"5"; + }); + + map pam_history = Pam::Query ("pwhistory"); + foreach (string val, pam_history["password"]:[], { + list lval = splitstring (val, "="); if (issubstring (val, "remember=") && lval[1]:"" != "") Settings ["PASSWD_REMEMBER_HISTORY"] = lval[1]:"0"; }); @@ -532,33 +530,32 @@ // use cracklib? if(Settings["PASSWD_USE_CRACKLIB"]:"no" == "yes") { - string crack = "pwcheck-cracklib"; + Pam::Add ("cracklib"); string pth = Settings["CRACKLIB_DICT_PATH"]:"/usr/lib/cracklib_dict"; if (pth != "/usr/lib/cracklib_dict") - crack = "pwcheck-cracklib-path=" + pth; - Pam::Add (crack); + Pam::Add ("--cracklib-dictpath=" + pth); } else - Pam::Remove ("pwcheck-cracklib"); - - // save obscure checks - Pam::Set ("pwcheck-no_obscure_checks", - Settings["OBSCURE_CHECKS_ENAB"]:"yes" != "yes"); + Pam::Remove ("cracklib"); // save min pass length if (Settings["PASS_MIN_LEN"]:"5" != "5") - Pam::Add (sformat ("pwcheck-minlen=%1", Settings["PASS_MIN_LEN"]:"5")); + { + Pam::Add ("cracklib"); // minlen is part of cracklib + Pam::Add (sformat ("cracklib-minlen=%1", Settings["PASS_MIN_LEN"]:"5")); + } else - Pam::Remove ("pwcheck-minlen"); + Pam::Remove ("cracklib-minlen"); // save "remember" value (number of old user passwords to not allow) if (Settings["PASSWD_REMEMBER_HISTORY"]:"0" != "0") { - Pam::Add (sformat ("pwcheck-remember=%1", + Pam::Add ("pwhistory"); + Pam::Add (sformat ("pwhistory-remember=%1", Settings["PASSWD_REMEMBER_HISTORY"]:"0")); } else - Pam::Remove ("pwcheck-remember"); + Pam::Remove ("pwhistory-remember"); PamSettings::Write (false); Modified: trunk/security/src/dialogs.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/src/dialogs.ycp?rev=574… ============================================================================== --- trunk/security/src/dialogs.ycp (original) +++ trunk/security/src/dialogs.ycp Tue Jun 2 22:40:08 2009 @@ -675,16 +675,14 @@ XFrame(0.3,0.15,_("Checks"),`VBox( settings2widget("PASSWD_USE_CRACKLIB"), VSeparator(), - settings2widget("OBSCURE_CHECKS_ENAB"), + settings2widget("PASS_MIN_LEN"), VSeparator(), settings2widget("PASSWD_REMEMBER_HISTORY"), - VSeparator() + VSeparator () )), `VSpacing(0.4), settings2widget("PASSWD_ENCRYPTION"), `VSpacing(0.4), - settings2widget("PASS_MIN_LEN"), - `VSpacing(0.4), /* Frame label */ `Frame(_("Password Age"),`HBox( `HSpacing(0.4), @@ -708,6 +706,9 @@ // select the dialog in the tree navigation Wizard::SelectTreeItem("password"); + UI::ChangeWidget (`id ("PASS_MIN_LEN"), `Enabled, + Security::Settings["PASSWD_USE_CRACKLIB"]:"" == "yes"); + any ret = nil; while(true) { ret = UI::UserInput(); @@ -720,6 +721,12 @@ else if(ret == `back) { break; } + else if (ret == "PASSWD_USE_CRACKLIB") + { + // minlen is an option for pam_cracklib + UI::ChangeWidget (`id ("PASS_MIN_LEN"), `Enabled, + UI::QueryWidget (`id (ret), `Value) == true); + } else if(ret == `next || contains(tree_dialogs, ret)) { // the current item has been selected, do not change to the same dialog if (ret == "password") @@ -751,6 +758,10 @@ Security::PasswordMaxLengths[enc]:8)); continue; } + if (min != 5) + { + UI::ChangeWidget (`id ("PASSWD_USE_CRACKLIB"), `Value, true); + } break; } else if (ret != "PASSWD_ENCRYPTION") { @@ -764,7 +775,6 @@ widget2settings("PASS_MAX_DAYS"); widget2settings("PASS_MIN_LEN"); widget2settings("PASSWD_USE_CRACKLIB"); - widget2settings("OBSCURE_CHECKS_ENAB"); widget2settings("PASS_WARN_AGE"); widget2settings("PASSWD_ENCRYPTION"); widget2settings("PASSWD_REMEMBER_HISTORY"); Modified: trunk/security/src/helps.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/src/helps.ycp?rev=57402… ============================================================================== --- trunk/security/src/helps.ycp (original) +++ trunk/security/src/helps.ycp Tue Jun 2 22:40:08 2009 @@ -110,11 +110,11 @@ cannot be found in a dictionary and is not a name or other simple, common word. By checking the box, enforce password checking in regard to these rules.") + - /* Password dialog help 3/8 */ - _("Test for Complicated Passwords: -Passwords should be constructed using a mixture of characters. This makes the -guessing of passwords very difficult. Check this box to enable additional -checks.") + + /* Password dialog help */ + _("Minimum Acceptable Password Length: +The minimum number of characters in an acceptable password. Attempts to +assign passwords with fewer characters are rejected. A zero value +suppresses this check. This option can only be modified when Check New Passwords is set.") + // Password dialog help 4/8 _("Passwords to Remember: @@ -139,12 +139,6 @@ which makes it difficult to crack passwords with the help of a dictionary.") + - /* Password dialog help 6/8 */ - _("Minimum Acceptable Password Length: -The minimum number of characters in an acceptable password. Attempts to -assign passwords with fewer characters are rejected. A zero value -suppresses this check.") + - /* Password dialog help 7/8 */ _("Password Age: Set the minimum and maximum number of days a password may be used.") + Modified: trunk/security/src/levels.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/src/levels.ycp?rev=5740… ============================================================================== --- trunk/security/src/levels.ycp (original) +++ trunk/security/src/levels.ycp Tue Jun 2 22:40:08 2009 @@ -66,7 +66,6 @@ "GID_MIN" : "1000", "DISPLAYMANAGER_SHUTDOWN" : "all", "LASTLOG_ENAB" : "yes", - "OBSCURE_CHECKS_ENAB" : "yes", "PASSWD_ENCRYPTION" : "blowfish", "PASSWD_USE_CRACKLIB" : "yes", "PASS_MAX_DAYS" : "99999", @@ -109,7 +108,6 @@ "GID_MIN" : "1000", "DISPLAYMANAGER_SHUTDOWN" : "root", "LASTLOG_ENAB" : "yes", - "OBSCURE_CHECKS_ENAB" : "yes", "PASSWD_ENCRYPTION" : "blowfish", "PASSWD_USE_CRACKLIB" : "yes", "PASS_MAX_DAYS" : "99999", @@ -152,7 +150,6 @@ "GID_MIN" : "1000", "DISPLAYMANAGER_SHUTDOWN" : "root", "LASTLOG_ENAB" : "yes", - "OBSCURE_CHECKS_ENAB" : "yes", "PASSWD_ENCRYPTION" : "blowfish", "PASSWD_USE_CRACKLIB" : "yes", "PASS_MAX_DAYS" : "99999", Modified: trunk/security/src/routines.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/src/routines.ycp?rev=57… ============================================================================== --- trunk/security/src/routines.ycp (original) +++ trunk/security/src/routines.ycp Tue Jun 2 22:40:08 2009 @@ -60,8 +60,11 @@ boolean enabled = false; if(value == "yes") enabled = true; + term chbox = `CheckBox(`id(ID), label, enabled); + if (m["Notify"]:"no" == "yes") + chbox = `CheckBox(`id(ID), `opt (`notify), label, enabled); return `VBox( - `Left(`CheckBox(`id(ID), label, enabled)), + `Left(chbox), VSeparator() ); } Modified: trunk/security/src/security.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/src/security.ycp?rev=57… ============================================================================== --- trunk/security/src/security.ycp (original) +++ trunk/security/src/security.ycp Tue Jun 2 22:40:08 2009 @@ -84,12 +84,6 @@ Security::Settings["PASSWD_ENCRYPTION"] = options["passwd"]:"des"; Security::modified = true; } - if (haskey (options, "obscure") && - options["obscure"]:"" != Security::Settings["OBSCURE_CHECKS_ENAB"]:"") - { - Security::Settings["OBSCURE_CHECKS_ENAB"] = options["obscure"]:"yes"; - Security::modified = true; - } if (haskey (options, "crack") && options["crack"]:"" != Security::Settings["PASSWD_USE_CRACKLIB"]:"") { @@ -167,12 +161,6 @@ "type" : "enum", "typespec" : [ "des", "md5", "blowfish" ], ], - "obscure" : $[ - // command line help text for 'set obscure' option - "help" : _("Test for complicated password"), - "type" : "enum", - "typespec" : [ "yes", "no" ], - ], "crack" : $[ // command line help text for 'set crack' option "help" : _("Check new passwords"), @@ -194,7 +182,7 @@ "mappings" : $[ "summary" : [], "level" : [ "home", "network", "server" ],//FIXME 1,2,3 aliases - "set" : [ "passwd", "obscure", "crack", "permissions", "remember" ], + "set" : [ "passwd", "crack", "permissions", "remember" ], ] ]; Modified: trunk/security/src/widgets.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/src/widgets.ycp?rev=574… ============================================================================== --- trunk/security/src/widgets.ycp (original) +++ trunk/security/src/widgets.ycp Tue Jun 2 22:40:08 2009 @@ -161,13 +161,6 @@ "Value" : "yes" ], - "OBSCURE_CHECKS_ENAB" : $[ - "Widget" : "CheckBox", - /* CheckBox label */ - "Label" : _("&Test for Complicated Passwords"), - "Value" : "yes" - ], - "PASSWD_ENCRYPTION" : $[ "Widget" : "ComboBox", /* ComboBox label */ @@ -182,6 +175,7 @@ "Widget" : "CheckBox", /* CheckBox label */ "Label" : _("&Check New Passwords"), + "Notify" : "yes", "Value" : "yes" ], Modified: trunk/security/testsuite/tests/Level1.out URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/testsuite/tests/Level1.… ============================================================================== --- trunk/security/testsuite/tests/Level1.out (original) +++ trunk/security/testsuite/tests/Level1.out Tue Jun 2 22:40:08 2009 @@ -79,10 +79,9 @@ Execute .target.bash "/sbin/telinit q" 0 Read .etc.default.passwd."CRYPT_FILES" nil Write .etc.default.passwd."CRYPT_FILES" "blowfish" true -Execute .target.bash_output "pam-config -a --pwcheck-cracklib" $[] -Execute .target.bash_output "pam-config -d --pwcheck-no_obscure_checks" $[] -Execute .target.bash_output "pam-config -d --pwcheck-minlen" $[] -Execute .target.bash_output "pam-config -d --pwcheck-remember" $[] +Execute .target.bash_output "pam-config -a --cracklib" $[] +Execute .target.bash_output "pam-config -d --cracklib-minlen" $[] +Execute .target.bash_output "pam-config -d --pwhistory-remember" $[] Write .etc.default.passwd nil true Execute .target.bash "echo 1 > /proc/sys/kernel/sysrq" 0 Read .sysconfig.displaymanager.DISPLAYMANAGER "" Modified: trunk/security/testsuite/tests/Level2.out URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/testsuite/tests/Level2.… ============================================================================== --- trunk/security/testsuite/tests/Level2.out (original) +++ trunk/security/testsuite/tests/Level2.out Tue Jun 2 22:40:08 2009 @@ -79,10 +79,9 @@ Execute .target.bash "/sbin/telinit q" 0 Read .etc.default.passwd."CRYPT_FILES" nil Write .etc.default.passwd."CRYPT_FILES" "blowfish" true -Execute .target.bash_output "pam-config -a --pwcheck-cracklib" $[] -Execute .target.bash_output "pam-config -d --pwcheck-no_obscure_checks" $[] -Execute .target.bash_output "pam-config -d --pwcheck-minlen" $[] -Execute .target.bash_output "pam-config -d --pwcheck-remember" $[] +Execute .target.bash_output "pam-config -a --cracklib" $[] +Execute .target.bash_output "pam-config -d --cracklib-minlen" $[] +Execute .target.bash_output "pam-config -d --pwhistory-remember" $[] Write .etc.default.passwd nil true Execute .target.bash "echo 0 > /proc/sys/kernel/sysrq" 0 Read .sysconfig.displaymanager.DISPLAYMANAGER "" Modified: trunk/security/testsuite/tests/Level3.out URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/testsuite/tests/Level3.… ============================================================================== --- trunk/security/testsuite/tests/Level3.out (original) +++ trunk/security/testsuite/tests/Level3.out Tue Jun 2 22:40:08 2009 @@ -79,10 +79,10 @@ Execute .target.bash "/sbin/telinit q" 0 Read .etc.default.passwd."CRYPT_FILES" nil Write .etc.default.passwd."CRYPT_FILES" "blowfish" true -Execute .target.bash_output "pam-config -a --pwcheck-cracklib" $[] -Execute .target.bash_output "pam-config -d --pwcheck-no_obscure_checks" $[] -Execute .target.bash_output "pam-config -a --pwcheck-minlen=6" $[] -Execute .target.bash_output "pam-config -d --pwcheck-remember" $[] +Execute .target.bash_output "pam-config -a --cracklib" $[] +Execute .target.bash_output "pam-config -a --cracklib" $[] +Execute .target.bash_output "pam-config -a --cracklib-minlen=6" $[] +Execute .target.bash_output "pam-config -d --pwhistory-remember" $[] Write .etc.default.passwd nil true Execute .target.bash "echo 0 > /proc/sys/kernel/sysrq" 0 Read .sysconfig.displaymanager.DISPLAYMANAGER "" Modified: trunk/security/testsuite/tests/Read.out URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/testsuite/tests/Read.ou… ============================================================================== --- trunk/security/testsuite/tests/Read.out (original) +++ trunk/security/testsuite/tests/Read.out Tue Jun 2 22:40:08 2009 @@ -50,8 +50,9 @@ Read .sysconfig.sysctl.IPV6_FORWARD "r11" Dir .etc.inittab: ["ca"] Read .etc.inittab.ca ":ctrlaltdel:/sbin/shutdown -r -t 4 now" -Execute .target.bash_output "pam-config -q --pwcheck" $[] Read .etc.default.passwd."CRYPT_FILES" "blowfish" Read .etc.default.passwd.group_crypt nil Read .etc.default.passwd.crypt "md5" +Execute .target.bash_output "pam-config -q --cracklib" $[] +Execute .target.bash_output "pam-config -q --pwhistory" $[] Return true Modified: trunk/security/testsuite/tests/Read.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/testsuite/tests/Read.yc… ============================================================================== --- trunk/security/testsuite/tests/Read.ycp (original) +++ trunk/security/testsuite/tests/Read.ycp Tue Jun 2 22:40:08 2009 @@ -59,7 +59,6 @@ "GID_MAX" : "l3", "GID_MIN" : "l4", "LASTLOG_ENAB" : "l5", - "OBSCURE_CHECKS_ENAB" : "l6", "PASS_MAX_DAYS" : "l7", "PASS_MIN_DAYS" : "l9", "PASS_MIN_LEN" : "l10", Modified: trunk/security/testsuite/tests/Write.out URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/testsuite/tests/Write.o… ============================================================================== --- trunk/security/testsuite/tests/Write.out (original) +++ trunk/security/testsuite/tests/Write.out Tue Jun 2 22:40:08 2009 @@ -79,10 +79,10 @@ Execute .target.bash "/sbin/telinit q" 0 Read .etc.default.passwd."CRYPT_FILES" nil Write .etc.default.passwd."CRYPT_FILES" "blowfish" true -Execute .target.bash_output "pam-config -d --pwcheck-cracklib" $[] -Execute .target.bash_output "pam-config -a --pwcheck-no_obscure_checks" $[] -Execute .target.bash_output "pam-config -a --pwcheck-minlen=l10" $[] -Execute .target.bash_output "pam-config -d --pwcheck-remember" $[] +Execute .target.bash_output "pam-config -d --cracklib" $[] +Execute .target.bash_output "pam-config -a --cracklib" $[] +Execute .target.bash_output "pam-config -a --cracklib-minlen=l10" $[] +Execute .target.bash_output "pam-config -d --pwhistory-remember" $[] Write .etc.default.passwd nil true Execute .target.bash "echo 1 > /proc/sys/kernel/sysrq" 0 Read .sysconfig.displaymanager.DISPLAYMANAGER "" Modified: trunk/security/testsuite/tests/Write.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/security/testsuite/tests/Write.y… ============================================================================== --- trunk/security/testsuite/tests/Write.ycp (original) +++ trunk/security/testsuite/tests/Write.ycp Tue Jun 2 22:40:08 2009 @@ -30,7 +30,6 @@ "GID_MIN" : "l4", "DISPLAYMANAGER_SHUTDOWN" : "r3", "LASTLOG_ENAB" : "l5", - "OBSCURE_CHECKS_ENAB" : "l6", "PASS_MAX_DAYS" : "l7", "PASS_MIN_DAYS" : "l9", "PASS_MIN_LEN" : "l10", -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57401 - /tags/stable-2_18_0/pam/
by jsuchome＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsuchome Date: Tue Jun 2 22:39:38 2009 New Revision: 57401 URL: http://svn.opensuse.org/viewcvs/yast?rev=57401&view=rev Log: Created tag stable-2_18_0 for pam Added: tags/stable-2_18_0/pam/ - copied from r57400, trunk/pam/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57400 - in /trunk/pam: VERSION package/yast2-pam.changes src/Pam.ycp src/PamSettings.ycp testsuite/tests/Read.ycp
by jsuchome＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsuchome Date: Tue Jun 2 22:39:28 2009 New Revision: 57400 URL: http://svn.opensuse.org/viewcvs/yast?rev=57400&view=rev Log: - removed obsolete functions from PamSettings - 2.18.0 Modified: trunk/pam/VERSION trunk/pam/package/yast2-pam.changes trunk/pam/src/Pam.ycp trunk/pam/src/PamSettings.ycp trunk/pam/testsuite/tests/Read.ycp Modified: trunk/pam/VERSION URL: http://svn.opensuse.org/viewcvs/yast/trunk/pam/VERSION?rev=57400&r1=57399&r… ============================================================================== --- trunk/pam/VERSION (original) +++ trunk/pam/VERSION Tue Jun 2 22:39:28 2009 @@ -1 +1 @@ -2.17.1 +2.18.0 Modified: trunk/pam/package/yast2-pam.changes URL: http://svn.opensuse.org/viewcvs/yast/trunk/pam/package/yast2-pam.changes?re… ============================================================================== --- trunk/pam/package/yast2-pam.changes (original) +++ trunk/pam/package/yast2-pam.changes Tue Jun 2 22:39:28 2009 @@ -1,4 +1,10 @@ ------------------------------------------------------------------- +Tue Jun 2 22:31:29 CEST 2009 - jsuchome(a)suse.cz + +- removed obsolete functions from PamSettings +- 2.18.0 + +------------------------------------------------------------------- Mon Nov 10 17:11:58 CET 2008 - visnov(a)suse.cz - make it build Modified: trunk/pam/src/Pam.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/pam/src/Pam.ycp?rev=57400&r1=573… ============================================================================== --- trunk/pam/src/Pam.ycp (original) +++ trunk/pam/src/Pam.ycp Tue Jun 2 22:39:28 2009 @@ -15,7 +15,7 @@ /** * Query PAM configuration for status of given module - * @param string PAM module (e.g. ldap, pwcheck) + * @param string PAM module (e.g. ldap, cracklib) * @return map <string,list> keys are 'management groups' (e.g. auth), values * are lists of options */ Modified: trunk/pam/src/PamSettings.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/pam/src/PamSettings.ycp?rev=5740… ============================================================================== --- trunk/pam/src/PamSettings.ycp (original) +++ trunk/pam/src/PamSettings.ycp Tue Jun 2 22:39:28 2009 @@ -22,150 +22,6 @@ list<string> security_files = []; -//---------------------------- functions for handling /etc/security/*.conf - -/** - * Returns list of files currently handled by the module - * @return list - */ -global define list<string> GetFiles () ``{ - - y2warning ("this function is obsolete, use Pam module instead"); - if (security_files == []) - security_files = (list<string>) SCR::Dir (.etc.security.section); - if (security_files == nil) - security_files = []; - return security_files; -} - -/** - * Form absolute path name. - * @param file name (or unambiguous substring, like "unix2" or "pwcheck") - * @return path to file - */ -define string Filename (string name) ``{ - - y2warning ("this function is obsolete, use Pam module instead"); - return ""; -} - -/** - * Returns the values (options) of one type in the given file - * @param file file name - * @param type type of management group (these are used for authentication, - * account management and password management) - * @return list of options - * @example - * GetValues ("pwcheck", "password") returns [ "nullok", "cracklib" ] - */ -global define list<string> GetValues (string file, string type) ``{ - - y2warning ("this function is obsolete, use Pam module instead"); - // FIXME temporary hack for backward compatibility - if (file == "pam_pwcheck" && type == "password") - { - map pwcheck = Pam::Query ("pwcheck"); - return pwcheck["password"]:[]; - } - return []; -} - -/** - * Returns the given file contents in the map form - * @param file file name - * @return map which maps type to list of its options - * @example - * GetFile ("pwcheck") returns $[ "password" : [ "nullok", "cracklib" ] ] - */ -global define map GetFile (string file) ``{ - - y2warning ("this function is obsolete, use Pam module instead"); - return $[]; -} - - -/** - * Adds a new options to the current list of options - * @param file file name - * @param type type of management group - * @return success - * @example - * AddValue ("pwcheck", "password", "md5" ]) - */ -global define boolean AddValue (string file, string type, string value) ``{ - y2warning ("this function is obsolete, use Pam module instead"); - if (file == "pam_pwcheck") - { - if (value == "no_obscure_checks") - return Pam::Add ("pwcheck-no_obscure_checks"); - if (value == "cracklib") - return Pam::Add ("pwcheck-cracklib"); - list split = splitstring (value, "="); - string pth = split[1]:""; - if (issubstring (value, "cracklib=")) - return Pam::Add ("pwcheck-cracklib-path=" + pth); - if (issubstring (value, "minlen=")) - return Pam::Add ("pwcheck-minlen=" + pth); - if (issubstring (value, "remember=")) - return Pam::Add ("pwcheck-remember=" + pth); - } - else if (file == "unix2" || file == "pam_unix2") - { - if (value == "use_ldap") - return Pam::Add ("ldap"); - if (value == "use_krb5") - return Pam::Add ("krb5"); - if (value == "winbind") - return Pam::Add ("winbind"); - } - return false; -} - -/** - * Deletes an options from the current list of options - * @param file file name - * @param type type of management group - * @return success - * @example - * RemoveValue ("pwcheck", "password", "md5" ]) - */ -global define boolean RemoveValue (string file, string type, string value) ``{ - y2warning ("this function is obsolete, use Pam module instead"); - if (file == "pam_pwcheck") - { - if (value == "no_obscure_checks") - return Pam::Remove ("pwcheck-no_obscure_checks"); - if (issubstring (value, "cracklib")) - return Pam::Remove ("pwcheck-cracklib"); - if (issubstring (value, "minlen=")) - return Pam::Remove ("pwcheck-minlen="); - if (issubstring (value, "remember=")) - return Pam::Remove ("pwcheck-remember="); - } - else if (file == "unix2" || file == "pam_unix2") - { - if (value == "use_ldap") - return Pam::Remove ("ldap"); - if (value == "use_krb5") - return Pam::Remove ("krb5"); - if (value == "winbind") - return Pam::Remove ("winbind"); - } - return false; -} - -/** - * Saves the new list of options of one type to given file - * @param file file name - * @param type type of management group - * @return success - * @example - * SetValues ("pwcheck", "password", [ "cracklib", "md5" ]) - */ -global define boolean SetValues (string file, string type, list<string> values) ``{ - y2warning ("this function is obsolete, use Pam module instead"); - return false; -} //---------------------------- functions for handling /etc/default/passwd Modified: trunk/pam/testsuite/tests/Read.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/pam/testsuite/tests/Read.ycp?rev… ============================================================================== --- trunk/pam/testsuite/tests/Read.ycp (original) +++ trunk/pam/testsuite/tests/Read.ycp Tue Jun 2 22:39:28 2009 @@ -34,16 +34,4 @@ ] ]; - /* - DUMP ("==== PamSettings::GetFiles: ============================="); - - TEST(``(PamSettings::GetFiles ()), [ READ, [], [] ], 0); - - DUMP ("==== PamSettings::GetValues (\"unix2\", \"passwd\") ====="); - - TEST(``(PamSettings::GetValues ("unix2", "passwd")), [ READ, [], [] ], 0); - - TEST(``(PamSettings::GetValues ("unix2", "auth")), [ READ, [], [] ], 0); - */ - } -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57399 - /trunk/storage/POTFILES
by aschnell＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: aschnell Date: Tue Jun 2 17:49:47 2009 New Revision: 57399 URL: http://svn.opensuse.org/viewcvs/yast?rev=57399&view=rev Log: - POTFILES not needed anymore Removed: trunk/storage/POTFILES -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57398 - /tags/stable-2_18_17/printer/
by jsmeix＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsmeix Date: Tue Jun 2 16:50:39 2009 New Revision: 57398 URL: http://svn.opensuse.org/viewcvs/yast?rev=57398&view=rev Log: Created tag stable-2_18_17 for printer Added: tags/stable-2_18_17/printer/ - copied from r57397, trunk/printer/ -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0

[yast-commit] r57397 - in /trunk/printer: VERSION package/yast2-printer.changes src/connectionwizard.ycp src/helps.ycp tools/autodetect_print_queues tools/determine_printer_driver_options
by jsmeix＠svn.opensuse.org 02 Jun '09

02 Jun '09

Author: jsmeix Date: Tue Jun 2 16:50:31 2009 New Revision: 57397 URL: http://svn.opensuse.org/viewcvs/yast?rev=57397&view=rev Log: - Adapted the Connection Wizard and its help text regarding beh for the new foomatic-filters 4.0.1 which now contains beh so that cups-backends is no longer required to set up beh (see Novell/Suse Bugzilla bnc#502656 comment #15). - Fixed the determine_printer_driver_options tool which failed to set PPD options with special characters in keywords (see Novell/Suse Bugzilla bnc#503774). - Let the autodetect_print_queues tool ignore "root"-instances (see Novell/Suse Bugzilla bnc#503065). - 2.18.17 Modified: trunk/printer/VERSION trunk/printer/package/yast2-printer.changes trunk/printer/src/connectionwizard.ycp trunk/printer/src/helps.ycp trunk/printer/tools/autodetect_print_queues trunk/printer/tools/determine_printer_driver_options Modified: trunk/printer/VERSION URL: http://svn.opensuse.org/viewcvs/yast/trunk/printer/VERSION?rev=57397&r1=573… ============================================================================== --- trunk/printer/VERSION (original) +++ trunk/printer/VERSION Tue Jun 2 16:50:31 2009 @@ -1 +1 @@ -2.18.16 +2.18.17 Modified: trunk/printer/package/yast2-printer.changes URL: http://svn.opensuse.org/viewcvs/yast/trunk/printer/package/yast2-printer.ch… ============================================================================== --- trunk/printer/package/yast2-printer.changes (original) +++ trunk/printer/package/yast2-printer.changes Tue Jun 2 16:50:31 2009 @@ -1,4 +1,18 @@ ------------------------------------------------------------------- +Tue Jun 2 16:35:57 CEST 2009 - jsmeix(a)suse.de + +- Adapted the Connection Wizard and its help text regarding beh + for the new foomatic-filters 4.0.1 which now contains beh + so that cups-backends is no longer required to set up beh + (see Novell/Suse Bugzilla bnc#502656 comment #15). +- Fixed the determine_printer_driver_options tool which + failed to set PPD options with special characters in keywords + (see Novell/Suse Bugzilla bnc#503774). +- Let the autodetect_print_queues tool ignore "root"-instances + (see Novell/Suse Bugzilla bnc#503065). +- 2.18.17 + +------------------------------------------------------------------- Tue May 19 15:39:34 CEST 2009 - mzugec(a)suse.cz - fixed: creating AY profile (bnc#504762) Modified: trunk/printer/src/connectionwizard.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/printer/src/connectionwizard.ycp… ============================================================================== --- trunk/printer/src/connectionwizard.ycp (original) +++ trunk/printer/src/connectionwizard.ycp Tue Jun 2 16:50:31 2009 @@ -788,23 +788,6 @@ ); break; case(`beh): - if( ! Printerlib::TestAndInstallPackage( "cups-backends", "installed" ) ) - { if( Popup::ContinueCancel( _("To use 'beh', the RPM package cups-backends must be installed.") ) ) - { Printerlib::TestAndInstallPackage( "cups-backends", "install" ); - } - // The user can also decide during the actual installation not to install it - // or the installation may have failed for whatever reason - // so that we test again whether or not it is now actually installed: - if( ! Printerlib::TestAndInstallPackage( "cups-backends", "installed" ) ) - { content = `VBox - ( `Left - ( `Label - ( _("The RPM package cups-backends is not installed.") ) - ) - ); - break; - } - } model_content = getContentFromCurrentModel(); content = `VBox ( `Left Modified: trunk/printer/src/helps.ycp URL: http://svn.opensuse.org/viewcvs/yast/trunk/printer/src/helps.ycp?rev=57397&… ============================================================================== --- trunk/printer/src/helps.ycp (original) +++ trunk/printer/src/helps.ycp Tue Jun 2 16:50:31 2009 @@ -527,7 +527,7 @@ The matching device URI is: pipe:/path/to/targetcommand Daisy-chain Backend Error Handler (beh) -To do this, the RPM package cups-backends must be installed. +To do this, the RPM package foomatic-filters must be installed. The package provides the CUPS backend 'beh'. The backend 'beh' is a wrapper for the usual backend, which is then called by beh. Modified: trunk/printer/tools/autodetect_print_queues URL: http://svn.opensuse.org/viewcvs/yast/trunk/printer/tools/autodetect_print_q… ============================================================================== --- trunk/printer/tools/autodetect_print_queues (original) +++ trunk/printer/tools/autodetect_print_queues Tue Jun 2 16:50:31 2009 @@ -81,14 +81,24 @@ # Process the data: -# Extract what is needed, quotation marks " are replaced by ' : -tr '"' "'" <$TMP_DATA_RAW_V >$TMP_DATA +# Extract only real queues (i.e. suppress instances of the form queue_name/instance) +# and replace quotation marks " by ' because " is needed as YCP string delimiter: +grep -v '^device for [^:]*/[^:]*:' $TMP_DATA_RAW_V | tr '"' "'" >$TMP_DATA # Change "^device for" to "queue" -# and convert only the first colon after the queue name to "\nuri" -# so that the DeviceURI is on a seperated line: +# and convert only the first colon (i.e. the colon after the queue name) to "\nuri" +# to get the DeviceURI is on a separated line so that the content has the form +# queue first_queue +# uri backend1:/this +# queue second_queue +# uri backend2:/that +# To be on the safe side match to ': ' so that a colon inside a queue name does not match +# because a space character is not allowed inside a queue name, +# see http://www.cups.org/documentation.php/doc-1.1/sam.html which reads +# "... the printer name must start with any printable character except " ", "/", and "@". +# It can contain up to 127 letters, numbers, and the underscore (_). Case is not significant ..." sed -i -e 's/^device for/queue/' \ - -e 's/:/\nuri/' $TMP_DATA + -e 's/: /\nuri /' $TMP_DATA # Condense multiple spaces, convert tabs to blanks, and remove leading and trailing spaces: sed -i -e 's/[[:space:]][[:space:]]*/ /g' \ Modified: trunk/printer/tools/determine_printer_driver_options URL: http://svn.opensuse.org/viewcvs/yast/trunk/printer/tools/determine_printer_… ============================================================================== --- trunk/printer/tools/determine_printer_driver_options (original) +++ trunk/printer/tools/determine_printer_driver_options Tue Jun 2 16:50:31 2009 @@ -50,10 +50,13 @@ # Get the raw data: # Continue even after timeout because then an empty YCP map is output # which indicates that there are no driver options. -# Simply delete unusual (in particular all non-ASCII) characters -# but keep the delimiters / * and newline: MAXIMUM_WAIT="10" -$LPOPTIONS -h localhost -p $QUEUE -l | tr -c -d '[:alnum:] <>/:\*\n' >$TMP_DATA & +# The Adobe PPD specification reads that main keywords can contain +# any printable ASCII character within the range of +# decimal 33 (\041) to decimal 126 (\176) inclusive. +# Also keep newline and space but exclude " (\042) which +# is needed as YCP string delimiter: +$LPOPTIONS -h localhost -p $QUEUE -l | tr -c -d '\n \041\043-\176' >$TMP_DATA & lpoptionsPID=$! # Timeout stuff: for i in $( seq $MAXIMUM_WAIT ) -- To unsubscribe, e-mail: yast-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: yast-commit+help(a)opensuse.org

1 0