Hello community, here is the log from the commit of package pam for openSUSE:Factory checked in at Thu Apr 2 17:28:13 CEST 2009. -------- --- pam/pam.changes 2009-02-11 01:20:18.000000000 +0100 +++ pam/pam.changes 2009-03-27 11:44:37.000000000 +0100 @@ -1,0 +2,24 @@ +Fri Mar 27 11:41:23 CET 2009 - kukuk@suse.de + +- Update to version 1.0.91 aka 1.1 Beta2: + * Changes in the behavior of the password stack. Results of + PRELIM_CHECK are not used for the final run. + * Redefine LOCAL keyword of pam_access configuration file + * Add support for try_first_pass and use_first_pass to + pam_cracklib + * New password quality tests in pam_cracklib + * Add support for passing PAM_AUTHTOK to stdin of helpers from + pam_exec + * New options for pam_lastlog to show last failed login attempt and + to disable lastlog update + * New pam_pwhistory module to store last used passwords + * New pam_tally2 module similar to pam_tally with wordsize independent + tally data format, obsoletes pam_tally + * Make libpam not log missing module if its type is prepended with '-' + * New pam_timestamp module for authentication based on recent successful + login. + * Add blowfish support to pam_unix. + * Add support for user specific environment file to pam_env. + * Add pam_get_authtok to libpam as Linux-PAM extension. + +------------------------------------------------------------------- calling whatdependson for head-i586 Old: ---- libpam-password-requisite.diff Linux-PAM-1.0.2-SUSE-docs.tar.bz2 Linux-PAM-1.0.2.tar.bz2 Linux-PAM-docu.diff Linux-PAM-docu-generated.diff pam-1.0.0-selinux-env-params.patch pam-1.0.1-namespace-create.patch pam_cracklib-no-pwhistory.diff pam_lastlog.diff pam_limits-doc.diff pam_limits-logging.diff pam_mail.diff pam_pwhistory-0.1.diff pam_pwhistory-type.diff pam_sepermit.diff pam_tally2.diff pam_tally.diff pam_tally-fdleak.diff pam_time.diff pam_xauth.diff pam_xauth-XAUTHLOCALHOSTNAME.diff New: ---- cvs.diff Linux-PAM-1.0.91-docs.tar.bz2 Linux-PAM-1.0.91.tar.bz2 pam_tally-deprecated.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam.spec ++++++ --- /var/tmp/diff_new_pack.Z24835/_old 2009-04-02 17:26:05.000000000 +0200 +++ /var/tmp/diff_new_pack.Z24835/_new 2009-04-02 17:26:05.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package pam (Version 1.0.2) +# spec file for package pam (Version 1.0.91) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -17,7 +17,11 @@ # norootforbuild +%if %{suse_version} < 1110 +%define enable_selinux 0 +%else %define enable_selinux 1 +%endif Name: pam Url: http://www.kernel.org/pub/linux/libs/pam/ @@ -28,9 +32,10 @@ %if %{enable_selinux} BuildRequires: libselinux-devel %endif -%define libpam_so_version 0.81.12 -%define libpam_misc_so_version 0.81.3 -%define libpamc_so_version 0.81.0 +BuildRequires: cracklib-dict-full pwdutils +%define libpam_so_version 0.82.1 +%define libpam_misc_so_version 0.82.0 +%define libpamc_so_version 0.82.0 License: BSD 3-Clause; GPL v2 or later Group: System/Libraries AutoReqProv: on @@ -39,11 +44,11 @@ Obsoletes: pam-64bit %endif # -Version: 1.0.2 -Release: 19 +Version: 1.0.91 +Release: 1 Summary: A Security Tool that Provides Authentication for Applications Source: Linux-PAM-%{version}.tar.bz2 -Source1: Linux-PAM-%{version}-SUSE-docs.tar.bz2 +Source1: Linux-PAM-%{version}-docs.tar.bz2 Source2: securetty Source3: other.pamd Source4: common-auth.pamd @@ -51,26 +56,9 @@ Source6: common-password.pamd Source7: common-session.pamd Source8: etc.environment +Patch: cvs.diff +Patch1: pam_tally-deprecated.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build -Patch: Linux-PAM-docu.diff -Patch1: pam_tally.diff -Patch2: pam_xauth.diff -Patch3: pam_sepermit.diff -Patch4: pam-1.0.1-namespace-create.patch -Patch5: pam-1.0.0-selinux-env-params.patch -Patch6: Linux-PAM-docu-generated.diff -Patch7: pam_mail.diff -Patch8: pam_tally-fdleak.diff -Patch9: pam_pwhistory-0.1.diff -Patch10: pam_lastlog.diff -Patch11: pam_tally2.diff -Patch12: pam_cracklib-no-pwhistory.diff -Patch13: pam_xauth-XAUTHLOCALHOSTNAME.diff -Patch14: pam_pwhistory-type.diff -Patch15: pam_time.diff -Patch16: pam_limits-doc.diff -Patch17: pam_limits-logging.diff -Patch18: libpam-password-requisite.diff %description PAM (Pluggable Authentication Modules) is a system security tool that @@ -117,34 +105,11 @@ %prep %setup -q -n Linux-PAM-%{version} -b 1 -%patch -p1 -%patch1 -p1 -%patch2 -p1 -%patch3 -p1 -%patch4 -p1 -%patch5 -p0 -%patch6 -p1 -%patch7 -p0 -%patch8 -p0 -%patch9 -p0 -chmod 755 modules/pam_pwhistory/tst-pam_pwhistory -%patch10 -p0 -%patch11 -p1 -chmod 755 modules/pam_tally2/tst-pam_tally2 -%patch12 -p0 -%patch13 -p0 -%patch14 -p0 -%patch15 -p0 -%patch16 -p0 -%patch17 -p0 -%patch18 -p0 +%patch -p0 +%patch1 -p0 %build -aclocal -I m4 --install --force -libtoolize --force --automake --copy -automake --add-missing --copy -autoreconf -CFLAGS="$RPM_OPT_FLAGS" \ +CFLAGS="$RPM_OPT_FLAGS -DNDEBUG" \ ./configure \ --infodir=%{_infodir} \ --mandir=%{_mandir} \ @@ -308,6 +273,7 @@ /%{_lib}/security/pam_tally.so /%{_lib}/security/pam_tally2.so /%{_lib}/security/pam_time.so +/%{_lib}/security/pam_timestamp.so /%{_lib}/security/pam_tty_audit.so /%{_lib}/security/pam_umask.so /%{_lib}/security/pam_unix.so @@ -319,8 +285,10 @@ /%{_lib}/security/pam_warn.so /%{_lib}/security/pam_wheel.so /%{_lib}/security/pam_xauth.so +/sbin/mkhomedir_helper /sbin/pam_tally /sbin/pam_tally2 +/sbin/pam_timestamp_check %verify(not mode) %attr(4755,root,shadow) /sbin/unix_chkpwd %attr(0700,root,root) /sbin/unix_update @@ -342,6 +310,27 @@ %{_libdir}/libpam_misc.so %changelog +* Fri Mar 27 2009 kukuk@suse.de +- Update to version 1.0.91 aka 1.1 Beta2: + * Changes in the behavior of the password stack. Results of + PRELIM_CHECK are not used for the final run. + * Redefine LOCAL keyword of pam_access configuration file + * Add support for try_first_pass and use_first_pass to + pam_cracklib + * New password quality tests in pam_cracklib + * Add support for passing PAM_AUTHTOK to stdin of helpers from + pam_exec + * New options for pam_lastlog to show last failed login attempt and + to disable lastlog update + * New pam_pwhistory module to store last used passwords + * New pam_tally2 module similar to pam_tally with wordsize independent + tally data format, obsoletes pam_tally + * Make libpam not log missing module if its type is prepended with '-' + * New pam_timestamp module for authentication based on recent successful + login. + * Add blowfish support to pam_unix. + * Add support for user specific environment file to pam_env. + * Add pam_get_authtok to libpam as Linux-PAM extension. * Wed Feb 11 2009 ro@suse.de - use sr@latin instead of sr@Latn * Thu Feb 05 2009 kukuk@suse.de ++++++ cvs.diff ++++++ ++++ 2333 lines (skipped) ++++++ Linux-PAM-1.0.2-SUSE-docs.tar.bz2 -> Linux-PAM-1.0.91-docs.tar.bz2 ++++++ ++++ 2275 lines of diff (skipped) ++++++ Linux-PAM-1.0.2-SUSE-docs.tar.bz2 -> Linux-PAM-1.0.91.tar.bz2 ++++++ ++++ 254345 lines of diff (skipped) ++++++ pam_tally-deprecated.diff ++++++ --- modules/pam_tally/pam_tally.8.xml +++ modules/pam_tally/pam_tally.8.xml 2009/03/27 10:49:17 @@ -81,7 +81,13 @@ <para> This module maintains a count of attempted accesses, can - reset count on success, can deny access if too many attempts fail. + reset count on success, can deny access if too many attempts + fail. + </para> + <para> + pam_tally has several limitations, which are solved with + pam_tally2. For this reason pam_tally is deprecated and + will be removed in a future release. </para> <para> pam_tally comes in two parts: --- modules/pam_tally/pam_tally.c +++ modules/pam_tally/pam_tally.c 2009/03/27 10:52:56 @@ -630,6 +630,8 @@ const char *user; + pam_syslog (pamh, LOG_INFO, "pam_tally is deprecated and obsoleted by pam_tally2"); + rvcheck = tally_parse_args(pamh, opts, PHASE_AUTH, argc, argv); if ( rvcheck != PAM_SUCCESS ) RETURN_ERROR( rvcheck ); @@ -664,6 +666,8 @@ const char *user; + pam_syslog (pamh, LOG_INFO, "pam_tally is deprecated and obsoleted by pam_tally2"); + rv = tally_parse_args(pamh, opts, PHASE_AUTH, argc, argv); if ( rv != PAM_SUCCESS ) RETURN_ERROR( rv ); @@ -709,6 +713,8 @@ const char *user; + pam_syslog (pamh, LOG_INFO, "pam_tally is deprecated and obsoleted by pam_tally2"); + rv = tally_parse_args(pamh, opts, PHASE_ACCOUNT, argc, argv); if ( rv != PAM_SUCCESS ) RETURN_ERROR( rv ); @@ -815,6 +821,8 @@ exit(0); } + fprintf (stderr, "\npam_tally is deprecated and pam_tally2 should be used instead\n\n"); + umask(077); /* ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org