Pam-developers September 2012

pam-developers@lists.fedorahosted.org

4 participants
9 discussions

[linux-pam] #4: [PATCH] po/ja.po: Fix some wrong translations and so on
by fedora-badges 26 May '15

26 May '15

#4: [PATCH] po/ja.po: Fix some wrong translations and so on --------------------+------------------------------------------------------- Reporter: fumiyas | Owner: pam-developers(a)lists.fedorahosted.org Type: defect | Status: new Priority: major | Component: library Version: 1.1.x | Keywords: l10n --------------------+------------------------------------------------------- I've updated po/ja.po to fix some wrong translations and so on. Please see and commit the attached patch to master repository if you feel good. Should I contact the original translator (Kiyoto Hashida <khashida(a)redhat.com>) to check and confirm this patch? -- Ticket URL: <https://fedorahosted.org/linux-pam/ticket/4> linux-pam <http://fedorahosted.org/linux-pam> The Linux-PAM (Pluggable Authentication Modules) project

1 9

[linux-pam] #9: Allow pam_lastlog to write to utmp as an option
by fedora-badges 24 Mar '15

24 Mar '15

#9: Allow pam_lastlog to write to utmp as an option -------------------------+------------------------------------------------- Reporter: | Owner: pam-developers@… shadowkyogre | Status: new Type: | Component: modules enhancement | Keywords: pam_lastlog utmp update patch Priority: major | prototype Version: 1.1.x | Blocking: Blocked By: | -------------------------+------------------------------------------------- The following patch for pam_lastlog allows it to write to utmp as well as wtmp. Part of the code is from xorg-sessreg to help make a utmp entry. I only tested this on my desktop, which is running Arch Linux, so some modifications may need to be made in order to make it more portable. -- Ticket URL: <https://fedorahosted.org/linux-pam/ticket/9> linux-pam <http://fedorahosted.org/linux-pam> The Linux-PAM (Pluggable Authentication Modules) project

1 4

[linux-pam] #11: sign the released tarballs
by fedora-badges 24 Mar '15

24 Mar '15

#11: sign the released tarballs ---------------------+------------------------------ Reporter: vbatts | Owner: pam-developers@… Type: defect | Status: new Priority: major | Component: library Version: | Keywords: Blocked By: | Blocking: ---------------------+------------------------------ Previously the tarballs that landed on kernel.org were signed by the trusted key 0x517D0F0E, but now the tarballs on https://fedorahosted.org/releases/l/i/linux-pam/ have no signature at all. We not be using Linux-PAM source that does not have a trusted signature. -- Ticket URL: <https://fedorahosted.org/linux-pam/ticket/11> linux-pam <http://fedorahosted.org/linux-pam> The Linux-PAM (Pluggable Authentication Modules) project

3 4

[linux-pam] #5: multiple pam_namespace unmount problems
by fedora-badges 23 Jan '14

23 Jan '14

#5: multiple pam_namespace unmount problems -----------------------------+------------------------------ Reporter: andersblomdell | Owner: pam-developers@… Type: defect | Status: new Priority: major | Component: library Version: 1.1.x | Keywords: Blocked By: | Blocking: -----------------------------+------------------------------ This is essentially a short version of the bug in: http://bugzilla.redhat.com/show_bug.cgi?id=755216 Essentially pam_namespace (1.1.5) suffers the following problems: 1. The (bind) mounts done in the new namespace is visible in the original namespace (Error "too many levels of symbolic links"). 2. At pam_namespace exit, the original mounting is restored for any remaining child processes (daemons), which is a security problem. Patch is attached -- Ticket URL: <https://fedorahosted.org/linux-pam/ticket/5> linux-pam <http://fedorahosted.org/linux-pam> The Linux-PAM (Pluggable Authentication Modules) project

1 2

[linux-pam] #8: [PATCH] pam_exec: Support showing stdout via pam_info, and only running for a specified module type
by fedora-badges 04 Sep '13

04 Sep '13

#8: [PATCH] pam_exec: Support showing stdout via pam_info, and only running for a specified module type ---------------------------+------------------------------ Reporter: joshtriplett | Owner: pam-developers@… Type: enhancement | Status: new Priority: major | Component: modules Version: | Keywords: patch Blocked By: | Blocking: ---------------------------+------------------------------ The attached patches implement two new options for the pam_exec module. Patch 1 adds a "stdout" option, which shows the stdout (and stderr) of the executed command via pam_info. For instance, adding the following line to /etc/pam.d/login right before the line for pam_motd: {{{ session optional pam_exec.so stdout /usr/bin/seq 5 }}} will print five lines (numbered 1-5) at the start and end of the session. In order to implement this option without breaking the existing support for the expose_authtok option, I had to reorganize the file descriptor handling to move the loop that closes all unwanted file descriptors below all the code that sets up stdin/stdout/stderr, and add some new code before that setup to ensure that none of the pipes ended up on stdin/stdout/stderr where they might get closed by dup2. Patch 2 adds a "type" option, which causes pam_exec to only execute the command when the PAM module type matches the given type. In particular, this makes it possible to run only at the start or end of a session, without having to write a separate wrapper script to check the PAM_TYPE environment variable. For example, adding the following to /etc/pam.d/login right before the line for pam_motd: {{{ session optional pam_exec.so type=open_session /bin/sleep 5 }}} will sleep for 5 seconds at login time, but not at logout time, demonstrating that the option works. Together, these options make it possible to show dynamically generated output at the start of a PAM session. For example, the following pam_exec invocation produces the same output as the current dynamically generated first line of the Debian motd: {{{ session optional pam_exec.so type=open_session stdout /bin/uname -snrvm }}} (As an aside, I attempted to submit these patches to pam- developers(a)lists.fedorahosted.org, but I couldn't seem to subscribe to that list (no response to my subscription confirmation), and thus my mail got moderated. Does pam-developers moderate subscriptions?) -- Ticket URL: <https://fedorahosted.org/linux-pam/ticket/8> linux-pam <http://fedorahosted.org/linux-pam> The Linux-PAM (Pluggable Authentication Modules) project

1 3

[linux-pam] #7: [PATCH] Allow changing of passwords in containers lacking CAP_AUDIT_WRITE
by fedora-badges 29 Aug '13

29 Aug '13

#7: [PATCH] Allow changing of passwords in containers lacking CAP_AUDIT_WRITE ----------------------+------------------------------ Reporter: lennart | Owner: pam-developers@… Type: defect | Status: new Priority: major | Component: modules Version: | Keywords: Blocked By: | Blocking: ----------------------+------------------------------ Currently, changing passwords fails in containers lacking CAP_AUDIT_WRITE (i.e. most containers). The patch that is attached fixes this. See patch comment for a longer explanation of what it does and why. -- Ticket URL: <https://fedorahosted.org/linux-pam/ticket/7> linux-pam <http://fedorahosted.org/linux-pam> The Linux-PAM (Pluggable Authentication Modules) project

3 8

Re: [Pam-developers] [linux-pam] release version 1.1.6
by Thorsten Kukuk 10 Oct '12

10 Oct '12

On Fri, Aug 17, kukuk wrote: > commit d4931cce402b5957189ccd34fb283b1e8db47901 > Author: Thorsten Kukuk <kukuk(a)orinoco.thkukuk.de> > Date: Fri Aug 17 11:48:15 2012 +0200 > > release version 1.1.6 Ok, Linux-1.1.6 is released, www.linux-pam.org is updated. Thorsten -- Thorsten Kukuk, Project Manager/Release Manager SLES SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)

2 1

Add auditing of rhost and tty when available
by Tomas Mraz 06 Sep '12

06 Sep '12

The attached patch adds tty and rhost to the auditing data when available. OK to commit? -- Tomas Mraz No matter how far down the wrong road you've gone, turn back. Turkish proverb

3 3

Update configure.in to more recent macros
by Tomas Mraz 06 Sep '12

06 Sep '12

This patch updates configure.in to use more recent interface for initialization of libtool as there seem to be some problem on recent libtool with using the old AC_PROG_LIBTOOL. There are also other minor changes. OK to commit? -- Tomas Mraz No matter how far down the wrong road you've gone, turn back. Turkish proverb

3 5

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

Pam-developers September 2012