Fedora 9 Update: pam_mount-0.41-2.fc9

updates at fedoraproject.org updates at fedoraproject.org
Sat Jun 28 22:16:46 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-5650
2008-06-28 20:33:50
--------------------------------------------------------------------------------

Name        : pam_mount
Product     : Fedora 9
Version     : 0.41
Release     : 2.fc9
URL         : http://pam-mount.sourceforge.net/
Summary     : A PAM module that can mount volumes for a user session
Description :
This module is aimed at environments with central file servers that a
user wishes to mount on login and unmount on logout, such as
(semi-)diskless stations where many users can logon.

The module also supports mounting local filesystems of any kind the
normal mount utility supports, with extra code to make sure certain
volumes are set up properly because often they need more than just a
mount call, such as encrypted volumes. This includes SMB/CIFS, NCP,
davfs2, FUSE, losetup crypto, dm-crypt/cryptsetup and truecrypt.

If you intend to use pam_mount to protect volumes on your computer
using an encrypted filesystem system, please know that there are many
other issues you need to consider in order to protect your data.  For
example, you probably want to disable or encrypt your swap partition.
Don't assume a system is secure without carefully considering
potential threats.

--------------------------------------------------------------------------------
Update Information:

This update contains this patch, that fixes the usage of <or> in config files:  h
ttp://dev.medozas.de/gitweb.cgi?p=pam_mount;a=blobdiff;f=src/rdconf1.c;h=593ae9d
d68f159be374a43a8eda706f1f40897a2;hp=e743d48232695b6e1b4a7b9b4edb2793d1b87fab;hb
=3760bbe48ae89398d5ee895034e9ee7cf3cd0d84;hpb=464d1c0a1b9e0f2f696ae423c91ddfaf97
97bac6    Upstream changelog for versions 0.33-0.41 of pam_mount:  - add missing
pgrp/sgrp attribute handling for simple user control  - mount.crypt: handle
arbitrary argument order  - correct extended sgrp handling  - manpages: add
missing description for <fsck>, and reorder <path>  - the documentation in
pam_mount.conf.xml has been reworked and split off into pam_mount.conf(5).  -
extensive user selection for <volume> (revised)  - case-insensitive matching for
user, pgrp, sgrp  - fixed segfault when more than one volume was defined  -
extended user selection for <volume>  - fix an unwanted inversion for handling
<options allow=" (nonempty) ">  - store per-volume option list in ordered form
-- essentially fixes the problem of "user" (implies noeexec) overriding "exec"
- fix null pointer deref (from new UID/GID range support)  - mount.crypt uses
normal sleep from coreutils again  - truecrypt 5.x is not supported because the
truecrypt CLI component that pam_mount requires was removed  - <volume> tag in
pam_mount.conf.xml supports UID and GID ranges now  - avoid printing a line of
garbage into logs  - mount.crypt: fix loop device detection  - mount.crypt: wait
for dm devices to show up  - fixed: mount flag and value were one argument  -
pmvarrun: support unprivileged mode  - Support for SSH keyboard-interactive
authenticated volumes  - documentation updates  - notify about unknown options
in /etc/pam.d/*  - support "debug" option for pam_mount in /etc/pam.d/*  -
mount.crypt: detect loop devices by major number  - remove trailing comma from
mount options
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun 23 2008 Till Maas <opensource at till.name> - 0.41-2
- Add patch to fix <or> handling in config file, reference:
  Red Hat Bugzilla #448485 comment 9
  http://sourceforge.net/tracker/index.php?func=detail&aid=1974442&group_id=41452&atid=430593
  comment from 2008-06-19 10:29
* Tue Jun 17 2008 Till Maas <opensource till name> - 0.41-1
- Update to new version
* Wed Jun 11 2008 Till Maas <opensource till name> - 0.40-1
- Update to new version
- set make variable V for full compiler commandline
* Mon May  5 2008 Till Maas <opensource till name> - 0.35-1
- Update to new version
- Use $RPM_BUILD_ROOT instead of %{buildroot}
- Update description
- create and own %{_localstatedir}/run/pam_mount
* Sun Feb 24 2008 Till Maas <opensource till name> - 0.33-1
- update to new version
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #447962 - pam_mount ignores mount -o exec flag
        https://bugzilla.redhat.com/show_bug.cgi?id=447962
  [ 2 ] Bug #448485 - Problem with volume sgrp and winbind
        https://bugzilla.redhat.com/show_bug.cgi?id=448485
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update pam_mount' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the package-announce mailing list