summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | pam_unix_dont_trust_chkpwd_callerSam Hartman2024-04-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dropping suid bits is not enough to let us trust the caller; the unix_chkpwd helper could be sgid shadow instead of suid root, as it is in Debian and Ubuntu by default. Drop any sgid bits as well. Authors: Steve Langasek <vorlon@debian.org>, Michael Spang <mspang@csclub.uwaterloo.ca> Upstream status: to be submitted Gbp-Pq: Name pam_unix_dont_trust_chkpwd_caller.patch
* | | | Document changes for 1.5.3-7debian/1.5.3-7Sam Hartman2024-04-08
| | | |
* | | | Document pam_umask change, Closes: #1065806Sam Hartman2024-04-08
| | | |
* | | | Depend on libdb-dev again, bringing back pam_userdb, Closes: #1065088Sam Hartman2024-04-08
| | | |
* | | | Regenerate patches to capture date change in pam_getitem.3Sam Hartman2024-04-08
| | | |
* | | | Correct Build depends for docbook5, Closes: #1065064Sam Hartman2024-04-08
| | | |
* | | | releasing package pam version 1.5.3-6Steve Langasek2024-02-29
| | | |
* | | | 1.5.3-5ubuntu2 (patches unapplied)Dan Bungert2024-02-29
|/ / / | | | | | | | | | Imported using git-ubuntu import.
* | | Document changes for 1.5.3-5debian/1.5.3-5Sam Hartman2024-02-29
| | |
* | | Replace/break libpam0t64Sam Hartman2024-02-29
| | |
* | | For now remove libdb-dev so that libdb-dev can undergo time_tSam Hartman2024-02-29
| | | | | | | | | | | | | | | transition. That means this version of pam does not include pam_userdb, which makes pam unsuitable for release.
* | | Since libpam0t64 is going away, we do not need dpkg-diversions for it.Sam Hartman2024-02-29
| | | | | | | | | | | | This reverts commit 56cd5768b32fd97a7156977dcbbd40715e158e9c.
* | | Revert renaming libpam0g to libpam0t64 for time_t transition: aptSam Hartman2024-02-29
|/ / | | | | | | | | | | | | | | sometimes removess libpam0g rather than simply letting libpam0t64 replace libpam0g (and deconfiguring libpam0g), leaving a system where essential packages are broken, Closes: #1065017 This reverts commit f8b66079e991a07d5c708aacfe8ddb2f164b5ef9.
* | Upload to unstabledebian/1.5.3-4Sam Hartman2024-02-27
| |
* | Merge in 1.5.3 from experimentalSam Hartman2024-02-27
|\ \
| * | Mitigate /usr-move file loss. (Closes: #1062802)Sam Hartman2024-02-06
| | |
| * | Retroactively document time_t transitionSam Hartman2024-02-02
| | |
| * | pam_namespace_o_directorySam Hartman2024-02-02
| | |
| * | pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS ↵Sam Hartman2024-02-02
| | | | | | | | | | | | situations (CVE-2024-22365) (Closes: #1061097)
| * | New Swedish translationsSam Hartman2024-02-02
| | |
| * | timet transitionSam Hartman2024-02-02
| | |
| * | Merge in usrmerge dep17M2 changesSam Hartman2024-01-15
| |\ \
| | * | Install into /usr/lib,sbinChris Hofstaedtler2024-01-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Non-maintainer upload. * Install into /usr/{lib,sbin} instead of /{lib,sbin}. Assumes usrmerge aliasing symlinks are in place since bookworm to keep compatibility with PAM modules still installing into /lib. (DEP17 M2) (Closes: #1060160). * Update lintian override for setgid binary.
| * | | Document changes for 1.5.3-1Sam Hartman2024-01-15
| | | |
| * | | Merge tag 'debian/1.5.2-9.1' into debian_1.5.3Sam Hartman2024-01-15
| |\| | | | | | | | | | | | | | Debian release 1.5.2-9.1
| * | | Actually enable usergroupsSam Hartman2024-01-15
| | | |
| * | | Add new common-session-* templates to pam-auth-update.Sam Hartman2024-01-15
| | | |
| * | | Enable usergroups in pam_umask by defaultSam Hartman2024-01-15
| |\ \ \ | | | | | | | | | | | | | | | Also, include pam_umask in common-session.
| | * | | Use pam_umask.so in common-session{-noninteractive}Andreas Henriksson2020-12-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This resets the umask when creating a new session to the default value instead of possibly inheriting the umask, eg. when using 'su -'. Closes: #711104
| | * | | debian/rules: use --enable-usergroups configure flagAndreas Henriksson2020-12-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes the pam_umask module have usergroups option enabled by (built-in) default. Closes: #583958
| * | | | Merge in janitor changes.Sam Hartman2024-01-15
| |\ \ \ \
| | * | | | Update standards version to 4.6.2, no changes needed.Debian Janitor2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes-By: lintian-brush Fixes: lintian: out-of-date-standards-version See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html
| | * | | | Drop unnecessary dependency on dh-autoreconf.Debian Janitor2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes-By: lintian-brush Fixes: lintian: useless-autoreconf-build-depends See-also: https://lintian.debian.org/tags/useless-autoreconf-build-depends.html
| | * | | | Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse.Debian Janitor2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes-By: lintian-brush Fixes: lintian: upstream-metadata-file-is-missing See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html Fixes: lintian: upstream-metadata-missing-bug-tracking See-also: https://lintian.debian.org/tags/upstream-metadata-missing-bug-tracking.html
| | * | | | Update renamed lintian tag names in lintian overrides.Debian Janitor2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes-By: lintian-brush Fixes: lintian: renamed-tag See-also: https://lintian.debian.org/tags/renamed-tag.html
| | * | | | Move source package lintian overrides to debian/source.Debian Janitor2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes-By: lintian-brush Fixes: lintian: old-source-override-location See-also: https://lintian.debian.org/tags/old-source-override-location.html
| | * | | | Trim trailing whitespace.Debian Janitor2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes-By: lintian-brush Fixes: lintian: trailing-whitespace See-also: https://lintian.debian.org/tags/trailing-whitespace.html
| | * | | | Update lintian override info to new format:Debian Janitor2023-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | + debian/libpam-runtime.lintian-overrides: line 5, 7, 9-13 + debian/libpam-modules.lintian-overrides: line 5-10, 14 Changes-By: lintian-brush Fixes: lintian: mismatched-override See-also: https://lintian.debian.org/tags/mismatched-override.html
| * | | | | Merge in janitor multi-arch hints.Sam Hartman2024-01-15
| |\ \ \ \ \
| | * | | | | Apply multi-arch hints.Debian Janitor2023-08-20
| | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | + libpam-doc: Add Multi-Arch: foreign. Changes-By: apply-multiarch-hints
| * | | | | Use logind instead of utmp in pam_issue and pam_timestamp; utmp is notSam Hartman2023-10-27
| | | | | | | | | | | | | | | | | | | | | | | | y2038-safe.
| * | | | | pam-auth-update: Session-Interactive-Only set to anything other thanSam Hartman2023-10-27
| | | | | | | | | | | | | | | | | | | | | | | | yes counts as undefined/no, thanks Lucas Nussbaum, Closes: #982309
| * | | | | Now PAM.7 is actually installed as pam.7 so update packagingSam Hartman2023-09-15
| | | | | |
| * | | | | Update patch to move pam manpage to section 7: docbook tools now take the ↵Sam Hartman2023-09-15
| | | | | | | | | | | | | | | | | | | | | | | | man page output name from the xml so we need to update the Makefile.
| * | | | | Drop NIS patchesSam Hartman2023-09-15
| | | | | | | | | | | | | | | | | | | | | | | | and rearrange other patches.
| * | | | | Note changes to patch seriesSam Hartman2023-09-13
| | | | | |
| * | | | | WIP initial set of 1.5.3 patchesSam Hartman2023-09-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Just an initial rebase of the patches against 1.5.3. * I'm not sure I handled pam_wheel correctly * I removed most of the generated nroff man page patches; my plan is to add a single patch at the end that includes the nroff manpage updates.
| * | | | | Update upstream source from tag 'upstream/1.5.3'Sam Hartman2023-09-11
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | Update to upstream version '1.5.3' with Debian dir 6b9d9dfb8a4ca02d4557097ee59960e72a6a4a29
| | * \ \ \ \ New upstream version 1.5.3Sam Hartman2023-09-11
| | |\ \ \ \ \
| | | * | | | | modules: update Linux detectionChristian Göttsche2023-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | GCC and Clang only define the macro `linux` when using the GNU dialect of C (e.g. -std=gnu11 instead of -std=c11). Since `linux` is also not in a reserved namespace it might be target of collisions. Use the canonical macro `__linux__` instead (already used in pam_limits.c).