Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | output a generic pam_permit line if the primary block is empty | Steve Langasek | 2019-01-03 | |
| | ||||
* | Use -Initial only for the first profile, even when there's no explicit -Initial | Steve Langasek | 2019-01-03 | |
| | | | | config for that first profile | |||
* | output a generic pam_permit line if the primary block is empty | Steve Langasek | 2019-01-03 | |
| | ||||
* | Use -Initial only for the first profile, even when there's no explicit -Initial | Steve Langasek | 2019-01-03 | |
| | | | | config for that first profile | |||
* | fix a bug in the parser that caused error spewing if there were any lines after | Steve Langasek | 2019-01-03 | |
| | | | | the end of the managed block | |||
* | synchronize the state-saving format with the code actually used for comparisons | Steve Langasek | 2019-01-03 | |
| | ||||
* | drop '-Final' from all of the field names, but support these field names for | Steve Langasek | 2019-01-03 | |
| | | | | backwards compatibility | |||
* | bump the referenced version number again for one /really/ final pam upload to | Steve Langasek | 2019-01-03 | |
| | | | | | | lenny, and update the checksums to point at the current template versions (replacing the previous md5sums, since that version was never uploaded to Debian) | |||
* | drop this md5sum from the branch, it's Ubuntu-specific | Steve Langasek | 2019-01-03 | |
| | ||||
* | add old session template md5sum | Steve Langasek | 2019-01-03 | |
| | ||||
* | implement automatic upgrades of the templates if they're unmodified | Steve Langasek | 2019-01-03 | |
| | ||||
* | first cut of a manpage for pam-auth-update | Steve Langasek | 2019-01-03 | |
| | ||||
* | never unlink the .pam-old file - just only create it if --force is set. | Steve Langasek | 2019-01-03 | |
| | ||||
* | document another bug that we need to sort out | Steve Langasek | 2019-01-03 | |
| | ||||
* | priority alone doesn't guarantee a complete sort; sort by the profile name as | Steve Langasek | 2019-01-03 | |
| | | | | a second field, to be sure we get out all the duplicates | |||
* | filter removals out of both the available and the enabled option lists | Steve Langasek | 2019-01-03 | |
| | ||||
* | apparently we need to use shift @ARGV here, not just shift | Steve Langasek | 2019-01-03 | |
| | ||||
* | fix a typo | Steve Langasek | 2019-01-03 | |
| | ||||
* | implement --remove, which allows deconfiguring of modules in advance of package | Steve Langasek | 2019-01-03 | |
| | | | | removal | |||
* | optimize the grep a bit more | Steve Langasek | 2019-01-03 | |
| | ||||
* | filter the config list to exclude configs that no longer exist | Steve Langasek | 2019-01-03 | |
| | | | | avoid unnecessary sort/grep in the case where we already have a sorted list | |||
* | if the target doesn't already exist, don't try to copy it | Steve Langasek | 2019-01-03 | |
| | ||||
* | fix the regex used when suppressing jump counts when reading the saved | Steve Langasek | 2019-01-03 | |
| | | | | | config, so that we don't clobber module options with numbers in them | |||
* | another inconsistency in referring to the program name | Steve Langasek | 2019-01-03 | |
| | ||||
* | session needs to be handled the same way as password, with the possibility of | Steve Langasek | 2019-01-03 | |
| | | | | | zero primary modules | |||
* | bump the version check to 1.0.1-4; we had to upload 1.0.1-3 as a security fix | Steve Langasek | 2019-01-03 | |
| | ||||
* | clear the state on the correct template | Steve Langasek | 2019-01-03 | |
| | ||||
* | @enabled needs to be a unique array, sorted by priority. | Steve Langasek | 2019-01-03 | |
| | ||||
* | don't set high priority if --force is passed, this implies that we're in the | Steve Langasek | 2019-01-03 | |
| | | | | initial config | |||
* | set the priority to 'high' in the case where we had an empty set of enabled | Steve Langasek | 2019-01-03 | |
| | | | | configs and had to reset to default | |||
* | handle the case where there are no modules selected at all; this is an error, | Steve Langasek | 2019-01-03 | |
| | | | | but we should recover gracefully to let the user un-break their system. | |||
* | set apporpriate values for the debconf question, by storing a list of known | Steve Langasek | 2019-01-03 | |
| | | | | configs in /var/lib/pam/seen | |||
* | we can't use 'deny' as a fallback if we aren't going to have any primary | Steve Langasek | 2019-01-03 | |
| | | | | modules, which is generally the case for the password stack at present | |||
* | document a couple more fixmes; and adjust the priority of the right question | Steve Langasek | 2019-01-03 | |
| | ||||
* | add a --package option to pam-auth-update, which lowers the debconf priority | Steve Langasek | 2019-01-03 | |
| | | | | of the multiselect question | |||
* | if we didn't do a forced overwrite, don't leave the .pam-old files around | Steve Langasek | 2019-01-03 | |
| | | | | because logically there shouldn't be any differences that warrant reviewing | |||
* | really fix up the regex used for suppressing jump counts to only apply when it | Steve Langasek | 2019-01-03 | |
| | | | | | appears between brackets | |||
* | When merging options, handle additions before removals to avoid referencing | Steve Langasek | 2019-01-03 | |
| | | | | | | | | | | | | | | | | an array element we've already deleted. When deleting an option from the config, take care to decrement the counter at the same time since we've just shrunk the array. In diff_profiles, store $1 somewhere more permanent so it doesn't get lost. Fix up the regex used for suppressing jump counts to only apply when it appears between brackets; numbers may also legitimately appear in module options. Quote the module line with \Q\E when doing regex matching. | |||
* | create the new default configs with support for pam-auth-update substitution, | Steve Langasek | 2019-01-03 | |
| | | | | and set up libpam-runtime.postinst to invoke pam-auth-update | |||
* | initial support for generating the PAM config: | Steve Langasek | 2019-01-03 | |
| | | | | | | | | | | | | | | | - flesh out the write_profiles() function, which writes both /etc/pam.d and /var/lib/pam - handle resetting our debconf override question on successful output - /var/lib/pam defined only once as a global - fix up the regexps for filtering jumps to take into account that a jump can appear for more than one retcode - fix an off-by-one in the case that there's no saved config - fix how we shift an array reference off an array... - fix a typo in the splice() count - our 'add' list should be a hash instead of an array, just like removals - adjust the parser to trim leading whitespace and blank lines for us | |||
* | fix an accidental commit that broke the use of x_loadtemplatefile | Steve Langasek | 2019-01-03 | |
| | ||||
* | add some FIXMEs to document known bugs | Steve Langasek | 2019-01-03 | |
| | ||||
* | run debconf-updatepo to export the new templates for translation | Steve Langasek | 2019-01-03 | |
| | ||||
* | implement the force option and the debconf override template | Steve Langasek | 2019-01-03 | |
| | ||||
* | new diff_profiles function, which spits out information about any local mods | Steve Langasek | 2019-01-03 | |
| | | | | to the autogenerated config | |||
* | first attempt at handling conflicts among the selected profiles | Steve Langasek | 2019-01-03 | |
| | ||||
* | special-case the 'Conflicts' field in the parser, to get us a list instead of | Steve Langasek | 2019-01-03 | |
| | | | | a string | |||
* | first stab at a perl helper to manage common-*: parse our config files and | Steve Langasek | 2019-01-03 | |
| | | | | | generate a debconf prompt from them, but don't yet do anything with the information | |||
* | Update the Debian PAM mini-policy to remove references to the | Steve Langasek | 2019-01-03 | |
| | | | | | long-obsolete pam_pwdb, and clarify the relationship between pam_stack and @include. | |||
* | fix-up commit for grafting svn history onto git history | Steve Langasek | 2019-01-02 | |