Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | drop '-Final' from all of the field names, but support these field names for | Steve Langasek | 2019-01-03 |
| | | | | backwards compatibility | ||
* | refine the password profiles: these should be in a 'primary' block after all, | Steve Langasek | 2019-01-03 |
| | | | | paralleling the auth structure as much as possible. | ||
* | bump the referenced version number again for one /really/ final pam upload to | Steve Langasek | 2019-01-03 |
| | | | | | | lenny, and update the checksums to point at the current template versions (replacing the previous md5sums, since that version was never uploaded to Debian) | ||
* | drop this md5sum from the branch, it's Ubuntu-specific | Steve Langasek | 2019-01-03 |
| | |||
* | add old session template md5sum | Steve Langasek | 2019-01-03 |
| | |||
* | implement automatic upgrades of the templates if they're unmodified | Steve Langasek | 2019-01-03 |
| | |||
* | first cut of a manpage for pam-auth-update | Steve Langasek | 2019-01-03 |
| | |||
* | never unlink the .pam-old file - just only create it if --force is set. | Steve Langasek | 2019-01-03 |
| | |||
* | document another bug that we need to sort out | Steve Langasek | 2019-01-03 |
| | |||
* | priority alone doesn't guarantee a complete sort; sort by the profile name as | Steve Langasek | 2019-01-03 |
| | | | | a second field, to be sure we get out all the duplicates | ||
* | filter removals out of both the available and the enabled option lists | Steve Langasek | 2019-01-03 |
| | |||
* | apparently we need to use shift @ARGV here, not just shift | Steve Langasek | 2019-01-03 |
| | |||
* | fix a typo | Steve Langasek | 2019-01-03 |
| | |||
* | use pam-auth-update --remove in the package prerms | Steve Langasek | 2019-01-03 |
| | |||
* | implement --remove, which allows deconfiguring of modules in advance of package | Steve Langasek | 2019-01-03 |
| | | | | removal | ||
* | optimize the grep a bit more | Steve Langasek | 2019-01-03 |
| | |||
* | filter the config list to exclude configs that no longer exist | Steve Langasek | 2019-01-03 |
| | | | | avoid unnecessary sort/grep in the case where we already have a sorted list | ||
* | if the target doesn't already exist, don't try to copy it | Steve Langasek | 2019-01-03 |
| | |||
* | fix the regex used when suppressing jump counts when reading the saved | Steve Langasek | 2019-01-03 |
| | | | | | config, so that we don't clobber module options with numbers in them | ||
* | another inconsistency in referring to the program name | Steve Langasek | 2019-01-03 |
| | |||
* | session needs to be handled the same way as password, with the possibility of | Steve Langasek | 2019-01-03 |
| | | | | | zero primary modules | ||
* | merge from trunk | Steve Langasek | 2019-01-03 |
|\ | |||
| * | mark for upload | Steve Langasek | 2019-01-03 |
| | | |||
| * | 055_pam_unix_nullok_secure: don't call _pammodutil_tty_secure with a NULL | Steve Langasek | 2019-01-03 |
| | | | | | | | | | | | | tty argument, since this will cause our helper to segfault instead of returning a useful value. Thanks to Troy Davis for the report. Closes: #495806. | ||
* | | bump the version check to 1.0.1-4; we had to upload 1.0.1-3 as a security fix | Steve Langasek | 2019-01-03 |
| | | |||
* | | remove spurious 'conflict' with a non-existent module, which was added just for | Steve Langasek | 2019-01-03 |
| | | | | | | | | example | ||
* | | clear the state on the correct template | Steve Langasek | 2019-01-03 |
| | | |||
* | | @enabled needs to be a unique array, sorted by priority. | Steve Langasek | 2019-01-03 |
| | | |||
* | | don't set high priority if --force is passed, this implies that we're in the | Steve Langasek | 2019-01-03 |
| | | | | | | | | initial config | ||
* | | set the priority to 'high' in the case where we had an empty set of enabled | Steve Langasek | 2019-01-03 |
| | | | | | | | | configs and had to reset to default | ||
* | | condense the unix config, leaving out redundant features that were just for | Steve Langasek | 2019-01-03 |
| | | | | | | | | show | ||
* | | handle the case where there are no modules selected at all; this is an error, | Steve Langasek | 2019-01-03 |
| | | | | | | | | but we should recover gracefully to let the user un-break their system. | ||
* | | set apporpriate values for the debconf question, by storing a list of known | Steve Langasek | 2019-01-03 |
| | | | | | | | | configs in /var/lib/pam/seen | ||
* | | we can't use 'deny' as a fallback if we aren't going to have any primary | Steve Langasek | 2019-01-03 |
| | | | | | | | | modules, which is generally the case for the password stack at present | ||
* | | remove incorrect use of the path when invoking | Steve Langasek | 2019-01-03 |
| | | |||
* | | document a couple more fixmes; and adjust the priority of the right question | Steve Langasek | 2019-01-03 |
| | | |||
* | | it would be good if I could remember the name of the script I just wrote | Steve Langasek | 2019-01-03 |
| | | |||
* | | add a --package option to pam-auth-update, which lowers the debconf priority | Steve Langasek | 2019-01-03 |
| | | | | | | | | of the multiselect question | ||
* | | libpam-cracklib: versioned depend on libpam-runtime, and invoke pam-auth-config | Steve Langasek | 2019-01-03 |
| | | | | | | | | in the postinst | ||
* | | if we didn't do a forced overwrite, don't leave the .pam-old files around | Steve Langasek | 2019-01-03 |
| | | | | | | | | because logically there shouldn't be any differences that warrant reviewing | ||
* | | on upgrade, if we used the --force option clean up he resulting .pam-old | Steve Langasek | 2019-01-03 |
| | | | | | | | | files; these are guaranteed not to contain anything of relevance. | ||
* | | really fix up the regex used for suppressing jump counts to only apply when it | Steve Langasek | 2019-01-03 |
| | | | | | | | | | | appears between brackets | ||
* | | When merging options, handle additions before removals to avoid referencing | Steve Langasek | 2019-01-03 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | an array element we've already deleted. When deleting an option from the config, take care to decrement the counter at the same time since we've just shrunk the array. In diff_profiles, store $1 somewhere more permanent so it doesn't get lost. Fix up the regex used for suppressing jump counts to only apply when it appears between brackets; numbers may also legitimately appear in module options. Quote the module line with \Q\E when doing regex matching. | ||
* | | ... and /install/ the lintian overrides, too | Steve Langasek | 2019-01-03 |
| | | |||
* | | use the proper name, Account instead of Acct, in the unix config | Steve Langasek | 2019-01-03 |
| | | |||
* | | suppress some wrong lintian warnings | Steve Langasek | 2019-01-03 |
| | | |||
* | | rephrase to avoid use of questions in the long description, to satisfy lintian | Steve Langasek | 2019-01-03 |
| | | |||
* | | and also remove the /var/lib/pam directory itself | Steve Langasek | 2019-01-03 |
| | | |||
* | | in the unlikely event of purging libpam-runtime, take care of /var/lib/pam as | Steve Langasek | 2019-01-03 |
| | | | | | | | | | | well | ||
* | | make /var/lib/pam part of the package | Steve Langasek | 2019-01-03 |
| | |