summaryrefslogtreecommitdiff
path: root/debian
Commit message (Collapse)AuthorAge
* Tweak the language in the new debconf template to my own tastes (hopefullySteve Langasek2019-01-08
| | | | | | this won't require too many round-trips between me and Sam ;), and call debconf-updatepo to make this template available for translation.
* Fix the config error *first* to limit the window of exposure as much asSteve Langasek2019-01-08
| | | | | possible, /then/ display the debconf error which may block the upgrade.
* Per discussion with Steve, move security note fromSam Hartman2019-01-08
| | | | | libpam-runtime.config to postinst.
* Load the confmodule in postinst so the config script runsSam Hartman2019-01-08
|
* On upgrades from 1.0.1-5 through 1.0.1-10 raise an alarm if we detectSam Hartman2019-01-08
| | | | | no profiles enabled.
* Straw man template for the note indicating system compromise.Sam Hartman2019-01-08
| | | | | Currently this is not tied into the debconf machinery
* Merge Steve's pam-auth-update changes with my cve patchSam Hartman2019-01-08
|\
| * When no profiles are chosen in pam-auth-update, throw an error messageSteve Langasek2019-01-08
| | | | | | | | | | and prompt again instead of letting the user end up with an insecure system. This introduces a new debconf template. Closes: #519927.
* | cve-2009-0887-libpam-pam_misc.patch: avoid integer signedness problemSam Hartman2019-01-08
|/ | | | (CVE-2009-0887) (Closes: #520115)
* Merge debian sid branchSam Hartman2019-01-08
|\
| * get the patch name into the changelog entrySteve Langasek2019-01-08
| |
| * correct a typo in the update-motd patch, introduced by me :(Steve Langasek2019-01-08
| |
| * pam_motd: run the update-motd scripts in pam_motd; render update-motdSteve Langasek2019-01-08
| | | | | | | | obsolete, LP: #399071
| * Basque, thanks to Piarres Beobide <pi+debian@beobide.net>Steve Langasek2019-01-08
| | | | | | | | (closes: #524285)
* | pam_mail-fix-quiet: patch from Andreas HenrikssonSam Hartman2019-01-08
| | | | | | | | applied upstream to fix quiet option of pam_mail, Closes: #439268
* | Overrides for lintian finding quilt patchesSam Hartman2019-01-08
| |
* | Fix lintian overrides for libpam-runtimeSam Hartman2019-01-08
| |
* | Remove conflicts information for transitions prior to woody releaseSam Hartman2019-01-08
|/
* refresh quilt patch offsetsKees Cook2019-01-08
|
* debian/control: add missing misc:Depends for packages that need it.Kees Cook2019-01-08
|
* Add debian/patches/pam_1.0.4_mindays: backport upstream 1.0.4 fixesKees Cook2019-01-08
| | | | for MINDAYS-Field regression (closes: #514437).
* German, thanks to Sven Joachim <svenjoac@gmx.de> (closes: #521530)Steve Langasek2019-01-08
|
* Russian, thanks to Yuri Kozlov <yuray@komyakino.ru> (closes: #521874)Steve Langasek2019-01-08
|
* * Updated debconf translations:Steve Langasek2019-01-08
| | | | - Finnish, thanks to Esko Arajärvi <edu@iki.fi> (closes: #520785)
* releasing version 1.0.1-9Steve Langasek2019-01-08
|
* 027_pam_limits_better_init_allow_explicit_root: defaults need to beSteve Langasek2019-01-08
| | | | | declared as LIMITS_DEF_DEFAULT instead of LIMITS_DEF_ALL, otherwise global limits will fail to be applied. LP: #314222.
* Move the pam module packages to section 'admin'.Steve Langasek2019-01-08
|
* releasing version 1.0.1-8Steve Langasek2019-01-08
|
* document a bug closureSteve Langasek2019-01-08
|
* Romanian, thanks to Eddy Petrișor <eddy.petrisor@gmail.com>Steve Langasek2019-01-08
| | | | (closes: #520552)
* Galician, thanks to Marce Villarino <mvillarino@users.sourceforge.net>Steve Langasek2019-01-08
| | | | (closes: #519447)
* Portuguese, thanks to Américo Monteiro <a_monteiro@netcabo.pt>Steve Langasek2019-01-08
| | | | (closes: #519204)
* Czech, thanks to Miroslav Kure <kurem@debian.cz> (closes: #518992)Steve Langasek2019-01-08
|
* 027_pam_limits_better_init_allow_explicit_root: set the RLIMIT_MEMLOCKSteve Langasek2019-01-08
| | | | limit correctly to match the kernel default, which is not RLIM_INFINITY.
* Slovak, thanks to Ivan Masár <helix84@centrum.sk> (closes: #518341)Steve Langasek2019-01-08
|
* Japanese, thanks to Kenshi Muto <kmuto@debian.org> (closes: #518335) Steve Langasek2019-01-08
|
* Vietnamese, thanks to Clytie Siddall <clytie@riverland.net.au>Steve Langasek2019-01-08
| | | | (closes: #518329)
* Swedish, thanks to Martin Bagge <brother@bsnet.se> (closes: #518324)Steve Langasek2019-01-08
|
* minor update to Bulgarian translationSteve Langasek2019-01-08
|
* Spanish, thanks to Javier Fernandez-Sanguino Peña <jfs@debian.org>Steve Langasek2019-01-08
| | | | (closes: #518214)
* * Updated debconf translations:Steve Langasek2019-01-08
| | | | - Bulgarian, thanks to Damyan Ivanov <dmn@debian.org> (closes: #518121)
* releasing version 1.0.1-7Steve Langasek2019-01-08
|
* pam-auth-update: set the umask, so we don't accidentally markSteve Langasek2019-01-08
|\ | | | | | | | | /etc/pam.d/common-* unreadable. Thanks to Martin Krafft for catching. Closes: #518042.
| * pam-auth-update: set the umask, so we don't accidentally mark ↵Steve Langasek2019-01-03
| | | | | | | | /etc/pam.d/common-* unreadable.
* | pam-auth-update: swap out known md5sums from intrepid pre-release Steve Langasek2019-01-08
| | | | | | | | versions with the md5sums from the released intrepid version
* | include documentation in the patch, giving examples of how to set Steve Langasek2019-01-08
| | | | | | | | limits for root. Thanks to Jonathan Marsden.
* | revert the 'fix' for bug #515673, since this isn't really a bug at all.Steve Langasek2019-01-08
| |
* | prettify the changelogSteve Langasek2019-01-08
| |
* | shadow the finite kernel defaults for RLIMIT_SIGPENDING andSteve Langasek2019-01-08
| | | | | | | | | | RLIMIT_MSGQUEUE as well, so that the preceding changes don't suddenly expose systems to DoS or other issues.
* | 027_pam_limits_better_init_allow_explicit_root: also fix the patch soSteve Langasek2019-01-08
| | | | | | | | | | that our limit resets are actually *applied*, which has apparently been broken for who knows how long!