|
|
 |
|
|
Changelog for libpam-devel-0.99.8.1-20.1mdv2009.1.i586.rpm :
Tue Nov 2 23:00:00 2010 Oden Eriksson 0.99.8.1-20.1mdv2009.1
- P602: security fix for CVE-2010-3316,3435 (rhel5)
- P603: security fix for CVE-2010-3853 (rhel5)
Fri Apr 17 00:00:00 2009 Frederik Himpe 0.99.8.1-20mdv2009.1
+ Revision: 367795
- Disable fork option for pam_tcb, to reflect the change made in set_tcb
Tue Mar 31 00:00:00 2009 Frederic Crozat 0.99.8.1-19mdv2009.1
+ Revision: 362380
- Add console for raw1394 (Mdv bug #47622)
Thu Mar 19 23:00:00 2009 Frederik Himpe 0.99.8.1-18mdv2009.1
+ Revision: 358110
- Add upstream patch fixing security issue (Bugtraq ID 34010)
Sun Mar 8 23:00:00 2009 Michael Scherer 0.99.8.1-17mdv2009.1
+ Revision: 352736
- fix build by updating libtool script
- update patch 32
- rediff patch 31
+ Antoine Ginies
- rebuild
Wed Aug 13 00:00:00 2008 Vincent Danen 0.99.8.1-16mdv2009.0
+ Revision: 271144
- call set_tcb in %post and require tcb itself as a result
Wed Aug 13 00:00:00 2008 Olivier Blin 0.99.8.1-15mdv2009.0
+ Revision: 271055
- move pam_tcb conflict in the proper lib package (#42709)
Tue Aug 12 00:00:00 2008 Olivier Blin 0.99.8.1-14mdv2009.0
+ Revision: 270658
- conflict with old tcb package that contained pam_unix
Sun Aug 10 00:00:00 2008 Vincent Danen 0.99.8.1-13mdv2009.0
+ Revision: 270079
- require new pam_tcb release
require specific setup version for the shadow group
restore old pam_unix and its symlinks
ensure system-auth permissions and ownership
Fri Aug 8 00:00:00 2008 Thierry Vignaud 0.99.8.1-12mdv2009.0
+ Revision: 265321
- rebuild early 2009.0 package (before pixel changes)
+ Oden Eriksson
- unset BROWSER
+ Pixel
- do not call ldconfig in %post/%postun, it is now handled by filetriggers
Fri May 23 00:00:00 2008 Vincent Danen 0.99.8.1-11mdv2009.0
+ Revision: 210056
- libpam conflicts with pam < 0.99.8.1-10mdv
- dropped the system-auth migration as per blino
- restored the 0.99.3.1 README
- renamed and trimmed the 0.99.8.1-11mdv README
Wed May 21 00:00:00 2008 Vincent Danen 0.99.8.1-10mdv2009.0
+ Revision: 209289
- gracefully handle non-standard system-auth configurations to replace pam_unix with pam_tcb (for instances like using ldap for auth, etc.) which, if not done correctly or immediately, could result in local accounts being locked out
Tue May 20 00:00:00 2008 Vincent Danen 0.99.8.1-9mdv2009.0
+ Revision: 209172
- add -D_GNU_SOURCE to $CFLAGS in order to compile pam_console and pam_timestamp
- requires pam_tcb
- buildrequires glibc-crypt_blowfish-devel
- don\'t build pam_unix; pam_tcb provides it
- unix_chkpwd and unix_update are no longer required without pam_unix
- clean up system-auth(5)
- update system-auth to use pam_tcb
- updated the Mandriva-specific README
Fri Jan 18 23:00:00 2008 Frederic Crozat 0.99.8.1-8mdv2008.1
+ Revision: 154727
- Update license info based on fedora specfile
- Update patches 25, 44 with latest version from fedora
- Remove patch26, merged into patch25
- Patch42, 43 (Fedora): don\'t use pam_console to change device ownership, rely on HAL ACL now
- Patch46 (Fedora): fix in operator (Fedora #295151)
- Patch47 (Fedora): fix invalid free on xauth module
- Patch48 (Fedora): add support for substack include
- Patch49, 50 (Fedora): add tty_audio module
- Patch523: fix build when SELinux is disabled
- Source501, 502 : add missing documentation from tarball
- Resync system-auth file with Fedora
Fri Dec 21 23:00:00 2007 Oden Eriksson 0.99.8.1-7mdv2008.1
+ Revision: 136256
- link against the bdb 4.6.x assembly-mutex-only db (buchan)
+ Thierry Vignaud
- kill re-definition of %buildroot on Pixel\'s request
+ Marcelo Ricardo Leitner
- As Blino pointed out, we can do Requires(post): coreutils as coreutils
currently just \"Requires: pam\", with no specific order.
This also fix a bug in the previous \"fix\" that would make the /dev/null
device be copied instead of creating a blank file.
- Do not use the install utility on %post section because we can\'t require
coreutils as coreutils already requires us. So replace install calls by
cp -a and chmod ones, fixing without introducing a circular dependency.
Fri Sep 21 00:00:00 2007 Frederic Crozat 0.99.8.1-6mdv2008.0
+ Revision: 91448
- Update patch24 with latest fedora version
- Patch25 (Fedora): do not ask for blank password when SELinux confined (Fedora #254044)
Thu Sep 13 00:00:00 2007 Anssi Hannula 0.99.8.1-5mdv2008.0
+ Revision: 84662
- show 0.99.3.0 notes only when upgrading from an older version
Tue Sep 11 00:00:00 2007 Olivier Blin 0.99.8.1-4mdv2008.0
+ Revision: 84153
- make evdev mouse devices owned by console user (fix synclient, #32955)
Tue Sep 4 00:00:00 2007 Frederic Crozat 0.99.8.1-3mdv2008.0
+ Revision: 78627
- Update patches 40 & 5 with latest version from RH (Fix Mdv bug #32741)
- Patch44 (RH): fix homedir init with namespace module
Tue Aug 14 00:00:00 2007 Olivier Blin 0.99.8.1-2mdv2008.0
+ Revision: 62485
- add scanner devices in the usb group (#29489, #29562)
- make sure devices are accessible by their group if specified in console.perms (#29489)
- remove mode definitions from mdvperms patch (will be done by a one-liner in the spec)
- restore console settings for lp class (wrongly removed in 0.99.6.0 rediff, #29562)
- move lp class in 50-mandriva.perms
- add compatibility symlinks for pam_unix_{auth,acct,passwd,session}.so
- add /etc/security/opasswd file
- add more module checks in check section (from Fedora)
- move checks in check section
- properly include /var/log/faillog and tallylog as ghosts and create them in post script (from Fedora)
- add user and new instance parameters to namespace init (from Fedora)
- fix typo in man pages
- enable libaudit
- rediff mdv perms patch
- do not log an audit error when uid != 0 (from Fedora)
- update to pam-redhat-0.99.8-1
- adapt to new devel library policy
- add signature
- rename sources to match RH spec file
- remove useless chmod
Wed Jul 25 00:00:00 2007 Olivier Blin 0.99.8.1-1mdv2008.0
+ Revision: 55033
- 0.99.8.1
- update RH patches
- package /sbin/unix_update
- remove old packaging hacks
- use new doc directory policy
Sun Jul 22 00:00:00 2007 David Walluck 0.99.7.1-3mdv2008.0
+ Revision: 54187
- add config-util.pamd
Wed Feb 7 23:00:00 2007 Olivier Blin 0.99.7.1-2mdv2007.0
+ Revision: 117173
- mark doc dir as docdir
- fix doc installation
- update pam_redhat to 0.99.7-1
- allow more X displays as consoles (RH #227462)
Wed Jan 24 23:00:00 2007 Olivier Blin 0.99.7.1-1mdv2007.1
+ Revision: 112870
- 0.99.7.1
Tue Jan 23 23:00:00 2007 Olivier Blin 0.99.7.0-1mdv2007.1
+ Revision: 112280
- 0.99.7.0
Sat Oct 21 00:00:00 2006 Olivier Blin 0.99.6.3-1mdv2007.1
+ Revision: 71373
- link pam_userdb with db4 (#26242 and #26572)
- pam_loginuid is now in upstream sources
- remove console reset patch, now handled upstream
- 0.99.6.3
Sun Sep 17 00:00:00 2006 Olivier Blin 0.99.6.0-3mdv2007.0
+ Revision: 61618
- 0.99.6.0-3mdv
- chown IR remote controls devices to console user (Anssi Hannula, #24785)
- add /dev/scd
* /dev/sg
* /dev/cdrw
* /dev/dvdrw
* in burner devices list (#25371 and #24541)
Thu Aug 31 00:00:00 2006 Olivier Blin 0.99.6.0-2mdv2007.0
+ Revision: 58719
- bump release
- make cdrom devices owned by cdrom group
+ Anssi Hannula
- add /dev/input/by-path/
*-joystick to class (fixes #23775)
- make class devices accessible by audio group (fixes #24300)
- make and class devices accessible by video group (fixes #24786)
Sat Aug 12 00:00:00 2006 Olivier Blin 0.99.6.0-1mdv2007.0
+ Revision: 55258
- use ndbm from db1 to build pam_userdb
- drop html, ps and pdf doc (pdf doc would require Apache\'s fop to be packaged)
- make doc/txts directory (not provided upstream anymore)
- namespace.init is now provided upstream
- drop more sgml hacks (sgml not used upstream anymore)
- remove pam-0.77-use_uid.patch (fixed upstream)
- remove pam_keyinit patches (merged upstream)
- remove pam-0.99.5.0-access-gai.patch (applied upstream)
- remove pam-0.99.4.0-succif-service.patch (merged upstream)
- remove sgml2latex patch, it doesn\'t apply anymore since xml is used instead of sgml in 0.99.6.0
- 0.99.6.0
- really use pam-redhat-0.99.6-1
- remove patch merged in pam-redhat 0.99.6-1
- revoke keyrings properly when pam_keyinit called more than once (RH)
- don\'t log pam_keyinit debug messages by default
- drop ainit from console.handlers (RH)
- add pam_keyinit to the default system-auth file (RH)
- fixed network match in pam_access (from Redhat)
- sync with pam-redhat 0.99.6-1 (and rediff mdvperms, RH merged a lot of our permissions)
- import pam-0.99.5.0-2mdv2007.0
Wed Jul 5 00:00:00 2006 Olivier Blin 0.99.5.0-2mdv2007.0
- Source500: add ttyACM
* devices in the serial class (#23190)
- Patch83 (from Fedora): add service as value to be matched and list
matching to pam_succeed_if
- use upstream redhat-modules patch
Fri Jun 30 00:00:00 2006 Olivier Blin 0.99.5.0-1mdv2007.0
- 0.99.5.0
- Patch523: temporary patch to add namespace.init, which is missing from dist
(extracted from RH old namespace patch)
- package namespace files in /etc/security
- Patch84 (from RH): pam_console_apply shouldn\'t access /var when called with -r
Fri Jun 30 00:00:00 2006 Olivier Blin 0.99.4.0-1mdv2007.0
- 0.99.4.0
- from Fedora:
o pam-0.99.4.0-redhat-modules
o pam-redhat-0.99.5-1
o add system-auth and config-util man pages
- drop Patch523 and all pwdb bits
- drop glib2-devel BuildRequires (pam_console_apply don\'t need it anymore)
- rediff Patch500 (mdv perms)
- drop Patch520 (merged upstream)
- don\'t check for userdb module, we don\'t built it
(it requires an internal libdb copy)
- package pam_tally2
Thu Feb 2 23:00:00 2006 Olivier Blin 0.99.3.0-6mdk
- update instructions in the README.update.urpmi file (Source4)
Wed Feb 1 23:00:00 2006 Thierry Vignaud 0.99.3.0-5mdk
- patch 500:
o fix firewire perms (#20270)
o fix printer perms (#13013)
Mon Jan 30 23:00:00 2006 Olivier Blin 0.99.3.0-4mdk
- don\'t build prelude (#20896)
- Patch523: allow to disable pwdb
- disable pam_pwdb
- make unix_chkpwd setuid root again
- Source2: remove hardcoded /lib/security in source
(even if spec-helper fixes it later)
- don\'t add video group in %pre, it\'s already in the setup package
- remove hardcoded workaround for a (more than) 2 years-old pam
- more BuildRequires fixes: drop autoconf2.1, use glib2-devel
(thanks to Stefan van der Eijk)
- rpmbuildupdatable
- Source4: README.update.urpmi
Sat Jan 28 23:00:00 2006 Olivier Blin 0.99.3.0-3mdk
- BuildRequires automake1.8 (Stefan van der Eijk)
- fix again Patch517 (use real patch name)
- fix typo in modules installation test
Sat Jan 28 23:00:00 2006 Olivier Blin 0.99.3.0-2mdk
- BuildConflicts with libselinux-devel (#20871)
- don\'t test if modules/pam_selinux is built, we don\'t want it
- Patch517: fix typo in limits.conf (Andrey Borzenkov, #20872)
- BuildRequires openssl-devel (#20874)
- Patch511: use pam_syslog instead of old _pam_log in pam_limits
(Andrey Borzenkov, #20876)
- BuildRequires prelude-devel
Sat Jan 28 23:00:00 2006 Olivier Blin 0.99.3.0-1mdk
- 0.99.3.0
- sync with RH (all of their others patches are either merged upstream,
or useless in Mandriva, such as SE Linux):
o drop Patch39 (wasn\'t needed for 0.77)
o drop Patch[0,1,2,3,5,6,7,8,9,11,12,13,14,15,16,17,18,19,20],
Patch[22,23,24,25,26,27,30,31,32,33,35,36,37,40] and Source4
(dropped during 0.78 upgrade)
o drop Patch29 (dropped during 0.79 upgrade)
o drop Patch4 (dropped during 0.80 upgrade)
o rediff Patch21
o don\'t use fakeroot anymore
o don\'t enable static-pam
o drop Patch10 (dropped during 0.99.2.1 upgrade)
o rediff Patch34
o fix descriptions
- rediff Patch500, and split out Mandriva-specific perms in Source500
(installed as 50-mandriva.perms)
- remove devfs-style paths in Patch500/Source500
- drop Patch502 (dead X problem fixed otherwise upstream)
- drop Patch503 (we don\'t need pam_console_apply_devfsd)
- rediff Patch504 (drop merged parts), Patch508, Patch512
- drop Patch506 (not required anymore to detect cracklib dicts on x86_64)
- drop Patch507 (tty name not found fixed otherwise upstream)
- drop Patch509 (fixed upstream)
- drop Patch513 (fixed otherwise upstream, should still work with lsb-test-pam)
- drop Patch514 (kill pam_console_setowner, pam_console_apply should be used)
- drop Patch515 (/etc/environment test fixed upstream)
- drop Patch516 (RT now supported upstream)
- rediff Patch517 (apply on limits.conf, use new rtprio keyword instead of
previous rt_priority)
- drop Patch518 (build with gcc 4 works fine now)
- add comments about ghost patches
- Patch520 and Patch521: fix parallel build
- Patch522: ensure that sgml2txt worked
- package new security/console.handlers and security/console.perms.d/
- package pam_filter/upperLOWER
- package libpamc
- package security/chroot.conf
- package lang files
- don\'t package pwdb_chkpwd
- more description fixes
Thu Jan 26 23:00:00 2006 Olivier Blin 0.77-37mdk
- handle permissions for /dev/bus/usb
Tue Jan 24 23:00:00 2006 Olivier Blin 0.77-36mdk
- fix permissions for more DVB devices (merge Patch520 in Patch500)
Mon Jan 23 23:00:00 2006 Olivier Blin 0.77-35mdk
- update Patch514 to handle multiple arguments in pam_console_setowner,
(from Andrey Borzenkov, #20269, it\'s about reimplementing recent
pam_console_apply in our weird pam_console_setowner)
- use requires instead of prereq for pam-doc
Tue Jan 10 23:00:00 2006 Thierry Vignaud 0.77-34mdk
- patch 520: set perms for DVB devices (#14688)
Fri Jan 6 23:00:00 2006 Oden Eriksson 0.77-33mdk
- drop selinux (P60)
- removed two hunks from P40 (required the selinux patch applied)
- dropped P62 (required the selinux patch applied)
- rebuilt against a non selinux enabled pwdb lib (thanks stefan)
Thu Oct 6 00:00:00 2005 Gwenole Beauchesne 0.77-32mdk
- fix build on ppc64
Wed Sep 21 00:00:00 2005 Frederic Lepied 0.77-31mdk
- fix uninitialized variable user (aka fix crash on C3)
Mon Aug 1 00:00:00 2005 Couriousous 0.77-30mdk
- Don\'t apply 64bit patch ( fix #16961 )
Thu Jun 23 00:00:00 2005 Frederic Lepied 0.77-29mdk
- fixed dependencies
Tue May 17 00:00:00 2005 Thierry Vignaud 0.77-28mdk
- patch 516: add support for RT/nice rlimit settings (kernel-2.6.12+)
- patch 517: enable new RT privileges for audio group in limits.conf
- patch 518: fix build with gcc-4.0
Fri Apr 8 00:00:00 2005 Frederic Crozat 0.77-27mdk
- Update Patch500 to add /dev/zip
* and /dev/jaz
* as zip/jaz group for
console privilege
Fri Oct 1 00:00:00 2004 Frederic Lepied 0.77-26mdk
- give access to /dev/nvram in ro for console users
- handle /dev/dri
* and /dev/nvidia the same way in startx and
*dm modes.
Wed Sep 22 00:00:00 2004 Frederic Lepied 0.77-25mdk
- pam_env: don\'t abort if /etc/environment isn\'t present (Oded Arbel)
- fix BuildRequires (Oded Arbel)
- create an empty /etc/environment
- add USB joystick devices to console.perms (bug #11190)
Sat Sep 18 00:00:00 2004 Gwenole Beauchesne 0.77-24mdk
- really build pam_console_apply_devfs against glib-1.2
Sun Sep 12 00:00:00 2004 Frederic Lepied 0.77-23mdk
- fixed debug code in pam_console_apply_devfsd
- added a way to debug pam_console_setowner by setting PAM_DEBUG env variable
- don\'t apply patch63 to have console.lock at the usual place
Sat Sep 11 00:00:00 2004 Frederic Lepied 0.77-22mdk
- implement pam_console_setowner for udev
Fri Sep 10 00:00:00 2004 Frederic Crozat 0.77-21mdk
- add sr
* to cdrom group
Thu Sep 9 00:00:00 2004 Frederic Lepied 0.77-20mdk
- fixed lookup when a group or a user doesn\'t exist (bug #11256)
- fixed the group of audio devices when nobody is connected
Wed Aug 25 00:00:00 2004 Frederic Lepied 0.77-19mdk
- added /dev/rfcomm
* /dev/ircomm
* to serial group (Fred Crozat)
Wed Aug 25 00:00:00 2004 Frederic Lepied 0.77-18mdk
- put back group in console.perms
Wed Aug 25 00:00:00 2004 Frederic Lepied 0.77-17mdk
- manage dri files perm (bug #10876 )
- manage perm of /dev/raw1394 (bug #9240)
- console.perms more group friendly (bug #3033)
- merged with rh 0.77-54
Thu Jul 29 00:00:00 2004 Frederic Crozat 0.77-16mdk
- Update patch16 to give console permissions to rfcomm devices
Wed Jul 7 00:00:00 2004 Frederic Lepied 0.77-15mdk
- fixed typo in provides for devel package
Sun Jul 4 00:00:00 2004 Stew Benedict 0.77-14mdk
- patch for lsb2 lsb-test-pam compliance (patch513)
Tue Jun 15 00:00:00 2004 Per �yvind Karlsen 0.77-13mdk
- fix buildrequires
- fix provides
- cosmetics
Tue Feb 24 23:00:00 2004 Frederic Lepied 0.77-12mdk
- console.perms: /proc/usb => /proc/bus/usb (Marcel Pol) [bug #8285]
Thu Feb 19 23:00:00 2004 Frederic Lepied 0.77-11mdk
- added a trigger to be able to upgrade
|
|
|
