From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on finch.gentoo.org X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=DMARC_NONE,MAILING_LIST_MULTI autolearn=unavailable autolearn_force=no version=4.0.0 Received: from rammstein.mweb.co.za (rammstein.mweb.co.za [196.2.53.175]) by chiba.3jane.net (Postfix) with ESMTP id B9EAF200AD39 for ; Tue, 19 Feb 2002 14:08:06 -0600 (CST) Received: from cpt-dial-196-30-178-221.mweb.co.za ([196.30.178.221] helo=nosferatu.lan) by rammstein.mweb.co.za with esmtp (Exim 3.33 #1) id 16dGUQ-00062Y-00 for gentoo-dev@gentoo.org; Tue, 19 Feb 2002 22:03:51 +0200 Subject: Re: [gentoo-dev] pam 0.75-r3... From: Martin Schlemmer To: Gentoo-Dev In-Reply-To: <1014107826.11973.13.camel@kodiak.chronospace.org> References: <1014107826.11973.13.camel@kodiak.chronospace.org> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-8AaZnzT/G2XwJVIesGKR" X-Mailer: Evolution/1.0.2 Date: 19 Feb 2002 22:01:55 +0200 Message-Id: <1014148919.7599.4.camel@nosferatu.lan> Mime-Version: 1.0 Sender: gentoo-dev-admin@gentoo.org Errors-To: gentoo-dev-admin@gentoo.org X-BeenThere: gentoo-dev@gentoo.org X-Mailman-Version: 2.0.6 Precedence: bulk Reply-To: gentoo-dev@gentoo.org List-Help: List-Post: List-Subscribe: , List-Id: Gentoo Linux developer list List-Unsubscribe: , List-Archive: X-Archives-Salt: aedbbd1e-fdcf-4f2b-94a6-5f0c0b90c15e X-Archives-Hash: f20bad983d3cc25d394b83a135fef4e9 --=-8AaZnzT/G2XwJVIesGKR Content-Type: multipart/mixed; boundary="=-TIY4jrt+wYN9NfUzjiFy" --=-TIY4jrt+wYN9NfUzjiFy Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Tue, 2002-02-19 at 10:37, Bruce A. Locke wrote: >=20 > PAM in Gentoo is currently undergoing a revamp. PAM 0.75-r3 is masked > out and for very good reason, currently passwd is broken and it has > received little testing. Don't play with it unless you know how to work > single user mode. ;) >=20 > PAM 0.75-r3 contains over 50 patches from Redhat to PAM 0.75 and > includes pam_stack and pam_console. >=20 > All entries in /etc/pam.d need to be converted to use pam_stack _after_ > Pam 0.75-r4 is out (which will be the first unmasked with pam_stack) and > tested to make sure they work. The old pam.d files should continue to > work fine until they are updated. Pam 0.75-r4 should be out tomorrow > (assuming I find out why passwd is messing up and I get positive > feedback from developers) >=20 > Several pam.d files need to be removed from the pam package and moved > into the appropriate packages and the shadow package needs to be updated > to remove its version of /etc/login.access. Also, I imagine there are a > few packages that use pam that don't install pam.d files. If you spot > any pam.d files that need to be updated, etc after 0.75-r4 is out please > don't be afraid to fix it or at the very least file a bug report with > [PAM] in its title... one of us trained monkeys will answer your report > in the order it was received... erm... *cough* ;) >=20 > pam_console use in login, etc is currently disabled because > /etc/security/console.perms needs to be updated to make it devfs > friendly. (pam_console is the part of pam that chmod's stuff like the > sound device files, etc to the person logged into the actual physical > console). Anyone who knows devfs well want to volunteer? :) >=20 We need to add the following to /etc/devfsd.conf: ----------------cut here----------------------- # Let PAM manage devfs REGISTER .* CFUNCTION /lib/security/pam_console_apply_devfsd.so pam_console_apply_single $devpath -----------------cut here---------------------- NOTE: the lines after the comment should be only one And the attatched patch applied to PAM to get the required library (i think *g*). > --=20 >=20 > Bruce A. Locke > blocke@shivan.org >=20 >=20 > _______________________________________________ > gentoo-dev mailing list > gentoo-dev@gentoo.org > http://lists.gentoo.org/mailman/listinfo/gentoo-dev --=20 Martin Schlemmer Gentoo Linux Developer, Desktop Team Developer Cape Town, South Africa --=-TIY4jrt+wYN9NfUzjiFy Content-Type: application/x-bzip Content-Disposition: attachment; filename=Linux-PAM-0.75-devfsd.patch.bz2 Content-Transfer-Encoding: base64 QlpoOTFBWSZTWUYxrlMABxV/gH90CgB////////e7r////5gENw+REWRbN2vvOr1e9z285082Xm6 B7snma0RDQBoLWegAariBKII0Jknop+IJPU9T1D1NHqAfqmR6mmgekDQAAHqB6gMkR5CZKeQU9R+ qeoNqANBoxAAaAAGRoAGRjg0aNA0GgMmIDI0MgADTTIAABggAJNKImlPQUbVG9T01E8Ke1I0YGhB hNpo1PRHqBoBpgm00EUlMCaaTIaGpiaMgeiZGjQAMIBoAA0AAJEQgQAIYQjQ0p4TRlNTyjaTI9NA jIeoNqYTZNE2O7yQkqKBIIToCsIUrYgogxBQWCDBGCKxSCnSlbgq/mvjPH//+39MZm/ZGMN1om1K xxaCjEUGMESsWwSb3vG73O3j1/J+m+UHMW7Y1+ftaZzx3DfyRfQqDklkEYlCnmdwMpEV9MnyyzTE 52GCzx/MrHsdZxRiZRBQJzugSDITJZJwKUdGNGS4MVtlnC0o+UTTlH6dZk2zTBusNjFOdwhgQrHL YjGKgvMchjAi7myapqWmHAxS5qmS0zmmVSuetjBl4qU1B46JUsaLe34qfqb3vQG+hQF8nvY99Axx 6bIKYaOpSxw9IyyIS2jjBNmwI2Uk3OC9Ya8ps9N3GI031wzVsauUWPaMBJeoEDSQktgdzTBjEYL2 aVBULVqy2QUG3MkcKg4/KZmciMbLFKShPp5Pq+zfqb02xRTAqYxhwtGjbZgcGKWpTzuvrsdvo0PR 9+ztAqbfkCF9+sWI+08Gs/XHa/uLFp0uv2kRRZurIeiHZjGWLp2OCkS9uIBAWqpo0CKupfulEkPO r4BiVBJlGCyTGLHzxk/FrJiMBRQTylbWqXr9wcqpVw9bVoY2NwyfL1rACEuw50IJA59HpZ9TL9Hl OOGIlUZ+bpCz1IG22fn4pfUltpV9reHCu8V3rsajib/H4cwD+B2FOjcd0zSvzYx4tR9xdJ+AkVZY YYhnHSb84P5FlQClxGStdPEUEtaXlKlrWteJjicy7eVMQoHkk6Pd0/R3lVV28zM2gIdtWXgGxgxr 1Gm7Q0DbdO/q6uYXD7XBYfgHtiUMWwqluUhENSTQ8ifzjBlBQUWgYqEjLE7dc+MUCniQbPo3+rC7 pcMG2LfVqzILaiz3v22gE2gqmSUcPldsfwaI2pWgLptEPBzOUG0BCbyoz9sGMQERShc17Ynzuhwh nTMVUf/MZLsuuLDNRbKaAcV0JU13YqpXaPQSLAU4owWOLwY6Cw5WLdo4UD0OTjSs078AwpaTjLsV +O+AL0AmddST1JjpUBeCCB9AxCYW1P0F+qBE6fx045wXscA7WfCYk6wknGd8lPTgqyCxVBnSyMEg s5oxGHgQ4dUCsEgdGiGziNI2jOWz9ghehNBQfOknYG8DmYdtU/gcSZmdt2BVxNgaaLe/cjgMjzpJ vNrIgMKUzznLubsXSfKaiqqzNeRZx22yiWyU0XrDa9v6z4j5LYrdRQ4Ckejt/chE8kuao2SP39c+ ue6q8KtdnMJ+rSWO3N4F+IEQ+NMa3ZFDp3atdLzhSJ+Jry1oSEQ2G2aLpHWhH3l8bmDb7CWA+rkV kRGtZVUVQfJC5cmmFywAuQUdGEElhnlptJ4TMwy2V2JUhelWk7uj4sorlfJGvrMEQRGrbcVTbVBd lIQYSEuQWzKL00VohBfuybMu9Z8QHlpu3yBsk8FcgOulMsitOwv+mhmaqYDgvLbJWP95BpIIOQGe tzSoCxm+kPMxz653lOGfgOzw798NfA5/Z8bc8l3btcYvipVPVBPi0RHgEhOPxCQC6EJtmAYQ2M0N BAaAxBwRIDQN4/ohAlVE5OS20Jn4zmjgsEMp8c6ZkoSR6ZkcrmvVKTsZ4kKBRjLRbGQgK52AwKGy xpxhWC5NtsLC9SM/q1r643GJrYOue7gWPwngIvNAhljCIcow5+eLH4yADyeKq4EecRTovSZHwbtN MaUkY6azmQG7aXXbhrupbWi7SUaWEVmumKIbGsEnU9J6b8oqIxLRjkLGtZvy/j9F9LTngwwtKmYS pTKKVZ+twO2We+JYmln0micMgQoexAoCyCt4hVB5PQFIUpXmBEgq1WStjF4LK0q1hm0crSJ0CoYS nwJgyRLSboBkDIOO92s51Qz8la8zQOVMDPWxZhPTdhru3lOy+welpgevSs52cbeN+FGwoXG4Pb41 KsvYU0EA++NLxzxfmNlK+crljF/uuwrQv0FRjJJPx8hB+76RwQkf7sIAbTFIlqh4RRFJCiTiQJ64 A9yBAgfKAVkAESANwAs4k3SH7ibQkBB1/5wJRMV71IkwlJuv4PAeZXCQheK5O+WVEqaqd570fzhu RlC36biignDDaVMoP0aQHgvtBrBK42iU2mRQ/wCc7SIEXoSVM3Y/36gKFWS4FQRkIpt0JLRUBs24 dZ9pYes2gZ0a6G6xfkbEUKALHEzmvsJSMwZGgxGCNmiyos0iKB8RQRN5ADZYvIC4Bn6S0Ygf6n3d ekxNcGrWBxiVGQkdaNJduNULbw4aEZkYnMRvhMD7zsJlatTSvWRwKsOxPjcBgEmAU2GJRmpb1QGT UNlGrvwtjbkv8VeUP4O7ajUVYjReCGWBz5/+ANoY5RELE5Q8wExGcbCdO3TkG02naNnrXJjM1wyI xMJhQyE5zCq2kCaDTwInCg5hLcThAgdavu9l7TSy7oHuFelZYrlIUTKZgvH+YoIiT+ISIsf08DT7 6oO82MIDNiLANMP8CqsyCi2ki+fvTIQLshm3ciZlTt+1k6RZr4qW6GkNiAQqBz0hJiaDCro2oWXE WfaI2boYZ9UYe8pROThNDYwZ5KE83EgdAc0jJMCTZogno/ren/y7g/iGqJ5+pYYkzZSMYdydY5hi ER8llyacaMU+s0VEVSMAqCMWtBhA2ENFyH/cc4L/NC+SMC8YynPLU2Jo3lDOQKBjNJBAzmkYdFGt TUsKW2GLSRUMoEqsCMBOTIb5B8rlEM0JNQ4uiSISgHibfX2AatgeKOo2cb58R3XOzTRCtZXGbbAX dzkTz9rDTIGhzE5DlEGaxldADYAwBjI3ViQpevsRmW8eG4iJC/Cgxsjq5IqBOdB9kWb2rRgXKRqg VYY9SgkJGt2++9VKjvIMEjiq/Cmp+HUjoI8gonAB3M/NoWZpnf0IWYDN1wUzN03DDzRYLTyptFup cYSCzqjqwBzbEgUC9QJAs4GQMBMMhwgPDUpDazlP2s78mwcEHmFTAPoMVbh79cWNl4FlYaIFcHw5 H3XPgSTibvfqwBcbHld70hgICqx+a80FrG3YSMzwkZ0k0a1m4B3fbJpTCXq+wfskM2YDPqAyEzQm I4mtD7+G3ZYsG3dERA4jFQg9pAoYSJKKpWFK5gJAt9mDKkGugPJd6QWuqFDj0P3DcocBLDiq1YT4 wiiCioj0KikSYxjeEHI6EBVktyXBkx05IUiIL0HC8opKGdaP66d4T7bTSwjBlPJpINORiSEF6DWD FJ8nthDGaXUdUtubLL2W4DwBpcQ9vNqrXrESEQwCAgEitlWWhiG6MS90QfOlsu+rkqncXDMDwaQ1 URxR1geVt+UyNpuO1kEtkH3zKOkKhJCiPTFKUCbprWKqnvEtTQHvTBdxU9gC8xFEbed6W/kWPK0j izQ2w13qMD6RGojJB7JADigz2Br+UEHmfEt35lOKKdp0TTH1piwgkkCPkKQ5eBZA7vscJUGBtITA yDEsBBYJoO9IZCXmCubkbzj5wjSgzq/xVHYNjNM2BiOUpC9yD5TFV065UtAGGTNBicFwSK2BIOjR RB6v3XLBbUBS+iaTOs3pqESf1+ESix8ckvyCXbk5gWQEyHodNgjSutI6ELe+owgKNIKMinKm8qFm 2yhAGBu86pFGQ5JUl0rAiclAzmGAzRVjOv8IcUhOwHFqCM1ylrqX0zcsvBOLQVqwt2L6l2RGY4Qr SpQ4w2oSBuAxAZJvTMwB3UFIsRBiEpVTbFFREEMR37TtUHacwdR16jvUMWAgU8ZR7Ea0aC4ADbsL 8VqEmgzCIEkGIpBWOQl4QIUKEmejRdVB4tIMcBE3lgCxErAXU3TvXoOkBgJtsGvjOcCat2YgX3nV tO6q5whelkkGCJvpmiDvWBvuQaF01ll1CNh2oLdS5Y9yD4+YevsznXszSsDEYSkKUogiDqwg5WDk WgbiEnCiAoo6FklgcldqAlYtZ2ePMf5ZjnGtzsiH8RHQKeMFU2Q4pGDOoDgGviuxcFwSUCS4G8CR iaat1HDgHggkEeF4K14krzFJZkTSSZAiQG1cBN9c1Ef/B0sBZXeQmmRSSGqIGYtUQxHciuAXYYC0 oXmRjIQFm/BNcN/ab0gy0FGq9RBL2oL52GbwShAwy2X6kvBWuAApeYpGs4IIT1MKuwJno4emZljH oxG5oGZJZ0I0vfaHcbyP8HuBve4d4sbl6FG8ZwuVW20yys9k9tYIHj0UdZeK43pS+jOslFjmUFC8 bIUz4rUrXXjtnJYUxc4Ma5nELGF1AHUiT3DZKtWpEVcFCiAkgRFIY20lANQpiMmkM5DMDIYmhLJO cEV6aEqlAUBVDCGQIBmmFQzaBY3IWNBeilInKJpgrBZ2nUhJJgJxW64y1z2bnLiMoDjKO5YZAK0M OwpNp5rjnkB2CgJLiDOcsVwpSsEYMj/rRJxTGdbPuCmFgStniSWpxQaB0KKkg0eYRKDn173Vk60d aDcECyA0IzesYBqaPKmjyOCKSU+NzEn1pMSkY1O1L5mqXt3kuSUQSMmyvpLy//F3JFOFCQRjGuUw --=-TIY4jrt+wYN9NfUzjiFy-- --=-8AaZnzT/G2XwJVIesGKR Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQA8cq8zlsNeMtCTD6kRAqv1AKCIwm3fjdF7eXv6BuY62FaGHgTr3QCcDGnF Z6gCdoEartoul3fKqed9Xxw= =W5l9 -----END PGP SIGNATURE----- --=-8AaZnzT/G2XwJVIesGKR--