openembedded-core.git/meta/recipes-extended/pam, branch dora

libpam: Avoid host contamination issue w. libprelude

2013-09-24T10:55:29+00:00

Since we dont use prelude in OE, we just disable autodetection of
prelude in the libpam configuration.

Seems like an old bug:
http://lists.openembedded.org/pipermail/openembedded-devel/2012-March/083804.html

Signed-off-by: David Nyström 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie

libpam: only use pam_systemd.so if systemd is enabled

2013-09-20T11:17:13+00:00

So that sysvinit images don't warn on every login only add it to common-session
if systemd is a DISTRO_FEATURE.

[ YOCTO #3805 ]

Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie

libpam: add PACKAGECONFIG data concerning audit

2013-08-26T10:42:12+00:00

We do not want libpam to build using audit just
because it happens to be lying around, so we
create PACKAGECONFIG[] data to give us explicit
control.

Signed-off-by: Joe Slater 
Signed-off-by: Saul Wold

libpam: deny all services for the OTHER entries

2013-07-31T05:56:27+00:00

To be secure, change behavior of the OTHER entries to warn and deny
access to everything by stating pam_deny.so on all services.

Signed-off-by: Ming Liu 
Signed-off-by: Saul Wold

libpam: add a new 'nullok_secure' option support to pam_unix

2013-07-22T16:44:10+00:00

Debian patch to add a new 'nullok_secure' option to pam_unix, which
accepts users with null passwords only when the applicant is connected
from a tty listed in /etc/securetty.

The original pam_unix.so was configured with nullok_secure in
meta/recipes-extended/pam/libpam/pam.d/common-auth, but no such code
exists actually.

The patch set comes from:
http://patch-tracker.debian.org/patch/series/view/pam/1.1.3-7.1/054_pam_security_abstract_securetty_handling
http://patch-tracker.debian.org/patch/series/view/pam/1.1.3-7.1/055_pam_unix_nullok_secure

Signed-off-by: Ming Liu 
Signed-off-by: Saul Wold

libpam: inherit pkgconfig

2013-07-09T14:56:13+00:00

* missing dependency on pkgconfig-native was causing
  that PKG_CHECK_MODULES(DBUS, dbus-1) stayed unexpanded in
  configure script:
  checking for dbm_store in -lndbm... no
  libpam/1.1.6-r2/Linux-PAM-1.1.6/configure:
  line 14217: syntax error near unexpected token `libtirpc,'
  libpam/1.1.6-r2/Linux-PAM-1.1.6/configure:
  line 14217: `      PKG_CHECK_MODULES(libtirpc, libtirpc,'
  Configure failed. The contents of all config.log files follows to aid
  debugging

Signed-off-by: Martin Jansa 
Signed-off-by: Saul Wold

libpam: check if PAM is enabled when building

2013-06-25T16:30:33+00:00

Signed-off-by: Ross Burton 
Signed-off-by: Saul Wold

libpam: fix whitespace in shell function

2013-06-25T16:30:32+00:00

Signed-off-by: Ross Burton 
Signed-off-by: Saul Wold

libpam: Fix for CVE-2010-4708

2013-06-19T08:08:50+00:00

Change default for user_readenv to 0 and document the
new default for user_readenv.

This fix from:
http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/modules/pam_env
/pam_env.c?r1=1.22&r2=1.23&view=patch
http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/modules/pam_env
/pam_env.8.xml?r1=1.7&r2=1.8&view=patch

Signed-off-by: Wenzong Fan 
Signed-off-by: Richard Purdie

libpam: Avoid wildcards in the SRC_URI

2013-05-29T21:19:01+00:00

Remove the wildcard from the SRC_URI.  This causes problems when you .bbappend
and add a FILESEXTRAPATHS entry.  The unpack task may be unable to find the
files to unpack leading to an error.

Avoid wildcards at all costs...

Signed-off-by: Jackie Huang 
Signed-off-by: Mark Hatle 
Signed-off-by: Richard Purdie