| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: pam-doc | Distribution: openSUSE Tumbleweed |
| Version: 1.7.0 | Vendor: openSUSE |
| Release: 2.3 | Build date: Thu Dec 5 13:44:33 2024 |
| Group: Documentation/HTML | Build host: reproducible |
| Size: 2126137 | Source RPM: pam-full-src-1.7.0-2.3.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/linux-pam/linux-pam | |
| Summary: Documentation for Pluggable Authentication Modules | |
PAM (Pluggable Authentication Modules) is a system security tool that allows system administrators to set authentication policies without having to recompile programs that do authentication. This package contains the documentation.
GPL-2.0-or-later OR BSD-3-Clause
* Thu Dec 05 2024 Valentin Lefebvre <valentin.lefebvre@suse.com>
- pam_access: rework resolving of tokens as hostname
- separate resolving of IP addresses from hostnames. Don't resolve TTYs or
display variables as hostname.
- Add "nodns" option to disallow resolving of tokens as hostname.
- [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
CVE-2024-10963]
* Thu Oct 24 2024 Thorsten Kukuk <kukuk@suse.com>
- Update to version 1.7.0
- build: changed build system from autotools to meson.
- libpam_misc: use ECHOCTL in the terminal input
- pam_access: support UID and GID in access.conf
- pam_env: install environment file in vendordir if vendordir is enabled
- pam_issue: only count class user if logind support is enabled
- pam_limits: use systemd-logind instead of utmp if logind support is enabled
- pam_unix: compare password hashes in constant time
- Multiple minor bug fixes, build fixes, portability fixes,
documentation improvements, and translation updates.
- Drop upstream patches:
- pam-bsc1194818-cursor-escape.patch
- pam_limits-systemd.patch
- pam_issue-systemd.patch
* Thu Sep 12 2024 Thorsten Kukuk <kukuk@suse.com>
- baselibs.conf: add pam-userdb
* Tue Sep 10 2024 Thorsten Kukuk <kukuk@suse.com>
- pam_limits-systemd.patch: update to final PR
* Fri Sep 06 2024 Thorsten Kukuk <kukuk@suse.com>
- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions
* Wed Aug 07 2024 Stanislav Brabec <sbrabec@suse.com>
- Prevent cursor escape from the login prompt [bsc#1194818]
* Added: pam-bsc1194818-cursor-escape.patch
* Wed Apr 10 2024 Thorsten Kukuk <kukuk@suse.com>
- Update to version 1.6.1
- pam_env: fixed --disable-econf --enable-vendordir support.
- pam_unix: do not warn if password aging is disabled.
- pam_unix: try to set uid to 0 before unix_chkpwd invocation.
- pam_unix: allow empty passwords with non-empty hashes.
- Multiple minor bug fixes, build fixes, portability fixes,
documentation improvements, and translation updates.
- Remove backports:
- pam_env-fix_vendordir.patch
- pam_env-fix-enable-vendordir-fallback.patch
- pam_env-remove-escaped-newlines.patch
- pam_unix-fix-password-aging-disabled.patch
* Thu Feb 22 2024 Valentin Lefebvre <valentin.lefebvre@suse.com>
- Use autosetup to prepare for RPM 4.20.
* Wed Feb 07 2024 Thorsten Kukuk <kukuk@suse.com>
- pam.tmpfiles: Make sure the content of the /run directories get
removed in case of a soft-reboot
* Tue Jan 30 2024 Thorsten Kukuk <kukuk@suse.com>
- Enable pam_canonicalize_user.so
* Fri Jan 19 2024 Thorsten Kukuk <kukuk@suse.com>
- Add post 1.6.0 release fixes for pam_env and pam_unix:
- pam_env-fix-enable-vendordir-fallback.patch
- pam_env-fix_vendordir.patch
- pam_env-remove-escaped-newlines.patch
- pam_unix-fix-password-aging-disabled.patch
- Update to version 1.6.0
- Added support of configuration files with arbitrarily long lines.
- build: fixed build outside of the source tree.
- libpam: added use of getrandom(2) as a source of randomness if available.
- libpam: fixed calculation of fail delay with very long delays.
- libpam: fixed potential infinite recursion with includes.
- libpam: implemented string to number conversions validation when parsing
controls in configuration.
- pam_access: added quiet_log option.
- pam_access: fixed truncation of very long group names.
- pam_canonicalize_user: new module to canonicalize user name.
- pam_echo: fixed file handling to prevent overflows and short reads.
- pam_env: added support of '\' character in environment variable values.
- pam_exec: allowed expose_authtok for password PAM_TYPE.
- pam_exec: fixed stack overflow with binary output of programs.
- pam_faildelay: implemented parameter ranges validation.
- pam_listfile: changed to treat \r and \n exactly the same in configuration.
- pam_mkhomedir: hardened directory creation against timing attacks.
- Please note that using *at functions leads to more open file handles
during creation.
- pam_namespace: fixed potential local DoS (CVE-2024-22365).
- pam_nologin: fixed file handling to prevent short reads.
- pam_pwhistory: helper binary is now built only if SELinux support is
enabled.
- pam_pwhistory: implemented reliable usernames handling when remembering
passwords.
- pam_shells: changed to allow shell entries with absolute paths only.
- pam_succeed_if: fixed treating empty strings as numerical value 0.
- pam_unix: added support of disabled password aging.
- pam_unix: synchronized password aging with shadow.
- pam_unix: implemented string to number conversions validation.
- pam_unix: fixed truncation of very long user names.
- pam_unix: corrected rounds retrieval for configured encryption method.
- pam_unix: implemented reliable usernames handling when remembering
passwords.
- pam_unix: changed to always run the helper to obtain shadow password
entries.
- pam_unix: unix_update helper binary is now built only if SELinux support
is enabled.
- pam_unix: added audit support to unix_update helper.
- pam_userdb: added gdbm support.
- Multiple minor bug fixes, portability fixes, documentation improvements,
and translation updates.
- The following patches are obsolete with the update:
- pam_access-doc-IPv6-link-local.patch
- pam_access-hostname-debug.patch
- pam_shells-fix-econf-memory-leak.patch
- pam_shells-fix-econf-memory-leak.patch
- disable-examples.patch
- pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS
is no longer used.
* Wed Aug 23 2023 Thorsten Kukuk <kukuk@suse.com>
- Fix building without SELinux
* Mon Aug 07 2023 Thorsten Kukuk <kukuk@suse.com>
- pam_access backports from upstream:
- pam_access-doc-IPv6-link-local.patch:
Document only partial supported IPv6 link local addresses
- pam_access-hostname-debug.patch:
Don't print error if we cannot resolve a hostname, does not
need to be a hostname
- pam_shells-fix-econf-memory-leak.patch:
Free econf keys variable
- disable-examples.patch:
Don't build examples
* Tue May 09 2023 Thorsten Kukuk <kukuk@suse.com>
- Update to final 1.5.3 release:
- configure: added --enable-logind option to use logind instead of utmp
in pam_issue and pam_timestamp.
- pam_modutil_getlogin: changed to use getlogin() from libc instead of
parsing utmp.
- Added libeconf support to pam_env and pam_shells.
- Added vendor directory support to pam_access, pam_env, pam_group,
pam_faillock, pam_limits, pam_namespace, pam_pwhistory, pam_sepermit,
pam_shells, and pam_time.
- pam_limits: changed to not fail on missing config files.
- pam_pwhistory: added conf= option to specify config file location.
- pam_pwhistory: added file= option to specify password history file
location.
- pam_shells: added shells.d support when libeconf and vendordir are enabled.
- Deprecated pam_lastlog: this module is no longer built by default because
it uses utmp, wtmp, btmp and lastlog, but none of them are Y2038 safe,
even on 64bit architectures.
pam_lastlog will be removed in one of the next releases, consider using
pam_lastlog2 (from https://github.com/thkukuk/lastlog2) and/or
pam_wtmpdb (from https://github.com/thkukuk/wtmpdb) instead.
- Deprecated _pam_overwrite(), _pam_overwrite_n(), and _pam_drop_reply()
macros provided by _pam_macros.h; the memory override performed by these
macros can be optimized out by the compiler and therefore can no longer
be relied upon.
* Thu Apr 20 2023 Thorsten Kukuk <kukuk@suse.com>
- pam-extra: add split provide
* Wed Apr 12 2023 Thorsten Kukuk <kukuk@suse.com>
- pam-userdb: add split provide
* Tue Apr 11 2023 Thorsten Kukuk <kukuk@suse.com>
- Drop pam-xauth_ownership.patch, got fixed in sudo itself
- Drop pam-bsc1177858-dont-free-environment-string.patch, was a
fix for above patch
* Thu Apr 06 2023 Thorsten Kukuk <kukuk@suse.com>
- Use bcond selinux to disable SELinux
- Remove old pam_unix_* compat symlinks
- Move pam_userdb to own pam-userdb sub-package
- pam-extra contains now modules having extended dependencies like
libsystemd
- Update to 1.5.3.90 git snapshot
- Drop merged patches:
- pam-git.diff
- docbook5.patch
- pam_pwhistory-docu.patch
- pam_xauth_data.3.xml.patch
- Drop Linux-PAM-1.5.2.90.tar.xz as we have to rebuild all
documentation anyways and don't use the prebuild versions
- Move all devel manual pages to pam-manpages, too. Fixes the
problem that adjusted defaults not shown correct.
* Mon Mar 20 2023 Thorsten Kukuk <kukuk@suse.com>
- Add common-session-nonlogin and postlogin-* pam.d config files
for https://github.com/SUSE/pam-config/pull/16, pam_lastlog2
and upcoming pam_wtmpdb.
* Fri Mar 10 2023 Giuliano Belinassi <giuliano.belinassi@suse.com>
- Enable livepatching support on x86_64.
* Tue Jan 24 2023 Valentin Lefebvre <valentin.lefebvre@suse.com>
- Use rpm macros for pam dist conf dir (/usr/etc/security)
* Wed Jan 18 2023 Stefan Schubert <schubi@suse.com>
- Moved following files/dirs in /etc/security to vendor directory:
access.conf, limits.d, sepermit.conf, time.conf, namespace.conf,
namespace.d, namespace.init
* Sat Dec 24 2022 Dominique Leuenberger <dleuenberger@suse.com>
- Also obsolete pam_unix-32bit to have clean upgrade path.
* Fri Dec 16 2022 Thorsten Kukuk <kukuk@suse.com>
- Merge pam_unix back into pam, seperate package not needed anymore
* Thu Dec 15 2022 Thorsten Kukuk <kukuk@suse.com>
- Update pam-git.diff to current upstream
- pam_env: Use vendor specific pam_env.conf and environment as fallback
- pam_shells: Use the vendor directory
obsoletes pam_env_econf.patch
- Refresh docbook5.patch
* Tue Dec 06 2022 Thorsten Kukuk <kukuk@suse.com>
- pam_pwhistory-docu.patch, docbook5.patch: convert docu to
docbook5
* Thu Dec 01 2022 Thorsten Kukuk <kukuk@suse.com>
- pam-git.diff: update to current git
- obsoletes pam-hostnames-in-access_conf.patch
- obsoletes tst-pam_env-retval.c
- pam_env_econf.patch refresh
* Tue Nov 22 2022 Thorsten Kukuk <kukuk@suse.com>
- Move pam_env config files below /usr/etc
* Tue Oct 11 2022 Stefan Schubert <schubi@suse.com>
- pam_env: Using libeconf for reading configuration and environment
files. (Patch: pam_env_econf.patch; Testcase: tst-pam_env-retval.c)
* Fri Jun 17 2022 Thorsten Kukuk <kukuk@suse.com>
- Keep old directory in filelist for migration
* Wed Jun 01 2022 Thorsten Kukuk <kukuk@suse.com>
- Move PAM config files from /usr/etc/pam.d to /usr/lib/pam.d
* Fri Mar 11 2022 Thorsten Kukuk <kukuk@suse.com>
- pam-hostnames-in-access_conf.patch: update with upstream
submission. Fixes several bugs including memory leaks.
* Wed Feb 09 2022 Thorsten Kukuk <kukuk@suse.com>
- Move group.conf and faillock.conf to /usr/etc/security
* Mon Feb 07 2022 Thorsten Kukuk <kukuk@suse.com>
- Update to current git for enhanced vendordir support (pam-git.diff)
Obsoletes:
- 0001-Include-pam_xauth_data.3.xml-in-source-archive-400.patch
- 0002-Only-include-vendordir-in-manual-page-if-set-401.patch
- 0003-Use-vendor-specific-limits.conf-as-fallback-402.patch
/usr/share/doc/packages/pam /usr/share/doc/packages/pam/Linux-PAM_ADG.txt /usr/share/doc/packages/pam/Linux-PAM_MWG.txt /usr/share/doc/packages/pam/Linux-PAM_SAG.txt /usr/share/doc/packages/pam/draft-morgan-pam-current.txt /usr/share/doc/packages/pam/html /usr/share/doc/packages/pam/html/Linux-PAM_ADG.html /usr/share/doc/packages/pam/html/Linux-PAM_MWG.html /usr/share/doc/packages/pam/html/Linux-PAM_SAG.html /usr/share/doc/packages/pam/html/adg-author.html /usr/share/doc/packages/pam/html/adg-copyright.html /usr/share/doc/packages/pam/html/adg-example.html /usr/share/doc/packages/pam/html/adg-files.html /usr/share/doc/packages/pam/html/adg-glossary.html /usr/share/doc/packages/pam/html/adg-interface-by-app-expected.html /usr/share/doc/packages/pam/html/adg-interface-of-app-expected.html /usr/share/doc/packages/pam/html/adg-interface-programming-notes.html /usr/share/doc/packages/pam/html/adg-interface.html /usr/share/doc/packages/pam/html/adg-introduction-description.html /usr/share/doc/packages/pam/html/adg-introduction-synopsis.html /usr/share/doc/packages/pam/html/adg-introduction.html /usr/share/doc/packages/pam/html/adg-libpam-functions.html /usr/share/doc/packages/pam/html/adg-libpam_misc.html /usr/share/doc/packages/pam/html/adg-overview.html /usr/share/doc/packages/pam/html/adg-porting.html /usr/share/doc/packages/pam/html/adg-security-conv-function.html /usr/share/doc/packages/pam/html/adg-security-library-calls.html /usr/share/doc/packages/pam/html/adg-security-resources.html /usr/share/doc/packages/pam/html/adg-security-service-name.html /usr/share/doc/packages/pam/html/adg-security-user-identity.html /usr/share/doc/packages/pam/html/adg-security.html /usr/share/doc/packages/pam/html/adg-see-also.html /usr/share/doc/packages/pam/html/index.html /usr/share/doc/packages/pam/html/mwg-author.html /usr/share/doc/packages/pam/html/mwg-copyright.html /usr/share/doc/packages/pam/html/mwg-example.html /usr/share/doc/packages/pam/html/mwg-expected-by-module-item.html /usr/share/doc/packages/pam/html/mwg-expected-by-module-other.html /usr/share/doc/packages/pam/html/mwg-expected-by-module.html /usr/share/doc/packages/pam/html/mwg-expected-of-module-acct.html /usr/share/doc/packages/pam/html/mwg-expected-of-module-auth.html /usr/share/doc/packages/pam/html/mwg-expected-of-module-chauthtok.html /usr/share/doc/packages/pam/html/mwg-expected-of-module-overview.html /usr/share/doc/packages/pam/html/mwg-expected-of-module-session.html /usr/share/doc/packages/pam/html/mwg-expected-of-module.html /usr/share/doc/packages/pam/html/mwg-introduction-description.html /usr/share/doc/packages/pam/html/mwg-introduction-synopsis.html /usr/share/doc/packages/pam/html/mwg-introduction.html /usr/share/doc/packages/pam/html/mwg-see-also.html /usr/share/doc/packages/pam/html/mwg-see-options.html /usr/share/doc/packages/pam/html/mwg-see-programming-libs.html /usr/share/doc/packages/pam/html/mwg-see-programming-sec.html /usr/share/doc/packages/pam/html/mwg-see-programming-syslog.html /usr/share/doc/packages/pam/html/mwg-see-programming.html /usr/share/doc/packages/pam/html/sag-author.html /usr/share/doc/packages/pam/html/sag-configuration-directory.html /usr/share/doc/packages/pam/html/sag-configuration-example.html /usr/share/doc/packages/pam/html/sag-configuration-file.html /usr/share/doc/packages/pam/html/sag-configuration.html /usr/share/doc/packages/pam/html/sag-copyright.html /usr/share/doc/packages/pam/html/sag-introduction.html /usr/share/doc/packages/pam/html/sag-module-reference.html /usr/share/doc/packages/pam/html/sag-overview.html /usr/share/doc/packages/pam/html/sag-pam_access.html /usr/share/doc/packages/pam/html/sag-pam_canonicalize_user.html /usr/share/doc/packages/pam/html/sag-pam_debug.html /usr/share/doc/packages/pam/html/sag-pam_deny.html /usr/share/doc/packages/pam/html/sag-pam_echo.html /usr/share/doc/packages/pam/html/sag-pam_env.html /usr/share/doc/packages/pam/html/sag-pam_exec.html /usr/share/doc/packages/pam/html/sag-pam_faildelay.html /usr/share/doc/packages/pam/html/sag-pam_faillock.html /usr/share/doc/packages/pam/html/sag-pam_filter.html /usr/share/doc/packages/pam/html/sag-pam_ftp.html /usr/share/doc/packages/pam/html/sag-pam_group.html /usr/share/doc/packages/pam/html/sag-pam_issue.html /usr/share/doc/packages/pam/html/sag-pam_keyinit.html /usr/share/doc/packages/pam/html/sag-pam_lastlog.html /usr/share/doc/packages/pam/html/sag-pam_limits.html /usr/share/doc/packages/pam/html/sag-pam_listfile.html /usr/share/doc/packages/pam/html/sag-pam_localuser.html /usr/share/doc/packages/pam/html/sag-pam_loginuid.html /usr/share/doc/packages/pam/html/sag-pam_mail.html /usr/share/doc/packages/pam/html/sag-pam_mkhomedir.html /usr/share/doc/packages/pam/html/sag-pam_motd.html /usr/share/doc/packages/pam/html/sag-pam_namespace.html /usr/share/doc/packages/pam/html/sag-pam_nologin.html /usr/share/doc/packages/pam/html/sag-pam_permit.html /usr/share/doc/packages/pam/html/sag-pam_pwhistory.html /usr/share/doc/packages/pam/html/sag-pam_rhosts.html /usr/share/doc/packages/pam/html/sag-pam_rootok.html /usr/share/doc/packages/pam/html/sag-pam_securetty.html /usr/share/doc/packages/pam/html/sag-pam_selinux.html /usr/share/doc/packages/pam/html/sag-pam_sepermit.html /usr/share/doc/packages/pam/html/sag-pam_setquota.html /usr/share/doc/packages/pam/html/sag-pam_shells.html /usr/share/doc/packages/pam/html/sag-pam_succeed_if.html /usr/share/doc/packages/pam/html/sag-pam_time.html /usr/share/doc/packages/pam/html/sag-pam_timestamp.html /usr/share/doc/packages/pam/html/sag-pam_tty_audit.html /usr/share/doc/packages/pam/html/sag-pam_umask.html /usr/share/doc/packages/pam/html/sag-pam_unix.html /usr/share/doc/packages/pam/html/sag-pam_userdb.html /usr/share/doc/packages/pam/html/sag-pam_warn.html /usr/share/doc/packages/pam/html/sag-pam_wheel.html /usr/share/doc/packages/pam/html/sag-pam_xauth.html /usr/share/doc/packages/pam/html/sag-security-issues-other.html /usr/share/doc/packages/pam/html/sag-security-issues-wrong.html /usr/share/doc/packages/pam/html/sag-security-issues.html /usr/share/doc/packages/pam/html/sag-see-also.html /usr/share/doc/packages/pam/html/sag-text-conventions.html /usr/share/doc/packages/pam/modules /usr/share/doc/packages/pam/modules/pam_access.txt /usr/share/doc/packages/pam/modules/pam_canonicalize_user.txt /usr/share/doc/packages/pam/modules/pam_debug.txt /usr/share/doc/packages/pam/modules/pam_deny.txt /usr/share/doc/packages/pam/modules/pam_echo.txt /usr/share/doc/packages/pam/modules/pam_env.txt /usr/share/doc/packages/pam/modules/pam_exec.txt /usr/share/doc/packages/pam/modules/pam_faildelay.txt /usr/share/doc/packages/pam/modules/pam_faillock.txt /usr/share/doc/packages/pam/modules/pam_filter.txt /usr/share/doc/packages/pam/modules/pam_ftp.txt /usr/share/doc/packages/pam/modules/pam_group.txt /usr/share/doc/packages/pam/modules/pam_issue.txt /usr/share/doc/packages/pam/modules/pam_keyinit.txt /usr/share/doc/packages/pam/modules/pam_limits.txt /usr/share/doc/packages/pam/modules/pam_listfile.txt /usr/share/doc/packages/pam/modules/pam_localuser.txt /usr/share/doc/packages/pam/modules/pam_loginuid.txt /usr/share/doc/packages/pam/modules/pam_mail.txt /usr/share/doc/packages/pam/modules/pam_mkhomedir.txt /usr/share/doc/packages/pam/modules/pam_motd.txt /usr/share/doc/packages/pam/modules/pam_namespace.txt /usr/share/doc/packages/pam/modules/pam_nologin.txt /usr/share/doc/packages/pam/modules/pam_permit.txt /usr/share/doc/packages/pam/modules/pam_pwhistory.txt /usr/share/doc/packages/pam/modules/pam_rhosts.txt /usr/share/doc/packages/pam/modules/pam_rootok.txt /usr/share/doc/packages/pam/modules/pam_securetty.txt /usr/share/doc/packages/pam/modules/pam_selinux.txt /usr/share/doc/packages/pam/modules/pam_sepermit.txt /usr/share/doc/packages/pam/modules/pam_setquota.txt /usr/share/doc/packages/pam/modules/pam_shells.txt /usr/share/doc/packages/pam/modules/pam_stress.txt /usr/share/doc/packages/pam/modules/pam_succeed_if.txt /usr/share/doc/packages/pam/modules/pam_time.txt /usr/share/doc/packages/pam/modules/pam_timestamp.txt /usr/share/doc/packages/pam/modules/pam_tty_audit.txt /usr/share/doc/packages/pam/modules/pam_umask.txt /usr/share/doc/packages/pam/modules/pam_unix.txt /usr/share/doc/packages/pam/modules/pam_userdb.txt /usr/share/doc/packages/pam/modules/pam_usertype.txt /usr/share/doc/packages/pam/modules/pam_warn.txt /usr/share/doc/packages/pam/modules/pam_wheel.txt /usr/share/doc/packages/pam/modules/pam_xauth.txt /usr/share/doc/packages/pam/pdf /usr/share/doc/packages/pam/pdf/Linux-PAM_ADG.pdf /usr/share/doc/packages/pam/pdf/Linux-PAM_MWG.pdf /usr/share/doc/packages/pam/pdf/Linux-PAM_SAG.pdf /usr/share/doc/packages/pam/rfc86.0.txt
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Feb 12 23:53:52 2025