lp:ubuntu/natty/pam

Created by James Westby on 2010-10-13 and last modified on 2011-04-14
Get this branch:
bzr branch lp:ubuntu/natty/pam
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Status:
Mature

Recent revisions

77. By St├ęphane Graber on 2011-04-11

Check if gdm is actually running before trying to reload it. (LP: #745532)

76. By Steve Langasek on 2011-04-05

debian/patches-applied/027_pam_limits_better_init_allow_explicit_root:
bump the hard limit for number of file descriptors, to keep pace with
the changes in the kernel. Fortunately this shadowing should all go
away next cycle when we can start to grab defaults directly from /proc.
LP: #663090

75. By Steve Langasek on 2011-03-29

debian/libpam0g.postinst: according to Kubuntu developers, kdm no longer
keeps libpam loaded persistently at runtime, so it's not necessary to
force a kdm restart on ABI bump. Which is good, since restarting kdm
now seems to also log users out of running sessions, which we rather
want to avoid. LP: #744944.

74. By Steve Langasek on 2011-03-22

* Force a service restart on upgrade to the new libpam0g, to ensure
  servers don't fail to find the pam modules in the new paths.
* libpam-modules should also Pre-Depend: on the multiarch-aware libpam0g,
  for the same reason.

73. By Steve Langasek on 2011-03-18

* Build for multiarch; FFe LP: #733501.
* Split our executables out of libpam-modules into a new package,
  libpam-modules-bin, so that modules can be co-installable between
  architectures.
* New patch, lib_security_multiarch_compat, which lets us reuse the
  upstream --enable-isadir functionality to support a true path for module
  lookups; this way we don't have to force a hard transition to multiarch,
  but can support resolving modules in both the multiarch and
  non-multiarch directories.
* Build-Depend on the multiarchified debhelper.
* Add Pre-Depends: ${misc:Pre-Depends} for multiarch-support.

72. By Steve Langasek on 2011-02-21

Er, but let's get this patch applying cleanly.

71. By Steve Langasek on 2011-02-21

debian/patches/update-motd-manpage-ref: patch the manpage too, not just
the xml source.

70. By Steve Langasek on 2011-02-17

* Merge from Debian unstable, remaining changes:
  - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's
    not present there or in /etc/security/pam_env.conf. (should send to
    Debian).
  - debian/libpam0g.postinst: only ask questions during update-manager when
    there are non-default services running.
  - debian/patches-applied/series: Ubuntu patches are as below ...
  - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly
    initialise RLIMIT_NICE rather than relying on the kernel limits.
  - Change Vcs-Bzr to point at the Ubuntu branch.
  - debian/patches-applied/pam_motd-legal-notice: display the contents of
    /etc/legal once, then set a flag in the user's homedir to prevent
    showing it again.
  - debian/update-motd.5, debian/libpam-modules.manpages: add a manpage
    for update-motd, with some best practices and notes of explanation.
  - debian/patches/update-motd-manpage-ref: add a reference in pam_motd(8)
    to update-motd(5)

69. By Steve Langasek on 2011-02-15

* Merge from Debian unstable, remaining changes:
  - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's
    not present there or in /etc/security/pam_env.conf. (should send to
    Debian).
  - debian/libpam0g.postinst: only ask questions during update-manager when
    there are non-default services running.
  - debian/patches-applied/series: Ubuntu patches are as below ...
  - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly
    initialise RLIMIT_NICE rather than relying on the kernel limits.
  - Change Vcs-Bzr to point at the Ubuntu branch.
  - debian/patches-applied/pam_motd-legal-notice: display the contents of
    /etc/legal once, then set a flag in the user's homedir to prevent
    showing it again.
  - debian/update-motd.5, debian/libpam-modules.manpages: add a manpage
    for update-motd, with some best practices and notes of explanation.
  - debian/patches/update-motd-manpage-ref: add a reference in pam_motd(8)
    to update-motd(5)
* Dropped changes:
  - libpam-modules depend on base-files (>= 5.0.0ubuntu6): 5.0.0ubuntu20
    is in 10.04 LTS and this is an essential package, so no more need for
    the versioned dependency.

68. By Kees Cook on 2010-10-25

* SECURITY UPDATE: root privilege escalation via symlink following.
  - debian/patches-applied/pam_motd-legal-notice: drop privs for work.
  - CVE-2010-0832

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/oneiric/pam
This branch contains Public information 
Everyone can see this information.

Subscribers