linux/poky.git/meta/recipes-extended/pam, branch langdale

libpam: fix CVE-2022-28321

2022-12-07T15:02:50+00:00

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream. References: https://nvd.nist.gov/vuln/detail/CVE-2022-28321 Upstream patches: https://github.com/linux-pam/linux-pam/commit/08992030c56c940c0707ccbc442b1c325aa01e6d https://github.com/linux-pam/linux-pam/commit/23393bef92c1e768eda329813d7af55481c6ca9f (From OE-Core rev: 6f3744b71abe9d6be9cc4799e00af4f85166d01d) Signed-off-by: Archana Polampalli Signed-off-by: Alexandre Belloni (cherry picked from commit b1fd799af0086347de1ec4b72d562b1fb490def1) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

meta: fix version checks in all github recipes using the github-releases class

2022-09-28T07:01:10+00:00

(From OE-Core rev: b04316bdd28b7945c2c91b4e43c007b650eedc14) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libpam: use /run instead of /var/run in systemd tmpfiles

2022-08-10T07:33:45+00:00

Update the deprecated path to remove the systemd warning: /etc/tmpfiles.d/pam.conf:2: Line references path below legacy directory /var/run/, updating /var/run/console /run/console; please update the tmpfiles.d/ (From OE-Core rev: 7865234fadf01a434d1f7097881b70905c1b8aa2) Signed-off-by: Beniamin Sandu Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

libpam: use /run instead of /var/run in systemd tmpfiles

2022-03-23T12:13:49+00:00

/var/run in deprecated by systemd, use /run instead, as suggested by systemd. This fixes the following systemd boot warning: systemd-tmpfiles[340]: /etc/tmpfiles.d/pam.conf:1: Line references path below legacy directory /var/run/, updating /var/run/sepermit → /run/sepermit; please update the tmpfiles.d/ drop-in file accordingly. (From OE-Core rev: 09eabeff2168c416c18b1c375e095b472830a9b0) Signed-off-by: Ricardo Salveti Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

meta, meta-selftest: Replace more non-SPDX license identifiers

2022-03-01T23:44:59+00:00

In commit ceda3238 (meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers) all LICENSE variables were updated to only use SPDX license identifiers. This does the same for comments and other variables where it is appropriate to use the official SPDX license identifiers. There are still references to, e.g., "GPLv3", but they are then typically in descriptive text where they refer to the license in a generic sense. (From OE-Core rev: 165759dced7fbe73b1db2ede67047896071dc6d0) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

libpam: Backport ptest fix checking whether files exist

2021-12-12T11:27:23+00:00

Backport a patch to check whether files exist. Before the patch: # ./run-xtests.sh . tst-pam_access1 mv: cannot stat '/etc/security/opasswd': No such file or directory PASS: tst-pam_access1 mv: cannot stat '/etc/security/opasswd-pam-xtests': No such file or directory ================== 1 tests passed 0 tests not run ================== After the patch: # ./run-xtests.sh . tst-pam_access1 PASS: tst-pam_access1 ================== 1 tests passed 0 tests not run ================== (From OE-Core rev: 4903fdbace057df2e39c10aaef3440f89748eed2) Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie

libpam: Fix build with DISTRO_FEATURES usrmerge

2021-10-14T10:48:46+00:00

(From OE-Core rev: 71780bb9ac3c9e096888128d9cf3441c1758d816) Signed-off-by: Zoltán Böszörményi Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libpam: update 1.5.1 -> 1.5.2

2021-10-11T17:41:37+00:00

Drop patches: issues fixed upstream. Move .pc files to correct place as libpam is instructed to install them in /lib via --libdir. (From OE-Core rev: b2aeaab36d7d46d47301d0729b634d182277cfbd) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

libpam: Use specific BSD license variant

2021-09-02T11:12:07+00:00

Make the license more accurate by specifying the specific variant of BSD license instead of the generic one. This helps with SPDX license attribution as "BSD" is not a valid SPDX license. (From OE-Core rev: d9948d0439cf26af9f570e9a9d0d214294bae504) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie