linux/poky.git/meta/recipes-extended/pam, branch nanbield

systemd: update to v254

2023-08-04T10:44:28+00:00

- Drop dependency on gnu-efi, add dependency on pyelftools for EFI builds - Refresh patches - Ship new files and directories - Use meson target to build sd-boot instead of filenames - Change libpam recipe to set ANY_OF_DISTRO_FEATURES = "pam systemd" to let logind pull in pam-plugin-umask (From OE-Core rev: 95ed1fa4ff74a77deade51ad73b2f8963ff81548) Signed-off-by: Luca Boccassi Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libpam: Fix examples build on musl

2023-07-10T10:36:34+00:00

This came with latest libpam upgrade ../../Linux-PAM-1.5.3/examples/tty_conv.c:9:10: fatal error: 'termio.h' file not found ^~~~~~~~~~ 1 error generated. (From OE-Core rev: 00b5cbad49ccce7f2886b2e70b93e60e054f8f46) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

libpam: update 1.5.2 -> 1.5.3

2023-06-27T15:23:40+00:00

(From OE-Core rev: ddb5e0f8a2cc7c48e1fb53b665e2fd5ed263bb19) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libpam: Fix the xtests/tst-pam_motd[1|3] failures

2023-04-14T15:44:24+00:00

Reproducer: 1.Enable the ptest of libpam and build the image. 2.Boot the rootfs with nfs, then run the following tests as root: cd /usr/share/Linux-PAM/xtests /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd1 /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd3 After applying this patch, the ptest doesn't be failed. (From OE-Core rev: 549e54ad6a175359b0a57987ccdab8989df9d3a9) Signed-off-by: Zhixiong Chi Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

libpam: Remove flex dependency

2023-03-13T17:35:22+00:00

libpam does not have a direct build time dependency toward flex. The libpam code does not have any references to the lib and does not use flex for anything else at runtime. (From OE-Core rev: d48fc8e1f26120e75377caefb5f66eedce50081c) Signed-off-by: Martin Larsson Signed-off-by: Richard Purdie

libpam: fix CVE-2022-28321

2022-11-23T18:27:07+00:00

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream. References: https://nvd.nist.gov/vuln/detail/CVE-2022-28321 Upstream patches: https://github.com/linux-pam/linux-pam/commit/08992030c56c940c0707ccbc442b1c325aa01e6d https://github.com/linux-pam/linux-pam/commit/23393bef92c1e768eda329813d7af55481c6ca9f (From OE-Core rev: b1fd799af0086347de1ec4b72d562b1fb490def1) Signed-off-by: Archana Polampalli Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

meta: fix version checks in all github recipes using the github-releases class

2022-09-28T07:01:10+00:00

(From OE-Core rev: b04316bdd28b7945c2c91b4e43c007b650eedc14) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libpam: use /run instead of /var/run in systemd tmpfiles

2022-08-10T07:33:45+00:00

Update the deprecated path to remove the systemd warning: /etc/tmpfiles.d/pam.conf:2: Line references path below legacy directory /var/run/, updating /var/run/console /run/console; please update the tmpfiles.d/ (From OE-Core rev: 7865234fadf01a434d1f7097881b70905c1b8aa2) Signed-off-by: Beniamin Sandu Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

libpam: use /run instead of /var/run in systemd tmpfiles

2022-03-23T12:13:49+00:00

/var/run in deprecated by systemd, use /run instead, as suggested by systemd. This fixes the following systemd boot warning: systemd-tmpfiles[340]: /etc/tmpfiles.d/pam.conf:1: Line references path below legacy directory /var/run/, updating /var/run/sepermit → /run/sepermit; please update the tmpfiles.d/ drop-in file accordingly. (From OE-Core rev: 09eabeff2168c416c18b1c375e095b472830a9b0) Signed-off-by: Ricardo Salveti Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

meta, meta-selftest: Replace more non-SPDX license identifiers

2022-03-01T23:44:59+00:00

In commit ceda3238 (meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers) all LICENSE variables were updated to only use SPDX license identifiers. This does the same for comments and other variables where it is appropriate to use the official SPDX license identifiers. There are still references to, e.g., "GPLv3", but they are then typically in descriptive text where they refer to the license in a generic sense. (From OE-Core rev: 165759dced7fbe73b1db2ede67047896071dc6d0) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie