]>
Commit | Line | Data |
---|---|---|
7f8ab60d | 1 | # |
d11ce12e | 2 | # Conditional build: |
b4afc5a5 | 3 | %bcond_without doc # don't build documentation |
7f8ab60d | 4 | %bcond_with prelude # build with Prelude IDS support |
846d8fdc | 5 | %bcond_without selinux # build without SELinux support |
84871244 | 6 | %bcond_without audit # build with Linux Auditing library support |
7f8ab60d | 7 | # |
6e2ca6a1 | 8 | %define pam_pld_version 0.99.9.0-1 |
b81508df JR |
9 | # |
10 | %define _sbindir /sbin | |
7317bf47 | 11 | # |
abb00f9e | 12 | Summary: Pluggable Authentication Modules: modular, incremental authentication |
b7025e7f ER |
13 | Summary(de.UTF-8): Einsteckbare Authentifizierungsmodule: modulare, inkrementäre Authentifizierung |
14 | Summary(es.UTF-8): Módulos de autentificación plugables (PAM) | |
15 | Summary(fr.UTF-8): PAM : Pluggable Authentication Modules: modular, incremental authentication | |
16 | Summary(pl.UTF-8): Modularny system uwierzytelniania | |
17 | Summary(pt_BR.UTF-8): Módulos de autenticação plugáveis (PAM) | |
18 | Summary(ru.UTF-8): Интструмент, обеспечивающий аутентификацию для приложений | |
19 | Summary(tr.UTF-8): Modüler, artımsal doğrulama birimleri | |
20 | Summary(uk.UTF-8): Інструмент, що забезпечує аутентифікацію для програм | |
abb00f9e | 21 | Name: pam |
66c25580 | 22 | Version: 0.99.9.0 |
3bf7b2d6 | 23 | Release: 3 |
c96a8fe2 | 24 | License: GPL or BSD |
abb00f9e | 25 | Group: Base |
7f8ab60d | 26 | Source0: http://ftp.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-%{version}.tar.bz2 |
66c25580 | 27 | # Source0-md5: f526c794482ce21c31866549e05c45de |
7f8ab60d | 28 | Source1: http://ftp.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-%{version}.tar.bz2.sign |
66c25580 | 29 | # Source1-md5: ffae0c1502acb7866a4a34e4b35eb6ec |
7f8ab60d | 30 | Source2: ftp://ftp.pld-linux.org/software/pam/pam-pld-%{pam_pld_version}.tar.gz |
6e2ca6a1 | 31 | # Source2-md5: a92ff06ff3ab5f96a7e1aaa04ef77fa7 |
7f8ab60d JR |
32 | Source3: other.pamd |
33 | Source4: system-auth.pamd | |
34 | Source5: config-util.pamd | |
35 | Source6: pam_selinux_check.pamd | |
36 | Source7: system-auth.5 | |
37 | Source8: config-util.5 | |
38 | Patch0: %{name}-pld-modules.patch | |
a80f72fe | 39 | Patch1: %{name}-modutil_mem_limit.patch |
7f8ab60d JR |
40 | Patch2: %{name}-cracklib-try-first-pass.patch |
41 | Patch3: %{name}-cracklib-enforce.patch | |
42 | Patch4: %{name}-tally-fail-close.patch | |
511344f2 JR |
43 | Patch5: %{name}-unix-blowfish.patch |
44 | Patch6: %{name}-mkhomedir-new-features.patch | |
45 | Patch7: %{name}-db-gdbm.patch | |
46 | Patch8: %{name}-exec-failok.patch | |
47 | Patch9: %{name}-audit-no-log.patch | |
48 | Patch10: %{name}-namespace-temp-logon.patch | |
49 | Patch11: %{name}-namespace-homedir.patch | |
2e6e9119 | 50 | Patch12: %{name}-selinux-permit.patch |
3bf7b2d6 | 51 | Patch13: %{name}-tally-fclose.patch |
83b3eeca | 52 | URL: http://www.kernel.org/pub/linux/libs/pam/ |
7f8ab60d | 53 | %{?with_audit:BuildRequires: audit-libs-devel >= 1.0.8} |
b8f360f2 | 54 | BuildRequires: autoconf |
55 | BuildRequires: automake | |
1dc7ef6b | 56 | BuildRequires: bison |
234dfb8e | 57 | BuildRequires: cracklib-devel >= 2.8.3 |
b81508df | 58 | # gdbm due to db pulling libpthread |
5a893416 | 59 | BuildRequires: gdbm-devel >= 1.8.3-7 |
de5c0104 | 60 | BuildRequires: flex |
53ffe07e | 61 | BuildRequires: glibc-devel >= 6:2.5-0.5 |
1fbc0597 | 62 | %{?with_prelude:BuildRequires: libprelude-devel} |
7f8ab60d | 63 | %{?with_selinux:BuildRequires: libselinux-devel >= 1.33.2} |
0a855cc1 | 64 | BuildRequires: libtool >= 2:1.5 |
b4afc5a5 | 65 | %if %{with doc} |
7f8ab60d JR |
66 | BuildRequires: docbook-dtd43-xml |
67 | BuildRequires: docbook-dtd44-xml | |
68 | BuildRequires: docbook-style-xsl >= 1.69.1 | |
84871244 JR |
69 | # For building PDFs |
70 | #BuildRequires: fop | |
7f8ab60d JR |
71 | BuildRequires: libxml2-progs |
72 | BuildRequires: libxslt-progs | |
73 | BuildRequires: w3m | |
b4afc5a5 | 74 | %endif |
1197f38e | 75 | Requires(post): coreutils |
fe9df33a | 76 | Requires: %{name}-libs = %{epoch}:%{version}-%{release} |
1dc7ef6b | 77 | Requires: awk |
234dfb8e | 78 | Requires: /usr/bin/make |
c2cd7c7d | 79 | Provides: pam-pld |
13a8024d | 80 | Obsoletes: pamconfig |
81 | Obsoletes: pam_make | |
73954d99 | 82 | Obsoletes: pam-doc |
28fa39c9 | 83 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
f0f219ac | 84 | |
85 | %description | |
faaf5eea | 86 | PAM (Pluggable Authentication Modules) is a powerful, flexible, |
87 | extensible authentication system which allows the system administrator | |
88 | to configure authentication services individually for every | |
89 | pam-compliant application without recompiling any of the applications. | |
f0f219ac | 90 | |
e2cbb18f JR |
91 | %description -l de.UTF-8 |
92 | PAM (Pluggable Authentication Modules) ist ein leistungsfähiges, | |
faaf5eea | 93 | flexibles und erweiterbares Authentifizierungssystem, mit dem der |
e2cbb18f | 94 | Systemverwalter Authentifizierungs-Dienste individuell für jede |
faaf5eea | 95 | pam-kompatible Anwendung konfigurieren kann, ohne diese neu |
e2cbb18f | 96 | kompilieren zu müssen. |
f0f219ac | 97 | |
e2cbb18f JR |
98 | %description -l es.UTF-8 |
99 | PAM (Módulos de Autenticación Plugables) es un potente, flexible y | |
100 | extensible sistema de autentificación, que permite al administrador | |
101 | del sistema configurar servicios de autentificación individualmente | |
102 | para cada aplicación pam compatible, sin la necesidad de recompilar | |
8797d11d JB |
103 | cualquier una de las aplicaciones. |
104 | ||
e2cbb18f JR |
105 | %description -l fr.UTF-8 |
106 | PAM (Pluggable Authentication Modules) est un systéme | |
107 | d'authentification puissant, souple et extensible permettant à | |
108 | l'administrateur système de configurer les individuellement les | |
109 | services d'authentification pour chaque application conforme à PAM, | |
faaf5eea | 110 | sans recompiler aucune application. |
ac46f43b | 111 | |
e2cbb18f JR |
112 | %description -l pl.UTF-8 |
113 | PAM (Pluggable Authentication Modules) jest silnym i łatwo | |
114 | dostosowywalnym do potrzeb systemem uwierzytelniania, który umożliwia | |
115 | administratorowi indywidualne konfigurowanie poszczególnych usług, | |
116 | które są dostosowane i skonsolidowane z bibliotekami PAM, bez | |
117 | późniejszej ich rekompilacji w momencie zmiany sposobu | |
118 | uwierzytelniania tychże usług. | |
b1babe47 | 119 | |
e2cbb18f JR |
120 | %description -l pt_BR.UTF-8 |
121 | PAM (Módulos de Autenticação Plugáveis) é um poderoso, flexível e | |
122 | extensível sistema de autenticação, que permite o administrador do | |
123 | sistema configurar serviços de autenticação individualmente para cada | |
124 | aplicação pam compatível, sem necessidade de recompilar qualquer uma | |
125 | das aplicações. | |
51c8ab2d | 126 | |
e2cbb18f JR |
127 | %description -l uk.UTF-8 |
128 | PAM (Pluggable Authentication Modules) - це потужна, гнучка, здатна до | |
129 | розширення система аутентикації, яка дозволяє системному | |
130 | адміністратору налагоджувати севіси авторизації доступу (аутентикації) | |
131 | індивідуально для кожної pam-сумісної програми без необхідності | |
132 | перекомпіляції самої програми. Це базовий механізм аутентикації в PLD | |
b440fddc | 133 | Linux. |
134 | ||
e2cbb18f JR |
135 | %description -l tr.UTF-8 |
136 | PAM (Pluggable Authentication Modules) sistem yöneticilerinin | |
137 | uygulamalardan herhangi birini yeniden derlemeksizin bütün PAM uyumlu | |
138 | uygulamalar için doğrulama hizmetlerini ayarlamalarına yardımcı olan, | |
139 | güclü, esnek ve kapsamlı bir doğrulama sistemidir. | |
51c8ab2d | 140 | |
e2cbb18f JR |
141 | %description -l ru.UTF-8 |
142 | PAM (Pluggable Authentication Modules) - это мощная, гибкая, | |
143 | расширяемая система аутентикации, позволяющая системному | |
144 | администратору конфигурировать сервисы авторизации доступа | |
145 | (аутентикации) индивидуально для каждой pam-совместимой программы без | |
146 | необходимости перекомпилляции самой программы. Это базовый механизм | |
147 | аутентикации в PLD Linux. | |
b440fddc | 148 | |
fe9df33a ER |
149 | %package libs |
150 | Summary: PAM modules and libraries | |
b7025e7f | 151 | Summary(pl.UTF-8): Moduły i biblioteki PAM |
fe9df33a | 152 | Group: Libraries |
bbd5bd87 | 153 | Conflicts: pam < 0:0.80.1-2 |
234dfb8e JR |
154 | Requires(triggerpostun): sed >= 4.0 |
155 | Requires: cracklib >= 2.8.3 | |
156 | Requires: cracklib-dicts >= 2.8.3 | |
5a893416 | 157 | Requires: gdbm >= 1.8.3-7 |
53ffe07e | 158 | Requires: glibc >= 6:2.5-0.5 |
7f8ab60d JR |
159 | %{?with_audit:Requires: audit-libs >= 1.0.8} |
160 | %{?with_selinux:Requires: libselinux >= 1.33.2} | |
3806fd76 JB |
161 | Obsoletes: pam-pam_cap |
162 | Obsoletes: pam-pam_opie | |
163 | Obsoletes: pam-pam_pwdb | |
164 | Obsoletes: pam-pam_radius | |
165 | Obsoletes: pam-pam_skey | |
166 | Obsoletes: pam-pam_tcpd | |
fe9df33a ER |
167 | |
168 | %description libs | |
169 | Core PAM modules and libraries. | |
170 | ||
e2cbb18f JR |
171 | %description libs -l pl.UTF-8 |
172 | Moduły i biblioteki PAM. | |
b96eca5e | 173 | |
ac46f43b | 174 | %package devel |
abb00f9e | 175 | Summary: PAM header files |
b7025e7f ER |
176 | Summary(pl.UTF-8): Pliki nagłówkowe i dokumentacja programisty do PAM |
177 | Summary(pt_BR.UTF-8): Bibliotecas e arquivos de inclusão para desenvolvimento com PAM | |
178 | Summary(ru.UTF-8): Библиотеки разработчика для PAM | |
179 | Summary(uk.UTF-8): Бібліотеки програміста для PAM | |
0bb742f7 | 180 | Group: Development/Libraries |
846d8fdc | 181 | Requires: %{name} = %{epoch}:%{version}-%{release} |
15909b27 | 182 | %{?with_audit:Requires: audit-libs-devel >= 1.0.8} |
a3ffb3a4 | 183 | Requires: filesystem >= 3.0-11 |
ac46f43b JR |
184 | |
185 | %description devel | |
186 | Header files for developing PAM based applications. | |
f0f219ac | 187 | |
e2cbb18f JR |
188 | %description devel -l pl.UTF-8 |
189 | Pliki nagłówkowe i dokumentacja programisty do PAM. | |
ac46f43b | 190 | |
e2cbb18f JR |
191 | %description devel -l pt_BR.UTF-8 |
192 | Bibliotecas e arquivos de inclusão para desenvolvimento com PAM | |
51c8ab2d | 193 | |
e2cbb18f JR |
194 | %description devel -l ru.UTF-8 |
195 | Этот пакет содержит хедеры и библиотеки разработчика для PAM. | |
b440fddc | 196 | |
e2cbb18f JR |
197 | %description devel -l uk.UTF-8 |
198 | Цей пакет містить хедери та бібліотеки програміста для PAM. | |
b440fddc | 199 | |
ac46f43b | 200 | %package static |
abb00f9e | 201 | Summary: PAM static libraries |
b7025e7f ER |
202 | Summary(pl.UTF-8): Biblioteki statyczne PAM |
203 | Summary(ru.UTF-8): Статические библиотеки разработчика для PAM | |
204 | Summary(uk.UTF-8): Статичні бібліотеки програміста для PAM | |
0bb742f7 | 205 | Group: Development/Libraries |
846d8fdc | 206 | Requires: %{name}-devel = %{epoch}:%{version}-%{release} |
ac46f43b JR |
207 | |
208 | %description static | |
209 | PAM static libraries. | |
b1babe47 | 210 | |
e2cbb18f | 211 | %description static -l pl.UTF-8 |
ac46f43b | 212 | Biblioteki statyczne PAM. |
b1babe47 | 213 | |
e2cbb18f JR |
214 | %description static -l ru.UTF-8 |
215 | Этот пакет содержит статические библиотеки разработчика для PAM. | |
b440fddc | 216 | |
e2cbb18f JR |
217 | %description static -l uk.UTF-8 |
218 | Цей пакет містить статичні бібліотеки програміста для PAM. | |
b440fddc | 219 | |
1fbc0597 JR |
220 | %package pam_selinux |
221 | Summary: PAM module - SELinux support | |
b7025e7f | 222 | Summary(pl.UTF-8): Moduł PAM pozwalający na zmianę kontekstów SELinuksa |
1fbc0597 JR |
223 | Group: Base |
224 | ||
225 | %description pam_selinux | |
226 | PAM module - SELinux support. | |
227 | ||
e2cbb18f JR |
228 | %description pam_selinux -l pl.UTF-8 |
229 | Moduł PAM pozwalający na zmianę kontekstów SELinuksa. | |
1fbc0597 | 230 | |
f0f219ac | 231 | %prep |
7f8ab60d | 232 | %setup -q -a2 -n Linux-PAM-%{version} |
3d3421d5 | 233 | %patch0 -p1 |
a80f72fe | 234 | %patch1 -p1 |
7f8ab60d JR |
235 | %patch2 -p1 |
236 | %patch3 -p1 | |
237 | %patch4 -p1 | |
238 | %patch5 -p1 | |
239 | %patch6 -p1 | |
240 | %patch7 -p1 | |
241 | %patch8 -p1 | |
242 | %patch9 -p1 | |
243 | %patch10 -p1 | |
244 | %patch11 -p1 | |
2e6e9119 | 245 | %patch12 -p1 |
3bf7b2d6 | 246 | %patch13 -p1 |
e523043b | 247 | |
ac46f43b | 248 | %build |
7796f9da | 249 | %{__libtoolize} |
fc1ef364 | 250 | %{__aclocal} -I m4 |
7796f9da | 251 | %{__autoconf} |
252 | %{__autoheader} | |
253 | %{__automake} | |
7edd7783 | 254 | %configure \ |
7f8ab60d JR |
255 | --enable-static \ |
256 | --enable-shared \ | |
257 | --libdir=/%{_lib} \ | |
258 | --includedir=%{_includedir}/security \ | |
259 | --enable-isadir=../../%{_lib}/security \ | |
b81508df | 260 | --enable-db=gdbm \ |
1fbc0597 JR |
261 | %{!?with_selinux:--disable-selinux} \ |
262 | %{!?with_prelude:--disable-prelude} \ | |
7f8ab60d | 263 | %{!?with_audit:--disable-audit} |
c894cd9b | 264 | |
7f8ab60d JR |
265 | # we must explicitely update-gmo as we patch a po file |
266 | %{__make} -C po update-gmo | |
8722d891 | 267 | %{__make} |
f0f219ac | 268 | |
269 | %install | |
4587144c | 270 | rm -rf $RPM_BUILD_ROOT |
7f8ab60d | 271 | install -d $RPM_BUILD_ROOT{%{_libdir},/etc/pam.d,/var/log} |
4d13ca23 | 272 | |
4be82bfe JB |
273 | %{__make} install \ |
274 | DESTDIR=$RPM_BUILD_ROOT | |
4d13ca23 | 275 | |
848c50ae | 276 | %if %{with selinux} |
7f8ab60d JR |
277 | install modules/pam_selinux/.libs/pam_selinux_check $RPM_BUILD_ROOT%{_sbindir} |
278 | install modules/pam_selinux/pam_selinux_check.8 $RPM_BUILD_ROOT%{_mandir}/man8 | |
f9ad2164 | 279 | install %{SOURCE6} $RPM_BUILD_ROOT/etc/pam.d/pam_selinux_check |
848c50ae | 280 | %endif |
7f8ab60d JR |
281 | |
282 | mkdir -p doc/txts | |
283 | for r in modules/pam_*/README ; do | |
284 | cp -f $r doc/txts/README.$(basename $(dirname $r)) | |
285 | done | |
286 | mkdir -p doc/html | |
287 | cp -f doc/index.html doc/html/ | |
288 | ||
289 | # fix PAM/pam man page | |
290 | echo ".so PAM.8" > $RPM_BUILD_ROOT%{_mandir}/man8/pam.8 | |
f0f219ac | 291 | |
157b3e1c | 292 | :> $RPM_BUILD_ROOT/etc/security/opasswd |
b43d0a9b | 293 | :> $RPM_BUILD_ROOT/etc/security/blacklist |
9e64e40d | 294 | |
7f8ab60d JR |
295 | #:> $RPM_BUILD_ROOT/var/log/faillog |
296 | :> $RPM_BUILD_ROOT/var/log/tallylog | |
508c2464 | 297 | |
1107ace3 | 298 | mv -f $RPM_BUILD_ROOT/%{_lib}/lib*.a $RPM_BUILD_ROOT%{_libdir} |
508c2464 | 299 | |
c1d4fb20 | 300 | cd $RPM_BUILD_ROOT/%{_lib} |
a1307506 | 301 | for f in lib*.la ; do |
1107ace3 | 302 | sed -e 's|/%{_lib}/libpam|%{_libdir}/libpam|g' $f > $RPM_BUILD_ROOT%{_libdir}/$f |
a1307506 | 303 | rm -f $f |
2a5c157a | 304 | sed -i -e "s|libdir='/%{_lib}|libdir='%{_libdir}|g" $RPM_BUILD_ROOT%{_libdir}/$f |
a1307506 | 305 | done |
c1d4fb20 AM |
306 | ln -sf /%{_lib}/$(echo libpam.so.*.*.*) $RPM_BUILD_ROOT%{_libdir}/libpam.so |
307 | ln -sf /%{_lib}/$(echo libpam_misc.so.*.*.*) $RPM_BUILD_ROOT%{_libdir}/libpam_misc.so | |
308 | ln -sf /%{_lib}/$(echo libpamc.so.*.*.*) $RPM_BUILD_ROOT%{_libdir}/libpamc.so | |
7f8ab60d | 309 | cd - |
8ab52661 | 310 | |
7f8ab60d JR |
311 | install %{SOURCE3} $RPM_BUILD_ROOT/etc/pam.d/other |
312 | install %{SOURCE4} $RPM_BUILD_ROOT/etc/pam.d/system-auth | |
313 | install %{SOURCE5} $RPM_BUILD_ROOT/etc/pam.d/config-util | |
7f8ab60d JR |
314 | |
315 | install %{SOURCE7} $RPM_BUILD_ROOT%{_mandir}/man5/system-auth.5 | |
316 | install %{SOURCE8} $RPM_BUILD_ROOT%{_mandir}/man5/config-util.5 | |
c38ff42d | 317 | |
b81508df JR |
318 | # Make sure every module subdirectory gave us a module. Yes, this is hackish. |
319 | for dir in modules/pam_* ; do | |
df8313a3 | 320 | %if %{without selinux} |
f9ad2164 JR |
321 | [ ${dir} = "modules/pam_selinux" ] && continue |
322 | %endif | |
b81508df JR |
323 | if [ -d ${dir} ] ; then |
324 | if ! ls -1 $RPM_BUILD_ROOT/%{_lib}/security/`basename ${dir}`*.so ; then | |
325 | echo ERROR `basename ${dir}` did not build a module. | |
326 | exit 1 | |
327 | fi | |
328 | fi | |
329 | done | |
330 | ||
331 | for module in $RPM_BUILD_ROOT/%{_lib}/security/pam*.so ; do | |
332 | # Check for module problems. Specifically, check that every module we just | |
333 | # installed can actually be loaded by a minimal PAM-aware application. | |
334 | if ! env LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%{_lib} \ | |
335 | ./dlopen.sh -ldl -lpam -L$RPM_BUILD_ROOT/%{_lib} ${module} ; then | |
336 | echo ERROR module: ${module} cannot be loaded. | |
337 | exit 1 | |
338 | fi | |
339 | # And for good measure, make sure that none of the modules pull in threading | |
340 | # libraries, which if loaded in a non-threaded application, can cause Very | |
341 | # Bad Things to happen. | |
342 | if env LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%{_lib} \ | |
343 | LD_PRELOAD=$RPM_BUILD_ROOT/%{_lib}/libpam.so ldd -r ${module} | \ | |
344 | fgrep -q libpthread ; then | |
345 | echo ERROR module: ${module} pulls threading libraries. | |
346 | exit 1 | |
347 | fi | |
348 | done | |
349 | ||
aae9c5e1 | 350 | # useless - shut up check-files |
c1d4fb20 | 351 | rm -f $RPM_BUILD_ROOT/%{_lib}/security/*.{la,a} |
7f8ab60d | 352 | rm -rf $RPM_BUILD_ROOT%{_datadir}/doc/Linux-PAM |
fe9df33a | 353 | |
df8313a3 | 354 | %if %{without selinux} |
fe9df33a ER |
355 | rm -rf $RPM_BUILD_ROOT{/%{_lib}/security/pam_selinux.so,%{_sbindir}/pam_selinux_check,%{_mandir}/man8/pam_selinux*.8*} |
356 | %endif | |
aae9c5e1 | 357 | |
7f8ab60d JR |
358 | %find_lang Linux-PAM |
359 | ||
abb00f9e | 360 | %clean |
4587144c | 361 | rm -rf $RPM_BUILD_ROOT |
abb00f9e | 362 | |
5d252f91 | 363 | %triggerpostun libs -- %{name}-libs < 0.99.7.1 |
234dfb8e | 364 | for f in `grep -l "\(pam_make\|pam_homedir\)" /etc/pam.d/*` ; do |
a1307506 JR |
365 | case "$f" in |
366 | *rpmorig|*rpmnew|*rpmsave|*~|*.orig) | |
367 | continue | |
368 | ;; | |
369 | *) | |
234dfb8e JR |
370 | cp -f "$f" "$f.rpmorig" |
371 | sed -i -e 's/pam_make\.so \(.*\)/pam_exec.so failok seteuid \/usr\/bin\/make -C \1/g' \ | |
372 | -e 's/pam_homedir\.so/pam_mkhomedir.so/g' "$f" | |
a1307506 JR |
373 | ;; |
374 | esac | |
375 | done | |
376 | if [ -d /var/lock/console -a -d /var/run/console ]; then | |
75f2161e | 377 | cp -a /var/lock/console/* /var/run/console/ 2> /dev/null |
234dfb8e | 378 | rm -rf /var/lock/console |
a1307506 | 379 | fi |
5d252f91 | 380 | |
0607c402 JR |
381 | %post |
382 | #if [ ! -a /var/log/faillog ] ; then | |
9a617ffa | 383 | # touch /var/log/faillog |
1197f38e | 384 | # chmod 600 /var/log/faillog |
0607c402 JR |
385 | #fi |
386 | if [ ! -a /var/log/tallylog ] ; then | |
9a617ffa | 387 | touch /var/log/tallylog |
1197f38e | 388 | chmod 600 /var/log/tallylog |
0607c402 JR |
389 | fi |
390 | ||
fe9df33a ER |
391 | %post libs -p /sbin/ldconfig |
392 | %postun libs -p /sbin/ldconfig | |
96ffe39f | 393 | |
7f8ab60d | 394 | %files -f Linux-PAM.lang |
abb00f9e | 395 | %defattr(644,root,root,755) |
7f8ab60d JR |
396 | %doc AUTHORS CHANGELOG ChangeLog Copyright NEWS |
397 | %doc doc/txts/README* | |
fe9df33a | 398 | %if %{with doc} |
7f8ab60d | 399 | %doc doc/specs/*.txt |
964f5d32 JR |
400 | %doc doc/sag/Linux-PAM_*.txt |
401 | %doc doc/{sag,}/html | |
fe9df33a | 402 | %endif |
7f8ab60d JR |
403 | %dir %attr(755,root,root) /etc/pam.d |
404 | %dir %attr(755,root,root) /etc/security/console.apps | |
405 | %dir %attr(755,root,root) /etc/security/console.perms.d | |
406 | %dir %attr(755,root,root) /var/run/console | |
b81508df | 407 | %config(noreplace) %verify(not md5 mtime size) /etc/environment |
b2c6cf13 ER |
408 | %config(noreplace) %verify(not md5 mtime size) /etc/pam.d/other |
409 | %config(noreplace) %verify(not md5 mtime size) /etc/pam.d/system-auth | |
7f8ab60d | 410 | %config(noreplace) %verify(not md5 mtime size) /etc/pam.d/config-util |
b2c6cf13 | 411 | %config(noreplace) %verify(not md5 mtime size) /etc/security/access.conf |
b43d0a9b | 412 | %config(noreplace) %verify(not md5 mtime size) /etc/security/blacklist |
b81508df JR |
413 | %config(noreplace) %verify(not md5 mtime size) /etc/security/console.handlers |
414 | %config(noreplace) %verify(not md5 mtime size) /etc/security/console.perms | |
b2c6cf13 ER |
415 | %config(noreplace) %verify(not md5 mtime size) /etc/security/group.conf |
416 | %config(noreplace) %verify(not md5 mtime size) /etc/security/limits.conf | |
b81508df JR |
417 | %config(noreplace) %verify(not md5 mtime size) /etc/security/namespace.conf |
418 | %attr(755,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/security/namespace.init | |
419 | %config(noreplace) %verify(not md5 mtime size) /etc/security/pam_env.conf | |
b2c6cf13 | 420 | %config(noreplace) %verify(not md5 mtime size) /etc/security/time.conf |
b2c6cf13 | 421 | %config(noreplace) %verify(not md5 mtime size) /etc/security/trigram* |
b81508df | 422 | %config /etc/security/console.perms.d/50-default.perms |
b2c6cf13 | 423 | %attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/security/opasswd |
fe9df33a ER |
424 | %attr(4755,root,root) /sbin/unix_chkpwd |
425 | %attr(755,root,root) %{_bindir}/pam_pwgen | |
7f8ab60d | 426 | %attr(755,root,root) %{_sbindir}/pam_console_apply |
fe9df33a | 427 | %attr(755,root,root) %{_sbindir}/pam_tally |
7f8ab60d JR |
428 | %attr(755,root,root) %{_sbindir}/pam_tally2 |
429 | %attr(755,root,root) %{_sbindir}/pam_timestamp_check | |
fe9df33a ER |
430 | %attr(755,root,root) %{_sbindir}/pwgen_trigram |
431 | %{_mandir}/man5/* | |
7f8ab60d | 432 | %{_mandir}/man8/PAM.* |
fe9df33a | 433 | %{_mandir}/man8/pam.* |
7f8ab60d JR |
434 | %{_mandir}/man8/pam_[a-r]* |
435 | %{_mandir}/man8/pam_securetty* | |
436 | %{_mandir}/man8/pam_shells* | |
fe9df33a | 437 | %{_mandir}/man8/pam_succeed_if* |
7f8ab60d JR |
438 | %{_mandir}/man8/pam_[t-x]* |
439 | %{_mandir}/man8/unix_chkpwd* | |
440 | #%ghost %verify(not md5 size mtime) /var/log/faillog | |
441 | %ghost %verify(not md5 size mtime) /var/log/tallylog | |
fe9df33a ER |
442 | |
443 | %files libs | |
444 | %defattr(644,root,root,755) | |
a1307506 | 445 | %dir /%{_lib}/security/pam_filter |
3bc02d41 JB |
446 | %attr(755,root,root) /%{_lib}/lib*.so.*.* |
447 | %attr(755,root,root) /%{_lib}/security/pam_access.so | |
448 | %attr(755,root,root) /%{_lib}/security/pam_console.so | |
449 | %attr(755,root,root) /%{_lib}/security/pam_cracklib.so | |
450 | %attr(755,root,root) /%{_lib}/security/pam_debug.so | |
451 | %attr(755,root,root) /%{_lib}/security/pam_deny.so | |
7f8ab60d | 452 | %attr(755,root,root) /%{_lib}/security/pam_echo.so |
3bc02d41 | 453 | %attr(755,root,root) /%{_lib}/security/pam_env.so |
7f8ab60d JR |
454 | %attr(755,root,root) /%{_lib}/security/pam_exec.so |
455 | %attr(755,root,root) /%{_lib}/security/pam_faildelay.so | |
3bc02d41 | 456 | %attr(755,root,root) /%{_lib}/security/pam_filter.so |
7f8ab60d | 457 | %attr(755,root,root) /%{_lib}/security/pam_filter/upperLOWER |
3bc02d41 JB |
458 | %attr(755,root,root) /%{_lib}/security/pam_ftp.so |
459 | %attr(755,root,root) /%{_lib}/security/pam_group.so | |
3bc02d41 | 460 | %attr(755,root,root) /%{_lib}/security/pam_issue.so |
7f8ab60d | 461 | %attr(755,root,root) /%{_lib}/security/pam_keyinit.so |
3bc02d41 JB |
462 | %attr(755,root,root) /%{_lib}/security/pam_lastlog.so |
463 | %attr(755,root,root) /%{_lib}/security/pam_limits.so | |
464 | %attr(755,root,root) /%{_lib}/security/pam_listfile.so | |
e1e49c86 | 465 | %attr(755,root,root) /%{_lib}/security/pam_localuser.so |
7f8ab60d | 466 | %attr(755,root,root) /%{_lib}/security/pam_loginuid.so |
3bc02d41 | 467 | %attr(755,root,root) /%{_lib}/security/pam_mail.so |
7f8ab60d | 468 | %attr(755,root,root) /%{_lib}/security/pam_mkhomedir.so |
3bc02d41 | 469 | %attr(755,root,root) /%{_lib}/security/pam_motd.so |
b81508df | 470 | %attr(755,root,root) /%{_lib}/security/pam_namespace.so |
3bc02d41 JB |
471 | %attr(755,root,root) /%{_lib}/security/pam_nologin.so |
472 | %attr(755,root,root) /%{_lib}/security/pam_permit.so | |
7f8ab60d | 473 | %attr(755,root,root) /%{_lib}/security/pam_pwexport.so |
3bc02d41 | 474 | %attr(755,root,root) /%{_lib}/security/pam_pwgen.so |
7f8ab60d | 475 | %attr(755,root,root) /%{_lib}/security/pam_rhosts_auth.so |
3bc02d41 JB |
476 | %attr(755,root,root) /%{_lib}/security/pam_rhosts.so |
477 | %attr(755,root,root) /%{_lib}/security/pam_rootok.so | |
7f8ab60d | 478 | %attr(755,root,root) /%{_lib}/security/pam_rps.so |
3bc02d41 JB |
479 | %attr(755,root,root) /%{_lib}/security/pam_securetty.so |
480 | %attr(755,root,root) /%{_lib}/security/pam_shells.so | |
481 | %attr(755,root,root) /%{_lib}/security/pam_stress.so | |
e1e49c86 | 482 | %attr(755,root,root) /%{_lib}/security/pam_succeed_if.so |
7f8ab60d | 483 | %attr(755,root,root) /%{_lib}/security/pam_tally2.so |
3bc02d41 JB |
484 | %attr(755,root,root) /%{_lib}/security/pam_tally.so |
485 | %attr(755,root,root) /%{_lib}/security/pam_time.so | |
7f8ab60d JR |
486 | %attr(755,root,root) /%{_lib}/security/pam_timestamp.so |
487 | %attr(755,root,root) /%{_lib}/security/pam_umask.so | |
3bc02d41 JB |
488 | %attr(755,root,root) /%{_lib}/security/pam_unix.so |
489 | %attr(755,root,root) /%{_lib}/security/pam_userdb.so | |
3bc02d41 JB |
490 | %attr(755,root,root) /%{_lib}/security/pam_warn.so |
491 | %attr(755,root,root) /%{_lib}/security/pam_wheel.so | |
492 | %attr(755,root,root) /%{_lib}/security/pam_xauth.so | |
f0f219ac | 493 | |
494 | %files devel | |
abb00f9e | 495 | %defattr(644,root,root,755) |
964f5d32 JR |
496 | %if %{with doc} |
497 | %doc doc/{adg,mwg}/Linux-PAM_*.txt | |
498 | %doc doc/{adg,mwg,}/html | |
499 | %endif | |
28fd66c6 | 500 | %attr(755,root,root) %{_libdir}/lib*.so |
0e7b3a08 | 501 | %{_libdir}/lib*.la |
7317bf47 | 502 | %{_includedir}/security/*.h |
28fd66c6 | 503 | %{_mandir}/man3/* |
e523043b | 504 | |
ac46f43b | 505 | %files static |
051aeb4a | 506 | %defattr(644,root,root,755) |
98b63014 JR |
507 | %{_libdir}/libpam.a |
508 | %{_libdir}/libpamc.a | |
509 | %{_libdir}/libpam_misc.a | |
7c2f893c | 510 | |
1fbc0597 JR |
511 | %if %{with selinux} |
512 | %files pam_selinux | |
513 | %defattr(644,root,root,755) | |
1fbc0597 | 514 | %attr(755,root,root) /%{_lib}/security/pam_selinux.so |
2e6e9119 | 515 | %attr(755,root,root) /%{_lib}/security/pam_selinux_permit.so |
1fbc0597 | 516 | %attr(755,root,root) %{_sbindir}/pam_selinux_check |
7f8ab60d | 517 | %config(noreplace) %verify(not size mtime md5) /etc/pam.d/pam_selinux_check |
2e6e9119 | 518 | %config(noreplace) %verify(not size mtime md5) /etc/security/sepermit.conf |
1fbc0597 JR |
519 | %{_mandir}/man8/pam_selinux*.8* |
520 | %endif |