- add support for recording user's login uid to the process attribute

diff --git a/openssh.spec b/openssh.spec
index 86381d65a2108c19d31a25dd692bf23655950e9a..7c556ad4848863ac1d39cc2d6f9b03fe9ef80140 100644 (file)
--- a/openssh.spec
+++ b/openssh.spec
@@ -35,7 +35,7 @@ Summary(ru.UTF-8):    OpenSSH - свободная реализация прото
 Summary(uk.UTF-8):     OpenSSH - вільна реалізація протоколу Secure Shell (SSH)
 Name:          openssh
 Version:       6.2p1
-Release:       1
+Release:       2
 Epoch:         2
 License:       BSD
 Group:         Applications/Networking
@@ -621,6 +621,11 @@ install -p %{SOURCE2} sshd.init
 %{__sed} -i -e '/ecdsa/d' sshd.init
 %endif
 
+%if %{without audit}
+# remove recording user's login uid to the process attribute
+%{__sed} -i -e '/pam_loginuid.so/d' sshd.pam
+%endif
+
 install -p sshd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd
 cp -p sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd
 cp -p %{SOURCE4} $RPM_BUILD_ROOT/etc/sysconfig/sshd

diff --git a/opensshd.pamd b/opensshd.pamd
index 5295659cbd4474ff5038ff2bd10e9867a5d9a808..1dd3461883d8fc9469e8ac02276a52fa5b90fe4e 100644 (file)
--- a/opensshd.pamd
+++ b/opensshd.pamd
@@ -6,6 +6,7 @@ account         required        pam_nologin.so
 account                required        pam_access.so
 account                include         system-auth
 password       include         system-auth
+session                required        pam_loginuid.so
 session                optional        pam_keyinit.so force revoke
 session                include         system-auth
 session                optional        pam_mail.so