# TODO
# - check and package docs: https://fedorahosted.org/releases/l/i/linux-pam/Linux-PAM-1.1.8-docs.tar.bz2
# - fix pdf gen or disable it: No fo2pdf processor installed, skip PDF generation
+# - replace pam_cracklib.so with pam_pwquality.so (backwards compatible with its options), comes with pam-pam_pwquality package
+# - pam_tally, pam_tally2 is deprecated in favor of pam_faillock
+# use patch for now: pkgs.fedoraproject.org/pam/pam-1.2.1-faillock.patch
+# https://www.redhat.com/archives/pam-list/2017-June/msg00002.html
#
# Conditional build:
%bcond_without doc # don't build documentation
Summary(uk.UTF-8): Інструмент, що забезпечує аутентифікацію для програм
Name: pam
Version: 1.3.0
-Release: 2
+Release: 5
Epoch: 1
-License: GPL or BSD
+# The library is BSD licensed with option to relicense as GPLv2+
+# - this option is redundant as the BSD license allows that anyway.
+# pam_timestamp, pam_loginuid, and pam_console modules are GPLv2+.
+License: BSD and GPL v2+
Group: Base
Source0: http://www.linux-pam.org/library/Linux-PAM-%{version}.tar.bz2
# Source0-md5: da4b2289b7cfb19583d54e9eaaef1c3a
Source9: %{name}.tmpfiles
Source10: postlogin.pamd
Patch0: %{name}-pld-modules.patch
+Patch1: %{name}_console-lex-static.patch
Patch2: %{name}-tally-fail-close.patch
Patch3: %{name}-mkhomedir-notfound.patch
Patch4: %{name}-db-gdbm.patch
BuildRequires: automake
BuildRequires: bison
BuildRequires: cracklib-devel >= 2.8.3
-# gdbm due to db pulling libpthread
BuildRequires: flex
+# gdbm due to db pulling libpthread
BuildRequires: gdbm-devel >= 1.8.3-7
BuildRequires: gettext-tools >= 0.18.3
BuildRequires: glibc-devel >= 6:2.10.1
Requires: %{name}-libs = %{epoch}:%{version}-%{release}
%{?with_audit:Requires: audit-libs >= 1.0.8}
Requires: awk
-Requires: cracklib >= 2.8.3
-Requires: cracklib-dicts >= 2.8.3
Requires: crypt(blowfish)
Requires: glibc >= 6:2.5-0.5
%{?with_selinux:Requires: libselinux >= 2.1.9}
+Requires: pam-pam_cracklib = %{epoch}:%{version}-%{release}
Suggests: make
+Suggests: pam-pam_pwquality
Suggests: pam-pam_userdb = %{epoch}:%{version}-%{release}
Obsoletes: pam-doc
Obsoletes: pam-pam_opie
Summary(ru.UTF-8): Библиотеки разработчика для PAM
Summary(uk.UTF-8): Бібліотеки програміста для PAM
Group: Development/Libraries
-Requires: %{name} = %{epoch}:%{version}-%{release}
+Requires: %{name}-libs = %{epoch}:%{version}-%{release}
%{?with_audit:Requires: audit-libs-devel >= 1.0.8}
Requires: filesystem >= 3.0-11
%description static -l uk.UTF-8
Цей пакет містить статичні бібліотеки програміста для PAM.
+%package pam_cracklib
+Summary: PAM module to check the password against dictionary words
+Summary(pl.UTF-8): Moduł PAM do sprawdzania haseł względem słów ze słownika
+Group: Base
+Requires: %{name}-libs = %{epoch}:%{version}-%{release}
+Requires: cracklib >= 2.8.3
+Requires: cracklib-dicts >= 2.8.3
+
+%description pam_cracklib
+PAM module to check the password against dictionary words.
+
+%description pam_cracklib -l pl.UTF-8
+Moduł PAM do sprawdzania haseł względem słów ze słownika.
+
%package pam_selinux
Summary: PAM module - SELinux support
Summary(pl.UTF-8): Moduł PAM pozwalający na zmianę kontekstów SELinuksa
Group: Base
+Requires: %{name}-libs = %{epoch}:%{version}-%{release}
Requires: libselinux >= 2.1.9
%description pam_selinux
Moduł PAM pozwalający na zmianę kontekstów SELinuksa.
%package pam_userdb
-Summary: PAM module - authenticate against db database
+Summary: PAM module - authenticate against GDBM database
+Summary(pl.UTF-8): Moduł PAM do uwierzytelniania względem bazy danych GDBM
Group: Base
+Requires: %{name}-libs = %{epoch}:%{version}-%{release}
Requires: gdbm >= 1.8.3-7
-Conflicts: pam-libs < 1:1.1.8-3.1
%description pam_userdb
-pam_userdb - PAM module to authenticate against a Berkeley DB database
+pam_userdb - PAM module to authenticate against GDBM database.
+
+%description pam_userdb -l pl.UTF-8
+pam_userdb - moduł PAM służący do uwierzytelniania względem bazy
+danych GDBM.
%prep
%setup -q -a2 -n Linux-PAM-%{version}
%patch0 -p1
+%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
cp -pf $r doc/txts/README.$(basename $(dirname $r))
done
%{__rm} doc/txts/README.pam_userdb
+%{__rm} doc/txts/README.pam_cracklib
install -d doc/html
cp -pf doc/index.html doc/html/
%exclude %{_mandir}/man8/pam_selinux*.8*
%exclude %{_mandir}/man8/pam_sepermit.8*
%endif
+%exclude %{_mandir}/man8/pam_cracklib.8*
%exclude %{_mandir}/man8/pam_userdb.8*
%ghost %verify(not md5 mtime size) /var/log/tallylog
# PAM modules
%attr(755,root,root) /%{_lib}/security/pam_access.so
%attr(755,root,root) /%{_lib}/security/pam_console.so
-%attr(755,root,root) /%{_lib}/security/pam_cracklib.so
%attr(755,root,root) /%{_lib}/security/pam_debug.so
%attr(755,root,root) /%{_lib}/security/pam_deny.so
%attr(755,root,root) /%{_lib}/security/pam_echo.so
%dir /var/run/sepermit
%endif
+%files pam_cracklib
+%defattr(644,root,root,755)
+%doc modules/pam_cracklib/README
+%attr(755,root,root) /%{_lib}/security/pam_cracklib.so
+%{_mandir}/man8/pam_cracklib.8*
+
%files pam_userdb
%defattr(644,root,root,755)
%doc modules/pam_userdb/README
projects / packages / pam.git / blobdiff