diff options
author | 2016-03-30 18:54:28 -0400 | |
---|---|---|
committer | 2016-03-30 19:47:43 -0400 | |
commit | a0819b4caa858b34434c1d21217ffea94d76215b (patch) | |
tree | 1f5ee0435913b5854660519aa4a771e7b22be08d /sys-libs/pam/files | |
parent | sys-apps/acl: drop old <2.2.52-r1 versions (diff) | |
download | gentoo-a0819b4caa858b34434c1d21217ffea94d76215b.tar.gz gentoo-a0819b4caa858b34434c1d21217ffea94d76215b.tar.bz2 gentoo-a0819b4caa858b34434c1d21217ffea94d76215b.zip |
sys-libs/pam: drop old <1.2.1 versions
Diffstat (limited to 'sys-libs/pam/files')
-rw-r--r-- | sys-libs/pam/files/Linux-PAM-1.1.5+glibc-2.16.patch | 20 | ||||
-rw-r--r-- | sys-libs/pam/files/Linux-PAM-1.1.6+glibc-2.16.patch | 29 | ||||
-rw-r--r-- | sys-libs/pam/files/Linux-PAM-1.1.6-destdir.patch | 48 | ||||
-rw-r--r-- | sys-libs/pam/files/pam-1.1.8-CVE-2013-7041.patch | 54 | ||||
-rw-r--r-- | sys-libs/pam/files/pam-1.1.8-CVE-2014-2583.patch | 58 | ||||
-rw-r--r-- | sys-libs/pam/files/pam-1.1.8-doc-install.patch | 142 |
6 files changed, 0 insertions, 351 deletions
diff --git a/sys-libs/pam/files/Linux-PAM-1.1.5+glibc-2.16.patch b/sys-libs/pam/files/Linux-PAM-1.1.5+glibc-2.16.patch deleted file mode 100644 index 114d3e47008a..000000000000 --- a/sys-libs/pam/files/Linux-PAM-1.1.5+glibc-2.16.patch +++ /dev/null @@ -1,20 +0,0 @@ ---- a/modules/pam_unix/pam_unix_acct.c 2011-06-21 11:04:56.000000000 +0200 -+++ b/modules/pam_unix/pam_unix_acct.c 2012-07-05 16:04:35.643727485 +0200 -@@ -41,6 +41,7 @@ - #include <string.h> - #include <unistd.h> - #include <sys/types.h> -+#include <sys/resource.h> - #include <syslog.h> - #include <pwd.h> - #include <shadow.h> ---- a/modules/pam_unix/pam_unix_passwd.c 2012-07-16 11:49:25.954638105 -0500 -+++ b/modules/pam_unix/pam_unix_passwd.c 2012-07-16 11:50:04.408635441 -0500 -@@ -46,6 +46,7 @@ - #include <unistd.h> - #include <errno.h> - #include <sys/types.h> -+#include <sys/resource.h> - #include <pwd.h> - #include <syslog.h> - #include <shadow.h> diff --git a/sys-libs/pam/files/Linux-PAM-1.1.6+glibc-2.16.patch b/sys-libs/pam/files/Linux-PAM-1.1.6+glibc-2.16.patch deleted file mode 100644 index cddda35fbeb9..000000000000 --- a/sys-libs/pam/files/Linux-PAM-1.1.6+glibc-2.16.patch +++ /dev/null @@ -1,29 +0,0 @@ -From 18da0c4763f5e079f8b2df45fa462b0b70b6fd3a Mon Sep 17 00:00:00 2001 -From: "Jory A. Pratt" <anarchy@gentoo.org> -Date: Sun, 7 Oct 2012 11:44:17 -0700 -Subject: [PATCH] Fix building with GLIBC 2.16 and SELinux. -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - - -Signed-off-by: Diego Elio Pettenò <flameeyes@flameeyes.eu> ---- - modules/pam_unix/pam_unix_passwd.c | 1 + - 1 file modificato, 1 inserzione(+) - -diff --git a/modules/pam_unix/pam_unix_passwd.c b/modules/pam_unix/pam_unix_passwd.c -index 9e1302d..b5f5ae9 100644 ---- a/modules/pam_unix/pam_unix_passwd.c -+++ b/modules/pam_unix/pam_unix_passwd.c -@@ -46,6 +46,7 @@ - #include <unistd.h> - #include <errno.h> - #include <sys/types.h> -+#include <sys/resource.h> - #include <pwd.h> - #include <syslog.h> - #include <shadow.h> --- -1.7.12 - diff --git a/sys-libs/pam/files/Linux-PAM-1.1.6-destdir.patch b/sys-libs/pam/files/Linux-PAM-1.1.6-destdir.patch deleted file mode 100644 index 6859ccb60d3f..000000000000 --- a/sys-libs/pam/files/Linux-PAM-1.1.6-destdir.patch +++ /dev/null @@ -1,48 +0,0 @@ -From d7e6b921cd34f7ad8fc4d05065c75d13ba330896 Mon Sep 17 00:00:00 2001 -From: Tomas Mraz <tmraz@fedoraproject.org> -Date: Fri, 17 Aug 2012 14:46:40 +0200 -Subject: [PATCH] Add missing $(DESTDIR) when making directories on install. -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -modules/pam_namespace/Makefile.am: Add missing $(DESTDIR) when making -$(namespaceddir) on install. -modules/pam_sepermit/Makefile.am: Add missing $(DESTDIR) when making -$(sepermitlockdir) on install. - -Signed-off-by: Diego Elio Pettenò <flameeyes@flameeyes.eu> ---- - modules/pam_namespace/Makefile.am | 2 +- - modules/pam_sepermit/Makefile.am | 2 +- - 2 files changed, 2 insertions(+), 2 deletions(-) - -diff --git a/modules/pam_namespace/Makefile.am b/modules/pam_namespace/Makefile.am -index a28f196..ebb00f3 100644 ---- a/modules/pam_namespace/Makefile.am -+++ b/modules/pam_namespace/Makefile.am -@@ -40,7 +40,7 @@ if HAVE_UNSHARE - secureconf_SCRIPTS = namespace.init - - install-data-local: -- mkdir -p $(namespaceddir) -+ mkdir -p $(DESTDIR)$(namespaceddir) - endif - - -diff --git a/modules/pam_sepermit/Makefile.am b/modules/pam_sepermit/Makefile.am -index cfc5594..bc82275 100644 ---- a/modules/pam_sepermit/Makefile.am -+++ b/modules/pam_sepermit/Makefile.am -@@ -35,7 +35,7 @@ if HAVE_LIBSELINUX - securelib_LTLIBRARIES = pam_sepermit.la - - install-data-local: -- mkdir -p $(sepermitlockdir) -+ mkdir -p $(DESTDIR)$(sepermitlockdir) - endif - if ENABLE_REGENERATE_MAN - noinst_DATA = README pam_sepermit.8 sepermit.conf.5 --- -1.7.8.6 - diff --git a/sys-libs/pam/files/pam-1.1.8-CVE-2013-7041.patch b/sys-libs/pam/files/pam-1.1.8-CVE-2013-7041.patch deleted file mode 100644 index 338aa9695ae5..000000000000 --- a/sys-libs/pam/files/pam-1.1.8-CVE-2013-7041.patch +++ /dev/null @@ -1,54 +0,0 @@ -https://bugs.gentoo.org/493432 - -From 57a1e2b274d0a6376d92ada9926e5c5741e7da20 Mon Sep 17 00:00:00 2001 -From: "Dmitry V. Levin" <ldv@altlinux.org> -Date: Fri, 24 Jan 2014 22:18:32 +0000 -Subject: [PATCH] pam_userdb: fix password hash comparison - -Starting with commit Linux-PAM-0-77-28-g0b3e583 that introduced hashed -passwords support in pam_userdb, hashes are compared case-insensitively. -This bug leads to accepting hashes for completely different passwords in -addition to those that should be accepted. - -Additionally, commit Linux-PAM-1_1_6-13-ge2a8187 that added support for -modern password hashes with different lengths and settings, did not -update the hash comparison accordingly, which leads to accepting -computed hashes longer than stored hashes when the latter is a prefix -of the former. - -* modules/pam_userdb/pam_userdb.c (user_lookup): Reject the computed -hash whose length differs from the stored hash length. -Compare computed and stored hashes case-sensitively. -Fixes CVE-2013-7041. - -Bug-Debian: http://bugs.debian.org/731368 ---- - modules/pam_userdb/pam_userdb.c | 9 ++++++--- - 1 file changed, 6 insertions(+), 3 deletions(-) - -diff --git a/modules/pam_userdb/pam_userdb.c b/modules/pam_userdb/pam_userdb.c -index de8b5b1..ff040e6 100644 ---- a/modules/pam_userdb/pam_userdb.c -+++ b/modules/pam_userdb/pam_userdb.c -@@ -222,12 +222,15 @@ user_lookup (pam_handle_t *pamh, const char *database, const char *cryptmode, - } else { - cryptpw = crypt (pass, data.dptr); - -- if (cryptpw) { -- compare = strncasecmp (data.dptr, cryptpw, data.dsize); -+ if (cryptpw && strlen(cryptpw) == (size_t)data.dsize) { -+ compare = memcmp(data.dptr, cryptpw, data.dsize); - } else { - compare = -2; - if (ctrl & PAM_DEBUG_ARG) { -- pam_syslog(pamh, LOG_INFO, "crypt() returned NULL"); -+ if (cryptpw) -+ pam_syslog(pamh, LOG_INFO, "lengths of computed and stored hashes differ"); -+ else -+ pam_syslog(pamh, LOG_INFO, "crypt() returned NULL"); - } - }; - --- -2.4.0 - diff --git a/sys-libs/pam/files/pam-1.1.8-CVE-2014-2583.patch b/sys-libs/pam/files/pam-1.1.8-CVE-2014-2583.patch deleted file mode 100644 index 7965b77b0484..000000000000 --- a/sys-libs/pam/files/pam-1.1.8-CVE-2014-2583.patch +++ /dev/null @@ -1,58 +0,0 @@ -https://bugs.gentoo.org/505604 - -From 9dcead87e6d7f66d34e7a56d11a30daca367dffb Mon Sep 17 00:00:00 2001 -From: "Dmitry V. Levin" <ldv@altlinux.org> -Date: Wed, 26 Mar 2014 22:17:23 +0000 -Subject: [PATCH] pam_timestamp: fix potential directory traversal issue - (ticket #27) - -pam_timestamp uses values of PAM_RUSER and PAM_TTY as components of -the timestamp pathname it creates, so extra care should be taken to -avoid potential directory traversal issues. - -* modules/pam_timestamp/pam_timestamp.c (check_tty): Treat -"." and ".." tty values as invalid. -(get_ruser): Treat "." and ".." ruser values, as well as any ruser -value containing '/', as invalid. - -Fixes CVE-2014-2583. - -Reported-by: Sebastian Krahmer <krahmer@suse.de> ---- - modules/pam_timestamp/pam_timestamp.c | 13 ++++++++++++- - 1 file changed, 12 insertions(+), 1 deletion(-) - -diff --git a/modules/pam_timestamp/pam_timestamp.c b/modules/pam_timestamp/pam_timestamp.c -index 5193733..b3f08b1 100644 ---- a/modules/pam_timestamp/pam_timestamp.c -+++ b/modules/pam_timestamp/pam_timestamp.c -@@ -158,7 +158,7 @@ check_tty(const char *tty) - tty = strrchr(tty, '/') + 1; - } - /* Make sure the tty wasn't actually a directory (no basename). */ -- if (strlen(tty) == 0) { -+ if (!strlen(tty) || !strcmp(tty, ".") || !strcmp(tty, "..")) { - return NULL; - } - return tty; -@@ -243,6 +243,17 @@ get_ruser(pam_handle_t *pamh, char *ruserbuf, size_t ruserbuflen) - if (pwd != NULL) { - ruser = pwd->pw_name; - } -+ } else { -+ /* -+ * This ruser is used by format_timestamp_name as a component -+ * of constructed timestamp pathname, so ".", "..", and '/' -+ * are disallowed to avoid potential path traversal issues. -+ */ -+ if (!strcmp(ruser, ".") || -+ !strcmp(ruser, "..") || -+ strchr(ruser, '/')) { -+ ruser = NULL; -+ } - } - if (ruser == NULL || strlen(ruser) >= ruserbuflen) { - *ruserbuf = '\0'; --- -2.4.0 - diff --git a/sys-libs/pam/files/pam-1.1.8-doc-install.patch b/sys-libs/pam/files/pam-1.1.8-doc-install.patch deleted file mode 100644 index bdd5b9d48164..000000000000 --- a/sys-libs/pam/files/pam-1.1.8-doc-install.patch +++ /dev/null @@ -1,142 +0,0 @@ -https://bugs.gentoo.org/473650 -https://fedorahosted.org/linux-pam/ticket/31 - -fix doc installs when doing out of tree builds - ---- a/doc/adg/Makefile.in -+++ b/doc/adg/Makefile.in -@@ -463,17 +463,17 @@ install-data-local: - $(mkinstalldirs) $(DESTDIR)$(docdir) - $(mkinstalldirs) $(DESTDIR)$(pdfdir) - $(mkinstalldirs) $(DESTDIR)$(htmldir) -- test -f html/Linux-PAM_ADG.html || exit 0; \ -+ test -f html/Linux-PAM_ADG.html -o -f $(srcdir)/html/Linux-PAM_ADG.html || exit 0; \ - $(install_sh_DATA) html/Linux-PAM_ADG.html html/adg-*.html \ - $(DESTDIR)$(htmldir)/ || \ - $(install_sh_DATA) $(srcdir)/html/Linux-PAM_ADG.html \ -- $(srcdir)/html/sag-*.html \ -+ $(srcdir)/html/adg-*.html \ - $(DESTDIR)$(htmldir)/ -- test -f Linux-PAM_ADG.txt || exit 0; \ -+ test -f Linux-PAM_ADG.txt -o -f $(srcdir)/Linux-PAM_ADG.txt || exit 0; \ - $(install_sh_DATA) Linux-PAM_ADG.txt $(DESTDIR)$(docdir)/ || \ - $(install_sh_DATA) $(srcdir)/Linux-PAM_ADG.txt \ - $(DESTDIR)$(docdir)/ -- test -f Linux-PAM_ADG.pdf || exit 0; \ -+ test -f Linux-PAM_ADG.pdf -o -f $(srcdir)/Linux-PAM_ADG.pdf || exit 0; \ - $(install_sh_DATA) Linux-PAM_ADG.pdf $(DESTDIR)$(pdfdir)/ || \ - $(install_sh_DATA) $(srcdir)/Linux-PAM_ADG.pdf \ - $(DESTDIR)$(pdfdir)/ -@@ -486,18 +486,18 @@ uninstall-local: - - releasedocs: all - $(mkinstalldirs) $(top_builddir)/Linux-PAM-$(VERSION)/doc/adg/html -- test -f html/Linux-PAM_ADG.html || exit 0; \ -+ test -f html/Linux-PAM_ADG.html -o -f $(srcdir)/html/Linux-PAM_ADG.html || exit 0; \ - cp -ap html/Linux-PAM_ADG.html html/adg-*.html \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/adg/html/ || \ - cp -ap $(srcdir)/html/Linux-PAM_ADG.html \ - $(srcdir)/html/adg-*.html \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/adg/html/ -- test -f Linux-PAM_ADG.txt || exit 0; \ -+ test -f Linux-PAM_ADG.txt -o -f $(srcdir)/Linux-PAM_ADG.txt || exit 0; \ - cp -p Linux-PAM_ADG.txt \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/adg/ || \ - cp -p $(srcdir)/Linux-PAM_ADG.txt \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/adg/ -- test -f Linux-PAM_ADG.pdf || exit 0; \ -+ test -f Linux-PAM_ADG.pdf -o -f $(srcdir)/Linux-PAM_ADG.pdf || exit 0; \ - cp -p Linux-PAM_ADG.pdf \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/adg/ || \ - cp -p $(srcdir)/Linux-PAM_ADG.pdf \ ---- a/doc/mwg/Makefile.in -+++ b/doc/mwg/Makefile.in -@@ -463,17 +463,17 @@ install-data-local: - $(mkinstalldirs) $(DESTDIR)$(docdir) - $(mkinstalldirs) $(DESTDIR)$(pdfdir) - $(mkinstalldirs) $(DESTDIR)$(htmldir) -- test -f html/Linux-PAM_MWG.html || exit 0; \ -+ test -f html/Linux-PAM_MWG.html -o -f $(srcdir)/html/Linux-PAM_MWG.html || exit 0; \ - $(install_sh_DATA) html/Linux-PAM_MWG.html html/mwg-*.html \ - $(DESTDIR)$(htmldir)/ || \ - $(install_sh_DATA) $(srcdir)/html/Linux-PAM_MWG.html \ -- $(srcdir)/html/sag-*.html \ -+ $(srcdir)/html/mwg-*.html \ - $(DESTDIR)$(htmldir)/ -- test -f Linux-PAM_MWG.txt || exit 0; \ -+ test -f Linux-PAM_MWG.txt -o -f $(srcdir)/Linux-PAM_MWG.txt || exit 0; \ - $(install_sh_DATA) Linux-PAM_MWG.txt $(DESTDIR)$(docdir)/ || \ - $(install_sh_DATA) $(srcdir)/Linux-PAM_MWG.txt \ - $(DESTDIR)$(docdir)/ -- test -f Linux-PAM_MWG.pdf || exit 0; \ -+ test -f Linux-PAM_MWG.pdf -o -f $(srcdir)/Linux-PAM_MWG.pdf || exit 0; \ - $(install_sh_DATA) Linux-PAM_MWG.pdf $(DESTDIR)$(pdfdir)/ || \ - $(install_sh_DATA) $(srcdir)/Linux-PAM_MWG.pdf \ - $(DESTDIR)$(pdfdir)/ -@@ -486,18 +486,18 @@ uninstall-local: - - releasedocs: all - $(mkinstalldirs) $(top_builddir)/Linux-PAM-$(VERSION)/doc/mwg/html -- test -f html/Linux-PAM_MWG.html || exit 0; \ -+ test -f html/Linux-PAM_MWG.html -o -f $(srcdir)/html/Linux-PAM_MWG.html || exit 0; \ - cp -ap html/Linux-PAM_MWG.html html/mwg-*.html \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/mwg/html/ || \ - cp -ap $(srcdir)/html/Linux-PAM_MWG.html \ - $(srcdir)/html/mwg-*.html \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/mwg/html/ -- test -f Linux-PAM_MWG.txt || exit 0; \ -+ test -f Linux-PAM_MWG.txt -o -f $(srcdir)/Linux-PAM_MWG.txt || exit 0; \ - cp -p Linux-PAM_MWG.txt \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/mwg/ || \ - cp -p $(srcdir)/Linux-PAM_MWG.txt \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/mwg/ -- test -f Linux-PAM_MWG.pdf || exit 0; \ -+ test -f Linux-PAM_MWG.pdf -o -f $(srcdir)/Linux-PAM_MWG.pdf || exit 0; \ - cp -p Linux-PAM_MWG.pdf \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/mwg/ || \ - cp -p $(srcdir)/Linux-PAM_MWG.pdf \ ---- a/doc/sag/Makefile.in -+++ b/doc/sag/Makefile.in -@@ -463,17 +463,17 @@ install-data-local: - $(mkinstalldirs) $(DESTDIR)$(docdir) - $(mkinstalldirs) $(DESTDIR)$(pdfdir) - $(mkinstalldirs) $(DESTDIR)$(htmldir) -- test -f html/Linux-PAM_SAG.html || exit 0; \ -+ test -f html/Linux-PAM_SAG.html -o -f $(srcdir)/html/Linux-PAM_SAG.html || exit 0; \ - $(install_sh_DATA) html/Linux-PAM_SAG.html html/sag-*.html \ - $(DESTDIR)$(htmldir)/ || \ - $(install_sh_DATA) $(srcdir)/html/Linux-PAM_SAG.html \ - $(srcdir)/html/sag-*.html \ - $(DESTDIR)$(htmldir)/ -- test -f Linux-PAM_SAG.txt || exit 0; \ -+ test -f Linux-PAM_SAG.txt -o -f $(srcdir)/Linux-PAM_SAG.txt || exit 0; \ - $(install_sh_DATA) Linux-PAM_SAG.txt $(DESTDIR)$(docdir)/ || \ - $(install_sh_DATA) $(srcdir)/Linux-PAM_SAG.txt \ - $(DESTDIR)$(docdir)/ -- test -f Linux-PAM_SAG.pdf || exit 0; \ -+ test -f Linux-PAM_SAG.pdf -o -f $(srcdir)/Linux-PAM_SAG.pdf || exit 0; \ - $(install_sh_DATA) Linux-PAM_SAG.pdf $(DESTDIR)$(pdfdir)/ || \ - $(install_sh_DATA) $(srcdir)/Linux-PAM_SAG.pdf \ - $(DESTDIR)$(pdfdir)/ -@@ -486,18 +486,18 @@ uninstall-local: - - releasedocs: all - $(mkinstalldirs) $(top_builddir)/Linux-PAM-$(VERSION)/doc/sag/html -- test -f html/Linux-PAM_SAG.html || exit 0; \ -+ test -f html/Linux-PAM_SAG.html -o -f $(srcdir)/html/Linux-PAM_SAG.html || exit 0; \ - cp -ap html/Linux-PAM_SAG.html html/sag-*.html \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/sag/html/ || \ - cp -ap $(srcdir)/html/Linux-PAM_SAG.html \ - $(srcdir)/html/sag-*.html \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/sag/html/ -- test -f Linux-PAM_SAG.txt || exit 0; \ -+ test -f Linux-PAM_SAG.txt -o -f $(srcdir)/Linux-PAM_SAG.txt || exit 0; \ - cp -p Linux-PAM_SAG.txt \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/sag/ || \ - cp -p $(srcdir)/Linux-PAM_SAG.txt \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/sag/ -- test -f Linux-PAM_SAG.pdf || exit 0; \ -+ test -f Linux-PAM_SAG.pdf -o -f $(srcdir)/Linux-PAM_SAG.pdf || exit 0; \ - cp -p Linux-PAM_SAG.pdf \ - $(top_builddir)/Linux-PAM-$(VERSION)/doc/sag/ || \ - cp -p $(srcdir)/Linux-PAM_SAG.pdf \ |