mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
From: "Sven Püschel" <s.pueschel@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: "Sven Püschel" <s.pueschel@pengutronix.de>
Subject: [ptxdist] [PATCH] pam: version bump 1.7.1 -> 1.7.3
Date: Wed, 28 Oct 2026 12:57:49 +0100	[thread overview]
Message-ID: <20261028115803.467772-1-s.pueschel@pengutronix.de> (raw)

https://github.com/linux-pam/linux-pam/releases/tag/v1.7.2
https://github.com/linux-pam/linux-pam/releases/tag/v1.7.3

With 1.7.2 the vendordir is enabled by default thus placing
files from /etc (e.g. /etc/environment) into /usr/share/pam.
While the relevant commit [1] mentions that this should only
happen when libeconf support is enabled, it doesn't add any
conditional logic. As pam only uses these files as a default
fallback if the given files in /etc don't exist, adjust the
targetinstall to use the new location.

Also reordered the meson options based on the output of the
configure_helper.py script. Also explicitly disable the new libpwaccess
support and set the pam_unix-try-getspnam value to it's default false
value.

[1] https://github.com/linux-pam/linux-pam/commit/aea30822e2fa6f87faf2541da140f69dfdfee728

Signed-off-by: Sven Püschel <s.pueschel@pengutronix.de>
---
 rules/pam.make | 44 +++++++++++++++++++++++---------------------
 1 file changed, 23 insertions(+), 21 deletions(-)

diff --git a/rules/pam.make b/rules/pam.make
index 64db70847..607750ad5 100644
--- a/rules/pam.make
+++ b/rules/pam.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_PAM) += pam
 #
 # Paths and names
 #
-PAM_VERSION	:= 1.7.1
-PAM_SHA256	:= 82aadd97eb697965b577069c12046a4dd1be68361a9978c708698d2a1ee9b6d1
+PAM_VERSION	:= 1.7.3
+PAM_SHA256	:= 29c2a93f819a62ba981f695b03fe00550b49ce7ae5c5342edaaf860687fbb1a0
 PAM		:= Linux-PAM-$(PAM_VERSION)
 PAM_SUFFIX	:= tar.gz
 PAM_URL		:= https://github.com/linux-pam/linux-pam/archive/refs/tags/v$(PAM_VERSION).$(PAM_SUFFIX)
@@ -33,26 +33,28 @@ PAM_LICENSE_FILES := \
 PAM_CONF_TOOL	:= meson
 PAM_CONF_OPT	:= \
 	$(CROSS_MESON_USR) \
-	-Di18n=disabled \
-	-Ddocs=disabled \
 	-Daudit=disabled \
+	-Ddocs=disabled \
 	-Deconf=disabled \
-	-Dlogind=disabled \
 	-Delogind=disabled \
-	-Dopenssl=disabled \
-	-Dselinux=disabled \
-	-Dnis=$(call ptx/endis, PTXCONF_PAM_NIS)d \
 	-Dexamples=false \
+	-Di18n=disabled \
 	-Dlckpwdf=false \
+	-Dlogind=disabled \
+	-Dnis=$(call ptx/endis, PTXCONF_PAM_NIS)d \
+	-Dopenssl=disabled \
 	-Dpam-debug=false \
+	-Dpam_lastlog=disabled \
+	-Dpam_unix=enabled \
+	-Dpam_unix-try-getspnam=false \
+	-Dpam_userdb=$(call ptx/endis, PTXCONF_PAM_DB)d \
 	-Dpamlocking=false \
+	-Dpwaccess=disabled \
 	-Dread-both-confs=false \
-	-Dusergroups=false \
-	-Dxtests=false \
+	-Dselinux=disabled \
 	-Duidmin=1000 \
-	-Dpam_userdb=$(call ptx/endis, PTXCONF_PAM_DB)d \
-	-Dpam_lastlog=disabled \
-	-Dpam_unix=enabled
+	-Dusergroups=false \
+	-Dxtests=false
 
 # ----------------------------------------------------------------------------
 # Target-Install
@@ -73,14 +75,14 @@ $(STATEDIR)/pam.targetinstall:
 
 	@$(call install_tree, pam, 0, 0, -, /usr/lib/security)
 
-	@$(call install_alternative, pam, 0, 0, 0644, /etc/environment)
-	@$(call install_alternative, pam, 0, 0, 0644, /etc/security/access.conf)
-	@$(call install_alternative, pam, 0, 0, 0644, /etc/security/group.conf)
-	@$(call install_alternative, pam, 0, 0, 0644, /etc/security/limits.conf)
-	@$(call install_alternative, pam, 0, 0, 0644, /etc/security/namespace.conf)
-	@$(call install_alternative, pam, 0, 0, 0755, /etc/security/namespace.init)
-	@$(call install_alternative, pam, 0, 0, 0644, /etc/security/pam_env.conf)
-	@$(call install_alternative, pam, 0, 0, 0644, /etc/security/time.conf)
+	@$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/environment)
+	@$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/access.conf)
+	@$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/group.conf)
+	@$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/limits.conf)
+	@$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/namespace.conf)
+	@$(call install_alternative, pam, 0, 0, 0755, /usr/share/pam/security/namespace.init)
+	@$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/pam_env.conf)
+	@$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/time.conf)
 
 	@$(call install_alternative, pam, 0, 0, 0755, /usr/sbin/mkhomedir_helper)
 	@$(call install_alternative, pam, 0, 0, 0755, /usr/sbin/unix_chkpwd)
-- 
2.47.3




                 reply	other threads:[~2026-10-28 11:58 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20261028115803.467772-1-s.pueschel@pengutronix.de \
    --to=s.pueschel@pengutronix.de \
    --cc=ptxdist@pengutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox