From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 13 Nov 2026 09:41:08 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xRmqK-00AMRR-1b for lore@lore.pengutronix.de; Fri, 13 Nov 2026 09:41:08 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmqH-00052w-C6; Fri, 13 Nov 2026 09:41:05 +0100 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmof-0006Cn-N7 for ptxdist@pengutronix.de; Fri, 13 Nov 2026 09:39:25 +0100 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.pengutronix.de [IPv6:2a0a:edc0:0:1101:1d::54]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 9F5BD205848; Fri, 13 Nov 2026 09:39:25 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1794559165; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=/WS2QFPoGXh3IyVVWJVGiGi0kuJJFkGisLidcUIZG98=; b=aOqVXm7eDP4JJGKZi1M4IrfcfbMXPIya22nZ89cqZUJ935TktDZUJGR2GxX7x8KjdG5+uQ 0tUm0QzpEaWuxDNRqkYDAuIto7Vu1W4QTB5Rv3LUF0eWVif2rLkx3m/TBrWzIkz5VCN3st 2qfy3lCWEjW+H+xmBe/iMZwwl0Y7+p/hncpYYW3RW0BxV+PG80+Xep/JNa5rRq3n3s/d4D HOy8PiXM91U4wyYC24NjoHYcSUHVmXVgz43+pgYcgx/hyggXdZ7ts4ZkSzZcQ8IsH0GZcE FyraSzWfyZSBgl/B17VrT8WfQX/eJVfizSfAckZQKFiRrtOn4F9P5VOCKSL60w== ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1794559165; a=rsa-sha256; cv=none; b=WLQUutD3ku2Fq2Wxwwo+qg2nebMVlBG206Ol0PATRgm5tWwN9loMNj9K/B5cBy2cRsbIxC UQE2UpbZnLqC71L82d7oqvWDHwCJjmKn4ZW4Ys/hxFQ8kyoqslPY/vUaKatfOwAWuNXr3B spLkl00axuUsX2eGEV7YRuZ4D0OUG0oztHGT3K/QSxW8NecwcknsA6ZP7iP5kGL3JOHFM8 Et7nG4wtknxI9xZAfSsVLfKlQOyGp0N4Fstkv2O/YNK5Sb7orDuDY0bY3NZyfX1d0XSbEG 54PJct2I/us2WmYhfpOOXkJ1FVg65yF9FB+Avl/f71B/v3VCBkg2LqIGm9yFyA== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id 8FC56743103; Fri, 13 Nov 2026 09:39:25 +0100 (CET) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 13 Nov 2026 09:39:25 +0100 Message-ID: <20261113083925.1380447-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261028115803.467772-1-s.pueschel@pengutronix.de> References: <20261028115803.467772-1-s.pueschel@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: [ptxdist] [APPLIED] pam: version bump 1.7.1 -> 1.7.3 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: =?UTF-8?q?Sven=20P=C3=BCschel?= Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 01147be25fc7cb5c323744c0166dcddb52235aa2. Michael [sent from post-receive hook] On Fri, 13 Nov 2026 09:39:25 +0100, Sven Püschel wrote: > https://github.com/linux-pam/linux-pam/releases/tag/v1.7.2 > https://github.com/linux-pam/linux-pam/releases/tag/v1.7.3 > > With 1.7.2 the vendordir is enabled by default thus placing > files from /etc (e.g. /etc/environment) into /usr/share/pam. > While the relevant commit [1] mentions that this should only > happen when libeconf support is enabled, it doesn't add any > conditional logic. As pam only uses these files as a default > fallback if the given files in /etc don't exist, adjust the > targetinstall to use the new location. > > Also reordered the meson options based on the output of the > configure_helper.py script. Also explicitly disable the new libpwaccess > support and set the pam_unix-try-getspnam value to it's default false > value. > > [1] https://github.com/linux-pam/linux-pam/commit/aea30822e2fa6f87faf2541da140f69dfdfee728 > > Signed-off-by: Sven Püschel > Message-Id: <20261028115803.467772-1-s.pueschel@pengutronix.de> > Signed-off-by: Michael Olbrich > > diff --git a/rules/pam.make b/rules/pam.make > index 64db70847b2b..607750ad5bfe 100644 > --- a/rules/pam.make > +++ b/rules/pam.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_PAM) += pam > # > # Paths and names > # > -PAM_VERSION := 1.7.1 > -PAM_SHA256 := 82aadd97eb697965b577069c12046a4dd1be68361a9978c708698d2a1ee9b6d1 > +PAM_VERSION := 1.7.3 > +PAM_SHA256 := 29c2a93f819a62ba981f695b03fe00550b49ce7ae5c5342edaaf860687fbb1a0 > PAM := Linux-PAM-$(PAM_VERSION) > PAM_SUFFIX := tar.gz > PAM_URL := https://github.com/linux-pam/linux-pam/archive/refs/tags/v$(PAM_VERSION).$(PAM_SUFFIX) > @@ -33,26 +33,28 @@ PAM_LICENSE_FILES := \ > PAM_CONF_TOOL := meson > PAM_CONF_OPT := \ > $(CROSS_MESON_USR) \ > - -Di18n=disabled \ > - -Ddocs=disabled \ > -Daudit=disabled \ > + -Ddocs=disabled \ > -Deconf=disabled \ > - -Dlogind=disabled \ > -Delogind=disabled \ > - -Dopenssl=disabled \ > - -Dselinux=disabled \ > - -Dnis=$(call ptx/endis, PTXCONF_PAM_NIS)d \ > -Dexamples=false \ > + -Di18n=disabled \ > -Dlckpwdf=false \ > + -Dlogind=disabled \ > + -Dnis=$(call ptx/endis, PTXCONF_PAM_NIS)d \ > + -Dopenssl=disabled \ > -Dpam-debug=false \ > + -Dpam_lastlog=disabled \ > + -Dpam_unix=enabled \ > + -Dpam_unix-try-getspnam=false \ > + -Dpam_userdb=$(call ptx/endis, PTXCONF_PAM_DB)d \ > -Dpamlocking=false \ > + -Dpwaccess=disabled \ > -Dread-both-confs=false \ > - -Dusergroups=false \ > - -Dxtests=false \ > + -Dselinux=disabled \ > -Duidmin=1000 \ > - -Dpam_userdb=$(call ptx/endis, PTXCONF_PAM_DB)d \ > - -Dpam_lastlog=disabled \ > - -Dpam_unix=enabled > + -Dusergroups=false \ > + -Dxtests=false > > # ---------------------------------------------------------------------------- > # Target-Install > @@ -73,14 +75,14 @@ $(STATEDIR)/pam.targetinstall: > > @$(call install_tree, pam, 0, 0, -, /usr/lib/security) > > - @$(call install_alternative, pam, 0, 0, 0644, /etc/environment) > - @$(call install_alternative, pam, 0, 0, 0644, /etc/security/access.conf) > - @$(call install_alternative, pam, 0, 0, 0644, /etc/security/group.conf) > - @$(call install_alternative, pam, 0, 0, 0644, /etc/security/limits.conf) > - @$(call install_alternative, pam, 0, 0, 0644, /etc/security/namespace.conf) > - @$(call install_alternative, pam, 0, 0, 0755, /etc/security/namespace.init) > - @$(call install_alternative, pam, 0, 0, 0644, /etc/security/pam_env.conf) > - @$(call install_alternative, pam, 0, 0, 0644, /etc/security/time.conf) > + @$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/environment) > + @$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/access.conf) > + @$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/group.conf) > + @$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/limits.conf) > + @$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/namespace.conf) > + @$(call install_alternative, pam, 0, 0, 0755, /usr/share/pam/security/namespace.init) > + @$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/pam_env.conf) > + @$(call install_alternative, pam, 0, 0, 0644, /usr/share/pam/security/time.conf) > > @$(call install_alternative, pam, 0, 0, 0755, /usr/sbin/mkhomedir_helper) > @$(call install_alternative, pam, 0, 0, 0755, /usr/sbin/unix_chkpwd)