works of adding packages pam support

From: Xiaofeng Yan <[email protected]>

I make a patch and some changes in dropbear.inc for supporting pam.
- Enable pam in configure
- Modify file option.h to open pam supporting

Signed-off-by Xiaofeng Yan <[email protected]>

---
meta/recipes-core/dropbear/dropbear.inc | 6 ++++-
.../dropbear/dropbear/dropbear-enable-pam.patch | 21 ++++++++++++++++++++

2 files changed, 26 insertions(+), 1 deletions(-)

create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch

meta/recipes-core/dropbear/dropbear.inc +0 -0

index 1b51e1a..48cefb6 100644
@@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c"
 

DEPENDS = "zlib"
RPROVIDES = "ssh sshd"
+DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \
	         file://urandom-xauth-changes-to-options.h.patch \
	         file://configure.patch \
	         file://fix-2kb-keys.patch \
	         file://allow-nopw.patch;apply=no \

meta/recipes-core/dropbear/dropbear.inc +2 -1

-	         file://init"
+	         file://init \
+		 file://dropbear-enable-pam.patch "

inherit autotools update-rc.d

meta/recipes-core/dropbear/dropbear.inc +0 -0

@@ -28,6 +30,8 @@ LD = "${CC}"

SBINCOMMANDS = "dropbear dropbearkey dropbearconvert"
BINCOMMANDS = "dbclient ssh scp"
EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"'

meta/recipes-core/dropbear/dropbear.inc +2 -0

+EXTRA_OECONF += "\
+	${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}"

DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}"

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 41 lines

From: Xiaofeng Yan <[email protected]>

I make a patch and some changes in dropbear.inc for supporting pam.
- Enable pam in configure
- Modify file option.h to open pam supporting

Signed-off-by Xiaofeng Yan <[email protected]>

---
meta/recipes-core/dropbear/dropbear.inc            |    6 ++++- .../dropbear/dropbear/dropbear-enable-pam.patch    |   21 ++++++++++++++++++++

2 files changed, 26 insertions(+), 1 deletions(-)

create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch

meta/recipes-core/dropbear/dropbear.inc +0 -0

index 1b51e1a..48cefb6 100644
@@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c"
 

DEPENDS = "zlib"
RPROVIDES = "ssh sshd"
+DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \
               file://urandom-xauth-changes-to-options.h.patch \
               file://configure.patch \
               file://fix-2kb-keys.patch \
               file://allow-nopw.patch;apply=no \
-              file://init"
+              file://init \
+              file://dropbear-enable-pam.patch "

inherit autotools update-rc.d

meta/recipes-core/dropbear/dropbear.inc +0 -0

@@ -28,6 +30,8 @@ LD = "${CC}"

SBINCOMMANDS = "dropbear dropbearkey dropbearconvert"
BINCOMMANDS = "dbclient ssh scp"
EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"' +EXTRA_OECONF += "\
+     ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}"

Quoted 1 line

DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}"

That one is missing a PR bump

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Quoted 43 lines · Koen Kooi

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 41 lines

From: Xiaofeng Yan<[email protected]>

I make a patch and some changes in dropbear.inc for supporting pam.
- Enable pam in configure
- Modify file option.h to open pam supporting

Signed-off-by Xiaofeng Yan<[email protected]>

---
meta/recipes-core/dropbear/dropbear.inc | 6 ++++-
.../dropbear/dropbear/dropbear-enable-pam.patch | 21 ++++++++++++++++++++

2 files changed, 26 insertions(+), 1 deletions(-)

create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch

meta/recipes-core/dropbear/dropbear.inc +0 -0

index 1b51e1a..48cefb6 100644
@@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c"
 

DEPENDS = "zlib"
RPROVIDES = "ssh sshd"
+DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \
                file://urandom-xauth-changes-to-options.h.patch \
                file://configure.patch \
                file://fix-2kb-keys.patch \
                file://allow-nopw.patch;apply=no \

meta/recipes-core/dropbear/dropbear.inc +2 -1

-              file://init"
+              file://init \
+              file://dropbear-enable-pam.patch "

inherit autotools update-rc.d

meta/recipes-core/dropbear/dropbear.inc +0 -0

@@ -28,6 +30,8 @@ LD = "${CC}"

SBINCOMMANDS = "dropbear dropbearkey dropbearconvert"
BINCOMMANDS = "dbclient ssh scp"
EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"'

meta/recipes-core/dropbear/dropbear.inc +2 -0

+EXTRA_OECONF += "\
+     ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}"

Quoted 2 lines

Quoted 1 line

DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}"

That one is missing a PR bump

And does this mean that it also needs libpam in DEPENDS ?

Quoted 5 lines

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Quoted 60 lines · Khem Raj

Quoted 56 lines · Koen Kooi

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 49 lines

From: Xiaofeng Yan<[email protected]>

I make a patch and some changes in dropbear.inc for supporting pam.
- Enable pam in configure
- Modify file option.h to open pam supporting

Signed-off-by Xiaofeng Yan<[email protected]>

---
meta/recipes-core/dropbear/dropbear.inc            |    6 ++++- .../dropbear/dropbear/dropbear-enable-pam.patch    |   21
++++++++++++++++++++

2 files changed, 26 insertions(+), 1 deletions(-)

create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch

meta/recipes-core/dropbear/dropbear.inc +0 -0

index 1b51e1a..48cefb6 100644
@@ -9,13 +9,15 @@ LIC_FILES_CHKSUM =

"file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c"

DEPENDS = "zlib"
RPROVIDES = "ssh sshd"
+DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \
               file://urandom-xauth-changes-to-options.h.patch \
               file://configure.patch \
               file://fix-2kb-keys.patch \
               file://allow-nopw.patch;apply=no \
-              file://init"
+              file://init \
+              file://dropbear-enable-pam.patch "

inherit autotools update-rc.d

meta/recipes-core/dropbear/dropbear.inc +0 -0

@@ -28,6 +30,8 @@ LD = "${CC}"

SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" BINCOMMANDS = "dbclient ssh scp"
EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"'
+EXTRA_OECONF += "\
+     ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}"

Quoted 2 lines

DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}"

That one is missing a PR bump

Quoted 1 line

And does this mean that it also needs libpam in DEPENDS ?

Yes, I think so. So add the

+DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

Quoted 11 lines

Quoted 7 lines

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Quoted 54 lines · Kang Kai

Quoted 53 lines · Khem Raj

Quoted 51 lines · Koen Kooi

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 49 lines

From: Xiaofeng Yan<[email protected]>

I make a patch and some changes in dropbear.inc for supporting pam.
- Enable pam in configure
- Modify file option.h to open pam supporting

Signed-off-by Xiaofeng Yan<[email protected]>

---
meta/recipes-core/dropbear/dropbear.inc | 6 ++++-
.../dropbear/dropbear/dropbear-enable-pam.patch | 21
++++++++++++++++++++

2 files changed, 26 insertions(+), 1 deletions(-)

create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch

meta/recipes-core/dropbear/dropbear.inc +0 -0

index 1b51e1a..48cefb6 100644
@@ -9,13 +9,15 @@ LIC_FILES_CHKSUM =

"file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c"

DEPENDS = "zlib"
RPROVIDES = "ssh sshd"
+DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

SRC_URI =

"http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \
                file://urandom-xauth-changes-to-options.h.patch \
                file://configure.patch \
                file://fix-2kb-keys.patch \
                file://allow-nopw.patch;apply=no \

meta/recipes-core/dropbear/dropbear.inc +2 -1

-              file://init"
+              file://init \
+              file://dropbear-enable-pam.patch "

inherit autotools update-rc.d

meta/recipes-core/dropbear/dropbear.inc +0 -0

@@ -28,6 +30,8 @@ LD = "${CC}"

SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" BINCOMMANDS = "dbclient ssh scp"
EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"'

meta/recipes-core/dropbear/dropbear.inc +2 -0

+EXTRA_OECONF += "\
+     ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam',

'--disable-pam', d)}"

Quoted 7 lines

Quoted 4 lines

Quoted 3 lines

Quoted 2 lines

DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}"

That one is missing a PR bump

And does this mean that it also needs libpam in DEPENDS ?

Yes, I think so. So add the

+DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

and to all recipes which are modified

Quoted 12 lines

Quoted 11 lines

Quoted 7 lines

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Quoted 5 lines

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

From: Xiaofeng Yan <[email protected]>

Adding configuration file "sshd" in /etc/pam.d/ for supporting pam.

Signed-off-by Xiaofeng Yan <[email protected]>

---
.../openssh/openssh-5.8p2/sshd | 10 ++++++++++
meta/recipes-connectivity/openssh/openssh_5.8p2.bb | 7 +++++--

2 files changed, 15 insertions(+), 2 deletions(-)

create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd

meta/recipes-connectivity/openssh/openssh-5.8p2/sshd new file +10 -0

new file mode 100644
index 0000000..4882e58
@@ -0,0 +1,10 @@
+#%PAM-1.0
+
+auth       include      common-auth
+account    required     pam_nologin.so
+account    include      common-account
+password   include      common-password
+session    optional     pam_keyinit.so force revoke
+session    include      common-session
+session    required     pam_loginuid.so
+

meta/recipes-connectivity/openssh/openssh_5.8p2.bb +0 -0

index e23069c..e0da936 100644
@@ -7,7 +7,7 @@ SECTION = "console/network"

LICENSE = "BSD"
LIC_FILES_CHKSUM = "file://LICENCE;md5=bae9a689be41581503bcf95d8fb42c4e"

meta/recipes-connectivity/openssh/openssh_5.8p2.bb +1 -1

-PR = "r0"
+PR = "r1"

DEPENDS = "zlib openssl"
DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"

meta/recipes-connectivity/openssh/openssh_5.8p2.bb +1 -0

@@ -23,6 +23,7 @@ SRC_URI = "ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.tar.
           file://sshd_config \
           file://ssh_config \
           file://init \
+           file://sshd \
          "

SRC_URI[md5sum] = "0541579adf9d55abb15ef927048d372e"
SRC_URI[sha256sum] = "5c35ec7c966ce05cc4497ac59c0b54a556e55ae7368165cc8c4129694654f314"

meta/recipes-connectivity/openssh/openssh_5.8p2.bb +2 -0

@@ -59,7 +60,9 @@ do_compile_append () {
 
 do_install_append () {
 	install -d ${D}${sysconfdir}/init.d
+	install -d ${D}${sysconfdir}/pam.d
 	install -m 0755 ${WORKDIR}/init ${D}${sysconfdir}/init.d/sshd
+	install -m 0755 ${WORKDIR}/sshd ${D}${sysconfdir}/pam.d/sshd
 	mv ${D}${bindir}/scp ${D}${bindir}/scp.${PN}
 	mv ${D}${bindir}/ssh ${D}${bindir}/ssh.${PN}
 	rm -f ${D}${bindir}/slogin ${D}${datadir}/Ssh.bin

@@ -71,7 +74,7 @@ ALLOW_EMPTY_${PN} = "1"

PACKAGES =+ "${PN}-keygen ${PN}-scp ${PN}-ssh ${PN}-sshd ${PN}-sftp ${PN}-misc ${PN}-sftp-server" FILES_${PN}-scp = "${bindir}/scp.${PN}"
FILES_${PN}-ssh = "${bindir}/ssh.${PN} ${sysconfdir}/ssh/ssh_config"

meta/recipes-connectivity/openssh/openssh_5.8p2.bb +1 -1

-FILES_${PN}-sshd = "${sbindir}/sshd ${sysconfdir}/init.d/sshd"
+FILES_${PN}-sshd = "${sbindir}/sshd ${sysconfdir}/init.d/sshd ${sysconfdir}/pam.d/sshd"

FILES_${PN}-sshd += "${sysconfdir}/ssh/moduli ${sysconfdir}/ssh/sshd_config" FILES_${PN}-sftp = "${bindir}/sftp"
FILES_${PN}-sftp-server = "${libexecdir}/sftp-server"

Signature · 7 lines

1.7.5.1.300.gc565c


_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

From: Xiaofeng Yan <[email protected]>

Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam.

Signed-off-by Xiaofeng Yan <[email protected]>

---
.../polkit/polkit-0.101/polkit-1_pam.patch | 23 ++++++++++++++++++++
meta/recipes-extended/polkit/polkit_0.101.bb | 6 +++-

2 files changed, 27 insertions(+), 2 deletions(-)

create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +0 -0

new file mode 100644
index 0000000..fa145ac

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +22 -0

+
+Upstream-Status:Inappropriate [configuration]
+
+Signed-off-by: Xiaofeng Yan <[email protected]>
+
+--- a/configure.ac	2011-03-04 02:26:20.000000000 +0800
++++ b/configure.ac.new	2011-07-18 10:14:12.516818852 +0800
+@@ -350,10 +350,10 @@
+     PAM_FILE_INCLUDE_PASSWORD=system
+     PAM_FILE_INCLUDE_SESSION=system
+ else
+-   PAM_FILE_INCLUDE_AUTH=system-auth
+-   PAM_FILE_INCLUDE_ACCOUNT=system-auth
+-   PAM_FILE_INCLUDE_PASSWORD=system-auth
+-   PAM_FILE_INCLUDE_SESSION=system-auth
++   PAM_FILE_INCLUDE_AUTH=common-auth
++   PAM_FILE_INCLUDE_ACCOUNT=common-account
++   PAM_FILE_INCLUDE_PASSWORD=common-password
++   PAM_FILE_INCLUDE_SESSION=common-session
+ fi
+ 
+ AC_SUBST(PAM_FILE_INCLUDE_AUTH)

meta/recipes-extended/polkit/polkit_0.101.bb +4 -2

index 6769914..da1d581 100644
@@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \
                    file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f"
 
 SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \
-           file://introspection.patch"
-PR = "r0"
+           file://introspection.patch \
+           file://polkit-1_pam.patch"
+
+PR = "r1"

DEPENDS = "libpam expat dbus-glib eggdbus intltool"
RDEPENDS_${PN} = "libpam"
EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages --disable-gtk-doc --disable-introspection"

Signature · 7 lines

1.7.5.1.300.gc565c


_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 11 lines

From: Xiaofeng Yan<[email protected]>

Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam.

Signed-off-by Xiaofeng Yan<[email protected]>

---
.../polkit/polkit-0.101/polkit-1_pam.patch | 23 ++++++++++++++++++++
meta/recipes-extended/polkit/polkit_0.101.bb | 6 +++-

2 files changed, 27 insertions(+), 2 deletions(-)

create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch line 1

Quoted 7 lines

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +1 -0

new file mode 100644
index 0000000..fa145ac
@@ -0,0 +1,23 @@
+polkit: No system-auth in poky, we can use common-* in place of it.

Poky or oe-core? And can we provide system-auth instead of patching the world?

Quoted 38 lines

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +22 -0

+
+Upstream-Status:Inappropriate [configuration]
+
+Signed-off-by: Xiaofeng Yan<[email protected]>
+
+--- a/configure.ac	2011-03-04 02:26:20.000000000 +0800
++++ b/configure.ac.new	2011-07-18 10:14:12.516818852 +0800
+@@ -350,10 +350,10 @@
+     PAM_FILE_INCLUDE_PASSWORD=system
+     PAM_FILE_INCLUDE_SESSION=system
+ else
+-   PAM_FILE_INCLUDE_AUTH=system-auth
+-   PAM_FILE_INCLUDE_ACCOUNT=system-auth
+-   PAM_FILE_INCLUDE_PASSWORD=system-auth
+-   PAM_FILE_INCLUDE_SESSION=system-auth
++   PAM_FILE_INCLUDE_AUTH=common-auth
++   PAM_FILE_INCLUDE_ACCOUNT=common-account
++   PAM_FILE_INCLUDE_PASSWORD=common-password
++   PAM_FILE_INCLUDE_SESSION=common-session
+ fi
+
+ AC_SUBST(PAM_FILE_INCLUDE_AUTH)

meta/recipes-extended/polkit/polkit_0.101.bb +4 -2

index 6769914..da1d581 100644
@@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \
                     file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f"
 
 SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \
-           file://introspection.patch"
-PR = "r0"
+           file://introspection.patch \
+           file://polkit-1_pam.patch"
+
+PR = "r1"

Quoted 11 lines

DEPENDS = "libpam expat dbus-glib eggdbus intltool"
RDEPENDS_${PN} = "libpam"
EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages --disable-gtk-doc --disable-introspection"

Signature · 7 lines

1.7.5.1.300.gc565c


_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Quoted 13 lines

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 11 lines

From: Xiaofeng Yan<[email protected]>

Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam.

Signed-off-by Xiaofeng Yan<[email protected]>

---
.../polkit/polkit-0.101/polkit-1_pam.patch | 23 ++++++++++++++++++++
meta/recipes-extended/polkit/polkit_0.101.bb | 6 +++-

2 files changed, 27 insertions(+), 2 deletions(-)

create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch

Quoted 8 lines

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch line 1

Quoted 7 lines

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +1 -0

new file mode 100644
index 0000000..fa145ac
@@ -0,0 +1,23 @@
+polkit: No system-auth in poky, we can use common-* in place of it.

Poky or oe-core? And can we provide system-auth instead of patching the world?

system-auth is the Fedora common pam configure file and auto generated by command authconfig. It contains all 4 types(auth, account, password and session) default config. But in Yocto

we follow Debian/Ubuntu with separated files for default config: common-auth, common-account etc. So that we didn't import the system-auth file .

Quoted 45 lines

Quoted 45 lines

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +22 -0

+
+Upstream-Status:Inappropriate [configuration]
+
+Signed-off-by: Xiaofeng Yan<[email protected]>
+
+--- a/configure.ac	2011-03-04 02:26:20.000000000 +0800
++++ b/configure.ac.new	2011-07-18 10:14:12.516818852 +0800
+@@ -350,10 +350,10 @@
+     PAM_FILE_INCLUDE_PASSWORD=system
+     PAM_FILE_INCLUDE_SESSION=system
+ else
+-   PAM_FILE_INCLUDE_AUTH=system-auth
+-   PAM_FILE_INCLUDE_ACCOUNT=system-auth
+-   PAM_FILE_INCLUDE_PASSWORD=system-auth
+-   PAM_FILE_INCLUDE_SESSION=system-auth
++   PAM_FILE_INCLUDE_AUTH=common-auth
++   PAM_FILE_INCLUDE_ACCOUNT=common-account
++   PAM_FILE_INCLUDE_PASSWORD=common-password
++   PAM_FILE_INCLUDE_SESSION=common-session
+ fi
+
+ AC_SUBST(PAM_FILE_INCLUDE_AUTH)

meta/recipes-extended/polkit/polkit_0.101.bb +4 -2

index 6769914..da1d581 100644
@@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \
                    file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f"
 
 SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \
-           file://introspection.patch"
-PR = "r0"
+           file://introspection.patch \
+           file://polkit-1_pam.patch"
+
+PR = "r1"

DEPENDS = "libpam expat dbus-glib eggdbus intltool"
RDEPENDS_${PN} = "libpam"
EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages --disable-gtk-doc --disable-introspection"

Signature · 1 line

1.7.5.1.300.gc565c

Quoted 9 lines

Quoted 4 lines

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Op 21 jul. 2011, om 11:49 heeft Kang Kai het volgende geschreven:

Quoted 22 lines · Koen Kooi

Quoted 21 lines

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 17 lines

From: Xiaofeng Yan<[email protected]>

Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam.

Signed-off-by Xiaofeng Yan<[email protected]>

---
.../polkit/polkit-0.101/polkit-1_pam.patch | 23 ++++++++++++++++++++
meta/recipes-extended/polkit/polkit_0.101.bb | 6 +++-

2 files changed, 27 insertions(+), 2 deletions(-)

create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +0 -0

new file mode 100644
index 0000000..fa145ac

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch line 1

Quoted 1 line

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +1 -0

@@ -0,0 +1,23 @@
+polkit: No system-auth in poky, we can use common-* in place of it.

Poky or oe-core? And can we provide system-auth instead of patching the world?

Quoted 1 line

system-auth is the Fedora common pam configure file and auto generated by command authconfig. It contains all 4 types(auth, account, password and session) default config. But in Yocto

Hmm, poky, oe-core or yocto? Which is it :)

Quoted 57 lines

we follow Debian/Ubuntu with separated files for default config: common-auth, common-account etc. So that we didn't import the system-auth file .

Quoted 44 lines

Quoted 44 lines

meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file +22 -0

+
+Upstream-Status:Inappropriate [configuration]
+
+Signed-off-by: Xiaofeng Yan<[email protected]>
+
+--- a/configure.ac	2011-03-04 02:26:20.000000000 +0800
++++ b/configure.ac.new	2011-07-18 10:14:12.516818852 +0800
+@@ -350,10 +350,10 @@
+     PAM_FILE_INCLUDE_PASSWORD=system
+     PAM_FILE_INCLUDE_SESSION=system
+ else
+-   PAM_FILE_INCLUDE_AUTH=system-auth
+-   PAM_FILE_INCLUDE_ACCOUNT=system-auth
+-   PAM_FILE_INCLUDE_PASSWORD=system-auth
+-   PAM_FILE_INCLUDE_SESSION=system-auth
++   PAM_FILE_INCLUDE_AUTH=common-auth
++   PAM_FILE_INCLUDE_ACCOUNT=common-account
++   PAM_FILE_INCLUDE_PASSWORD=common-password
++   PAM_FILE_INCLUDE_SESSION=common-session
+ fi
+
+ AC_SUBST(PAM_FILE_INCLUDE_AUTH)

meta/recipes-extended/polkit/polkit_0.101.bb +4 -2

index 6769914..da1d581 100644
@@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \
                     file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f"
 
 SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \
-           file://introspection.patch"
-PR = "r0"
+           file://introspection.patch \
+           file://polkit-1_pam.patch"
+
+PR = "r1"

DEPENDS = "libpam expat dbus-glib eggdbus intltool"
RDEPENDS_${PN} = "libpam"
EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages --disable-gtk-doc --disable-introspection"

Signature · 1 line

1.7.5.1.300.gc565c

Quoted 8 lines

Quoted 4 lines

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Quoted 4 lines

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

meta/recipes-extended/sudo/sudo_1.8.1p2.bb line 16

Quoted 3 lines · Kang Kai

meta/recipes-extended/sudo/sudo_1.8.1p2.bb +3 -0

+do_install_append () {
+	install -D -m 664 ${WORKDIR}/sudo.pamd ${D}/${sysconfdir}/pam.d/sudo
+}

As with openssh, you don't want to install and ship this file if pam isn't enabled.

p.

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

From: Kang Kai <[email protected]>

add shadow-update-pam-conf.patch to update the pam related configure files in Yocto way rather than Fedora.

Signed-off-by Kang Kai <[email protected]>

---
.../shadow/files/shadow-update-pam-conf.patch | 175 ++++++++++++++++++++
meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +-

2 files changed, 178 insertions(+), 2 deletions(-)

create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch

meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch new file +175 -0

new file mode 100644
index 0000000..33789f5
@@ -0,0 +1,175 @@
+The system-auth in the configure files is from Fedora which put all the 4 pam type rules
+in one file. 
+In yocto it obey the way with Debian/Ubuntu, and the names are common-auth, common-account,
+common-password and common-session.
+So update them in Yocto way.
+
+Upstream-Status: Pending
+
+Signed-off-by: Kang Kai <[email protected]>
+
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chage shadow-4.1.4.3/etc/pam.d/chage
+--- shadow-4.1.4.3/etc/pam.d.orig/chage	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chage	2011-07-20 19:03:08.964844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chfn shadow-4.1.4.3/etc/pam.d/chfn
+--- shadow-4.1.4.3/etc/pam.d.orig/chfn	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chfn	2011-07-20 19:03:17.804844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chgpasswd shadow-4.1.4.3/etc/pam.d/chgpasswd
+--- shadow-4.1.4.3/etc/pam.d.orig/chgpasswd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chgpasswd	2011-07-20 19:03:26.544844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chpasswd shadow-4.1.4.3/etc/pam.d/chpasswd
+--- shadow-4.1.4.3/etc/pam.d.orig/chpasswd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chpasswd	2011-07-20 19:03:42.724844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chsh shadow-4.1.4.3/etc/pam.d/chsh
+--- shadow-4.1.4.3/etc/pam.d.orig/chsh	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chsh	2011-07-20 19:03:51.524844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupadd shadow-4.1.4.3/etc/pam.d/groupadd
+--- shadow-4.1.4.3/etc/pam.d.orig/groupadd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupadd	2011-07-20 19:04:08.124844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupdel shadow-4.1.4.3/etc/pam.d/groupdel
+--- shadow-4.1.4.3/etc/pam.d.orig/groupdel	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupdel	2011-07-20 19:04:26.114844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmems shadow-4.1.4.3/etc/pam.d/groupmems
+--- shadow-4.1.4.3/etc/pam.d.orig/groupmems	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupmems	2011-07-20 19:04:35.074844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmod shadow-4.1.4.3/etc/pam.d/groupmod
+--- shadow-4.1.4.3/etc/pam.d.orig/groupmod	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupmod	2011-07-20 19:04:44.864844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/login shadow-4.1.4.3/etc/pam.d/login
+--- shadow-4.1.4.3/etc/pam.d.orig/login	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/login	2011-07-20 19:05:36.924844958 +0800
+@@ -1,11 +1,11 @@
+ #%PAM-1.0
+ auth		required	pam_securetty.so
+-auth		include		system-auth
++auth		include		common-auth
+ account		required	pam_nologin.so
+-account		include		system-auth
+-password	include		system-auth
++account		include		common-account
++password	include		common-password
+ session		required	pam_selinux.so close
+-session		include		system-auth
++session		include		common-session
+ session		required	pam_loginuid.so
+ session		optional	pam_console.so
+ session		required	pam_selinux.so open
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/newusers shadow-4.1.4.3/etc/pam.d/newusers
+--- shadow-4.1.4.3/etc/pam.d.orig/newusers	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/newusers	2011-07-20 19:05:49.344844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/passwd shadow-4.1.4.3/etc/pam.d/passwd
+--- shadow-4.1.4.3/etc/pam.d.orig/passwd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/passwd	2011-07-20 19:06:29.014844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+-auth		include		system-auth
+-account		include		system-auth
+-password	include		system-auth
++auth		include		common-auth
++account		include		common-account
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/su shadow-4.1.4.3/etc/pam.d/su
+--- shadow-4.1.4.3/etc/pam.d.orig/su	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/su	2011-07-20 19:07:07.584844958 +0800
+@@ -4,10 +4,10 @@
+ #auth		sufficient	pam_wheel.so trust use_uid
+ # Uncomment the following line to require a user to be in the "wheel" group.
+ auth		required	pam_wheel.so use_uid
+-auth		include		system-auth
+-account		include		system-auth
+-password	include		system-auth
++auth		include		common-auth
++account		include		common-account
++password	include		common-password
+ session		required	pam_selinux.so close
+-session		include		system-auth
++session		include		common-session
+ session		required	pam_selinux.so open multiple
+ session		optional	pam_xauth.so
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/useradd shadow-4.1.4.3/etc/pam.d/useradd
+--- shadow-4.1.4.3/etc/pam.d.orig/useradd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/useradd	2011-07-20 19:07:26.244844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/userdel shadow-4.1.4.3/etc/pam.d/userdel
+--- shadow-4.1.4.3/etc/pam.d.orig/userdel	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/userdel	2011-07-20 19:07:35.734844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/usermod shadow-4.1.4.3/etc/pam.d/usermod
+--- shadow-4.1.4.3/etc/pam.d.orig/usermod	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/usermod	2011-07-20 19:07:42.024844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password

meta/recipes-extended/shadow/shadow_4.1.4.3.bb +0 -0

index 5731a26..0e6ba871 100644
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=08c553a87d4e51bbed50b20e0adcaede \
 

DEPENDS = "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" RDEPENDS_${PN} = "${@base_contains('DISTRO_FEATURES', 'pam', '${PAM_PLUGINS}', '', d)}"

meta/recipes-extended/shadow/shadow_4.1.4.3.bb +1 -1

-PR = "r2"
+PR = "r3"

SRC_URI = "ftp://pkg-shadow.alioth.debian.org/pub/pkg-shadow/shadow-${PV}.tar.bz2 \
           file://login_defs_pam.sed \

meta/recipes-extended/shadow/shadow_4.1.4.3.bb +2 -1

@@ -19,7 +19,8 @@ SRC_URI = "ftp://pkg-shadow.alioth.debian.org/pub/pkg-shadow/shadow-${PV}.tar.bz
           file://shadow-4.1.3-dots-in-usernames.patch \
           file://shadow-4.1.4.2-env-reset-keep-locale.patch \
           file://shadow-4.1.4.2-groupmod-pam-check.patch \
-           file://shadow-4.1.4.2-su_no_sanitize_env.patch"
+           file://shadow-4.1.4.2-su_no_sanitize_env.patch \
+		   file://shadow-update-pam-conf.patch"
 

SRC_URI[md5sum] = "b8608d8294ac88974f27b20f991c0e79"
SRC_URI[sha256sum] = "633f5bb4ea0c88c55f3642c97f9d25cbef74f82e0b4cf8d54e7ad6f9f9caa778"

Signature · 7 lines

1.7.5.1.300.gc565c


_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven:

Quoted 4 lines

From: Kang Kai<[email protected]>

add shadow-update-pam-conf.patch to update the pam related configure files in Yocto way rather than Fedora.

I'm not entirely sure, but do the updated conf files need something like http://cgit.openembedded.org/cgit.cgi/openembedded-core/commit/?id=b90e9c2318fc421f37c57788ece54ce791a90b62 as well?

Quoted 211 lines

Signed-off-by Kang Kai<[email protected]>

---
.../shadow/files/shadow-update-pam-conf.patch | 175 ++++++++++++++++++++
meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +-

2 files changed, 178 insertions(+), 2 deletions(-)

create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch

meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch new file +175 -0

new file mode 100644
index 0000000..33789f5
@@ -0,0 +1,175 @@
+The system-auth in the configure files is from Fedora which put all the 4 pam type rules
+in one file.
+In yocto it obey the way with Debian/Ubuntu, and the names are common-auth, common-account,
+common-password and common-session.
+So update them in Yocto way.
+
+Upstream-Status: Pending
+
+Signed-off-by: Kang Kai<[email protected]>
+
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chage shadow-4.1.4.3/etc/pam.d/chage
+--- shadow-4.1.4.3/etc/pam.d.orig/chage	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chage	2011-07-20 19:03:08.964844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chfn shadow-4.1.4.3/etc/pam.d/chfn
+--- shadow-4.1.4.3/etc/pam.d.orig/chfn	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chfn	2011-07-20 19:03:17.804844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chgpasswd shadow-4.1.4.3/etc/pam.d/chgpasswd
+--- shadow-4.1.4.3/etc/pam.d.orig/chgpasswd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chgpasswd	2011-07-20 19:03:26.544844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chpasswd shadow-4.1.4.3/etc/pam.d/chpasswd
+--- shadow-4.1.4.3/etc/pam.d.orig/chpasswd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chpasswd	2011-07-20 19:03:42.724844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chsh shadow-4.1.4.3/etc/pam.d/chsh
+--- shadow-4.1.4.3/etc/pam.d.orig/chsh	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/chsh	2011-07-20 19:03:51.524844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupadd shadow-4.1.4.3/etc/pam.d/groupadd
+--- shadow-4.1.4.3/etc/pam.d.orig/groupadd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupadd	2011-07-20 19:04:08.124844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupdel shadow-4.1.4.3/etc/pam.d/groupdel
+--- shadow-4.1.4.3/etc/pam.d.orig/groupdel	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupdel	2011-07-20 19:04:26.114844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmems shadow-4.1.4.3/etc/pam.d/groupmems
+--- shadow-4.1.4.3/etc/pam.d.orig/groupmems	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupmems	2011-07-20 19:04:35.074844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmod shadow-4.1.4.3/etc/pam.d/groupmod
+--- shadow-4.1.4.3/etc/pam.d.orig/groupmod	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/groupmod	2011-07-20 19:04:44.864844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/login shadow-4.1.4.3/etc/pam.d/login
+--- shadow-4.1.4.3/etc/pam.d.orig/login	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/login	2011-07-20 19:05:36.924844958 +0800
+@@ -1,11 +1,11 @@
+ #%PAM-1.0
+ auth		required	pam_securetty.so
+-auth		include		system-auth
++auth		include		common-auth
+ account		required	pam_nologin.so
+-account		include		system-auth
+-password	include		system-auth
++account		include		common-account
++password	include		common-password
+ session		required	pam_selinux.so close
+-session		include		system-auth
++session		include		common-session
+ session		required	pam_loginuid.so
+ session		optional	pam_console.so
+ session		required	pam_selinux.so open
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/newusers shadow-4.1.4.3/etc/pam.d/newusers
+--- shadow-4.1.4.3/etc/pam.d.orig/newusers	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/newusers	2011-07-20 19:05:49.344844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/passwd shadow-4.1.4.3/etc/pam.d/passwd
+--- shadow-4.1.4.3/etc/pam.d.orig/passwd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/passwd	2011-07-20 19:06:29.014844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+-auth		include		system-auth
+-account		include		system-auth
+-password	include		system-auth
++auth		include		common-auth
++account		include		common-account
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/su shadow-4.1.4.3/etc/pam.d/su
+--- shadow-4.1.4.3/etc/pam.d.orig/su	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/su	2011-07-20 19:07:07.584844958 +0800
+@@ -4,10 +4,10 @@
+ #auth		sufficient	pam_wheel.so trust use_uid
+ # Uncomment the following line to require a user to be in the "wheel" group.
+ auth		required	pam_wheel.so use_uid
+-auth		include		system-auth
+-account		include		system-auth
+-password	include		system-auth
++auth		include		common-auth
++account		include		common-account
++password	include		common-password
+ session		required	pam_selinux.so close
+-session		include		system-auth
++session		include		common-session
+ session		required	pam_selinux.so open multiple
+ session		optional	pam_xauth.so
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/useradd shadow-4.1.4.3/etc/pam.d/useradd
+--- shadow-4.1.4.3/etc/pam.d.orig/useradd	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/useradd	2011-07-20 19:07:26.244844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/userdel shadow-4.1.4.3/etc/pam.d/userdel
+--- shadow-4.1.4.3/etc/pam.d.orig/userdel	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/userdel	2011-07-20 19:07:35.734844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password
+diff -Nur shadow-4.1.4.3/etc/pam.d.orig/usermod shadow-4.1.4.3/etc/pam.d/usermod
+--- shadow-4.1.4.3/etc/pam.d.orig/usermod	2011-07-20 19:02:27.384844958 +0800
++++ shadow-4.1.4.3/etc/pam.d/usermod	2011-07-20 19:07:42.024844958 +0800
+@@ -1,4 +1,4 @@
+ #%PAM-1.0
+ auth		sufficient	pam_rootok.so
+ account		required	pam_permit.so
+-password	include		system-auth
++password	include		common-password

meta/recipes-extended/shadow/shadow_4.1.4.3.bb +0 -0

index 5731a26..0e6ba871 100644
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=08c553a87d4e51bbed50b20e0adcaede \
 

DEPENDS = "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" RDEPENDS_${PN} = "${@base_contains('DISTRO_FEATURES', 'pam', '${PAM_PLUGINS}', '', d)}"

meta/recipes-extended/shadow/shadow_4.1.4.3.bb +1 -1

-PR = "r2"
+PR = "r3"

SRC_URI = "ftp://pkg-shadow.alioth.debian.org/pub/pkg-shadow/shadow-${PV}.tar.bz2 \
            file://login_defs_pam.sed \

meta/recipes-extended/shadow/shadow_4.1.4.3.bb +2 -1

@@ -19,7 +19,8 @@ SRC_URI = "ftp://pkg-shadow.alioth.debian.org/pub/pkg-shadow/shadow-${PV}.tar.bz
            file://shadow-4.1.3-dots-in-usernames.patch \
            file://shadow-4.1.4.2-env-reset-keep-locale.patch \
            file://shadow-4.1.4.2-groupmod-pam-check.patch \
-           file://shadow-4.1.4.2-su_no_sanitize_env.patch"
+           file://shadow-4.1.4.2-su_no_sanitize_env.patch \
+		   file://shadow-update-pam-conf.patch"
 

Quoted 10 lines

SRC_URI[md5sum] = "b8608d8294ac88974f27b20f991c0e79"
SRC_URI[sha256sum] = "633f5bb4ea0c88c55f3642c97f9d25cbef74f82e0b4cf8d54e7ad6f9f9caa778"

Signature · 7 lines

1.7.5.1.300.gc565c


_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core

From: Kang Kai<[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora.

The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

Kang Kai (5):
libpam: update to 1.1.4 and add subpackage xtests
cups: add pam support
screen: add pam support
sudo: add pam support
shadow: update pam related configure files

Wenzong Fan (2):
cronie: enable PAM support for cronie
at: enable pam support

Xiaofeng Yan (3):
dropbear: Support PAM
openssh: Support PAM
polkit: Support PAM

  .../openssh/openssh-5.8p2/sshd                     |   10 +
  meta/recipes-connectivity/openssh/openssh_5.8p2.bb |    7 +-
  meta/recipes-core/dropbear/dropbear.inc            |    6 +-
  .../dropbear/dropbear/dropbear-enable-pam.patch    |   21 +++
  .../at/at-3.1.12/configure-add-enable-pam.patch    |   23 +++
  meta/recipes-extended/at/at-3.1.12/pam.conf.patch  |   16 ++
  meta/recipes-extended/at/at_3.1.12.bb              |   13 +-
  .../cronie/cronie/crond_pam_config.patch           |   13 ++
  meta/recipes-extended/cronie/cronie_1.4.7.bb       |    9 +-
  meta/recipes-extended/cups/cups_1.4.6.bb           |    8 +-
  .../pam/libpam/libpam-xtests.patch                 |   35 ++++
  .../pam/{libpam_1.1.3.bb =>  libpam_1.1.4.bb}       |   14 +-
  .../polkit/polkit-0.101/polkit-1_pam.patch         |   23 +++
  meta/recipes-extended/polkit/polkit_0.101.bb       |    6 +-
  .../screen/screen-4.0.3/screen.pamd                |    2 +
  meta/recipes-extended/screen/screen_4.0.3.bb       |   14 +-
  .../shadow/files/shadow-update-pam-conf.patch      |  175 ++++++++++++++++++++
  meta/recipes-extended/shadow/shadow_4.1.4.3.bb     |    5 +-
  meta/recipes-extended/sudo/files/sudo.pamd         |    6 +
  meta/recipes-extended/sudo/sudo_1.8.1p2.bb         |   11 +-
  20 files changed, 389 insertions(+), 28 deletions(-)

create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd

Quoted 14 lines

From: Kang Kai <[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora.

The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

Quoted 4 lines

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

sorry, the branch info is wrong, should be

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/distro

Op 21 jul. 2011, om 10:05 heeft Kang Kai het volgende geschreven:

Quoted 15 lines · Kang Kai

Quoted 14 lines

From: Kang Kai<[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora.

The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

Quoted 7 lines

Quoted 4 lines

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

sorry, the branch info is wrong, should be

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/distro

Is that against oe-core or against poky? If it's against poky please rebase it against oe-core since that make it possible to test it.

Quoted 17 lines

Op 21 jul. 2011, om 10:05 heeft Kang Kai het volgende geschreven:

Quoted 15 lines · Kang Kai

Quoted 14 lines

From: Kang Kai<[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora.

The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

Quoted 8 lines

Quoted 7 lines

Quoted 4 lines

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

sorry, the branch info is wrong, should be

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/distro

Is that against oe-core or against poky? If it's against poky please rebase it against oe-core since that make it possible to test it.

Koen,

I rebase against oe-core and push to

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai%2Fpam-rebase-oe-core

Is that what you want?

Regards,
Kai

From: Kang Kai<[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora.

The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

Kang Kai (5):
libpam: update to 1.1.4 and add subpackage xtests
cups: add pam support
screen: add pam support
sudo: add pam support
shadow: update pam related configure files

Wenzong Fan (2):
cronie: enable PAM support for cronie
at: enable pam support

Xiaofeng Yan (3):
dropbear: Support PAM
openssh: Support PAM
polkit: Support PAM

  .../openssh/openssh-5.8p2/sshd                     |   10 +
  meta/recipes-connectivity/openssh/openssh_5.8p2.bb |    7 +-
  meta/recipes-core/dropbear/dropbear.inc            |    6 +-
  .../dropbear/dropbear/dropbear-enable-pam.patch    |   21 +++
  .../at/at-3.1.12/configure-add-enable-pam.patch    |   23 +++
  meta/recipes-extended/at/at-3.1.12/pam.conf.patch  |   16 ++
  meta/recipes-extended/at/at_3.1.12.bb              |   13 +-
  .../cronie/cronie/crond_pam_config.patch           |   13 ++
  meta/recipes-extended/cronie/cronie_1.4.7.bb       |    9 +-
  meta/recipes-extended/cups/cups_1.4.6.bb           |    8 +-
  .../pam/libpam/libpam-xtests.patch                 |   35 ++++
  .../pam/{libpam_1.1.3.bb =>  libpam_1.1.4.bb}       |   14 +-
  .../polkit/polkit-0.101/polkit-1_pam.patch         |   23 +++
  meta/recipes-extended/polkit/polkit_0.101.bb       |    6 +-
  .../screen/screen-4.0.3/screen.pamd                |    2 +
  meta/recipes-extended/screen/screen_4.0.3.bb       |   14 +-
  .../shadow/files/shadow-update-pam-conf.patch      |  175 ++++++++++++++++++++
  meta/recipes-extended/shadow/shadow_4.1.4.3.bb     |    5 +-
  meta/recipes-extended/sudo/files/sudo.pamd         |    6 +
  meta/recipes-extended/sudo/sudo_1.8.1p2.bb         |   11 +-
  20 files changed, 389 insertions(+), 28 deletions(-)

create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd

Quoted 9 lines · Kang Kai

From: Kang Kai<[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora.

Kai,

Thanks for this work, you have already gotten some feedback, I have a few general comments to add that are across many of these patches, so I will note them here.

Whitespace: you seem to be using tabs instead of spaces, please check that you have spaces and your items are lined up. Yocto uses 4 spaces for python and bb recipes and tabs for shell scripts and shell functions in bb recipes.

As has already been noted in a couple of places, ensure that you only install things pam specific when the pam DISTRO_FEATURE is enabled, there are multiple places that need this (not just the ones already noted).

Worth noting here also make sure you check all your PR bumps are correct.

Commit messages and comments for things to oe-core should talk about oe-core not yocto or poky as this upsets people ;-)

I am going to hold of on taking this series until you fix it up.

Sau!

Quoted 59 lines

The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

Kang Kai (5):
libpam: update to 1.1.4 and add subpackage xtests
cups: add pam support
screen: add pam support
sudo: add pam support
shadow: update pam related configure files

Wenzong Fan (2):
cronie: enable PAM support for cronie
at: enable pam support

Xiaofeng Yan (3):
dropbear: Support PAM
openssh: Support PAM
polkit: Support PAM

.../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb | 7 +- meta/recipes-core/dropbear/dropbear.inc | 6 +- .../dropbear/dropbear/dropbear-enable-pam.patch | 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch | 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb | 9 +- meta/recipes-extended/cups/cups_1.4.6.bb | 8 +- .../pam/libpam/libpam-xtests.patch | 35 ++++ .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb | 6 +- .../screen/screen-4.0.3/screen.pamd | 2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 ++++++++++++++++++++ meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +- meta/recipes-extended/sudo/files/sudo.pamd | 6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +-

20 files changed, 389 insertions(+), 28 deletions(-)

create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd

Quoted 22 lines · Saul Wold

Quoted 10 lines · Kang Kai

From: Kang Kai<[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge
doesn't have a pam configure file, import from Fedora.

Kai,

Thanks for this work, you have already gotten some feedback, I have a few general comments to add that are across many of these patches, so I will note them here.

Whitespace: you seem to be using tabs instead of spaces, please check that you have spaces and your items are lined up. Yocto uses 4 spaces for python and bb recipes and tabs for shell scripts and shell functions in bb recipes.

Quoted 7 lines

As has already been noted in a couple of places, ensure that you only install things pam specific when the pam DISTRO_FEATURE is enabled, there are multiple places that need this (not just the ones already noted).

Worth noting here also make sure you check all your PR bumps are correct.

Hi Saul,

We will check the commits and send them again. Thanks for you comments.

Quoted 2 lines

Commit messages and comments for things to oe-core should talk about oe-core not yocto or poky as this upsets people ;-)

I am a little confused about this. Do you mean the commits about packages under directory meta/ should use word "oe-core" rather than Yocto? Would you like to tell me that how do you merge the commits, merge the commits to the oe-core master first and then merge the oe-core master to Yocto master or some branch?

At the same time, tests we did are based on core-image-sato/lsb. Should we test them again base on the image create by oe-core?

Quoted 5 lines

I am going to hold of on taking this series until you fix it up.

Sau!

Regards,
Kai

Quoted 68 lines

Quoted 68 lines

The following changes since commit
fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

Kang Kai (5):
libpam: update to 1.1.4 and add subpackage xtests
cups: add pam support
screen: add pam support
sudo: add pam support
shadow: update pam related configure files

Wenzong Fan (2):
cronie: enable PAM support for cronie
at: enable pam support

Xiaofeng Yan (3):
dropbear: Support PAM
openssh: Support PAM
polkit: Support PAM

.../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb | 7 +- meta/recipes-core/dropbear/dropbear.inc | 6 +- .../dropbear/dropbear/dropbear-enable-pam.patch | 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch | 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb | 9 +- meta/recipes-extended/cups/cups_1.4.6.bb | 8 +- .../pam/libpam/libpam-xtests.patch | 35 ++++ .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb | 6 +- .../screen/screen-4.0.3/screen.pamd | 2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 ++++++++++++++++++++ meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +- meta/recipes-extended/sudo/files/sudo.pamd | 6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +-

20 files changed, 389 insertions(+), 28 deletions(-)

create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%)
create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd

Quoted 38 lines · Kang Kai

Quoted 22 lines · Saul Wold

Quoted 10 lines · Kang Kai

From: Kang Kai<[email protected]>

Hi Scott,

This is the current work of adding pam supports.

After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge
doesn't have a pam configure file, import from Fedora.

Kai,

Thanks for this work, you have already gotten some feedback, I have a few general comments to add that are across many of these patches, so I will note them here.

Whitespace: you seem to be using tabs instead of spaces, please check that you have spaces and your items are lined up. Yocto uses 4 spaces for python and bb recipes and tabs for shell scripts and shell functions in bb recipes.

Quoted 7 lines

As has already been noted in a couple of places, ensure that you only install things pam specific when the pam DISTRO_FEATURE is enabled, there are multiple places that need this (not just the ones already noted).

Worth noting here also make sure you check all your PR bumps are correct.

Hi Saul,

We will check the commits and send them again. Thanks for you comments.

Quoted 2 lines

Commit messages and comments for things to oe-core should talk about oe-core not yocto or poky as this upsets people ;-)

Quoted 6 lines

I am a little confused about this. Do you mean the commits about packages under directory meta/ should use word "oe-core" rather than Yocto? Would you like to tell me that how do you merge the commits, merge the commits to the oe-core master first and then merge the oe-core master to Yocto master or some branch?

Yocto uses oe-core, so it's merged to oe-core and the the Yocto pulls from oe-core. For 1.2, we will have layering scripts that do some of this.

Quoted 4 lines

At the same time, tests we did are based on core-image-sato/lsb. Should we test them again base on the image create by oe-core?

No need. your testing agains core-image-sato / lsb is fine.

Sau!

Quoted 81 lines

Quoted 5 lines

I am going to hold of on taking this series until you fix it up.

Sau!

Regards,
Kai

Quoted 70 lines

Quoted 70 lines

The following changes since commit
fa4bcfdb73167f8159b88e5a4d711c0d37627a70:

bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100)

are available in the git repository at:
git://git.pokylinux.org/poky-contrib kangkai/distro
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits

Kang Kai (5):
libpam: update to 1.1.4 and add subpackage xtests
cups: add pam support
screen: add pam support
sudo: add pam support
shadow: update pam related configure files

Wenzong Fan (2):
cronie: enable PAM support for cronie
at: enable pam support

Xiaofeng Yan (3):
dropbear: Support PAM
openssh: Support PAM
polkit: Support PAM

.../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb | 7 +- meta/recipes-core/dropbear/dropbear.inc | 6 +- .../dropbear/dropbear/dropbear-enable-pam.patch | 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch | 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb | 9 +- meta/recipes-extended/cups/cups_1.4.6.bb | 8 +- .../pam/libpam/libpam-xtests.patch | 35 ++++ .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb | 6 +- .../screen/screen-4.0.3/screen.pamd | 2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175
++++++++++++++++++++
meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +- meta/recipes-extended/sudo/files/sudo.pamd | 6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +-

20 files changed, 389 insertions(+), 28 deletions(-)

create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%)
create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd