Add package linux-pam
PATCH 1/1 Add package linux-pam
--- package/Config.in | 1 + package/linux-pam/Config.in | 15 +++++++++ package/linux-pam/linux-pam-configure.patch | 20 ++++++++++++ package/linux-pam/linux-pam-doc-makefile-am.patch | 33 +++++++++++++++++++++ package/linux-pam/linux-pam-group.patch | 26 ++++++++++++++++ package/linux-pam/linux-pam-rhosts.patch | 24 +++++++++++++++ package/linux-pam/linux-pam-succeed.patch | 31 +++++++++++++++++++ package/linux-pam/linux-pam-time.patch | 26 ++++++++++++++++ package/linux-pam/linux-pam.mk | 25 ++++++++++++++++ 9 files changed, 201 insertions(+), 0 deletions(-) create mode 100644 package/linux-pam/Config.in create mode 100644 package/linux-pam/linux-pam-configure.patch create mode 100644 package/linux-pam/linux-pam-doc-makefile-am.patch create mode 100644 package/linux-pam/linux-pam-group.patch create mode 100644 package/linux-pam/linux-pam-rhosts.patch create mode 100644 package/linux-pam/linux-pam-succeed.patch create mode 100644 package/linux-pam/linux-pam-time.patch create mode 100644 package/linux-pam/linux-pam.mk
package/Config.in +1 -0
@@ -460,6 +460,7 @@ source "package/libnspr/Config.in" source "package/libsigc/Config.in" source "package/libtpl/Config.in" source "package/liburcu/Config.in" +source "package/linux-pam/Config.in" source "package/lttng-libust/Config.in" source "package/orc/Config.in" source "package/poco/Config.in"
package/linux-pam/Config.in new file +15 -0
@@ -0,0 +1,15 @@ +config BR2_PACKAGE_LINUX_PAM + bool "linux-pam" + select BR2_PACKAGE_LIBINTL if BR2_NEEDS_GETTEXT_IF_LOCALE + select BR2_PACKAGE_GETTEXT if BR2_NEEDS_GETTEXT_IF_LOCALE + select BR2_PACKAGE_FLEX + select BR2_PACKAGE_FLEX_LIBFL + depends on (BR2_ENABLE_LOCALE && BR2_USE_WCHAR) + help + A Security Framework that Provides Authentication for Applications + + http://linux-pam.org + +comment "linux-pam requires a toolchain with WCHAR and locale support" + depends on !(BR2_ENABLE_LOCALE && BR2_USE_WCHAR) +
package/linux-pam/linux-pam-configure.patch new file +20 -0
@@ -0,0 +1,20 @@ +Add check for ruserok + +ruserok is not available/functional in uclibc, provide conditions for compilation +where needed. + +Signed-off-by: Dmitry Golubovsky <[email protected]> + +Index: linux-pam-1.1.4/configure.in +============================================================================ +--- linux-pam-1.1.4/configure.in 2011-06-24 06:46:33.000000000 -0400 ++++ linux-pam-1.1.4/configure.in 2012-08-09 21:14:11.000000000 -0400 +@@ -522,7 +522,7 @@ + AC_CHECK_FUNCS(strcspn strdup strspn strstr strtol uname) + AC_CHECK_FUNCS(getutent_r getpwnam_r getpwuid_r getgrnam_r getgrgid_r getspnam_r) + AC_CHECK_FUNCS(getgrouplist getline getdelim) +-AC_CHECK_FUNCS(inet_ntop inet_pton innetgr ruserok_af) ++AC_CHECK_FUNCS(inet_ntop inet_pton innetgr ruserok_af ruserok) + + AC_CHECK_FUNCS(unshare, [UNSHARE=yes], [UNSHARE=no]) + AM_CONDITIONAL([HAVE_UNSHARE], [test "$UNSHARE" = yes])
package/linux-pam/linux-pam-doc-makefile-am.patch new file +33 -0
@@ -0,0 +1,33 @@ +Disable generation of documentation + +Generation of documentation is not necessary in Buildroot, disable it completely. + +Signed-off-by: Dmitry Golubovsky <[email protected]> + +Index: linux-pam-1.1.4/doc/Makefile.am +============================================================================ +--- linux-pam-1.1.4/doc/Makefile.am 2011-06-21 05:04:56.000000000 -0400 ++++ linux-pam-1.1.4/doc/Makefile.am 2012-08-09 05:59:23.000000000 -0400 +@@ -2,8 +2,6 @@ + # Copyright (c) 2005, 2006 Thorsten Kukuk <[email protected]> + # + +-SUBDIRS = man specs sag adg mwg +- + CLEANFILES = *~ + + dist_html_DATA = index.html +@@ -11,12 +9,4 @@ + ####################################################### + + releasedocs: all +- $(mkinstalldirs) $(top_builddir)/Linux-PAM-$(VERSION)/doc/specs +- cp -av specs/draft-morgan-pam-current.txt \ +- $(top_builddir)/Linux-PAM-$(VERSION)/doc/specs/ +- cp -av $(srcdir)/specs/rfc86.0.txt \ +- $(top_builddir)/Linux-PAM-$(VERSION)/doc/specs/ +- make -C sag releasedocs +- make -C adg releasedocs +- make -C mwg releasedocs +- ++ /bin/true
package/linux-pam/linux-pam-group.patch new file +26 -0
@@ -0,0 +1,26 @@ +Conditionally compile per innetgr availability + +innetgr is not available/functional in uclibc, provide conditions for compilation. + +Signed-off-by: Dmitry Golubovsky <[email protected]> + +Index: linux-pam-1.1.4/modules/pam_group/pam_group.c +============================================================================ +--- linux-pam-1.1.4/modules/pam_group/pam_group.c 2011-06-21 05:04:56.000000000 -0400 ++++ linux-pam-1.1.4/modules/pam_group/pam_group.c 2012-08-09 21:35:06.000000000 -0400 +@@ -655,8 +655,14 @@ + continue; + } + /* If buffer starts with @, we are using netgroups */ +- if (buffer[0] == '@') ++ if (buffer[0] == '@') { ++#ifdef HAVE_INNETGR + good &= innetgr (&buffer[1], NULL, user, NULL); ++#else ++ good = 0; ++ pam_syslog (pamh, LOG_ERR, "pam_group does not have netgroup support"); ++#endif /* HAVE_INNETGR */ ++ } + /* otherwise, if the buffer starts with %, it's a UNIX group */ + else if (buffer[0] == '%') + good &= pam_modutil_user_in_group_nam_nam(pamh, user, &buffer[1]);
package/linux-pam/linux-pam-rhosts.patch new file +24 -0
@@ -0,0 +1,24 @@ +Conditionally compile per ruserok availability + +ruserok is not available/functional in uclibc, provide conditions for compilation. + +Signed-off-by: Dmitry Golubovsky <[email protected]> + +Index: linux-pam-1.1.4/modules/pam_rhosts/pam_rhosts.c +============================================================================ +--- linux-pam-1.1.4/modules/pam_rhosts/pam_rhosts.c 2011-06-21 05:04:56.000000000 -0400 ++++ linux-pam-1.1.4/modules/pam_rhosts/pam_rhosts.c 2012-08-09 21:19:34.000000000 -0400 +@@ -114,8 +114,12 @@ + #ifdef HAVE_RUSEROK_AF + retval = ruserok_af (rhost, as_root, ruser, luser, PF_UNSPEC); + #else ++ #ifdef HAVE_RUSEROK + retval = ruserok (rhost, as_root, ruser, luser); +-#endif ++ #else ++ retval = -1; ++ #endif /* HAVE_RUSEROK */ ++#endif /*HAVE_RUSEROK_AF */ + if (retval != 0) { + if (!opt_silent || opt_debug) + pam_syslog(pamh, LOG_WARNING, "denied access to %s@%s as %s",
package/linux-pam/linux-pam-succeed.patch new file +31 -0
@@ -0,0 +1,31 @@ +Conditionally compile per innetgr availability + +innetgr is not available/functional in uclibc, provide conditions for compilation. + +Signed-off-by: Dmitry Golubovsky <[email protected]> + +Index: linux-pam-1.1.4/modules/pam_succeed_if/pam_succeed_if.c +============================================================================ +--- linux-pam-1.1.4/modules/pam_succeed_if/pam_succeed_if.c 2011-06-21 05:04:56.000000000 -0400 ++++ linux-pam-1.1.4/modules/pam_succeed_if/pam_succeed_if.c 2012-08-09 21:05:02.000000000 -0400 +@@ -233,16 +233,20 @@ + static int + evaluate_innetgr(const char *host, const char *user, const char *group) + { ++#ifdef HAVE_INNETGR + if (innetgr(group, host, user, NULL) == 1) + return PAM_SUCCESS; ++#endif /* HAVE_INNETGR */ + return PAM_AUTH_ERR; + } + /* Return PAM_SUCCESS if the (host,user) is NOT in the netgroup. */ + static int + evaluate_notinnetgr(const char *host, const char *user, const char *group) + { ++#ifdef HAVE_INNETGR + if (innetgr(group, host, user, NULL) == 0) + return PAM_SUCCESS; ++#endif /* HAVE_INNETGR */ + return PAM_AUTH_ERR; + } +
package/linux-pam/linux-pam-time.patch new file +26 -0
@@ -0,0 +1,26 @@ +Conditionally compile per innetgr availability + +innetgr is not available/functional in uclibc, provide conditions for compilation. + +Signed-off-by: Dmitry Golubovsky <[email protected]> + +Index: linux-pam-1.1.4/modules/pam_time/pam_time.c +============================================================================ +--- linux-pam-1.1.4/modules/pam_time/pam_time.c 2011-06-21 05:04:56.000000000 -0400 ++++ linux-pam-1.1.4/modules/pam_time/pam_time.c 2012-08-09 21:02:29.000000000 -0400 +@@ -554,8 +554,14 @@ + continue; + } + /* If buffer starts with @, we are using netgroups */ +- if (buffer[0] == '@') ++ if (buffer[0] == '@') { ++#ifdef HAVE_INNETGR + good &= innetgr (&buffer[1], NULL, user, NULL); ++#else ++ good = 0; ++ pam_syslog (pamh, LOG_ERR, "pam_time does not have netgroup support"); ++#endif /* HAVE_INNETGR */ ++ } + else + good &= logic_field(pamh, user, buffer, count, is_same); + D(("with user: %s", good ? "passes":"fails" ));
package/linux-pam/linux-pam.mk new file +25 -0
@@ -0,0 +1,25 @@ +############################################ +# +# linux-pam +# +############################################ + +LINUX_PAM_VERSION = 1.1.4 +LINUX_PAM_SOURCE = Linux-PAM-$(LINUX_PAM_VERSION).tar.bz2 +LINUX_PAM_SITE = http://linux-pam.org/library/ +LINUX_PAM_INSTALL_STAGING = YES +LINUX_PAM_CONF_OPT = \ + --disable-prelude \ + --disable-isadir \ + --disable-nis \ + --disable-regenerate-docu \ + --enable-securedir=/lib/security \ + --libdir=/lib +LINUX_PAM_DEPENDENCIES = $(if $(BR2_NEEDS_GETTEXT_IF_LOCALE),gettext libintl) flex +LINUX_PAM_AUTORECONF = YES + +define LINUX_PAM_BUILD_CMDS + $(MAKE) CC="$(TARGET_CC) -lintl -lfl" LD="$(TARGET_LD)" -C $(@D) all +endef + +$(eval $(autotools-package))
Signature · 1 line
1.7.2.5
PATCH 1/1 Add package linux-pam
Hi Dmitry,
This looks fine for me, I still have some comments however.
Le 10/08/2012 12:27, Dmitry a ?crit :
Quoted 12 lines
Signed-off-by Dmitry <[email protected]>--- package/Config.in | 1 + package/linux-pam/Config.in | 15 +++++++++ package/linux-pam/linux-pam-configure.patch | 20 ++++++++++++ package/linux-pam/linux-pam-doc-makefile-am.patch | 33 +++++++++++++++++++++ package/linux-pam/linux-pam-group.patch | 26 ++++++++++++++++ package/linux-pam/linux-pam-rhosts.patch | 24 +++++++++++++++ package/linux-pam/linux-pam-succeed.patch | 31 +++++++++++++++++++ package/linux-pam/linux-pam-time.patch | 26 ++++++++++++++++ package/linux-pam/linux-pam.mk | 25 ++++++++++++++++ 9 files changed, 201 insertions(+), 0 deletions(-)
Quoted 8 lines
create mode 100644 package/linux-pam/Config.in create mode 100644 package/linux-pam/linux-pam-configure.patch create mode 100644 package/linux-pam/linux-pam-doc-makefile-am.patch create mode 100644 package/linux-pam/linux-pam-group.patch create mode 100644 package/linux-pam/linux-pam-rhosts.patch create mode 100644 package/linux-pam/linux-pam-succeed.patch create mode 100644 package/linux-pam/linux-pam-time.patch create mode 100644 package/linux-pam/linux-pam.mk
From what I can see, this patchset only removes calls to ruserok and innetgr. Could you merge them together so that all the conditionnal removal of ruserok is only in one patch and all the conditional removal of inetgr in another ?
Basically, you would have two patches:
- the ruserok one, which is the merge of linux-pam-configure.patch and
linux-pam-rhosts.patch,
- the innetgr one, which is the merge of linux-pam-group.patch,
linux-pam-succeed.patch and linux-pam-time.patch
Also, could you be more explicit with regard to patch names ? Like linux-pam-disable-ruserok.patch.
[...]
package/linux-pam/linux-pam.mk line 8
Quoted 8 lines
package/linux-pam/linux-pam.mk new file +8
-0+############################################ +# +# linux-pam +# +############################################ + +LINUX_PAM_VERSION = 1.1.4 +LINUX_PAM_SOURCE = Linux-PAM-$(LINUX_PAM_VERSION).tar.bz2
Since gz archives are also available, I guess you can drop this line.
package/linux-pam/linux-pam.mk line 18
Quoted 10 lines
package/linux-pam/linux-pam.mk new file +10
-0+LINUX_PAM_SITE = http://linux-pam.org/library/ +LINUX_PAM_INSTALL_STAGING = YES +LINUX_PAM_CONF_OPT = \ + --disable-prelude \ + --disable-isadir \ + --disable-nis \ + --disable-regenerate-docu \ + --enable-securedir=/lib/security \ + --libdir=/lib +LINUX_PAM_DEPENDENCIES = $(if $(BR2_NEEDS_GETTEXT_IF_LOCALE),gettext libintl) flex
You can drop the libintl here. I know that a lot of packages do that, but this is useless, since the libintl package doesn't exist.
package/linux-pam/linux-pam.mk line 23
Quoted 5 lines
package/linux-pam/linux-pam.mk new file +5
-0+LINUX_PAM_AUTORECONF = YES + +define LINUX_PAM_BUILD_CMDS + $(MAKE) CC="$(TARGET_CC) -lintl -lfl" LD="$(TARGET_LD)" -C $(@D) all +endef
Why do you need to set -lintl -lfl options ?
Thanks,
Maxime
Signature · 4 lines
Maxime Ripard, Free Electrons Kernel, drivers, real-time and embedded Linux development, consulting, training and support. http://free-electrons.com
PATCH 1/1 Add package linux-pam
Maxime,
Quoted 3 lines · Maxime Ripard
Hi Dmitry,
This looks fine for me, I still have some comments however.
Thomas applied this patch to next already:
http://git.buildroot.net/buildroot/commit/?h=next&id=04be7f0f8ca100afaf06b264332bc2cd61fbb3d0
But I'll try to answer to your comments
Quoted 4 lines
From what I can see, this patchset only removes calls to ruserok and innetgr. Could you merge them together so that all the conditionnal removal of ruserok is only in one patch and all the conditional removal of inetgr in another ?
It makes use of ruserok and innetgr conditional as defined by configure tests. Something that is not very much consistent in linux-pam itself: some of its files did have check for innetgr, other just called it. Configure test for innetgr existed in linux-pam. There was no test for ruserok.
This is merely technical, the way I created those patches was manual diffing of files in a pristine linux-pam source tree vs. working copy in Buildroot build area. This time I did file-wise to make sure each file compiles after patching. Patches for systemd are organized more at functional level (like fixing %ms format in all files that use it altogether).
Quoted 2 lines
Also, could you be more explicit with regard to patch names ? Like linux-pam-disable-ruserok.patch.
Patch names are again file-wise.
Quoted 5 lines
package/linux-pam/linux-pam.mk line 8
Quoted 3 lines
package/linux-pam/linux-pam.mk new file +3
-0+ +LINUX_PAM_VERSION = 1.1.4 +LINUX_PAM_SOURCE = Linux-PAM-$(LINUX_PAM_VERSION).tar.bz2Since gz archives are also available, I guess you can drop this line.
They are, but .bz2 is smaller: why download more?
Quoted 14 lines
package/linux-pam/linux-pam.mk line 18
Quoted 11 lines
package/linux-pam/linux-pam.mk new file +10
-0+LINUX_PAM_SITE = http://linux-pam.org/library/ +LINUX_PAM_INSTALL_STAGING = YES +LINUX_PAM_CONF_OPT = \ + --disable-prelude \ + --disable-isadir \ + --disable-nis \ + --disable-regenerate-docu \ + --enable-securedir=/lib/security \ + --libdir=/lib +LINUX_PAM_DEPENDENCIES = $(if $(BR2_NEEDS_GETTEXT_IF_LOCALE),gettext libintl) flexYou can drop the libintl here. I know that a lot of packages do that, but this is useless, since the libintl package doesn't exist.
from .config:
#
# gcc needs development files in target filesystem # BR2_PACKAGE_GETTEXT=y BR2_PACKAGE_LIBINTL=y
And indeed a bunch of packages have it in their dependencies. So why is BR2_PACKAGE_LIBINTL in the config?
Quoted 8 lines
package/linux-pam/linux-pam.mk line 23
Quoted 6 lines
package/linux-pam/linux-pam.mk new file +5
-0+LINUX_PAM_AUTORECONF = YES + +define LINUX_PAM_BUILD_CMDS + $(MAKE) CC="$(TARGET_CC) -lintl -lfl" LD="$(TARGET_LD)" -C $(@D) all +endefWhy do you need to set -lintl -lfl options ?
I had build errors without this.
Thanks.
Signature · 3 lines
Dmitry Golubovsky Anywhere on the Web
PATCH 1/1 Add package linux-pam
Hi,
Le 23/08/2012 03:53, Dmitry Golubovsky a ?crit :
Quoted 7 lines
Quoted 1 line · Maxime Ripard
This looks fine for me, I still have some comments however.
Thomas applied this patch to next already:
http://git.buildroot.net/buildroot/commit/?h=next&id=04be7f0f8ca100afaf06b264332bc2cd61fbb3d0
Yes, I saw that just after sending the mail. Sorry.
Quoted 16 lines
Quoted 5 lines
Quoted 5 lines
package/linux-pam/linux-pam.mk new file +5
-0+LINUX_PAM_SITE = http://linux-pam.org/library/ +LINUX_PAM_INSTALL_STAGING = YES +LINUX_PAM_CONF_OPT = \ + --disable-prelude \ + --disable-isadir \Quoted 8 lines
package/linux-pam/linux-pam.mk line 18
Quoted 5 lines
package/linux-pam/linux-pam.mk new file +5
-0+ --disable-nis \ + --disable-regenerate-docu \ + --enable-securedir=/lib/security \ + --libdir=/lib +LINUX_PAM_DEPENDENCIES = $(if $(BR2_NEEDS_GETTEXT_IF_LOCALE),gettext libintl) flexYou can drop the libintl here. I know that a lot of packages do that, but this is useless, since the libintl package doesn't exist.
from .config:
Quoted 8 lines
#
# gcc needs development files in target filesystem # BR2_PACKAGE_GETTEXT=y BR2_PACKAGE_LIBINTL=yAnd indeed a bunch of packages have it in their dependencies. So why is
BR2_PACKAGE_LIBINTLin the config?
Well, actually, the content of _DEPENDENCIES are the package names, and are not quite related to Kconfig here. If you look into packages/, you will see that there is only a gettext package and no libintl package. And it is this gettext package that defines the Kconfig symbol BR2_PACKAGE_LIBINTL in package/gettext/Config.in (and this option adds nothing at all, it actually removes the gettext binaries to leave only the libintl). All of this is likely to change quite soon though, as few of us have worked on making all the gettext stuff more consistent.
Signature · 4 lines
Maxime Ripard, Free Electrons Kernel, drivers, real-time and embedded Linux development, consulting, training and support. http://free-electrons.com