Attachment 914455 Details for Bug 1115977 – Add pam_reauthorize.so to sshd.pam

[patch] Add pam_reauthorize.so to sshd.pam

0001-Add-pam_reauthorize.so-to-sshd.pam-1115977.patch (text/plain), 1.76 KB, created by Stef Walter on 2014-07-03 12:55:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Stef Walter

Created: 2014-07-03 12:55:09 UTC

Size: 1.76 KB

patch

obsolete

>From c38a9c6e802c96c800515f3a504e12d40617a609 Mon Sep 17 00:00:00 2001
>From: Stef Walter <stefw@redhat.com>
>Date: Thu, 3 Jul 2014 13:58:57 +0200
>Subject: [PATCH] Add pam_reauthorize.so to sshd.pam (#1115977)
>
>---
> openssh.spec | 5 ++++-
> sshd.pam     | 4 ++++
> 2 files changed, 8 insertions(+), 1 deletion(-)
>
>diff --git a/openssh.spec b/openssh.spec
>index a4aa7a2..f39e96a 100644
>--- a/openssh.spec
>+++ b/openssh.spec
>@@ -64,7 +64,7 @@
> 
> # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1
> %define openssh_ver 6.6.1p1
>-%define openssh_rel 1
>+%define openssh_rel 2
> %define pam_ssh_agent_ver 0.9.3
> %define pam_ssh_agent_rel 2
> 
>@@ -710,6 +710,9 @@ getent passwd sshd >/dev/null || \
> %endif
> 
> %changelog
>+* Thu Jul 03 2014 Stef Walter <stefw@redhat.com> 6.6.1p1-2.1
>+- Add pam_reauthorize.so to sshd.pam (#1115977)
>+
> * Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.6.1p1-1.1
> - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
> 
>diff --git a/sshd.pam b/sshd.pam
>index a80e450..d943434 100644
>--- a/sshd.pam
>+++ b/sshd.pam
>@@ -2,6 +2,8 @@
> auth	   required	pam_sepermit.so
> auth       substack     password-auth
> auth       include      postlogin
>+# Used with polkit to reauthorize users in remote sessions
>+-auth      optional     pam_reauthorize.so prepare
> account    required     pam_nologin.so
> account    include      password-auth
> password   include      password-auth
>@@ -13,3 +15,5 @@ session    required     pam_selinux.so open env_params
> session    optional     pam_keyinit.so force revoke
> session    include      password-auth
> session    include      postlogin
>+# Used with polkit to reauthorize users in remote sessions
>+-session   optional     pam_reauthorize.so prepare
>-- 
>1.9.3
>

Actions: View | Diff

Attachments on bug 1115977: 914455