[ubuntu/karmic] pam 1.1.0-1ubuntu1 (Accepted)

[Steve Langasek]

pam (1.1.0-1ubuntu1) karmic; urgency=low

  * Merge from Debian, remaining changes:
    - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not
      present there or in /etc/security/pam_env.conf. (should send to Debian).
    - debian/libpam0g.postinst: only ask questions during update-manager when
      there are non-default services running.
    - debian/patches-applied/series: Ubuntu patches are as below ...
    - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic
      module option 'missingok' which will suppress logging of errors by
      libpam if the module is not found.
    - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for
      password on bad username.
    - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly
      initialise RLIMIT_NICE rather than relying on the kernel limits.
    - Change Vcs-Bzr to point at the Ubuntu branch.
    - debian/local/common-password, debian/pam-configs/unix: switch from
      "md5" to "sha512" as password crypt default.
    - Make libpam-modules depend on base-files (>= 5.0.0ubuntu6), to ensure
      run-parts does the right thing in /etc/update-motd.d.
    - debian/patches-applied/pam_motd-legal-notice: display the contents of
      /etc/legal once, then set a flag in the user's homedir to prevent showing
      it again.
    - debian/local/common-{auth,account,password}.md5sums: include the
      Ubuntu-specific intrepid,jaunty md5sums for use during the
      common-session-noninteractive upgrade.
  * Dropped changes, superseded upstream:
    - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t
      type rather than __u8.
    - debian/patches-applied/ubuntu-user_defined_environment: Look at
      ~/.pam_environment too, with the same format as
      /etc/security/pam_env.conf.

pam (1.1.0-1) unstable; urgency=low

  * New upstream version.
    - pam_access no longer does DNS lookups when we know we're comparing
      with a tty name or a service name.  Closes: #376209.
    - fixes for manpage spelling.  Closes: #488690.
    - fix evaluation of or'ed list of users in time.conf and group.conf.
      Closes: #326407, #514423.
  * Drop patches pam_unix_thread-safe_save_old_password.patch,
    pam_env_ignore_garbage.patch, dont_freeze_password_chain,
    pam_1.0.4_mindays, pam_mail-fix-quiet, pam_unix-chkpwd-wait, and
    cve-2009-0887-libpam-pam_misc.patch, which are included upstream.
  * Trim pam.d-manpage-section patch, which was mostly but not completely
    applied upstream.
  * Update debian/libpam0g.symbols for new extension.
  * Bump the shlibs version as well, for our dpkg-shlibdeps fallback.
  * And bump the version checks in the libpam-modules {pre,post}inst, so that
    the necessary services get restarted for any modules that need the new
    symbols.
  * Add /sbin/mkhomedir_helper to libpam-modules.
  * Document that pam_cracklib no longer checks /etc/security/opasswd.
    Closes: #263767.
  * debian/patches/007_modules_pam_unix: drop divergence from upstream
    that treats "0" as a special value in various fields in /etc/shadow,
    and document this in debian/NEWS.  Thanks to Nicolas François
    <nicolas.francois at centraliens.net> for the detailed analysis.
    Closes: #308229.
  * Updated debconf translations:
    - French, thanks to Jean-Baka Domelevo Entfellner <domelevo at gmail.com>
      (closes: #521266)
  * Build with LDFLAGS=-Wl,-z,defs to guard against the possibility of
    any undefined symbols (due to typos or otherwise) at build time.
    Closes: #10231.
  * On upgrade from versions before 1.1.0-1, if
    /etc/pam.d/common-session-noninteractive has not been created (because
    the user declined use of pam-auth-update), create it by copying
    /etc/pam.d/common-session.  Closes: #543401.
  * debian/patches/fix-man-crud: new patch, fix "undefined macro" errors in
    manpages caused by oddities of toolchain used when generating them
    upstream.

Date: Wed, 26 Aug 2009 00:40:14 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Steve Langasek <steve.langasek at canonical.com>
https://launchpad.net/ubuntu/karmic/+source/pam/1.1.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 26 Aug 2009 00:40:14 -0700
Source: pam
Binary: libpam0g libpam-modules libpam-runtime libpam0g-dev libpam-cracklib libpam-doc
Architecture: source
Version: 1.1.0-1ubuntu1
Distribution: karmic
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Description: 
 libpam-cracklib - PAM module to enable cracklib support
 libpam-doc - Documentation of PAM
 libpam-modules - Pluggable Authentication Modules for PAM
 libpam-runtime - Runtime support for the PAM library
 libpam0g   - Pluggable Authentication Modules library
 libpam0g-dev - Development files for PAM
Closes: 10231 263767 308229 326407 376209 488690 514423 521266 543401
Changes: 
 pam (1.1.0-1ubuntu1) karmic; urgency=low
 .
   * Merge from Debian, remaining changes:
     - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not
       present there or in /etc/security/pam_env.conf. (should send to Debian).
     - debian/libpam0g.postinst: only ask questions during update-manager when
       there are non-default services running.
     - debian/patches-applied/series: Ubuntu patches are as below ...
     - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic
       module option 'missingok' which will suppress logging of errors by
       libpam if the module is not found.
     - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for
       password on bad username.
     - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly
       initialise RLIMIT_NICE rather than relying on the kernel limits.
     - Change Vcs-Bzr to point at the Ubuntu branch.
     - debian/local/common-password, debian/pam-configs/unix: switch from
       "md5" to "sha512" as password crypt default.
     - Make libpam-modules depend on base-files (>= 5.0.0ubuntu6), to ensure
       run-parts does the right thing in /etc/update-motd.d.
     - debian/patches-applied/pam_motd-legal-notice: display the contents of
       /etc/legal once, then set a flag in the user's homedir to prevent showing
       it again.
     - debian/local/common-{auth,account,password}.md5sums: include the
       Ubuntu-specific intrepid,jaunty md5sums for use during the
       common-session-noninteractive upgrade.
   * Dropped changes, superseded upstream:
     - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t
       type rather than __u8.
     - debian/patches-applied/ubuntu-user_defined_environment: Look at
       ~/.pam_environment too, with the same format as
       /etc/security/pam_env.conf.
 .
 pam (1.1.0-1) unstable; urgency=low
 .
   * New upstream version.
     - pam_access no longer does DNS lookups when we know we're comparing
       with a tty name or a service name.  Closes: #376209.
     - fixes for manpage spelling.  Closes: #488690.
     - fix evaluation of or'ed list of users in time.conf and group.conf.
       Closes: #326407, #514423.
   * Drop patches pam_unix_thread-safe_save_old_password.patch,
     pam_env_ignore_garbage.patch, dont_freeze_password_chain,
     pam_1.0.4_mindays, pam_mail-fix-quiet, pam_unix-chkpwd-wait, and
     cve-2009-0887-libpam-pam_misc.patch, which are included upstream.
   * Trim pam.d-manpage-section patch, which was mostly but not completely
     applied upstream.
   * Update debian/libpam0g.symbols for new extension.
   * Bump the shlibs version as well, for our dpkg-shlibdeps fallback.
   * And bump the version checks in the libpam-modules {pre,post}inst, so that
     the necessary services get restarted for any modules that need the new
     symbols.
   * Add /sbin/mkhomedir_helper to libpam-modules.
   * Document that pam_cracklib no longer checks /etc/security/opasswd.
     Closes: #263767.
   * debian/patches/007_modules_pam_unix: drop divergence from upstream
     that treats "0" as a special value in various fields in /etc/shadow,
     and document this in debian/NEWS.  Thanks to Nicolas François
     <nicolas.francois at centraliens.net> for the detailed analysis.
     Closes: #308229.
   * Updated debconf translations:
     - French, thanks to Jean-Baka Domelevo Entfellner <domelevo at gmail.com>
       (closes: #521266)
   * Build with LDFLAGS=-Wl,-z,defs to guard against the possibility of
     any undefined symbols (due to typos or otherwise) at build time.
     Closes: #10231.
   * On upgrade from versions before 1.1.0-1, if
     /etc/pam.d/common-session-noninteractive has not been created (because
     the user declined use of pam-auth-update), create it by copying
     /etc/pam.d/common-session.  Closes: #543401.
   * debian/patches/fix-man-crud: new patch, fix "undefined macro" errors in
     manpages caused by oddities of toolchain used when generating them
     upstream.
Checksums-Sha1: 
 bc850a53df6fcaf3a00c4cac5e306d94e54b40e9 2233 pam_1.1.0-1ubuntu1.dsc
 2d9d10d79bae2e24af00e267190883f10a8604ae 1739305 pam_1.1.0.orig.tar.gz
 13b0e158e04459fcbc1d619cde24dc3f431aefd7 256300 pam_1.1.0-1ubuntu1.diff.gz
Checksums-Sha256: 
 f78ac0cfb0fffacc6d81203e69db773aca5511eb556a188e728df60dc4660286 2233 pam_1.1.0-1ubuntu1.dsc
 5b3541b949ff0d05f8065d88d7ed906a1b8414967e280cadaf1e629897c8f4e8 1739305 pam_1.1.0.orig.tar.gz
 d0cec2d40cbfee15a28abece2db291b28eb2b09cbc8d02163d11261a40a091fc 256300 pam_1.1.0-1ubuntu1.diff.gz
Files: 
 7d4c799534d100e5f4f21f88e51db01e 2233 libs optional pam_1.1.0-1ubuntu1.dsc
 004ea633a4bd4d059e68f75b9fab4d35 1739305 libs optional pam_1.1.0.orig.tar.gz
 5ca30734998701f46c296775b35047bb 256300 libs optional pam_1.1.0-1ubuntu1.diff.gz
Original-Maintainer: Steve Langasek <vorlon at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
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=G2b3
-----END PGP SIGNATURE-----