[ubuntu/noble-proposed] pam 1.5.3-5ubuntu1 (Accepted)

[Dan Bungert]

pam (1.5.3-5ubuntu1) noble; urgency=medium

  * Merge from Debian unstable, remaining changes:
    - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's
      not present there or in /etc/security/pam_env.conf. (should send to
      Debian).
    - debian/libpam0g.postinst: only ask questions during update-manager
      when there are non-default services running.
    - debian/libpam0g.postinst: check if gdm is actually running before
      trying to reload it.
    - debian/patches/ubuntu-rlimit_nice_correction: Explicitly
      initialise RLIMIT_NICE rather than relying on the kernel limits.
    - debian/patches/pam_umask_usergroups_from_login.defs.patch:
      Deprecate pam_unix's explicit "usergroups" option and instead read it
      from /etc/login.def's "USERGROUP_ENAB" option if umask is only defined
      there. This restores compatibility with the pre-PAM behaviour of login.
    - debian/patches/pam_motd-legal-notice: display the contents of
      /etc/legal once, then set a flag in the user's homedir to prevent
      showing it again.
    - debian/update-motd.5, debian/libpam-modules.manpages: add a manpage
      for update-motd, with some best practices and notes of explanation.
    - debian/patches/update-motd-manpage-ref: add a reference in pam_motd(8)
      to update-motd(5)
    - debian/local/common-session{,-noninteractive}: Enable pam_umask by
      default, now that the umask setting is gone from /etc/profile.
    - debian/local/pam-auth-update: Add the new md5sums for pam_umask addition.
    - debian/patches/extrausers.patch: Add a pam_extrausers module
      that is basically just a copy of pam_unix but looks at
      /var/lib/extrausers/{group,passwd,shadow} instead of /etc/
    - debian/libpam-modules-bin.install: install the helper binaries for
      pam_extrausers to /sbin
    - debian/rules: Make pam_extrausers_chkpwd sguid shadow
    - Add lintian override for pam_extrausers_chkpwd
    - Disable custom daemon restart detection code if needrestart is available

pam (1.5.3-5) unstable; urgency=medium

  * Revert renaming libpam0g to libpam0t64 for time_t transition: apt
    sometimes removes libpam0g rather than simply letting libpam0t64
    replace libpam0g (and deconfiguring libpam0g), leaving a system where
    essential packages are broken,  Closes: #1065017
    * Since libpam0t64 is going away, we do not need dpkg-diversions for it.
    * As a consequence libpam_misc has an ABI break without a package name
    change.  We believe nothing in the archive depends on this ABI, and at
    least until we come up with a better solution this is the least bad option.
  * For now remove libdb-dev so that libdb-dev can undergo time_t
    transition.  That means this version of pam does not include
    pam_userdb, which makes pam unsuitable for release.
  * Replace/break libpam0t64

Date: Thu, 29 Feb 2024 10:25:41 -0700
Changed-By: Dan Bungert <daniel.bungert at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/pam/1.5.3-5ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 29 Feb 2024 10:25:41 -0700
Source: pam
Built-For-Profiles: noudeb
Architecture: source
Version: 1.5.3-5ubuntu1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Dan Bungert <daniel.bungert at canonical.com>
Closes: 1065017
Changes:
 pam (1.5.3-5ubuntu1) noble; urgency=medium
 .
   * Merge from Debian unstable, remaining changes:
     - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's
       not present there or in /etc/security/pam_env.conf. (should send to
       Debian).
     - debian/libpam0g.postinst: only ask questions during update-manager
       when there are non-default services running.
     - debian/libpam0g.postinst: check if gdm is actually running before
       trying to reload it.
     - debian/patches/ubuntu-rlimit_nice_correction: Explicitly
       initialise RLIMIT_NICE rather than relying on the kernel limits.
     - debian/patches/pam_umask_usergroups_from_login.defs.patch:
       Deprecate pam_unix's explicit "usergroups" option and instead read it
       from /etc/login.def's "USERGROUP_ENAB" option if umask is only defined
       there. This restores compatibility with the pre-PAM behaviour of login.
     - debian/patches/pam_motd-legal-notice: display the contents of
       /etc/legal once, then set a flag in the user's homedir to prevent
       showing it again.
     - debian/update-motd.5, debian/libpam-modules.manpages: add a manpage
       for update-motd, with some best practices and notes of explanation.
     - debian/patches/update-motd-manpage-ref: add a reference in pam_motd(8)
       to update-motd(5)
     - debian/local/common-session{,-noninteractive}: Enable pam_umask by
       default, now that the umask setting is gone from /etc/profile.
     - debian/local/pam-auth-update: Add the new md5sums for pam_umask addition.
     - debian/patches/extrausers.patch: Add a pam_extrausers module
       that is basically just a copy of pam_unix but looks at
       /var/lib/extrausers/{group,passwd,shadow} instead of /etc/
     - debian/libpam-modules-bin.install: install the helper binaries for
       pam_extrausers to /sbin
     - debian/rules: Make pam_extrausers_chkpwd sguid shadow
     - Add lintian override for pam_extrausers_chkpwd
     - Disable custom daemon restart detection code if needrestart is available
 .
 pam (1.5.3-5) unstable; urgency=medium
 .
   * Revert renaming libpam0g to libpam0t64 for time_t transition: apt
     sometimes removes libpam0g rather than simply letting libpam0t64
     replace libpam0g (and deconfiguring libpam0g), leaving a system where
     essential packages are broken,  Closes: #1065017
     * Since libpam0t64 is going away, we do not need dpkg-diversions for it.
     * As a consequence libpam_misc has an ABI break without a package name
     change.  We believe nothing in the archive depends on this ABI, and at
     least until we come up with a better solution this is the least bad option.
   * For now remove libdb-dev so that libdb-dev can undergo time_t
     transition.  That means this version of pam does not include
     pam_userdb, which makes pam unsuitable for release.
   * Replace/break libpam0t64
Checksums-Sha1:
 5b9189dd7d8370c95dea0857e8c16fc97244946a 2936 pam_1.5.3-5ubuntu1.dsc
 ed04be197d83effc3d1184086c1fb69a17bce738 186096 pam_1.5.3-5ubuntu1.debian.tar.xz
 9e2ec13e826e97342456180ce87a9f089f492ee5 7759 pam_1.5.3-5ubuntu1_source.buildinfo
Checksums-Sha256:
 df09170b1e5c65060786a1c1afb17c1b076b6b3c5eba7e758289f4afb711a3e5 2936 pam_1.5.3-5ubuntu1.dsc
 22d6b8940b06ef640a6e0b8d91a1dd2da2b187487cb95e455bae43e486702fcc 186096 pam_1.5.3-5ubuntu1.debian.tar.xz
 2ef8958f7796fc550fd7db954f0f10c1099942448e370867e61ba0ca0f81e234 7759 pam_1.5.3-5ubuntu1_source.buildinfo
Files:
 951902c8ab9dcbccf964359137e742ce 2936 libs optional pam_1.5.3-5ubuntu1.dsc
 67aad79e3ed819c8ac31ba6cfb965ebf 186096 libs optional pam_1.5.3-5ubuntu1.debian.tar.xz
 bbb5e9c3bc3f8fff7aafa6836891f913 7759 libs optional pam_1.5.3-5ubuntu1_source.buildinfo
Original-Maintainer: Sam Hartman <hartmans at debian.org>