Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package gdm for openSUSE:Factory checked in
at 2022-12-04 14:58:06
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/gdm (Old)
and /work/SRC/openSUSE:Factory/.gdm.new.1835 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gdm"
Sun Dec 4 14:58:06 2022 rev:249 rq:1039791 version:43.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/gdm/gdm.changes 2022-11-01 13:40:46.315322723
+0100
+++ /work/SRC/openSUSE:Factory/.gdm.new.1835/gdm.changes 2022-12-04
14:58:24.420288462 +0100
@@ -1,0 +2,9 @@
+Fri Dec 2 10:05:28 UTC 2022 - Alynx Zhou <alynx.z...@suse.com>
+
+- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
+ they do not really support fingerprint and smartcard, just put
+ correct configuration to make them work (bsc#1205664).
+- Enable split authentication because we have correct
+ gdm-fingerprint.pamd and gdm-smartcard.pamd.
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ gdm.spec ++++++
--- /var/tmp/diff_new_pack.zu5adx/_old 2022-12-04 14:58:25.068292196 +0100
+++ /var/tmp/diff_new_pack.zu5adx/_new 2022-12-04 14:58:25.076292242 +0100
@@ -16,8 +16,7 @@
#
-# FIXME: need to check what should be done to enable this (at least adapt the
pam files). See bnc#699999
-%define enable_split_authentication 0
+%define enable_split_authentication 1
# special hack for SLE15/Leap 15: it does not yet know /usr/etc, and files in
/etc should be %%config
%if 0%{?suse_version} >= 1550
@@ -291,11 +290,6 @@
cp %{SOURCE5} %{buildroot}%{_pam_vendordir}/gdm-smartcard
%endif
# The default gdm pam configuration is the one to be used as pam-password too
-%if %{enable_split_authentication}
-rm %{buildroot}%{_pam_vendordir}/gdm-password
-echo "We are not ready for this, we need to know what to put in
gdm-fingerprint and gdm-smartcard pam config files."
-false
-%endif
ln -s gdm %{buildroot}%{_pam_vendordir}/gdm-password
## Install other files
# Install PostLogin script.
++++++ gdm-fingerprint.pamd ++++++
--- /var/tmp/diff_new_pack.zu5adx/_old 2022-12-04 14:58:25.156292703 +0100
+++ /var/tmp/diff_new_pack.zu5adx/_new 2022-12-04 14:58:25.160292726 +0100
@@ -1,18 +1,18 @@
-# Sample PAM file for doing fingerprint authentication.
-# Distros should replace this with what makes sense for them.
-auth requisite pam_nologin.so
-auth required pam_env.so
-auth sufficient pam_succeed_if.so uid >= 500 quiet
-auth required pam_deny.so
+#%PAM-1.0
-account required pam_unix.so
-account sufficient pam_localuser.so
-account sufficient pam_succeed_if.so uid < 500 quiet
-account required pam_permit.so
+auth required pam_shells.so
+auth requisite pam_nologin.so
+auth requisite pam_faillock.so preauth
+auth required pam_fprintd.so
+auth optional pam_permit.so
+auth required pam_env.so
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
-password required pam_deny.so
+account include common-account
-session optional pam_keyinit.so revoke
-session required pam_limits.so
-session required pam_unix.so
+password required pam_deny.so
+
+session include common-session
+session optional pam_gnome_keyring.so auto_start
++++++ gdm-smartcard.pamd ++++++
--- /var/tmp/diff_new_pack.zu5adx/_old 2022-12-04 14:58:25.204292979 +0100
+++ /var/tmp/diff_new_pack.zu5adx/_new 2022-12-04 14:58:25.208293002 +0100
@@ -1,20 +1,18 @@
-# Sample PAM file for doing smartcard authentication.
-# Distros should replace this with what makes sense for them.
-auth requisite pam_nologin.so
-auth required pam_env.so
-auth [success=done ignore=ignore default=die] pam_pkcs11.so
wait_for_card card_only
-auth requisite pam_succeed_if.so uid >= 500 quiet
-auth required pam_deny.so
+#%PAM-1.0
-account required pam_unix.so
-account sufficient pam_localuser.so
-account sufficient pam_succeed_if.so uid < 500 quiet
-account required pam_permit.so
+auth requisite pam_nologin.so
+auth requisite pam_faillock.so preauth
+auth required pam_pkcs11.so wait_for_card
card_only
+auth required pam_shells.so
+auth optional pam_permit.so
+auth required pam_env.so
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
-password optional pam_pkcs11.so
-password requisite pam_cracklib.so try_first_pass retry=3 type=
+account include common-account
-session optional pam_keyinit.so revoke
-session required pam_limits.so
-session required pam_unix.so
+password required pam_deny.so
+
+session include common-session
+session optional pam_gnome_keyring.so auto_start
