commit 20e7f978942d86f71f5e6b6578847722333689b8 Author: Matt Housh <jaeger@crux.ninja> Date: Sun Feb 3 00:34:40 2019 -0600 linux-pam: initial commit, version 1.3.1 diff --git a/linux-pam/.footprint b/linux-pam/.footprint new file mode 100644 index 00000000..9efb1ed6 --- /dev/null +++ b/linux-pam/.footprint @@ -0,0 +1,232 @@ +drwxr-xr-x root/root etc/ +-rw-r--r-- root/root etc/environment +drwxr-xr-x root/root etc/pam.d/ +-rw-r--r-- root/root etc/pam.d/common-account +-rw-r--r-- root/root etc/pam.d/common-auth +-rw-r--r-- root/root etc/pam.d/common-password +-rw-r--r-- root/root etc/pam.d/common-session +-rw-r--r-- root/root etc/pam.d/other +drwxr-xr-x root/root etc/security/ +-rw-r--r-- root/root etc/security/access.conf +-rw-r--r-- root/root etc/security/group.conf +-rw-r--r-- root/root etc/security/limits.conf +drwxr-xr-x root/root etc/security/limits.d/ +-rw-r--r-- root/root etc/security/namespace.conf +drwxr-xr-x root/root etc/security/namespace.d/ +-rwxr-xr-x root/root etc/security/namespace.init +-rw-r--r-- root/root etc/security/pam_env.conf +-rw-r--r-- root/root etc/security/time.conf +drwxr-xr-x root/root lib/ +-rwxr-xr-x root/root lib/libpam.la +lrwxrwxrwx root/root lib/libpam.so -> libpam.so.0.84.2 +lrwxrwxrwx root/root lib/libpam.so.0 -> libpam.so.0.84.2 +-rwxr-xr-x root/root lib/libpam.so.0.84.2 +-rwxr-xr-x root/root lib/libpam_misc.la +lrwxrwxrwx root/root lib/libpam_misc.so -> libpam_misc.so.0.82.1 +lrwxrwxrwx root/root lib/libpam_misc.so.0 -> libpam_misc.so.0.82.1 +-rwxr-xr-x root/root lib/libpam_misc.so.0.82.1 +-rwxr-xr-x root/root lib/libpamc.la +lrwxrwxrwx root/root lib/libpamc.so -> libpamc.so.0.82.1 +lrwxrwxrwx root/root lib/libpamc.so.0 -> libpamc.so.0.82.1 +-rwxr-xr-x root/root lib/libpamc.so.0.82.1 +drwxr-xr-x root/root lib/security/ +-rwxr-xr-x root/root lib/security/pam_access.la +-rwxr-xr-x root/root lib/security/pam_access.so +-rwxr-xr-x root/root lib/security/pam_debug.la +-rwxr-xr-x root/root lib/security/pam_debug.so +-rwxr-xr-x root/root lib/security/pam_deny.la +-rwxr-xr-x root/root lib/security/pam_deny.so +-rwxr-xr-x root/root lib/security/pam_echo.la +-rwxr-xr-x root/root lib/security/pam_echo.so +-rwxr-xr-x root/root lib/security/pam_env.la +-rwxr-xr-x root/root lib/security/pam_env.so +-rwxr-xr-x root/root lib/security/pam_exec.la +-rwxr-xr-x root/root lib/security/pam_exec.so +-rwxr-xr-x root/root lib/security/pam_faildelay.la +-rwxr-xr-x root/root lib/security/pam_faildelay.so +-rwxr-xr-x root/root lib/security/pam_filter.la +-rwxr-xr-x root/root lib/security/pam_filter.so +drwxr-xr-x root/root lib/security/pam_filter/ +-rwxr-xr-x root/root lib/security/pam_filter/upperLOWER +-rwxr-xr-x root/root lib/security/pam_ftp.la +-rwxr-xr-x root/root lib/security/pam_ftp.so +-rwxr-xr-x root/root lib/security/pam_group.la +-rwxr-xr-x root/root lib/security/pam_group.so +-rwxr-xr-x root/root lib/security/pam_issue.la +-rwxr-xr-x root/root lib/security/pam_issue.so +-rwxr-xr-x root/root lib/security/pam_keyinit.la +-rwxr-xr-x root/root lib/security/pam_keyinit.so +-rwxr-xr-x root/root lib/security/pam_lastlog.la +-rwxr-xr-x root/root lib/security/pam_lastlog.so +-rwxr-xr-x root/root lib/security/pam_limits.la +-rwxr-xr-x root/root lib/security/pam_limits.so +-rwxr-xr-x root/root lib/security/pam_listfile.la +-rwxr-xr-x root/root lib/security/pam_listfile.so +-rwxr-xr-x root/root lib/security/pam_localuser.la +-rwxr-xr-x root/root lib/security/pam_localuser.so +-rwxr-xr-x root/root lib/security/pam_loginuid.la +-rwxr-xr-x root/root lib/security/pam_loginuid.so +-rwxr-xr-x root/root lib/security/pam_mail.la +-rwxr-xr-x root/root lib/security/pam_mail.so +-rwxr-xr-x root/root lib/security/pam_mkhomedir.la +-rwxr-xr-x root/root lib/security/pam_mkhomedir.so +-rwxr-xr-x root/root lib/security/pam_motd.la +-rwxr-xr-x root/root lib/security/pam_motd.so +-rwxr-xr-x root/root lib/security/pam_namespace.la +-rwxr-xr-x root/root lib/security/pam_namespace.so +-rwxr-xr-x root/root lib/security/pam_nologin.la +-rwxr-xr-x root/root lib/security/pam_nologin.so +-rwxr-xr-x root/root lib/security/pam_permit.la +-rwxr-xr-x root/root lib/security/pam_permit.so +-rwxr-xr-x root/root lib/security/pam_pwhistory.la +-rwxr-xr-x root/root lib/security/pam_pwhistory.so +-rwxr-xr-x root/root lib/security/pam_rhosts.la +-rwxr-xr-x root/root lib/security/pam_rhosts.so +-rwxr-xr-x root/root lib/security/pam_rootok.la +-rwxr-xr-x root/root lib/security/pam_rootok.so +-rwxr-xr-x root/root lib/security/pam_securetty.la +-rwxr-xr-x root/root lib/security/pam_securetty.so +-rwxr-xr-x root/root lib/security/pam_shells.la +-rwxr-xr-x root/root lib/security/pam_shells.so +-rwxr-xr-x root/root lib/security/pam_stress.la +-rwxr-xr-x root/root lib/security/pam_stress.so +-rwxr-xr-x root/root lib/security/pam_succeed_if.la +-rwxr-xr-x root/root lib/security/pam_succeed_if.so +-rwxr-xr-x root/root lib/security/pam_tally.la +-rwxr-xr-x root/root lib/security/pam_tally.so +-rwxr-xr-x root/root lib/security/pam_tally2.la +-rwxr-xr-x root/root lib/security/pam_tally2.so +-rwxr-xr-x root/root lib/security/pam_time.la +-rwxr-xr-x root/root lib/security/pam_time.so +-rwxr-xr-x root/root lib/security/pam_timestamp.la +-rwxr-xr-x root/root lib/security/pam_timestamp.so +-rwxr-xr-x root/root lib/security/pam_umask.la +-rwxr-xr-x root/root lib/security/pam_umask.so +-rwxr-xr-x root/root lib/security/pam_unix.la +-rwxr-xr-x root/root lib/security/pam_unix.so +-rwxr-xr-x root/root lib/security/pam_warn.la +-rwxr-xr-x root/root lib/security/pam_warn.so +-rwxr-xr-x root/root lib/security/pam_wheel.la +-rwxr-xr-x root/root lib/security/pam_wheel.so +-rwxr-xr-x root/root lib/security/pam_xauth.la +-rwxr-xr-x root/root lib/security/pam_xauth.so +drwxr-xr-x root/root sbin/ +-rwxr-xr-x root/root sbin/mkhomedir_helper +-rwxr-xr-x root/root sbin/pam_tally +-rwxr-xr-x root/root sbin/pam_tally2 +-rwxr-xr-x root/root sbin/pam_timestamp_check +-rwsr-xr-x root/root sbin/unix_chkpwd +-rwxr-xr-x root/root sbin/unix_update +drwxr-xr-x root/root usr/ +drwxr-xr-x root/root usr/include/ +drwxr-xr-x root/root usr/include/security/ +-rw-r--r-- root/root usr/include/security/_pam_compat.h +-rw-r--r-- root/root usr/include/security/_pam_macros.h +-rw-r--r-- root/root usr/include/security/_pam_types.h +-rw-r--r-- root/root usr/include/security/pam_appl.h +-rw-r--r-- root/root usr/include/security/pam_client.h +-rw-r--r-- root/root usr/include/security/pam_ext.h +-rw-r--r-- root/root usr/include/security/pam_filter.h +-rw-r--r-- root/root usr/include/security/pam_misc.h +-rw-r--r-- root/root usr/include/security/pam_modules.h +-rw-r--r-- root/root usr/include/security/pam_modutil.h +drwxr-xr-x root/root usr/share/ +drwxr-xr-x root/root usr/share/man/ +drwxr-xr-x root/root usr/share/man/man3/ +-rw-r--r-- root/root usr/share/man/man3/misc_conv.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_acct_mgmt.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_authenticate.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_chauthtok.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_close_session.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_conv.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_end.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_error.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_fail_delay.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_get_authtok.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_get_authtok_noverify.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_get_authtok_verify.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_get_data.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_get_item.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_get_user.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_getenv.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_getenvlist.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_info.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_misc_drop_env.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_misc_paste_env.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_misc_setenv.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_open_session.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_prompt.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_putenv.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_set_data.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_set_item.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_setcred.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_sm_acct_mgmt.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_sm_authenticate.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_sm_chauthtok.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_sm_close_session.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_sm_open_session.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_sm_setcred.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_start.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_strerror.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_syslog.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_verror.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_vinfo.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_vprompt.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_vsyslog.3.gz +-rw-r--r-- root/root usr/share/man/man3/pam_xauth_data.3.gz +drwxr-xr-x root/root usr/share/man/man5/ +-rw-r--r-- root/root usr/share/man/man5/access.conf.5.gz +-rw-r--r-- root/root usr/share/man/man5/environment.5.gz +-rw-r--r-- root/root usr/share/man/man5/group.conf.5.gz +-rw-r--r-- root/root usr/share/man/man5/limits.conf.5.gz +-rw-r--r-- root/root usr/share/man/man5/namespace.conf.5.gz +-rw-r--r-- root/root usr/share/man/man5/pam.conf.5.gz +-rw-r--r-- root/root usr/share/man/man5/pam.d.5.gz +-rw-r--r-- root/root usr/share/man/man5/pam_env.conf.5.gz +-rw-r--r-- root/root usr/share/man/man5/time.conf.5.gz +drwxr-xr-x root/root usr/share/man/man8/ +-rw-r--r-- root/root usr/share/man/man8/PAM.8.gz +-rw-r--r-- root/root usr/share/man/man8/mkhomedir_helper.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_access.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_debug.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_deny.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_echo.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_env.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_exec.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_faildelay.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_filter.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_ftp.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_group.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_issue.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_keyinit.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_lastlog.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_limits.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_listfile.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_localuser.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_loginuid.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_mail.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_mkhomedir.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_motd.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_namespace.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_nologin.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_permit.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_pwhistory.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_rhosts.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_rootok.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_securetty.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_shells.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_succeed_if.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_tally.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_tally2.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_time.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_timestamp.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_timestamp_check.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_umask.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_unix.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_warn.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_wheel.8.gz +-rw-r--r-- root/root usr/share/man/man8/pam_xauth.8.gz +-rw-r--r-- root/root usr/share/man/man8/unix_chkpwd.8.gz +-rw-r--r-- root/root usr/share/man/man8/unix_update.8.gz diff --git a/linux-pam/.signature b/linux-pam/.signature new file mode 100644 index 00000000..ed465100 --- /dev/null +++ b/linux-pam/.signature @@ -0,0 +1,10 @@ +untrusted comment: verify with /etc/ports/core.pub +RWRJc1FUaeVeqtAYZIJ25pfIoKITd3rXPu+aw5eWztfmtyeot0k/FuCzE8D2B9t2F8r5UadDQOXfe5CUohLNLD8tby46F/rASQs= +SHA256 (Pkgfile) = b790b8fb69f1514545bef63f282ff25dee36404971ea359b4f558a78141f00d9 +SHA256 (.footprint) = a29126aa08fbe75288d3b080b87fd77eeb6c91f9b9f40eb19379bf033fbed614 +SHA256 (Linux-PAM-1.3.1.tar.xz) = eff47a4ecd833fbf18de9686632a70ee8d0794b79aecb217ebd0ce11db4cd0db +SHA256 (common-account) = 63b6d073e0a05d45260912fd900e27ccac3304ca23cd05df68ce88da34a5d832 +SHA256 (common-auth) = c8f2c471572147fafddfe2062b763d360bbb6d21aa8017c725785f96667e9b02 +SHA256 (common-password) = 999c19d97ab2a8408103304faa12252d11ab03d492880d78a0bd1a1335659258 +SHA256 (common-session) = 796f130c01d2c98c23fea8d72ed7cb79cf58b7987b3aa2abed880ad424e5e87c +SHA256 (other) = 543e9b4493e8d60aac66d5e6dbc9955b53efa421e19400b47f243a42d67246f1 diff --git a/linux-pam/Pkgfile b/linux-pam/Pkgfile new file mode 100644 index 00000000..c2fa56a6 --- /dev/null +++ b/linux-pam/Pkgfile @@ -0,0 +1,32 @@ +# Description: Pluggable Authentication Modules (PAM) for Linux +# URL: http://www.linux-pam.org/ +# Maintainer: CRUX System Team, core-ports at crux dot nu + +name=linux-pam +version=1.3.1 +release=1 +source=(https://github.com/$name/$name/releases/download/v${version}/Linux-PAM-$version.tar.xz \ + common-account common-auth common-password common-session \ + other) + +build() { + cd Linux-PAM-$version + ./configure --prefix=/usr \ + --libdir=/lib \ + --disable-nis \ + --disable-nls \ + --disable-prelude \ + --enable-db=no + make + make DESTDIR=$PKG install + + # unix_chkpwd needs to be setuid root + chmod u+s $PKG/sbin/unix_chkpwd + + mkdir -p $PKG/etc/pam.d + install -o root -g root -m 0644 \ + $SRC/{common-*,other} \ + $PKG/etc/pam.d/ + + rm -r $PKG/usr/share/doc +} diff --git a/linux-pam/common-account b/linux-pam/common-account new file mode 100644 index 00000000..5caac58b --- /dev/null +++ b/linux-pam/common-account @@ -0,0 +1,5 @@ +# +# /etc/pam.d/common-account - common account module configuration +# + +account required pam_unix.so diff --git a/linux-pam/common-auth b/linux-pam/common-auth new file mode 100644 index 00000000..88f65f0b --- /dev/null +++ b/linux-pam/common-auth @@ -0,0 +1,5 @@ +# +# /etc/pam.d/common-auth - common auth module configuration +# + +auth required pam_unix.so nullok diff --git a/linux-pam/common-password b/linux-pam/common-password new file mode 100644 index 00000000..edae4ef6 --- /dev/null +++ b/linux-pam/common-password @@ -0,0 +1,5 @@ +# +# /etc/pam.d/common-password - common password module configuration +# + +password required pam_unix.so shadow sha512 diff --git a/linux-pam/common-session b/linux-pam/common-session new file mode 100644 index 00000000..2a9013c8 --- /dev/null +++ b/linux-pam/common-session @@ -0,0 +1,5 @@ +# +# /etc/pam.d/common-session - common session module configuration +# + +session required pam_unix.so diff --git a/linux-pam/other b/linux-pam/other new file mode 100644 index 00000000..f3a835c8 --- /dev/null +++ b/linux-pam/other @@ -0,0 +1,13 @@ +# +# /etc/pam.d/other - default deny +# + +auth required pam_warn.so +auth required pam_deny.so + +account required pam_deny.so + +password required pam_warn.so +password required pam_deny.so + +session required pam_deny.so