diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.0.19.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.0.20.ebuild similarity index 100% rename from sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.0.19.ebuild rename to sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-3.0.20.ebuild diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild index c365257177..1010d92c1f 100644 --- a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild @@ -9,7 +9,7 @@ CROS_WORKON_REPO="git://github.com" if [[ "${PV}" == 9999 ]]; then KEYWORDS="~amd64 ~arm ~arm64 ~x86" else - CROS_WORKON_COMMIT="139da2652de491ae70371413b45e189fe8e727f6" + CROS_WORKON_COMMIT="32a47835ee59f56a816474cccc2197ed1ffacee9" KEYWORDS="amd64 arm arm64 x86" fi @@ -159,6 +159,10 @@ src_install() { # For compatibility with older SDKs which use 1000 for the core user. fowners -R 500:500 /home/core || die + if use arm64; then + sed -i "${D}"/etc/nsswitch.conf 's/ sss//' || die + fi + if use cros_host; then # Provided by vim in the SDK rm -r "${D}"/etc/vim || die diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/ChangeLog b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/ChangeLog new file mode 100644 index 0000000000..5202519819 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/ChangeLog @@ -0,0 +1,589 @@ +# ChangeLog for sys-auth/pambase +# Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2 +# $Header: /var/cvsroot/gentoo-x86/sys-auth/pambase/ChangeLog,v 1.138 2014/03/13 14:31:20 ssuominen Exp $ + + 13 Mar 2014; Samuli Suominen + -pambase-20120417-r1.ebuild, -pambase-20120417-r2.ebuild, + -pambase-20120417.ebuild: + old + +*pambase-20140313 (13 Mar 2014) + + 13 Mar 2014; Samuli Suominen +pambase-20140313.ebuild: + Version bump (imported -systemd.patch, -systemd-auth.patch and -lastlog- + silent.patch) + + 18 Jan 2014; Mike Frysinger pambase-20120417-r3.ebuild: + Add arm64 love. + + 18 Jan 2014; Mike Frysinger pambase-20120417-r1.ebuild, + pambase-20120417-r3.ebuild, pambase-20120417.ebuild: + Mark m68k/s390/sh stable. + + 14 Jan 2014; Pacho Ramos pambase-20120417-r3.ebuild: + ia64 stable, bug #491034 (thanks to Emeric Maschino for testing) + + 23 Dec 2013; Agostino Sarubbo pambase-20120417-r3.ebuild: + Stable for sparc, wrt bug #491034 + + 23 Dec 2013; Agostino Sarubbo pambase-20120417-r3.ebuild: + Stable for ppc, wrt bug #491034 + + 22 Dec 2013; Agostino Sarubbo pambase-20120417-r3.ebuild: + Stable for ppc64, wrt bug #491034 + + 30 Nov 2013; Markus Meier pambase-20120417-r3.ebuild: + arm stable, bug #491034 + + 17 Nov 2013; Matt Turner pambase-20120417-r3.ebuild: + alpha stable, bug 491034. + + 16 Nov 2013; Pacho Ramos pambase-20120417-r3.ebuild: + amd64/x86 stable, bug #491034 + + 12 Nov 2013; Jeroen Roovers pambase-20120417-r3.ebuild: + Stable for HPPA (bug #491034). + +*pambase-20120417-r3 (27 Oct 2013) + + 27 Oct 2013; Pacho Ramos + +files/pambase-20120417-systemd-auth.patch, +pambase-20120417-r3.ebuild: + Load pam_systemd from system-auth instead of system-login, bug #485470 by + Benjamin Franzke + + 05 Sep 2013; Mike Frysinger pambase-20120417-r2.ebuild: + Mark m68k/s390/sh stable #454388. + + 21 Aug 2013; Samuli Suominen + pambase-20120417-r2.ebuild: + Warn people from enabling weird setup with USE="consolekit systemd" and + having 2 session trackers running at the same time wrt #478258 + + 03 Aug 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for sparc, wrt bug #454388 + + 07 Jul 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for ia64, wrt bug #454388 + + 07 Jul 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for arm, wrt bug #454388 + + 06 Jul 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for alpha, wrt bug #454388 + + 04 Jul 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for ppc64, wrt bug #454388 + + 01 Jul 2013; Jeroen Roovers pambase-20120417-r2.ebuild: + Stable for HPPA (bug #454388). + + 30 Jun 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for ppc, wrt bug #454388 + + 30 Jun 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for x86, wrt bug #454388 + + 30 Jun 2013; Agostino Sarubbo pambase-20120417-r2.ebuild: + Stable for amd64, wrt bug #454388 + + 28 Jun 2013; Alexis Ballier pambase-20101024-r2.ebuild, + pambase-20120417.ebuild, pambase-20120417-r1.ebuild, + pambase-20120417-r2.ebuild: + allow openpam for krb5 + +*pambase-20120417-r2 (15 Jun 2013) + + 15 Jun 2013; Johannes Huber + +files/pambase-20120417-lastlog-silent.patch, +pambase-20120417-r2.ebuild: + Revision bump adds patch to make lastlog messages silent by Dennis Schridde + wrt bug #468798. Acked by Diego Elio Pettenò + on irc. + +*pambase-20120417-r1 (19 Jun 2012) + + 19 Jun 2012; Samuli Suominen + +pambase-20120417-r1.ebuild, +files/pambase-20120417-systemd.patch, + metadata.xml: + Use `usex` from eutils.eclass for defining "varvalue". Support for + pam_systemd.so wrt #372229 by Michał Górny. + + 19 May 2012; Diego E. Pettenò + pambase-20101024-r2.ebuild, pambase-20120417.ebuild: + Nix-out src_test as there are no tests. + + 06 May 2012; Zac Medico pambase-20120417.ebuild: + Add blocker for ! pambase-20101024-r2.ebuild: + keyword ~amd64-fbsd + + 22 Apr 2012; Alexis Ballier pambase-20120417.ebuild: + keyword -*-fbsd for bug #413077 + +*pambase-20120417 (17 Apr 2012) + + 17 Apr 2012; Pawel Hajdan jr + +pambase-20120417.ebuild: + Version bump. + + 28 Jan 2012; Samuli Suominen -pambase-20101024.ebuild, + -pambase-20101024-r1.ebuild: + old + + 28 Jan 2012; Samuli Suominen + pambase-20101024-r2.ebuild: + Stabilize for everyone since this is now same as current stable. + +*pambase-20101024-r2 (28 Jan 2012) + + 28 Jan 2012; Samuli Suominen + +pambase-20101024-r2.ebuild: + Restore "nox11" as pam_ck_connector.so argument because most of the display + managers in tree, including XDM and SLIM, has native ConsoleKit support now. + +*pambase-20101024-r1 (22 Oct 2011) + + 22 Oct 2011; Samuli Suominen + +pambase-20101024-r1.ebuild: + Remove nox11 argument from pam_ck_connector.so wrt #342345 + + 28 Nov 2010; Constanze Hausner + pambase-20090620.1-r1.ebuild, pambase-20100310.ebuild, + pambase-20100925.ebuild, pambase-20101024.ebuild, metadata.xml: + Renamed useflags ssh/kerberos to pam_ssh/pam_krb5 and changed kerberos dep + to >=sys-auth/pam_krb5-4.3 + + 27 Nov 2010; Raúl Porcel pambase-20101024.ebuild: + alpha/ia64/m68k/s390/sh/sparc stable + + 03 Nov 2010; Markus Meier pambase-20101024.ebuild: + arm stable, bug #343099 + + 01 Nov 2010; Jeroen Roovers pambase-20101024.ebuild: + Stable for HPPA PPC (bug #343099). + + 01 Nov 2010; Christian Faulhammer + pambase-20101024.ebuild: + stable x86, bug 343099 + + 30 Oct 2010; Samuli Suominen + pambase-20101024.ebuild: + ppc64 stable wrt #343099 + + 29 Oct 2010; Markos Chandras + pambase-20101024.ebuild: + Stable on amd64 wrt bug #343099 + +*pambase-20101024 (23 Oct 2010) + + 23 Oct 2010; Diego E. Pettenò + +pambase-20101024.ebuild: + Version bump; add pam_loginuid on Linux-PAM for bug #342345. + + 22 Oct 2010; Jeroen Roovers pambase-20100925.ebuild: + Marked ~hppa (bug #329585). + +*pambase-20100925 (25 Sep 2010) + + 25 Sep 2010; Diego E. Pettenò + -pambase-20100819.ebuild, +pambase-20100925.ebuild, metadata.xml: + Version bump (and remove old); the new version adds a minimal USE flag. + + 04 Sep 2010; Raúl Porcel pambase-20100819.ebuild: + Add ~alpha/~ia64 wrt #329585 + + 03 Sep 2010; Diego E. Pettenò + pambase-20090620.1-r1.ebuild, pambase-20100310.ebuild: + Change URI to point to dev.gentoo.org rather than my host. + +*pambase-20100819 (19 Aug 2010) + + 19 Aug 2010; Diego E. Pettenò + -pambase-20100724.ebuild, +pambase-20100819.ebuild: + Bump pambase to fix bug #333393 reported by Simon Alman. + + 02 Aug 2010; Markus Meier pambase-20100724.ebuild: + add ~arm, bug #329585 + +*pambase-20100724 (24 Jul 2010) + + 24 Jul 2010; Diego E. Pettenò + -pambase-20100723.ebuild, +pambase-20100724.ebuild: + Bump to fix pam_krb5 auth login (bug #329599). + + 23 Jul 2010; Diego E. Pettenò metadata.xml: + Update metadata description of USE flags. + +*pambase-20100723 (23 Jul 2010) + + 23 Jul 2010; Diego E. Pettenò + +pambase-20100723.ebuild: + Add a new version that adds support for Kerberos authentication on system + (with Linux-PAM only). + + 15 Apr 2010; Brent Baude pambase-20100310.ebuild: + Marking pambase-20100310 ppc for bug 308075 + + 04 Apr 2010; Raúl Porcel pambase-20100310.ebuild: + alpha/arm/ia64/m68k/s390/sh/sparc stable wrt #308075 + + 30 Mar 2010; Jonathan Callen pambase-20100310.ebuild: + Bump to EAPI=3, add prefix keywords + + 29 Mar 2010; Markus Meier pambase-20100310.ebuild: + amd64 stable, bug #308075 + + 24 Mar 2010; Jeroen Roovers pambase-20100310.ebuild: + Stable for HPPA (bug #308075). + + 18 Mar 2010; Christian Faulhammer + pambase-20100310.ebuild: + stable x86, security bug 308075 + +*pambase-20100310 (10 Mar 2010) + + 10 Mar 2010; Diego E. Pettenò + -pambase-20081028.ebuild, +pambase-20100310.ebuild: + Version bump and remove old version. The new version simply improves on + the system-services stack to be usable with fcron. + + 21 Nov 2009; Raúl Porcel + pambase-20090620.1-r1.ebuild: + alpha/ia64/m68k/s390/sh/sparc stable wrt #284088 + + 09 Oct 2009; Markus Meier + pambase-20090620.1-r1.ebuild: + arm stable, bug #284088 + + 27 Sep 2009; nixnut pambase-20090620.1-r1.ebuild: + ppc stable #284088 + + 26 Sep 2009; Romain Perier + pambase-20090620.1-r1.ebuild: + Stable for amd64 per bug #284088. + + 22 Sep 2009; Jeroen Roovers pambase-20090620.1-r1.ebuild: + Stable for HPPA (bug #284088). + + 16 Sep 2009; Christian Faulhammer + pambase-20090620.1-r1.ebuild: + stable x86, bug 284088 + + 14 Sep 2009; Tom Gall pambase-20090620.1-r1.ebuild: + stable on ppc64, bug #284088 + + 08 Sep 2009; Diego E. Pettenò + -pambase-20090515.ebuild: + Remove old version. + +*pambase-20090620.1-r1 (10 Aug 2009) + + 10 Aug 2009; Diego E. Pettenò + -pambase-20090620.1.ebuild, +pambase-20090620.1-r1.ebuild: + Revision bump to add the portage-utils dependency (without this, Linux-PAM + version is not properly calculated, and tally2 is not used). + +*pambase-20090620.1 (20 Jun 2009) + + 20 Jun 2009; Diego E. Pettenò + -pambase-20090620.ebuild, +pambase-20090620.1.ebuild: + Further pam_tally2 fixes. + +*pambase-20090620 (20 Jun 2009) + + 20 Jun 2009; Diego E. Pettenò + +pambase-20090620.ebuild: + Bump so to enable pam_tall2 properly when building with Linux-PAM-1.1.0. + +*pambase-20090515 (15 May 2009) + + 15 May 2009; Diego E. Pettenò + -pambase-20080318.ebuild, -pambase-20081028-r1.ebuild, + -pambase-20090430.ebuild, +pambase-20090515.ebuild: + Version bump and cleanup old version. The new version only fixes a minor + problem with Gentoo/FreeBSD. + +*pambase-20090430 (30 Apr 2009) + + 30 Apr 2009; Diego E. Pettenò + +pambase-20090430.ebuild: + Add a new pambase version, with a stricter dependency on ConsoleKit and + support for remote sessions as well as local. Should fix bug #260842 (PAM + side). + + 21 Mar 2009; Jeroen Roovers pambase-20081028.ebuild: + Stable for HPPA (bug #261595). + + 17 Mar 2009; Raúl Porcel pambase-20081028.ebuild: + m68k stable wrt #261595, thanks to kolla for testing + + 15 Mar 2009; Brent Baude pambase-20081028.ebuild: + stable ppc64, bug 261595 + + 14 Mar 2009; Raúl Porcel pambase-20081028.ebuild: + arm/ia64/s390/sh/sparc stable wrt #261595 + + 14 Mar 2009; nixnut pambase-20081028.ebuild: + ppc stable #261595 + + 11 Mar 2009; Tobias Klausmann + pambase-20081028.ebuild: + Stable on alpha, bug #261595 + + 08 Mar 2009; Markus Meier pambase-20081028.ebuild: + amd64/x86 stable, bug #261595 + + 07 Mar 2009; Diego E. Pettenò + -pambase-20080730.ebuild, -pambase-20080801.ebuild, + -pambase-20080801-r1.ebuild: + Cleanup old versions. + + 09 Nov 2008; Mike Frysinger + pambase-20081028-r1.ebuild: + Add arm/s390/sh #232691. + +*pambase-20081028-r1 (28 Oct 2008) +*pambase-20081028 (28 Oct 2008) + + 28 Oct 2008; Diego Pettenò + +pambase-20081028.ebuild, +pambase-20081028-r1.ebuild: + Version bump to create the new system-services pam.d file. + +*pambase-20080801-r1 (29 Sep 2008) + + 29 Sep 2008; Diego Pettenò + +pambase-20080801-r1.ebuild: + Add a new revision using EAPI=2. + + 22 Aug 2008; Alexis Ballier pambase-20080801.ebuild: + keyword ~sparc-fbsd + + 10 Aug 2008; Ricardo Mendoza pambase-20080801.ebuild: + Add ~mips, bug #232691 + + 10 Aug 2008; Raúl Porcel pambase-20080801.ebuild: + Add ~ia64 wrt #232691 + + 10 Aug 2008; Tobias Klausmann + pambase-20080801.ebuild: + Keyworded on alpha, bug #232691 + + 02 Aug 2008; Markus Rothe pambase-20080801.ebuild: + It was meant to be ~ppc64... + + 02 Aug 2008; Markus Rothe pambase-20080801.ebuild: + Stable on ppc64; bug #232691 + +*pambase-20080801 (01 Aug 2008) + + 01 Aug 2008; Diego Pettenò metadata.xml, + +pambase-20080801.ebuild: + New pambase with optional support for SHA512-hashed passwords (enabled by + default). This will deprecated sys-auth/pam_sha512. + + 31 Jul 2008; Vlastimil Babka ChangeLog: + Fix distfile size and hashes in Manifest, bug #233462. + + 31 Jul 2008; Javier Villavicencio + pambase-20080730.ebuild: + Keyworded ~x86-fbsd. + +*pambase-20080730 (30 Jul 2008) + + 30 Jul 2008; Diego Pettenò + -pambase-20080723.1.ebuild, +pambase-20080730.ebuild: + Bump to complete fixes for FreeBSD. + +*pambase-20080723.1 (23 Jul 2008) + + 23 Jul 2008; Diego Pettenò + -pambase-20080723.ebuild, +pambase-20080723.1.ebuild: + Version bump with two minor fixes for Gentoo/FreeBSD. + + 23 Jul 2008; Ferris McCormick pambase-20080723.ebuild: + Rekeyword for ~sparc (allow pam_ssh), Bug #232691. + + 23 Jul 2008; Jeroen Roovers pambase-20080723.ebuild: + Marked ~hppa (bug #232691). + +*pambase-20080723 (22 Jul 2008) + + 22 Jul 2008; Diego Pettenò metadata.xml, + +pambase-20080723.ebuild: + Add new pambase version, with added support for sys-auth/pam_ssh. Also + contains fixes for bug #232669 for Gentoo/FreeBSD 7 systems. See bug + #232691 for keywording request. + + 04 Jul 2008; pambase-20080318.ebuild: + Add ~mips, bug #230743 + + 22 Jun 2008; Thomas Anderson + pambase-20080318.ebuild: + amd64 stable, bug #225901 + + 14 Jun 2008; nixnut pambase-20080318.ebuild: + Stable on ppc wrt bug 225901 + + 13 Jun 2008; Brent Baude pambase-20080318.ebuild: + Marking pambase-20080318 ppc64 for bug 225901 + + 13 Jun 2008; Tobias Klausmann + pambase-20080318.ebuild: + Stable on alpha, bug #225901 + + 13 Jun 2008; Raúl Porcel pambase-20080318.ebuild: + ia64/sparc stable wrt #225901 + + 13 Jun 2008; Jeroen Roovers pambase-20080318.ebuild: + Stable for HPPA (bug #225901). + + 11 Jun 2008; Christian Faulhammer + pambase-20080318.ebuild: + stable x86, bug 225901 + + 11 Jun 2008; Diego Pettenò + -pambase-20080305.ebuild: + Remove old version. + + 10 Jun 2008; Alexis Ballier pambase-20080318.ebuild: + keyword ~sparc-fbsd + + 08 Jun 2008; Javier Villavicencio + pambase-20080318.ebuild: + Keyworded ~x86-fbsd. + + 04 Jun 2008; Markus Rothe pambase-20080318.ebuild: + Added ~ppc64; bug #224555 + + 22 Apr 2008; Diego Pettenò metadata.xml, + -pambase-20080306.1.ebuild, -pambase-20080306.2.ebuild, + pambase-20080318.ebuild: + Remove old versions and replace gnome USE fag with gnome-keyring. Closes + bug #218856. + + 12 Apr 2008; Tobias Scherbaum + pambase-20080318.ebuild: + Added ~ppc, bug #212437 + + 24 Mar 2008; Raúl Porcel pambase-20080318.ebuild: + Add ~ia64/~sparc wrt #212437 + +*pambase-20080318 (18 Mar 2008) + + 18 Mar 2008; Diego Pettenò + +pambase-20080318.ebuild: + Add new pambase package that should fix the Gnome Keyring problems in bug + #213578. + + 17 Mar 2008; Santiago M. Mola + pambase-20080306.2.ebuild: + Added ~amd64 + + 15 Mar 2008; Tobias Klausmann + pambase-20080306.2.ebuild: + Keyworded for (~)alpha, bug 212437 + + 13 Mar 2008; Jeroen Roovers pambase-20080306.2.ebuild: + Marked ~hppa (bug #212437). + +*pambase-20080306.2 (06 Mar 2008) + + 06 Mar 2008; Diego Pettenò metadata.xml, + +pambase-20080306.2.ebuild: + Add a new release with pam_mktemp as a dependency. This means a few more + keywords needed, sorry. + + 06 Mar 2008; Raúl Porcel pambase-20080306.1.ebuild: + Add ~alpha/~ia64 + +*pambase-20080306.1 (05 Mar 2008) + + 05 Mar 2008; Diego Pettenò + -pambase-20080306.ebuild, +pambase-20080306.1.ebuild: + Make it work fine on Linux-PAM too. + + 05 Mar 2008; Diego Pettenò + pambase-20080306.ebuild: + Forgot to add to IUSE. + +*pambase-20080306 (05 Mar 2008) + + 05 Mar 2008; Diego Pettenò metadata.xml, + +pambase-20080306.ebuild: + New version of pambase with a passwdqc USE flag to enable use of pam_passwdqc. + + 05 Mar 2008; Ferris McCormick pambase-20080305.ebuild: + Add ~sparc for testing, part of Bug #210770 --- pam still works for me. + +*pambase-20080305 (05 Mar 2008) + + 05 Mar 2008; Diego Pettenò + -pambase-20080301.ebuild, +pambase-20080305.ebuild: + Bump to avoid calling git during ebuild phases. Closes bug #212395. + + 04 Mar 2008; Brent Baude ChangeLog: + keyworded ~arch for ppc64, bug 210769 + + 04 Mar 2008; Brent Baude pambase-20080301.ebuild: + keyworded ~arch for ppc64, bug 210770 + + 04 Mar 2008; Christian Faulhammer + pambase-20080301.ebuild: + keyword ~x86 for bug 210770 + + 03 Mar 2008; Jeroen Roovers pambase-20080301.ebuild: + Marked ~hppa (bug #210770). + + 01 Mar 2008; Diego Pettenò + pambase-20080301.ebuild: + Fix HOMEPAGE. Thanks creidiki. + +*pambase-20080301 (01 Mar 2008) + + 01 Mar 2008; Diego Pettenò + -pambase-20080224.ebuild, +pambase-20080301.ebuild: + Version bump, should fix su(1) problems under FreeBSD. See bug #211895. + +*pambase-20080224 (24 Feb 2008) + + 24 Feb 2008; Diego Pettenò + -pambase-20080221.ebuild, +pambase-20080224.ebuild: + Version bump to fix bug #211123. + + 21 Feb 2008; Diego Pettenò metadata.xml: + Add long description for gnome and consolekit USE flags. + + 21 Feb 2008; Diego Pettenò + pambase-20080221.ebuild: + Forgot to add flags to IUSE. + +*pambase-20080221 (21 Feb 2008) + + 21 Feb 2008; Diego Pettenò + -pambase-20080219.1.ebuild, +pambase-20080221.ebuild: + Bump pambase, now it supports gnome and consolekit USE flags that allows it + to enable by default GNOME keyring (all sessions) and ConsoleKit (local + sessions). + + 20 Feb 2008; Diego Pettenò + pambase-20080219.1.ebuild: + Explitly set DEPEND to empty. + +*pambase-20080219.1 (19 Feb 2008) + + 19 Feb 2008; Diego Pettenò + -pambase-20080219.ebuild, +pambase-20080219.1.ebuild: + New pambase that install system-local-login and system-remote-login. + + 19 Feb 2008; Diego Pettenò + pambase-20080219.ebuild: + Also accept openpam and freebsd/netbsd-pam-modules, and block older + freebsd-pam-modules. + +*pambase-20080219 (19 Feb 2008) + + 19 Feb 2008; Diego Pettenò +metadata.xml, + +pambase-20080219.ebuild: + Initial import, pambase package provides the basic configuration files for + PAM (either Linux-PAM or OpenPAM). diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/Manifest b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/Manifest new file mode 100644 index 0000000000..85eedb563e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/Manifest @@ -0,0 +1,25 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA256 + +AUX pambase-20120417-lastlog-silent.patch 694 SHA256 9bce9de7831fcafaee0c5f56b28ed91d4e1974bef806f50b38cca82189f81782 SHA512 3bcef6d9e97cf38df079675ffdffaf233a185bbb09bf79930c81b8b7b802247de0f0bfb9e69d935bce7a7297f544f1c7abc199224e7a536cdfe606f2c0217500 WHIRLPOOL a4db8e5ab534cfc80d9452165dc492853f6fa717025dc49daab4c51847ea03a584ad6a44317804f56361e8916cab0d897bd8d8f065c31afd0ae22df5d8eaf367 +AUX pambase-20120417-systemd-auth.patch 937 SHA256 27d6d03273818922ee2d1de28bbce496b88fbdea7363743bd3e80a9233a9ae02 SHA512 0d78a7dd4851bccf95bb3f92c095c4fc4e7fbbc077c1369797aa230e21763ecb6d087c17bc22c93adeaa695305179d54d838f2e4fe25e9ff16c683fb1edbb2bf WHIRLPOOL c38bdb6b37c885c2b07b59966ae77ec572d89be1ff6a35cc715a8f20e386c8f5471687a30049a1a94c64927d60d8c52dbc09744f153ddd2bdc053461d7bf35c2 +AUX pambase-20120417-systemd.patch 608 SHA256 888f05068801f11cb49988a3da64f658782f0056410fdb7d68d240a7d1f619ff SHA512 c06d4e35cae11b1156ba32051a4f25a4551857081e9a723f5c0b48758859d7794de94889eb91b19424b49bd4fd5509d34cba943d7a7bbc89f4339a771f29f754 WHIRLPOOL 0336ca519f528e3a0ac840d9da84cc7f28b420ee2864090dac459fd163962e251aa83e11bfd8d02bc7a8a313bac92598df19fb1278dd98a167942cbbca692de2 +DIST pambase-20101024.tar.bz2 3201 SHA256 89d60dd598d3da0ce1d1bcd7dc325f6c55002a1d4a7d27f9bb024f6732e9fba4 SHA512 8d2a89b38d94d2e423a033ea6922c0a0039a0fb64d60c05991d877b4fa893954723fe1c1763f3f67ed6fbc3639282a4ee1d76824f7f29025b6050632a6984b6f WHIRLPOOL 644965507d1f537c357a7020c13282d9de4131a6cf72e589b1e750e3b86a2185b9a882d0b3f865145a86e1ef613e4b92998be53734aefb6d6d8a69f65de806a4 +DIST pambase-20120417.tar.bz2 3361 SHA256 3fde3ff7714b3722b45545da36fdde6ca95a55d1b0a8cfb23666ec0de3ec5871 SHA512 7a666eb67f6484e536ecb070402036bcfdd137aced27df3f08b136d06eee5c13a6dc14aa93ea09e94c7f31e5a98db97dbaccd0c46af24b57028247de3a7cd9fe WHIRLPOOL 323edb9ef488a0ba562ef279d4acfb682540bf87838be9a3319ad2029ba1465d015fdf94c3192e24517ae9f0ed264e38d17aba65934211bd7b39bf309ee12540 +DIST pambase-20140313.tar.bz2 3417 SHA256 70f11281975eb1d7b14f36a16d2b9eff78099a246aeda96e4f8c667b2574b2a4 SHA512 76dd2a70947dac9573d47b81764ebe4f829bfd38d59c007e698a52c70757fa88525f510c14a1f474c58e3d33cb421ff61aa4ed1aae54497456004eff7494bfc8 WHIRLPOOL e9aac79b37c76af4389d193cb4eb79ad4372e25520a3f6bba6b473948999f1ac2ade00930180a4b9f47cdd7a458d1a174bd15ccf0a94130d216118d7d76485a9 +EBUILD pambase-20101024-r2.ebuild 3014 SHA256 b272693995d3a8f7b3df911e2088fa9a0db29d3836f09f4f461994ac5408e8e6 SHA512 e9b7bec4d03cec178783704b7907e3b0988be7c698e976e87f5df5386d0661da8bc3cfd647941c33aac4c6859cad00366fccc5b1f3d6885032df8338806375d6 WHIRLPOOL a9959b69c34541ac54b8a6e33e5e9981bfc22923577d6bfc35cdd008ea513d08d17fa43e3f97c02b96a6597dc0e1f7ebd40d4301328e5e88ae5b066598eb8173 +EBUILD pambase-20120417-r3.ebuild 3633 SHA256 8ce9b1c6da9fe73b49cfe5c020e2498786801dddaf859d2ef6568cba745a425f SHA512 b95f45f3636ac25c22ca66aebd1e4d1a907300f67bd0b78d0bf9253c01830c02e1d28706a07a1f0e4995bb519d107b7dc7680457092c1719cd7b1551bd119e72 WHIRLPOOL c0eb0c3ee63762e903836a34769de4556e58ce5b22c2e3bc38f8bdedb66c583b5dfc74388af8ee6428718f6c06220d4cfb2b8c6b354296633a861848fc1fc1d7 +EBUILD pambase-20140313.ebuild 3414 SHA256 935a78dc207d4dbf6157d2feb20e54b552d36db4ea1f339f9133d7ca3455762b SHA512 b728d4ebce191d704441f421c1159be1d77cc5f02aada57d68bc0aa3172b5d4cbce406ac90ecf7f75bf5347d007b44721cd7493bdd003d5d6773d094f915200f WHIRLPOOL 5013b89d783dd37ec40d0dff9266a5e9fcd9b4346796c1524ee30318ce0b702a937336dee1dc94b584328edc09f226cdbca9d65186e6f72f862dfaa32942d21b +MISC ChangeLog 20383 SHA256 676206e9193ad01a0736f1cf00d2dbbf7f845a17aab7da4e8ba9cbac85c68e53 SHA512 635bbf92544e0f0aa0b5b47911ca0f8e197246e1e782c572eaaa34effd8181a168987097375a266a7ff040f0b487c935d89ed3576c6f6e5ecaf0fa3b2a19c90c WHIRLPOOL 341e0dba145e7c6ee5921cdad069cc9947a9c6a51d19ea5f8153120c0690273ec4b87ec07d8d0c619424961854bc6437ce29410d1c34e186a9cc1c6d2b4527a6 +MISC metadata.xml 3794 SHA256 fbddb3cd938b849feff7cc84fdad0d0b67b905a3ae97526047287208b098392c SHA512 ea6d2c31478a6394fb635dfaf100306a9429a645163a8859aa85056cf7805aa2fb57e7f20529b5ad3e0e4a45655cf45c6265786a640617d68a0438fabf43f784 WHIRLPOOL 534af71fe9c1ef2757d39e447d18730fdd5d4ffc762e9bde9ce09c2a507abd65c34c483abc20822a5e57ebdb8bb0b86e837337b46c3d14615aca7eabd776ffc7 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.22 (GNU/Linux) + +iQEcBAEBCAAGBQJTIcBVAAoJEEdUh39IaPFNhZIH/jHp40YNt+V9z2pHvFGifdF/ +2vVMkXB8yR3ShHWCsJUylWeCnHUbSloRz05CzmMeinGDH7W091u1Mx/DRbtnScCi +RGtbuz0XYklWJpJPf7Hct+te9Lofpf2hOIdGvGnb6XTeGGaoOw2HMka/FHp2s+45 +qpuMy+4RHxremWyD7O2u50kjaz+hQykFF1b3wW6KKLdB7lAQB+ky8DP4pEKkZu3e +PwuC3bet/L7Z0grPiF3n3qUPuA6uAhWwuM83iB41prbgLRoBrtJZ6FrT7scTDOIN +uBX9HJrdnsquoS3TVT8OGx+5etA0/30j9e3/Ftz8+ZPQsaUpmf+Ru/H1k0ZF8JM= +=XJhJ +-----END PGP SIGNATURE----- diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-lastlog-silent.patch b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-lastlog-silent.patch new file mode 100644 index 0000000000..79266a740b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-lastlog-silent.patch @@ -0,0 +1,20 @@ +--- pambase-20120417/login.in.orig 2012-11-21 14:31:49.031948988 +0100 ++++ pambase-20120417/login.in 2012-11-21 14:32:41.172330601 +0100 +@@ -3,4 +3,6 @@ + + account include system-local-login + password include system-local-login ++ ++session optional pam_lastlog.so DEBUG + session include system-local-login +--- pambase-20120417/system-login.in.orig 2012-11-21 14:31:42.232160039 +0100 ++++ pambase-20120417/system-login.in 2012-11-21 14:35:20.738025880 +0100 +@@ -41,7 +41,7 @@ + session required pam_env.so DEBUG + #endif + #if HAVE_LASTLOG +-session optional pam_lastlog.so DEBUG ++session optional pam_lastlog.so silent DEBUG + #endif + session include system-auth + #if HAVE_CONSOLEKIT diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-sssd.patch b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-sssd.patch new file mode 100644 index 0000000000..842ec42eeb --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-sssd.patch @@ -0,0 +1,39 @@ +diff -ur pambase-20140313.orig/system-auth.in pambase-20140313/system-auth.in +--- pambase-20140313.orig/system-auth.in 2014-03-13 07:13:15.000000000 -0700 ++++ pambase-20140313/system-auth.in 2016-05-02 12:57:35.437730031 -0700 +@@ -7,7 +7,8 @@ + #if HAVE_KRB5 + auth KRB5_CONTROL pam_krb5.so KRB5_PARAMS + #endif +-auth required pam_unix.so try_first_pass LIKEAUTH nullok DEBUG ++auth sufficient pam_sss.so use_first_pass ++auth sufficient pam_unix.so try_first_pass LIKEAUTH nullok DEBUG + /* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */ + auth optional pam_permit.so + +@@ -16,6 +17,7 @@ + #endif + account required pam_unix.so DEBUG + /* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */ ++account [default=bad success=ok user_unknown=ignore] pam_sss.so + account optional pam_permit.so + + #if HAVE_CRACKLIB +@@ -27,7 +29,8 @@ + #if HAVE_KRB5 + password KRB5_CONTROL pam_krb5.so KRB5_PARAMS + #endif +-password required pam_unix.so try_first_pass UNIX_AUTHTOK nullok UNIX_EXTENDED_ENCRYPTION DEBUG ++password sufficient pam_unix.so try_first_pass UNIX_AUTHTOK nullok UNIX_EXTENDED_ENCRYPTION DEBUG ++password sufficient pam_sss.so use_authtok + /* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */ + password optional pam_permit.so + +diff -ur pambase-20140313.orig/system-session.inc pambase-20140313/system-session.inc +--- pambase-20140313.orig/system-session.inc 2014-03-13 07:13:15.000000000 -0700 ++++ pambase-20140313/system-session.inc 2016-05-02 12:57:59.723883487 -0700 +@@ -23,3 +23,4 @@ + #endif + + session optional pam_permit.so ++session optional pam_sss.so diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-systemd-auth.patch b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-systemd-auth.patch new file mode 100644 index 0000000000..99c38e7847 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-systemd-auth.patch @@ -0,0 +1,26 @@ +diff -u pambase-20120417.old/system-auth.in pambase-20120417/system-auth.in +--- pambase-20120417.old/system-auth.in 2013-10-27 15:58:21.766193297 +0100 ++++ pambase-20120417/system-auth.in 2013-10-27 16:01:10.614555766 +0100 +@@ -35,3 +35,7 @@ + session optional pam_ssh.so + #endif + #include "system-session.inc" ++ ++#if HAVE_SYSTEMD ++-session optional pam_systemd.so ++#endif +Sólo en pambase-20120417: system-auth.in~ +diff -u pambase-20120417.old/system-login.in pambase-20120417/system-login.in +--- pambase-20120417.old/system-login.in 2013-10-27 15:58:21.766193297 +0100 ++++ pambase-20120417/system-login.in 2013-10-27 15:59:42.032316285 +0100 +@@ -47,9 +47,6 @@ + #if HAVE_CONSOLEKIT + -session optional pam_ck_connector.so nox11 + #endif +-#if HAVE_SYSTEMD +--session optional pam_systemd.so +-#endif + #if HAVE_GNOME_KEYRING + session optional pam_gnome_keyring.so auto_start + #endif +Sólo en pambase-20120417: system-login.in~ diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-systemd.patch b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-systemd.patch new file mode 100644 index 0000000000..047fb41c85 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/files/pambase-20120417-systemd.patch @@ -0,0 +1,29 @@ +http://bugs.gentoo.org/372229 + +--- Makefile ++++ Makefile +@@ -28,6 +28,10 @@ + PAMFLAGS += -DHAVE_CONSOLEKIT=1 + endif + ++ifeq "$(SYSTEMD)" "yes" ++PAMFLAGS += -DHAVE_SYSTEMD=1 ++endif ++ + ifeq "$(GNOME_KEYRING)" "yes" + PAMFLAGS += -DHAVE_GNOME_KEYRING=1 + endif +--- system-login.in ++++ system-login.in +@@ -45,7 +45,10 @@ + #endif + session include system-auth + #if HAVE_CONSOLEKIT +-session optional pam_ck_connector.so nox11 ++-session optional pam_ck_connector.so nox11 ++#endif ++#if HAVE_SYSTEMD ++-session optional pam_systemd.so + #endif + #if HAVE_GNOME_KEYRING + session optional pam_gnome_keyring.so auto_start diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/metadata.xml b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/metadata.xml new file mode 100644 index 0000000000..7a35775161 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/metadata.xml @@ -0,0 +1,84 @@ + + + + pam + + pam-bugs@gentoo.org + + + + Enable pam_cracklib module on system authentication stack. This + produces warnings when changing password to something easily + crackable. It requires the same USE flag to be enabled on + sys-libs/pam or system login might be impossible. + + + Enable pam_ck_connector module on local system logins. This + allows for console logins to make use of ConsoleKit + authorization. + + + Use pam_systemd module to register user sessions in the systemd + control group hierarchy. + + + Enable pam_gnome_keyring module on system login stack. This + enables proper Gnome Keyring access to logins, whether they are + done with the login shell, a Desktop Manager or a remote login + systems such as SSH. + + + Enable debug information logging on syslog(3) for all the + modules supporting this in the system authentication and system + login stacks. + + + Enable pam_passwdqc module on system auth stack for password + quality validation. This is an alternative to pam_cracklib + producing warnings, rejecting or providing example passwords + when changing your system password. It is used by default by + OpenWall GNU/*/Linux and by FreeBSD. + + + Enable pam_mktemp module on system auth stack for session + handling. This module creates a private temporary directory for + the user, and sets TMP and TMPDIR accordingly. + + + Enable pam_ssh module on system auth stack for authentication + and session handling. This module will accept as password the + passphrase of a private SSH key (one of ~/.ssh/id_rsa, + ~/.ssh/id_dsa or ~/.ssh/identity), and will spawn an ssh-agent + instance to cache the open key. + + + Switch Linux-PAM's pam_unix module to use sha512 for passwords + hashes rather than MD5. This option requires + >=sys-libs/pam-1.0.1 built against + >=sys-libs/glibc-2.7, if it's built against an + earlier version, it will silently be ignored, and MD5 hashes + will be used. All the passwords changed after this USE flag is + enabled will be saved to the shadow file hashed using SHA512 + function. The password previously saved will be left + untouched. Please note that while SHA512-hashed passwords will + still be recognised if the USE flag is removed, the shadow file + will not be compatible with systems using an earlier glibc + version. + + + Enable pam_krb5 module on system auth stack, as an alternative + to pam_unix. If Kerberos authentication succeed, only pam_unix + will be ignore, and all the other modules will proceed as usual, + including Gnome Keyring and other session modules. It requires + sys-libs/pam as PAM implementation. + + + Disables the standard PAM modules that provide extra information + to users on login; this includes pam_tally (and pam_tally2 for + Linux PAM 1.1 and later), pam_lastlog, pam_motd and other + similar modules. This might not be a good idea on a multi-user + system but could reduce slightly the overhead on single-user + non-networked systems. + + + diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/pambase-20120417-r4.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/pambase-20120417-r4.ebuild new file mode 100644 index 0000000000..2819751ca8 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/pambase/pambase-20120417-r4.ebuild @@ -0,0 +1,116 @@ +# Copyright 1999-2014 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-auth/pambase/pambase-20120417-r3.ebuild,v 1.11 2014/01/18 05:16:11 vapier Exp $ + +EAPI=5 +inherit eutils + +DESCRIPTION="PAM base configuration files" +HOMEPAGE="http://www.gentoo.org/proj/en/base/pam/" +SRC_URI="http://dev.gentoo.org/~flameeyes/${PN}/${P}.tar.bz2 + http://dev.gentoo.org/~phajdan.jr/${PN}/${P}.tar.bz2" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 -sparc-fbsd -x86-fbsd ~x86-freebsd ~amd64-linux ~ia64-linux ~x86-linux" +IUSE="consolekit cracklib debug gnome-keyring minimal mktemp pam_krb5 pam_ssh passwdqc selinux +sha512 systemd" + +RESTRICT=binchecks + +MIN_PAM_REQ=1.1.3 + +RDEPEND=" + || ( + >=sys-libs/pam-${MIN_PAM_REQ} + ( sys-auth/openpam || ( sys-freebsd/freebsd-pam-modules sys-netbsd/netbsd-pam-modules ) ) + ) + consolekit? ( >=sys-auth/consolekit-0.4.5_p2012[pam] ) + cracklib? ( >=sys-libs/pam-${MIN_PAM_REQ}[cracklib] ) + gnome-keyring? ( >=gnome-base/gnome-keyring-2.32[pam] ) + mktemp? ( sys-auth/pam_mktemp ) + pam_krb5? ( + || ( >=sys-libs/pam-${MIN_PAM_REQ} sys-auth/openpam ) + >=sys-auth/pam_krb5-4.3 + ) + pam_ssh? ( sys-auth/pam_ssh ) + passwdqc? ( >=sys-auth/pam_passwdqc-1.0.4 ) + selinux? ( >=sys-libs/pam-${MIN_PAM_REQ}[selinux] ) + sha512? ( >=sys-libs/pam-${MIN_PAM_REQ} ) + systemd? ( >=sys-apps/systemd-44-r1[pam] ) + !