[packages/openssh] - add support for recording user's login uid to the process attribute

zawadaa zawadaa at pld-linux.org
Tue May 14 16:24:23 CEST 2013


commit 530329bf8f877266bfd35f55bb553b2e07eadb96
Author: Andrzej Zawadzki <zawadaa at pld-linux.org>
Date:   Tue May 14 16:23:39 2013 +0200

    - add support for recording user's login uid to the process attribute

 openssh.spec  | 7 ++++++-
 opensshd.pamd | 1 +
 2 files changed, 7 insertions(+), 1 deletion(-)
---
diff --git a/openssh.spec b/openssh.spec
index 86381d6..7c556ad 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -35,7 +35,7 @@ Summary(ru.UTF-8):	OpenSSH - свободная реализация прото
 Summary(uk.UTF-8):	OpenSSH - вільна реалізація протоколу Secure Shell (SSH)
 Name:		openssh
 Version:	6.2p1
-Release:	1
+Release:	2
 Epoch:		2
 License:	BSD
 Group:		Applications/Networking
@@ -621,6 +621,11 @@ install -p %{SOURCE2} sshd.init
 %{__sed} -i -e '/ecdsa/d' sshd.init
 %endif
 
+%if %{without audit}
+# remove recording user's login uid to the process attribute
+%{__sed} -i -e '/pam_loginuid.so/d' sshd.pam
+%endif
+
 install -p sshd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd
 cp -p sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd
 cp -p %{SOURCE4} $RPM_BUILD_ROOT/etc/sysconfig/sshd
diff --git a/opensshd.pamd b/opensshd.pamd
index 5295659..1dd3461 100644
--- a/opensshd.pamd
+++ b/opensshd.pamd
@@ -6,6 +6,7 @@ account		required	pam_nologin.so
 account		required 	pam_access.so
 account		include		system-auth
 password	include		system-auth
+session		required	pam_loginuid.so
 session		optional	pam_keyinit.so force revoke
 session		include		system-auth
 session		optional	pam_mail.so
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/openssh.git/commitdiff/530329bf8f877266bfd35f55bb553b2e07eadb96



More information about the pld-cvs-commit mailing list