[oe-commits] Ming Liu : libpam: add a new 'nullok_secure' option support to pam_unix

[git at git.openembedded.org]

Module: openembedded-core.git
Branch: master
Commit: 10cdd66fe800cffe3f2cbf5c95550b4f7902a311
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=10cdd66fe800cffe3f2cbf5c95550b4f7902a311

Author: Ming Liu <ming.liu at windriver.com>
Date:   Thu Jul 18 10:04:22 2013 +0800

libpam: add a new 'nullok_secure' option support to pam_unix

Debian patch to add a new 'nullok_secure' option to pam_unix, which
accepts users with null passwords only when the applicant is connected
from a tty listed in /etc/securetty.

The original pam_unix.so was configured with nullok_secure in
meta/recipes-extended/pam/libpam/pam.d/common-auth, but no such code
exists actually.

The patch set comes from:
http://patch-tracker.debian.org/patch/series/view/pam/1.1.3-7.1/054_pam_security_abstract_securetty_handling
http://patch-tracker.debian.org/patch/series/view/pam/1.1.3-7.1/055_pam_unix_nullok_secure

Signed-off-by: Ming Liu <ming.liu at windriver.com>
Signed-off-by: Saul Wold <sgw at linux.intel.com>

---

 .../pam-security-abstract-securetty-handling.patch |  200 ++++++++++++++++++
 .../pam/libpam/pam-unix-nullok-secure.patch        |  222 ++++++++++++++++++++
 meta/recipes-extended/pam/libpam_1.1.6.bb          |    4 +-
 3 files changed, 425 insertions(+), 1 deletions(-)

Diff:   http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=10cdd66fe800cffe3f2cbf5c95550b4f7902a311