| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: pam_mount | Distribution: openSUSE Leap 16.0 |
| Version: 2.20 | Vendor: openSUSE |
| Release: lp160.1.1 | Build date: Thu Aug 17 16:04:07 2023 |
| Group: System/Libraries | Build host: reproducible |
| Size: 275425 | Source RPM: pam_mount-2.20-lp160.1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://inai.de/projects/pam_mount/ | |
| Summary: A PAM Module that can Mount Volumes for a User Session | |
This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as (semi-)diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code to make sure certain volumes are set up properly because often they need more than just a mount call, such as encrypted volumes. This includes SMB/CIFS, FUSE, dm-crypt and LUKS.
GPL-2.0-or-later AND LGPL-2.1-or-later
* Thu Aug 17 2023 Jan Engelhardt <[email protected]>
- Update to release 2.20
* Tokenization support for user principal names
(usernames in the form of [email protected])
* Added a volume option to control empty password behavior
* Tue Dec 27 2022 Ludwig Nussel <[email protected]>
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
* Mon Oct 10 2022 Ferdinand Thiessen <[email protected]>
- Update to 2.19
* Added support for LUKS detached headers
* Sat Mar 12 2022 Callum Farmer <[email protected]>
- Add tmpfiles.d conf for /run/pam_mount
* Wed Jan 12 2022 Josef Möllers <[email protected]>
- Use the %_pam_moduledir macro in pam_mount.spec in order to
have the package follow UsrMerge.
[bsc#1190954, pam_mount.spec]
* Wed Nov 03 2021 Josef Möllers <[email protected]>
- Make symlinks between /sbin and /usr/sbin conditional as they
are not applicable under UsrMerge.
[pam_mount.spec]
* Mon Jan 04 2021 Jan Engelhardt <[email protected]>
- Update to release 2.18
* Cure mount.crypt recursively executing itself with -t crypt
* Allow luserconf to be placed outside home directory
* Tue Dec 01 2020 Marcin Bajor <[email protected]>
- Restore symlinks for crypt_LUKS
Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1179229
* Thu Nov 26 2020 Jan Engelhardt <[email protected]>
- Restore symlinks while util-linux is pending
* Fri Nov 20 2020 Jan Engelhardt <[email protected]>
- Update to release 2.17
* Abandon /sbin as a location
- Drop pam_mount-2.16-fix-luks2-mount.patch (merged)
* Tue Sep 15 2020 Jan Engelhardt <[email protected]>
- Demote Recommends to Suggests.
- Trim old specfile constructs.
* Mon Nov 25 2019 Josef Möllers <[email protected]>
- Systemd-user must be prevented from invoking pam_mount.so in the
"session" management group eg by invoking pam_succeed_if.so to
skip the pam_mount entry when systemd-user is calling
pam_{open,close}_session.
[bsc#1153630,
bsc1153630-prevent-systemd-from-calling-pam_mount.patch]
* Sat Nov 17 2018 Matthias Fehring <[email protected]>
- Add pam_mount-2.16-fix-luks2-mount.patch:
fix mounting of LUKS2 volumes
[fate#326986, bsc#1123309, pam_mount-2.16-fix-luks2-mount.patch]
* Fri Sep 30 2016 [email protected]
- Update to new upstream release 2.16
* the sgrp match is now implemented by asking for the user's
group list instead of asking for the group's user list. (The
latter can easily be orders of magnitude larger, which is why
some LDAP servers may be configured not to return the list at
all.)
* Mon Dec 01 2014 [email protected]
- Update to new upstream release 2.15
* Use new helper= option in util-linux, allowing umount.crypt to be
called on umount.
* Fix a crash in ehd_log due to lack of va_start call
* Tue Sep 23 2014 [email protected]
- Drop gpg-offline build-time requirement; this is now handled by
the local source validator
* Tue Aug 27 2013 [email protected]
- Update to new upstream release 2.14
* Bugfix: pam_mount printed "ehd_logctl: feature 1 is already zero"
at each login (bnc#811119)
* pmt-ehd: avoid miscalculating blockdev size obtained from BLKGETSIZE64
* correctly mkdir mountpoint if requested, and only remove mountpoint
if actually created
* restore DOMAIN_USER and DOMAIN_NAME expansion in mount options
* add an "allow_discard" option for volumes to enable trim support
on the block device without enabling it for the filesystem.
* config: regexes can now be used for the <user> and <group>
configuration options
- Remove pam_mount-38a15cc3-ehd_logctl-debug.diff (applied upstream)
* Sun Feb 03 2013 [email protected]
- Suppress useless debug output on using pam_mount
* Sun Dec 09 2012 [email protected]
- Avoid running fdupes on /etc
- Depend on gpg-offline only for openSUSE >= 12.3
- Do require ofl and fd0ssh now, as they are now separate
installables starting with 12.3
* Thu Nov 29 2012 [email protected]
- Verify GPG signature.
* Mon Feb 13 2012 [email protected]
- license update: LGPL-2.1+ and GPL-2.0+
See the COPYING file. There are GPL-2.0+ components aggregated
* Thu Dec 15 2011 [email protected]
- Update to new upstream release 2.13
* pam_mount: restore keyfile support for non-crypto mounts
* Thu Oct 06 2011 [email protected]
- Update to new upstream release 2.12 (bnc#722480)
* mount.crypt: restore support for files >= 4 GB
* Tue Aug 30 2011 [email protected]
- Fix "error: incorrect format: missing { after %" on run of %post
* Wed Aug 10 2011 [email protected]
- Add commit 2f8daad from upstream - call umount.crypt directly
from pam_mount.so while mount.crypt is having no support for
utab (bnc#671276); also add commit eb20a26 for better wording of
this situation.
* Sun Aug 07 2011 [email protected]
- Update to new upstream release 2.11
* Allow specifying CIFS/NCP/NFS <volume>s without a
"server" attribute (this allows AD integration via pam_winbind)
* Added a handful of diagnostics to umount.crypt to determine
failure to find vfsmounts
* Use /run directory for our variadic data
* pmt-ehd: Exclusively create LUKS partitions from now on
* Fri Apr 15 2011 [email protected]
- Update to new upstream release 2.10
* loop-linux: wait for loop device deallocation to succeed
* crypto: avoid premature attempt of unloading the loop device
* mtab: cope with mtab-less systems in staleness check
* mount.crypt: reduce mtab-less message from error to warning
* Thu Apr 07 2011 [email protected]
- Update to new upstream release 2.9
* Support for mount --bind/--move
* mount.crypt: warn about unwritable /etc/mtab
- %VERSION should have been %%VERSION in post
- Run spec-beautifier
* Mon Feb 14 2011 [email protected]
- do not recommend hxtools, it's a huge collection of random stuff
(ranging from mc syntax files to xfs repair tools)
* Sat Jan 15 2011 [email protected]
- update to version 2.8
* shipped fd0ssh and ofl were removed; the original ones from
hxtools are required
* fix an improper refcount drop (rhbz#622930)
* %(shell EXPR) is now activated and usable from the global config
file
* mountpoint creation has been redone and now works better
* remove mountpoint early when mount failed
* fix truncation of groups on FUSE mounts
* invocation of mount.fuse was broken due to missing space in
config
* Fri Aug 27 2010 [email protected]
- remove unnecessary Requires(pre)
- do not needlessy run autoreconf
- update to version 2.5
* new mount.crypt program that now uses libcryptsetup rather than
the cryptsetup binary
* HXformat2 is now used. This invalidates old constructs like
%(before=\"-o\"...) which need to be replaced by new syntax
(see /usr/share/doc/packages/pam_mount/changelog.txt)
* fusermount now called with secondary groups initialized
* add support for keyfile passthru using -ofsk_cipher=none
* Fri Aug 20 2010 [email protected]
- rdconf: do not warn about missing fskeyhash when no fskey specified;
(bnc#626127); http://bugs.debian.org/580430
* Tue Jun 01 2010 [email protected]
- use full paths in wrapper scripts (bnc#607200)
* Wed Apr 07 2010 [email protected]
- update to version 1.34
* decrease login refcount on logout when no volumes are defined
- tag provided mount.{crypt,encfs13} wrappers as #!/bin/bash (not
/bin/sh) because they use [[/]] and =~; use ${0##*/} over
extra calling basename.
* Sun Jan 10 2010 [email protected]
- update to version 1.33
* avoid multi-free of auth token when pam_mount is rerun in a
PAM stack
* avoid NULL dereference when there is an empty line in mtab
- adjust BuildRequires as upstream really requires
- package baselibs.conf
- convert PreReq to Requires(pre,post)
- remove CFLAGS="$RPM_OPT_FLAGS", it is implicit
- use _smp_mflags
* Fri Dec 18 2009 [email protected]
- update to version 1.32
* luserconf: fix skipping luser volume mounting
* config: allow arbitrary source paths for tmpfs
* fix a potential strlen(NULL) on login
* umount.crypt: do not remove entry from /etc/mtab twice
* luserconf: delayed parsing and mounting of luserconf volumes
* documentation fixes
* Thu Nov 19 2009 [email protected]
- backport some code to fix the sudo crash (bnc#544154)
* Mon Jul 27 2009 [email protected]
- update to version 1.27
* mounting: stdout from mount programs is now discarded
* config: do parse <cryptumount> elements from .xml
* mount: pass fstype to NFS mount program
* config: map "nfs4" fstype to NFSMOUNT
* pam_mount: PAM function return code audit
* config: warn about ignored "server" attribute in <volume>
* config: print error message on config file syntax error
* Wed Jun 24 2009 [email protected]
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
* Mon May 11 2009 [email protected]
- update to version 1.25
- fix splitting of "NTDOMAIN\username" strings
- config: broaden variable expansion to resolve a case where it
did not do expected expansion with AUFS
- mount.crypt: write options, not "defaults" to /etc/mtab
- mount.crypt: keysize truncation must happen later
- mount.crypt: pass -o ro/rw down to mount program
- mount.crypt: support for -o remount
- mount.crypt: support overriding keysize
- mount.crypt: must pass -s option to cryptsetup
- mount.crypt: add "Deprecated Mount options" section to manpage
- pam_mount: fix a double free that can happen when stale entries are in cmtab
- pam_mount: first-time overriding of mntoptions failed to work
- pmvarrun: do not segfault when no username is specified (corner-case)
- pmvarrun: recognize internal _PMT_DEBUG_LEVEL env var
- mtab: automatically ignore and remove stale entries from cmtab
- pam_mount: fix unexpected termination after pam_mount ran
- doc: list support contacts in man page
* Wed Feb 18 2009 [email protected]
- update to version 1.18
* lot of fixes and new Features.
see /usr/share/doc/packages/pam_mount/changelog.txt
for details
* Thu Jan 29 2009 [email protected]
- reduce buildRequires after libHX changes
* Mon Jan 12 2009 [email protected]
- fix <logout> feature (bnc#461333)
* enable automatic wait, term and kill. Required to terminate
pulseaudio
* add <logout> during convert to converted config
- remove passwdehd. (CVE-2008-5138) (bnc#465303)
does not work at all with new config format.
- recognize required and deny options for luserconf
(bnc#463524)
* Tue Nov 04 2008 [email protected]
- fix failing convert script. (bnc#438842)
* Mon Oct 27 2008 [email protected]
- remove lsof callback from convert script. lsof is not needed
in this version of pam_mount. (bnc#438842)
* Tue Oct 14 2008 [email protected]
- fix checking deny options
* Mon Oct 13 2008 [email protected]
- replace also options which are specified in a volume
(bnc#433845)
* Thu Sep 25 2008 [email protected]
- fix reading the key from harddisk.
- using losteup command directly (bnc#427343)
* Fri Sep 05 2008 [email protected]
- version 0.47
- mount.crypt: add missing null command to conform to sh syntax
(SF bug #2089446)
- conf: fix printing of strings when luser volume options were not ok
- conf: re-add luserconf security checks
- add support for encfs 1.3.x (1.4.x already has been in for long)
- conf: add the "noroot" attribute for <volume> to force mounting with
the unprivileged user account (required for FUSE filesystems)
- replace fixed-size buffers and arrays with dynamic ones (complete)
(obsolets pam_mount-0.45-bump-max-par.diff)
* Mon Sep 01 2008 [email protected]
- version 0.45
* fix double-freeing the authentication token
* use ofl instead of lsof/fuser
* kill-on-logout support (terminate processes that would stand in the
way of unmounting)
(remove suse patch which supports this)
* mount.crypt: auto-detect necessity for running losetup
* Mon Aug 18 2008 [email protected]
- version 0.44
- mount.crypt: fix option slurping
- properly handle simple sgrp config items
- src: correct error check in run_lsof()
- conf: check that slash follows home tilde
- conf: wildcard inadvertently matched root sometimes
* Mon Aug 11 2008 [email protected]
- version 0.43
- remove davfs support
- pass fsck definition from pam_mount.conf.xml to mount.crypt
- document pam_mount.conf.xml defaults
- do not call fsck from within pam_mount for encrypted devices,
let mount.crypt do it
* Mon Jun 23 2008 [email protected]
- version 0.41
- add missing pgrp/sgrp attribute handling for simple user control
- mount.crypt: handle arbitrary argument order
- correct extended sgrp handling
- manpages: add missing description for <fsck>, and reorder <path>
- the documentation in pam_mount.conf.xml has been reworked and
split off into pam_mount.conf(5).
- extensive user selection for <volume> (revised)
- case-insensitive matching for user, pgrp, sgrp
- fixed segfault when more than one volume was defined
- extended user selection for <volume>
- fix an unwanted inversion for handling <options allow=" (nonempty) ">
- store per-volume option list in ordered form --
essentially fixes the problem of "user" (implies noeexec)
overriding "exec"
- fix null pointer deref (from new UID/GID range support)
- mount.crypt uses normal sleep from coreutils again
- truecrypt 5.x is not supported because the truecrypt CLI component
that pam_mount requires was removed
- <volume> tag in pam_mount.conf.xml supports UID and GID ranges now
- fix HAVE_LIBCRYPTO regression;
crypto was always disabled even if openssl present
- remove pam_mount-0.35-fix-configure.dif (is upstream now)
* Tue Apr 22 2008 [email protected]
- use upstream fix for bnc#381292
* Fri Apr 18 2008 [email protected]
- fix configure (bnc#381292)
* Thu Apr 10 2008 [email protected]
- added baselibs.conf file to build xxbit packages
for multilib support
* Mon Apr 07 2008 [email protected]
- update to version 0.35
- mount.crypt: fix loop device detection
- mount.crypt: wait for dm devices to show up
- fixed: mount flag and value were one argument
- pmvarrun: support unprivileged mode
- Support for SSH keyboard-interactive authenticated volumes
- documentation updates
* Wed Apr 02 2008 [email protected]
- update to version 0.32
- notify about unknown options in /etc/pam.d/*
- support "debug" option for pam_mount in /etc/pam.d/*
- mount.crypt: detect loop devices by major number
- Fixed parsing of old-style pam_mount.conf with spaces in group names,
copy-and-paste typos and a missing return value. Added workaround for
CIFS volumes within NFS mounts with "root_squash" option.
- allow --keyfile to be used for non-LUKS too
- luksClose is the same as Remove (in umount.crypt)
- convert "local" fstype entries from old configuration format correctly.
- fixed parsing of old pam_mount.conf with spaces in group names
- fixed: When no volumes were to be mounted, return value
was not PAM_SUCCESS.
* Mon Oct 08 2007 [email protected]
- update to version 0.29
* pam_mount switched to an XML configuration.
* added truecrypt support
* add an "invert" attribute
* split group matching into multiple attributes
* properly detect loop64 support
* NT domain placeholders
* Implement the "soft_try_pass" option
* add "nullok" option
* --keyfile option added to mount.crypt
* Fri Sep 21 2007 [email protected]
- remove the loopdevice for the image too
[#326802]
* Thu Sep 20 2007 [email protected]
- add required dependencies [#326802]
* Wed Apr 04 2007 [email protected]
- Don't package mount_ehd, it's only for
OpenBSD. Fixes 256214.
* Thu Mar 29 2007 [email protected]
- add zlib-devel to BuildRequires
* Tue Mar 13 2007 [email protected]
- fix reference counting of pmvarrun app
[#252243]
* Tue Jan 23 2007 [email protected]
- fix umount encrypted homedirectories
[#237793]
* Thu Jan 18 2007 [email protected]
- disable debug
- increase MAX_PAR to be able to read longer keys
* Fri Jan 12 2007 [email protected]
- add patch to kill all remaining user processes before
unmounting crypted partition
(pam_mount-0.18-umount-home-dir.dif)
* Fri Dec 08 2006 [email protected]
- use UID of specified user for owner change of mount point
(pam_mount-chownuid-fix.diff)
* Tue Sep 12 2006 [email protected]
- Update to 0.18
* fixes memory corruptions, zero termination, segfaults
* A crash on x86_64 has been fixed. pam_mount now changes
to the root directory before attempting to (un)mount
* Mon Jul 31 2006 [email protected]
- Update to version 0.16
bugfix release
* Wed Jan 25 2006 [email protected]
- converted neededforbuild to BuildRequires
* Thu Dec 22 2005 [email protected]
- Update to version 0.10.0
* Mon Dec 19 2005 [email protected]
- added symlinks to package
* Mon Jul 11 2005 [email protected]
- Update to version 0.9.25
* Mon Apr 11 2005 [email protected]
- Update to version 0.9.22 [Bug #65110]
* Thu Jan 15 2004 [email protected]
- Build as user
- Add pam-devel to neededforbuild
* Mon Jan 12 2004 [email protected]
- Update to version 0.9.9
* Mon Oct 27 2003 [email protected]
- Update to version 0.9.6 [Bug #32216]
* Wed May 28 2003 [email protected]
- Initial package
/etc/security/pam_mount.conf.xml /usr/lib/tmpfiles.d/pam_mount.conf /usr/lib64/security/pam_mount.so /usr/sbin/mount.crypt /usr/sbin/mount.crypt_LUKS /usr/sbin/mount.crypto_LUKS /usr/sbin/pmt-ehd /usr/sbin/pmvarrun /usr/sbin/umount.crypt /usr/sbin/umount.crypt_LUKS /usr/sbin/umount.crypto_LUKS /usr/share/doc/packages/pam_mount /usr/share/doc/packages/pam_mount/LICENSE.GPL2 /usr/share/doc/packages/pam_mount/LICENSE.GPL3 /usr/share/doc/packages/pam_mount/LICENSE.LGPL2 /usr/share/doc/packages/pam_mount/LICENSE.LGPL3 /usr/share/doc/packages/pam_mount/bugs.rst /usr/share/doc/packages/pam_mount/examples /usr/share/doc/packages/pam_mount/examples/convert_keyhash.pl /usr/share/doc/packages/pam_mount/examples/convert_pam_mount_conf.pl /usr/share/doc/packages/pam_mount/faq.txt /usr/share/doc/packages/pam_mount/news.rst /usr/share/doc/packages/pam_mount/options.txt /usr/share/doc/packages/pam_mount/todo.txt /usr/share/man/man5/pam_mount.conf.5.gz /usr/share/man/man8/mount.crypt.8.gz /usr/share/man/man8/mount.crypt_LUKS.8.gz /usr/share/man/man8/mount.crypto_LUKS.8.gz /usr/share/man/man8/pam_mount.8.gz /usr/share/man/man8/pmt-ehd.8.gz /usr/share/man/man8/pmvarrun.8.gz /usr/share/man/man8/umount.crypt.8.gz /usr/share/man/man8/umount.crypt_LUKS.8.gz /usr/share/man/man8/umount.crypto_LUKS.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Dec 11 23:52:26 2024