Bug 184771 – app-crypt/luks-tools-0.0.12 has a PAM file incompatible with PAM 0.99 (pam_stack/pam_timestamp)

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Mike Auty (RETIRED) 2007-07-09 19:53:28 UTC]

Hiya, just a quick note to say that luks-tools-0.12 still installs a pam.d file that contains a pam_stack line, which should probably be updated according to http://www.gentoo.org/proj/en/base/pam/upgrade-0.99.xml.  If you need any more information, just ask...  5:)

[Comment 1 Diego Elio Pettenò (RETIRED) 2007-07-09 20:26:36 UTC]

Far from being a "minor" problem, it's a major one, pam 0.78 has to die.

[Comment 2 Diego Elio Pettenò (RETIRED) 2007-07-09 20:30:29 UTC]

The pam.d file installed by luks is also using pam_timestamp that is not present in PAM 0.99. Sounds like whoever wrote it used RedHat or Fedora.

It also seems to be pretty much broken from a security point of view as it allows any account without taking into consideration nologin or other restrictions.

[Comment 3 Jakub Moc (RETIRED) 2007-09-04 00:24:32 UTC]

Well, ping!

[Comment 4 Doug Goldstein (RETIRED) 2007-09-18 19:52:48 UTC]

Created attachment 131242 [details, diff]
luks-tools-0.0.12-pam-config.patch

Updates pam config to what I believe it correct

[Comment 5 Hanno Böck 2007-09-21 19:38:45 UTC]

added patch, thanks