Changes in / [d128a3c:bc7e5a7]

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• postlfs/security/shadow.xml (modified) (3 diffs)

introduction/welcome/changelog.xml

@@ -43 +43 @@
     -->
     <listitem>
+      <para>January 12th, 2022</para>
+      <itemizedlist>
+        <listitem>
+          <para>[pierre] - Change PAM configuration files of shadow
+          applications so that only the types really used appear, and
+          use system-password for the password type when needed. Fixes
+          <ulink url="&blfs-ticket-root;15950">#15950</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>January 11th, 2022</para>
       <itemizedlist>

postlfs/security/shadow.xml

@@ -462 +462 @@
 
       <sect4>
+        <title>'chpasswd' and 'newusers'</title>
+
+<screen role="root"><userinput>cat &gt; /etc/pam.d/chpasswd &lt;&lt; "EOF"
+<literal># Begin /etc/pam.d/chpasswd
+
+# always allow root
+auth      sufficient  pam_rootok.so
+
+# include system auth and account settings
+auth      include     system-auth
+account   include     system-account
+password  include     system-password
+
+# End /etc/pam.d/chpasswd</literal>
+EOF
+
+sed -e /chpasswd/newusers/ /etc/pam.d/chpasswd >/etc/pam.d/newusers</userinput></screen>
+      </sect4>
+
+      <sect4>
         <title>'chage'</title>
 
@@ -470 +490 @@
 auth      sufficient  pam_rootok.so
 
-# include system auth, account, and session settings
+# include system auth and account settings
 auth      include     system-auth
 account   include     system-account
-session   include     system-session
-
-# Always permit for authentication updates
-password  required    pam_permit.so
 
 # End /etc/pam.d/chage</literal>
@@ -483 +499 @@
 
       <sect4>
-        <title>Other common programs</title>
-        <!--<title>'chfn', 'chgpasswd', 'chgpasswd', 'chsh', 'groupadd', 'groupdel',
-        'groupmems', 'groupmod', 'newusers', 'useradd', 'userdel' and
-        'usermod'</title>-->
-
-<screen role="root"><userinput>for PROGRAM in chfn chgpasswd chpasswd chsh groupadd groupdel \
-               groupmems groupmod newusers useradd userdel usermod
+        <title>Other shadow utilities</title>
+
+<screen role="root"><userinput>for PROGRAM in chfn chgpasswd chsh groupadd groupdel \
+               groupmems groupmod useradd userdel usermod
 do
     install -v -m644 /etc/pam.d/chage /etc/pam.d/${PROGRAM}