* The "Banonet" release.

* debian/login.pam: Really ignore pam_selinux.so failures when the module do
    not exist. Closes: #528673
This commit is contained in:
nekral-guest
2009-05-16 10:15:38 +00:00
parent f3ef07b8c7
commit a97b3a382b
2 changed files with 9 additions and 1 deletions

8
debian/changelog vendored
View File

@@ -1,3 +1,11 @@
shadow (1:4.1.4-3) unstable; urgency=low
* The "Banonet" release.
* debian/login.pam: Really ignore pam_selinux.so failures when the module do
not exist. Closes: #528673
-- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sat, 16 May 2009 12:11:15 +0200
shadow (1:4.1.4-2) unstable; urgency=low
* The "Banon" release.

2
debian/login.pam vendored
View File

@@ -93,6 +93,6 @@ session optional pam_mail.so standard
# SELinux needs to intervene at login time to ensure that the process
# starts in the proper default security context. Only sessions which are
# intended to run in the user's context should be run after this.
session required pam_selinux.so open
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
# When the module is present, "required" would be sufficient (When SELinux
# is disabled, this returns success.)