* The "Banonet" release.
* debian/login.pam: Really ignore pam_selinux.so failures when the module do
not exist. Closes: #528673
This commit is contained in:
8
debian/changelog
vendored
8
debian/changelog
vendored
@@ -1,3 +1,11 @@
|
||||
shadow (1:4.1.4-3) unstable; urgency=low
|
||||
|
||||
* The "Banonet" release.
|
||||
* debian/login.pam: Really ignore pam_selinux.so failures when the module do
|
||||
not exist. Closes: #528673
|
||||
|
||||
-- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sat, 16 May 2009 12:11:15 +0200
|
||||
|
||||
shadow (1:4.1.4-2) unstable; urgency=low
|
||||
|
||||
* The "Banon" release.
|
||||
|
||||
2
debian/login.pam
vendored
2
debian/login.pam
vendored
@@ -93,6 +93,6 @@ session optional pam_mail.so standard
|
||||
# SELinux needs to intervene at login time to ensure that the process
|
||||
# starts in the proper default security context. Only sessions which are
|
||||
# intended to run in the user's context should be run after this.
|
||||
session required pam_selinux.so open
|
||||
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
|
||||
# When the module is present, "required" would be sufficient (When SELinux
|
||||
# is disabled, this returns success.)
|
||||
|
||||
Reference in New Issue
Block a user