enable build of deprecated pam_cracklib but switch to configuring use of pam_pwquality [release 1.4.0-2mamba;Thu Oct 15 2020]

pam-system-auth

@@ -8,7 +8,7 @@ auth        required      pam_deny.so
 #account     sufficient    pam_winbind.so
 account     required      pam_unix.so
 
-password    required      pam_cracklib.so retry=3 minlen=4 dcredit=2 ucredit=2
+password    required      pam_pwquality.so retry=3 minlen=4 dcredit=2 ucredit=2
 password    sufficient    pam_unix.so shadow md5 use_authtok 
 password    required      pam_deny.so
 

pam-system-auth-noshell

@@ -5,7 +5,7 @@ auth       required      pam_deny.so
 
 account    required      pam_unix.so
 
-password   required      pam_cracklib.so retry=3 minlen=4 dcredit=2 ucredit=2
+password   required      pam_pwquality.so retry=3 minlen=4 dcredit=2 ucredit=2
 password   sufficient    pam_unix.so shadow md5 use_authtok 
 password   required      pam_deny.so
 

pam.spec

@@ -9,8 +9,8 @@
 %define        unix2_ver   2.6
 
 Name:          pam
-Version:       1.3.1
+Version:       1.4.0
-Release:       1mamba
+Release:       2mamba
 Summary:       Utilities for monitoring your system and processes on your system
 Group:         System/Libraries
 Vendor:        openmamba
@@ -54,12 +54,15 @@ BuildRequires: linuxdoc-tools >= 0.9.21
 BuildRequires: flex
 BuildRequires: libfl-devel
 BuildRequires: gettext-devel
+BuildRequires: elinks
 #BuildRequires: libprelude-devel >= 0.9.14
 BuildRequires: libtirpc-devel >= 0.2.2-2mamba
 Requires:      libtirpc >= 0.2.2-2mamba
 Requires:      systemd-core
-Requires(post):pwdutils
+# For pam_pwquality replacing pam_cracklib
-Requires(post):setup
+Requires:      libpwquality
+Requires(post): pwdutils
+Requires(post): setup
 Requires(post): lib%{name} = %{?epoch:%epoch:}%{version}-%{release}
 Obsoletes:     pam-doc
 BuildRoot:     %{_tmppath}/%{name}-%{version}-root
@@ -95,17 +98,20 @@ Requires:      %{name} = %{version}-%{release}
 PAM (Pluggable Authentication Modules) is a system security tool which allows system administrators to set authentication policy without having to recompile programs which do authentication.
 This package contains the documentation files in html, pdf and postscript formats.
 
+%debug_package
+
 %prep
 %setup -q -a4 -a5 -a9 -a10 -n linux-pam-%{version}
 %patch1 -p1
 %patch2 -p1
 %patch3 -p1
 %patch4 -p1
+./autogen.sh
 
 %build
-./autogen.sh
 %configure \
    --disable-prelude \
+   --enable-cracklib \
    --with-mailspool=/var/mail \
    --libdir=/%{_lib} \
    --with-db-uniquename=db51
@@ -122,6 +128,7 @@ This package contains the documentation files in html, pdf and postscript format
 %makeinstall \
    includedir=%{_includedir}/security \
    namespaceddir=%{buildroot}%{_sysconfdir}/security \
+   servicedir=%{_unitdir} \
    sepermitlockdir=%{buildroot}%{_localstatedir}/run/sepermit
 
 install -D -m 644 %{S:2} %{buildroot}%{_sysconfdir}/pam.d/other
@@ -155,6 +162,10 @@ ln -s system-auth %{buildroot}%{_sysconfdir}/pam.d/password-auth
 %clean
 [ "%{buildroot}" != / ] && rm -rf %{buildroot}
 
+%preun
+%systemd_preun pam_namespace
+:
+
 %post
 if [ $1 -ge 1 ]; then
    groupadd audio -g %{group_audio} 2>/dev/null
@@ -179,7 +190,12 @@ session     optional      pam_systemd.so
 _EOF
    }
 fi
-exit 0
+%systemd_post pam_namespace
+:
+
+%postun
+%systemd_postun pam_namespace
+:
 
 %post -n libpam
 /sbin/ldconfig
@@ -189,6 +205,10 @@ exit 0
 /sbin/ldconfig
 :
 
+%posttrans
+sed -i "s|pam_cracklib.so|pam_pwquality.so|" %{_sysconfdir}/pam.d/system-auth{,-noshell}
+:
+
 %files -f Linux-PAM.lang
 %defattr(-,root,root)
 %dir %{_sysconfdir}/pam.d
@@ -199,15 +219,17 @@ exit 0
 %config %{_sysconfdir}/security/*.conf
 %{_sysconfdir}/environment
 %{_sysconfdir}/security/namespace.init
+%{_unitdir}/pam_namespace.service
 %attr(2755,root,shadow) %{_sbindir}/unix_chkpwd
+%{_sbindir}/faillock
 %{_sbindir}/unix_update
-%{_sbindir}/pam_tally
+%{_sbindir}/pam_namespace_helper
-%{_sbindir}/pam_tally2
+#%{_sbindir}/pam_tally
+#%{_sbindir}/pam_tally2
 %{_sbindir}/pam_timestamp_check
 %{_sbindir}/mkhomedir_helper
 %{_mandir}/*/*
 %{_docdir}/Linux-PAM/*
-#%doc pam.conf-example pam_env.conf-example
 
 %files -n libpam
 %defattr(-,root,root)
@@ -240,6 +262,12 @@ exit 0
 #%endif
 
 %changelog
+* Thu Oct 15 2020 Silvan Calarco <silvan.calarco@mambasoft.it> 1.4.0-2mamba
+- enable build of deprecated pam_cracklib but switch to configuring use of pam_pwquality
+
+* Wed Sep 09 2020 Automatic Build System <autodist@mambasoft.it> 1.4.0-1mamba
+- automatic version update by autodist
+
 * Sat Jul 28 2018 Silvan Calarco <silvan.calarco@mambasoft.it> 1.3.1-1mamba
 - update to 1.3.1
 
@@ -375,10 +403,10 @@ exit 0
 * Mon Jul 18 2005 Silvan Calarco <silvan.calarco@mambasoft.it> 0.78-11qilnx
 - force update with new rpm version so that %%config works correctly
 
-* Thu May 17 2005 Silvan Calarco <silvan.calarco@mambasoft.it> 0.78-10qilnx
+* Tue May 17 2005 Silvan Calarco <silvan.calarco@mambasoft.it> 0.78-10qilnx
 - fix in the upgrade script
 
-* Thu May 17 2005 Silvan Calarco <silvan.calarco@mambasoft.it> 0.78-9qilnx
+* Tue May 17 2005 Silvan Calarco <silvan.calarco@mambasoft.it> 0.78-9qilnx
 - release for upgrade test only
 
 * Tue May 17 2005 Silvan Calarco <silvan.calarco@mambasoft.it> 0.78-8qilnx