# ChangeLog for sys-auth/pambase
-# Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-auth/pambase/ChangeLog,v 1.139 2014/05/08 22:37:12 vapier Exp $
+# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-auth/pambase/ChangeLog,v 1.140 2015/02/14 05:02:12 vapier Exp $
+
+*pambase-20150213 (14 Feb 2015)
+
+ 14 Feb 2015; Mike Frysinger <vapier@gentoo.org> +pambase-20150213.ebuild,
+ metadata.xml:
+ Move pam_gnome_keyring after pam_selinux #511600 by Jason Zaman. Add
+ USE=securetty and USE=nullok options #539508.
08 May 2014; Mike Frysinger <vapier@gentoo.org> pambase-20140313.ebuild:
Drop old elog message as it applies to versions more than 5 years old #440582
DIST pambase-20101024.tar.bz2 3201 SHA256 89d60dd598d3da0ce1d1bcd7dc325f6c55002a1d4a7d27f9bb024f6732e9fba4 SHA512 8d2a89b38d94d2e423a033ea6922c0a0039a0fb64d60c05991d877b4fa893954723fe1c1763f3f67ed6fbc3639282a4ee1d76824f7f29025b6050632a6984b6f WHIRLPOOL 644965507d1f537c357a7020c13282d9de4131a6cf72e589b1e750e3b86a2185b9a882d0b3f865145a86e1ef613e4b92998be53734aefb6d6d8a69f65de806a4
DIST pambase-20120417.tar.bz2 3361 SHA256 3fde3ff7714b3722b45545da36fdde6ca95a55d1b0a8cfb23666ec0de3ec5871 SHA512 7a666eb67f6484e536ecb070402036bcfdd137aced27df3f08b136d06eee5c13a6dc14aa93ea09e94c7f31e5a98db97dbaccd0c46af24b57028247de3a7cd9fe WHIRLPOOL 323edb9ef488a0ba562ef279d4acfb682540bf87838be9a3319ad2029ba1465d015fdf94c3192e24517ae9f0ed264e38d17aba65934211bd7b39bf309ee12540
DIST pambase-20140313.tar.bz2 3417 SHA256 70f11281975eb1d7b14f36a16d2b9eff78099a246aeda96e4f8c667b2574b2a4 SHA512 76dd2a70947dac9573d47b81764ebe4f829bfd38d59c007e698a52c70757fa88525f510c14a1f474c58e3d33cb421ff61aa4ed1aae54497456004eff7494bfc8 WHIRLPOOL e9aac79b37c76af4389d193cb4eb79ad4372e25520a3f6bba6b473948999f1ac2ade00930180a4b9f47cdd7a458d1a174bd15ccf0a94130d216118d7d76485a9
+DIST pambase-20150213.tar.xz 3480 SHA256 cf1ea75e29c33bfddbc6f8519b860a6f0710345e936966014f59fe3e93ab7f44 SHA512 3b49dd3f06a0942fcced95527f62cbc4ff723c48dc896a0b57ecd19736d2892db974c782be3fe24e8e6e17294869a772ae9ee6118af96dfdc7a3a6561dc3f3e5 WHIRLPOOL 493084f04032b93d8021e84bdbcf6c339ec6c928b468aa59556f3d3d10403e4557316d516ea303d66422df13150c7c19761d9979aba32e5e4c9fe7e198c733a2
EBUILD pambase-20101024-r2.ebuild 3014 SHA256 b272693995d3a8f7b3df911e2088fa9a0db29d3836f09f4f461994ac5408e8e6 SHA512 e9b7bec4d03cec178783704b7907e3b0988be7c698e976e87f5df5386d0661da8bc3cfd647941c33aac4c6859cad00366fccc5b1f3d6885032df8338806375d6 WHIRLPOOL a9959b69c34541ac54b8a6e33e5e9981bfc22923577d6bfc35cdd008ea513d08d17fa43e3f97c02b96a6597dc0e1f7ebd40d4301328e5e88ae5b066598eb8173
EBUILD pambase-20120417-r3.ebuild 3633 SHA256 8ce9b1c6da9fe73b49cfe5c020e2498786801dddaf859d2ef6568cba745a425f SHA512 b95f45f3636ac25c22ca66aebd1e4d1a907300f67bd0b78d0bf9253c01830c02e1d28706a07a1f0e4995bb519d107b7dc7680457092c1719cd7b1551bd119e72 WHIRLPOOL c0eb0c3ee63762e903836a34769de4556e58ce5b22c2e3bc38f8bdedb66c583b5dfc74388af8ee6428718f6c06220d4cfb2b8c6b354296633a861848fc1fc1d7
EBUILD pambase-20140313.ebuild 2864 SHA256 61be700778194e22124152dc5e6e43457a389f90db151138b620248d94057e9a SHA512 7c37d35f72ef5c69584c41fee66b8bc8287b91963850674b7668de3555576530d44f3dbf00730e4eafcf8b422d2f260c9a9ca59d354ea814d62aa6d19a687e3f WHIRLPOOL 3f58811f8281b833f176245114ff264ac77339f4d8e086c6e76d810d7e0fda6fdbf67ccc03639762a61cd0b0b01c775e755c5046ec88628936e5bde57ca2523c
-MISC ChangeLog 20556 SHA256 f22c9acc3dfb41dd047e47fb3579c61e9d0062ba31c46cb8cd9d51a87ba67439 SHA512 0cf423fdf55d7f45deee9dd99aa0297ea4f25839cda21a36c2da85ead4e38283c8793c280ce2598806e6ff1f9312381cf55fcc9a49ee5e6550954c524daae2b5 WHIRLPOOL d55c0d92a3afe9d62875b4b87fd2bd73888d8b4e15134352f0b83d5056d3cc1c4d6fd97c906b54566d141d9020d31e51329226ae6908d016696834d681717e04
-MISC metadata.xml 3794 SHA256 fbddb3cd938b849feff7cc84fdad0d0b67b905a3ae97526047287208b098392c SHA512 ea6d2c31478a6394fb635dfaf100306a9429a645163a8859aa85056cf7805aa2fb57e7f20529b5ad3e0e4a45655cf45c6265786a640617d68a0438fabf43f784 WHIRLPOOL 534af71fe9c1ef2757d39e447d18730fdd5d4ffc762e9bde9ce09c2a507abd65c34c483abc20822a5e57ebdb8bb0b86e837337b46c3d14615aca7eabd776ffc7
+EBUILD pambase-20150213.ebuild 2922 SHA256 742be965cb2d394f6415ad076b73331460fb453c93518a0ec84375e7fe60aac0 SHA512 65d33233a92871102b1bfc69caf31d535a416feb94e6eecd594659aefaed971bbcb1116398e650a40eee6d32c942ee8e93b6777656fc9d217bbac14e1784a9c5 WHIRLPOOL c2bf1dd899f475603e709c59bd3f17f03bb3b3117266d8c68aa01e61dc9f59b6da6fe36bb3fedb31c6b77c9b299db29c670e1e4a1c5b88b4cdd00e401e0c824c
+MISC ChangeLog 20801 SHA256 8490ee545656cfe609f175b0f34f4dfab66365e6ec20ce90bde1456975bd8f9e SHA512 56d51dd669e936186e59875f74c2a908a38062625844988586d830c19bc416378e333462a44c2ba0c4cb64111662eba29189e9b4a446abd2625d614befd5a896 WHIRLPOOL 0a8d00762bc5c44c50aada5a1507da89b2ad1a7b2d1b06f971c1b089ee1d53570c77c2b8af69c4566d49f453b38d1da23c7420fdd01d5cafb0b0813b144e432d
+MISC metadata.xml 4188 SHA256 27e17bc993a79a92c4be3015f7d25d673760f10fb1cc5f8a45dcca1a39ba51b4 SHA512 2189a35b298777c05b0cbb73be4b1f3e51b8dfd58c8bab7dde8f18062c5258503266d992b5adc31977e9f66e1e996ecfdc32e4662dacf41dcedfa3fb1b291a05 WHIRLPOOL 6be7f345a57c8c60905d9b6ed11b9c9630eddf039137bedcd166af1f39043d706b29de48c2448947c28afd7abf45b5258c192104b854d0c0ace9adb60e2b8f26
-----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.22 (GNU/Linux)
+Version: GnuPG v2
-iQIcBAEBCAAGBQJTbAcfAAoJEPGu1DbS6WIADyUP/jK/O4ORoSkG3MZKvdSBYxxl
-yj6JuTdBoNCo9weUpgoYeZalDZyYxOi000nlT6z+lnM3+tpyuipGSF906/LEaShk
-K/ndWXTievOXQQ7g44Sn35vCk/Q7dtTjzat4WKIn9/ww6/YLSv+zw+VceljmeCQN
-I+ND5ODMfUh0/EHkicgQGtboNO1RXHAAzAaPsK3FFOI/BQApUsst7c5yD72EDrXr
-U/xD7/me3YBq9mfrcGdhqGHxprsvgVOBzQ5RZ1hAQxL7gJ6SdJcmuknig0FdDfzM
-rHGOXj/OoVk9+ZgqLD3qJMFfHDHpKpAK7hdGav65q63sY9N6lJDC+O9kTmIC55Md
-T6ByJ7zAgCVGaC88GuFW3Tr3o1ve9q/CaG3U2ncKV1PTAI0sGhVLJzdWaqxhGfbF
-lfb5Xop5D7yRX0cZX/0s1pZ6V7rBgGL/QJAmcJe/ljl7F+T1GCy7Q5qwwV4wGnCK
-daOqs0OQq/u/xdxOtmFSIPKFoyTnywxSWUZp3cbqpPVOJYM/WtxNW5SLkoBXhb/s
-fTVdgEZisORZ17mrgQ4pyUO8Z4qWlldsdQCNNwMQ/5O0GoXHC2sfVPfDBA2Hw8th
-CmMCRtP6vwACptB429lei7vOlWFSGTkKH4Es8UQPGGAJ1WpXnlaYFUjhuo5OMvm6
-b8/xWWxmzUKfO2r6u+5W
-=h/47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+=oLu7
-----END PGP SIGNATURE-----
system but could reduce slightly the overhead on single-user
non-networked systems.
</flag>
+ <flag name="nullok">
+ Enable the nullok option with the pam_unix module. This allows
+ people to login with blank passwords.
+ </flag>
+ <flag name="securetty">
+ Enable pam_securetty module in the login stack. Not generally
+ relevant anymore as the login stack only refers to local logins
+ and local terminals imply secure access in the first place.
+ </flag>
</use>
</pkgmetadata>
--- /dev/null
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-auth/pambase/pambase-20150213.ebuild,v 1.1 2015/02/14 05:02:12 vapier Exp $
+
+EAPI=5
+inherit eutils
+
+DESCRIPTION="PAM base configuration files"
+HOMEPAGE="http://www.gentoo.org/proj/en/base/pam/"
+SRC_URI="http://dev.gentoo.org/~vapier/${P}.tar.xz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 -sparc-fbsd -x86-fbsd ~x86-freebsd ~amd64-linux ~ia64-linux ~x86-linux"
+IUSE="consolekit cracklib debug gnome-keyring minimal mktemp +nullok pam_krb5 pam_ssh passwdqc securetty selinux +sha512 systemd"
+
+RESTRICT=binchecks
+
+MIN_PAM_REQ=1.1.3
+
+RDEPEND="
+ || (
+ >=sys-libs/pam-${MIN_PAM_REQ}
+ ( sys-auth/openpam || ( sys-freebsd/freebsd-pam-modules sys-netbsd/netbsd-pam-modules ) )
+ )
+ consolekit? ( >=sys-auth/consolekit-0.4.6[pam] )
+ cracklib? ( sys-libs/pam[cracklib] )
+ gnome-keyring? ( >=gnome-base/gnome-keyring-2.32[pam] )
+ mktemp? ( sys-auth/pam_mktemp )
+ pam_krb5? (
+ || ( >=sys-libs/pam-${MIN_PAM_REQ} sys-auth/openpam )
+ >=sys-auth/pam_krb5-4.3
+ )
+ pam_ssh? ( sys-auth/pam_ssh )
+ passwdqc? ( >=sys-auth/pam_passwdqc-1.0.4 )
+ selinux? ( sys-libs/pam[selinux] )
+ sha512? ( >=sys-libs/pam-${MIN_PAM_REQ} )
+ systemd? ( >=sys-apps/systemd-204[pam] )
+ !<sys-apps/shadow-4.1.5-r1
+ !<sys-freebsd/freebsd-pam-modules-6.2-r1
+ !<sys-libs/pam-0.99.9.0-r1"
+DEPEND="app-portage/portage-utils
+ app-arch/xz-utils"
+
+src_compile() {
+ local implementation linux_pam_version
+ if has_version sys-libs/pam; then
+ implementation=linux-pam
+ local ver_str=$(qatom $(best_version sys-libs/pam) | cut -d ' ' -f 3)
+ linux_pam_version=$(printf "0x%02x%02x%02x" ${ver_str//\./ })
+ elif has_version sys-auth/openpam; then
+ implementation=openpam
+ else
+ die "PAM implementation not identified"
+ fi
+
+ use_var() {
+ local varname=$(echo "$1" | tr '[:lower:]' '[:upper:]')
+ local usename=${2-$(echo "$1" | tr '[:upper:]' '[:lower:]')}
+ local varvalue=$(usex ${usename})
+ echo "${varname}=${varvalue}"
+ }
+
+ emake \
+ GIT=true \
+ $(use_var debug) \
+ $(use_var cracklib) \
+ $(use_var passwdqc) \
+ $(use_var consolekit) \
+ $(use_var systemd) \
+ $(use_var GNOME_KEYRING gnome-keyring) \
+ $(use_var selinux) \
+ $(use_var nullok) \
+ $(use_var mktemp) \
+ $(use_var pam_ssh) \
+ $(use_var securetty) \
+ $(use_var sha512) \
+ $(use_var KRB5 pam_krb5) \
+ $(use_var minimal) \
+ IMPLEMENTATION=${implementation} \
+ LINUX_PAM_VERSION=${linux_pam_version}
+}
+
+src_test() { :; }
+
+src_install() {
+ emake GIT=true DESTDIR="${ED}" install
+}
+
+pkg_postinst() {
+ if use systemd && use consolekit; then
+ ewarn "You are enabling 2 session trackers, ConsoleKit and systemd-logind"
+ ewarn "at the same time. This is not recommended setup to have, please"
+ ewarn "consider disabling either USE=\"consolekit\" or USE=\"systemd\."
+ fi
+}