[Pkg-shadow-commits] r2924 - debian/trunk/debian

[Nicolas FRANÇOIS]

Author: nekral-guest
Date: 2009-05-16 10:15:38 +0000 (Sat, 16 May 2009)
New Revision: 2924

Modified:
   debian/trunk/debian/changelog
   debian/trunk/debian/login.pam
Log:
  * The "Banonet" release.
  * debian/login.pam: Really ignore pam_selinux.so failures when the module do
    not exist. Closes: #528673


Modified: debian/trunk/debian/changelog
===================================================================
--- debian/trunk/debian/changelog	2009-05-16 10:15:20 UTC (rev 2923)
+++ debian/trunk/debian/changelog	2009-05-16 10:15:38 UTC (rev 2924)
@@ -1,3 +1,11 @@
+shadow (1:4.1.4-3) unstable; urgency=low
+
+  * The "Banonet" release.
+  * debian/login.pam: Really ignore pam_selinux.so failures when the module do
+    not exist. Closes: #528673
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois at centraliens.net>  Sat, 16 May 2009 12:11:15 +0200
+
 shadow (1:4.1.4-2) unstable; urgency=low
 
   * The "Banon" release.

Modified: debian/trunk/debian/login.pam
===================================================================
--- debian/trunk/debian/login.pam	2009-05-16 10:15:20 UTC (rev 2923)
+++ debian/trunk/debian/login.pam	2009-05-16 10:15:38 UTC (rev 2924)
@@ -93,6 +93,6 @@
 # SELinux needs to intervene at login time to ensure that the process
 # starts in the proper default security context. Only sessions which are
 # intended to run in the user's context should be run after this.
-session required pam_selinux.so open
+session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
 # When the module is present, "required" would be sufficient (When SELinux
 # is disabled, this returns success.)