Initial commit
This commit is contained in:
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/chage
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/chage
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/chfn
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/chfn
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/chgpasswd
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/chgpasswd
|
||||
@@ -0,0 +1,11 @@
|
||||
# Begin /etc/pam.d/chpasswd
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
password include system-password
|
||||
|
||||
# End /etc/pam.d/chpasswd
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/chsh
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/chsh
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/groupadd
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/groupadd
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/groupdel
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/groupdel
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/groupmems
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/groupmems
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/groupmod
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/groupmod
|
||||
@@ -0,0 +1,40 @@
|
||||
# Begin /etc/pam.d/login
|
||||
|
||||
# Set failure delay before next prompt to 3 seconds
|
||||
auth optional pam_faildelay.so delay=3000000
|
||||
|
||||
# Check to make sure that the user is allowed to login
|
||||
auth requisite pam_nologin.so
|
||||
|
||||
# Check to make sure that root is allowed to login
|
||||
# Disabled by default. You will need to create /etc/securetty
|
||||
# file for this module to function. See man 5 securetty.
|
||||
#auth required pam_securetty.so
|
||||
|
||||
# Additional group memberships - disabled by default
|
||||
#auth optional pam_group.so
|
||||
|
||||
# include system auth settings
|
||||
auth include system-auth
|
||||
|
||||
# check access for the user
|
||||
account required pam_access.so
|
||||
|
||||
# include system account settings
|
||||
account include system-account
|
||||
|
||||
# Set default environment variables for the user
|
||||
session required pam_env.so
|
||||
|
||||
# Set resource limits for the user
|
||||
session required pam_limits.so
|
||||
|
||||
# Display the message of the day - Disabled by default
|
||||
#session optional pam_motd.so
|
||||
|
||||
# Check user's mail - Disabled by default
|
||||
#session optional pam_mail.so standard quiet
|
||||
|
||||
# include system session and password settings
|
||||
session include system-session
|
||||
password include system-password
|
||||
@@ -0,0 +1,11 @@
|
||||
# Begin /etc/pam.d/newusers
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
password include system-password
|
||||
|
||||
# End /etc/pam.d/newusers
|
||||
@@ -0,0 +1,5 @@
|
||||
# Begin /etc/pam.d/passwd
|
||||
|
||||
password include system-password
|
||||
|
||||
# End /etc/pam.d/passwd
|
||||
@@ -0,0 +1,5 @@
|
||||
pwconv
|
||||
grpconv
|
||||
mkdir -p etc/default
|
||||
useradd -D --gid 999
|
||||
sed -i '/MAIL/s/yes/no/' /etc/default/useradd
|
||||
@@ -0,0 +1,87 @@
|
||||
[build]
|
||||
type = "autotools"
|
||||
|
||||
[build.flags]
|
||||
configure = [
|
||||
"--sysconfdir=/etc",
|
||||
"--disable-static",
|
||||
"--without-libbsd",
|
||||
"--disable-logind",
|
||||
"--with-group-name-max-length=32",
|
||||
"--with-bcrypt",
|
||||
"--with-yescrypt",
|
||||
]
|
||||
|
||||
post_install = [
|
||||
"make DESTDIR=$DESTDIR -C man install-man",
|
||||
"sed -i -E 's/^(FAIL_DELAY|FAILLOG_ENAB|LASTLOG_ENAB|MAIL_CHECK_ENAB|OBSCURE_CHECKS_ENAB|PORTTIME_CHECKS_ENAB|QUOTAS_ENAB|CONSOLE|MOTD_FILE|FTMP_FILE|NOLOGINS_FILE|ENV_HZ|PASS_MIN_LEN|SU_WHEEL_ONLY|PASS_CHANGE_TRIES|PASS_ALWAYS_WARN|CHFN_AUTH|ENCRYPT_METHOD|ENVIRON_FILE)/# \\&/' \"$DESTDIR/etc/login.defs\"",
|
||||
"mkdir -p \"$DESTDIR/etc/pam.d\"",
|
||||
"cp \"$DEPOT_SPECDIR/chage\" \"$DESTDIR/etc/pam.d/chage\"",
|
||||
"cp \"$DEPOT_SPECDIR/chgpasswd\" \"$DESTDIR/etc/pam.d/chgpasswd\"",
|
||||
"cp \"$DEPOT_SPECDIR/chsh\" \"$DESTDIR/etc/pam.d/chsh\"",
|
||||
"cp \"$DEPOT_SPECDIR/groupdel\" \"$DESTDIR/etc/pam.d/groupdel\"",
|
||||
"cp \"$DEPOT_SPECDIR/groupmod\" \"$DESTDIR/etc/pam.d/groupmod\"",
|
||||
"cp \"$DEPOT_SPECDIR/newusers\" \"$DESTDIR/etc/pam.d/newusers\"",
|
||||
"cp \"$DEPOT_SPECDIR/useradd\" \"$DESTDIR/etc/pam.d/useradd\"",
|
||||
"cp \"$DEPOT_SPECDIR/usermod\" \"$DESTDIR/etc/pam.d/usermod\"",
|
||||
"cp \"$DEPOT_SPECDIR/chfn\" \"$DESTDIR/etc/pam.d/chfn\"",
|
||||
"cp \"$DEPOT_SPECDIR/chpasswd\" \"$DESTDIR/etc/pam.d/chpasswd\"",
|
||||
"cp \"$DEPOT_SPECDIR/groupadd\" \"$DESTDIR/etc/pam.d/groupadd\"",
|
||||
"cp \"$DEPOT_SPECDIR/groupmems\" \"$DESTDIR/etc/pam.d/groupmems\"",
|
||||
"cp \"$DEPOT_SPECDIR/login\" \"$DESTDIR/etc/pam.d/login\"",
|
||||
"cp \"$DEPOT_SPECDIR/passwd\" \"$DESTDIR/etc/pam.d/passwd\"",
|
||||
"cp \"$DEPOT_SPECDIR/su\" \"$DESTDIR/etc/pam.d/su\"",
|
||||
"cp \"$DEPOT_SPECDIR/userdel\" \"$DESTDIR/etc/pam.d/userdel\"",
|
||||
"rm -rfv \"$DESTDIR/usr/lib/systemd\"",
|
||||
]
|
||||
|
||||
keep = [ "etc/pam.d/**", "etc/security/**" ]
|
||||
|
||||
[dependencies]
|
||||
runtime = [
|
||||
"glibc",
|
||||
"libxcrypt",
|
||||
"pam"
|
||||
]
|
||||
|
||||
[package]
|
||||
description = "programs for handling passwords in a secure way"
|
||||
homepage = "https://github.com/shadow-maint/shadow"
|
||||
license = "BSD-3-Clause"
|
||||
name = "shadow"
|
||||
version = "4.19.3"
|
||||
revision = 2
|
||||
|
||||
[[source]]
|
||||
extract_dir = "$name-$version"
|
||||
post_extract = [
|
||||
"sed -i 's/groups$(EXEEXT) //' src/Makefile.in",
|
||||
'''find man -name Makefile.in -exec sed -i 's/groups\.1 / /' {} \;''',
|
||||
'''find man -name Makefile.in -exec sed -i 's/getspnam\.3 / /' {} \;''',
|
||||
'''find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;''',
|
||||
"sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD YESCRYPT:' -e 's:/var/spool/mail:/var/mail:' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' -i etc/login.defs",
|
||||
]
|
||||
sha256 = "11a8f358910712cf957dd4fd205063fce7e386b68fc7dfe3a0e1e53155ec53c5"
|
||||
url = "https://github.com/shadow-maint/shadow/releases/download/$version/shadow-$version.tar.xz"
|
||||
|
||||
[[manual_sources]]
|
||||
files = [
|
||||
"chage",
|
||||
"chgpasswd",
|
||||
"chsh",
|
||||
"groupdel",
|
||||
"groupmod",
|
||||
"newusers",
|
||||
"shadow.toml",
|
||||
"useradd",
|
||||
"usermod",
|
||||
"chfn",
|
||||
"chpasswd",
|
||||
"groupadd",
|
||||
"groupmems",
|
||||
"login",
|
||||
"passwd",
|
||||
"su",
|
||||
"userdel",
|
||||
"postinstall.sh"
|
||||
]
|
||||
@@ -0,0 +1,26 @@
|
||||
# Begin /etc/pam.d/su
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# Allow users in the wheel group to execute su without a password
|
||||
# disabled by default
|
||||
#auth sufficient pam_wheel.so trust use_uid
|
||||
|
||||
# include system auth settings
|
||||
auth include system-auth
|
||||
|
||||
# limit su to users in the wheel group
|
||||
# disabled by default
|
||||
#auth required pam_wheel.so use_uid
|
||||
|
||||
# include system account settings
|
||||
account include system-account
|
||||
|
||||
# Set default environment variables for the service user
|
||||
session required pam_env.so
|
||||
|
||||
# include system session settings
|
||||
session include system-session
|
||||
|
||||
# End /etc/pam.d/su
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/useradd
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/useradd
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/userdel
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/userdel
|
||||
@@ -0,0 +1,10 @@
|
||||
# Begin /etc/pam.d/usermod
|
||||
|
||||
# always allow root
|
||||
auth sufficient pam_rootok.so
|
||||
|
||||
# include system auth and account settings
|
||||
auth include system-auth
|
||||
account include system-account
|
||||
|
||||
# End /etc/pam.d/usermod
|
||||
Reference in New Issue
Block a user