r41629 - in /desktop/unstable/gdm3/debian: changelog gdm3-autologin.pam gdm3.pam

[bigon at users.alioth.debian.org]

Author: bigon
Date: Wed May  7 14:49:06 2014
New Revision: 41629

URL: http://svn.debian.org/wsvn/pkg-gnome/?sc=1&rev=41629
Log:
debian/gdm3.pam, debian/gdm3-autologin.pam: Call pam_selinux open module
higher in the session stack

Modified:
    desktop/unstable/gdm3/debian/changelog
    desktop/unstable/gdm3/debian/gdm3-autologin.pam
    desktop/unstable/gdm3/debian/gdm3.pam

Modified: desktop/unstable/gdm3/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/gdm3/debian/changelog?rev=41629&op=diff
==============================================================================
--- desktop/unstable/gdm3/debian/changelog	[utf-8] (original)
+++ desktop/unstable/gdm3/debian/changelog	[utf-8] Wed May  7 14:49:06 2014
@@ -2,8 +2,10 @@
 
   * debian/control.in: Depends against consolekit on non-linux architectures
   * Require a policykit-1 with systemd support.
-
- -- Laurent Bigonville <bigon at debian.org>  Tue, 06 May 2014 16:00:00 +0200
+  * debian/gdm3.pam, debian/gdm3-autologin.pam: Call pam_selinux open module
+    higher in the session stack
+
+ -- Laurent Bigonville <bigon at debian.org>  Wed, 07 May 2014 16:47:14 +0200
 
 gdm3 (3.8.4-7) unstable; urgency=medium
 

Modified: desktop/unstable/gdm3/debian/gdm3-autologin.pam
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/gdm3/debian/gdm3-autologin.pam?rev=41629&op=diff
==============================================================================
--- desktop/unstable/gdm3/debian/gdm3-autologin.pam	[utf-8] (original)
+++ desktop/unstable/gdm3/debian/gdm3-autologin.pam	[utf-8] Wed May  7 14:49:06 2014
@@ -7,13 +7,13 @@
 # lingering context has been cleared. Without this it is possible 
 # that a module could execute code in the wrong domain.
 session [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
-session required        pam_limits.so
-session required        pam_env.so readenv=1
-session required        pam_env.so readenv=1 envfile=/etc/default/locale
 session required        pam_loginuid.so
- at include common-session
 # SELinux needs to intervene at login time to ensure that the process
 # starts in the proper default security context. Only sessions which are
 # intended to run in the user's context should be run after this.
 session [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so open
+session required        pam_limits.so
+session required        pam_env.so readenv=1
+session required        pam_env.so readenv=1 envfile=/etc/default/locale
+ at include common-session
 @include common-password

Modified: desktop/unstable/gdm3/debian/gdm3.pam
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/gdm3/debian/gdm3.pam?rev=41629&op=diff
==============================================================================
--- desktop/unstable/gdm3/debian/gdm3.pam	[utf-8] (original)
+++ desktop/unstable/gdm3/debian/gdm3.pam	[utf-8] Wed May  7 14:49:06 2014
@@ -5,17 +5,17 @@
 auth    optional        pam_gnome_keyring.so
 @include common-account
 # SELinux needs to be the first session rule. This ensures that any 
-# lingering context has been cleared. Without out this it is possible 
+# lingering context has been cleared. Without this it is possible 
 # that a module could execute code in the wrong domain.
 session [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
-session required        pam_limits.so
-session required        pam_env.so readenv=1
-session required        pam_env.so readenv=1 envfile=/etc/default/locale
 session required        pam_loginuid.so
- at include common-session
 # SELinux needs to intervene at login time to ensure that the process
 # starts in the proper default security context. Only sessions which are
 # intended to run in the user's context should be run after this.
 session [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so open
+session required        pam_limits.so
+session required        pam_env.so readenv=1
+session required        pam_env.so readenv=1 envfile=/etc/default/locale
+ at include common-session
 session optional        pam_gnome_keyring.so auto_start
 @include common-password