From 75d6fc5f319394df026ea30d946ab5ee12dc5633 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Aug 01 2019 18:29:06 +0000 Subject: import libpwquality-1.4.0-9.el8 --- diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..91ab079 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/libpwquality-1.4.0.tar.bz2 diff --git a/.libpwquality.metadata b/.libpwquality.metadata new file mode 100644 index 0000000..39be5ab --- /dev/null +++ b/.libpwquality.metadata @@ -0,0 +1 @@ +28092904a722b42ec98f9831355857387d21242e SOURCES/libpwquality-1.4.0.tar.bz2 diff --git a/SOURCES/libpwquality-1.4.0-covscan.patch b/SOURCES/libpwquality-1.4.0-covscan.patch new file mode 100644 index 0000000..2b3fd5f --- /dev/null +++ b/SOURCES/libpwquality-1.4.0-covscan.patch @@ -0,0 +1,32 @@ +From fbf963dde2cbe34dba1df269b9506f4a55c39357 Mon Sep 17 00:00:00 2001 +From: Tomas Mraz +Date: Mon, 22 Oct 2018 16:29:31 +0200 +Subject: [PATCH] Use calloc() instead of malloc() in distcalculate to + initialize the memory. + +--- + src/check.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/src/check.c b/src/check.c +index ac7cbd5..61218a7 100644 +--- a/src/check.c ++++ b/src/check.c +@@ -96,12 +96,12 @@ distance(const char *old, const char *new) + + m = strlen(old); + n = strlen(new); +- distances = malloc(sizeof(int*) * (m + 1)); ++ distances = calloc(m + 1, sizeof(int*)); + if (distances == NULL) + return -1; + + for (i = 0; i <= m; i++) { +- distances[i] = malloc(sizeof(int) * (n + 1)); ++ distances[i] = calloc(n + 1, sizeof(int)); + if (distances[i] == NULL) + goto allocfail; + +-- +2.14.5 + diff --git a/SPECS/libpwquality.spec b/SPECS/libpwquality.spec new file mode 100644 index 0000000..db07c0b --- /dev/null +++ b/SPECS/libpwquality.spec @@ -0,0 +1,284 @@ +%if 0%{?fedora} || 0%{?rhel} > 7 +# Enable python3 build by default +%bcond_without python3 +%else +%bcond_with python3 +%endif + +%if 0%{?rhel} > 7 && %{with python3} +# Disable python2 build by default +%bcond_with python2 +%else +%bcond_without python2 +%endif + +Summary: A library for password generation and password quality checking +Name: libpwquality +Version: 1.4.0 +Release: 9%{?dist} +# The package is BSD licensed with option to relicense as GPLv2+ +# - this option is redundant as the BSD license allows that anyway. +License: BSD or GPLv2+ +Group: System Environment/Base +Source0: https://github.com/libpwquality/libpwquality/releases/download/libpwquality-%{version}/libpwquality-%{version}.tar.bz2 +Patch1: libpwquality-1.4.0-covscan.patch + +%global _pwqlibdir %{_libdir} +%global _moduledir %{_libdir}/security +%global _secconfdir %{_sysconfdir}/security + +Recommends: cracklib-dicts >= 2.8 +Requires: pam%{?_isa} +BuildRequires: gcc +BuildRequires: cracklib-devel +BuildRequires: gettext +BuildRequires: pam-devel +%if %{with python2} +BuildRequires: python2-devel +%endif +%if %{with python3} +BuildRequires: python3-devel +%endif + +URL: https://github.com/libpwquality/libpwquality/ + +# we don't want to provide private python extension libs +%define __provides_exclude_from ^(%{python_sitearch}|%{python3_sitearch})/.*\.so$. + +%description +This is a library for password quality checks and generation +of random passwords that pass the checks. +This library uses the cracklib and cracklib dictionaries +to perform some of the checks. + +%package devel +Group: Development/Libraries +Summary: Support for development of applications using the libpwquality library +Requires: libpwquality%{?_isa} = %{version}-%{release} +Requires: pkgconfig + +%description devel +Files needed for development of applications using the libpwquality +library. +See the pwquality.h header file for the API. + +%if %{with python2} +%package -n python2-pwquality +%{?python_provide:%python_provide python2-pwquality} +Group: Development/Libraries +Summary: Python bindings for the libpwquality library +Requires: libpwquality%{?_isa} = %{version}-%{release} + +%description -n python2-pwquality +This is pwquality Python module that provides Python bindings +for the libpwquality library. These bindings can be used +for easy password quality checking and generation of random +pronounceable passwords from Python applications. +%endif + +%if %{with python3} +%package -n python3-pwquality +Group: Development/Libraries +Summary: Python bindings for the libpwquality library +Requires: libpwquality%{?_isa} = %{version}-%{release} + +%description -n python3-pwquality +This is pwquality Python module that provides Python bindings +for the libpwquality library. These bindings can be used +for easy password quality checking and generation of random +pronounceable passwords from Python applications. +%endif + +%prep +%setup -q +%patch1 -p1 -b .covscan + +%if %{with python3} && %{with python2} +rm -rf %{py3dir} +cp -a . %{py3dir} +%endif + +%build +%if %{with python2} +%configure \ + --with-securedir=%{_moduledir} \ + --with-pythonsitedir=%{python2_sitearch} \ + --with-python-binary=%{__python2} \ + --disable-static + +make %{?_smp_mflags} +%endif +%if %{with python3} && %{with python2} +pushd %{py3dir} +%endif +%if %{with python3} +%configure \ + --with-securedir=%{_moduledir} \ + --with-pythonsitedir=%{python3_sitearch} \ + --with-python-binary=%{__python3} \ + --disable-static + +make %{?_smp_mflags} +%endif +%if %{with python3} && %{with python2} +popd +%endif + +%install +make install DESTDIR=$RPM_BUILD_ROOT INSTALL='install -p' + +%if %{with python3} && %{with python2} +pushd %{py3dir} +make -C python install DESTDIR=$RPM_BUILD_ROOT INSTALL='install -p' +popd +%endif + +%if "%{_pwqlibdir}" != "%{_libdir}" +pushd $RPM_BUILD_ROOT%{_libdir} +mv libpwquality.so.* $RPM_BUILD_ROOT%{_pwqlibdir} +ln -sf %{_pwqlibdir}/libpwquality.so.*.* libpwquality.so +popd +%endif +rm -f $RPM_BUILD_ROOT%{_libdir}/*.la +rm -f $RPM_BUILD_ROOT%{_moduledir}/*.la + +mkdir $RPM_BUILD_ROOT%{_secconfdir}/pwquality.conf.d + +%find_lang libpwquality + +%check +# Nothing yet + +%ldconfig_scriptlets + +%files -f libpwquality.lang +%defattr(-,root,root,-) +%{!?_licensedir:%global license %%doc} +%license COPYING +%doc README NEWS AUTHORS +%{_bindir}/pwmake +%{_bindir}/pwscore +%{_moduledir}/pam_pwquality.so +%{_pwqlibdir}/libpwquality.so.* +%config(noreplace) %{_secconfdir}/pwquality.conf +%{_secconfdir}/pwquality.conf.d +%{_mandir}/man1/* +%{_mandir}/man5/* +%{_mandir}/man8/* + +%files devel +%defattr(-,root,root,-) +%{_includedir}/pwquality.h +%{_libdir}/libpwquality.so +%{_libdir}/pkgconfig/*.pc +%{_mandir}/man3/* + +%if %{with python2} +%files -n python2-pwquality +%defattr(-,root,root,-) +%{python_sitearch}/pwquality.so +%{python_sitearch}/*.egg-info +%endif + +%if %{with python3} +%files -n python3-pwquality +%defattr(-,root,root,-) +%{python3_sitearch}/*.so +%{python3_sitearch}/*.egg-info +%endif + +%changelog +* Mon Oct 22 2018 Tomáš Mráz 1.4.0-9 +- Fix an issue found in Coverity scan + +* Fri Jun 22 2018 Tomáš Mráz 1.4.0-8 +- Properly conditionalize the python buildrequires + +* Thu Mar 22 2018 Tomáš Mráz 1.4.0-7 +- Add conditionals for Python2 and Python3 + +* Wed Feb 07 2018 Fedora Release Engineering - 1.4.0-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Sat Feb 03 2018 Igor Gnatenko - 1.4.0-5 +- Switch to %%ldconfig_scriptlets + +* Sun Dec 17 2017 Zbigniew Jędrzejewski-Szmek - 1.4.0-4 +- Python 2 binary package renamed to python2-pwquality + See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 + +* Thu Aug 03 2017 Fedora Release Engineering - 1.4.0-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 1.4.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Fri May 26 2017 Tomáš Mráz 1.4.0-1 +- Do not try to check presence of too short username in password +- Make the user name check optional (via usercheck option) +- Add an 'enforcing' option to make the checks to be warning-only + in PAM +- The difok = 0 setting will disable all old password similarity + checks except new and old passwords being identical +- Updated translations from Zanata + +* Mon Aug 24 2015 Tomáš Mráz 1.3.0-2 +- Fix possible stack overflow in the generate function (#1255935) + +* Thu Jul 23 2015 Tomáš Mráz 1.3.0-1 +- Change the defaults for credits, difok, and minlen +- Make the cracklib check optional but on by default +- Add implicit support for parsing .d/*.conf files +- Add libpwquality API manual page + +* Wed Aug 6 2014 Tomáš Mráz 1.2.4-1 +- fix license handling (by Tom Callaway) +- add Python3 module subpackage + +* Thu Sep 12 2013 Tomáš Mráz 1.2.3-1 +- fix problem with parsing the pam_pwquality options + patch by Vladimir Sorokin. +- updated translations from Transifex +- treat empty user or password as NULL +- move the library to /usr + +* Wed Jun 19 2013 Tomas Mraz 1.2.2-1 +- manual page fixes +- make it possible to set the maxsequence configuration value +- updated translations from Transifex + +* Thu Dec 20 2012 Tomas Mraz 1.2.1-1 +- properly free pwquality settings +- add extern "C" to public header +- updated translations from Transifex + +* Thu Aug 16 2012 Tomas Mraz 1.2.0-1 +- add maxsequence check for too long monotonic character sequence. +- clarified alternative licensing to GPLv2+. +- add local_users_only option to skip the pwquality checks for + non-locals. (thanks to Stef Walter) + +* Wed Jun 13 2012 Tomas Mraz 1.1.1-1 +- use rpm built-in filtering of provides (rhbz#830153) +- remove strain debug fprintf() (rhbz#831567) + +* Thu May 24 2012 Tomas Mraz 1.1.0-1 +- fix leak when throwing PWQError exception +- added pkgconfig file +- call the simplicity checks before the cracklib check +- add enforce_for_root option to the PAM module +- updated translations from Transifex + +* Thu Dec 8 2011 Tomas Mraz 1.0.0-1 +- added a few additional password quality checks +- bugfix in configuration file parsing + +* Fri Nov 11 2011 Tomas Mraz 0.9.9-1 +- added python bindings and documentation + +* Mon Oct 10 2011 Tomas Mraz 0.9-2 +- fixes for problems found in review (missing BR on pam-devel, + License field, Source URL, Require pam, other cleanups) + +* Mon Oct 3 2011 Tomas Mraz 0.9-1 +- first spec file for libpwquality