Hello community, here is the log from the commit of package pam_ssh for openSUSE:12.1 checked in at 2011-11-02 12:11:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1/pam_ssh (Old) and /work/SRC/openSUSE:12.1/.pam_ssh.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pam_ssh", Maintainer is "[email protected]" Changes: -------- --- /work/SRC/openSUSE:12.1/pam_ssh/pam_ssh.changes 2011-10-24 13:14:29.000000000 +0200 +++ /work/SRC/openSUSE:12.1/.pam_ssh.new/pam_ssh.changes 2011-11-02 12:11:37.000000000 +0100 @@ -1,0 +2,8 @@ +Sun Oct 30 16:55:04 UTC 2011 - [email protected] + +- pam_ssh-1.97-sigmask.patch: + Clear signal mask before executing ssh-agent as pam_ssh code can + be called from kdm with blocked TERM signal which would be + inherited by ssh-agent (bnc#727246). + +------------------------------------------------------------------- New: ---- pam_ssh-1.97-sigmask.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam_ssh.spec ++++++ --- /var/tmp/diff_new_pack.sQYI6V/_old 2011-11-02 12:11:37.000000000 +0100 +++ /var/tmp/diff_new_pack.sQYI6V/_new 2011-11-02 12:11:37.000000000 +0100 @@ -31,6 +31,7 @@ Source2: baselibs.conf Patch0: pam_ssh-double-free.patch Patch1: pam_ssh-1.97-setgid.patch +Patch2: pam_ssh-1.97-sigmask.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -50,6 +51,7 @@ %setup -q %patch0 -p1 %patch1 -p1 +%patch2 -p0 %build %{suse_update_config -f} ++++++ pam_ssh-1.97-sigmask.patch ++++++ diff -up pam_ssh.c.orig-sigmask pam_ssh.c --- pam_ssh.c.orig-sigmask 2011-10-30 16:38:41.365415881 +0100 +++ pam_ssh.c 2011-10-30 16:39:09.396068291 +0100 @@ -554,6 +554,7 @@ pam_sm_open_session(pam_handle_t *pamh, time_t file_ctime; /* creation time of per-agent file */ time_t time_now; /* current time */ time_t time_up; /* uptime */ + sigset_t sigmask; /* blocked signal mask */ memset(&options, 0, sizeof options); pam_std_option(&options, other_options, argc, argv); @@ -708,6 +709,10 @@ pam_sm_open_session(pam_handle_t *pamh, _exit(EX_OSERR); } } + + sigemptyset(&sigmask); + sigprocmask(SIG_SETMASK, &sigmask, NULL); + arg[0] = "ssh-agent"; arg[1] = "-s"; arg[2] = NULL; -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
