pam_lastlog is deprecated move to pam_lostlog2 #343

cloudfoundry · Jun 14, 2024 · 1fc1fc2 · 1fc1fc2
1 parent 3f72daa
commit 1fc1fc2
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 5 deletions.
diff --git a/bosh-stemcell/spec/os_image/ubuntu_noble_spec.rb b/bosh-stemcell/spec/os_image/ubuntu_noble_spec.rb
@@ -304,7 +304,7 @@
 
   context 'display the number of unsuccessful logon/access attempts since the last successful logon/access (stig: V-51875)' do
     describe file('/etc/pam.d/common-password') do
-      its(:content) { should match /session\trequired\t\t\tpam_lastlog\.so showfailed/ }
+      its(:content) { should match /session\trequired\t\t\tpam_lastlog2\.so showfailed/ }
     end
   end
 

diff --git a/stemcell_builder/stages/base_ubuntu_packages/apply.sh b/stemcell_builder/stages/base_ubuntu_packages/apply.sh
@@ -15,7 +15,7 @@ libaio1t64 gdb libcap2-bin libcap2-dev libbz2-dev \
 cmake uuid-dev libgcrypt-dev ca-certificates \
 scsitools mg htop module-assistant debhelper runit parted \
 cloud-guest-utils anacron software-properties-common \
-xfsprogs gdisk chrony dbus nvme-cli rng-tools fdisk \
+xfsprogs gdisk chrony dbus nvme-cli rng-tools fdisk util-linux \
 ethtool libpam-pwquality gpg-agent libcurl4 libcurl4-openssl-dev resolvconf net-tools ifupdown"
 
 pkg_mgr purge netplan.io

diff --git a/stemcell_builder/stages/password_policies/assets/centos/system-auth.patch b/stemcell_builder/stages/password_policies/assets/centos/system-auth.patch
@@ -10,4 +10,4 @@
 > password    required      pam_cracklib.so retry=3 minlen=14 dcredit=-1 ucredit=-1 ocredit=-1 lcredit=-1
 > password    sufficient    pam_unix.so try_first_pass use_authtok  sha512 shadow remember=24 minlen=14
 18a19
-> session     required      pam_lastlog.so showfailed
+> session     required      pam_lastlog2.so showfailed
diff --git a/stemcell_builder/stages/password_policies/assets/opensuse/common-password.patch b/stemcell_builder/stages/password_policies/assets/opensuse/common-password.patch
@@ -4,4 +4,4 @@
 ---
 > password	requisite	pam_cracklib.so retry=3 minlen=14 dcredit=-1 ucredit=-1 ocredit=-1 lcredit=-1
 > password	required	pam_unix.so     use_authtok  sha512 shadow try_first_pass remember=24 minlen=14
-> session required	pam_lastlog.so  showfailed
+> session required	pam_lastlog2.so  showfailed
diff --git a/stemcell_builder/stages/password_policies/assets/ubuntu/common-password.patch b/stemcell_builder/stages/password_policies/assets/ubuntu/common-password.patch
@@ -13,5 +13,5 @@
  # since the modules above will each just jump around
  password	required			pam_permit.so
  # and here are more per-package modules (the "Additional" block)
-+# session	required			pam_lastlog.so showfailed #NOBLE_TODO: Commented out when pam_lastlog is availble again
++ session	required			pam_lastlog2.so showfailed
  # end of pam-auth-update config