pambase-selinux 20190105.1-1 update

4 files changed, 21 insertions, 14 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 9b8ba6a0f6e1..e833a09eef91 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,13 +1,13 @@
 pkgbase = pambase-selinux
 	pkgdesc = SELinux aware base PAM configuration for services
-	pkgver = 20171006
+	pkgver = 20190105.1
 	pkgrel = 1
 	url = http://www.archlinux.org
 	arch = any
 	groups = selinux
 	license = GPL
-	provides = pambase=20171006-1
-	provides = selinux-pambase=20171006-1
+	provides = pambase=20190105.1-1
+	provides = selinux-pambase=20190105.1-1
 	conflicts = pambase
 	conflicts = selinux-pambase
 	backup = etc/pam.d/system-auth
@@ -24,10 +24,10 @@ pkgbase = pambase-selinux
 	source = other
 	sha256sums = 3eb67872e436817ec97c4f3795adba2cf1d3829ea4e107ef5747569e4eeb5746
 	sha256sums = 005736b9bd650ff5e5d82a7e288853776d5bb8c90185d5774c07231c1e1c64a9
-	sha256sums = b90f6246d937f0363d3e2cfcdb249d0d826b88d08891ad340a56249b0d3058bc
+	sha256sums = cba3b852839973a69ba27b1ae3933eb66a59fa5d3d157b8a12c1404f81a1a1f3
 	sha256sums = 005736b9bd650ff5e5d82a7e288853776d5bb8c90185d5774c07231c1e1c64a9
 	sha256sums = 6eb1acdd3fa9f71a7f93fbd529be57ea65bcafc6e3a98a06af4d88013fc6a567
-	sha256sums = de66118684a2ecec18017dd96e50a489f30465510250c007ced16f81fb542ba5
+	sha256sums = d5ed59ec2157c19c87964a162f7ca84d53c19fb2bd68d3fbc1671ba8d906346f
 
 pkgname = pambase-selinux
 
diff --git a/PKGBUILD b/PKGBUILD
index 9de82d281964..71cc1c62bfe1 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,11 +1,13 @@
-# $Id$
 # Maintainer: Dave Reisner <dreisner@archlinux.org>
 # SELinux Maintainer: Nicolas Iooss (nicolas <dot> iooss <at> m4x <dot> org)
 # SELinux Contributor: Timothée Ravier <tim@siosm.fr>
 # SELinux Contributor: Nicky726 (Nicky726 <at> gmail <dot> com)
+#
+# This PKGBUILD is maintained on https://github.com/archlinuxhardened/selinux.
+# If you want to help keep it up to date, please open a Pull Request there.
 
 pkgname=pambase-selinux
-pkgver=20171006
+pkgver=20190105.1
 pkgrel=1
 pkgdesc="SELinux aware base PAM configuration for services"
 arch=('any')
@@ -29,10 +31,10 @@ backup=('etc/pam.d/system-auth'
         'etc/pam.d/other')
 sha256sums=('3eb67872e436817ec97c4f3795adba2cf1d3829ea4e107ef5747569e4eeb5746'
             '005736b9bd650ff5e5d82a7e288853776d5bb8c90185d5774c07231c1e1c64a9'
-            'b90f6246d937f0363d3e2cfcdb249d0d826b88d08891ad340a56249b0d3058bc'
+            'cba3b852839973a69ba27b1ae3933eb66a59fa5d3d157b8a12c1404f81a1a1f3'
             '005736b9bd650ff5e5d82a7e288853776d5bb8c90185d5774c07231c1e1c64a9'
             '6eb1acdd3fa9f71a7f93fbd529be57ea65bcafc6e3a98a06af4d88013fc6a567'
-            'de66118684a2ecec18017dd96e50a489f30465510250c007ced16f81fb542ba5')
+            'd5ed59ec2157c19c87964a162f7ca84d53c19fb2bd68d3fbc1671ba8d906346f')
 
 package() {
   install -dm755 "$pkgdir/etc/pam.d"
diff --git a/other b/other
index 08498b423541..3f50bd1c9549 100644
--- a/other
+++ b/other
@@ -1,5 +1,9 @@
 #%PAM-1.0
-auth		required	pam_unix.so
-account		required	pam_unix.so
-password	required	pam_unix.so
-session		required	pam_unix.so
+auth      required   pam_deny.so
+auth      required   pam_warn.so
+account   required   pam_deny.so
+account   required   pam_warn.so
+password  required   pam_deny.so
+password  required   pam_warn.so
+session   required   pam_deny.so
+session   required   pam_warn.so
diff --git a/system-login b/system-login
index 4572b802790f..bc4ad0bf4431 100644
--- a/system-login
+++ b/system-login
@@ -1,10 +1,11 @@
 #%PAM-1.0
 
-auth       required   pam_tally.so         onerr=succeed file=/var/log/faillog
+auth       required   pam_tally2.so        onerr=succeed file=/var/log/tallylog
 auth       required   pam_shells.so
 auth       requisite  pam_nologin.so
 auth       include    system-auth
 
+account    required   pam_tally2.so 
 account    required   pam_access.so
 account    required   pam_nologin.so
 account    include    system-auth