diff -Nru pam-fprint-20080330+git/ChangeLog pam-fprint-0.2+git20080330/ChangeLog --- pam-fprint-20080330+git/ChangeLog 1970-01-01 00:00:00.000000000 +0000 +++ pam-fprint-0.2+git20080330/ChangeLog 2010-02-01 17:13:34.000000000 +0000 @@ -0,0 +1,42 @@ +commit 5452ea09c17ac5f00eb0d8b513cee3854a6dec47 +Author: Vasily Khoruzhick +Date: Sun Mar 30 12:26:19 2008 +0300 + + Use fp_identify_finger instead of verify + + Signed-off-by: Vasily Khoruzhick + +commit d8349b68216108fb970414c8984a4e99b095a750 +Author: Daniel Drake +Date: Mon Nov 19 19:15:02 2007 +0000 + + v0.2 release + +commit a798ab6ac51d3e47aef658709e44d085a63d8ffe +Author: Vasily Khoruzhick +Date: Mon Nov 19 19:11:09 2007 +0000 + + Add enrollment application + +commit 74f7fc1439a9b1dff83f804fc2a62ca2ecd64e59 +Author: Daniel Drake +Date: Mon Nov 19 19:05:46 2007 +0000 + + Don't try to serve sessions from remote hosts + + Avoids a remote box asking you to scan your fingerprint when you login + over SSH. + + Based on a change made to pam_thinkfinger. + +commit adb0ae4947091846bc2771c7a32e4c7ed93b5d33 +Author: Daniel Drake +Date: Thu Nov 15 10:41:59 2007 +0000 + + v0.1 release + +commit ae1f7800c5fbdbfb3a2945c28d984a2593cabd17 +Author: Daniel Drake +Date: Wed Oct 31 20:03:34 2007 +0000 + + Initial commit diff -Nru pam-fprint-20080330+git/debian/changelog pam-fprint-0.2+git20080330/debian/changelog --- pam-fprint-20080330+git/debian/changelog 2010-06-05 20:16:05.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/changelog 2012-04-09 19:28:21.000000000 +0000 @@ -1,32 +1,9 @@ -pam-fprint (20080330+git-5) unstable; urgency=low +pam-fprint (1:0.2+git20080330-0ppa2~precise1) precise; urgency=low - * Call pam-auth-update to activate cleaning workaround of some files from - libpam-runtime, as it never goes through purging state (Closes: #584584). - - -- Ulises Vitulli Sat, 05 Jun 2010 17:12:22 -0300 - -pam-fprint (20080330+git-4) unstable; urgency=low - - * Fix missing dependency on libpam-runtime. This was a new feature introduced - to automagically handle different PAM auth providers (Closes: #580850). - - -- Ulises Vitulli Sun, 09 May 2010 23:28:44 -0300 - -pam-fprint (20080330+git-3) unstable; urgency=low - - * The 'For children under 4yo' upload. - - Droping pkg from experimental, now going to unstable. * New upstream release. - * Adopt the new implementation of libfprint over asynchronus libusb-1.0. - * Now we integrate pam-auth-update for handling system authentication policy - through PAM modules in a centralized fashion (Closes: #496153, #532087). - * Improved documentation (debian/README.Debian). - * Avoids a remote box asking you to scan your fingerprint when you login - over SSH. - * Minor package updates to comply with 3.8.4 standard. - * Switch to dpkg-source 3.0 (quilt) format. + * Complete rewrite of debian/* - -- Ulises Vitulli Wed, 14 Apr 2010 16:15:05 -0300 + -- David Jurenka Tue, 10 May 2011 17:01:46 +0100 pam-fprint (0.2-3) experimental; urgency=low @@ -36,7 +13,7 @@ pam-fprint (0.2-2) experimental; urgency=low - * Added pkg-config build depend (Closes: #465050) + * Added pkg-config build depend (Closes: #465050) -- Miguel Gea Milvaques Mon, 11 Feb 2008 22:56:01 +0100 diff -Nru pam-fprint-20080330+git/debian/compat pam-fprint-0.2+git20080330/debian/compat --- pam-fprint-20080330+git/debian/compat 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/compat 2010-01-31 20:36:30.000000000 +0000 @@ -1 +1 @@ -5 +7 diff -Nru pam-fprint-20080330+git/debian/control pam-fprint-0.2+git20080330/debian/control --- pam-fprint-20080330+git/debian/control 2010-06-05 20:13:59.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/control 2012-04-09 19:21:02.000000000 +0000 @@ -1,33 +1,17 @@ Source: pam-fprint Section: admin Priority: extra -Maintainer: FingerForce Team -Uploaders: Ulises Vitulli , Emfox Zhou , Miguel Gea Milvaques -Build-Depends: debhelper (>= 5), autotools-dev, automake, pkg-config, libpam-dev, - libfprint-dev -Homepage: http://www.reactivated.net/fprint/wiki/Pam_fprint -Standards-Version: 3.8.4 +Maintainer: David Jurenka +Build-Depends: debhelper (>= 7), cdbs, autotools-dev, pkg-config, libpam-dev, + libfprint-dev (>= 0.1.0~pre2) +Standards-Version: 3.9.3.1 +Homepage: http://www.freedesktop.org/wiki/Software/fprint/pam_fprint Package: libpam-fprint Architecture: any -Depends: ${shlibs:Depends}, ${misc:Depends}, libpam-runtime -Description: PAM module allowing authentication via fprint - pam_fprint is a PAM module which uses libfprint's fingerprint verification - functionality to implement a fingerprint-based authentication scheme. - . - This means that you may be able to authenticate against every service, tool, - application or whatever that uses PAM as an authentication mechanism; for - example ssh, gdm/kdm/xdm, most screen savers, login, su, sudo, etc. - . - Previously, Linux support for such devices has been scattered amongst different - projects (many incomplete) and inconsistent in that application developers - would have to implement support for each type of fingerprint reader separately. - The idea is to change that by providing a central system to support all the - fingerprint readers as it's possible to get hands on. - . - libfprint is the centre of efforts, this component does the dirty job of - talking to fingerprint reading devices, and processing fingerprint data. - . - This library depends on the new libusb, which performs asynchronous callbacks, - allowing fprint to perform non-blocking device tasks. - Old synchronous library has been deprecated in favor of the new libusb-1.0. +Depends: ${shlibs:Depends}, ${misc:Depends}, libpam-runtime (>= 1.0.1-6) +Description: PAM module for fingerprint-based authentication via fprint + pam_fprint is a simple PAM module which uses libfprint's fingerprint + processing and verification functionality for authentication. In other + words, instead of seeing a password prompt, you're asked to scan your + fingerprint. diff -Nru pam-fprint-20080330+git/debian/copyright pam-fprint-0.2+git20080330/debian/copyright --- pam-fprint-20080330+git/debian/copyright 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/copyright 2010-01-31 20:48:19.000000000 +0000 @@ -1,32 +1,50 @@ -This package was debianized by Emfox Zhou on -Sun, 13 Jan 2008 15:01:18 +0800. +This package was debianized by David Jurenka on +Sat, 30 Jan 2010 21:31:58 +0100. -It was downloaded from +It was downloaded from http://github.com/dsd/pam_fprint Upstream Author: Daniel Drake -Copyright © 2007 Vasily Khoruzhick -Copyright © 2007 Daniel Drake +Copyright: + + Copyright © 2007–2008 Daniel Drake License: - * This program is free software; you can redistribute it and/or modify - * it under the terms of the GNU General Public License as published by - * the Free Software Foundation; either version 2 of the License, or - * (at your option) any later version. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License along - * with this program; if not, write to the Free Software Foundation, Inc., - * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, + MA 02110-1301, USA + +On Debian systems, the complete text of the GNU General Public +License, version 2, can be found in /usr/share/common-licenses/GPL-2. pamtest.c file was taken from pam_dotfile, under the same license and the copyright owner is Lennart Poettering -The Debian packaging is © 2008, Emfox Zhou and -is licensed under the GPL v2, see `/usr/share/common-licenses/GPL-2'. +The Debian packaging is copyright 2010, David Jurenka + and is licensed under the ISC License. + + Permission to use, copy, modify, and/or distribute this software for any + purpose with or without fee is hereby granted, provided that the above + copyright notice and this permission notice appear in all copies. + + THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. diff -Nru pam-fprint-20080330+git/debian/dirs pam-fprint-0.2+git20080330/debian/dirs --- pam-fprint-20080330+git/debian/dirs 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/dirs 1970-01-01 00:00:00.000000000 +0000 @@ -1,2 +0,0 @@ -usr/bin -usr/share/pam-configs diff -Nru pam-fprint-20080330+git/debian/docs pam-fprint-0.2+git20080330/debian/docs --- pam-fprint-20080330+git/debian/docs 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/docs 1970-01-01 00:00:00.000000000 +0000 @@ -1 +0,0 @@ -README diff -Nru pam-fprint-20080330+git/debian/fprint pam-fprint-0.2+git20080330/debian/fprint --- pam-fprint-20080330+git/debian/fprint 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/fprint 1970-01-01 00:00:00.000000000 +0000 @@ -1,6 +0,0 @@ -Name: Fingerprint reader -Default: no -Priority: 300 -Auth-Type: Primary -Auth: - [success=end default=ignore] pam_fprint.so diff -Nru pam-fprint-20080330+git/debian/install pam-fprint-0.2+git20080330/debian/install --- pam-fprint-20080330+git/debian/install 1970-01-01 00:00:00.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/install 2010-02-02 12:53:38.000000000 +0000 @@ -0,0 +1 @@ +debian/pam-configs/* usr/share/pam-configs/ diff -Nru pam-fprint-20080330+git/debian/manpages pam-fprint-0.2+git20080330/debian/manpages --- pam-fprint-20080330+git/debian/manpages 1970-01-01 00:00:00.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/manpages 2010-01-31 21:19:29.000000000 +0000 @@ -0,0 +1 @@ +debian/pam_fprint_enroll.1 diff -Nru pam-fprint-20080330+git/debian/pam-configs/fprint pam-fprint-0.2+git20080330/debian/pam-configs/fprint --- pam-fprint-20080330+git/debian/pam-configs/fprint 1970-01-01 00:00:00.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/pam-configs/fprint 2010-04-12 20:48:24.000000000 +0000 @@ -0,0 +1,7 @@ +Name: Fingerprint authentication by pam_fprint +Default: no +Priority: 260 +Conflicts: fprintd fingerprint-gui +Auth-Type: Primary +Auth: + [success=end default=ignore] pam_fprint.so diff -Nru pam-fprint-20080330+git/debian/postinst pam-fprint-0.2+git20080330/debian/postinst --- pam-fprint-20080330+git/debian/postinst 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/postinst 2010-02-02 12:27:16.000000000 +0000 @@ -1,12 +1,22 @@ #!/bin/sh + set -e -if [ -f /usr/share/debconf/confmodule ]; then - . /usr/share/debconf/confmodule -fi - -if [ "$1" = "configure" ]; then - pam-auth-update --package libpam-fprint -fi +case "$1" in + configure) + ;; + + abort-upgrade|abort-remove|abort-deconfigure) + ;; + + *) + echo "postinst called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +pam-auth-update --package #DEBHELPER# + +exit 0 diff -Nru pam-fprint-20080330+git/debian/prerm pam-fprint-0.2+git20080330/debian/prerm --- pam-fprint-20080330+git/debian/prerm 2010-06-05 20:54:21.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/prerm 2010-02-02 12:34:12.000000000 +0000 @@ -1,8 +1,24 @@ #!/bin/sh + set -e +case "$1" in + remove|upgrade|deconfigure) + ;; + + failed-upgrade) + ;; + + *) + echo "prerm called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + if [ "$1" = remove ]; then - pam-auth-update --package --remove fprint + pam-auth-update --package --remove fprint fi #DEBHELPER# + +exit 0 diff -Nru pam-fprint-20080330+git/debian/README.Debian pam-fprint-0.2+git20080330/debian/README.Debian --- pam-fprint-20080330+git/debian/README.Debian 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/README.Debian 2010-02-21 16:54:19.000000000 +0000 @@ -1,107 +1,11 @@ pam-fprint for Debian --------------------- -******WARNING***WARNING***WARNING***WARNING***WARNING****WARNING***WARNING***** +pam_fprint hasn't been declared stable yet so we do not enable it by default. +It can be enabled by root with the command pam-auth-update. +Users can register their fingerprints with the command pam_fprint_enroll. +Please note that the fingerprints are stored in users' homedirs so the PAM +module needs these directories to be unencrypted or decrypted first to work +properly. ----> This is experimental software. Do not rely on it for strong security <--- - -******WARNING***WARNING***WARNING***WARNING***WARNING****WARNING***WARNING***** - - -Because pam_fprint is in alpha state, we do not enable it by default. - -libpam-fprint now supports pam-auth-config configuration fwork for an easier - user integration in an higher layer. -pam-auth-update permits configuring the central authentication policy for - the system using pre-defined profiles as supplied by PAM module packages - (like libpam-fprint does). - - -Fast&Furious setup: - -1. By default, libpam-fprint is disabled, so once the libpam-runtime graphical - interface is launched and prompts for modules selection, choose - 'Fingerprint reader' from the list. -In case you didn't pay atention to it or whatever, and just hit enter, you - can reconfigure this utility and enable it by doing: - -# dpkg-reconfigure -plow libpam-runtime - - -2. Load your fingerprint into the libfprint database: - -$ pam_fprint_enroll -h -Usage: pam_fprint_enroll options - -h --help Display this usage information. - -f --enroll-finger index Enroll finger with index. - - Valid indexes are: - 1 - Left Thumb - 2 - Left Index Finger - 3 - Left Middle Finger - 4 - Left Ring Finger - 5 - Left Little Finger - 6 - Right Thumb - 7 - Right Index Finger - 8 - Right Middle Finger - 9 - Right Ring Finger - 10 - Right Little Finger - -$ pam_fprint_enroll -f 2 -This program will enroll your finger, unconditionally overwriting any selected - print that was enrolled previously. If you want to continue, press enter, - otherwise hit Ctrl+C - -Found device claimed by UPEK TouchStrip driver -Opened device. It's now time to enroll your finger. - -You will need to successfully scan your Left Index Finger 3 times to complete - the process. - -Scan your finger now. -Enroll stage passed. Yay! - -Scan your finger now. -Enroll stage passed. Yay! - -Scan your finger now. -Enroll complete! -Enrollment completed! - - -3. Test it!!! AKA, the funny part :-) - -Sudo'ng: - -dererk erebus[~]$ sudo su - -Scan right index finger on UPEK TouchStrip - -root erebus[~]# - - -Su'ing: - -root erebus[~]# logout -dererk erebus[~]$ su - -Scan right index finger on UPEK TouchStrip - -root erebus[~]# - - -Nice trick! What's next??? -Let's say you put the wrong finger or authentication failed? -Fallbacked into regular system login! - -dererk erebus[~]$ su - -Scan right index finger on UPEK TouchStrip -(Failed) -Password: - -root erebus[~]# - - - -Yay! Enjoy! - - - -- Ulises Vitulli Thu, 21 Jan 2010 22:14:43 -0300 + -- David Jurenka Sat, 30 Jan 2010 21:31:58 +0100 diff -Nru pam-fprint-20080330+git/debian/README.source pam-fprint-0.2+git20080330/debian/README.source --- pam-fprint-20080330+git/debian/README.source 1970-01-01 00:00:00.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/README.source 2010-02-01 17:18:21.000000000 +0000 @@ -0,0 +1,7 @@ +pam-fprint for Debian (notes on source) +--------------------------------------- + +The orig.tar.gz files for git releases are generated by the script +scripts/git2orig.tar.gz. + + -- David Jurenka Sat, 30 Jan 2010 21:31:58 +0100 diff -Nru pam-fprint-20080330+git/debian/rules pam-fprint-0.2+git20080330/debian/rules --- pam-fprint-20080330+git/debian/rules 2010-06-05 19:51:27.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/rules 2010-02-02 01:42:11.000000000 +0000 @@ -1,85 +1,6 @@ #!/usr/bin/make -f -# -*- makefile -*- -# This file was originally written by Joey Hess and Craig Small. -# As a special exception, when this file is copied by dh-make into a -# dh-make output file, you may use that output file without restriction. -# This special exception was added by Craig Small in version 0.37 of dh-make. + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/class/autotools.mk -# Uncomment this to turn on verbose mode. -#export DH_VERBOSE=1 - - -# These are used for cross-compiling and for saving the configure script -# from having to guess our platform (since we know it already) -DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) -DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) - - -config.status: autogen.sh - dh_testdir - # Add here commands to configure the package. -ifneq "$(wildcard /usr/share/misc/config.sub)" "" - cp -f /usr/share/misc/config.sub config.sub -endif -ifneq "$(wildcard /usr/share/misc/config.guess)" "" - cp -f /usr/share/misc/config.guess config.guess -endif - ./autogen.sh - ./configure --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs" - - -build: build-stamp - -build-stamp: config.status - dh_testdir - - # Add here commands to compile the package. - $(MAKE) - - touch $@ - -clean: - dh_testdir - dh_testroot - rm -f build-stamp configure aclocal.m4 - find $(CURDIR) -type f -name Makefile.in -exec rm {} \; - # Add here commands to clean up after the build process. - [ ! -f Makefile ] || $(MAKE) distclean - rm -rf depcomp compile config.guess config.sub ltmain.sh missing install-sh config.h.in - dh_clean - -install: build - dh_testdir - dh_testroot - dh_clean -k - dh_installdirs - dh_install debian/fprint usr/share/pam-configs - - $(MAKE) DESTDIR=$(CURDIR)/debian/libpam-fprint install - - -# Build architecture-independent files here. -binary-indep: build install -# We have nothing to do by default. - -# Build architecture-dependent files here. -binary-arch: build install - dh_testdir - dh_testroot - dh_installchangelogs NEWS - dh_installdocs - dh_installexamples - dh_installman debian/pam_fprint_enroll.1 - dh_link - dh_strip - dh_compress - dh_fixperms - dh_makeshlibs - dh_installdeb - dh_shlibdeps - dh_gencontrol - dh_md5sums - dh_builddeb - -binary: binary-indep binary-arch -.PHONY: build clean binary-indep binary-arch binary install +DEB_CONFIGURE_SCRIPT := ./autogen.sh diff -Nru pam-fprint-20080330+git/debian/scripts/git2orig.tar.gz.sh pam-fprint-0.2+git20080330/debian/scripts/git2orig.tar.gz.sh --- pam-fprint-20080330+git/debian/scripts/git2orig.tar.gz.sh 1970-01-01 00:00:00.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/scripts/git2orig.tar.gz.sh 2010-03-13 15:15:10.000000000 +0000 @@ -0,0 +1,19 @@ +#!/bin/sh +# Script to check out the git repository and create an orig.tar.gz for the +# Debian package. + +set -e + +VERSION=0.2 +REVISION=20080330 + +NAMEUPSTREAM=pam_fprint +REPO="git://github.com/dsd/${NAMEUPSTREAM}.git" +NAMETAR=${NAMEUPSTREAM}-${VERSION}+git${REVISION} +NAMEDEB=pam-fprint_${VERSION}+git${REVISION} + +git clone ${REPO} +git --git-dir ${NAMEUPSTREAM}/.git log > ${NAMEUPSTREAM}/ChangeLog +mv ${NAMEUPSTREAM} ${NAMETAR} +tar cvf - ${NAMETAR}/ --exclude ${NAMETAR}/.git"*" | gzip --best > ${NAMEDEB}.orig.tar.gz +rm -rf ${NAMETAR}/ diff -Nru pam-fprint-20080330+git/debian/watch pam-fprint-0.2+git20080330/debian/watch --- pam-fprint-20080330+git/debian/watch 1970-01-01 00:00:00.000000000 +0000 +++ pam-fprint-0.2+git20080330/debian/watch 2010-01-31 20:35:52.000000000 +0000 @@ -0,0 +1,2 @@ +version=3 +http://sf.net/fprint/pam_fprint-(.*)\.tar\.bz2