From nobody Fri Dec 31 04:02:51 2021 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 46B87191A89D for ; Fri, 31 Dec 2021 04:02:59 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JQBLp3ps1z3mSy; Fri, 31 Dec 2021 04:02:58 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from shw-obgw-4001a.ext.cloudfilter.net ([10.228.9.142]) by cmsmtp with ESMTP id 38zInyMF1ztEj3986n4IJ9; Fri, 31 Dec 2021 04:02:58 +0000 Received: from spqr.komquats.com ([70.66.148.124]) by cmsmtp with ESMTPA id 3984nksY3lt4Q3985ne11a; Fri, 31 Dec 2021 04:02:58 +0000 X-Authority-Analysis: v=2.4 cv=F+dEy4tN c=1 sm=1 tr=0 ts=61ce80f2 a=Cwc3rblV8FOMdVN/wOAqyQ==:117 a=Cwc3rblV8FOMdVN/wOAqyQ==:17 a=kj9zAlcOel0A:10 a=IOMw9HtfNCkA:10 a=YxBL1-UpAAAA:8 a=6I5d2MoRAAAA:8 a=EkcXrb_YAAAA:8 a=VxmjJ2MpAAAA:8 a=S6Z0F3pSAAAA:8 a=SLG1KRGDAAAA:8 a=0FNk9USiAAAA:8 a=Ds8RGfT2AAAA:8 a=NMM7OKYrAAAA:8 a=uhIfLiD-XTRtR2qtlAkA:9 a=JOWeiY5itpwPQvuQ8dm/GawRuwE=:19 a=u3VQvYO9nyQqiNd4:21 a=CjuIK1q_8ugA:10 a=Ia-lj3WSrqcvXOmTRaiG:22 a=IjZwj45LgO3ly-622nXo:22 a=LK5xJRSDVpKd5WXXoEvA:22 a=7gXAzLPJhVmCkEl4_tsf:22 a=mJqyFdGOsMfqSh2oEfd4:22 a=-TBaU1e9WpdkKBzYXnwo:22 a=TF7iPsq83L4KsoDyi5cH:22 a=0afPCejbyZHll-xH3H2j:22 a=isrg6BwTYk6I_F0B0DtW:22 Received: from slippy.cwsent.com (slippy [10.1.1.91]) by spqr.komquats.com (Postfix) with ESMTPS id E2180147; Thu, 30 Dec 2021 20:02:54 -0800 (PST) Received: from slippy (localhost [127.0.0.1]) by slippy.cwsent.com (8.16.1/8.16.1) with ESMTP id 1BV42p3C036429; Thu, 30 Dec 2021 20:02:51 -0800 (PST) (envelope-from Cy.Schubert@cschubert.com) Message-Id: <202112310402.1BV42p3C036429@slippy.cwsent.com> X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.7.1 Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: Cy Schubert cc: Eric Turgeon , Tomoaki AOKI , dev-commits-ports-main@freebsd.org, Cy Schubert Subject: Re: git: f3caf742108b - main - x11/mate-screensaver: Fix PAM build In-reply-to: <202112301701.1BUH1dji009235@slippy.cwsent.com> References: <20211230110857.1c0ac0e19e8206cb64a040d7@dec.sakura.ne.jp> <202112300342.1BU3gPt9003879@slippy.cwsent.com> <202112301701.1BUH1dji009235@slippy.cwsent.com> Comments: In-reply-to Cy Schubert message dated "Thu, 30 Dec 2021 09:01:39 -0800." List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 30 Dec 2021 20:02:51 -0800 X-CMAE-Envelope: MS4xfCVOpEydFNscPkoky6/NKgRHIq7We9mgMJM2fKOT6WCkQo2uax1VQTdYsBeJroY8sIFaEI6L3uphEbArh5GmhUXcj+gmZZF0os9+9yv9P4FDkTp0gVlL GBmn9UMSoNFf/R/qz0mhoAl3bO1ybmz4Jhs5MV6BnJ9RjKV1FN7yOcDzSxdeIRDDwgrTr0rZBAFjZ/+WwkYKKJdMk81RfiT/S+lEWr6e2gIJO1A/OBtzjpat sVElbGoSsNEPMWYCM4ZN8n91/t81EGx6FRUhdhnb0RfLkvFEu0YekllmoBU+EYWLsr1OEWDy9tcJlzhI83AHjw== X-Rspamd-Queue-Id: 4JQBLp3ps1z3mSy X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of cy.schubert@cschubert.com has no SPF policy when checking 3.97.99.33) smtp.mailfrom=cy.schubert@cschubert.com X-Spamd-Result: default: False [-0.27 / 15.00]; HAS_REPLYTO(0.00)[Cy.Schubert@cschubert.com]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; RCPT_COUNT_FIVE(0.00)[5]; RCVD_IN_DNSWL_MED(-0.20)[3.97.99.33:from]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RECEIVED_SPAMHAUS_PBL(0.00)[70.66.148.124:received]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.97)[-0.970]; RCVD_COUNT_FIVE(0.00)[5]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[text/plain]; AUTH_NA(1.00)[]; DMARC_NA(0.00)[cschubert.com: no valid DMARC record]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_TLS_LAST(0.00)[]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[3.97.99.33:from]; FREEMAIL_CC(0.00)[gmail.com,dec.sakura.ne.jp,freebsd.org]; SUSPICIOUS_RECIPS(1.50)[] X-ThisMailContainsUnwantedMimeParts: N I can confirm PAM authentication is broken by this new release. Like layers of an onion, this problem will need to be investigated further. I doubt simply adding additional macros would resolve the problem. The reason I believe this is that the macros are likely a small part of something larger. Having said that, ports/security/pecl-pam includes a copy of the file with a reference to the URL from whence it came (suggesting a GPL violation in the ports tree). I think the path forward is to engage our upstream. Then look at a number of short-term or longer-term options to get us over this hump. If upstream is open to fixing the problem temporarily marking the PAM option broken or temporarily rolling back the upgrade may suffice. Alternatively, if upstream isn't open to remediation we may want to consider importing Linux-pam on github as a port. Be aware that multiple PAM stacks can coexist however similar problems we have with three KRB5s will require getting linking just right. This option does have the advantage of supporting other software written for Linux-PAM (instead of OpenPAM or Solaris PAM -- FreeBSD PAM is based on OpenPAM). Another alternative is dump mate-screensaver for xscreensaver. IIRC xscreensaver was the original screen saver for Gnome back in the day. (IMO xscreensaver is superior to the Gnome and mate screensavers, though this is just a personal preference. I've also used it to replace the CDE screensaver on a per-user basis.) Anyhow, just a thought for anyone. Until we look at the code we won't have a good idea of what kind of work is involved. Strategically a Linux-PAM port might be something we might want to think about long term. Tactically, any of the other options could work. -- Cheers, Cy Schubert FreeBSD UNIX: Web: https://FreeBSD.org NTP: Web: https://nwtime.org The need of the many outweighs the greed of the few. In message <202112301701.1BUH1dji009235@slippy.cwsent.com>, Cy Schubert writes: > No. It's a bunch of inline macros that perform memory and other functions. > All could have been made to be actual functions. On my Fedora VM at $JOB > they're part of the pam-devel.rpm. > > > -- > Cheers, > Cy Schubert > FreeBSD UNIX: Web: https://FreeBSD.org > NTP: Web: https://nwtime.org > > The need of the many outweighs the greed of the few. > > > In message om> > , Eric Turgeon writes: > > --00000000000063b43405d45dfc6d > > Content-Type: text/plain; charset="UTF-8" > > > > Do we have an equivalent of security/_pam_macros.h? > > > > *Eric Turgeon* > > > > > > On Wed, Dec 29, 2021 at 11:42 PM Cy Schubert > > wrote: > > > > > This commit only fixed a compile time error, include file > > > security/_pam_macros.h not found (discovered by my poudriere build). > > > security/_pam_macros is an include file found only on some distros of > > > Linux, a Linuxism. Try it without PAM enabled; the file not found error > > > may > > > just be the beginning of a multitude of PAM issues. > > > > > > I'll try to look at it over the next couple days. > > > > > > > > > -- > > > Cheers, > > > Cy Schubert > > > FreeBSD UNIX: Web: https://FreeBSD.org > > > NTP: Web: https://nwtime.org > > > > > > The need of the many outweighs the greed of the few. > > > > > > > > > In message <20211230110857.1c0ac0e19e8206cb64a040d7@dec.sakura.ne.jp>, > > > Tomoaki > > > AOKI writes: > > > > Hi. > > > > Wondered whih commit to comment but decided to latest. > > > > mate-screensaver no longer opens login panel after upgrading from > > > > 1.26.0 to 1.26.1. > > > > > > > > Created Bug 260811 [1]. > > > > > > > > [1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260811 > > > > > > > > > > > > > The branch main has been updated by cy: > > > > > > > > > > URL: > > > > > > > https://cgit.FreeBSD.org/ports/commit/?id=f3caf742108bb552724d4c4dae74b28 > ea > > 26 > > > > 6a6a3 > > > > > > > > > > commit f3caf742108bb552724d4c4dae74b28ea266a6a3 > > > > > Author: Cy Schubert > > > > > AuthorDate: 2021-12-29 03:12:39 +0000 > > > > > Commit: Cy Schubert > > > > > CommitDate: 2021-12-29 03:12:39 +0000 > > > > > > > > > > x11/mate-screensaver: Fix PAM build > > > > > > > > > > Fix build when PAM enabled; is a Linuxis > m. > > > > > --- > > > > > x11/mate-screensaver/files/patch-helper_pam-helper.c | 10 ++++++++++ > > > > > 1 file changed, 10 insertions(+) > > > > > > > > > > diff --git a/x11/mate-screensaver/files/patch-helper_pam-helper.c > > > > b/x11/mate-screensaver/files/patch-helper_pam-helper.c > > > > > new file mode 100644 > > > > > index 000000000000..605141fb0e54 > > > > > --- /dev/null > > > > > +++ b/x11/mate-screensaver/files/patch-helper_pam-helper.c > > > > > _at__at_ -0,0 +1,10 _at__at_ > > > > > +--- helper/pam-helper.c.orig 2021-11-15 14:28:47.000000000 -08 > 00 > > > > > ++++ helper/pam-helper.c 2021-12-28 19:09:39.501645000 -0800 > > > > > +_at__at_ -33,7 +33,6 _at__at_ > > > > > + */ > > > > > + > > > > > + #include > > > > > +-#include > > > > > + > > > > > + #include > > > > > + #include > > > > > > > > -- > > > > Tomoaki AOKI > > > > > > > > > > > > > --00000000000063b43405d45dfc6d > > Content-Type: text/html; charset="UTF-8" > > Content-Transfer-Encoding: quoted-printable > > > >
Do we have an equivalent of security/_pam_macros.h? = > > div>

= > > a-smartmail=3D"gmail_signature">
= > > >
> =3D"#888888">Eric Turgeon = > > >
= > > >


> =3D"gmail_quote">
On Wed, Dec 29, 2021 > = > > at 11:42 PM Cy Schubert <C > = > > y.Schubert@cschubert.com> wrote:
= > > _quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204 > = > > ,204);padding-left:1ex">This commit only fixed a compile time error, includ > = > > e file
> > security/_pam_macros.h not found (discovered by my poudriere build).
> > security/_pam_macros is an include file found only on some distros of
> > Linux, a Linuxism. Try it without PAM enabled; the file not found error may > = > >
> > just be the beginning of a multitude of PAM issues.
> >
> > I'll try to look at it over the next couple days.
> >
> >
> > --
> > Cheers,
> > Cy Schubert < = > > nk">Cy.Schubert@cschubert.com>
> > FreeBSD UNIX:=C2=A0 <cy@FreeBSD.org>=C2=A0 =C2=A0Web:=C2=A0 > =3D"https://FreeBSD.org" rel=3D"noreferrer" target=3D"_blank">https://FreeB > = > > SD.org
> > NTP:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0< = > > e.org" target=3D"_blank">cy@nwtime.org>=C2=A0 =C2=A0 Web:=C2=A0 = > > ref=3D"https://nwtime.org" rel=3D"noreferrer" target=3D"_blank">https://nwt > = > > ime.org
> >
> > =C2=A0 =C2=A0 =C2=A0 =C2=A0 The need of the many outweighs the greed of the > = > > few.
> >
> >
> > In message < = > > c.sakura.ne.jp" target=3D"_blank">20211230110857.1c0ac0e19e8206cb64a040d7@d > = > > ec.sakura.ne.jp>,
> > Tomoaki
> > AOKI writes:
> > > Hi.
> > > Wondered whih commit to comment but decided to latest.
> > > mate-screensaver no longer opens login panel after upgrading from
> > > 1.26.0 to 1.26.1.
> > >
> > > Created Bug 260811 [1].
> > >
> > > [1] = > > 811" rel=3D"noreferrer" target=3D"_blank">https://bugs.freebsd.org/bugzilla > = > > /show_bug.cgi?id=3D260811
> > >
> > >
> > > > The branch main has been updated by cy:
> > > >
> > > > URL:
> > > = > > 2724d4c4dae74b28ea26" rel=3D"noreferrer" target=3D"_blank">https://cgit.Fre > = > > eBSD.org/ports/commit/?id=3Df3caf742108bb552724d4c4dae74b28ea26
> > > 6a6a3
> > > >
> > > > commit f3caf742108bb552724d4c4dae74b28ea266a6a3
> > > > Author:=C2=A0 =C2=A0 =C2=A0Cy Schubert <cy_at_FreeBSD.org>< > = > > br> > > > > AuthorDate: 2021-12-29 03:12:39 +0000
> > > > Commit:=C2=A0 =C2=A0 =C2=A0Cy Schubert <cy_at_FreeBSD.org>< > = > > br> > > > > CommitDate: 2021-12-29 03:12:39 +0000
> > > >
> > > >=C2=A0 =C2=A0 =C2=A0x11/mate-screensaver: Fix PAM build
> > > >=C2=A0 =C2=A0 =C2=A0
> > > >=C2=A0 =C2=A0 =C2=A0Fix build when PAM enabled; <security/_pam_ > = > > macros.h> is a Linuxism.
> > > > ---
> > > >=C2=A0 x11/mate-screensaver/files/patch-helper_pam-helper.c | 10 + > = > > +++++++++
> > > >=C2=A0 1 file changed, 10 insertions(+)
> > > >
> > > > diff --git a/x11/mate-screensaver/files/patch-helper_pam-helper.c > = > >
> > > b/x11/mate-screensaver/files/patch-helper_pam-helper.c
> > > > new file mode 100644
> > > > index 000000000000..605141fb0e54
> > > > --- /dev/null
> > > > +++ b/x11/mate-screensaver/files/patch-helper_pam-helper.c
> > > > _at__at_ -0,0 +1,10 _at__at_
> > > > +--- helper/pam-helper.c.orig=C2=A0 =C2=A0 =C2=A0 =C2=A02021-11-1 > = > > 5 14:28:47.000000000 -0800
> > > > ++++ helper/pam-helper.c=C2=A0 =C2=A0 2021-12-28 19:09:39.5016450 > = > > 00 -0800
> > > > +_at__at_ -33,7 +33,6 _at__at_
> > > > +=C2=A0 */
> > > > +
> > > > + #include <security/pam_appl.h>
> > > > +-#include <security/_pam_macros.h>
> > > > +
> > > > + #include <sys/types.h>
> > > > + #include <stdarg.h>
> > >
> > > --
> > > Tomoaki AOKI=C2=A0 =C2=A0 < = > > .jp" target=3D"_blank">junchoon@dec.sakura.ne.jp>
> >
> >
> >
> > > > --00000000000063b43405d45dfc6d-- >