New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pam: add redHatModules option #65636
Conversation
cecac7d
to
4e11276
Compare
@@ -1,65 +1,90 @@ | |||
{ stdenv, buildPackages, fetchurl, fetchpatch, flex, cracklib, db4 }: | |||
{ stdenv, buildPackages, fetchurl, fetchpatch, flex, cracklib, db4, redHatModules ? false, autoreconfHook ? null, yacc ? null, pkgconfig ? null, libxslt ? null, libxml2 ? null, docbook_xsl ? null, docbook_xml_dtd_44 ? null, docbook_xml_dtd_43 ? null, w3m ? null, docbook_xml_dtd_412 ? null }: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
minor, but please order attributes vertically instead of horizontally. It reduces the diff when changes are needed
Thank you for your contributions.
|
I marked this as stale due to inactivity. → More info |
stdenv.mkDerivation rec { | ||
name = "linux-pam-${version}"; | ||
version = "1.3.1"; | ||
assert redHatModules -> stdenv.lib.all (x: x != null) [ autoreconfHook yacc pkgconfig libxslt libxml2 docbook_xsl docbook_xml_dtd_44 docbook_xml_dtd_43 w3m ]; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
the null's are unnecessary
Please open a new PR if this is still wanted. |
Motivation for this change
There are some PAM modules that are used by Red-Hat-associated distros such as Fedora, CentOS and RHEL, which could be useful for others too but have not been upstreamed.
Concretely, those are pam_faillock, pam_console, pam_chroot and pam_postgresok.
pam_faillock has the advantage of working with screensavers, as opposed to the included by default pam_tally and pam_tally2.
Things done
sandbox
innix.conf
on non-NixOS)nix-shell -p nix-review --run "nix-review wip"
./result/bin/
)nix path-info -S
before and after)