gdm3_3.38.2.1-3_source.changes ACCEPTED into experimental

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 15 Apr 2021 17:55:12 +0200
Source: gdm3
Built-For-Profiles: noudeb
Architecture: source
Version: 3.38.2.1-3
Distribution: experimental
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
Changed-By: Marco Trevisan (Treviño) <marco at ubuntu.com>
Launchpad-Bugs-Fixed: 1917362
Changes:
 gdm3 (3.38.2.1-3) experimental; urgency=medium
 .
   * debian/changelog: Remove bad entry meant to be in ubuntu side only
     It's not needed in debian
   * debian/patches: Correctly return from idle callback
   * debian/gdm3.gdm-smartcard-*:
     - Do not set user_readenv=1 in pam_env.so (keep it for ubuntu only).
     - Ignore invalid user errors on pam_succeed_if.so.
       We may call the gdm-smartcard module without an user, leaving the module
       to figure it out depending on the smartcard certificate.
       So we need to ignore PAM_USER_UNKNOWN errors on pam_suceed_if.so.
       While pam_sss.so already checks for the user being non root internally,
       it's always better to ensure early this in all the cases.
       In the pkcs11 case instead we need to check it again after the module
       has returned. (LP: #1917362)
     - Check for /var/run/nologin (and friends) only when an user is defined
       pam_nologin.so requires a PAM_USER to be defined in order to check if
       the request has been done by root, possibly stopping the login otherwise.
       And in case none was provided, it will trigger the fallback pam prompt.
       However, with smartcard authentication we may initiate the PAM session
       without an user defined and leave to the smartcard service to try to
       figure it out depending on the token that has been inserted, that may
       have an user associated with it.
       So, ensure that we load all the PAM modules that require an user after
       the smartcard one, that in case will set one for us.
       Only after that, we can fail in case /var/run/nologin is present
       (LP: #1917362)
Checksums-Sha1:
 31880228f383930cd9168f07352f94911bd969dc 2838 gdm3_3.38.2.1-3.dsc
 8467655b637bcf56439b4f781493f36f6418c92c 97156 gdm3_3.38.2.1-3.debian.tar.xz
 ba81fce92b5041ffb0e327e3d4012e83dbdfbe4b 19552 gdm3_3.38.2.1-3_source.buildinfo
Checksums-Sha256:
 f42a46151bb13601c5de1c68f66650a6dddb81eae5897f8689c76b40d0a26232 2838 gdm3_3.38.2.1-3.dsc
 945c83a42d2153d95f996a5aa1c5ce262b90822d89ffd104389926de47a3aab3 97156 gdm3_3.38.2.1-3.debian.tar.xz
 54829ce234137c5d7d41a0c698ea732693213259bf35597198ba5327958db607 19552 gdm3_3.38.2.1-3_source.buildinfo
Files:
 daadb756e1d4872372cdf44259ddfdb9 2838 gnome optional gdm3_3.38.2.1-3.dsc
 bf7dc8b9cab42a89354bfe4ff8fefa38 97156 gnome optional gdm3_3.38.2.1-3.debian.tar.xz
 6c87384d7c2547d6b3eaecd3846850c0 19552 gnome optional gdm3_3.38.2.1-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=5z4j
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.