[24186] in Source-Commits
/svn/athena r23787 - trunk/debathena/config/reactivate/debian
daemon@ATHENA.MIT.EDU (Geoffrey Thomas)
Fri May 15 02:40:55 2009
Date: Fri, 15 May 2009 02:40:44 -0400
From: Geoffrey Thomas <geofft@MIT.EDU>
Message-Id: <200905150640.n4F6eiRW029981@drugstore.mit.edu>
To: source-commits@mit.edu
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Author: geofft
Date: 2009-05-15 02:40:44 -0400 (Fri, 15 May 2009)
New Revision: 23787
Added:
trunk/debathena/config/reactivate/debian/su-warning
trunk/debathena/config/reactivate/debian/sudo-warning
trunk/debathena/config/reactivate/debian/transform_su.debathena
trunk/debathena/config/reactivate/debian/transform_sudoers.debathena
Modified:
trunk/debathena/config/reactivate/debian/changelog
trunk/debathena/config/reactivate/debian/debathena-reactivate.install
trunk/debathena/config/reactivate/debian/rules
Log:
In reactivate:
* Display a warning about the login snapshots, once per session
for sudo and every time you su.
Modified: trunk/debathena/config/reactivate/debian/changelog
===================================================================
--- trunk/debathena/config/reactivate/debian/changelog 2009-05-15 05:39:57 UTC (rev 23786)
+++ trunk/debathena/config/reactivate/debian/changelog 2009-05-15 06:40:44 UTC (rev 23787)
@@ -1,3 +1,10 @@
+debathena-reactivate (1.19) unstable; urgency=low
+
+ * Display a warning about the login snapshots, once per session
+ for sudo and every time you su.
+
+ -- Geoffrey Thomas <geofft@mit.edu> Fri, 15 May 2009 02:35:03 -0400
+
debathena-reactivate (1.18) unstable; urgency=low
* Send SIGTERM before SIGKILL when cleaning up user processes
Modified: trunk/debathena/config/reactivate/debian/debathena-reactivate.install
===================================================================
--- trunk/debathena/config/reactivate/debian/debathena-reactivate.install 2009-05-15 05:39:57 UTC (rev 23786)
+++ trunk/debathena/config/reactivate/debian/debathena-reactivate.install 2009-05-15 06:40:44 UTC (rev 23787)
@@ -4,3 +4,5 @@
debian/PostSession/Default.debathena etc/gdm/PostSession
debian/updatedb.findutils.cron.local etc
debian/policy-rc.d usr/sbin
+debian/sudo-warning etc/athena
+debian/su-warning etc/athena
Modified: trunk/debathena/config/reactivate/debian/rules
===================================================================
--- trunk/debathena/config/reactivate/debian/rules 2009-05-15 05:39:57 UTC (rev 23786)
+++ trunk/debathena/config/reactivate/debian/rules 2009-05-15 06:40:44 UTC (rev 23787)
@@ -5,5 +5,8 @@
/etc/gdm/Xsession.debathena \
/etc/gdm/PreSession/Default.debathena \
/etc/gdm/PostSession/Default.debathena
+DEB_TRANSFORM_FILES_debathena-reactivate += \
+ /etc/sudoers.debathena \
+ /etc/pam.d/su.debathena
include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/rules/config-package.mk
Added: trunk/debathena/config/reactivate/debian/su-warning
===================================================================
--- trunk/debathena/config/reactivate/debian/su-warning 2009-05-15 05:39:57 UTC (rev 23786)
+++ trunk/debathena/config/reactivate/debian/su-warning 2009-05-15 06:40:44 UTC (rev 23787)
@@ -0,0 +1,10 @@
+Attention: You are on a Debathena cluster machine. Although you can use
+su to become root, your access is restricted to a sandbox (chroot)
+created when you logged in. If you install software or change
+global settings, they will be reverted when you log out.
+
+If you would like a permanent change to cluster machines, please
+report a bug via the "sendbug" command.
+
+Run the command "tellme root" to find the current Athena root password.
+
Added: trunk/debathena/config/reactivate/debian/sudo-warning
===================================================================
--- trunk/debathena/config/reactivate/debian/sudo-warning 2009-05-15 05:39:57 UTC (rev 23786)
+++ trunk/debathena/config/reactivate/debian/sudo-warning 2009-05-15 06:40:44 UTC (rev 23787)
@@ -0,0 +1,9 @@
+Attention: You are on a Debathena cluster machine. Although you can use
+sudo to become root, your access is restricted to a sandbox (chroot)
+created when you logged in. If you install software or change
+global settings, they will be reverted when you log out.
+
+If you would like a permanent change to cluster machines, please
+report a bug via the "sendbug" command.
+Enter your Athena password below.
+
Added: trunk/debathena/config/reactivate/debian/transform_su.debathena
===================================================================
--- trunk/debathena/config/reactivate/debian/transform_su.debathena 2009-05-15 05:39:57 UTC (rev 23786)
+++ trunk/debathena/config/reactivate/debian/transform_su.debathena 2009-05-15 06:40:44 UTC (rev 23787)
@@ -0,0 +1,3 @@
+#!/bin/sh
+cat
+echo auth optional pam_echo.so file=/etc/athena/su-warning
Property changes on: trunk/debathena/config/reactivate/debian/transform_su.debathena
___________________________________________________________________
Name: svn:executable
+ *
Added: trunk/debathena/config/reactivate/debian/transform_sudoers.debathena
===================================================================
--- trunk/debathena/config/reactivate/debian/transform_sudoers.debathena 2009-05-15 05:39:57 UTC (rev 23786)
+++ trunk/debathena/config/reactivate/debian/transform_sudoers.debathena 2009-05-15 06:40:44 UTC (rev 23787)
@@ -0,0 +1,3 @@
+#!/bin/sh
+cat
+echo 'Defaults:%admin lecture_file=/etc/athena/sudo-warning, lecture=once'
Property changes on: trunk/debathena/config/reactivate/debian/transform_sudoers.debathena
___________________________________________________________________
Name: svn:executable
+ *
