|
|
|
|
@ -1,4 +1,4 @@
|
|
|
|
|
From ba6573835fe5828325048ad46c75f2d72c650f3b Mon Sep 17 00:00:00 2001
|
|
|
|
|
From dc95ab82c6a961755c8d06949ca02c1685dca275 Mon Sep 17 00:00:00 2001
|
|
|
|
|
From: Alexey Berezhok <aberezhok@msvsphere-os.ru>
|
|
|
|
|
Date: Tue, 23 Jan 2024 23:01:57 +0300
|
|
|
|
|
Subject: [PATCH] Added GOST policy also added experimental PAM generator
|
|
|
|
|
@ -720,7 +720,7 @@ index 0000000..37e478b
|
|
|
|
|
+action_do = GOST
|
|
|
|
|
diff --git a/policies/modules/GOST.pmod b/policies/modules/GOST.pmod
|
|
|
|
|
new file mode 100644
|
|
|
|
|
index 0000000..019e063
|
|
|
|
|
index 0000000..b9021ea
|
|
|
|
|
--- /dev/null
|
|
|
|
|
+++ b/policies/modules/GOST.pmod
|
|
|
|
|
@@ -0,0 +1,18 @@
|
|
|
|
|
@ -754,7 +754,7 @@ index 0000000..9082402
|
|
|
|
|
+
|
|
|
|
|
+authopt@AUTH = custom/sssd_gost with-gost with-fingerprint with-silent-lastlog
|
|
|
|
|
diff --git a/python/build-crypto-policies.py b/python/build-crypto-policies.py
|
|
|
|
|
index c04d518..2eab19b 100755
|
|
|
|
|
index c04d518..90a0772 100755
|
|
|
|
|
--- a/python/build-crypto-policies.py
|
|
|
|
|
+++ b/python/build-crypto-policies.py
|
|
|
|
|
@@ -9,6 +9,7 @@ import argparse
|
|
|
|
|
@ -769,11 +769,11 @@ index c04d518..2eab19b 100755
|
|
|
|
|
try:
|
|
|
|
|
with open(path, mode='r', encoding='utf-8') as f:
|
|
|
|
|
old_config = f.read()
|
|
|
|
|
+ if '[gost_section]' in old_config:
|
|
|
|
|
+ if '[gost_section]' in config:
|
|
|
|
|
+ arch, links = platform.architecture()
|
|
|
|
|
+ if arch == '32bit':
|
|
|
|
|
+ #Make test expected file same for x86 and x86_64 systems
|
|
|
|
|
+ old_config = old_config.replace('dynamic_path = /usr/lib/engines-3/gost.so', 'dynamic_path = /usr/lib64/engines-3/gost.so')
|
|
|
|
|
+ config = config.replace('dynamic_path = /usr/lib/engines-3/gost.so', 'dynamic_path = /usr/lib64/engines-3/gost.so')
|
|
|
|
|
if old_config != config:
|
|
|
|
|
eprint(f'Config for {config_name} for policy {policy_name} '
|
|
|
|
|
'differs from the existing one')
|
|
|
|
|
|
Alexey Berezhok
11 months ago