overlay coreos/config: Add vendoring of PAM files to a couple of packages

krnowak · krnowak · commit 318e6af8fc20 · 2025-11-12T18:04:49.000+01:00
Signed-off-by: Krzesimir Nowak &lt;knowak@microsoft.com&gt;
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-admin/sudo b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-admin/sudo
@@ -1,9 +1,12 @@
-cros_post_src_install_keep_etc_sudoers_d() {
-    # Flatcar: Build system installs /etc/sudoers.d, let's make
-    # sure we keep having it.
+cros_post_src_install_flatcar_modifications() {
+    # Build system installs /etc/sudoers.d, let's make sure we keep
+    # having it.
     #
     # Upstream PR: https://github.com/gentoo/gentoo/pull/37397
     keepdir /etc/sudoers.d
+
+    # Move pam files to /usr.
+    vendorize_pam_files
 }
 
 # We don't ship OpenLDAP schemas (why?) and we provide sudo.conf
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/open-vm-tools b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-emulation/open-vm-tools
@@ -0,0 +1,3 @@
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/cyrus-sasl
@@ -3,3 +3,7 @@
 # obviously won't work in case of cross-compilation, so we state up
 # front that SPNEGO is supported.
 export ac_cv_gssapi_supports_spnego=yes
+
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/libpwquality b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/dev-libs/libpwquality
@@ -0,0 +1,3 @@
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-fs/samba b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-fs/samba
@@ -31,4 +31,7 @@ cros_post_src_install_samba_flatcar_modifications() {
     rm -rf "${ED}/usr/$(get_libdir)/perl"*
     rm -rf "${ED}/usr/$(get_libdir)/python"*
     rm -rf "${ED}/var"
+
+    # Move pam files to /usr.
+    vendorize_pam_files
 }
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-misc/openssh b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-misc/openssh
@@ -8,3 +8,7 @@ if [[ $(flatcar_target) != 'sdk' ]] ; then
 	INSTALL_MASK+="${openssh_mask}"
 	unset openssh_mask
 fi
+
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/kbd b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/kbd
@@ -0,0 +1,3 @@
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/policycoreutils b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/policycoreutils
@@ -14,3 +14,7 @@ cros_post_src_install_set_up_var_lib_selinux() {
     mv "${ED}/var/lib/selinux" "${ED}/usr/lib/selinux/policy"
     dosym -r /usr/lib/selinux/policy /var/lib/selinux
 }
+
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/shadow b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/shadow
@@ -72,4 +72,7 @@ ttyS0
 
 ${devs}
 EOF
+
+    # Move pam files to /usr.
+    vendorize_pam_files
 }
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/util-linux b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/util-linux
@@ -1,3 +1,7 @@
 # New mount API does not work very well for mounting overlayfs when we
 # are building sysexts.
 export EXTRA_ECONF="--disable-libmount-mountfd-support"
+
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-auth/pambase b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-auth/pambase
@@ -0,0 +1,3 @@
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-auth/sssd b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-auth/sssd
@@ -2,14 +2,10 @@
 # plugin, even if sssd is not running.
 export EXTRA_ECONF="--enable-sss-default-nss-plugin"
 
-# We haven't switched to having pam config in /etc, so move the files
-# to /usr.
-cros_post_src_install_move_pamd() {
-	mkdir -p "${ED}/usr/share/"
-	mv "${ED}/etc/pam.d" "${ED}/usr/share/pam.d"
-}
+cros_post_src_install_flatcar_modifications() {
+    # This is to make sure that some sssd config is always in place.
+    cp -a "${ED}"/etc/sssd/sssd{-example,}.conf
 
-# This is to make sure that some sssd config is always in place.
-cros_post_src_set_initial_config() {
-	cp -a "${ED}"/etc/sssd/sssd{-example,}.conf
+    # Move pam files to /usr.
+    vendorize_pam_files
 }
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-libs/libcap b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-libs/libcap
@@ -0,0 +1,3 @@
+cros_post_src_install_vendorize_pam() {
+    vendorize_pam_files
+}

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+cros_post_src_install_vendorize_pam() {`
	`2`	`+ vendorize_pam_files`
	`3`	`+}`
Original file line number	Diff line number	Diff line change
`@@ -31,4 +31,7 @@ cros_post_src_install_samba_flatcar_modifications() {`
`31`	`31`	`rm -rf "${ED}/usr/$(get_libdir)/perl"*`
`32`	`32`	`rm -rf "${ED}/usr/$(get_libdir)/python"*`
`33`	`33`	`rm -rf "${ED}/var"`
	`34`	`+`
	`35`	`+ # Move pam files to /usr.`
	`36`	`+ vendorize_pam_files`
`34`	`37`	`}`
Original file line number	Diff line number	Diff line change
`@@ -14,3 +14,7 @@ cros_post_src_install_set_up_var_lib_selinux() {`
`14`	`14`	`mv "${ED}/var/lib/selinux" "${ED}/usr/lib/selinux/policy"`
`15`	`15`	`dosym -r /usr/lib/selinux/policy /var/lib/selinux`
`16`	`16`	`}`
	`17`	`+`
	`18`	`+cros_post_src_install_vendorize_pam() {`
	`19`	`+ vendorize_pam_files`
	`20`	`+}`
Original file line number	Diff line number	Diff line change
`@@ -72,4 +72,7 @@ ttyS0`
`72`	`72`
`73`	`73`	`${devs}`
`74`	`74`	`EOF`
	`75`	`+`
	`76`	`+ # Move pam files to /usr.`
	`77`	`+ vendorize_pam_files`
`75`	`78`	`}`