[isar-cip-core] cip-core-image-security.bb:libpm-google-authenticator debian package


Jan Kiszka
 

On 08.07.22 12:57, Shreyas.Karmahe@... wrote:
Hi Jan,

The configuration recipe changes to verify multi-factor authentication for local and remote method verifications merged in
Following MR
https://lists.cip-project.org/g/cip-dev/message/8632

But libpam-google-authenticator package is not yet added, kindly accept and merge this request
Thanks for pointing out, forgot about this.

But then we should refactor: your already merged postinst patch should
have also added libpam-google-authenticator as its dependency
(security-customizations.bb: DEBIAN_DEPENDS = ...). I will drop that
other patch again so that you can send v3 with this resolved.

Jan

--
Siemens AG, Technology
Competence Center Embedded Linux


Shreyas.Karmahe@...
 

Hi Jan,

The configuration recipe changes to verify multi-factor authentication for local and remote method verifications merged in
Following MR
https://lists.cip-project.org/g/cip-dev/message/8632

But libpam-google-authenticator package is not yet added, kindly accept and merge this request

Kind Regards,
Shreyas

-----Original Message-----
From: karmahe shreyas(TSIP)
Sent: Wednesday, June 22, 2022 11:01 AM
To: Jan Kiszka <jan.kiszka@...>; cip-dev@...
Cc: dinesh kumar(TSIP) <dinesh.kumar@...>; pyla venkata(TSIP TMIEC ODG Porting) <Venkata.Pyla@...>; hayashi kazuhiro(林 和宏 □SWC◯ACT) <kazuhiro3.hayashi@...>
Subject: RE: [isar-cip-core] cip-core-image-security.bb:libpm-google-authenticator debian package

Hi Jan Kiszka,

I have added libpm-google-authenticator debian package debian package to verify Local and Remote multi-factor authentication.
I will create new MR regarding configuration changes and recipe customization.

Thanks & Regards,
Shreyas

-----Original Message-----
From: Jan Kiszka <jan.kiszka@...>
Sent: Friday, June 17, 2022 8:33 PM
To: karmahe shreyas(TSIP) <Shreyas.Karmahe@...>; cip-dev@...
Cc: dinesh kumar(TSIP) <dinesh.kumar@...>; pyla venkata(TSIP TMIEC ODG Porting) <Venkata.Pyla@...>; hayashi kazuhiro(林 和宏 □SWC◯ACT) <kazuhiro3.hayashi@...>
Subject: Re: [isar-cip-core] cip-core-image-security.bb:libpm-google-authenticator debian package

On 17.06.22 16:44, Shreyas.Karmahe@... wrote:
From: Shreyas Karmahe <Shreyas.Karmahe@...>

Added libpm-google-authenticator for MFA authetication for remote and
local session

Signed-off-by: Shreyas Karmahe <Shreyas.Karmahe@...>
---
recipes-core/images/cip-core-image-security.bb | 1 +
1 file changed, 1 insertion(+)

diff --git a/recipes-core/images/cip-core-image-security.bb
b/recipes-core/images/cip-core-image-security.bb
index 3ea544a..e56d279 100644
--- a/recipes-core/images/cip-core-image-security.bb
+++ b/recipes-core/images/cip-core-image-security.bb
@@ -32,6 +32,7 @@ IMAGE_PREINSTALL += " \
audispd-plugins auditd \
uuid-runtime \
sudo \
+ libpam-google-authenticator \
"

OVERRIDES_append = ":${BASE_DISTRO_CODENAME}"
Is that thing configuration-free? Or will the customization recipe need some tuning as well?

Jan

--
Siemens AG, Technology
Competence Center Embedded Linux


Shreyas.Karmahe@...
 

Hi Jan Kiszka,

I have added libpm-google-authenticator debian package debian package to verify Local and Remote multi-factor authentication.
I will create new MR regarding configuration changes and recipe customization.

Thanks & Regards,
Shreyas

-----Original Message-----
From: Jan Kiszka <jan.kiszka@...>
Sent: Friday, June 17, 2022 8:33 PM
To: karmahe shreyas(TSIP) <Shreyas.Karmahe@...>; cip-dev@...
Cc: dinesh kumar(TSIP) <dinesh.kumar@...>; pyla venkata(TSIP TMIEC ODG Porting) <Venkata.Pyla@...>; hayashi kazuhiro(林 和宏 □SWC◯ACT) <kazuhiro3.hayashi@...>
Subject: Re: [isar-cip-core] cip-core-image-security.bb:libpm-google-authenticator debian package

On 17.06.22 16:44, Shreyas.Karmahe@... wrote:
From: Shreyas Karmahe <Shreyas.Karmahe@...>

Added libpm-google-authenticator for MFA authetication for remote and
local session

Signed-off-by: Shreyas Karmahe <Shreyas.Karmahe@...>
---
recipes-core/images/cip-core-image-security.bb | 1 +
1 file changed, 1 insertion(+)

diff --git a/recipes-core/images/cip-core-image-security.bb
b/recipes-core/images/cip-core-image-security.bb
index 3ea544a..e56d279 100644
--- a/recipes-core/images/cip-core-image-security.bb
+++ b/recipes-core/images/cip-core-image-security.bb
@@ -32,6 +32,7 @@ IMAGE_PREINSTALL += " \
audispd-plugins auditd \
uuid-runtime \
sudo \
+ libpam-google-authenticator \
"

OVERRIDES_append = ":${BASE_DISTRO_CODENAME}"
Is that thing configuration-free? Or will the customization recipe need some tuning as well?

Jan

--
Siemens AG, Technology
Competence Center Embedded Linux


Jan Kiszka
 

On 17.06.22 16:44, Shreyas.Karmahe@... wrote:
From: Shreyas Karmahe <Shreyas.Karmahe@...>

Added libpm-google-authenticator for MFA authetication for remote and local session

Signed-off-by: Shreyas Karmahe <Shreyas.Karmahe@...>
---
recipes-core/images/cip-core-image-security.bb | 1 +
1 file changed, 1 insertion(+)

diff --git a/recipes-core/images/cip-core-image-security.bb b/recipes-core/images/cip-core-image-security.bb
index 3ea544a..e56d279 100644
--- a/recipes-core/images/cip-core-image-security.bb
+++ b/recipes-core/images/cip-core-image-security.bb
@@ -32,6 +32,7 @@ IMAGE_PREINSTALL += " \
audispd-plugins auditd \
uuid-runtime \
sudo \
+ libpam-google-authenticator \
"

OVERRIDES_append = ":${BASE_DISTRO_CODENAME}"
Is that thing configuration-free? Or will the customization recipe need
some tuning as well?

Jan

--
Siemens AG, Technology
Competence Center Embedded Linux