Release authselect-1.2 · authselect/authselect

Authselect team is proud to announce the release of authselect 1.2. This is a major release with several new features and bug fixes.

Notable changes

New profile minimal for systems with memory and disk space constraints was added
pam_faillock now reads all options from its configuration file in /etc/security/faillock.conf
pam_faillock is now called also for system account (usually with uid < 1000)
uid checks are no longer hardcoded and use new module pam_usertype instead to determine if the account is a system or regular account based on values in /etc/login.defs
with-files-access-provider was added to sssd profile to enable pam_sss for access check also for local users

Fixed regression where backup was not done automatically with authselect select $profile --force
It is now possible to correctly restore non-authselect configuration from backup

#203 - spec: add dependency on pam package that contains pam_usertype
#197 - authselect-1.1-6.fc32 seems unable to restore the default configuration
#187 - add files only profile for system with memory constrains
#198 - profiles: use pam_faillock also for system accounts
#182 - Read min uid from login.defs
#193 - pam_faillock: use faillock.conf instead of hard conding values
#181 - sssd: add with-files-access-provider to use SSSD's account management for local users
#192 - cli: select $profile --force does not create backup automatically