annotate patches;remove nostrip handling from debian/rules

[ckermit.git] / debian / patches / 04_pam-password-prompting

diff --git a/debian/patches/04_pam-password-prompting b/debian/patches/04_pam-password-prompting
index 4efd800..28d0791 100644 (file)
--- a/debian/patches/04_pam-password-prompting
+++ b/debian/patches/04_pam-password-prompting
@@ -1,3 +1,6 @@
+Make IKSD authentication (using PAM) ask for a password when an
+invalid username has been given, to avoid disclosing which account
+names are valid. See #417247.
 --- ckermit-211.orig/ckufio.c
 +++ ckermit-211/ckufio.c
 @@ -490,6 +490,9 @@