faf7390363Accepting request 1238984 from Base:System
factory
Ana Guerrero
2025-01-21 20:09:56 +00:00
e6d68f710a- bsc#1235453: Set SYS_{UID,GID}_MIN to 201: After repeated similar requests to change the ID ranges we set the above mentioned value to 201. The max value will stay at 499. This range should be sufficient and will give us leeway for the future. It's not straightforward to find out which static UIDs/GIDs are used in all packages. Update shadow-login_defs-suse.patch
devel
Michael Vetter
2025-01-20 10:26:02 +00:00
a70f8202f6Accepting request 1237059 from Base:System
Ana Guerrero
2025-01-14 15:21:06 +00:00
b485849e2a- Update to 4.17.2: * src/login_nopam.c: Fix compiler warnings #1170 * lib/chkname.c: Put limits for LOGIN_NAME_MAX and sysconf(_SC_LOGIN_NAME_MAX) #1169 * Use HTTPS in link to Wikipedia article on password strength #1164 * lib/attr.h: use C23 attributes only with gcc >= 10 #1172 * login: Fix no-pam authorization regression #1174 * man: Add Portuguese translation #1178 * Update French translation #1177 * Add cheap defense mechanisms #1171 * Add Romanian translation #1176
Michael Vetter
2025-01-11 16:38:29 +00:00
3fe1d7e250Accepting request 1234180 from Base:System
Ana Guerrero
2025-01-02 18:19:11 +00:00
6d5f08146e* Fix su - regression #1163
Michael Vetter
2024-12-31 19:43:29 +00:00
113257727e- Update to 4.17.1: * su: Fix su - regression #1163
Michael Vetter
2024-12-31 19:43:06 +00:00
1d046b70ccAccepting request 1233577 from Base:System
Ana Guerrero
2024-12-30 11:50:27 +00:00
2ad7a94d8c- Update to 4.17.0: * Fix the lower part of the domain of csrand_uniform() * Fix use of volatile pointer * Use 'dist-hook' to clean up <tests/unit/Makefile> * Use str2[u]l() instead of atoi(3) * Use a2i() in various places * Fix const correctness * Use uid_t for holding UIDs (and GIDs) * Move all sprintf(3)-like APIs to a subdirectory * Move all copying APIs to a subdirectory * Fix forever loop on ENOMEM * Fix REALLOC() nmemb calculation * Remove id(1) * Remove groups(1) * Use local time for human-readable dates * Use %F instead of %Y-%m-%d with strftime(3) * is_valid{user,group}_name(): Set errno to distinguish the reasons * Recommend --badname only if it is useful * Add fmkomstemp() to fix mode of </etc/default/useradd> * Fix use-after-free bug in sgetgrent() * Update Catalan translation * Remove references to cppw, cpgr * groupadd, groupmod: Update gshadow file with -U * Added option -a for listing active users only, optimized using if aflg,return * Added information in lastlog man page for new option '-a' * Plenty of code cleanup and clarifications
Michael Vetter
2024-12-27 16:21:20 +00:00
1976b7cf41Accepting request 1193090 from Base:System
Dominique Leuenberger
2024-08-13 11:21:47 +00:00
975cbcc7b2- Disable flushing sssd caches. The sssd's files provider is no longer available.
Michael Vetter
2024-08-10 04:34:41 +00:00
e8cce0bcd0Accepting request 1183021 from Base:System
Ana Guerrero
2024-06-25 21:06:26 +00:00
4fa713e7d0- bsc#1226850: Drop incorrect econf patch (until time to fix it) Drop shadow-4.16.0-econf.patch
Michael Vetter
2024-06-24 13:05:26 +00:00
51afa9a830Accepting request 1181876 from Base:System
Ana Guerrero
2024-06-21 14:03:18 +00:00
826df7f957- Update to 4.16.0: * The shadow implementations of id(1) and groups(1) are deprecated in favor of the GNU coreutils and binutils versions. They will be removed in 4.17.0. * The rlogind implementation has been removed. * The libsubid major version has been bumped, since it now requires specification of the module's free() implementation. - Update shadow-login_defs-suse.patch - Add shadow-4.16.0-econf.patch: Replace deprecated econf_readDirs with econf_readConfig
Michael Vetter
2024-06-19 07:13:11 +00:00
467ea622d2Accepting request 1161093 from Base:System
Ana Guerrero
2024-03-25 20:06:06 +00:00
57303d29a0- Update to 4.15.1: * Fix a bug that caused spurious error messages about unknown login.defs configuration options #967 * Adding checks for fd omission #964 * Use temporary stat buffer #974 * Fix wrong french translation #975 - Drop shadow-4.15.0-fix-definition.patch
Michael Vetter
2024-03-24 09:13:40 +00:00
85fe6a4a20Accepting request 1159987 from Base:System
Ana Guerrero
2024-03-22 14:15:59 +00:00
0f42921987- Add shadow-4.15.0-fix-definition.patch: Fix error messages about config options. See gh/shadow-maint/shadow#967
Michael Vetter
2024-03-21 06:39:57 +00:00
413dcfbcf9- Update to 4.15.0 * libshadow: + Use utmpx instead of utmp. This fixes a regression introduced in 4.14.0. + Fix build error (parameter name omitted). * Build system: + Link correctly with libdl. + Install pam configs for chpasswd(8) and newusers(8) when using ./configure --with-libpam --disable-account-tools-setuid. + Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. + Fix build with musl libc. + Support out of tree builds * useradd(8): + Set proper SELinux labels for def_usrtemplate - Update Serge Hallyns GPG key - Update shadow-login_defs-unused-by-pam.patch
Michael Vetter
2024-03-10 07:16:34 +00:00
de9c0c0e13Accepting request 1154375 from Base:System
Ana Guerrero
2024-03-04 20:24:37 +00:00
a62399592e- Update to 4.14.6: * login(1): + Fix off-by-one bugs. * passwd(1): + Don't silently truncate passwords of length >= 200 characters. Instead, accept a length of PASS_MAX, and reject longer ones. * libshadow: + Fix calculation in strtoday(), which caused a wrong half-day offset in some cases (bsc#1176006) + Fix parsing of dates in get_date() (bsc#1176006) + Use utmpx instead of utmp. This fixes a regression introduced in 4.14.0.
Michael Vetter
2024-03-03 06:16:59 +00:00
8122d2daffAccepting request 1146473 from Base:System
Ana Guerrero
2024-02-16 20:45:28 +00:00
504a5a8a2a- Update to 4.14.5: * Build system: + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had been deleted from a Makefile variable, but it should have been chpasswd. - Remove shadow-4.14.4-chgpasswd-typo.patch
Michael Vetter
2024-02-13 18:46:23 +00:00
b61dc19e89Accepting request 1146447 from home:jubalh:branches:Base:System
Michael Vetter
2024-02-13 15:32:50 +00:00
0703facd01Accepting request 1139074 from Base:System
Ana Guerrero
2024-01-17 21:14:09 +00:00
63a97837c7- Update to 4.14.3: * libshadow: + Avoid null pointer dereference (#904)
Michael Vetter
2024-01-16 07:04:58 +00:00
42f26e4728Accepting request 1137739 from Base:System
Ana Guerrero
2024-01-11 20:04:31 +00:00
ad60077eda- bsc#1199026 bsc#1203823: Remove pam_keyinit from PAM configuration. This was introduced for bsc#1144060.
Michael Vetter
2024-01-09 14:17:29 +00:00
ed667551d3Accepting request 1121084 from Base:System
Ana Guerrero
2023-10-31 19:24:26 +00:00
f19bcfd712- Update to 4.14.2: * libshadow: + Fix build with musl libc. + Avoid NULL dereference. + Update utmp at an initial login * useradd(8): + Set proper SELinux labels for def_usrtemplate * Manual: + Document --prefix in chage(1), chpasswd(8), and passwd(1) - Drop upstreamed shadow-4.14.0-selinux-labels.patch
Michael Vetter
2023-10-30 07:27:10 +00:00
8cdab85ffcAccepting request 1115994 from Base:System
Ana Guerrero
2023-10-06 19:11:40 +00:00
c317274c66- Update to 4.14.1: Build system: Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. #791 - Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring
Michael Vetter
2023-10-06 08:44:42 +00:00
d61b4112ddAccepting request 1114284 from Base:System
Ana Guerrero
2023-10-02 18:04:17 +00:00
8a856d91acAccepting request 1114040 from home:jsegitz:branches:Base:System
Michael Vetter
2023-09-29 08:42:12 +00:00
89460a18eaAccepting request 1104351 from Base:System
Ana Guerrero
2023-08-18 17:26:58 +00:00
2745f98eaf- Remove dependency on libbsd: On Tumbleweed we have glibc 2.38 already thus string functions like strlcpy will be present and won't be needed from libbsd. readpassphrase() is then the only function from libbsd not present. Upstream shadow has an in tree copy of it, that is used when the --without-libbsd flag is passed along. By relying on glibc 2.38 we don't need to add libbsd and libmd to our ring0 but can't easily upgrade on SLE.
Michael Vetter
2023-08-17 10:17:53 +00:00
1108d9a8b3- This release depends either on libbsd or on glibc >= 2.38 which only recently got released. libbsd (and libmd) would be new packages in our ring0
Michael Vetter
2023-08-17 07:07:20 +00:00
87279e85bb* configure: add with-libbsd option * Code cleanup * Replace utmp interface #757 * new option enable-logind #674 * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh * chsh: warn if root sets a shell not listed in /etc/shells #535 * newgrp: fix potential string injection * lastlog: fix alignment of Latest header * Fix yescrypt support #748 * chgpasswd: Fix segfault in command-line options * gpasswd: Fix password leak * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627) * usermod: fix off-by-one issues #701 * ch(g)passwd: Check selinux permissions upon startup #675 * sub_[ug]id_{add,remove}: fix return values * chsh: Verify that login shell path is absolute #730 * process_prefix_flag: Drop privileges * run_parts for groupadd and groupdel #706 * newgrp/useradd: always set SIGCHLD to default * useradd/usermod: add --selinux-range argument #698 * sssd: skip flushing if executable does not exist #699 * semanage: Do not set default SELinux range #676 * Add control character check #687 * usermod: respect --prefix for --gid option * Fix null dereference in basename * newuidmap and newgidmap: support passing pid as fd * Prevent out of boundary access #633 * Explicitly override only newlines #633 * Correctly handle illegal system file in tz #633 * Supporting vendor given -shells- configuration file #599
Michael Vetter
2023-08-17 07:04:09 +00:00
d8c5f764fa- Dont build lastlog (lastlog.legacy) anymore since we use lastlog2 by default now.
Michael Vetter
2023-08-14 13:58:58 +00:00
3a9edf4780- Remove scripts that claim to be config but are in /usr (boo#1191578) * userdel-script.patch * useradd-script.patch * useradd.local * userdel-post.local * userdel-pre.local
Michael Vetter
2023-02-16 09:24:10 +00:00
e2af94b0edAccepting request 1065945 from home:lnussel:branches:Base:System
Michael Vetter
2023-02-16 09:21:12 +00:00
b27c231a63Accepting request 1058151 from Base:System
Dominique Leuenberger
2023-01-15 16:57:46 +00:00
4c6bdfaa5d- Add shadow-fix-print-login-timeout.patch: Fix printing full login timeout message See gh/shadow-maint/shadow#621 See gh/shadow-maint/shadow#606
Michael Vetter
2023-01-13 08:24:43 +00:00
50d83362eeAccepting request 1043310 from Base:System
Dominique Leuenberger
2022-12-18 16:22:23 +00:00
5ee66f6a14- bsc#1205502: Fix useradd audit event logging of ID field * Add shadow-audit-no-id.patch
Michael Vetter
2022-12-16 10:10:32 +00:00
c4ba14a87fAccepting request 1034857 from Base:System
Dominique Leuenberger
2022-11-12 16:39:48 +00:00
8c1e3ce264- Update to 4.13: * useradd.8: fix default group ID * Revert drop of subid_init() * Georgian translation * useradd: Avoid taking unneeded space: do not reset non-existent data in lastlog * relax username restrictions * selinux: check MLS enabled before setting serange * copy_tree: use fchmodat instead of chmod * copy_tree: don't block on FIFOs * add shell linter * copy_tree: carefully treat permissions * lib/commonio: make lock failures more detailed * lib: use strzero and memzero where applicable * Update Dutch translation * Don't test for NULL before calling free * Use libc MAX() and MIN() * chage: Fix regression in print_date * usermod: report error if homedir does not exist * libmisc: minimum id check for system accounts * fix usermod -rG x y wrongly adding a group * man: add missing space in useradd.8.xml * lastlog: check for localtime() return value * Raise limit for passwd and shadow entry length * Remove adduser-old.c * useradd: Fix buffer overflow when using a prefix * Don't warn when failed to open /etc/nsswitch.conf - Remove patches we took from upstream pre-release: * shadow-copytree-usermod-fifo.patch * shadow-chage-format.patch
Michael Vetter
2022-11-09 13:35:08 +00:00
639c9f801bAccepting request 1034152 from Base:System
Dominique Leuenberger
2022-11-09 11:55:54 +00:00
91f075eb3d- Add shadow-copytree-usermod-fifo.patch: Fix regression that prevented usermod -m to work when their home directory contained at least one fifo See https://github.com/shadow-maint/shadow/pull/565
Michael Vetter
2022-11-07 11:26:02 +00:00
205ec2f07aAccepting request 1032849 from Base:System
Dominique Leuenberger
2022-11-04 16:31:23 +00:00
ec972ebebd- bsc#1204811: Fix chage date format string regression * Add shadow-chage-format.patch
Michael Vetter
2022-11-02 11:01:13 +00:00
33a33d170aAccepting request 1030965 from Base:System
Dominique Leuenberger
2022-10-26 10:31:12 +00:00
b7b2971a9a- Update to 4.12.3: Revert removal of subid_init, which should have bumped soname. So note that 4.12 through 4.12.2 were broken for subid users.
Michael Vetter
2022-08-22 14:01:13 +00:00
c714985a2e- Update to 4.12.1: * Fix uk manpages - Remove shadow-4.12-remove-uk.patch: fixed upstream
Michael Vetter
2022-08-15 17:45:21 +00:00
ccb51bf365- Update to 4.12: * Add absolute path hint to --root * Various cleanups * Fix Ubuntu release used in CI tests * add -F options to userad * useradd manpage updates * Check for ownerid (not just username) in subid ranges * Declare file local functions static * Use strict prototypes * Do not drop const qualifier for Basename * Constify various pointers * Don't return uninitialized memory * Don't let compiler optimize away memory cleaning * Remove many obsolete compatibility checks and defines * Modify ID range check in useradd * Use "extern "C"" to make libsubid easier to use from C++ * French translation updates * Fix s/with-pam/with-libpam/ * Spanish translation updates * French translation fixes * Default max group name length to 32 * Fix PAM service files without-selinux * Improve manpages - groupadd, useradd, usermod - groups and id - pwck * Add fedora to CI builds * Fix condition under which pw_dir check happens * logoutd: switch to strncat * AUTHORS: improve markdown output
Michael Vetter
2022-08-12 06:09:36 +00:00
0ca771d496Accepting request 993912 from home:kukuk:branches:Base:System
Michael Vetter
2022-08-09 09:45:37 +00:00
d2ca3da6d4Accepting request 946483 from Base:System
Dominique Leuenberger
2022-01-16 22:18:02 +00:00
c47e0f3e3cfor security reasons and compatibility. [bsc#1189139] [bsc#1182850]
Michael Vetter
2021-09-16 10:24:51 +00:00
31b62a4fb1- Add shadow-passwd-handle-null.patch [bsc#1188307]:
Michael Vetter
2021-09-16 10:15:59 +00:00
8f871cae62- Fix shadow-login_defs-check.sh: In the last update we switched from calling make to %make_build macro. Using sed to adapt the spec file now.
Michael Vetter
2021-09-07 15:09:34 +00:00
c8f7c173d8Accepting request 912922 from home:kukuk:tiu
Michael Vetter
2021-08-18 17:54:07 +00:00
3317029e04Accepting request 912915 from home:jubalh:branches:Base:System
Michael Vetter
2021-08-18 14:25:29 +00:00
5460746738Accepting request 903625 from Base:System
Dominique Leuenberger
2021-07-06 21:30:00 +00:00
e27cf8c34fAccepting request 903400 from home:kukuk:branches:Base:System
Michael Vetter
2021-07-02 06:52:55 +00:00
faf07ff787Accepting request 897717 from home:mauriziogalli:branches:Base:System
Michael Vetter
2021-06-08 06:39:30 +00:00
b6e8d920e2Accepting request 897344 from home:kukuk:tiu
Michael Vetter
2021-06-08 06:36:00 +00:00
c2abc15313Accepting request 872327 from Base:System
Dominique Leuenberger
2021-04-15 14:56:33 +00:00
451a55ed1dAccepting request 871006 from home:sbrabec:branches:distconfdir-fix
Michael Vetter
2021-02-15 09:45:08 +00:00
1b82897569Accepting request 867612 from home:sbrabec:branches:distconfdir-fixMarcus Meissner2021-01-30 08:05:35 +00:00
a4ea6b15c3Accepting request 865245 from home:kukuk:branches:Base:System
Michael Vetter
2021-01-21 08:48:53 +00:00
ff3f23e669Accepting request 848094 from home:favogt:boo1178296
Dr. Werner Fink
2020-11-12 10:32:46 +00:00