8122d2daff
Accepting request 1146473 from Base:System
Ana Guerrero2024-02-16 20:45:28 +00:00
750cf6f921
- Update to 4.14.5: * Build system: + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had been deleted from a Makefile variable, but it should have been chpasswd. - Remove shadow-4.14.4-chgpasswd-typo.patch
Michael Vetter2024-02-13 18:46:23 +00:00
504a5a8a2a
- Update to 4.14.5: * Build system: + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had been deleted from a Makefile variable, but it should have been chpasswd. - Remove shadow-4.14.4-chgpasswd-typo.patch
Michael Vetter2024-02-13 18:46:23 +00:00
015ea9d3f4
Accepting request 1146447 from home:jubalh:branches:Base:System
Michael Vetter2024-02-13 15:32:50 +00:00
b61dc19e89
Accepting request 1146447 from home:jubalh:branches:Base:System
Michael Vetter2024-02-13 15:32:50 +00:00
234dfee765
Accepting request 1139074 from Base:System
Ana Guerrero2024-01-17 21:14:09 +00:00
0703facd01
Accepting request 1139074 from Base:System
Ana Guerrero2024-01-17 21:14:09 +00:00
6d74f21db4
- Update to 4.14.3: * libshadow: + Avoid null pointer dereference (#904)
Michael Vetter2024-01-16 07:04:58 +00:00
63a97837c7
- Update to 4.14.3: * libshadow: + Avoid null pointer dereference (#904)
Michael Vetter2024-01-16 07:04:58 +00:00
e9f85baeff
Accepting request 1137739 from Base:System
Ana Guerrero2024-01-11 20:04:31 +00:00
42f26e4728
Accepting request 1137739 from Base:System
Ana Guerrero2024-01-11 20:04:31 +00:00
36eb29a946
- bsc#1199026 bsc#1203823: Remove pam_keyinit from PAM configuration. This was introduced for bsc#1144060.
Michael Vetter2024-01-09 14:17:29 +00:00
ad60077eda
- bsc#1199026 bsc#1203823: Remove pam_keyinit from PAM configuration. This was introduced for bsc#1144060.
Michael Vetter2024-01-09 14:17:29 +00:00
b448370387
Accepting request 1121084 from Base:System
Ana Guerrero2023-10-31 19:24:26 +00:00
ed667551d3
Accepting request 1121084 from Base:System
Ana Guerrero2023-10-31 19:24:26 +00:00
0ee5ec6de0
- Update to 4.14.2: * libshadow: + Fix build with musl libc. + Avoid NULL dereference. + Update utmp at an initial login * useradd(8): + Set proper SELinux labels for def_usrtemplate * Manual: + Document --prefix in chage(1), chpasswd(8), and passwd(1) - Drop upstreamed shadow-4.14.0-selinux-labels.patch
Michael Vetter2023-10-30 07:27:10 +00:00
f19bcfd712
- Update to 4.14.2: * libshadow: + Fix build with musl libc. + Avoid NULL dereference. + Update utmp at an initial login * useradd(8): + Set proper SELinux labels for def_usrtemplate * Manual: + Document --prefix in chage(1), chpasswd(8), and passwd(1) - Drop upstreamed shadow-4.14.0-selinux-labels.patch
Michael Vetter2023-10-30 07:27:10 +00:00
f3ddeaf2a9
Accepting request 1115994 from Base:System
Ana Guerrero2023-10-06 19:11:40 +00:00
8cdab85ffc
Accepting request 1115994 from Base:System
Ana Guerrero2023-10-06 19:11:40 +00:00
d897c1c9f0
- Update to 4.14.1: Build system: Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. #791 - Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring
Michael Vetter2023-10-06 08:44:42 +00:00
c317274c66
- Update to 4.14.1: Build system: Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. #791 - Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring
Michael Vetter2023-10-06 08:44:42 +00:00
6691f27a52
Accepting request 1114284 from Base:System
Ana Guerrero2023-10-02 18:04:17 +00:00
d61b4112dd
Accepting request 1114284 from Base:System
Ana Guerrero2023-10-02 18:04:17 +00:00
33d441a381
Accepting request 1114040 from home:jsegitz:branches:Base:System
Michael Vetter2023-09-29 08:42:12 +00:00
8a856d91ac
Accepting request 1114040 from home:jsegitz:branches:Base:System
Michael Vetter2023-09-29 08:42:12 +00:00
8ef124bd17
Accepting request 1104351 from Base:System
Ana Guerrero2023-08-18 17:26:58 +00:00
89460a18ea
Accepting request 1104351 from Base:System
Ana Guerrero2023-08-18 17:26:58 +00:00
c09d26849c
- Remove dependency on libbsd: On Tumbleweed we have glibc 2.38 already thus string functions like strlcpy will be present and won't be needed from libbsd. readpassphrase() is then the only function from libbsd not present. Upstream shadow has an in tree copy of it, that is used when the --without-libbsd flag is passed along. By relying on glibc 2.38 we don't need to add libbsd and libmd to our ring0 but can't easily upgrade on SLE.
Michael Vetter2023-08-17 10:17:53 +00:00
2745f98eaf
- Remove dependency on libbsd: On Tumbleweed we have glibc 2.38 already thus string functions like strlcpy will be present and won't be needed from libbsd. readpassphrase() is then the only function from libbsd not present. Upstream shadow has an in tree copy of it, that is used when the --without-libbsd flag is passed along. By relying on glibc 2.38 we don't need to add libbsd and libmd to our ring0 but can't easily upgrade on SLE.
Michael Vetter2023-08-17 10:17:53 +00:00
8dc9816237
- This release depends either on libbsd or on glibc >= 2.38 which only recently got released. libbsd (and libmd) would be new packages in our ring0
Michael Vetter2023-08-17 07:07:20 +00:00
1108d9a8b3
- This release depends either on libbsd or on glibc >= 2.38 which only recently got released. libbsd (and libmd) would be new packages in our ring0
Michael Vetter2023-08-17 07:07:20 +00:00
5c1375538b
* configure: add with-libbsd option * Code cleanup * Replace utmp interface #757 * new option enable-logind #674 * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh * chsh: warn if root sets a shell not listed in /etc/shells #535 * newgrp: fix potential string injection * lastlog: fix alignment of Latest header * Fix yescrypt support #748 * chgpasswd: Fix segfault in command-line options * gpasswd: Fix password leak * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627) * usermod: fix off-by-one issues #701 * ch(g)passwd: Check selinux permissions upon startup #675 * sub_[ug]id_{add,remove}: fix return values * chsh: Verify that login shell path is absolute #730 * process_prefix_flag: Drop privileges * run_parts for groupadd and groupdel #706 * newgrp/useradd: always set SIGCHLD to default * useradd/usermod: add --selinux-range argument #698 * sssd: skip flushing if executable does not exist #699 * semanage: Do not set default SELinux range #676 * Add control character check #687 * usermod: respect --prefix for --gid option * Fix null dereference in basename * newuidmap and newgidmap: support passing pid as fd * Prevent out of boundary access #633 * Explicitly override only newlines #633 * Correctly handle illegal system file in tz #633 * Supporting vendor given -shells- configuration file #599Michael Vetter2023-08-17 07:04:09 +00:00
87279e85bb
* configure: add with-libbsd option * Code cleanup * Replace utmp interface #757 * new option enable-logind #674 * shadow userdel: add the adaptation to the busybox ps in 01-kill_user_procs.sh * chsh: warn if root sets a shell not listed in /etc/shells #535 * newgrp: fix potential string injection * lastlog: fix alignment of Latest header * Fix yescrypt support #748 * chgpasswd: Fix segfault in command-line options * gpasswd: Fix password leak * Add --prefix to passwd, chpasswd and chage #714 (bsc#1206627) * usermod: fix off-by-one issues #701 * ch(g)passwd: Check selinux permissions upon startup #675 * sub_[ug]id_{add,remove}: fix return values * chsh: Verify that login shell path is absolute #730 * process_prefix_flag: Drop privileges * run_parts for groupadd and groupdel #706 * newgrp/useradd: always set SIGCHLD to default * useradd/usermod: add --selinux-range argument #698 * sssd: skip flushing if executable does not exist #699 * semanage: Do not set default SELinux range #676 * Add control character check #687 * usermod: respect --prefix for --gid option * Fix null dereference in basename * newuidmap and newgidmap: support passing pid as fd * Prevent out of boundary access #633 * Explicitly override only newlines #633 * Correctly handle illegal system file in tz #633 * Supporting vendor given -shells- configuration file #599Michael Vetter2023-08-17 07:04:09 +00:00
8864782ae5
- Dont build lastlog (lastlog.legacy) anymore since we use lastlog2 by default now.
Michael Vetter2023-08-14 13:58:58 +00:00
d8c5f764fa
- Dont build lastlog (lastlog.legacy) anymore since we use lastlog2 by default now.
Michael Vetter2023-08-14 13:58:58 +00:00
1b009aa943
- Remove scripts that claim to be config but are in /usr (boo#1191578) * userdel-script.patch * useradd-script.patch * useradd.local * userdel-post.local * userdel-pre.local
Michael Vetter2023-02-16 09:24:10 +00:00
3a9edf4780
- Remove scripts that claim to be config but are in /usr (boo#1191578) * userdel-script.patch * useradd-script.patch * useradd.local * userdel-post.local * userdel-pre.local
Michael Vetter2023-02-16 09:24:10 +00:00
eecb5a2015
Accepting request 1065945 from home:lnussel:branches:Base:System
Michael Vetter2023-02-16 09:21:12 +00:00
e2af94b0ed
Accepting request 1065945 from home:lnussel:branches:Base:System
Michael Vetter2023-02-16 09:21:12 +00:00
7eab99c21b
- Add shadow-fix-print-login-timeout.patch: Fix printing full login timeout message See gh/shadow-maint/shadow#621 See gh/shadow-maint/shadow#606
Michael Vetter2023-01-13 08:24:43 +00:00
4c6bdfaa5d
- Add shadow-fix-print-login-timeout.patch: Fix printing full login timeout message See gh/shadow-maint/shadow#621 See gh/shadow-maint/shadow#606
Michael Vetter2023-01-13 08:24:43 +00:00
87bb4672dd
- Update to 4.13: * useradd.8: fix default group ID * Revert drop of subid_init() * Georgian translation * useradd: Avoid taking unneeded space: do not reset non-existent data in lastlog * relax username restrictions * selinux: check MLS enabled before setting serange * copy_tree: use fchmodat instead of chmod * copy_tree: don't block on FIFOs * add shell linter * copy_tree: carefully treat permissions * lib/commonio: make lock failures more detailed * lib: use strzero and memzero where applicable * Update Dutch translation * Don't test for NULL before calling free * Use libc MAX() and MIN() * chage: Fix regression in print_date * usermod: report error if homedir does not exist * libmisc: minimum id check for system accounts * fix usermod -rG x y wrongly adding a group * man: add missing space in useradd.8.xml * lastlog: check for localtime() return value * Raise limit for passwd and shadow entry length * Remove adduser-old.c * useradd: Fix buffer overflow when using a prefix * Don't warn when failed to open /etc/nsswitch.conf - Remove patches we took from upstream pre-release: * shadow-copytree-usermod-fifo.patch * shadow-chage-format.patch
Michael Vetter2022-11-09 13:35:08 +00:00
8c1e3ce264
- Update to 4.13: * useradd.8: fix default group ID * Revert drop of subid_init() * Georgian translation * useradd: Avoid taking unneeded space: do not reset non-existent data in lastlog * relax username restrictions * selinux: check MLS enabled before setting serange * copy_tree: use fchmodat instead of chmod * copy_tree: don't block on FIFOs * add shell linter * copy_tree: carefully treat permissions * lib/commonio: make lock failures more detailed * lib: use strzero and memzero where applicable * Update Dutch translation * Don't test for NULL before calling free * Use libc MAX() and MIN() * chage: Fix regression in print_date * usermod: report error if homedir does not exist * libmisc: minimum id check for system accounts * fix usermod -rG x y wrongly adding a group * man: add missing space in useradd.8.xml * lastlog: check for localtime() return value * Raise limit for passwd and shadow entry length * Remove adduser-old.c * useradd: Fix buffer overflow when using a prefix * Don't warn when failed to open /etc/nsswitch.conf - Remove patches we took from upstream pre-release: * shadow-copytree-usermod-fifo.patch * shadow-chage-format.patch
Michael Vetter2022-11-09 13:35:08 +00:00
1b9a986535
- Update to 4.12.3: Revert removal of subid_init, which should have bumped soname. So note that 4.12 through 4.12.2 were broken for subid users.
Michael Vetter2022-08-22 14:01:13 +00:00
b7b2971a9a
- Update to 4.12.3: Revert removal of subid_init, which should have bumped soname. So note that 4.12 through 4.12.2 were broken for subid users.
Michael Vetter2022-08-22 14:01:13 +00:00
afc8e18ce3
- Update to 4.12.1: * Fix uk manpages - Remove shadow-4.12-remove-uk.patch: fixed upstream
Michael Vetter2022-08-15 17:45:21 +00:00
c714985a2e
- Update to 4.12.1: * Fix uk manpages - Remove shadow-4.12-remove-uk.patch: fixed upstream
Michael Vetter2022-08-15 17:45:21 +00:00
f8783b74e9
- Update to 4.12: * Add absolute path hint to --root * Various cleanups * Fix Ubuntu release used in CI tests * add -F options to userad * useradd manpage updates * Check for ownerid (not just username) in subid ranges * Declare file local functions static * Use strict prototypes * Do not drop const qualifier for Basename * Constify various pointers * Don't return uninitialized memory * Don't let compiler optimize away memory cleaning * Remove many obsolete compatibility checks and defines * Modify ID range check in useradd * Use "extern "C"" to make libsubid easier to use from C++ * French translation updates * Fix s/with-pam/with-libpam/ * Spanish translation updates * French translation fixes * Default max group name length to 32 * Fix PAM service files without-selinux * Improve manpages - groupadd, useradd, usermod - groups and id - pwck * Add fedora to CI builds * Fix condition under which pw_dir check happens * logoutd: switch to strncat * AUTHORS: improve markdown output
Michael Vetter2022-08-12 06:09:36 +00:00
ccb51bf365
- Update to 4.12: * Add absolute path hint to --root * Various cleanups * Fix Ubuntu release used in CI tests * add -F options to userad * useradd manpage updates * Check for ownerid (not just username) in subid ranges * Declare file local functions static * Use strict prototypes * Do not drop const qualifier for Basename * Constify various pointers * Don't return uninitialized memory * Don't let compiler optimize away memory cleaning * Remove many obsolete compatibility checks and defines * Modify ID range check in useradd * Use "extern "C"" to make libsubid easier to use from C++ * French translation updates * Fix s/with-pam/with-libpam/ * Spanish translation updates * French translation fixes * Default max group name length to 32 * Fix PAM service files without-selinux * Improve manpages - groupadd, useradd, usermod - groups and id - pwck * Add fedora to CI builds * Fix condition under which pw_dir check happens * logoutd: switch to strncat * AUTHORS: improve markdown output
Michael Vetter2022-08-12 06:09:36 +00:00
3a788cca87
Accepting request 993912 from home:kukuk:branches:Base:System
Michael Vetter2022-08-09 09:45:37 +00:00
0ca771d496
Accepting request 993912 from home:kukuk:branches:Base:System
Michael Vetter2022-08-09 09:45:37 +00:00
Ana Guerrero
Michael Vetter
Dominique Leuenberger