Michael Vetter
420307f9ea
* chsh: do not warn about blank shell
* lib/: Use strisdigit() instead of its pattern
* lib/string/ctype/strisascii/: strisdigit(): Add function
* lib/string/: Add comments expanding the letter-soup API names
* lib/basename.c: Basename(): Use stprcspn() instead of its pattern
* lib/string/strspn/, lib/, src/: stprspn(), strrspn_(): Split API into function and macro
* lib/string/strspn/, lib/, src/: Move *spn() APIs to separate subdir
* lib/string/strchr/: strrcspn(), stprcspn(): Add function and macro
* src/useradd.c: Use !strcaseeq() instead of its pattern
* lib/, src/: Use strcaseeq() instead of its pattern
* lib/string/strcmp/: strcaseeq(): Add function
* man/useradd.8.xml: Document new exit code 19 (E_BAD_NAME)
* src/useradd.c: E_BAD_NAME: Use a different error code for bad login names
* src/useradd.c: create_home(): Use !streq() instead of its pattern
* lib/chkname.c: is_valid_name(): Use streq() instead of its pattern
* configure.ac, lib/: Use __has_include(<gshadow.h>) instead of HAVE_GSHADOW_H
* configure.ac: Remove unused AC_CHECK_HEADERS() checks
* configure.ac, lib/: Use __has_include(<sys/capability.h>) instead of HAVE_SYS_CAPABILITY_H
* lib/idmapping.c: Unconditionally include <sys/prctl.h>
* lib/: Use __has_include(<security/openpam.h>) instead of HAVE_SECURITY_OPENPAM_H
* lib/: Use __has_include(<security/pam_misc.h>) instead of HAVE_SECURITY_PAM_MISC_H
* configure.ac, lib/: Use __has_include(<sys/random.h>) instead of HAVE_SYS_RANDOM_H
* configure.ac, lib/: Use __has_include(<crypt.h>) instead of HAVE_CRYPT_H
* lib/, src/: motd(): Report errors instead of exiting from library code
* lib/motd.c: motd(): Invert logic to reduce indentation
* lib/, src/, doc/: Remove pw_auth()'s $3 as dead code
* lib/pwauth.*: PW_{ADD,CHANGE,DELETE,FTP,REXEC}: Remove dead code
* lib/, src/, doc/: Remove dead code
* src/vipw.c: Restore the original terminal pgrp after editing
OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=193
140 lines
3.9 KiB
Diff
140 lines
3.9 KiB
Diff
Add variables referred by util-linux login, runuser and su, but not by
|
|
shadow.
|
|
|
|
Delete variables used by shadow implementation of login, su and runuser
|
|
that has no use in util-linux implementation.
|
|
|
|
Index: etc/login.defs
|
|
===================================================================
|
|
--- etc/login.defs.orig
|
|
+++ etc/login.defs
|
|
@@ -1,5 +1,7 @@
|
|
#
|
|
# /etc/login.defs - Configuration control definitions for the shadow package.
|
|
+# Some variables are used by login(1), su(1) and runuser(1) from util-linux
|
|
+# package as well pam pam_unix(8) from pam package.
|
|
#
|
|
# $Id$
|
|
#
|
|
@@ -17,9 +19,8 @@ FAIL_DELAY 3
|
|
LOG_UNKFAIL_ENAB no
|
|
|
|
#
|
|
-# Enable logging of successful logins
|
|
+# Enable "syslog" logging of newgrp(1) and sg(1) activity.
|
|
#
|
|
-LOG_OK_LOGINS no
|
|
|
|
#
|
|
# Limit the highest user ID number for which the lastlog entries should
|
|
@@ -31,10 +32,9 @@ LOG_OK_LOGINS no
|
|
#LASTLOG_UID_MAX
|
|
|
|
#
|
|
-# Enable "syslog" logging of su(1) activity - in addition to sulog file logging.
|
|
-# SYSLOG_SG_ENAB does the same for newgrp(1) and sg(1).
|
|
+# Enable "syslog" logging of newgrp(1) and sg(1) activity - in addition
|
|
+# to sulog file logging.
|
|
#
|
|
-SYSLOG_SU_ENAB yes
|
|
SYSLOG_SG_ENAB yes
|
|
|
|
#
|
|
@@ -58,6 +58,12 @@ MOTD_FILE /etc/motd
|
|
#MOTD_FILE /etc/motd:/usr/lib/news/news-motd
|
|
|
|
#
|
|
+# If set to "yes", login stops display content specified by MOTD_FILE after
|
|
+# the first accessible item in the list.
|
|
+#
|
|
+#MOTD_FIRSTONLY no
|
|
+
|
|
+#
|
|
# If defined, file which maps tty line to TERM environment parameter.
|
|
# Each line of the file is in a format similar to "vt100 tty01".
|
|
#
|
|
@@ -72,12 +78,33 @@ MOTD_FILE /etc/motd
|
|
HUSHLOGIN_FILE .hushlogin
|
|
#HUSHLOGIN_FILE /etc/hushlogins
|
|
|
|
+# If this variable is set to "yes", hostname will be suppressed in the
|
|
+# login: prompt.
|
|
+#LOGIN_PLAIN_PROMPT no
|
|
+
|
|
#
|
|
# *REQUIRED* The default PATH settings, for superuser and normal users.
|
|
#
|
|
# (they are minimal, add the rest in the shell startup files)
|
|
-ENV_SUPATH PATH=/sbin:/bin:/usr/sbin:/usr/bin
|
|
-ENV_PATH PATH=/bin:/usr/bin
|
|
+#
|
|
+# ENV_PATH: The default PATH settings for non-root.
|
|
+#
|
|
+# ENV_ROOTPATH: The default PATH settings for root
|
|
+# (used by login, su and runuser).
|
|
+#
|
|
+# ENV_SUPATH is an ENV_ROOTPATH override for su and runuser
|
|
+# (and falback for login).
|
|
+#
|
|
+ENV_PATH /bin:/usr/bin
|
|
+ENV_ROOTPATH /sbin:/bin:/usr/sbin:/usr/bin
|
|
+#ENV_SUPATH /sbin:/bin:/usr/sbin:/usr/bin
|
|
+
|
|
+# If this variable is set to "yes", su will always set path. every su
|
|
+# call will overwrite the PATH variable.
|
|
+#
|
|
+# Per default, only "su -" will set a new PATH.
|
|
+#
|
|
+ALWAYS_SET_PATH no
|
|
|
|
#
|
|
# Terminal permissions
|
|
@@ -93,19 +120,6 @@ ENV_PATH PATH=/bin:/usr/bin
|
|
TTYGROUP tty
|
|
TTYPERM 0600
|
|
|
|
-#
|
|
-# Login configuration initializations:
|
|
-#
|
|
-# ERASECHAR Terminal ERASE character ('\010' = backspace).
|
|
-# KILLCHAR Terminal KILL character ('\025' = CTRL/U).
|
|
-#
|
|
-# The ERASECHAR and KILLCHAR are used only on System V machines.
|
|
-#
|
|
-# Prefix these values with "0" to get octal, "0x" to get hexadecimal.
|
|
-#
|
|
-ERASECHAR 0177
|
|
-KILLCHAR 025
|
|
-
|
|
# Default initial "umask" value used by login(1) on non-PAM enabled systems.
|
|
# Default "umask" value for pam_umask(8) on PAM enabled systems.
|
|
# UMASK is also used by useradd(8) and newusers(8) to set the mode for new
|
|
@@ -163,6 +177,12 @@ SUB_GID_COUNT 65536
|
|
LOGIN_RETRIES 5
|
|
|
|
#
|
|
+# Tell login to only re-prompt for the password if authentication
|
|
+# failed, but the username is valid. The default value is no.
|
|
+#
|
|
+LOGIN_KEEP_USERNAME no
|
|
+
|
|
+#
|
|
# Max time in seconds for login(1)
|
|
#
|
|
LOGIN_TIMEOUT 60
|
|
@@ -315,14 +335,6 @@ CHARACTER_CLASS [ABCDEFGHIJKLMNO
|
|
#GRANT_AUX_GROUP_SUBIDS yes
|
|
|
|
#
|
|
-# Prevents an empty password field to be interpreted as "no authentication
|
|
-# required".
|
|
-# Set to "yes" to prevent for all accounts
|
|
-# Set to "superuser" to prevent for UID 0 / root (default)
|
|
-# Set to "no" to not prevent for any account (dangerous, historical default)
|
|
-PREVENT_NO_AUTH superuser
|
|
-
|
|
-#
|
|
# Select the HMAC cryptography algorithm.
|
|
# Used in pam_timestamp module to calculate the keyed-hash message
|
|
# authentication code.
|