2019-05-28 15:04:19 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 2 09:45:48 UTC 2019 - lnussel@suse.de
|
|
|
|
|
|
|
|
|
|
- don't specify MOTD_FILE in login.defs but fall back to built in
|
|
|
|
|
defaults of login (boo#1133929)
|
|
|
|
|
|
2019-05-06 09:58:15 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 30 22:27:14 CEST 2019 - sbrabec@suse.com
|
|
|
|
|
|
|
|
|
|
- Split shadow-login_defs.patch hunks to its logical components
|
|
|
|
|
(bsc#1121197):
|
|
|
|
|
* shadow-login_defs-unused-by-pam.patch
|
|
|
|
|
* shadow-login_defs-comments.patch
|
|
|
|
|
* shadow-login_defs-util-linux.patch
|
|
|
|
|
* shadow-login_defs-suse.patch
|
|
|
|
|
* Move appropriate hunks to chkname-regex.patch and
|
|
|
|
|
encryption_method_nis.patch
|
|
|
|
|
* Remove GROUPADD_CMD that is not supported (bsc#1121197#c14).
|
|
|
|
|
- Split getdef-new-defs.patch hunks to its logical components
|
|
|
|
|
(bsc#1121197):
|
|
|
|
|
* encryption_method_nis.patch
|
|
|
|
|
* chkname-regex.patch
|
|
|
|
|
* shadow-util-linux.patch
|
|
|
|
|
Add support for login: ALWAYS_SET_PATH and LOGIN_PLAIN_PROMPT.
|
|
|
|
|
* useradd-script.patch, userdel-script.patch
|
|
|
|
|
* Remove duplicated definitions of MOTD_FILE and ENV_PATH.
|
|
|
|
|
- Add shadow-login_defs-unused-check.sh to allow verification of
|
|
|
|
|
login.defs variable usage (bsc#1121197).
|
|
|
|
|
- Add virtual symbols for login.defs compatibility (bsc#1121197).
|
|
|
|
|
|
2019-01-23 12:16:47 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 23 09:35:01 UTC 2019 - adam.majer@suse.de
|
|
|
|
|
|
|
|
|
|
- btrfs-subvolumes.patch: implement support for creating user home
|
|
|
|
|
directories on btrfs subvolumes (fate#316134)
|
|
|
|
|
|
2018-11-02 12:24:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Oct 31 14:17:29 UTC 2018 - Valentin Rothberg <vrothberg@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add empty /etc/sub{u,g}id files. useradd and usermod add entries for users
|
|
|
|
|
only when those files exist. Having those entries is a requirement to create
|
|
|
|
|
user namespaces, for instance, when running podman as a non-root user.
|
|
|
|
|
|
2018-05-16 16:26:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 14 12:45:42 UTC 2018 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to 4.6:
|
|
|
|
|
* Newgrp: avoid unnecessary lookups
|
|
|
|
|
* Make language less binary
|
|
|
|
|
* Add error when turning off man switch
|
|
|
|
|
* Spelling fixes
|
|
|
|
|
* Make userdel work with -R
|
|
|
|
|
* newgidmap: enforce setgroups=deny if self-mapping a group
|
|
|
|
|
* Norwegian bokmål translation
|
|
|
|
|
* pwck: prevent crash by not passing O_CREAT
|
|
|
|
|
* WITH_TCB fixes from Mandriva
|
|
|
|
|
* Fix pwconv and grpconv entry skips
|
|
|
|
|
* Fix -- slurping in su
|
|
|
|
|
* add --prefix option
|
|
|
|
|
- Remove CVE-2018-7169.patch: upstreamed
|
|
|
|
|
- Remove shadow-4.1.5.1-pam_group.patch: upstreamed
|
|
|
|
|
- Update userdel-script.patch: change due to prefix
|
|
|
|
|
- Update useradd-mkdirs.patch: change due to prefix
|
2019-01-24 11:49:43 +01:00
|
|
|
Additionally changed in that patch (bsc#1106914):
|
2018-05-16 16:26:18 +02:00
|
|
|
* Test for strdup() failure
|
|
|
|
|
* Directory to 0755 instead 0777
|
|
|
|
|
- Add shadow-4.6.0-fix-usermod-prefix-crash.patch:
|
|
|
|
|
Fixes crash in usermod when called with --prefix.
|
|
|
|
|
See https://github.com/shadow-maint/shadow/issues/110
|
|
|
|
|
|
2018-02-26 10:59:29 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 22 15:10:45 UTC 2018 - fvogt@suse.com
|
|
|
|
|
|
|
|
|
|
- Use %license (boo#1082318)
|
|
|
|
|
|
2018-02-16 11:33:22 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 16 08:39:08 UTC 2018 - kbabioch@suse.com
|
|
|
|
|
|
|
|
|
|
- Added CVE-2018-7169.patch: Fixed an privilege escalation in newgidmap,
|
|
|
|
|
which allowed an unprivileged user to be placed in a user namespace where
|
|
|
|
|
setgroups(2) is allowed. (CVE-2018-7169 bsc#1081294)
|
|
|
|
|
|
2017-11-08 13:41:51 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 8 12:39:12 UTC 2017 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- bsc#1061838:
|
|
|
|
|
Revert: Requires: group(mail)
|
|
|
|
|
Introduced circular dependency
|
|
|
|
|
|
2017-10-16 16:25:24 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 13 15:44:28 UTC 2017 - adam.majer@suse.de
|
|
|
|
|
|
|
|
|
|
- Revert accidentalied prerequisites.
|
2017-10-23 17:29:51 +02:00
|
|
|
Use PreReq for permissions
|
2017-10-16 16:25:24 +02:00
|
|
|
|
2017-10-12 11:42:41 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 12 08:59:28 UTC 2017 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Prequire group(shadow), group(root), user(root)
|
|
|
|
|
|
2017-10-09 20:40:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 9 11:53:44 UTC 2017 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- bsc#1061838:
|
|
|
|
|
Add Requires for group(mail)
|
|
|
|
|
|
2017-09-14 10:23:12 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 14 08:18:27 UTC 2017 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- boo#1048645:
|
|
|
|
|
Set suid bit for newuidmap and newgimap
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 14 08:17:08 UTC 2017 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- Revert the changes for bsc#1023895 back
|
|
|
|
|
Pulls in too many deps into ring0.
|
|
|
|
|
Next version of shadow plans to have no conditional man pages.
|
|
|
|
|
|
2017-09-08 13:44:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 8 11:41:13 UTC 2017 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- run spec-cleaner
|
|
|
|
|
- bsc#1023895:
|
|
|
|
|
man page contained invalid options because they depend
|
|
|
|
|
on compile flags and we shipped pre built ones.
|
|
|
|
|
New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po
|
|
|
|
|
xsltproc
|
|
|
|
|
|
2017-06-09 19:55:04 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 8 17:00:57 CEST 2017 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Adjust requires (we need user/group root instead of aaa_base now)
|
|
|
|
|
|
2017-05-23 14:25:13 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 22 13:31:25 UTC 2017 - adam.majer@suse.de
|
|
|
|
|
|
|
|
|
|
- New upstream version 4.5
|
|
|
|
|
- Refreshed patches:
|
|
|
|
|
* shadow-login_defs.patch
|
|
|
|
|
* chkname-regex.patch
|
|
|
|
|
* getdef-new-defs.patch
|
|
|
|
|
* useradd-mkdirs.patch
|
|
|
|
|
- Upstreamed patches:
|
|
|
|
|
* shadow-4.1.5.1-manfix.patch
|
|
|
|
|
* shadow-4.1.5.1-errmsg.patch
|
|
|
|
|
* shadow-4.1.5.1-backup-mode.patch
|
|
|
|
|
* shadow-4.1.5.1-audit-owner.patch
|
|
|
|
|
* shadow-4.2.1-defs-chroot.patch
|
|
|
|
|
* shadow-4.2.1-merge-group.patch
|
|
|
|
|
* Fix-user-busy-errors-at-userdel.patch
|
|
|
|
|
* useradd-clear-tallylog.patch
|
2017-05-23 14:40:04 +02:00
|
|
|
- shadow-4.1.5.1-pam_group.patch
|
|
|
|
|
dynamically added users via pam_group are not listed in groups
|
|
|
|
|
databases but are still valid
|
2017-05-23 14:25:13 +02:00
|
|
|
- shadow.keyring: update keyring with current maintainer's keyid
|
|
|
|
|
only - Serge Hallyn 'F1D08DB778185BF784002DFFE9FEEA06A85E3F9D'
|
|
|
|
|
- disable_new_audit_function.patch:
|
|
|
|
|
Disable newer libaudit functionality for older distributions
|
|
|
|
|
|
2017-02-22 11:32:41 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 20 07:28:24 UTC 2017 - josef.moellers@suse.com
|
|
|
|
|
|
|
|
|
|
- useradd: call external program "/sbin/pam_tally2" to reset
|
|
|
|
|
failed login counter in "/var/log/tallylog"
|
|
|
|
|
(bsc#980486, useradd-clear-tallylog.patch)
|
|
|
|
|
|
2016-11-02 08:48:48 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 2 07:41:51 UTC 2016 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- add keyring, three public keys from https://pkg-shadow.alioth.debian.org/download.php
|
|
|
|
|
|
2016-09-14 09:50:02 +02:00
|
|
|
-------------------------------------------------------------------
|
2016-10-19 11:17:17 +02:00
|
|
|
Tue Oct 18 15:55:43 UTC 2016 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- bsc#1002975: Use permissions according to permissions package
|
|
|
|
|
and dont try to manipulate them in %files section.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2016-09-14 09:50:02 +02:00
|
|
|
Wed Sep 14 07:46:33 UTC 2016 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- boo#994486: Include shadow.5 manpage
|
|
|
|
|
Previously this was provided by man-pages package in
|
|
|
|
|
the man-pages-addons tarball which got removed later on.
|
|
|
|
|
|
2016-05-31 08:53:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 31 06:48:41 UTC 2016 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- Add package dependency for aaa_base, fixing bnc#899409
|
|
|
|
|
(was done by tbehrens@suse.com but not submitted to Factory)
|
|
|
|
|
|
2016-05-30 12:38:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 30 09:41:55 UTC 2016 - mvetter@suse.com
|
|
|
|
|
|
2016-05-30 13:56:16 +02:00
|
|
|
- shadow 4.2.1 requested by fate#320422
|
2016-05-30 12:38:25 +02:00
|
|
|
- bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch
|
|
|
|
|
- Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits.
|
|
|
|
|
Remove the files used to circumvent the check.
|
|
|
|
|
- Remove:
|
|
|
|
|
* shadow-rpmlintrc
|
|
|
|
|
* shadow-subids
|
|
|
|
|
* shadow-subids.easy
|
|
|
|
|
* shadow-subids.secure
|
|
|
|
|
* shadow-subids.paranoid
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 19 12:28:47 UTC 2016 - christian.brauner@mailbox.org
|
|
|
|
|
|
|
|
|
|
- Update to shadow-4.2.1:
|
|
|
|
|
- add support for subuids/subgids via newuidmap/newgidmap
|
|
|
|
|
- Rename chkname-regex.diff to chkname-regex.patch
|
|
|
|
|
- Rename encryption_method_nis.diff to encryption_method_nis.patch
|
|
|
|
|
- Rename getdef-new-defs.diff to getdef-new-defs.patch
|
|
|
|
|
- Rename shadow-login_defs.diff to shadow-login_defs.patch
|
|
|
|
|
- Rename userdel-scripts.diff to userdel-script.patch
|
|
|
|
|
- Rename useradd-script.diff to useradd-script.patch
|
|
|
|
|
- Rename useradd-default.diff to useradd-default.patch
|
|
|
|
|
- Rename useradd-mkdirs.diff to useradd-mkdirs.patch
|
|
|
|
|
- Add fixes from Red Hat/Fedora:
|
|
|
|
|
- shadow-4.1.5.1-audit-owner.patch.patch:
|
|
|
|
|
- log owner changes for home directory
|
|
|
|
|
- shadow-4.1.5.1-userdel-helpfix.patch.patch:
|
|
|
|
|
- give a hint about what happens when you force the removal of a user
|
|
|
|
|
- shadow-4.2.1-defs-chroot.patch.patch:
|
|
|
|
|
- initialize uid_t uid_min and uid_t uid_max not before we need them
|
|
|
|
|
- shadow-4.2.1-merge-group.patch.patch:
|
|
|
|
|
- simplify by using a single call to snprintf()
|
|
|
|
|
- Add upstream fix
|
|
|
|
|
- Fix-user-busy-errors-at-userdel.patch:
|
|
|
|
|
- call sub_uid_close()
|
|
|
|
|
|
2016-01-18 12:08:55 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 15 11:08:29 UTC 2016 - fvogt@suse.com
|
|
|
|
|
|
|
|
|
|
- Moved call from %verifyscript into %post:
|
|
|
|
|
* Caused call to %service_add_post shadow.service shadow.timer
|
|
|
|
|
during rpm -qV shadow
|
|
|
|
|
|
2015-07-16 11:52:01 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 15 13:25:11 UTC 2015 - jkeil@suse.de
|
|
|
|
|
|
|
|
|
|
- Add systemd unit files to continuously check password & groupfile integrity
|
|
|
|
|
* Idea from Arch Linux
|
|
|
|
|
* pending request to systemd-presets-branding-openSUSE to enable by default
|
|
|
|
|
|
2014-04-01 17:44:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 31 22:00:00 UTC 2014 - tbehrens@suse.com
|
|
|
|
|
|
|
|
|
|
- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
|
|
|
|
|
of the path
|
|
|
|
|
|
2013-11-22 11:17:20 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 22 10:15:25 UTC 2013 - werner@suse.de
|
|
|
|
|
|
|
|
|
|
- Stop any systemd user manager instance in case a user entry will
|
|
|
|
|
be deleted (bnc#849870). Nevertheless a running process requires
|
|
|
|
|
the option --force for the userdel command.
|
|
|
|
|
|
2013-11-12 14:47:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 12 14:47:30 CET 2013 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)
|
|
|
|
|
|
2013-09-17 14:59:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 17 14:56:44 CEST 2013 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Add some fixes from Fedora:
|
|
|
|
|
- shadow-4.1.5.1-backup-mode.patch: open backup file with correct
|
|
|
|
|
permissions.
|
|
|
|
|
- shadow-4.1.5.1-logmsg.patch: fix error message
|
|
|
|
|
- shadow-4.1.5.1-errmsg.patch: print error reason
|
|
|
|
|
- shadow-4.1.5.1-manfix.patch: fix manual page
|
|
|
|
|
|
2013-02-05 13:20:33 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 5 13:19:46 CET 2013 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]
|
|
|
|
|
|
2012-11-13 17:35:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 13 17:31:50 CET 2012 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix getdef default variables (getdef-new-defs.diff)
|
|
|
|
|
|
2012-11-13 10:36:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 13 10:36:28 CET 2012 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix default group value in /etc/default/useradd
|
|
|
|
|
(useradd-default.diff)
|
|
|
|
|
|
2012-10-29 16:15:23 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 27 15:20:44 CEST 2012 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Implement CHARACTER_CLASS support
|
|
|
|
|
(chkname-regex.diff)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 26 15:20:06 CEST 2012 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Add support for useradd.local
|
|
|
|
|
(useradd-script.diff)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 25 16:22:18 CEST 2012 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix spec file
|
|
|
|
|
- Adjust login.defs
|
|
|
|
|
(shadow-login_defs.diff)
|
|
|
|
|
- Add userdel*.local script support and scrips
|
|
|
|
|
(userdel-scripts.diff)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 24 16:04:03 CEST 2012 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Initial package [FATE#314473]
|
