Accepting request 912922 from home:kukuk:tiu

- libsubid-devel: add missing requires for libsubid3
- Remove README.changes-pwdutils, all distros you can upgrade from
  use already shadow
- login.defs: Enable USERGROUPS_ENAB and CREATE_HOME to
  be compatible with other Linux distros and the other tools
  creating user accounts in use on openSUSE. Set HOME_MODE to 700
  for security reasons and compatibility. [bsc#1189139]

OBS-URL: https://build.opensuse.org/request/show/912922
OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=107

README.changes-pwdutils

@@ -1,62 +0,0 @@
-This file lists changes between pwdutils used in the past and
-the shadow utils used now.
-
-General changes:
-================
-- No support to modify LDAP accounts anymore (-D and --service option)
-- No -P/--path option
-- /etc/default/passwd was removed. The configure options are
-  partly available in /etc/login.defs.
-
-/etc/login.defs:
-----------------
-SYSTEM_UID_MIN/SYSTEM_UID_MAX were renamed to SYS_UID_MIN/SYS_UID_MAX
-SYSTEM_GID_MIN/SYSTEM_GID_MAX were renamed to SYS_GID_MIN/SYS_GID_MAX
-
-chfn
-----
--m/--other has changed to -o/--other
--o/--office has changed to -r/--room.
--p/--phone has changed to -w/--work-phone
-
-chpasswd
---------
--c blowfish is now longer supported, instead SHA256 and SHA512 were added.
-
-chsh
-----
--l/--list-shells was removed.
-
-gpasswd
--------
--l/-u option are missing
-
-groupadd
---------
-/usr/sbin/groupadd.local is missing
---preferred-gid was removed
-
-groupmod
---------
--A/--add-user was removed
--R/--remove-user was removed
-
-passwd
-------
--f was dropped (use chfn instead)
--g was dropped (use gpasswd instead)
--s was dropped (use chsh instead)
-
-useradd
--------
--e/--expire has changed to -e/--expiredate (incompatible arguments!)
--U/--umask was removed, -U has now another meaning
---preferred-uid was removed
-
-userdel
--------
--r/--remove-home was renamed to -r/--remove
-
-usermod
--------
--e/--expire has changed to -e/--expiredate (incompatible arguments!)

shadow-login_defs-suse.patch

@@ -67,6 +67,15 @@ Index: etc/login.defs
  
  # Default initial "umask" value used by login(1) on non-PAM enabled systems.
  # Default "umask" value for pam_umask(8) on PAM enabled systems.
+@@ -125,7 +128,7 @@
+ # HOME_MODE is used by useradd(8) and newusers(8) to set the mode for new
+ # home directories.
+ # If HOME_MODE is not set, the value of UMASK is used to create the mode.
+-#HOME_MODE	0700
++HOME_MODE	0700
+ 
+ #
+ # Password aging controls:
 @@ -157,8 +160,8 @@ PASS_WARN_AGE	7
  UID_MIN			 1000
  UID_MAX			60000
@@ -137,19 +146,13 @@ Index: etc/login.defs
  
  #
  # If set to a non-zero number, the shadow utilities will make sure that
-@@ -344,13 +338,13 @@ USERGROUPS_ENAB yes
+@@ -344,7 +338,7 @@ USERGROUPS_ENAB yes
  # This option is overridden with the -M or -m flags on the useradd(8)
  # command-line.
  #
 -#CREATE_HOME     yes
-+CREATE_HOME     no
++CREATE_HOME     yes
  
  #
  # Force use shadow, even if shadow passwd & shadow group files are
- # missing.
+
- #
--#FORCE_SHADOW    yes
-+FORCE_SHADOW    no
- 
- # User/group names must match the following regex expression.
- # The default is [A-Za-z_][A-Za-z0-9_.-]*[A-Za-z0-9_.$-]\?,

shadow.changes

@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Wed Aug 18 15:17:52 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
+
+- libsubid-devel: add missing requires for libsubid3
+- Remove README.changes-pwdutils, all distros you can upgrade from
+  use already shadow
+
+-------------------------------------------------------------------
+Wed Aug 18 14:59:15 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
+
+- login.defs: Enable USERGROUPS_ENAB and CREATE_HOME to
+  be compatible with other Linux distros and the other tools
+  creating user accounts in use on openSUSE. Set HOME_MODE to 700
+  for security reasons and compatibility. [bsc#1189139]
+
 -------------------------------------------------------------------
 Tue Aug 17 15:08:09 UTC 2021 - Michael Vetter <mvetter@suse.com>
 
@@ -54,7 +69,7 @@ Thu Jul  1 11:51:39 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
 -------------------------------------------------------------------
 Sat Jun  5 13:38:52 UTC 2021 - Maurizio Galli <maurizio.galli@gmail.com>
 
-- Enable shadowgrp so that we can set more secure group passwords 
+- Enable shadowgrp so that we can set more secure group passwords
   using shadow.
 
 -------------------------------------------------------------------
@@ -101,7 +116,7 @@ Mon Nov  2 15:54:02 UTC 2020 - Dr. Werner Fink <werner@suse.de>
 -------------------------------------------------------------------
 Fri Oct  9 13:12:11 UTC 2020 - Dr. Werner Fink <werner@suse.de>
 
-- Add support for /usr/etc/skel to useradd.local script (boo#1173321) 
+- Add support for /usr/etc/skel to useradd.local script (boo#1173321)
 
 -------------------------------------------------------------------
 Thu Oct  8 03:16:58 UTC 2020 - Stanislav Brabec <sbrabec@suse.com>
@@ -577,7 +592,7 @@ Tue Nov 13 17:31:50 CET 2012 - kukuk@suse.de
 -------------------------------------------------------------------
 Tue Nov 13 10:36:28 CET 2012 - kukuk@suse.de
 
-- Fix default group value in /etc/default/useradd 
+- Fix default group value in /etc/default/useradd
   (useradd-default.diff)
 
 -------------------------------------------------------------------

shadow.spec

@@ -30,7 +30,6 @@ Group:          System/Base
 URL:            https://github.com/shadow-maint/shadow
 Source:         https://github.com/shadow-maint/shadow/releases/download/v%{version}/shadow-%{version}.tar.xz
 Source1:        pamd.tar.bz2
-Source2:        README.changes-pwdutils
 Source3:        useradd.local
 Source4:        userdel-pre.local
 Source5:        userdel-post.local
@@ -122,6 +121,7 @@ Utility library that provides a way to manage subid ranges.
 %package -n libsubid-devel
 Summary:        Development files for libsubid3
 Group:          System/Base
+Requires:       libsubid3 = %{version}
 
 %description -n libsubid-devel
 Development files for libsubid3.
@@ -170,7 +170,6 @@ autoreconf -fvi
 #  --disable-shared \ currently doesn't build with this. See https://github.com/shadow-maint/shadow/issues/336
 
 %install
-cp %{SOURCE2} .
 %make_install gnulocaledir=%{buildroot}/%{_datadir}/locale MKINSTALLDIRS=`pwd`/mkinstalldirs
 # Separate call to install man pages. See https://github.com/shadow-maint/shadow/issues/389
 %make_install -C man install-man
@@ -311,7 +310,7 @@ test -f %{_sysconfdir}/login.defs.rpmsave && mv -v %{_sysconfdir}/login.defs.rpm
 
 %files -f shadow.lang
 %license COPYING
-%doc NEWS doc/HOWTO README README.changes-pwdutils
+%doc NEWS doc/HOWTO README
 %verify(not md5 size mtime) %config(noreplace) %{_sysconfdir}/subuid
 %verify(not md5 size mtime) %config(noreplace) %{_sysconfdir}/subgid
 %if %{defined no_config}