Commit Graph

319 Commits

Author SHA1 Message Date
Tomas Mraz 88156a4067 make the invalid shell check into warning 2020-01-16 09:04:04 +01:00
Tomas Mraz b76250c68a update to current upstream release 4.8 2020-01-13 11:46:38 +01:00
Tomas Mraz 36709cd2d7 fix SELinux related problem in chpasswd/chgpasswd when run with -R
(patch by Petr Lautrbach) (#1747215)
2019-09-02 15:48:01 +02:00
Petr Lautrbach 3e9ca2fc33 chpasswd, chgpasswd: Run SELinux checks before chroot()
libselinux checks the state of SELinux only in the library constructor and then
uses a cached value. It can be a problem for processes which do chroot() as
there's usually no SELinux interface (/sys/fs/selinux) in the chroot. For
chpasswd/chgpasswd is enough to do SELinux checks before processes are
chroot()ed.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1747215
2019-09-02 14:37:23 +02:00
Fedora Release Engineering 6065752fdc - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-26 23:10:38 +00:00
Tomas Mraz e17e2fa767 minor auditing fixes 2019-06-07 14:40:46 +02:00
Tomas Mraz c2e806d82c use lckpwdf() again to disable concurrent edits of databases by other applications 2019-05-03 11:22:39 +02:00
Tomas Mraz c5ff8b2cd3 force regeneration of getdate.c
otherwise the date parsing fix is not applied
2019-04-02 16:53:44 +02:00
Tomas Mraz 713a388dfc clarify chage manual page in regards to shadow and passwd inconsistency (#1686440) 2019-03-22 13:24:42 +01:00
Tomas Mraz 75c680d318 Ignore LOGIN_PLAIN_PROMPT variable in login.defs 2019-03-21 15:09:54 +01:00
Tim Landscheidt 875723a30b Remove obsolete requirements for post/pre scriptlets 2019-03-07 03:45:18 +00:00
Tomas Mraz 39afa9e9fb Drop the user name regexp from the manual as it is not exact. 2019-02-06 17:24:50 +01:00
Fedora Release Engineering 6f7a2acd68 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-02 15:17:20 +00:00
Tomas Mraz 1181911534 Fix manpage default for SUB_UID/GID_COUNT variables. 2019-01-31 13:44:45 +01:00
Igor Gnatenko a5c5d1f162 Remove obsolete BuildRoot tag
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2019-01-29 05:36:30 +01:00
Igor Gnatenko aa9270652f Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
2019-01-28 20:24:49 +01:00
Björn Esser 2fcf41cf88
Rebuilt for libcrypt.so.2 (#1666033) 2019-01-14 18:53:28 +01:00
Tomas Mraz 7eb46d2996 usermod: guard against unsafe change of ownership of special home directories 2018-12-18 15:30:26 +01:00
Tomas Mraz 6283287fd2 Remove a trailing space from login.defs 2018-11-28 13:13:17 +01:00
Tomas Mraz b9927e87e2 Release bump 2018-11-19 11:02:43 +01:00
Tomas Mraz b41cff1956 use itstool instead of xml2po 2018-11-19 11:02:06 +01:00
Tomas Mraz 1a1e7474b6 Fix malformed patch. 2018-11-06 10:53:00 +01:00
Tomas Mraz f38d60a562 Use cap_setxid file capabilities for newxidmap instead of making them setuid
Also:
limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
  and the 0 is always used by root anyway
manual page improvements
2018-11-06 10:40:50 +01:00
Tomas Mraz d80def3861 fix some issues from Coverity scan
flush sssd caches - patch by Jakub Hrozek
2018-10-12 17:38:01 +02:00
Fedora Release Engineering 8362f15341 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-14 06:02:14 +00:00
Jason Tibbitts 0aa8060034 Remove needless use of %defattr 2018-07-10 01:20:51 -05:00
Tomas Mraz 38a12ac864 update to current upstream release 4.6 2018-05-28 15:25:08 +02:00
Tomas Mraz 4cb5077b68 Raise limit for passwd and shadow entry length
- also prevent writing longer entries (#1422497)
2018-04-20 16:23:31 +02:00
Tomas Mraz 8d62f944dd Add gcc buildrequires 2018-03-01 13:11:34 +01:00
Igor Gnatenko eb66bf0ca5
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 08:49:44 +01:00
Björn Esser 41955fa9ab
Add patch to include crypt.h, if present
Use %%make_{build,install} macros
Refresh other patches for proper alignment
2018-02-06 11:33:37 +01:00
Björn Esser 2d4f6e1972
Rebuilt for switch to libxcrypt 2018-01-20 23:08:33 +01:00
esakaiev a6650f241c Adding tests to the new_tests branch 2018-01-05 20:39:59 +02:00
Tomas Mraz 95d0ea6880 fix regression caused by the userdel-chroot patch (#1509978) 2017-11-06 15:31:26 +01:00
Tomas Mraz 8633999acf fix userdel in chroot (#1316168)
add useful chage -E example to chage manpage
2017-11-02 11:50:59 +01:00
Tomas Mraz 9659143d38 Remove incorrect hunks from the goodname patch. 2017-09-15 18:00:17 +02:00
Tomas Mraz b90f1c3912 do not allow "." and ".." user names 2017-09-15 17:54:22 +02:00
Tomas Mraz 2c7fd6de84 allow switching to secondary group without checking the membership
(patch from upstream)
2017-08-14 11:03:28 +02:00
Fedora Release Engineering 46349c33e5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 08:23:19 +00:00
Fedora Release Engineering 3a17ec0f47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 18:30:31 +00:00
Tomas Mraz ec99eade4e update to current upstream release 4.5 2017-07-21 14:04:11 +02:00
Fedora Release Engineering ba9340caf5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 13:21:56 +00:00
Tomas Mraz bb62fd7837 fix regression in useradd - not processing defaults properly (#1369979) 2016-08-25 11:24:38 +02:00
Tomas Mraz 457acab6b4 Add buildrequires for docbook. 2016-08-23 16:51:22 +02:00
Tomas Mraz 86cbf7e19d Add proper buildrequires for autotools. 2016-08-23 16:30:57 +02:00
Tomas Mraz 6c18d5356b Update patches for rebase 2016-08-23 16:06:06 +02:00
Tomas Mraz f8ab516d30 new upstream release fixing low impact security issue 2016-08-23 16:03:52 +02:00
Tomas Mraz c50e17082d guard for localtime() and gmtime() failure 2016-06-14 11:34:10 +02:00
Tomas Mraz abed79ee4e chpasswd, chgpasswd: open audit when starting 2016-05-30 11:59:54 +02:00
Tomas Mraz f884cd4c94 chgpasswd: do not remove it
- chpasswd, chgpasswd: add selinux_check_access call (#1336902)
2016-05-26 21:05:16 +02:00