Commit Graph

258 Commits

Author SHA1 Message Date
Tomas Mraz
abed79ee4e chpasswd, chgpasswd: open audit when starting 2016-05-30 11:59:54 +02:00
Tomas Mraz
f884cd4c94 chgpasswd: do not remove it
- chpasswd, chgpasswd: add selinux_check_access call (#1336902)
2016-05-26 21:05:16 +02:00
Tomas Mraz
a359c84a6e userdel: fix userdel -f with /etc/subuid present (#1316168) 2016-03-17 17:40:43 +01:00
Tomas Mraz
1bf254df98 usermod: properly return error during password manipulation 2016-02-09 11:54:02 +01:00
Tomas Mraz
b1dccbc445 add possibility to clear or set lastlog record for user via lastlog 2016-02-03 14:01:19 +01:00
Tomas Mraz
05ccc5cb0b Correct changelog date. 2016-01-08 10:02:44 +01:00
Tomas Mraz
904910f545 do not use obscure permissions for binaries
- remove unused commands from login.defs(5) cross-reference
2016-01-08 10:02:12 +01:00
Tomas Mraz
c2f1a1c502 document that groupmems is not setuid root
- document that expiration of the password after inactivity period
  locks the user account completely
2015-11-06 14:34:35 +01:00
Tomas Mraz
25899fefb0 Multiple fixes.
- unlock also passwords locked with passwd -l
- prevent breaking user entry by entering a password containing colon
- fix possible DoS when locking the database files for update
- properly use login.defs from the chroot in useradd
2015-08-27 15:53:13 +02:00
Dennis Gilmore
283bf24723 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-19 00:44:03 +00:00
Tomas Mraz
8b4e03b994 new upstream release with support for subordinate uids and gids 2014-11-26 15:58:28 +01:00
Tomas Mraz
04260e2340 small adjustments to the audit patch 2014-11-25 11:58:16 +01:00
Tomas Mraz
e1ce821d45 update auditing to cover more events and fix some incorrect audit records
(auditing patch by Steve Grubb (#1151580))
- apply the same new allocation algorithm to uids as for gids
2014-10-17 17:03:29 +02:00
Tomas Mraz
af13db915f discard obsolete matchpathcon cache after semanage_commit() 2014-09-10 10:28:53 +02:00
Tomas Mraz
d29b2a8def disallow all-numeric user and group names (#1139318) 2014-09-09 17:39:08 +02:00
Tomas Mraz
4c1ef1cd21 Multiple fixes
- label the newly created home dir correctly (#1077809)
- mention that chage -d 0 forces password change (#1135010)
- improve date parsing and error detecting in chage
- avoid full group database scanning in newgrp in most common case
- report error if usermod asked for moving homedir and it does not exist
2014-08-29 14:28:48 +02:00
Peter Robinson
183c869703 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-18 02:08:56 +00:00
Tom Callaway
972907741d fix license handling 2014-08-05 10:56:28 -04:00
Tom Callaway
9120a44c3f fix license handling 2014-08-05 08:57:58 -04:00
Tom Callaway
5ac7a63576 fix license handling 2014-08-05 08:57:03 -04:00
Tom Callaway
1e95b5b479 fix license handling 2014-08-05 08:55:45 -04:00
Tomas Mraz
fd2973e24f revert the last change as it is not really needed 2014-07-14 10:34:08 +02:00
Tomas Mraz
6a7e42e7e9 put system users and groups into /usr/lib/{passwd,group} if
the files exist and SHADOW_USE_USRLIB environment variable is set
  Patch by Colin Walters
2014-07-10 17:06:38 +02:00
Tomas Mraz
efff9fe79f ignore getgrgid() errors for now 2014-07-02 13:30:31 +02:00
Tomas Mraz
dad42cc2f5 improve group allocation algorithm - patch by Stephen Gallager (#1089738) 2014-06-30 15:22:33 +02:00
Dennis Gilmore
c509d20844 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-08 01:14:33 -05:00
Tomas Mraz
8d1ef4078b clean up login.defs manpage
- properly document userdel -f behavior
2014-02-12 11:43:04 +01:00
Tomas Mraz
317fc748b3 document that the directory where user's home is created must exist 2013-10-18 16:33:21 +02:00
Tomas Mraz
462b4b2f45 Fix bogus dates in changelog 2013-07-25 14:30:32 +02:00
Tomas Mraz
a451dc3d55 slightly more meaningful error messages if crypt() returns NULL (#988184)
- explicit suid permissions
2013-07-25 13:26:18 +02:00
Tomas Mraz
4eaf9cda61 fix useradd man page bugs 2013-07-19 07:44:18 +02:00
Tomas Mraz
32f6a78157 report error to stdout when SELinux context for home directory
cannot be determined (#973647)
- audit the changing home directory owner (#885797)
- do not set the default SELinux MLS range (#852676)
2013-06-14 15:27:20 +02:00
Tomas Mraz
0bdf7eb7a5 improve the failure syslog message in useradd (#830617) 2013-03-19 18:43:43 +01:00
Tomas Mraz
c85c93b88e keep the original context if matchpathcon() fails (#912399) 2013-02-20 15:30:31 +01:00
Tomas Mraz
778c4c228d fix bugs in merge_group_entries() 2013-01-29 14:17:57 +01:00
Tomas Mraz
6a8565830d /etc/default is owned by glibc-common now (#894194) 2013-01-11 10:45:13 +01:00
Tomas Mraz
44a40b2f4e new upstream version
- use the original file permissions when creating backup (#853102)
2012-09-19 20:33:30 +02:00
Peter Vrabec
cae35b95ab make /etc/default/useradd world-readable (#835137) 2012-07-25 12:44:17 +02:00
Dennis Gilmore
3481ee2a8f - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-21 14:29:08 -05:00
Peter Vrabec
8cd7b2fcb7 pwconv/grpconv skipped 2nd of consecutive failures (#832995) 2012-06-18 13:38:31 +02:00
Peter Vrabec
8994f4c05c - fix selinux context handling
- reset selinux context on files copied from skel
2012-03-22 16:51:40 +01:00
Peter Vrabec
4c8c528414 upgrade 2012-03-20 17:39:28 +01:00
Peter Vrabec
c2e7e463a1 compile with PIE and RELRO flags (#784349) 2012-02-07 18:04:27 +01:00
Dennis Gilmore
f660173551 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-13 21:52:35 -06:00
Peter Vrabec
5f231e7c37 fix leaks in .IDs patch (#734340) 2011-12-20 13:53:56 +01:00
Peter Vrabec
20341fa201 free memory associated with SELinux security context 2011-11-16 17:17:29 +01:00
Peter Vrabec
22f8cbe3bf - replace semanage call by library call
- useradd man page (#739147)
2011-11-10 17:16:04 +01:00
Peter Vrabec
4897d3d6b7 man page adjustment (userdel -Z) 2011-08-02 14:09:56 +02:00
Peter Vrabec
3a49560688 fixing semanage issue (#701355) 2011-08-02 13:07:03 +02:00
Peter Vrabec
8e39d10d31 do not replace /etc/login.defs on upgrade (temporary) 2011-07-25 15:06:13 +02:00
Peter Vrabec
d410224971 man page fixes 2011-06-29 10:14:51 +02:00
Peter Vrabec
8c0da063a2 spec file fixes 2011-06-28 17:21:30 +02:00
Peter Vrabec
46dd21926b - fixing Linux login <-> SELinux login mapping
(#639900), (#639975), (#639976)
2011-06-28 16:32:18 +02:00
Peter Vrabec
f7bb2ec63f refer to PAM in /etc/login.defs 2011-06-27 16:12:59 +02:00
Peter Vrabec
4d00d71784 fix shadow-4.1.4.2-underflow.patch 2011-06-06 09:07:51 +02:00
Peter Vrabec
6e8f608032 fix integer underflow in laslog (#706321) 2011-05-31 10:00:39 +02:00
Peter Vrabec
5d7612da5b upgrade 2011-05-23 14:58:07 +02:00
Peter Vrabec
e997448056 home directory on fs with noacl + remove faillog 2011-02-10 11:23:21 +01:00
Peter Vrabec
ca4ecc57a6 useradd man page (-m option) #523265 2011-02-09 11:07:44 +01:00
Peter Vrabec
b76f93c25b - do not use gshadow functions from glibc(#674234) 2011-02-01 17:10:35 +01:00
Peter Vrabec
8d9482059f fix Bug #665780
- fix gshadow functions from shadow utils
- make shadow utils use gshadow functions from glibc
2011-01-06 09:41:43 +01:00
Peter Vrabec
30f3024f75 fix pwck/grpck hang 2010-07-20 09:20:10 +00:00
Peter Vrabec
59e397ee42 - fix integer underflow in faillog (#603683)
- use preferred GID for reserved static IDs
2010-06-14 11:15:21 +00:00
Peter Vrabec
6631e0269c add missing buildrequires 2010-04-29 15:26:31 +00:00
Peter Vrabec
4f86795e64 - preserve ACL's on files in /etc/skel Resolves: #513055 2010-04-29 15:09:49 +00:00
Peter Vrabec
d787a9d254 - newusers man page more informative
- userdel should not need to run semanage Resolves: #586330 #586408
2010-04-28 13:13:13 +00:00
Peter Vrabec
0ffcb199d6 fix man directories ownership (#569418) 2010-04-01 13:16:46 +00:00
Peter Vrabec
e772ed6ecf max group name length set to 32 characters 2010-03-26 13:55:46 +00:00
Peter Vrabec
446ad2234a - apply patches{1,2,3}
- enable SHA512 in /etc/login.defs
2009-11-18 09:33:28 +00:00
Peter Vrabec
cdd12ed1d1 upgrade 2009-09-07 14:56:09 +00:00
Tomáš Mráz
8c5573deab - rebuilt with new audit 2009-08-21 11:18:13 +00:00
Peter Vrabec
2b93b0c13a increase threshold for uid/gid reservations to 200 (#515667) 2009-08-05 11:50:03 +00:00
Jesse Keating
ea26d8a646 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-27 04:15:11 +00:00
Peter Vrabec
abc277db56 - fix a list of owned directories (#510366)
- reduce the reuse of system IDs
- speed up sys users look up on LDAP boxes (#511813)
2009-07-16 13:41:55 +00:00
Peter Vrabec
f556cf968e upgrade 2009-06-16 13:23:28 +00:00
Peter Vrabec
c28651e7a4 upgrade 2009-05-15 10:46:55 +00:00
Peter Vrabec
d4689ff3b2 lastlog fix 2009-04-22 08:58:31 +00:00
Peter Vrabec
da96b3d14b upgrade 2009-04-20 09:47:31 +00:00
Peter Vrabec
70078f8ff6 - get "-n" option back
- fix selinux issues
2009-04-14 14:12:16 +00:00
Peter Vrabec
ea53f7cab2 upgrade 2009-04-14 10:19:14 +00:00
Peter Vrabec
eab8b43860 increase release number 2009-03-24 16:09:09 +00:00
Jesse Keating
e72eda630f - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-26 00:46:27 +00:00
Peter Vrabec
333b6be1e7 - fix license tag (#226416)
- get rid of tabs in spec file (#226416)
- convert HOWTO to UTF8 (#226416)
2009-01-19 13:48:19 +00:00
Peter Vrabec
8e69e8df38 Add policycoreutils as Requires, because of restorecon (#478494) 2009-01-05 12:57:44 +00:00
Jesse Keating
306f53c11b - Add setup as a Requires. Perhaps this should be a files requires.
(#477529)
2008-12-21 16:54:46 +00:00
Peter Vrabec
53b6c2ec17 - groupmems: check username for valid character (#455603)
- groupmems: don't segfault on nonexistent group (#456088)
2008-09-24 13:26:18 +00:00
Peter Vrabec
60ae26e9e9 fix usermod SELinux user mappings change (#458766) 2008-09-11 11:47:39 +00:00
Peter Vrabec
be8c9d1e92 audit improvements, thnx. to sgrubb@redhat.com 2008-09-02 14:12:30 +00:00
Peter Vrabec
87ffe9ce68 fix groupmems issues (#459825) 2008-09-02 08:46:52 +00:00
Peter Vrabec
edcb9d8b59 ix configure options (#456748) 2008-07-28 11:45:33 +00:00
Peter Vrabec
d763ffe596 recreate selinux patch 2008-07-24 08:30:14 +00:00
Peter Vrabec
543cfc5cc2 increase release number 2008-07-23 14:53:58 +00:00
Peter Vrabec
fd27fd21e3 provide man getspnam by man-pages 2008-07-22 10:16:36 +00:00
Peter Vrabec
79c2e98279 upgrade 2008-05-26 13:17:35 +00:00
Peter Vrabec
f59529bd69 fix salt size problem (#447136) 2008-05-20 11:44:16 +00:00
Peter Vrabec
b83095da8b upgrade 2008-04-05 13:17:48 +00:00
Peter Vrabec
b4dd99d31b improve newgrp audit patch 2008-03-07 15:06:15 +00:00
Peter Vrabec
d58e4bd862 fix selinux labeling (#433757) 2008-03-03 14:14:07 +00:00
Peter Vrabec
37c1b28cf9 fix groupmems segmentation fault (#430813) 2008-02-19 12:01:10 +00:00
Peter Vrabec
2c3e028c8e fix newgrp audit event 2008-02-13 12:54:32 +00:00