Commit Graph

313 Commits

Author SHA1 Message Date
Iker Pedrosa
99f1f175f1 useradd: change SELinux labels for home files (#2022658)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-12 17:00:25 +01:00
Iker Pedrosa
eb97365f20 useradd: revert fix memleak of grp (#2018697)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-09 16:00:05 +01:00
Iker Pedrosa
9e3b561c11 Generate 2:4.9-5
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-02 10:31:03 +01:00
Iker Pedrosa
f436725393 - useradd: generate home and mail directories with selinux user attribute
- Clean spec file: organize dependencies and move License location

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-02 10:20:13 +01:00
Iker Pedrosa
9d8d75d499 Revert "login.defs: include HMAC_CRYPTO_ALGO key"
This reverts commit 981bd7a093.
2021-09-23 12:16:13 +02:00
Iker Pedrosa
981bd7a093 - login.defs: include HMAC_CRYPTO_ALGO key
- Clean spec file: organize dependencies and move License location

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-09-23 09:48:39 +02:00
Iker Pedrosa
fbc8eba072 libmisc: fix default value in SHA_get_salt_rounds()
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-17 09:49:01 +02:00
Iker Pedrosa
3a32832856 useradd: avoid generating an empty subid range (#1990653)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-11 14:58:12 +02:00
Iker Pedrosa
94f04f9e71 Rebase to version 4.9
usermod: allow all group types with -G option (#1975327)
Clean spec file

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-04 10:14:14 +02:00
Fedora Release Engineering
58090e11f1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-23 17:27:44 +00:00
Björn Esser
0d2b677f8f
Add patch to fix 'fread returns element count, not element size'
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-14 16:52:12 +02:00
Iker Pedrosa
fbe143d1bd Fix regression issues detected in rhbz#667593 and rhbz#672510
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-07-14 11:30:55 +02:00
Björn Esser
08a62b5fa3
Enable bcrypt support, as libxcrypt supports it well
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-12 10:07:01 +02:00
Björn Esser
90349359e4
Fix release tag
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-05 12:08:36 +02:00
Björn Esser
a4f9def9dd
Update shadow-4.8-crypt_h.patch with the upstreamed version
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-05 12:00:59 +02:00
Björn Esser
a6d57fc8a3
Add a patch to obtain random bytes using getentropy()
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-04 13:04:39 +02:00
Iker Pedrosa
2b6f713524 useradd: free correct pointer (#1976809) 2021-06-29 08:53:22 +02:00
Björn Esser
bace2f8c6b
Add a patch to obtain random bytes from /dev/urandom
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:04:47 +02:00
Björn Esser
1b6e097b0e
Add a patch adding some clarifying comments in libmisc/salt.c
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:04:04 +02:00
Björn Esser
2615b08c31
Add a patch to cleanup the code in libmisc/salt.c
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:03:13 +02:00
Björn Esser
c0e594d3c5
Add a patch to fix the used prefix for the bcrypt hash method
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:02:08 +02:00
Iker Pedrosa
c5fd8d4a0a Covscan fixes 2021-06-28 10:53:45 +02:00
Björn Esser
e967948ce8
Reference actual upstream commit for Patch59 2021-06-22 21:59:30 +02:00
Björn Esser
0946f2a3b0
Add a patch to fix the parameter type of YESCRYPT_salt_cost()
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-21 14:49:14 +02:00
Björn Esser
cb2f54a2c1
Backport support for yescrypt hash method
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-21 14:41:28 +02:00
Iker Pedrosa
cbc60528c3 libsubid improvements
- libsubid: don't print error messages on stderr by default
- libsubid: libsubid_init return false if out of memory
- useradd: fix SUB_UID_COUNT=0
- libsubid: don't return owner in list_owner_ranges API call
- libsubid: libsubid_init don't print messages on error
- libsubid: fix newusers when nss provides subids
- man: clarify subid delegation
- libsubid: make shadow_logfd not extern
2021-06-21 13:24:36 +02:00
Iker Pedrosa
1ec5088225 - man: mention NSS in new[ug]idmap manpages
- libsubid: move development header to shadow folder
2021-05-06 11:41:05 +02:00
Iker Pedrosa
5292920d9b - libsubid: creation and nsswitch support
- Creation of subid and subid-devel subpackages
2021-04-23 17:13:51 +02:00
Iker Pedrosa
3e39e1d4e3 - man: include lastlog file caveat (#951564)
- Upstream links to several patches
- Spec file cleanup by Robert Scheck
- Add BuildRequires: make by Tom Stellard
2021-03-29 12:30:28 +02:00
Fedora Release Engineering
4e14ecca65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-27 20:17:47 +00:00
Tom Stellard
cc27294138 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-08 21:26:08 +00:00
Robert Scheck
7abff5646c Spec file cleanup 2020-12-24 21:10:44 +00:00
ipedrosa
4f395dd42d commonio: force lock file sync (#1862056) 2020-11-09 10:53:20 +01:00
Petr Lautrbach
b7aa9ac8ec Rebuild with libsemanage.so.2 2020-11-03 16:14:35 +01:00
Ludwig Nussel
9f643a3011 Add Provides: shadow
The upstream source tarball is actually called 'shadow' rather than 'shadow-utils'.
Add a compat provides for the former.
2020-10-01 13:23:15 +00:00
Fedora Release Engineering
a222f7e825 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-29 10:37:48 +00:00
ipedrosa
59585bb370 check only local groups when adding new supplementary groups to a user 2020-05-14 14:28:59 +02:00
ikerexxe
a66f10a891 useradd: clarify the useradd -d parameter behavior in man page 2020-03-24 10:46:27 +01:00
ikerexxe
b926b118d9 Rebased to 4.8.1 2020-03-17 18:18:50 +01:00
ikerexxe
7309a53c2a Synchronized login.defs with upstream file (#1261099 and #1807957) 2020-03-17 12:17:29 +01:00
ikerexxe
f5a51331fe useradd: generate /var/spool/mail/$USER with the proper SELinux user identity
Explanation: use set_selinux_file_context() and reset_selinux_file_context() for create_mail() just as is done for create_home()

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1690527
2020-02-24 16:36:57 +01:00
Fedora Release Engineering
c44360b6f9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-30 23:20:27 +00:00
Tomas Mraz
a1cd6a4b05 Fix grammar mistake in invalid shell check patch 2020-01-16 13:00:26 +01:00
Tomas Mraz
fd2aa2917b make the invalid shell check into warning 2020-01-16 09:04:30 +01:00
Tomas Mraz
88156a4067 make the invalid shell check into warning 2020-01-16 09:04:04 +01:00
Tomas Mraz
b76250c68a update to current upstream release 4.8 2020-01-13 11:46:38 +01:00
Tomas Mraz
36709cd2d7 fix SELinux related problem in chpasswd/chgpasswd when run with -R
(patch by Petr Lautrbach) (#1747215)
2019-09-02 15:48:01 +02:00
Petr Lautrbach
3e9ca2fc33 chpasswd, chgpasswd: Run SELinux checks before chroot()
libselinux checks the state of SELinux only in the library constructor and then
uses a cached value. It can be a problem for processes which do chroot() as
there's usually no SELinux interface (/sys/fs/selinux) in the chroot. For
chpasswd/chgpasswd is enough to do SELinux checks before processes are
chroot()ed.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1747215
2019-09-02 14:37:23 +02:00
Fedora Release Engineering
6065752fdc - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-26 23:10:38 +00:00
Tomas Mraz
e17e2fa767 minor auditing fixes 2019-06-07 14:40:46 +02:00