Iker Pedrosa
99f1f175f1
useradd: change SELinux labels for home files ( #2022658 )
...
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-12 17:00:25 +01:00
Iker Pedrosa
eb97365f20
useradd: revert fix memleak of grp ( #2018697 )
...
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-09 16:00:05 +01:00
Iker Pedrosa
9e3b561c11
Generate 2:4.9-5
...
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-02 10:31:03 +01:00
Iker Pedrosa
f436725393
- useradd: generate home and mail directories with selinux user attribute
...
- Clean spec file: organize dependencies and move License location
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-02 10:20:13 +01:00
Iker Pedrosa
9d8d75d499
Revert "login.defs: include HMAC_CRYPTO_ALGO key"
...
This reverts commit 981bd7a093
.
2021-09-23 12:16:13 +02:00
Iker Pedrosa
981bd7a093
- login.defs: include HMAC_CRYPTO_ALGO key
...
- Clean spec file: organize dependencies and move License location
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-09-23 09:48:39 +02:00
Iker Pedrosa
fbc8eba072
libmisc: fix default value in SHA_get_salt_rounds()
...
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-17 09:49:01 +02:00
Iker Pedrosa
3a32832856
useradd: avoid generating an empty subid range ( #1990653 )
...
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-11 14:58:12 +02:00
Iker Pedrosa
94f04f9e71
Rebase to version 4.9
...
usermod: allow all group types with -G option (#1975327 )
Clean spec file
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-04 10:14:14 +02:00
Fedora Release Engineering
58090e11f1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-23 17:27:44 +00:00
Björn Esser
0d2b677f8f
Add patch to fix 'fread returns element count, not element size'
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-14 16:52:12 +02:00
Iker Pedrosa
fbe143d1bd
Fix regression issues detected in rhbz#667593 and rhbz#672510
...
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-07-14 11:30:55 +02:00
Björn Esser
08a62b5fa3
Enable bcrypt support, as libxcrypt supports it well
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-12 10:07:01 +02:00
Björn Esser
90349359e4
Fix release tag
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-05 12:08:36 +02:00
Björn Esser
a4f9def9dd
Update shadow-4.8-crypt_h.patch with the upstreamed version
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-05 12:00:59 +02:00
Björn Esser
a6d57fc8a3
Add a patch to obtain random bytes using getentropy()
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-07-04 13:04:39 +02:00
Iker Pedrosa
2b6f713524
useradd: free correct pointer ( #1976809 )
2021-06-29 08:53:22 +02:00
Björn Esser
bace2f8c6b
Add a patch to obtain random bytes from /dev/urandom
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:04:47 +02:00
Björn Esser
1b6e097b0e
Add a patch adding some clarifying comments in libmisc/salt.c
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:04:04 +02:00
Björn Esser
2615b08c31
Add a patch to cleanup the code in libmisc/salt.c
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:03:13 +02:00
Björn Esser
c0e594d3c5
Add a patch to fix the used prefix for the bcrypt hash method
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-28 11:02:08 +02:00
Iker Pedrosa
c5fd8d4a0a
Covscan fixes
2021-06-28 10:53:45 +02:00
Björn Esser
e967948ce8
Reference actual upstream commit for Patch59
2021-06-22 21:59:30 +02:00
Björn Esser
0946f2a3b0
Add a patch to fix the parameter type of YESCRYPT_salt_cost()
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-21 14:49:14 +02:00
Björn Esser
cb2f54a2c1
Backport support for yescrypt hash method
...
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2021-06-21 14:41:28 +02:00
Iker Pedrosa
cbc60528c3
libsubid improvements
...
- libsubid: don't print error messages on stderr by default
- libsubid: libsubid_init return false if out of memory
- useradd: fix SUB_UID_COUNT=0
- libsubid: don't return owner in list_owner_ranges API call
- libsubid: libsubid_init don't print messages on error
- libsubid: fix newusers when nss provides subids
- man: clarify subid delegation
- libsubid: make shadow_logfd not extern
2021-06-21 13:24:36 +02:00
Iker Pedrosa
1ec5088225
- man: mention NSS in new[ug]idmap manpages
...
- libsubid: move development header to shadow folder
2021-05-06 11:41:05 +02:00
Iker Pedrosa
5292920d9b
- libsubid: creation and nsswitch support
...
- Creation of subid and subid-devel subpackages
2021-04-23 17:13:51 +02:00
Iker Pedrosa
3e39e1d4e3
- man: include lastlog file caveat ( #951564 )
...
- Upstream links to several patches
- Spec file cleanup by Robert Scheck
- Add BuildRequires: make by Tom Stellard
2021-03-29 12:30:28 +02:00
Fedora Release Engineering
4e14ecca65
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-27 20:17:47 +00:00
Tom Stellard
cc27294138
Add BuildRequires: make
...
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-08 21:26:08 +00:00
Robert Scheck
7abff5646c
Spec file cleanup
2020-12-24 21:10:44 +00:00
ipedrosa
4f395dd42d
commonio: force lock file sync ( #1862056 )
2020-11-09 10:53:20 +01:00
Petr Lautrbach
b7aa9ac8ec
Rebuild with libsemanage.so.2
2020-11-03 16:14:35 +01:00
Ludwig Nussel
9f643a3011
Add Provides: shadow
...
The upstream source tarball is actually called 'shadow' rather than 'shadow-utils'.
Add a compat provides for the former.
2020-10-01 13:23:15 +00:00
Fedora Release Engineering
a222f7e825
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-29 10:37:48 +00:00
ipedrosa
59585bb370
check only local groups when adding new supplementary groups to a user
2020-05-14 14:28:59 +02:00
ikerexxe
a66f10a891
useradd: clarify the useradd -d parameter behavior in man page
2020-03-24 10:46:27 +01:00
ikerexxe
b926b118d9
Rebased to 4.8.1
2020-03-17 18:18:50 +01:00
ikerexxe
7309a53c2a
Synchronized login.defs with upstream file ( #1261099 and #1807957 )
2020-03-17 12:17:29 +01:00
ikerexxe
f5a51331fe
useradd: generate /var/spool/mail/$USER with the proper SELinux user identity
...
Explanation: use set_selinux_file_context() and reset_selinux_file_context() for create_mail() just as is done for create_home()
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1690527
2020-02-24 16:36:57 +01:00
Fedora Release Engineering
c44360b6f9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-30 23:20:27 +00:00
Tomas Mraz
a1cd6a4b05
Fix grammar mistake in invalid shell check patch
2020-01-16 13:00:26 +01:00
Tomas Mraz
fd2aa2917b
make the invalid shell check into warning
2020-01-16 09:04:30 +01:00
Tomas Mraz
88156a4067
make the invalid shell check into warning
2020-01-16 09:04:04 +01:00
Tomas Mraz
b76250c68a
update to current upstream release 4.8
2020-01-13 11:46:38 +01:00
Tomas Mraz
36709cd2d7
fix SELinux related problem in chpasswd/chgpasswd when run with -R
...
(patch by Petr Lautrbach) (#1747215 )
2019-09-02 15:48:01 +02:00
Petr Lautrbach
3e9ca2fc33
chpasswd, chgpasswd: Run SELinux checks before chroot()
...
libselinux checks the state of SELinux only in the library constructor and then
uses a cached value. It can be a problem for processes which do chroot() as
there's usually no SELinux interface (/sys/fs/selinux) in the chroot. For
chpasswd/chgpasswd is enough to do SELinux checks before processes are
chroot()ed.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1747215
2019-09-02 14:37:23 +02:00
Fedora Release Engineering
6065752fdc
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-26 23:10:38 +00:00
Tomas Mraz
e17e2fa767
minor auditing fixes
2019-06-07 14:40:46 +02:00